Spyware / Malware / Virus Removal

slow puter [Solved]

2 min read

Looking for the outcome? Ask AI

Deleted Member Topic Starter

Post #1August 20, 2015, 5:50 PM UTC

good afternoon,

computer has been running slow for last few days

Here are the logs:

FRST LOG

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-08-2015

Ran by [removed] (administrator) on WILL-LAPTOP (20-08-2015 13:38:40)

Running from E:\Downloads

[removed]

Platform: Windows 10 Home (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Edge)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(Nero AG) C:\Program Files (x86)\Motorola Media Link\Lite\NServiceEntry.exe

(Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe

(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe

(Seagate Technology LLC) C:\Program Files (x86)\Maxtor\Sync\SyncServices.exe

(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe

() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe

(Red Bend Ltd.) C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe

(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe

(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(Intel® Corporation) C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe

(http://shotty.devs-on.net) C:\Program Files\Shotty\Shotty.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe

(Wakoopa) C:\Users\will\AppData\Local\Metrixlab Online Application\Metrixlab Online Application.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Mister Group) C:\Program Files (x86)\System Explorer\SystemExplorer.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Mister Group) C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPNetworkCommunicator.exe

(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe

(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe

(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

HKLM\…\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [708952 2015-08-07] (Alps Electric Co., Ltd.)

HKLM\…\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [525312 2011-01-24] (IDT, Inc.)

HKLM\…\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)

HKLM\…\Run: [IntelWireless] => "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray

HKLM\…\Run: [IntelWirelessWiMAX] => C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe [1605632 2010-11-14] (Intel® Corporation)

HKLM\…\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)

HKLM\…\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1427648 2015-08-06] (COMODO)

HKLM-x32\…\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)

HKLM-x32\…\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)

HKLM-x32\…\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2620728 2015-07-27] (Malwarebytes Corporation)

HKLM-x32\…\Run: [SystemExplorerAutoStart] => C:\Program Files (x86)\System Explorer\SystemExplorer.exe [3391712 2015-04-21] (Mister Group)

HKLM-x32\…\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [286272 2015-07-10] (RealNetworks, Inc.)

HKLM-x32\…\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [608320 2015-07-10] ()

HKLM-x32\…\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)

Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKLM\…\Policies\Explorer: [NoInternetOpenWith] 1

HKLM\…\Policies\Explorer: [MemCheckBoxInRunDlg] 1

HKU\S-1-5-19\…\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)

HKU\S-1-5-20\…\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)

HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\…\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)

HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\…\Run: [Shotty] => C:\Program Files\Shotty\Shotty.exe [724480 2014-05-16] (http://shotty.devs-on.net)

HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\…\Run: [hp] => C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\…\Run: [HP Photosmart 6520 series (NET)] => C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\…\Run: [Metrixlab Online Application] => C:\Users\will\AppData\Local\Metrixlab Online Application\Metrixlab Online Application.exe [1108976 2015-04-30] (Wakoopa)

HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\…\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2015-07-25] (Glarysoft Ltd)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-11-26]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2013-12-21]

ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)

Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk [2013-12-21]

ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)

Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - .lnk [2014-12-15]

ShortcutTarget: Monitor Ink Alerts - .lnk -> C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP Photosmart 6520 series (Network).lnk [2015-04-23]

ShortcutTarget: Monitor Ink Alerts - HP Photosmart 6520 series (Network).lnk -> C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2015-06-03]

ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\will\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll No File

ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File

ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File

ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\will\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll No File

ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\will\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll No File

ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File

ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File

ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File

ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File

ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File

ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=U148&ocid=U148DHP&osmkt=en-us

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-1958726619-2033566604-2034206773-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =

BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2015-06-17] (RealDownloader)

BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2014-01-11] (LastPass)

BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-10-09] (Skype Technologies S.A.)

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2013-07-31] (Logitech, Inc.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-06-17] (RealDownloader)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16] (Oracle Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16] (Oracle Corporation)

Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2014-01-11] (LastPass)

Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2014-01-11] (LastPass)

Toolbar: HKU\S-1-5-21-1958726619-2033566604-2034206773-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: HKLM-x32 {67DABFBF-D0AB-41FA-9C46-CC0F21721616}

DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455}

DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab

DPF: HKLM-x32 {917623D1-D8E5-11D2-BE8B-00104B06BDE3} hxxp://floridakeysmedia.tv/axiscam/Codebase/AxisCamControl.ocx

DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} hxxp://support.dell.com/systemprofiler/DellSystemLite.CAB

DPF: HKLM-x32 {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} hxxps://secure.logmein.com/activex/RACtrl.cab?rnd=2729448549

Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2013-04-16] (Belarc, Inc.)

Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-10-09] (Skype Technologies S.A.)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09] (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

ShellExecuteHooks: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ]

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{10ab27a5-19d0-4ac7-a474-883b275da6be}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{4f35e899-cbcf-470c-bff1-5fea95141ab8}: [DhcpNameServer] 192.168.1.1

FireFox:

========

FF ProfilePath: C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2014-01-11] (LastPass)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1214154.dll [2014-11-07] (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-07-17] (DivX, LLC)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2015-03-16] (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2015-03-16] (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2015-03-16] (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2015-03-16] (Foxit Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-16] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-16] (Oracle Corporation)

FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass.dll [2014-01-11] (LastPass)

FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll [2012-01-04] (Yahoo! Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=18.0.1.9 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2015-07-10] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.5.109 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-06-30] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.5.109 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-06-30] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=18.0.1.9 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2015-07-10] (RealTimes)

FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2013-02-14] (RocketLife, LLP)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-17] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-17] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-22] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-22] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-22] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)

FF Plugin HKU\S-1-5-21-1958726619-2033566604-2034206773-1001: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\will\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-02-02] (RocketLife, LLP)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2014-12-22] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2014-12-22] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2014-12-22] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2014-12-22] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2014-12-22] (Apple Inc.)

FF Extension: LastPass - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\gfwncbpw.default\Extensions\[removed] [2014-01-11]

FF Extension: LastPass - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\prpdnca2.default-1339788854758\Extensions\[removed] [2014-01-11]

FF Extension: Flash Video Downloader - YouTube HD Downloader [4K] - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-05-31]

FF Extension: US English Medical Dictionary - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2014-06-07]

FF Extension: Youtube Downloader - 4K Download - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-05-31]

FF Extension: LastPass - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-05-06]

FF Extension: Empty Cache Button - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\{4cc4a13b-94a6-7568-370d-5f9de54a9c7f} [2015-05-31]

FF Extension: EPUBReader - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2015-05-31]

FF Extension: InvisibleHand - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2014-11-12]

FF Extension: Medooc. SearchEngine - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2014-06-07]

FF Extension: Video Downloader Professional - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2014-11-11]

FF Extension: Jigsaw Puzzles - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-04-04]

FF Extension: i2Symbol (Emoticons, Smileys, Symbols) - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-04-03]

FF Extension: The Camelizer - Price Tracker - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-05-04]

FF Extension: Logical Games - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-04-03]

FF Extension: Prostetnic Highlighter - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2014-11-11]

FF Extension: Online Games - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-04-04]

FF Extension: Jigsaw Puzzle Maker - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-04-04]

FF Extension: Free Flash, Unity3D and html5 games - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-04-03]

FF Extension: Easy media download - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-04-03]

FF Extension: Clearly - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2013-07-19]

FF Extension: Broadband Speed Test and Diagnostics - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-05-06]

FF Extension: Test Pilot - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2012-06-17]

FF Extension: Torrent Finder Toolbar - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\[removed] [2015-04-04]

FF Extension: Malware Search - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\{27c60876-b5c9-4335-b4f3-52b26782220c}.xpi [2014-10-26]

FF Extension: Fasterfox - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi [2015-04-04]

FF Extension: Adblock Plus - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-04-03]

FF Extension: Picscrazy right-click - C:\Users\will\AppData\Roaming\Mozilla\Firefox\Profiles\t6j886tk.default-1339975537970\Extensions\{fe0d8dd9-4e39-4a96-8bfc-5674ae7e47cc}.xpi [2014-06-04]

FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-07-22]

FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-07-22]

FF HKLM-x32\…\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt

FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-11-05]

FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-11-26]

FF HKU\S-1-5-21-1958726619-2033566604-2034206773-1001\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome:

=======

CHR Profile: C:\Users\will\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Floorplanner) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag [2015-03-05]

CHR Extension: (Instrumente) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahchimdkljhhfjkklkafookapgikdhkk [2015-03-05]

CHR Extension: (Dictanote - Speech Recognizer) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomjekmpappghadlogpigifkghlmebjk [2015-03-05]

CHR Extension: (BeFunky Photo Editor) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\apfkepiiddolifkgjmfdgpnipgnfejab [2015-03-05]

CHR Extension: (Send this page by email) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcamgnkjooghefjjfgfhnepedkodbgec [2015-03-05]

CHR Extension: (Chrome Tips Beta (by Google)) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdmbgfhokojnnaliemjgbahnfeggocpe [2015-03-05]

CHR Extension: (WiBit) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bejaaogemoligmkbmeafkhnaegkggihf [2015-03-05]

CHR Extension: (Build Shed Plans) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\blefhmkjdbclnlfegkdhmkepeoikhgpg [2015-03-05]

CHR Extension: (YouTube) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-05]

CHR Extension: (Honey) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2015-07-10]

CHR Extension: (Movies Downloader) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bniohfejmhpjpljbllpgohpaloanjgjf [2015-07-03]

CHR Extension: (Form Filler) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnjjngeaknajbdcgpfkgnonkmififhfo [2015-03-05]

CHR Extension: (Fight Depression!) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpcanhncamomjgapncfnedcimpcmlbnf [2015-03-05]

CHR Extension: (Nimbus Screenshot) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpconcjcammlapcogcnnelfmaeghhagj [2015-05-02]

CHR Extension: (No Name) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\caoielngcdpgeldnckhponffkiajaobo [2015-06-08]

CHR Extension: (Webmail Ad Blocker) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbhfdchmklhpcngcgjmpdbjakdggkkjp [2015-03-05]

CHR Extension: (Adblock Plus) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-03-05]

CHR Extension: (Google Search) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-05]

CHR Extension: (Email this page (by Google)) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbeoemfhkdniadbojeencpkgmobndpai [2015-03-05]

CHR Extension: (Video downloader pro) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbjlfogfpagepnaojhfbdlhjhildeaem [2015-03-05]

CHR Extension: (Logitech Smooth Scrolling) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2015-03-05]

CHR Extension: (ICE Quick Stream) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpioikmjnfipgphjldakcaocbbpnfabl [2015-03-05]

CHR Extension: (Hotel Search and Compare (Multilingual)) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\eciljddmloccnknaallbgekopdbhndon [2015-03-05]

CHR Extension: (eyeCare - Protect your vision) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeeningnfkaonkonalpcicgemnnijjhn [2015-07-13]

CHR Extension: (Bloody Pressure) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\eemipfoeaegklklcngpmdbaemegjdbdl [2015-03-05]

CHR Extension: (MusixLib Search) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\egekhjenodlmckpgpkkdpfnodobbgnkf [2015-07-05]

CHR Extension: (Pixlr-o-matic) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcibdjmpjlekgjhepbfmenfppliikcj [2015-03-05]

CHR Extension: (Video Downloader professional) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-03-05]

CHR Extension: (Converter) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\elogiihmdefhdcainoihdcfpnfbimpnd [2015-03-05]

CHR Extension: (Snapshot 2) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffgfedebnhmhkcfhhjoikplfafgpihpo [2015-03-18]

CHR Extension: (Chrome Web Store Launcher (by Google)) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej [2015-03-05]

CHR Extension: (Video Downloader Super) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghciphhakbampjemlfbahnhhaemoeolf [2015-03-05]

CHR Extension: (The Camelizer) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghnomdcacenbmilgjigehppbamfndblo [2015-05-04]

CHR Extension: (Dictionary by Dictionary.com) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\gikhgcaliglmioibbockkmjknfnepbdh [2015-03-05]

CHR Extension: (History Eraser) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjieilkfnnjoihjjonajndjldjoagffm [2015-03-05]

CHR Extension: (Downloads Folder Launcher) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmhianpphjibhflcnebkmkkdojjigbjd [2015-03-05]

CHR Extension: (Webcam) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnbhgamgannegfcmholgllkakldhajeg [2015-03-05]

CHR Extension: (LastPass: Free Password Manager) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2015-03-05]

CHR Extension: (FabCam) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\hejilffmihldhlfocnabcgndjjpgadfl [2015-03-05]

CHR Extension: (Where to delete an account) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfpofkfbabpbbmchmiekfnlcgaedbgcf [2015-03-05]

CHR Extension: (Video Downloader) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnmpgleggfcndpeflbjhpjfckfmojnpo [2015-03-05]

CHR Extension: (Dictionary) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpgblgbmcleigbahedfgempmpnlkhhpk [2015-04-14]

CHR Extension: (Apps Launcher) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijmgkhchjindcjamnckoiahagecjnkdc [2015-03-05]

CHR Extension: (Clearly) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\iooicodkiihhpojmmeghjclgihfjdjhj [2015-03-05]

CHR Extension: (Vine Video Download) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\jebahcljabjndemkadpdnablhinojkil [2015-03-05]

CHR Extension: (Family Medical Info) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\jobbajojigcglfmadbkgjmnacpifklbp [2015-03-05]

CHR Extension: (Photo Calendar Maker) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\kannbcclbpngpkjklmplofgclliddlgj [2015-03-05]

CHR Extension: (Autodesk Homestyler) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2015-03-05]

CHR Extension: (Malware Search) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgleioieeffejophokeklefchfglgmnk [2015-03-05]

CHR Extension: (Mustachio) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\khaoakmndhjandiaaadnjgnbchillcdj [2015-03-05]

CHR Extension: (Unit Convertor) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkaklafnbnpegjnlplfgadnobkgdkinf [2015-03-05]

CHR Extension: (TouristEye Planner) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpjpejalhlnocbhggpnokneghfenoneg [2015-03-05]

CHR Extension: (Webcam Toy) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfbgimoladefibpklnfmkpknadbklade [2015-03-05]

CHR Extension: (Numerics Calculator & Converter) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\liglcienpnkhdajdfmnpbgmpjglonipe [2015-04-14]

CHR Extension: (Google Maps) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-03-05]

CHR Extension: (Puzzle for Chrome) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbalnpbcmecdckpghgacibglihkgamkl [2015-03-05]

CHR Extension: (Google Dictionary (by Google)) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2015-03-05]

CHR Extension: (Google Mail Checker) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-03-05]

CHR Extension: (CashControl) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\mioaopmpfgkncgbbfnmpoegppfcgmoek [2015-03-05]

CHR Extension: (Universal Unit Converter) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nafkejlpknmikohhgdelefdeeieplkog [2015-03-05]

CHR Extension: (Similar Sites) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\necpbmbhhdiplmfhmjicabdeighkndkn [2015-03-05]

CHR Extension: (Webutation) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfclfmabiojpommfcalfdgjjeaahnjbj [2015-03-05]

CHR Extension: (QR Image from URL) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nioihlfoddilijjjeknopfcbglallkce [2015-03-05]

CHR Extension: (Wikipedia Instant) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlnikhpimclelcopmneehjglfppbnojd [2015-04-14]

CHR Extension: (Chrome Web Store Payments) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-21]

CHR Extension: (Fast Video Downloader) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nocpfkkbaekckhcoekockfbidpcjgkbd [2015-07-03]

CHR Extension: (Personal Blocklist (by Google)) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nolijncfnkgaikbjbdaogikpmpbdcdef [2015-03-05]

CHR Extension: (OneClick Cleaner App) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadiaahhieelhhffeofkdchgfpjehjok [2015-04-14]

CHR Extension: (No Name) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\oalbpfagfhfkcmklpdanadjpbfdedndn [2015-08-04]

CHR Extension: (Camera) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofmpffnppnlgkgmbgidhhjcglloeejpg [2015-03-05]

CHR Extension: (Travelmath) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofpimeaclblbaodahnhhmlblagijlnad [2015-04-14]

CHR Extension: (Print Friendly & PDF) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohlencieiipommannpdfcmfdpjjmeolj [2015-07-26]

CHR Extension: (Click&Clean App) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2015-03-05]

CHR Extension: (Gmail) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-05]

CHR Extension: (Trap Music) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\pledapfhaobifoekiipdkhhloekhodoh [2015-03-05]

CHR HKLM-x32\…\Chrome\Extension: [mapcejffhcbidcjmomhalabpcbaeimcb] -

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe [135168 2011-01-14] (Atheros) [File not signed]

S4 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [897088 2010-11-03] (Intel Corporation) [File not signed]

S4 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [983104 2010-11-03] (Intel Corporation) [File not signed]

S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation)

S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation)

S4 CFUACProxy_officeguardianv2; C:\ProgramData\OfficeGuardianV2\UACProxy.exe [83792 2011-07-25] (Storage Appliance Corp.)

R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5542472 2015-08-06] (COMODO)

S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265792 2015-08-06] (COMODO)

R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [808856 2015-08-08] (Microsoft Corporation)

R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [510976 2015-08-08] (Microsoft Corporation)

S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation)

R2 DMAgent; C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [499200 2010-11-07] (Red Bend Ltd.) [File not signed]

S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-07-10] (Microsoft Corporation)

S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation)

S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation)

S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation)

S4 FoxitCloudUpdateService; C:\Program Files (x86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe [243880 2015-03-16] (Foxit Software Inc.)

R2 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]

R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [24888 2015-08-11] (Hewlett-Packard Company)

S3 icssvc; C:\Windows\System32\tetheringservice.dll [148992 2015-08-19] (Microsoft Corporation)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]

S3 IHA_MessageCenter; C:\Program Files (x86)\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe [352248 2012-08-03] (Verizon) [File not signed]

R3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation)

R3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation)

S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation)

R2 Maxtor Sync Services; C:\Program Files (x86)\Maxtor\Sync\SyncServices.exe [181600 2008-08-05] (Seagate Technology LLC)

S2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [713016 2015-07-27] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-07-05] (Malwarebytes Corporation)

S4 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-11-15] (Motorola Mobility LLC)

R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-08-08] (Microsoft Corporation)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]

S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [296960 2015-07-10] (Microsoft Corporation)

R2 OneSyncSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)

R2 OneSyncSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)

S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [289280 2015-07-10] (Microsoft Corporation)

R3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)

R3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)

R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [87344 2009-10-07] (Prolific Technology Inc.)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]

R2 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]

R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1115224 2015-07-10] (RealNetworks, Inc.)

R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2015-07-10] ()

R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [36864 2009-07-10] (Realtek) [File not signed]

R2 RealTimes Desktop Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1115224 2015-07-10] (RealNetworks, Inc.)

R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [3272656 2015-03-29] (Paramount Software UK Ltd)

S3 RetailDemo; C:\Windows\system32\RDXService.dll [996352 2015-08-19] (Microsoft Corporation)

R2 SamSs; C:\Windows\SysWOW64\lsass.exe [0 2013-12-06] () <==== ATTENTION (zero byte File/Folder)

S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-08-08] (Microsoft Corporation)

R2 Spooler; C:\Windows\SysWOW64\spoolsv.exe [0 2013-12-06] () <==== ATTENTION (zero byte File/Folder)

R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2674176 2015-07-10] (Microsoft Corporation)

R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049024 2015-07-10] (Microsoft Corporation)

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2012-05-03] (Adobe Systems Incorporated) [File not signed]

R3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [820960 2015-04-21] (Mister Group)

S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1203200 2015-08-08] (Microsoft Corporation)

S3 UnistoreSvc; C:\Windows\SysWOW64\unistore.dll [925696 2015-08-08] (Microsoft Corporation)

R3 UnistoreSvc_Session1; C:\WINDOWS\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)

R3 UnistoreSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)

S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1420288 2015-08-08] (Microsoft Corporation)

R3 UserDataSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)

R3 UserDataSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)

S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)

S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-08-08] (Microsoft Corporation)

R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-08-08] (Microsoft Corporation)

S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)

R2 WiMAXAppSrv; C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe [869376 2010-11-07] (Intel(R) Corporation) [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2014-01-21] (WiseCleaner.com) [File not signed]

S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation)

S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation)

S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S5 3ware; C:\Windows\System32\drivers\3ware.sys [107360 2015-07-10] (LSI)

R5 ACPI; C:\Windows\System32\drivers\ACPI.sys [565088 2015-08-08] (Microsoft Corporation)

R5 acpiex; C:\Windows\System32\Drivers\acpiex.sys [127840 2015-07-10] (Microsoft Corporation)

S5 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [1135456 2015-07-10] (PMC-Sierra)

S5 agp440; C:\Windows\System32\drivers\agp440.sys [63328 2015-07-10] (Microsoft Corporation)

S5 amdsata; C:\Windows\System32\drivers\amdsata.sys [83296 2015-07-10] (Advanced Micro Devices)

S5 amdsbs; C:\Windows\System32\drivers\amdsbs.sys [259424 2015-07-10] (AMD Technologies Inc.)

S5 amdxata; C:\Windows\System32\drivers\amdxata.sys [26976 2015-07-10] (Advanced Micro Devices)

R3 anvsnddrv; C:\Windows\system32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)

S5 arcsas; C:\Windows\System32\drivers\arcsas.sys [131936 2015-07-10] (PMC-Sierra, Inc.)

S5 atapi; C:\Windows\System32\drivers\atapi.sys [28512 2015-07-10] (Microsoft Corporation)

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-12-25] (AVG Technologies)

S5 b06bdrv; C:\Windows\System32\drivers\bxvbda.sys [531296 2015-07-10] (Broadcom Corporation)

R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)

R5 CLFS; C:\Windows\System32\drivers\CLFS.sys [380768 2015-07-10] (Microsoft Corporation)

R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [21720 2015-08-04] (COMODO)

R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [827632 2015-08-04] (COMODO)

R5 CNG; C:\Windows\System32\Drivers\cng.sys [601344 2015-08-08] (Microsoft Corporation)

R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation)

S3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23312 2013-01-22] (Dell Computer Corporation)

S3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2013-01-22] (Dell Computer Corporation)

R5 disk; C:\Windows\System32\drivers\disk.sys [101216 2015-07-10] (Microsoft Corporation)

S5 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation)

R5 EhStorClass; C:\Windows\System32\drivers\EhStorClass.sys [88928 2015-07-10] (Microsoft Corporation)

S5 EhStorTcgDrv; C:\Windows\System32\drivers\EhStorTcgDrv.sys [116576 2015-07-10] (Microsoft Corporation)

R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2015-07-27] ()

R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation)

R5 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [83808 2015-07-10] (Microsoft Corporation)

R5 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [368992 2015-07-10] (Microsoft Corporation)

U5 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [31072 2015-07-10] (Microsoft Corporation)

R5 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [633184 2015-07-10] (Microsoft Corporation)

S5 gagp30kx; C:\Windows\System32\drivers\gagp30kx.sys [66912 2015-07-10] (Microsoft Corporation)

S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation)

R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation)

R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2015-07-25] (Glarysoft Ltd)

S5 HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [64352 2015-07-10] (Hewlett-Packard Company)

S5 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [29024 2015-07-10] (Microsoft Corporation)

R5 iaStor; C:\Windows\System32\drivers\iaStor.sys [438808 2010-11-06] (Intel Corporation)

S5 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [673120 2015-07-10] (Intel Corporation)

S5 iaStorV; C:\Windows\System32\drivers\iaStorV.sys [412000 2015-07-10] (Intel Corporation)

S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox)

S5 intelide; C:\Windows\System32\drivers\intelide.sys [19296 2015-07-10] (Microsoft Corporation)

S5 intelpep; C:\Windows\System32\drivers\intelpep.sys [43872 2015-07-10] (Microsoft Corporation)

S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation)

S5 isapnp; C:\Windows\System32\drivers\isapnp.sys [22368 2015-07-10] (Microsoft Corporation)

R5 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [131424 2015-07-10] (Microsoft Corporation)

R5 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [158560 2015-07-10] (Microsoft Corporation)

S5 LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [108896 2015-07-10] (LSI Corporation)

S5 LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [104800 2015-07-10] (LSI Corporation)

S5 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)

S5 LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [82784 2015-07-10] (LSI Corporation)

S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus64.sys [261120 2005-09-23] (Pinnacle Systems GmbH) [File not signed]

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-07-05] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-07-05] (Malwarebytes Corporation)

S5 megasas; C:\Windows\System32\drivers\megasas.sys [59744 2015-07-10] (Avago Technologies)

S5 megasr; C:\Windows\System32\drivers\megasr.sys [575840 2015-07-10] (LSI Corporation, Inc.)

S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox)

R5 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [102752 2015-08-04] (Microsoft Corporation)

R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-08-08] (Microsoft Corporation)

R5 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [19296 2015-07-10] (Microsoft Corporation)

R5 Mup; C:\Windows\System32\Drivers\mup.sys [118624 2015-07-10] (Microsoft Corporation)

S5 mvumis; C:\Windows\System32\drivers\mvumis.sys [63840 2015-07-10] (Marvell Semiconductor, Inc.)

R5 NBVol; C:\Windows\System32\DRIVERS\NBVol.sys [72240 2011-12-01] (Nero AG)

R5 NBVolUp; C:\Windows\System32\DRIVERS\NBVolUp.sys [15920 2011-12-01] (Nero AG)

S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox)

R5 NDIS; C:\Windows\System32\drivers\ndis.sys [1168736 2015-08-08] (Microsoft Corporation)

S5 nvraid; C:\Windows\System32\drivers\nvraid.sys [150368 2015-07-10] (NVIDIA Corporation)

S5 nvstor; C:\Windows\System32\drivers\nvstor.sys [166240 2015-07-10] (NVIDIA Corporation)

S5 nv_agp; C:\Windows\System32\drivers\nv_agp.sys [126304 2015-07-10] (Microsoft Corporation)

R5 partmgr; C:\Windows\System32\drivers\partmgr.sys [117088 2015-07-10] (Microsoft Corporation)

R5 pci; C:\Windows\System32\drivers\pci.sys [325984 2015-08-08] (Microsoft Corporation)

S5 pciide; C:\Windows\System32\drivers\pciide.sys [15712 2015-07-10] (Microsoft Corporation)

S5 pcmcia; C:\Windows\System32\drivers\pcmcia.sys [118112 2015-07-10] (Microsoft Corporation)

R5 pcw; C:\Windows\System32\drivers\pcw.sys [51552 2015-07-10] (Microsoft Corporation)

R5 pdc; C:\Windows\System32\drivers\pdc.sys [98144 2015-07-10] (Microsoft Corporation)

S5 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58208 2015-07-10] (LSI Corporation)

S5 percsas3i; C:\Windows\System32\drivers\percsas3i.sys [58720 2015-07-10] (Avago Technologies)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2015-03-05] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2015-03-05] ()

S3 RAMDiskVE; C:\Windows\System32\Drivers\RAMDiskVE.sys [75016 2013-02-19] (Dataram, Inc.)

R5 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [237392 2015-08-05] (Microsoft Corporation)

R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )

S5 sbp2port; C:\Windows\System32\drivers\sbp2port.sys [109920 2015-07-10] (Microsoft Corporation)

S5 SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [44896 2015-07-10] (Silicon Integrated Systems Corp.)

S5 SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [81760 2015-07-10] (Silicon Integrated Systems)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-11] (Synaptics Incorporated)

R5 spaceport; C:\Windows\System32\drivers\spaceport.sys [474464 2015-07-10] (Microsoft Corporation)

S5 stexstor; C:\Windows\System32\drivers\stexstor.sys [31072 2015-07-10] (Promise Technology, Inc.)

S5 storahci; C:\Windows\System32\drivers\storahci.sys [133984 2015-07-10] (Microsoft Corporation)

S5 storflt; C:\Windows\System32\drivers\vmstorfl.sys [45920 2015-07-10] (Microsoft Corporation)

S5 stornvme; C:\Windows\System32\drivers\stornvme.sys [80720 2015-08-19] (Microsoft Corporation)

R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation)

S5 storufs; C:\Windows\System32\drivers\storufs.sys [40288 2015-07-10] (Microsoft Corporation)

S5 storvsc; C:\Windows\System32\drivers\storvsc.sys [36192 2015-07-10] (Microsoft Corporation)

R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation)

R5 Tcpip; C:\Windows\System32\drivers\tcpip.sys [2430816 2015-07-10] (Microsoft Corporation)

S5 uagp35; C:\Windows\System32\drivers\uagp35.sys [66400 2015-07-10] (Microsoft Corporation)

S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation)

S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-08-08] (Microsoft Corporation)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()

S5 uliagpkx; C:\Windows\System32\drivers\uliagpkx.sys [66912 2015-07-10] (Microsoft Corporation)

R5 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [42848 2015-07-10] (Microsoft Corporation)

S5 vmbus; C:\Windows\System32\drivers\vmbus.sys [125792 2015-07-10] (Microsoft Corporation)

R5 volmgr; C:\Windows\System32\drivers\volmgr.sys [81248 2015-07-10] (Microsoft Corporation)

R5 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [370016 2015-07-10] (Microsoft Corporation)

R5 volsnap; C:\Windows\System32\drivers\volsnap.sys [378720 2015-07-10] (Microsoft Corporation)

S5 vsmraid; C:\Windows\System32\drivers\vsmraid.sys [166752 2015-07-10] (VIA Technologies Inc.,Ltd)

S5 VSTXRAID; C:\Windows\System32\drivers\vstxraid.sys [305504 2015-07-10] (VIA Corporation)

R5 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [892224 2015-07-10] (Microsoft Corporation)

R5 WFPLWFS; C:\Windows\System32\drivers\wfplwfs.sys [153440 2015-07-10] (Microsoft Corporation)

R5 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation)

R5 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation)

S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox)

S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox)

R5 Wof; C:\Windows\System32\Drivers\Wof.sys [200528 2015-08-05] (Microsoft Corporation)

S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation)

S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation)

S1 BdfNdisf; \??\C:\Windows\System32\DriverStore\FileRepository\netlwf.inf_amd64_neutral_52e20f0ba6914be8\bdfndisf6.sys [X]

U3 idsvc; no ImagePath

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

U3 wpcsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: XblGameSave -> C:\Windows\System32\XblGameSave.dll (Microsoft Corporation)

NETSVC: XboxNetApiSvc -> C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation)

NETSVC: UserManager -> C:\Windows\System32\usermgr.dll (Microsoft Corporation)

NETSVC: XblAuthManager -> C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation)

NETSVCx32: UserManager -> C:\Windows\SysWOW64\usermgr.dll ==> No File

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-20 13:28 - 2015-08-20 13:28 - 00016148 _____ C:\WINDOWS\system32\WILL-LAPTOP_will_HistoryPrediction.bin

2015-08-20 11:43 - 2015-08-20 12:59 - 00023040 ___SH C:\Users\will\Desktop\Thumbs.db

2015-08-20 11:19 - 2015-08-20 11:19 - 00000000 ____D C:\Users\will\AppData\Local\SlimWare Utilities Inc

2015-08-19 12:18 - 2015-08-19 12:18 - 24593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 21875200 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 18805760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 16706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 13024768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2015-08-19 12:18 - 2015-08-19 12:18 - 04048808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2015-08-19 12:18 - 2015-08-19 12:18 - 03527168 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 02662400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 02224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 02151208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 01820672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2015-08-19 12:18 - 2015-08-19 12:18 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 08021840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2015-08-19 12:17 - 2015-08-19 12:17 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 03622256 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2015-08-19 12:17 - 2015-08-19 12:17 - 02880032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 02462648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 02446336 _____ C:\WINDOWS\system32\InputService.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01916928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01890304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01334784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01178112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01112064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 01087296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00993104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00918320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00642560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00554744 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2015-08-19 12:17 - 2015-08-19 12:17 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00454000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00442208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2015-08-19 12:17 - 2015-08-19 12:17 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe

2015-08-19 12:17 - 2015-08-19 12:17 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00413184 _____ C:\WINDOWS\system32\diagtrack_win.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00404480 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe

2015-08-19 12:17 - 2015-08-19 12:17 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00293376 _____ C:\WINDOWS\system32\TextInputFramework.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00292856 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe

2015-08-19 12:17 - 2015-08-19 12:17 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe

2015-08-19 12:17 - 2015-08-19 12:17 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00243800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe

2015-08-19 12:17 - 2015-08-19 12:17 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00200704 _____ C:\WINDOWS\SysWOW64\TextInputFramework.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPermissions.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe

2015-08-19 12:17 - 2015-08-19 12:17 - 00080720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys

2015-08-19 12:17 - 2015-08-19 12:17 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tetheringclient.dll

2015-08-19 12:17 - 2015-08-19 12:17 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll

2015-08-17 19:29 - 2015-08-17 19:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 3.4

2015-08-17 19:28 - 2015-08-17 19:28 - 00000000 ____D C:\Users\will\AppData\Local\pip

2015-08-17 19:28 - 2015-08-17 19:28 - 00000000 ____D C:\Python34

2015-08-12 13:52 - 2015-08-12 13:52 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini

2015-08-12 13:52 - 2015-08-12 13:52 - 00000000 ____D C:\Users\DefaultAppPool

2015-08-12 13:52 - 2015-08-12 13:33 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-08-12 13:52 - 2015-08-07 22:38 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Local\Google

2015-08-12 13:52 - 2015-07-10 07:04 - 00000000 __RSD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell

2015-08-12 13:52 - 2015-07-10 07:04 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-08-12 13:52 - 2015-07-10 07:04 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-08-12 13:52 - 2015-07-10 07:04 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-08-12 13:48 - 2015-08-12 13:48 - 00000844 _____ C:\Users\Public\Desktop\Speccy.lnk

2015-08-12 13:48 - 2015-08-12 13:48 - 00000000 ____D C:\Program Files\Speccy

2015-08-12 12:28 - 2015-08-08 03:29 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2015-08-12 12:28 - 2015-08-08 03:19 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2015-08-12 12:28 - 2015-08-08 03:01 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2015-08-12 12:28 - 2015-08-08 02:48 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2015-08-12 12:28 - 2015-08-08 02:40 - 00365056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2015-08-12 12:28 - 2015-08-08 02:24 - 02415104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll

2015-08-12 12:28 - 2015-08-08 02:24 - 01679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll

2015-08-12 12:28 - 2015-08-08 02:15 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2015-08-12 12:28 - 2015-08-08 02:00 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll

2015-08-12 12:28 - 2015-08-05 23:17 - 00237392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys

2015-08-12 12:28 - 2015-08-05 23:17 - 00200528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys

2015-08-12 12:28 - 2015-08-05 22:22 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2015-08-12 12:28 - 2015-08-05 00:49 - 00783112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2015-08-12 12:28 - 2015-08-05 00:29 - 00644128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2015-08-12 12:28 - 2015-08-05 00:00 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll

2015-08-12 12:28 - 2015-08-04 23:54 - 01274880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll

2015-08-12 12:28 - 2015-08-04 23:47 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2015-08-12 12:28 - 2015-08-04 23:39 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll

2015-08-12 12:28 - 2015-08-04 00:07 - 00102752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys

2015-08-12 12:28 - 2015-08-04 00:06 - 00583128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2015-08-12 12:28 - 2015-08-04 00:06 - 00243248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2015-08-12 12:28 - 2015-08-03 23:23 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll

2015-08-12 12:28 - 2015-08-03 22:59 - 01212416 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll

2015-08-12 12:28 - 2015-08-03 22:47 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll

2015-08-12 12:28 - 2015-08-02 22:32 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll

2015-08-12 12:28 - 2015-08-02 22:28 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll

2015-08-12 12:28 - 2015-08-02 22:19 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2015-08-12 12:28 - 2015-08-02 22:18 - 08613200 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2015-08-12 12:28 - 2015-08-02 22:18 - 01983840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2015-08-12 12:28 - 2015-08-02 22:18 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2015-08-12 12:28 - 2015-08-02 22:18 - 00046432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys

2015-08-12 12:28 - 2015-08-02 22:17 - 00516960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2015-08-12 12:28 - 2015-08-02 22:17 - 00052264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys

2015-08-12 12:28 - 2015-08-02 22:13 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2015-08-12 12:28 - 2015-08-02 22:12 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2015-08-12 12:28 - 2015-08-02 21:56 - 06878256 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2015-08-12 12:28 - 2015-08-02 21:50 - 20857848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2015-08-12 12:28 - 2015-08-02 21:49 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2015-08-12 12:28 - 2015-08-02 21:22 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2015-08-12 12:28 - 2015-08-02 21:22 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2015-08-12 12:28 - 2015-08-02 21:22 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll

2015-08-12 12:28 - 2015-08-02 21:21 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll

2015-08-12 12:28 - 2015-08-02 21:19 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe

2015-08-12 12:28 - 2015-08-02 21:19 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe

2015-08-12 12:28 - 2015-08-02 21:18 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-08-12 12:28 - 2015-08-02 21:18 - 03780096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2015-08-12 12:28 - 2015-08-02 21:18 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll

2015-08-12 12:28 - 2015-08-02 21:18 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll

2015-08-12 12:28 - 2015-08-02 21:15 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll

2015-08-12 12:28 - 2015-08-02 21:15 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll

2015-08-12 12:28 - 2015-08-02 21:15 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll

2015-08-12 12:28 - 2015-08-02 21:14 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll

2015-08-12 12:28 - 2015-08-02 21:14 - 00247808 _____ C:\WINDOWS\system32\facecredentialprovider.dll

2015-08-12 12:28 - 2015-08-02 21:11 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll

2015-08-12 12:28 - 2015-08-02 21:10 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2015-08-12 12:28 - 2015-08-02 21:06 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe

2015-08-12 12:28 - 2015-08-02 21:03 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll

2015-08-12 12:28 - 2015-08-02 21:02 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll

2015-08-12 12:28 - 2015-08-02 21:01 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-08-12 12:28 - 2015-08-02 20:59 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll

2015-08-12 12:27 - 2015-08-02 22:19 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2015-08-12 12:27 - 2015-08-02 21:31 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2015-08-12 12:27 - 2015-08-02 21:30 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll

2015-08-12 12:27 - 2015-08-02 21:24 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2015-08-12 12:27 - 2015-08-02 21:24 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2015-08-12 12:27 - 2015-08-02 21:24 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll

2015-08-12 12:27 - 2015-08-02 21:23 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll

2015-08-12 12:27 - 2015-08-02 21:15 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2015-08-12 12:27 - 2015-08-02 21:15 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll

2015-08-12 12:27 - 2015-08-02 21:12 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2015-08-12 12:27 - 2015-08-02 21:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll

2015-08-12 12:27 - 2015-08-02 21:02 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll

2015-08-11 12:24 - 2015-08-11 12:24 - 00000000 ____D C:\Users\will\AppData\Roaming\Hewlett-Packard

2015-08-11 12:17 - 2015-08-11 12:17 - 00002311 _____ C:\Users\will\Desktop\HP Support Assistant.lnk

2015-08-11 12:17 - 2015-08-11 12:17 - 00000000 ____D C:\System.sav

2015-08-11 12:17 - 2015-08-11 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support

2015-08-11 12:16 - 2015-08-11 12:16 - 00000000 ____D C:\Users\will\AppData\Roaming\hpqLog

2015-08-11 12:15 - 2015-08-11 12:15 - 00000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard

2015-08-11 12:15 - 2015-08-11 12:15 - 00000000 ____D C:\ProgramData\{ECA9D0D4-7782-4B7F-96E2-FDB0CF0A57D5}

2015-08-09 18:47 - 2015-08-09 18:47 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2015-08-09 11:55 - 2015-08-09 11:55 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2015-08-08 16:49 - 2015-08-08 16:49 - 00000000 ____D C:\Users\will\AppData\Local\speech

2015-08-08 13:11 - 2015-08-08 13:11 - 00000000 ____D C:\Users\will\AppData\Local\MicrosoftEdge

2015-08-08 12:59 - 2015-08-08 13:01 - 00000000 ____D C:\Users\will\AppData\Local\PackageStaging

2015-08-08 12:46 - 2015-08-08 16:37 - 00000000 ____D C:\Users\will\AppData\Local\Comms

2015-08-08 02:14 - 2015-08-20 11:22 - 00000000 ___DC C:\WINDOWS\Panther

2015-08-08 02:13 - 2015-08-07 22:21 - 00000000 __SHD C:\Recovery

2015-08-08 02:09 - 2015-08-08 02:09 - 00000000 ____D C:\Windows.old

2015-08-08 02:08 - 2015-08-08 02:08 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 07051264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 06488312 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 06305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 05076480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 04760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 04611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 04169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 03362816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 02741760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 02207744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01769056 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01591856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01562968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01561872 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01420288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01411072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01365072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2015-08-08 02:08 - 2015-08-08 02:08 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01169408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 01135312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 01101792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 01025840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2015-08-08 02:08 - 2015-08-08 02:08 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2015-08-08 02:08 - 2015-08-08 02:08 - 00966424 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00934752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00823336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00808856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00762896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00750592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00705520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00695136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00632168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00607008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00601344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00527952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00521568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00521216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00505344 _____ C:\WINDOWS\system32\EditionUpgradeManagerObj.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00425824 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00407616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00325984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00290312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00265480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00208736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00181088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00061280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys

2015-08-08 02:08 - 2015-08-08 02:08 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00032768 _____ C:\WINDOWS\system32\LicenseManagerApi.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe

2015-08-08 02:08 - 2015-08-08 02:08 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll

2015-08-08 02:08 - 2015-08-08 02:08 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe

2015-08-08 02:04 - 2015-08-08 02:04 - 00008192 _____ C:\WINDOWS\system32\config\userdiff

2015-08-08 01:59 - 2015-08-08 01:59 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices

2015-08-08 01:59 - 2015-08-08 01:59 - 00000000 ____D C:\WINDOWS\system32\msmq

2015-08-08 01:59 - 2015-08-08 01:59 - 00000000 ____D C:\WINDOWS\system32\BestPractices

2015-08-08 01:59 - 2015-08-08 01:59 - 00000000 ____D C:\Program Files\Reference Assemblies

2015-08-08 01:59 - 2015-08-08 01:59 - 00000000 ____D C:\Program Files\MSBuild

2015-08-08 01:59 - 2015-08-08 01:59 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies

2015-08-08 01:59 - 2015-08-08 01:59 - 00000000 ____D C:\Program Files (x86)\MSBuild

2015-08-08 01:59 - 2015-08-08 01:59 - 00000000 ____D C:\inetpub

2015-08-08 01:59 - 2015-06-17 22:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2015-08-08 01:59 - 2015-06-17 22:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2015-08-08 01:59 - 2015-06-17 22:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2015-08-08 01:59 - 2015-05-30 01:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2015-08-08 01:59 - 2015-05-30 01:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2015-08-08 01:59 - 2015-05-30 01:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2015-08-07 23:11 - 2015-08-04 20:32 - 00007884 _____ C:\WINDOWS\system32\Drivers\cmdguard.cat

2015-08-07 23:07 - 2015-08-07 23:07 - 00000000 ____D C:\ProgramData\Microsoft OneDrive

2015-08-07 23:05 - 2015-08-07 23:05 - 00001058 _____ C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optional Features.lnk

2015-08-07 23:04 - 2015-08-07 23:04 - 00000000 ____D C:\Users\will\AppData\Local\Publishers

2015-08-07 23:04 - 2015-08-07 23:04 - 00000000 ____D C:\Users\will\AppData\Local\NetworkTiles

2015-08-07 23:03 - 2015-08-14 20:53 - 00000000 ____D C:\Users\will\AppData\Local\Packages

2015-08-07 23:02 - 2015-08-12 13:38 - 00000258 __RSH C:\Users\will\ntuser.pol

2015-08-07 23:02 - 2015-08-07 23:02 - 00000020 ___SH C:\Users\will\ntuser.ini

2015-08-07 23:02 - 2015-08-07 23:02 - 00000000 ____D C:\Users\will\AppData\Local\TileDataLayer

2015-08-07 22:52 - 2015-08-11 16:08 - 00002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-08-07 22:51 - 2015-07-10 06:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2015-08-07 22:38 - 2015-08-07 22:38 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2015-08-07 22:38 - 2015-08-07 22:38 - 00000000 ____D C:\Users\Default\AppData\Local\Google

2015-08-07 22:38 - 2015-08-07 22:38 - 00000000 ____D C:\Users\Default User\AppData\Local\Google

2015-08-07 22:27 - 2015-08-07 22:27 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines

2015-08-07 22:23 - 2015-08-20 11:22 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-08-07 22:23 - 2015-08-19 17:38 - 00000000 ____D C:\Users\will

2015-08-07 22:23 - 2015-07-10 07:04 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell

2015-08-07 22:23 - 2015-07-10 07:04 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-08-07 22:23 - 2015-07-10 07:04 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-08-07 22:23 - 2015-07-10 07:04 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-08-07 22:22 - 2015-08-20 01:46 - 01020366 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-08-07 22:22 - 2015-08-07 22:22 - 00961296 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI

2015-08-07 22:21 - 2015-08-07 22:22 - 00021209 _____ C:\WINDOWS\iis.log

2015-08-07 22:19 - 2015-08-07 22:41 - 00000000 ____D C:\Program Files\IDT

2015-08-07 22:19 - 2015-08-07 22:20 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys

2015-08-07 22:19 - 2015-08-07 22:20 - 00001552 _____ C:\WINDOWS\LkmdfCoInst.log

2015-08-07 22:19 - 2015-08-07 22:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf

2015-08-07 22:19 - 2015-08-07 22:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf

2015-08-07 22:19 - 2015-08-07 22:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf

2015-08-07 22:19 - 2015-08-07 22:19 - 00000000 ____D C:\WINDOWS\system32\SRSLabs

2015-08-07 22:19 - 2015-08-07 22:19 - 00000000 ____D C:\Program Files\Synaptics

2015-08-07 22:19 - 2015-08-07 22:19 - 00000000 ____D C:\Program Files\DellTPad

2015-08-07 22:19 - 2015-08-07 22:19 - 00000000 ____D C:\iBTWU

2015-08-07 22:19 - 2011-01-24 21:57 - 04637184 _____ (IDT, Inc.) C:\WINDOWS\system32\stlang64.dll

2015-08-07 22:19 - 2011-01-24 21:57 - 00438784 _____ (IDT, Inc.) C:\WINDOWS\system32\IDTNC64.cpl

2015-08-07 22:19 - 2011-01-21 04:15 - 00449024 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slapoi64.dll

2015-08-07 22:19 - 2011-01-19 10:28 - 00015610 _____ C:\WINDOWS\system32\W92HDM59.xml

2015-08-07 22:19 - 2010-10-14 21:56 - 00390656 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\imthx64.dll

2015-08-07 22:19 - 2010-09-30 19:18 - 00866304 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\imapo64.dll

2015-08-07 22:19 - 2010-09-30 19:17 - 00732672 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\imapo32.dll

2015-08-07 22:19 - 2010-04-01 10:11 - 00162304 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AESTAC64.dll

2015-08-07 22:19 - 2009-10-09 20:45 - 00442368 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AESTEC64.dll

2015-08-07 22:19 - 2009-03-02 21:58 - 00068608 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AESTAR64.dll

2015-08-07 22:19 - 2009-03-02 21:47 - 00090624 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AESTCo64.dll

2015-08-07 22:16 - 2015-08-07 22:17 - 00030833 _____ C:\WINDOWS\system32\NetSetupMig.log

2015-08-07 22:15 - 2015-08-20 13:26 - 00278186 _____ C:\WINDOWS\PFRO.log

2015-08-07 21:44 - 2015-08-07 21:44 - 00022256 _____ () C:\WINDOWS\system32\Drivers\cdmsnroot_s.sys

2015-08-07 21:41 - 2015-07-10 07:00 - 00000001 ___SH C:\BOOTNXT

2015-08-07 21:35 - 2015-08-07 22:58 - 00006687 _____ C:\WINDOWS\comsetup.log

2015-08-07 20:37 - 2015-08-07 21:30 - 00000000 ___HD C:\$Windows.~BT

2015-08-07 19:17 - 2015-08-07 19:17 - 00000000 ___HD C:\$Windows.~WS

2015-08-07 13:49 - 2015-08-07 13:49 - 00000000 ____D C:\Users\will\AppData\Local\Macromedia

2015-08-06 13:26 - 2015-08-07 21:44 - 00295995 _____ C:\WINDOWS\WindowsUpdate (1).log

2015-08-04 17:59 - 2015-08-04 17:59 - 00183848 _____ C:\Users\will\AppData\Local\GDIPFONTCACHEV1.DAT

2015-08-01 17:24 - 2015-08-01 17:24 - 00000000 ____D C:\Users\will\AppData\Local\CEF

2015-07-30 17:47 - 2015-07-30 17:47 - 00002032 _____ C:\Users\Public\Desktop\Perfect Effects 9.lnk

2015-07-30 17:47 - 2015-07-30 17:47 - 00000000 ____D C:\ProgramData\Nalpeiron

2015-07-29 19:20 - 2015-08-07 22:41 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BlackBox ISO Burner v2.0

2015-07-29 19:20 - 2015-07-29 19:20 - 00002243 _____ C:\Users\will\Desktop\BlackBox ISO Burner.lnk

2015-07-29 19:20 - 2015-07-29 19:20 - 00000000 ____D C:\Program Files (x86)\BlackBox Softwares

2015-07-26 16:23 - 2015-07-26 16:32 - 00000000 ____D C:\Users\will\AppData\Roaming\ImgBurn

2015-07-26 14:39 - 2015-07-26 14:39 - 00000000 ____D C:\Users\will\AppData\Roaming\Macromedia

2015-07-26 10:34 - 2015-07-26 10:34 - 00000000 ____D C:\Users\will\AppData\Local\Motorola

2015-07-26 09:50 - 2015-07-26 09:50 - 00000000 ____D C:\Users\will\AppData\Roaming\Intel Corporation

2015-07-26 09:48 - 2015-07-26 09:48 - 00000000 ____D C:\Users\will\AppData\Roaming\RealNetworks

2015-07-26 09:41 - 2015-07-20 03:10 - 00028960 _____ (Glarysoft Ltd) C:\WINDOWS\system32\RegBootDefrag.exe

2015-07-26 09:27 - 2015-08-07 22:25 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled

2015-07-25 21:19 - 2015-07-25 21:19 - 00000000 ____D C:\ProgramData\GlarySoft

2015-07-25 20:43 - 2015-08-07 22:58 - 00003170 _____ C:\WINDOWS\System32\Tasks\SlimCleaner Run

2015-07-25 20:43 - 2015-08-07 22:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner

2015-07-25 20:43 - 2015-07-25 20:43 - 00002467 _____ C:\Users\Public\Desktop\SlimCleaner.lnk

2015-07-25 20:41 - 2015-08-07 22:58 - 00003426 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 5

2015-07-25 20:41 - 2015-08-07 22:58 - 00003086 _____ C:\WINDOWS\System32\Tasks\GU5SkipUAC

2015-07-25 20:41 - 2015-08-07 22:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5

2015-07-25 20:41 - 2015-07-25 20:41 - 00020160 _____ (Glarysoft Ltd) C:\WINDOWS\system32\Drivers\GUBootStartup.sys

2015-07-25 20:41 - 2015-07-25 20:41 - 00001103 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk

2015-07-25 20:41 - 2015-07-25 20:41 - 00001091 _____ C:\Users\Public\Desktop\Glary Utilities 5.lnk

2015-07-25 20:40 - 2015-08-20 13:34 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5

2015-07-24 17:29 - 2015-08-07 22:41 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-07-23 11:57 - 2015-08-07 22:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProcessCleaner

2015-07-23 11:57 - 2015-07-23 11:57 - 00001080 _____ C:\Users\Public\Desktop\ProcessCleaner.lnk

2015-07-23 11:57 - 2015-07-23 11:57 - 00000000 ____D C:\Program Files (x86)\ProcessCleaner

2015-07-22 15:59 - 2015-08-14 14:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-20 13:38 - 2015-05-25 13:38 - 00000000 ____D C:\FRST

2015-08-20 13:36 - 2014-07-21 10:14 - 01474832 _____ C:\WINDOWS\system32\Drivers\sfi.dat

2015-08-20 13:32 - 2015-07-10 08:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log

2015-08-20 13:31 - 2012-02-11 15:02 - 00000894 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2015-08-20 13:28 - 2014-02-16 10:51 - 00000000 ____D C:\Users\will\AppData\Roaming\Wise Care 365

2015-08-20 13:26 - 2015-07-10 08:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-08-20 13:17 - 2015-04-15 20:18 - 00000000 ____D C:\Users\will\AppData\Roaming\BitTorrent

2015-08-20 13:06 - 2012-02-11 15:02 - 00000898 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2015-08-20 13:02 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\Help

2015-08-20 13:01 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\sru

2015-08-20 13:01 - 2015-07-10 05:05 - 00524288 ___SH C:\WINDOWS\system32\config\BBI

2015-08-20 12:59 - 2012-02-10 14:20 - 00000000 ____D C:\Users\will\AppData\Roaming\Skype

2015-08-20 12:55 - 2012-04-06 12:57 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2015-08-20 11:42 - 2014-12-26 11:35 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2015-08-20 02:00 - 2014-08-25 13:22 - 00000000 ____D C:\Users\will\AppData\Local\Adobe

2015-08-19 17:38 - 2015-04-10 18:25 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit

2015-08-19 17:35 - 2014-12-13 19:53 - 02506170 _____ C:\WINDOWS\system32\Drivers\fvstore.dat

2015-08-19 17:33 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2015-08-19 17:33 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\appraiser

2015-08-19 12:39 - 2015-07-10 06:55 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-08-19 09:59 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-08-17 20:07 - 2014-11-11 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2015-08-17 19:28 - 2015-02-24 22:42 - 00102912 _____ (Python Software Foundation) C:\WINDOWS\pyw.exe

2015-08-17 19:28 - 2015-02-24 22:42 - 00102400 _____ (Python Software Foundation) C:\WINDOWS\py.exe

2015-08-17 19:11 - 2013-08-21 20:19 - 00002356 _____ C:\Users\will\Desktop\Kindle.lnk

2015-08-17 19:11 - 2012-05-29 14:19 - 00000000 ____D C:\Users\will\AppData\Local\Amazon

2015-08-17 13:24 - 2015-06-11 11:05 - 00000000 ____D C:\Users\will\Desktop\learn

2015-08-17 13:21 - 2015-07-10 08:20 - 00021903 _____ C:\WINDOWS\setupact.log

2015-08-15 16:45 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\rescache

2015-08-14 15:31 - 2012-09-16 17:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-08-14 14:41 - 2012-09-16 17:23 - 00001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-08-14 14:41 - 2012-09-16 17:23 - 00001227 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-08-13 19:41 - 2012-06-12 14:34 - 00269712 _____ (Hewlett-Packard Co.) C:\WINDOWS\system32\hpinkcoiAF11.dll

2015-08-13 19:41 - 2012-06-12 14:20 - 02873232 _____ (Hewlett-Packard Co.) C:\WINDOWS\system32\hpinkinsAF11.exe

2015-08-12 13:47 - 2014-03-02 17:54 - 00000000 ____D C:\Users\will\Desktop\Utilities

2015-08-12 13:36 - 2015-07-10 08:20 - 05122784 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2015-08-12 13:33 - 2015-07-10 07:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-08-12 13:33 - 2015-07-10 07:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-08-12 13:33 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\oobe

2015-08-12 13:32 - 2015-02-25 14:59 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2015-08-12 13:32 - 2015-02-25 14:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2015-08-12 13:10 - 2015-02-25 15:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-08-12 13:08 - 2013-07-15 09:34 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-08-12 12:48 - 2014-04-30 14:12 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2015-08-12 12:47 - 2012-02-16 16:10 - 00000000 ____D C:\ProgramData\Microsoft Help

2015-08-12 12:42 - 2015-07-10 07:06 - 00794088 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2015-08-12 12:38 - 2009-07-13 22:34 - 00000478 _____ C:\WINDOWS\win.ini

2015-08-11 18:52 - 2013-11-28 17:40 - 00001365 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk

2015-08-11 13:55 - 2012-04-06 12:57 - 00003804 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2015-08-11 12:17 - 2013-03-17 19:44 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard

2015-08-11 12:17 - 2012-02-11 15:41 - 00000000 ____D C:\ProgramData\Hewlett-Packard

2015-08-11 12:17 - 2012-02-08 22:43 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2015-08-09 11:11 - 2015-07-10 07:04 - 00000000 __RHD C:\Users\Public\Libraries

2015-08-08 15:52 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase

2015-08-08 13:23 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\restore

2015-08-08 12:47 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\appcompat

2015-08-08 12:44 - 2012-02-08 22:51 - 09888360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RtsUStoricon.dll

2015-08-08 12:44 - 2012-02-08 22:51 - 00422504 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtsUStor.dll

2015-08-08 12:44 - 2012-02-08 22:51 - 00250984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsUStor.sys

2015-08-08 11:38 - 2015-07-10 07:06 - 00179688 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2015-08-08 02:14 - 2015-07-10 07:04 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template

2015-08-08 02:09 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe

2015-08-08 02:09 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2015-08-08 02:09 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\Provisioning

2015-08-08 02:09 - 2015-07-10 05:05 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism

2015-08-08 02:09 - 2015-07-10 05:05 - 00000000 ____D C:\WINDOWS\system32\Dism

2015-08-08 01:59 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv

2015-08-08 01:59 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\inetsrv

2015-08-08 01:59 - 2015-07-10 07:01 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll

2015-08-08 01:59 - 2015-07-10 07:01 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll

2015-08-08 01:59 - 2015-07-10 07:01 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll

2015-08-08 01:59 - 2015-07-10 07:01 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll

2015-08-08 01:59 - 2015-07-10 07:01 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll

2015-08-08 01:59 - 2015-07-10 07:01 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb

2015-08-08 01:59 - 2015-07-10 07:01 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb

2015-08-08 01:59 - 2015-07-10 07:01 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb

2015-08-08 01:59 - 2015-07-10 07:01 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll

2015-08-08 01:59 - 2015-07-10 07:01 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb

2015-08-08 01:59 - 2015-07-10 07:01 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll

2015-08-08 01:59 - 2015-07-10 07:01 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe

2015-08-08 01:59 - 2015-07-10 07:01 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll

2015-08-08 01:59 - 2015-07-10 07:01 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll

2015-08-08 01:59 - 2015-07-10 07:01 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll

2015-08-08 01:59 - 2015-07-10 07:01 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof

2015-08-08 01:59 - 2015-07-10 07:00 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys

2015-08-08 01:59 - 2015-07-10 07:00 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb

2015-08-08 01:59 - 2015-07-10 07:00 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb

2015-08-08 01:59 - 2015-07-10 07:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb

2015-08-08 01:59 - 2015-07-10 07:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe

2015-08-08 01:59 - 2015-07-10 07:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb

2015-08-08 01:59 - 2015-07-10 07:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe

2015-08-08 01:59 - 2015-07-10 07:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe

2015-08-08 01:59 - 2015-07-10 07:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll

2015-08-08 01:59 - 2015-07-10 07:00 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof

2015-08-07 23:04 - 2015-07-10 07:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog

2015-08-07 23:04 - 2015-07-10 07:04 - 00000000 ___RD C:\WINDOWS\PrintDialog

2015-08-07 23:04 - 2015-07-10 07:04 - 00000000 ___RD C:\WINDOWS\MiracastView

2015-08-07 23:04 - 2015-07-10 07:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2015-08-07 23:03 - 2012-02-10 13:04 - 00000000 ____D C:\Users\will\AppData\Local\Apps\2.0

2015-08-07 22:59 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\Registration

2015-08-07 22:59 - 2014-04-30 08:52 - 00010449 _____ C:\WINDOWS\diagerr.xml

2015-08-07 22:59 - 2014-04-30 08:52 - 00009528 _____ C:\WINDOWS\diagwrn.xml

2015-08-07 22:58 - 2015-07-10 11:58 - 00003582 _____ C:\WINDOWS\System32\Tasks\RealDownloader Update Check

2015-08-07 22:58 - 2015-07-10 11:56 - 00003518 _____ C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1958726619-2033566604-2034206773-1001

2015-08-07 22:58 - 2015-07-10 11:56 - 00003382 _____ C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1958726619-2033566604-2034206773-1001

2015-08-07 22:58 - 2015-07-10 07:04 - 00000000 __RSD C:\WINDOWS\Media

2015-08-07 22:58 - 2015-06-25 14:16 - 00004004 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1958726619-2033566604-2034206773-1001UA

2015-08-07 22:58 - 2015-06-25 14:16 - 00003608 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1958726619-2033566604-2034206773-1001Core

2015-08-07 22:58 - 2015-05-09 09:27 - 00003324 _____ C:\WINDOWS\System32\Tasks\Wise Turbo Checker

2015-08-07 22:58 - 2015-04-15 13:13 - 00003996 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2015-08-07 22:58 - 2014-12-17 20:21 - 00003202 _____ C:\WINDOWS\System32\Tasks\{9C40C494-2D21-4F61-8CD9-70285FF5A3C3}

2015-08-07 22:58 - 2014-12-17 20:20 - 00003202 _____ C:\WINDOWS\System32\Tasks\{29B95E72-2017-47F5-B6C6-2A96F3C8A231}

2015-08-07 22:58 - 2014-12-09 15:35 - 00003328 _____ C:\WINDOWS\System32\Tasks\Cerber AV

2015-08-07 22:58 - 2014-11-12 15:42 - 00003296 _____ C:\WINDOWS\System32\Tasks\{F5AF854C-3E69-4637-96E0-332DDFEBCEBB}

2015-08-07 22:58 - 2014-10-11 20:56 - 00003596 _____ C:\WINDOWS\System32\Tasks\Motorola Device Manager Update

2015-08-07 22:58 - 2014-10-11 20:56 - 00003576 _____ C:\WINDOWS\System32\Tasks\Motorola Device Manager Engine

2015-08-07 22:58 - 2014-10-11 20:56 - 00003402 _____ C:\WINDOWS\System32\Tasks\Motorola Device Manager Initial Update

2015-08-07 22:58 - 2014-08-20 14:08 - 00003378 _____ C:\WINDOWS\System32\Tasks\MSSSORT

2015-08-07 22:58 - 2014-07-05 14:31 - 00003270 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe

2015-08-07 22:58 - 2014-07-05 14:31 - 00003244 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe

2015-08-07 22:58 - 2014-07-05 14:31 - 00003242 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_itype_exe

2015-08-07 22:58 - 2014-07-05 14:31 - 00003214 _____ C:\WINDOWS\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe

2015-08-07 22:58 - 2014-07-05 14:31 - 00003212 _____ C:\WINDOWS\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe

2015-08-07 22:58 - 2014-04-02 20:51 - 00003300 _____ C:\WINDOWS\System32\Tasks\{DAC7724D-E8A6-48A8-B20D-4054C6B42738}

2015-08-07 22:58 - 2014-02-01 17:45 - 00003648 _____ C:\WINDOWS\System32\Tasks\Moo0 System Monitor 1.76

2015-08-07 22:58 - 2013-11-28 17:37 - 00003418 _____ C:\WINDOWS\System32\Tasks\{86F4A60E-9D29-472F-ABB0-567A76C0A269}

2015-08-07 22:58 - 2013-10-24 18:19 - 00003078 _____ C:\WINDOWS\System32\Tasks\{6DEFF14E-D52F-4D88-9095-9AE712375870}

2015-08-07 22:58 - 2013-10-24 18:19 - 00003078 _____ C:\WINDOWS\System32\Tasks\{197F86E4-FF3F-4F4F-8B55-0F3AFE8009F3}

2015-08-07 22:58 - 2013-09-29 13:32 - 00003298 _____ C:\WINDOWS\System32\Tasks\HP Photosmart 6520 series.exe_{52E6E232-9524-42B7-8F65-14E1F4D6E4A5}

2015-08-07 22:58 - 2013-08-21 17:20 - 00003204 _____ C:\WINDOWS\System32\Tasks\{6399A057-D600-442E-AA02-0F161510D1C8}

2015-08-07 22:58 - 2013-07-31 20:24 - 00003188 _____ C:\WINDOWS\System32\Tasks\{1688EE8D-360A-4D54-A810-A9D483365273}

2015-08-07 22:58 - 2013-07-31 20:23 - 00003534 _____ C:\WINDOWS\System32\Tasks\{7D3D54AC-E147-4D82-9431-646B0CED1A0D}

2015-08-07 22:58 - 2013-07-27 14:57 - 00003474 _____ C:\WINDOWS\System32\Tasks\{CFE8757D-3DDD-4665-8C4A-6D65E9FA5786}

2015-08-07 22:58 - 2013-07-22 20:10 - 00003188 _____ C:\WINDOWS\System32\Tasks\{E4E51B15-390F-4688-9690-ACC67C00F911}

2015-08-07 22:58 - 2013-07-12 19:03 - 00003188 _____ C:\WINDOWS\System32\Tasks\{9C1ABAAC-69AB-4A73-8096-DC10CDF0C3F1}

2015-08-07 22:58 - 2013-06-04 16:37 - 00003616 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-WILL-LAPTOP-will

2015-08-07 22:58 - 2013-04-23 19:48 - 00003558 _____ C:\WINDOWS\System32\Tasks\MotoCast Update

2015-08-07 22:58 - 2013-03-22 17:01 - 00003326 _____ C:\WINDOWS\System32\Tasks\{575A9BD3-2C52-4806-BE95-8DA24ACB96C9}

2015-08-07 22:58 - 2013-03-17 18:20 - 00003732 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP Photosmart 6520 series

2015-08-07 22:58 - 2013-03-02 16:54 - 00003336 _____ C:\WINDOWS\System32\Tasks\{493DCBF1-723D-4915-931D-0A9ABBC986AE}

2015-08-07 22:58 - 2013-01-05 20:25 - 00003496 _____ C:\WINDOWS\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1958726619-2033566604-2034206773-1001

2015-08-07 22:58 - 2013-01-05 20:25 - 00003360 _____ C:\WINDOWS\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1958726619-2033566604-2034206773-1001

2015-08-07 22:58 - 2012-11-05 14:14 - 00003198 _____ C:\WINDOWS\System32\Tasks\AnVir Task Manager

2015-08-07 22:58 - 2012-05-29 19:35 - 00003290 _____ C:\WINDOWS\System32\Tasks\{CC245C84-4716-4996-87DD-1C4C42ADE632}

2015-08-07 22:58 - 2012-02-11 15:02 - 00004004 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2015-08-07 22:58 - 2012-02-11 15:02 - 00003752 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2015-08-07 22:58 - 2012-02-11 11:03 - 00022840 _____ C:\WINDOWS\system32\emptyregdb.dat

2015-08-07 22:52 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\spool

2015-08-07 22:41 - 2015-07-13 12:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-08-07 22:41 - 2015-07-10 09:14 - 00000000 ____D C:\WINDOWS\ShellNew

2015-08-07 22:41 - 2015-07-10 09:11 - 00000000 ____D C:\WINDOWS\system32\0409

2015-08-07 22:41 - 2015-07-10 07:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2015-08-07 22:41 - 2015-07-10 05:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM

2015-08-07 22:41 - 2015-06-13 20:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetBrains

2015-08-07 22:41 - 2015-06-07 18:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP240 series Manual

2015-08-07 22:41 - 2015-06-01 16:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++

2015-08-07 22:41 - 2015-06-01 15:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7

2015-08-07 22:41 - 2015-05-26 19:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Media Converter

2015-08-07 22:41 - 2015-04-30 20:21 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Metrixlab Online Application

2015-08-07 22:41 - 2015-04-21 14:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Explorer

2015-08-07 22:41 - 2015-04-16 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vz In-Home Agent

2015-08-07 22:41 - 2015-04-10 18:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit

2015-08-07 22:41 - 2015-03-30 14:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) Processor Identification Utility

2015-08-07 22:41 - 2015-03-16 14:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader

2015-08-07 22:41 - 2015-03-05 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro

2015-08-07 22:41 - 2015-03-05 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Free 9.0

2015-08-07 22:41 - 2015-03-04 18:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OverDrive for Windows

2015-08-07 22:41 - 2015-02-26 13:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Home Theater

2015-08-07 22:41 - 2015-02-26 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server

2015-08-07 22:41 - 2015-02-20 17:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Collage Creator

2015-08-07 22:41 - 2015-02-17 13:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge

2015-08-07 22:41 - 2015-02-13 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Dude

2015-08-07 22:41 - 2015-02-13 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WiFi Password Revealer

2015-08-07 22:41 - 2015-02-09 15:13 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-08-07 22:41 - 2015-01-23 13:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-08-07 22:41 - 2015-01-12 16:37 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoZoom Classic 6

2015-08-07 22:41 - 2014-12-26 13:06 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NirSoft WirelessNetView

2015-08-07 22:41 - 2014-12-22 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-08-07 22:41 - 2014-12-12 13:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2015-08-07 22:41 - 2014-12-07 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVD Flick

2015-08-07 22:41 - 2014-11-28 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debenu PDF Tools

2015-08-07 22:41 - 2014-11-24 16:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PT Photo Editor

2015-08-07 22:41 - 2014-11-11 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2015-08-07 22:41 - 2014-11-11 12:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer

2015-08-07 22:41 - 2014-11-11 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView

2015-08-07 22:41 - 2014-11-11 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2015-08-07 22:41 - 2014-11-08 21:52 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Free

2015-08-07 22:41 - 2014-10-22 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn

2015-08-07 22:41 - 2014-10-16 15:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-08-07 22:41 - 2014-09-04 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaMonkey

2015-08-07 22:41 - 2014-08-28 15:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FBackup 4

2015-08-07 22:41 - 2014-08-20 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxtor

2015-08-07 22:41 - 2014-08-17 14:43 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MetaGeek

2015-08-07 22:41 - 2014-07-21 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture

2015-08-07 22:41 - 2014-07-15 18:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenshotCaptor

2015-08-07 22:41 - 2014-07-14 14:55 - 00000000 ____D C:\WINDOWS\en

2015-08-07 22:41 - 2014-07-05 14:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mouse and Keyboard Center

2015-08-07 22:41 - 2014-06-23 14:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom

2015-08-07 22:41 - 2014-05-24 17:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Product Key Finder

2015-08-07 22:41 - 2014-03-06 14:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX

2015-08-07 22:41 - 2014-02-24 15:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Plugin Manager

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\2C0A

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0C0A

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0C04

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0816

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0804

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0424

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\041F

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\041E

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\041D

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\041B

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0419

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0416

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0415

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0414

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0413

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0412

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0411

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0410

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\040E

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\040D

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\040C

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\040B

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\040A

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0408

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0407

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0406

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0405

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0404

2015-08-07 22:41 - 2014-02-24 14:51 - 00000000 ____D C:\WINDOWS\system32\0401

2015-08-07 22:41 - 2014-02-16 10:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Care 365

2015-08-07 22:41 - 2014-01-03 15:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartClose

2015-08-07 22:41 - 2013-11-28 17:39 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live

2015-08-07 22:41 - 2013-10-25 17:42 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell

2015-08-07 22:41 - 2013-09-28 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Postimage

2015-08-07 22:41 - 2013-08-09 11:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks

2015-08-07 22:41 - 2013-08-01 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintMaster

2015-08-07 22:41 - 2013-07-23 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fotosizer

2015-08-07 22:41 - 2013-06-30 19:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap

2015-08-07 22:41 - 2013-06-03 08:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iRecordMax Sound Recorder

2015-08-07 22:41 - 2013-03-17 18:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

2015-08-07 22:41 - 2013-01-06 15:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wi-Fi Connect

2015-08-07 22:41 - 2012-12-07 20:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra

2015-08-07 22:41 - 2012-11-13 15:11 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hornil StylePix

2015-08-07 22:41 - 2012-08-29 15:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Whois View

2015-08-07 22:41 - 2012-07-14 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2015-08-07 22:41 - 2012-06-22 10:21 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass

2015-08-07 22:41 - 2012-06-22 10:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass

2015-08-07 22:41 - 2012-04-26 10:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PermissionResearch

2015-08-07 22:41 - 2012-03-08 15:39 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xmarks

2015-08-07 22:41 - 2012-02-16 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

2015-08-07 22:41 - 2012-02-08 23:00 - 00000000 ____D C:\Program Files (x86)\Dell Wireless

2015-08-07 22:41 - 2012-02-08 22:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

2015-08-07 22:41 - 2012-02-08 22:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netwaiting

2015-08-07 22:41 - 2012-02-08 22:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modem Diagnostic Tool

2015-08-07 22:41 - 2009-07-13 23:20 - 00000000 ____D C:\WINDOWS\system32\catroot3

2015-08-07 22:38 - 2015-07-10 07:05 - 00004362 _____ C:\WINDOWS\DtcInstall.log

2015-08-07 22:38 - 2009-07-13 23:20 - 00000000 ____D C:\Users\Default.migrated

2015-08-07 22:29 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK

2015-08-07 22:29 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR

2015-08-07 22:29 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz

2015-08-07 22:29 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed

2015-08-07 22:29 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\IME

2015-08-07 22:29 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy

2015-08-07 22:29 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK

2015-08-07 22:29 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR

2015-08-07 22:29 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\NDF

2015-08-07 22:29 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\IME

2015-08-07 22:29 - 2013-08-12 13:06 - 00000000 ____D C:\WINDOWS\SysWOW64\spool

2015-08-07 22:29 - 2013-02-11 13:40 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe

2015-08-07 22:29 - 2012-02-11 20:16 - 00000000 ____D C:\WINDOWS\system32\SPReview

2015-08-07 22:29 - 2012-02-11 17:33 - 00000000 ____D C:\WINDOWS\system32\EventProviders

2015-08-07 22:29 - 2012-02-08 22:51 - 00000000 ____D C:\WINDOWS\SysWOW64\sda

2015-08-07 22:28 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\schemas

2015-08-07 22:28 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\Resources

2015-08-07 22:28 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2015-08-07 22:28 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\Cursors

2015-08-07 22:28 - 2015-03-27 14:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Tweaker

2015-08-07 22:28 - 2014-12-03 12:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com

2015-08-07 22:28 - 2014-12-02 19:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2015-08-07 22:28 - 2014-09-13 16:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WonderFox Soft

2015-08-07 22:28 - 2014-07-24 14:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Serif Applications

2015-08-07 22:28 - 2014-04-23 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voralent

2015-08-07 22:28 - 2014-02-25 19:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Selectsoft Games

2015-08-07 22:28 - 2014-02-24 04:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verizon

2015-08-07 22:28 - 2013-08-12 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\onOne Software

2015-08-07 22:28 - 2013-04-23 19:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Motorola Mobility

2015-08-07 22:28 - 2013-03-24 13:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uRexsoft

2015-08-07 22:28 - 2012-07-12 17:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real Alternative

2015-08-07 22:28 - 2012-06-21 12:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger

2015-08-07 22:28 - 2012-02-29 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Punch! Super Home Suite

2015-08-07 22:28 - 2012-02-08 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics

2015-08-07 22:28 - 2011-04-12 04:28 - 00000000 ___RD C:\Users\Public\Recorded TV

2015-08-07 22:27 - 2015-07-10 07:04 - 00000000 __SHD C:\Program Files\Windows Sidebar

2015-08-07 22:27 - 2015-07-10 07:04 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar

2015-08-07 22:27 - 2015-07-10 07:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2015-08-07 22:27 - 2015-03-29 19:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium

2015-08-07 22:27 - 2014-12-07 17:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft

2015-08-07 22:27 - 2014-11-30 12:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Digiarty

2015-08-07 22:27 - 2014-07-31 15:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. Applications

2015-08-07 22:27 - 2014-07-21 10:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo

2015-08-07 22:27 - 2013-11-05 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech

2015-08-07 22:27 - 2012-02-08 22:58 - 00000000 ____D C:\Program Files\Common Files\Intel

2015-08-07 22:27 - 2012-02-08 22:45 - 00000000 ____D C:\Program Files\Intel

2015-08-07 22:27 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files\Microsoft Games

2015-08-07 22:27 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files\DVD Maker

2015-08-07 22:26 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\Recovery

2015-08-07 22:26 - 2009-07-13 23:20 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy

2015-08-07 22:25 - 2015-02-20 16:52 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP

2015-08-07 22:25 - 2013-01-24 13:16 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

2015-08-07 22:25 - 2012-05-29 14:19 - 00000000 ____D C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon

2015-08-07 22:21 - 2015-07-10 05:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep

2015-08-07 22:15 - 2015-07-10 05:05 - 00000000 __RHD C:\Users\Default

2015-08-07 21:44 - 2015-04-17 11:51 - 00174832 _____ (深圳市驱动人生软件技术有限公司) C:\WINDOWS\system32\Drivers\dtldrvprotect64.sys

2015-08-07 21:41 - 2010-01-14 20:42 - 00008192 __RSH C:\BOOTSECT.BAK

2015-08-07 21:09 - 2015-06-01 21:00 - 05916080 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUI.exe

2015-08-07 21:09 - 2015-06-01 21:00 - 00523184 _____ (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe

2015-08-07 21:09 - 2015-06-01 21:00 - 00453552 _____ (Intel Corporation) C:\WINDOWS\system32\igfxpers.exe

2015-08-07 21:09 - 2015-06-01 21:00 - 00411056 _____ (Intel Corporation) C:\WINDOWS\system32\hkcmd.exe

2015-08-07 21:09 - 2015-06-01 21:00 - 00290224 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe

2015-08-07 21:09 - 2015-06-01 21:00 - 00266152 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe

2015-08-07 21:09 - 2015-06-01 21:00 - 00197040 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe

2015-08-07 21:09 - 2015-06-01 21:00 - 00183216 _____ (Intel Corporation) C:\WINDOWS\system32\igfxtray.exe

2015-08-07 20:47 - 2009-07-14 00:45 - 00022464 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-08-07 20:47 - 2009-07-14 00:45 - 00022464 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-08-07 13:48 - 2012-05-12 15:49 - 00000000 ____D C:\Users\will\AppData\Roaming\Mozilla

2015-08-07 13:48 - 2012-05-12 15:49 - 00000000 ____D C:\Users\will\AppData\Local\Mozilla

2015-08-06 12:11 - 2014-07-21 10:14 - 00001953 _____ C:\Users\Public\Desktop\COMODO Antivirus.lnk

2015-08-04 20:31 - 2014-04-16 22:12 - 00827632 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdguard.sys

2015-08-04 20:31 - 2014-04-16 22:12 - 00105096 _____ (COMODO) C:\WINDOWS\system32\Drivers\inspect.sys

2015-08-04 20:31 - 2014-04-16 22:12 - 00045856 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdhlp.sys

2015-08-04 20:31 - 2014-04-16 22:12 - 00021720 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmderd.sys

2015-08-04 20:29 - 2014-03-25 20:22 - 00579408 _____ (COMODO) C:\WINDOWS\system32\guard64.dll

2015-08-04 20:29 - 2014-03-25 20:22 - 00445472 _____ (COMODO) C:\WINDOWS\SysWOW64\guard32.dll

2015-08-04 20:29 - 2014-03-25 20:22 - 00041224 _____ (COMODO) C:\WINDOWS\system32\cmdcsr.dll

2015-08-04 20:28 - 2014-03-25 20:22 - 00358080 _____ (COMODO) C:\WINDOWS\system32\cmdvrt64.dll

2015-08-04 20:28 - 2014-03-25 20:22 - 00045760 _____ (COMODO) C:\WINDOWS\system32\cmdkbd64.dll

2015-08-04 20:27 - 2014-03-25 20:22 - 00288448 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdvrt32.dll

2015-08-04 20:26 - 2014-03-25 20:22 - 00040640 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdkbd32.dll

2015-08-04 17:54 - 2012-02-10 14:19 - 00000000 ____D C:\ProgramData\Skype

2015-08-04 17:44 - 2014-12-03 22:21 - 00000000 ____D C:\AdwCleaner

2015-08-01 17:24 - 2012-02-10 13:08 - 00000000 ____D C:\Users\will\AppData\Roaming\Adobe

2015-07-30 17:48 - 2013-08-12 13:08 - 00000000 ____D C:\Users\will\AppData\Roaming\onOne Software

2015-07-30 17:47 - 2013-08-12 13:08 - 00000000 ____D C:\Users\Britt\AppData\Roaming\onOne Software

2015-07-30 17:47 - 2013-08-12 13:06 - 00000000 ____D C:\ProgramData\onOne Software

2015-07-30 17:46 - 2013-08-12 13:06 - 00000000 ____D C:\Program Files\onOne Software

2015-07-30 17:46 - 2013-08-12 13:06 - 00000000 ____D C:\Program Files (x86)\onOne Software

2015-07-29 19:21 - 2012-02-10 13:05 - 00000000 ____D C:\Users\will\AppData\Local\Google

2015-07-27 14:18 - 2015-04-10 18:25 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit

2015-07-26 10:31 - 2015-02-20 16:52 - 00000000 ____D C:\Users\will\AppData\Roaming\HP Photo Creations

2015-07-26 10:31 - 2013-03-17 19:49 - 00000000 ____D C:\Users\will\AppData\Roaming\Visan

2015-07-26 10:30 - 2015-02-20 16:52 - 00002102 _____ C:\Users\will\Desktop\HP Photo Creations.lnk

2015-07-26 09:58 - 2012-04-11 19:39 - 00000000 ____D C:\ProgramData\InstallMate

2015-07-26 09:57 - 2014-09-23 12:50 - 00000000 ____D C:\Program Files\WinRAR

2015-07-26 09:45 - 2015-06-25 14:16 - 00000914 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1958726619-2033566604-2034206773-1001UA.job

2015-07-26 09:45 - 2015-06-25 14:16 - 00000862 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1958726619-2033566604-2034206773-1001Core.job

2015-07-26 09:45 - 2015-05-09 09:27 - 00000400 _____ C:\WINDOWS\Tasks\Wise Turbo Checker.job

2015-07-26 09:23 - 2014-07-21 10:09 - 00000000 ____D C:\ProgramData\Comodo

2015-07-26 09:23 - 2012-02-10 15:43 - 00000000 ____D C:\ProgramData\Adobe

2015-07-25 21:27 - 2015-06-25 14:16 - 00000000 ____D C:\Users\will\AppData\Local\Dropbox

2015-07-25 21:22 - 2015-02-26 13:05 - 00000000 ____D C:\Users\will\AppData\Local\Plex Media Server

2015-07-25 21:22 - 2014-12-11 13:06 - 00000000 ____D C:\Users\will\AppData\Roaming\DVDVideoSoft

2015-07-25 21:22 - 2014-11-11 12:36 - 00000000 ____D C:\Users\will\AppData\Roaming\Dropbox

2015-07-25 21:22 - 2014-11-11 12:29 - 00000000 ____D C:\Users\will\AppData\Roaming\MediaMonkey

2015-07-25 21:22 - 2014-09-04 13:04 - 00000000 ____D C:\Users\will\AppData\Local\MediaMonkey

2015-07-25 21:22 - 2014-07-24 14:42 - 00000000 ____D C:\Users\will\AppData\Roaming\Serif

2015-07-25 21:22 - 2013-11-05 20:21 - 00000000 ____D C:\Users\will\AppData\Roaming\Logitech

2015-07-25 21:22 - 2013-01-13 18:21 - 00000000 ____D C:\Users\will\AppData\Local\Pinnacle

2015-07-25 21:22 - 2012-11-05 14:14 - 00000000 ____D C:\Users\will\AppData\Local\ChemTable Software

2015-07-25 21:22 - 2012-09-09 17:28 - 00000000 ____D C:\Users\Britt\AppData\Roaming\Adobe

2015-07-25 21:22 - 2012-09-09 17:27 - 00000000 ____D C:\Users\Britt\AppData\Local\Google

2015-07-25 21:22 - 2012-07-20 21:23 - 00000000 ____D C:\Users\will\AppData\Roaming\DivX

2015-07-25 21:22 - 2012-07-13 13:28 - 00000000 ____D C:\Users\will\AppData\Roaming\AVS4YOU

2015-07-25 21:22 - 2012-05-29 18:11 - 00000000 ____D C:\Users\will\AppData\Local\Apple Computer

2015-07-25 21:22 - 2012-04-25 18:05 - 00000000 ____D C:\Users\will\AppData\Roaming\Real

2015-07-25 21:22 - 2012-04-06 12:14 - 00000000 ____D C:\Users\will\AppData\Roaming\Dell

2015-07-25 21:22 - 2012-02-26 14:24 - 00000000 ____D C:\Users\will\AppData\Roaming\Apple Computer

2015-07-25 21:21 - 2015-04-12 13:54 - 00000000 ____D C:\ProgramData\VMware

2015-07-25 21:21 - 2014-12-22 14:44 - 00000000 ____D C:\Program Files (x86)\QuickTime

2015-07-25 21:21 - 2014-10-22 12:41 - 00000000 ____D C:\Program Files (x86)\ImgBurn

2015-07-25 21:21 - 2014-10-02 21:08 - 00000000 ____D C:\Program Files (x86)\VSO

2015-07-25 21:21 - 2013-11-06 17:00 - 00000000 ____D C:\ProgramData\Freemake

2015-07-25 21:21 - 2013-04-23 19:46 - 00000000 ____D C:\ProgramData\Motorola

2015-07-25 21:21 - 2013-01-14 17:48 - 00000000 ____D C:\ProgramData\MR APP

2015-07-25 21:21 - 2012-04-25 18:05 - 00000000 ____D C:\ProgramData\Real

2015-07-25 21:21 - 2012-02-10 15:57 - 00000000 ____D C:\ProgramData\Yahoo!

2015-07-25 21:21 - 2012-02-08 23:01 - 00000000 ____D C:\Program Files\Dell

2015-07-25 21:16 - 2012-02-10 15:34 - 00000000 ____D C:\Users\will\AppData\Roaming\vlc

2015-07-25 20:45 - 2013-01-20 21:50 - 00000000 ____D C:\Program Files (x86)\SlimCleaner

2015-07-25 20:41 - 2015-05-28 12:44 - 00000000 ____D C:\Users\will\AppData\Roaming\GlarySoft

2015-07-24 16:13 - 2014-12-26 11:37 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-07-24 13:12 - 2012-02-16 16:10 - 00000000 ____D C:\Users\will\AppData\Local\Microsoft Help

2015-07-23 12:12 - 2014-11-13 19:30 - 00000000 __SHD C:\Users\will\AppData\Local\EmieBrowserModeList

2015-07-23 12:12 - 2014-04-30 18:53 - 00000000 __SHD C:\Users\will\AppData\Local\EmieUserList

2015-07-23 12:12 - 2014-04-30 18:53 - 00000000 __SHD C:\Users\will\AppData\Local\EmieSiteList

2015-07-22 12:54 - 2015-06-25 14:02 - 00000000 ___RD C:\Users\will\Dropbox

==================== Files in the root of some directories =======

2013-10-03 20:30 - 2014-01-05 13:52 - 0003709 _____ () C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml

2013-12-21 17:29 - 2014-01-11 19:26 - 13024768 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe

2012-04-25 20:06 - 2013-09-20 16:14 - 0000640 _____ () C:\Users\will\AppData\Roaming\.backup.dm

2014-08-30 11:52 - 2014-08-30 11:52 - 0000132 _____ () C:\Users\will\AppData\Roaming\Adobe BMP Format CS6 Prefs

2013-12-25 17:51 - 2013-12-29 15:16 - 0000373 _____ () C:\Users\will\AppData\Roaming\burnaware.ini

2012-02-19 18:20 - 2012-06-05 17:42 - 0000241 _____ () C:\Users\will\AppData\Roaming\default.rss

2014-06-20 18:16 - 2014-06-20 18:16 - 0000055 _____ () C:\Users\will\AppData\Roaming\mbam.context.scan

2014-01-11 17:16 - 2014-12-07 15:27 - 0007859 _____ () C:\Users\will\AppData\Roaming\pcouffin.cat

2014-01-11 17:16 - 2014-12-07 15:27 - 0001167 _____ () C:\Users\will\AppData\Roaming\pcouffin.inf

2014-10-02 21:08 - 2014-12-07 15:27 - 0000055 _____ () C:\Users\will\AppData\Roaming\pcouffin.log

2014-01-11 17:16 - 2014-12-07 15:27 - 0082816 _____ (VSO Software) C:\Users\will\AppData\Roaming\pcouffin.sys

2014-09-04 13:14 - 2014-09-04 13:14 - 0000568 _____ () C:\Users\will\AppData\Roaming\ReplayConverterLog.log

2013-07-08 11:19 - 2013-07-08 11:19 - 0000000 _____ () C:\Users\will\AppData\Roaming\SharedSettings.ccs

2015-03-25 10:25 - 2015-04-12 13:03 - 0000133 _____ () C:\Users\will\AppData\Roaming\WB.CFG

2013-04-11 17:33 - 2013-04-11 17:33 - 0000000 _____ () C:\Users\will\AppData\Roaming\wklnhst.dat

2014-05-03 19:13 - 2014-05-03 19:13 - 0000037 ___SH () C:\Users\will\AppData\Local\70149b02515b3bb20dd492.47983420

2014-07-21 16:35 - 2014-07-21 16:35 - 174596376 _____ () C:\Users\will\AppData\Local\ACCCx2_7_0_413.zip.aamdownload

2014-07-21 16:35 - 2014-07-21 16:35 - 0002111 _____ () C:\Users\will\AppData\Local\ACCCx2_7_0_413.zip.aamdownload.aamd

2014-12-10 15:29 - 2014-12-10 15:29 - 0254088 _____ () C:\Users\will\AppData\Local\ars.cache

2014-12-10 15:29 - 2014-12-10 15:29 - 0307103 _____ () C:\Users\will\AppData\Local\census.cache

2014-07-24 15:29 - 2014-09-13 18:30 - 0008704 _____ () C:\Users\will\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-07-15 18:27 - 2014-07-15 18:33 - 0000058 _____ () C:\Users\will\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat

2015-03-30 12:25 - 2015-03-30 12:25 - 0274045 _____ () C:\Users\will\AppData\Local\dsi1.dat

2015-03-30 12:25 - 2015-03-30 12:25 - 0161916 _____ () C:\Users\will\AppData\Local\dsi2.dat

2014-12-10 15:06 - 2014-12-10 15:06 - 0000036 _____ () C:\Users\will\AppData\Local\housecall.guid.cache

2014-08-08 12:16 - 2014-08-08 12:16 - 0007597 _____ () C:\Users\will\AppData\Local\Resmon.ResmonCfg

2014-12-07 16:27 - 2014-12-07 16:27 - 0000160 _____ () C:\ProgramData\defraggler_list.txt

2014-04-30 14:30 - 2014-04-30 16:38 - 6696936 _____ (Dell ) C:\ProgramData\Dell Click 2 Fix+-64-bit-V2546.exe

2014-11-26 18:18 - 2014-12-26 11:30 - 0003820 _____ () C:\ProgramData\hpzinstall.log

2014-12-09 15:35 - 2014-12-09 15:35 - 0012719 _____ () C:\ProgramData\ucxrypwh.kkh

2014-09-01 15:30 - 2014-09-01 15:30 - 0001736 _____ () C:\ProgramData\__wdump.txt

Files to move or delete:

====================

C:\ProgramData\Dell Click 2 Fix+-64-bit-V2546.exe

Some zero byte size files/folders:

==========================

C:\Windows\SysWOW64\conhost.exe

C:\Windows\SysWOW64\csrss.exe

C:\Windows\SysWOW64\dwm.exe

C:\Windows\SysWOW64\igfxtray.exe

C:\Windows\SysWOW64\lsass.exe

C:\Windows\SysWOW64\smss.exe

C:\Windows\SysWOW64\spoolsv.exe

C:\Windows\System32\igd10umd32.dll

C:\Windows\System32\igdumd32.dll

C:\Windows\System32\igdumdx32.dll

C:\Windows\System32\MSVBVM60.DLL

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-08-18 11:22

Run date: 2015-08-20 13:42:55

—————————–

13:42:55.923 OS Version: Windows x64 6.2.9200

13:42:55.923 Number of processors: 4 586 0x2A07

13:42:55.923 ComputerName: WILL-LAPTOP UserName: will

13:42:56.986 Initialize success

13:42:57.107 VM: initialized successfully

13:42:57.107 VM: Intel CPU supported

13:43:04.586 VM: disk I/O iaStor.sys

13:43:23.556 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1

13:43:23.556 Disk 0 Vendor: ST950032 D005 Size: 476940MB BusType: 3

13:43:23.759 Disk 0 MBR read successfully

13:43:23.759 Disk 0 MBR scan

13:43:23.775 Disk 0 Windows 7 default MBR code

13:43:23.791 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 277657 MB offset 2048

13:43:23.806 Disk 0 Partition - 00 0F Extended LBA 199278 MB offset 568645569

13:43:23.822 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 199278 MB offset 568645632

13:43:24.017 Disk 0 scanning C:\WINDOWS\system32\drivers

13:43:40.007 Service scanning

13:44:23.125 Modules scanning

13:44:23.125 Disk 0 trace - called modules:

13:44:23.156 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys hal.dll

13:44:23.171 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe0001ca5e460]

13:44:23.187 3 CLASSPNP.SYS[fffff80130a546c5] -> nt!IofCallDriver -> [0xffffe000198865d0]

13:44:23.187 5 ACPI.sys[fffff80130871361] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xffffe00019881050]

13:44:23.203 Disk 0 statistics 140995/0/0 @ 4.61 MB/s

13:44:23.218 Scan finished successfully

13:44:35.212 Disk 0 MBR has been saved successfully to "C:\Users\will\Desktop\MBR.dat"

13:44:35.227 The log file has been saved successfully to "C:\Users\will\Desktop\aswMBR.txt"

==================== End of log ============================

ken545

Post #2September 4, 2015, 10:35 AM UTC

Good Morning

Sorry for the delay, looks like your topic was missed. Sometimes when a computer slows down its not always malware so lets run a few tools and and see what they come up with

-AdwCleaner-by Xplode

Click on this link to download : ADWCleaner TO YOUR DESKTOP

Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.

Use my link only, do not do a search for AdwCleaner as there is a bogus copy going around by scammers

Do not click on any links in the top Advertisment.

[external image: AdwCleaner4.201_zpsxrbk2llq.jpg]

Close all open programs and internet browsers.

Double click on AdwCleaner.exe to run the tool.

Click on Scan.

After the scan is complete click on "Clean"

Confirm each time with Ok.

Your computer will be rebooted automatically. A text file will open after the restart.

Please post the content of that logfile with your next reply.

You can find the logfile at C:\AdwCleaner[S1].txt as well.

===============================================================================

[external image: thisisujrt.gif] Please download Junkware Removal Tool TO YOUR DESKTOP

Download the one from Bleeping Computer

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Post the contents of JRT.txt into your next message.

===============================================================================

Download Malwarebytes' Anti-Malware TO YOUR DESKTOP

Windows XP : Double click on the icon to run it.

Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"

[external image: 0841859c-1a35-4dbd-b41a-e720629e3e22_zps]

On the Dashboard click on Update Now

Go to the Setting Tab

Under Setting go to Detection and Protection

Under PUP and PUM make sure both are set to show Treat Detections as Malware

Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked

Then on the Dashboard click on Scan

Make sure to select THREAT SCAN

Then click on Scan

When the scan is finished and the log pops up…select Copy to Clipboard

Please paste the log back into this thread for review

Exit Malwarebytes

Deleted Member

Post #3September 5, 2015, 12:01 PM UTC

Good morning,

Thanks for the help delay is not a problem.

here are the logs:

# AdwCleaner v5.005 - Logfile created 04/09/2015 at 15:58:33

# Updated 31/08/2015 by Xplode

# Database : 2015-08-31.2 [Server]

# Operating system : Windows 7 Professional Service Pack 1 (x64)

# Username : Will - WILL-PC

# Running from : C:\Users\Will\Downloads\AdwCleaner.exe

# Option : Cleaning

# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc

[-] Folder Deleted : C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil

[-] Folder Deleted : C:\Users\Will\AppData\LocalLow\HPAppData

***** [ Files ] *****

[-] File Deleted : C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\elicpjhcidhpjomhibiffojpinpmmpil

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

***** [ Web browsers ] *****

[-] [C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : elicpjhcidhpjomhibiffojpinpmmpil

[-] [C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : faoigfclahgbjjjaopddafnnapmeppnc

[-] [C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : fkjlohfdjcjhmfcabomglnciodlnplhk

[-] [C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : oalbpfagfhfkcmklpdanadjpbfdedndn

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C7].txt - [1637 bytes] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 7.6.0 (08.31.2015:1)

OS: Windows 7 Professional x64

Ran by [removed] on Fri 09/04/2015 at 17:31:06.76

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Tasks

Successfully deleted: [Task] C:\Windows\system32\tasks\Wise Turbo Checker

Successfully deleted: [Task] C:\Windows\Tasks\Wise Turbo Checker.job

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4858E7D9-8E12-45a3-B6A3-1CD128C9D403}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\TuneUp Undelete

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\Disabled:{2018eb71-06b5-4438-abf4-e40d

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\Disabled:{3049C3E9-B461-4BC5-8870-4C09

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\Disabled:{326E768D-4182-46FD-9C16-1449

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\Disabled:{95D9ECF5-2A4D-4550-BE49-70D4

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\Disabled:{AA58ED58-01DD-4d91-8333-CF10

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\Disabled:{B4F3A835-0E21-4959-BA22-42B3

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\Disabled:{2018eb71-06b5-4438-abf4-e40d

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\Disabled:{3049C3E9-B461-4BC5-8870-4C09

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\Disabled:{326E768D-4182-46FD-9C16-1449

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\Disabled:{95D9ECF5-2A4D-4550-BE49-70D4

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\Disabled:{AA58ED58-01DD-4d91-8333-CF10

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\Disabled:{B4F3A835-0E21-4959-BA22-42B3

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\Disabled:{2018eb71-06b5-4438-abf4-e40d

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\Disabled:{3049C3E9-B461-4BC5-8870-4C09

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\Disabled:{326E768D-4182-46FD-9C16-1449

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\Disabled:{95D9ECF5-2A4D-4550-BE49-70D4

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\Disabled:{AA58ED58-01DD-4d91-8333-CF10

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\Disabled:{B4F3A835-0E21-4959-BA22-42B3

~~~ Files

Successfully deleted: [File] C:\Users\Will\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ajpgkpeckebdhofmmjfgcjjiiejpodla_0.localstorage

Successfully deleted: [File] C:\Users\Will\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ajpgkpeckebdhofmmjfgcjjiiejpodla_0.localstorage-journal

~~~ Folders

~~~ Chrome

Successfully deleted: [Folder] C:\Users\Will\Appdata\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla

Successfully deleted: [Folder] C:\Users\Will\Appdata\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj

Successfully deleted: [Folder] C:\Users\Will\Appdata\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil

[C:\Users\Will\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Will\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

ajpgkpeckebdhofmmjfgcjjiiejpodla

bmnlcjabgnpnenekpadlanbbkooimhnj

elicpjhcidhpjomhibiffojpinpmmpil

[C:\Users\Will\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Will\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:

[

ajpgkpeckebdhofmmjfgcjjiiejpodla,

bmnlcjabgnpnenekpadlanbbkooimhnj,

elicpjhcidhpjomhibiffojpinpmmpil

]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Fri 09/04/2015 at 17:38:22.70

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 9/4/2015

Scan Time: 4:20 PM

Logfile:

Administrator: Yes

Version: 2.1.8.1057

Malware Database: v2015.09.04.07

Rootkit Database: v2015.08.16.01

License: Free

Malware Protection: Disabled

Malicious Website Protection: Disabled

Self-protection: Disabled

OS: Windows 7 Service Pack 1

CPU: x64

File System: NTFS

User: Will

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 489590

Time Elapsed: 25 min, 33 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 0

(No malicious items detected)

Registry Values: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Folders: 117

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\addon, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\content, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\cookies, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\homepage, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\incognito, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\info, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\logging, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\logging\appenders, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\popups, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\sender, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\storage, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\storage\file, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\storage\preferences, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\storage\registry, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\tabs, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\uninstall, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\utils, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\utils\compression, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\voicebox, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\web, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\windows, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\xhr, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\bus, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\caching, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\capture, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\dca, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\diagnostic, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\eula, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\event, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\exceptions, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\install, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\install\strategies, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\update, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\config, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\parser, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\providers, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\utils, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalReader, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\machine, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\notification, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\partnerActivation, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\session, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\settings, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\substitution, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\utils, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\voicebox, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\web, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\icons, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\interfaces, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\_metadata, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

Files: 450

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\content\CodeExecutor.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\content\CodeExecutorFactory.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\content\ConnectionPort.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\content\ContentEventsObserver.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\content\ContentMessagesRetriever.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\content\contentScripts.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\content\WebRequestListenerMixin.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\cookies\CookieManager.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\cookies\CookieManagerFactory.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\homepage\HomepageTracker.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\incognito\Mode.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\info\Environment.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\logging\appenders\ConsoleAppender.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\popups\PopupsFactory.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\popups\PopupsTracker.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\sender\ExternalEventSender.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\sender\ExternalSenderFactory.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\storage\StorageFactory.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\storage\WebStorage.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\storage\file\FileStorage.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\storage\preferences\PreferenceObserver.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\storage\preferences\PreferenceStorageNotifier.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\storage\registry\RegistryStorage.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\tabs\Tab.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\tabs\TabController.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\tabs\TabVisibilityWatcher.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\uninstall\UninstallExecutor.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\utils\Generators.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\utils\compression\Adler32Calculator.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\utils\compression\CompressorFactory.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\utils\compression\DeflateCompressor.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\utils\compression\RawDeflateCompressor.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\voicebox\ImageVoicebox.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\voicebox\VoiceboxFactory.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\web\WebRequestCache.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\web\WebRequestObserver.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\windows\ChromeWindow.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\windows\WindowController.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\xhr\ErrorMessageProcessor.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\xhr\NetworkErrorList.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\xhr\Request.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\chrome\xhr\RequestFactory.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\Core.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\CoreInitializer.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\CoreListenerInterface.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\CoreListenerPrototype.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\HeaderProcessor.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\ModuleInterface.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\ReportableSubject.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\capture\CaptureType.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\capture\CaptureTypeChangeNotifier.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\capture\CaptureTypeModule.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\capture\Type.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\ExtensionProcedures.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\UninstallerProcedures.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\install\InstallDetails.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\install\InstallDetailsProvider.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\install\InstallProcedures.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\install\PostInstallPageCoordinator.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\install\strategies\AbstractInstallStrategy.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\install\strategies\InstallAPIStrategy.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\install\strategies\InstallEXTStrategy.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\install\strategies\InstallSDKStrategy.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\update\CorePostUpdateListener.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\extensionManager\update\UpdateProcedures.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\EJSCacheDispatcher.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\EJSCompressionProcessor.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\EJSConfigRetriever.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\EJSDataComposingProcessor.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\EJSDataSender.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\EJSServiceFactory.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\EJSServiceListener.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\ExecutorController.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\ExternalJSCacheCleaner.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\ExternalJSController.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\ExternalJSSettings.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\ModuleController.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\ModulesApplier.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\ModulesApplierInterface.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\config\ExternalJSModule.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\config\ExternalJSResult.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\config\ExternalJSScript.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\parser\ExternalJSModuleParser.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\parser\ExternalJSScriptParser.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\parser\ExternalJSServiceConfigParser.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\providers\EJSModuleServiceConfigProvider.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\utils\DelayedExecutor.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalJS\utils\EJSResultScheduler.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\externalReader\RegistryExternalReader.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\settings\dcaSettings.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\settings\OptionsChangeNotifier.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\core\settings\OptionsListenerInterface.js, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\icons\logo128.png, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\icons\logo16.png, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

PUP.Optional.ConsumerInput, C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc\3.2.0.3224_0\icons\logo48.png, Quarantined, [9e4930fb8cff0a2cee1346b907fb51af],

Physical Sectors: 0

(No malicious items detected)

(end)

Computer is faster now I need to clean up some stuff I don't use

ken545

Post #4September 5, 2015, 12:17 PM UTC

Will, open up FRST, make sure to checkmark Additions, run a new scan and post both new logs please

Deleted Member

Post #5September 5, 2015, 6:04 PM UTC

good afternoon,

here are the scans:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:04-09-2015
Ran by [removed] (administrator) on WILL-PC (05-09-2015 13:54:37)
Running from C:\Users\[removed]\Downloads
[removed]

ken545

Post #6September 5, 2015, 9:10 PM UTC

Will,

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ <– You have a ton of programs running at start up, this may be one of the reasons your computer is slowing down, go to this directory and remove any programs that you dont need to run at start up, if your not sure what to remove let me know and when where done you can post in our windows forum to let them decide what and what not to have in start up

You also have Wise Cleaner and a few programs related to Wise, I have been into computing since the days of Windows 3.1 / 95 and I never had any need for any of these so called cleaners , reg cleaners and what not, its not malicious but really sucking up some system resources, I would uninstall anything related to Wise, anything you need is built into windows and there is no need for programs like this. When you run a registry cleaner and are not sure what its removing, remove the wrong entry or entries can sometime leave your computer unbootable, remove legit entries that are no longer needed and you will see no difference in system performance

I have to tell ya, you have so many programs installed , I would uninstall any that you have not used in the last 6 months and dont plan on using it in the future

You also have a ton of programs running as a task and some are not needed

Let me know what you want to do about Wise as I am working up a fix for you using FRST and I will add Wise if you decide to uninstall it

Deleted Member

Post #7September 7, 2015, 8:13 PM UTC

good afternoon and happy labor day

I was about to follow your advice when I got home today. Hard drive crashed on my puter when I booted it.

I don't have to worry bout it will follow your advice and not be a program hoarder

Thank you for all the help

ken545

Post #8September 7, 2015, 9:45 PM UTC

Your more than welcome Will,

Are you sure your HD failed or did you just get a boot up error

Deleted Member

Post #9September 8, 2015, 12:29 AM UTC

It made a grinding noise and smelled burnt

ken545

Post #10September 8, 2015, 1:07 AM UTC

Wow, sounds like your ready for a new one

ken545

Post #11September 8, 2015, 1:51 PM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

slow puter [Solved]

✨ Ask AI

Ask AI