Malware (Kryptic.EBIE Trojan [Closed]

aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2016-03-30 09:09:37
—————————–
09:09:37.618    OS Version: Windows x64 6.1.7601 Service Pack 1
09:09:37.618    Number of processors: 4 586 0x2A07
09:09:37.618    ComputerName: ENGRBOKOWE-HP  UserName: Engr. Bokowe
09:09:41.440    Initialize success
09:09:41.580    VM: initialized successfully
09:09:41.580    VM: Intel CPU BiosDisabled
09:34:41.473    AVAST engine defs: 16032300
09:35:16.307    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
09:35:16.307    Disk 0 Vendor: Hitachi_ JF3O Size: 476940MB BusType: 3
09:35:16.401    Disk 0 MBR read successfully
09:35:16.417    Disk 0 MBR scan
09:35:16.432    Disk 0 Windows 7 default MBR code
09:35:16.448    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          300 MB offset 2048
09:35:16.463    Disk 0 default boot code
09:35:16.479    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS       454311 MB offset 616448
09:35:16.510    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS        17205 MB offset 931045376
09:35:16.541    Disk 0 Partition 4 00     0C    FAT32 LBA MSDOS5.0     5115 MB offset 966281216
09:35:16.697    Disk 0 scanning C:\windows\system32\drivers
09:35:45.709    Service scanning
09:36:28.641    Modules scanning
09:36:28.641    Disk 0 trace - called modules:
09:36:28.672    ntoskrnl.exe CLASSPNP.SYS disk.sys hpdskflt.sys ACPI.sys iaStor.sys hal.dll
09:36:28.687    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004e21060]
09:36:28.687    3 CLASSPNP.SYS[fffff88001a3043f] -> nt!IofCallDriver -> [0xfffffa8004cf2b10]
09:36:28.703    5 hpdskflt.sys[fffff880015f0361] -> nt!IofCallDriver -> [0xfffffa80048959f0]
09:36:28.719    7 ACPI.sys[fffff88000f067a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004935050]
09:36:30.060    AVAST engine scan C:\windows
09:36:33.929    AVAST engine scan C:\windows\system32
09:42:24.152    AVAST engine scan C:\windows\system32\drivers
09:42:43.730    AVAST engine scan C:\Users\Engr. Bokowe
10:09:49.549    File: C:\Users\Engr. Bokowe\AppData\Local\Temp\78714423.exe  **INFECTED** Win32:Trojan-gen
10:33:17.929    Disk 0 MBR has been saved successfully to "C:\Users\Engr. Bokowe\Desktop\MBR.dat"
10:33:17.944    The log file has been saved successfully to "C:\Users\Engr. Bokowe\Desktop\aswMBR.txt"

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by [removed] (administrator) on ENGRBOKOWE-HP (30-03-2016 10:37:50)
Running from C:\Users\[removed]\Desktop
[removed] Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\ProgramData\Etisalat Nigeria\OnlineUpdate\ouc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
() C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
(Iomega Corp) C:\Program Files (x86)\Iomega Storage Manager\pCloudd.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(TorchMedia Inc.) C:\Users\Engr. Bokowe\AppData\Local\Torch\Update\TorchCrashHandler.exe
(ArcSoft, Inc.) C:\Windows\SysWOW64\ArcVCapRender\uArcCapture.exe
() C:\Program Files (x86)\MTN F@stLink\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Bandoo Media Inc.) C:\Users\Engr. Bokowe\AppData\Local\iLivid\iLivid.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
() C:\Program Files (x86)\MTN F@stLink\UIExec.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\…\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [656920 2011-02-01] (PDF Complete Inc)
HKLM-x32\…\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [299576 2011-01-28] (Hewlett-Packard Company)
HKLM-x32\…\Run: [File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [12274688 2011-02-07] (Hewlett-Packard)
HKLM-x32\…\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-26] (Intel Corporation)
HKLM-x32\…\Run: [NUSB3MON] => c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\…\Run: [DTRun] => c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [517456 2010-11-24] (ArcSoft Inc.)
HKLM-x32\…\Run: [HPConnectionManager] => c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-04-05] (Hewlett-Packard Development Company L.P.)
HKLM-x32\…\Run: [] => [X]
HKLM-x32\…\Run: [HPQuickWebProxy] => c:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [76344 2011-02-11] (Hewlett-Packard Company)
HKLM-x32\…\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\…\Run: [ToolboxFX] => C:\Program Files (x86)\HP\ToolboxFX\bin\HPTLBXFX.exe [58936 2010-10-25] (Hewlett-Packard Company)
HKLM-x32\…\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\…\Run: [UIExec] => C:\Program Files (x86)\MTN F@stLink\UIExec.exe [139088 2011-03-17] ()
HKLM\…\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]
HKU\S-1-5-21-215815765-518078125-4221165855-1001\…\Run: [iLivid] => C:\Users\Engr. Bokowe\AppData\Local\iLivid\iLivid.exe [7913472 2014-05-25] (Bandoo Media Inc.)
HKU\S-1-5-21-215815765-518078125-4221165855-1001\…\MountPoints2: {2573dcb5-0317-11e3-a4f5-101f74e8ac0e} - D:\LaunchU3.exe -a
HKU\S-1-5-21-215815765-518078125-4221165855-1001\…\MountPoints2: {6c7af09c-a5ea-11e4-a801-101f74e8ac0e} - D:\AutoRun.exe
HKU\S-1-5-21-215815765-518078125-4221165855-1001\…\MountPoints2: {e3fd8c24-8827-11e4-9aa1-101f74e8ac0e} - D:\Windows\AutoRun.exe
Lsa: [Notification Packages] EpePcNp64 DPPassFilter scecli
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2009-03-24] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2012-02-13]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Engr. Bokowe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HP_0EF0EA0D-F945-4958-85CC-60FF1E86D216.lnk [2013-04-25]
ShortcutTarget: HP_0EF0EA0D-F945-4958-85CC-60FF1E86D216.lnk -> C:\Program Files (x86)\HP\csiInstaller\0EF0EA0D-F945-4958-85CC-60FF1E86D216\Setup.exe (Hewlett-Packard)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] [removed] 8.8.4.4
Tcpip\..\Interfaces\{6BB10C56-47F0-4454-BF56-81513501072B}: [DhcpNameServer] [removed] 8.8.4.4
Tcpip\..\Interfaces\{ABDC7D95-64A2-44B9-BDC6-3323E0AA8161}: [DhcpNameServer] [removed] 8.8.4.4

Internet Explorer:
==================
HKU\S-1-5-21-215815765-518078125-4221165855-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.mywebsearch.com/index.jhtml?n=77DE8857&ptnrS;=XPxdm116YYde&ptb;=72AEE93D-C283-441E-971F-20C52A569066&si;=COfzgZvF7rECFQ0htAodj3IAJQ
HKU\S-1-5-21-215815765-518078125-4221165855-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPCOM/1
URLSearchHook: HKU\S-1-5-21-215815765-518078125-4221165855-1001 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
URLSearchHook: HKU\S-1-5-21-215815765-518078125-4221165855-1001 - (No Name) - {0696f815-a3a9-490a-bb14-9ec3350b1276} - C:\Program Files (x86)\TelevisionFanatic\bar\1.bin\64SrcAs.dll (MindSpark)
URLSearchHook: HKU\S-1-5-21-215815765-518078125-4221165855-1001 - (No Name) - {7a55cbb2-2b2e-4a41-9de1-6ac5d2c2be0a} - C:\Program Files (x86)\UtilityChest_49\bar\1.bin\49SrcAs.dll No File
SearchScopes: HKLM -> DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=CMNTDF&pc;=CMNTDF&src;=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://search.ask.com/web?q={searchterms}&l;=dis&o;=CMNTDF
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei;={inputEncoding}&fr;=chr-hp-psg&type;=CMNTDF
SearchScopes: HKLM -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=CMNTDF&pc;=CMNTDF&src;=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=CMNTDF&pc;=CMNTDF&src;=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://search.ask.com/web?q={searchterms}&l;=dis&o;=CMNTDF
SearchScopes: HKLM-x32 -> {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm116YYde&ptnrS;=XPxdm116YYde&si;=COfzgZvF7rECFQ0htAodj3IAJQ&ptb;=72AEE93D-C283-441E-971F-20C52A569066&psa;=&ind;=2012081707&st;=sb&n;=77edee2b&searchfor;={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei;={inputEncoding}&fr;=chr-hp-psg&type;=CMNTDF
SearchScopes: HKLM-x32 -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=CMNTDF&pc;=CMNTDF&src;=IE-SearchBox
SearchScopes: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> DefaultScope {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm116YYde&ptnrS;=XPxdm116YYde&si;=COfzgZvF7rECFQ0htAodj3IAJQ&ptb;=72AEE93D-C283-441E-971F-20C52A569066&psa;=&ind;=2012081707&st;=sb&n;=77edee2b&searchfor;={searchTerms}
SearchScopes: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://search.ask.com/web?q={searchterms}&l;=dis&o;=CMNTDF
SearchScopes: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm116YYde&ptnrS;=XPxdm116YYde&si;=COfzgZvF7rECFQ0htAodj3IAJQ&ptb;=72AEE93D-C283-441E-971F-20C52A569066&psa;=&ind;=2012081707&st;=sb&n;=77edee2b&searchfor;={searchTerms}
SearchScopes: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei;={inputEncoding}&fr;=chr-hp-psg&type;=CMNTDF
SearchScopes: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=CMNTDF&pc;=CMNTDF&src;=IE-SearchBox
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO-x32: &Yahoo;! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28] (Yahoo! Inc.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: File Sanitizer for HP ProtectTools -> {3134413B-49B4-425C-98A5-893C1F195601} -> C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2011-02-07] (Hewlett-Packard)
BHO-x32: Search Assistant BHO -> {5d79f641-c168-40df-a32f-bacea7509e75} -> C:\Program Files (x86)\TelevisionFanatic\bar\1.bin\64SrcAs.dll [2012-08-17] (MindSpark)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Toolbar BHO -> {cb41fc95-f1b3-4797-8bb6-1012ff62abba} -> C:\Program Files (x86)\TelevisionFanatic\bar\1.bin\64bar.dll [2012-08-17] ()
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO-x32: SingleInstance Class -> {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28] (Yahoo! Inc)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28] (Yahoo! Inc.)
Toolbar: HKLM-x32 - TelevisionFanatic - {c98d5b61-b0ea-4d48-9839-1079d352d880} - C:\Program Files (x86)\TelevisionFanatic\bar\1.bin\64bar.dll [2012-08-17] ()
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> No Name - {CF67755F-9265-449C-87CF-B945519E073B} -  No File
Toolbar: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> No Name - {C98D5B61-B0EA-4D48-9839-1079D352D880} -  No File

FireFox:
========
FF ProfilePath: C:\Users\Engr. Bokowe\AppData\Roaming\Mozilla\Firefox\Profiles\ui0mlt9x.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-24] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-24] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin-x32: @TelevisionFanatic.com/Plugin -> C:\Program Files (x86)\TelevisionFanatic\bar\1.bin\NP64Stub.dll [2012-08-17] ()
FF Plugin-x32: @UtilityChest_49.com/Plugin -> C:\Program Files (x86)\UtilityChest_49\bar\1.bin\NP49Stub.dll [2012-09-28] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin-x32: TorchVLC -> C:\Users\Engr. Bokowe\AppData\Local\Torch\Plugins\Video\VLC\npvlc.dll [2013-07-30] (VideoLAN)
FF user.js: detected! => C:\Users\Engr. Bokowe\AppData\Roaming\Mozilla\Firefox\Profiles\ui0mlt9x.default\user.js [2015-01-22]
FF Extension: Allin1Convert - C:\Users\Engr. Bokowe\AppData\Roaming\Mozilla\Firefox\Profiles\ui0mlt9x.default\Extensions\[removed] [2015-10-12] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2011-05-05] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-02-13] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\TelevisionFanatic\bar\1.bin
FF Extension: No Name - C:\Program Files (x86)\TelevisionFanatic\bar\1.bin [2015-02-02] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [49ffxtbr@UtilityChest_49.com] - C:\Program Files (x86)\UtilityChest_49\bar\1.bin
FF Extension: No Name - C:\Program Files (x86)\UtilityChest_49\bar\1.bin [2015-02-02] [not signed]
FF HKU\S-1-5-21-215815765-518078125-4221165855-1001\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [77944 2012-02-15] (Autodesk)
R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [481104 2011-02-12] (DigitalPersona, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1350112 2014-09-16] (ESET)
S2 Etisalat Nigeria. RunOuc; C:\Program Files (x86)\Etisalat Nigeria\UpdateDog\ouc.exe [657504 2012-11-12] ()
S3 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [464480 2011-02-03] (Hewlett-Packard Company)
S3 FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [1030600 2012-02-16] (Macrovision Europe Ltd.) [File not signed]
S2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [145920 2010-10-25] (HP) [File not signed]
S3 HP ProtectTools Service; c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [36864 2011-01-12] (Hewlett-Packard Development Company, L.P) [File not signed]
R2 HPDayStarterService; c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe [133688 2011-01-28] (Hewlett-Packard Company)
R2 HPFSService; C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [320000 2011-02-07] (Hewlett-Packard) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [281656 2011-01-28] (Hewlett-Packard Company)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1318912 2011-02-09] () [File not signed]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 PCloudd; C:\Program Files (x86)\Iomega Storage Manager\pCloudd.exe [204800 2011-01-27] (Iomega Corp) [File not signed]
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1127448 2011-02-01] (PDF Complete Inc)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 TorchCrashHandler; C:\Users\Engr. Bokowe\AppData\Local\Torch\Update\TorchCrashHandler.exe [1217032 2014-10-29] (TorchMedia Inc.) <==== ATTENTION
R2 uArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [502464 2010-11-11] (ArcSoft, Inc.)
R2 UI Assistant Service; C:\Program Files (x86)\MTN F@stLink\AssistantServices.exe [261456 2011-03-17] ()
S2 UtilityChest_49Service; C:\Program Files (x86)\UtilityChest_49\bar\1.bin\49barsvc.exe [42504 2012-09-28] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 XobniService; C:\Program Files (x86)\Xobni\XobniService.exe [62184 2011-03-07] (Xobni Corporation)
S2 TelevisionFanaticService; C:\PROGRA~2\TELEVI~2\bar\1.bin\64barsvc.exe [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ARCVCAM; C:\Windows\System32\DRIVERS\ArcSoftVCapture.sys [32192 2010-11-11] (ArcSoft, Inc.)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [63336 2011-02-07] (Hewlett-Packard Company)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [243440 2014-08-18] (ESET)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [241368 2014-08-18] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [169280 2014-08-18] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [222280 2014-08-18] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44632 2014-08-18] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63160 2014-09-18] (ESET)
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248 2010-07-27] (Huawei Technologies Co., Ltd.)
R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [168008 2011-02-09] (McAfee, Inc.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1826048 2010-12-21] ()
S3 vNICdrv; C:\Windows\System32\DRIVERS\vNICdrv.sys [20024 2011-01-20] (Iomega Corporation)
S3 efavdrv; \??\C:\windows\system32\drivers\efavdrv.sys [X]
U3 aswMBR; \??\C:\Users\ENGR~1.BOK\AppData\Local\Temp\aswMBR.sys [X]
U3 aswVmm; \??\C:\Users\ENGR~1.BOK\AppData\Local\Temp\aswVmm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-30 10:35 - 2016-03-30 10:37 - 00024951 _____ C:\Users\Engr. Bokowe\Desktop\FRST.txt
2016-03-30 10:35 - 2016-03-30 10:37 - 00000000 ____D C:\FRST
2016-03-30 10:33 - 2016-03-30 10:33 - 00002386 _____ C:\Users\Engr. Bokowe\Desktop\aswMBR.txt
2016-03-30 10:33 - 2016-03-30 10:33 - 00000512 _____ C:\Users\Engr. Bokowe\Desktop\MBR.dat
2016-03-30 10:28 - 2016-03-30 09:47 - 00000000 ____D C:\Users\Engr. Bokowe\Desktop\_avast4_
2016-03-30 10:27 - 2016-03-30 10:28 - 00000000 ____D C:\Users\Engr. Bokowe\Desktop\_av4_
2016-03-30 10:19 - 2016-03-29 07:26 - 00083780 _____ C:\Users\Engr. Bokowe\Desktop\type.pdf.locky
2016-03-30 09:41 - 2016-03-30 08:49 - 02374144 _____ (Farbar) C:\Users\Engr. Bokowe\Desktop\FRST64.exe
2016-03-30 09:09 - 2016-03-30 08:48 - 05198336 _____ (AVAST Software) C:\Users\Engr. Bokowe\Desktop\aswMBR.exe
2016-03-29 14:15 - 2016-03-29 14:16 - 02760672 _____ C:\Users\Engr. Bokowe\Downloads\pandaunransom.exe
2016-03-29 14:06 - 2016-03-29 14:06 - 02991832 _____ (ESET) C:\Users\Engr. Bokowe\Downloads\ERARemover_x64.exe
2016-03-29 13:35 - 2016-03-29 13:58 - 00508342 _____ C:\windows\ntbtlog.txt
2016-03-29 12:33 - 2016-03-29 13:04 - 43786008 _____ C:\Users\Engr. Bokowe\Downloads\torbrowser-install-5.5.4_en-US.exe
2016-03-29 12:10 - 2016-03-29 12:45 - 10868379 _____ C:\Users\Engr. Bokowe\Downloads\Anti-CryptorBitV2.zip
2016-03-29 09:29 - 2016-03-29 09:27 - 1316758528 _____ C:\Users\Engr. Bokowe\Desktop\[removed]
2016-03-29 09:28 - 2016-03-29 09:27 - 2781299712 _____ C:\Users\Engr. Bokowe\Desktop\archive.pst
2016-03-29 09:27 - 2016-03-29 09:27 - 3429385216 _____ C:\Users\Engr. Bokowe\Desktop\Outlook.pst
2016-03-29 08:04 - 2016-03-29 08:04 - 17041976 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA740A6313753D287BE.locky
2016-03-29 08:04 - 2016-03-29 08:04 - 10968765 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7B8594F977EBC3772.locky
2016-03-29 08:04 - 2016-03-29 08:04 - 05407282 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7FA1CDBB5E1813A36.locky
2016-03-29 08:04 - 2016-03-29 08:04 - 03449643 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA77203D7D62028B10D.locky
2016-03-29 08:04 - 2016-03-29 08:04 - 01608129 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7C884C40754D9D301.locky
2016-03-29 08:04 - 2016-03-29 08:04 - 01297081 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA76DDB29C6E29BC5C7.locky
2016-03-29 08:04 - 2016-03-29 08:04 - 00001136 _____ C:\270FB73FE38F6BA7A9D5DF8B0AAC783A.locky
2016-03-29 08:03 - 2016-03-29 08:03 - 13255549 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7B05C05F220569E8A.locky
2016-03-29 08:01 - 2016-03-29 08:01 - 00006124 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7B6792B6CE8F6289D.locky
2016-03-29 07:53 - 2016-03-29 07:53 - 06711871 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA780D99D8BD68A47AB.locky
2016-03-29 07:53 - 2016-03-29 07:53 - 04993548 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7F94F81CCBBAC098F.locky
2016-03-29 07:53 - 2016-03-29 07:53 - 04993548 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA74FC9542657D0128E.locky
2016-03-29 07:53 - 2016-03-29 07:53 - 04608270 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7255F420C9E82405A.locky
2016-03-29 07:53 - 2016-03-29 07:53 - 02397393 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7CBBF0F45A25B748B.locky
2016-03-29 07:53 - 2016-03-29 07:53 - 01428760 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA70E81A27A018130F0.locky
2016-03-29 07:53 - 2016-03-29 07:53 - 00593815 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA79D36078B839D8BB6.locky
2016-03-29 07:53 - 2016-03-29 07:53 - 00336092 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA79446EFD12A14AA76.locky
2016-03-29 07:53 - 2016-03-29 07:53 - 00026768 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7478285BE7AB72E20.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00792552 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA795CFF6E9D73FED03.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00792552 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA757856A1706FC6A14.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00792552 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA74E47BE6556C42CEB.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00792470 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7A0236BAEF17FDC34.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00767842 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7D36AE807BDC20B08.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00767842 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA79B841F05B2E8C074.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00767842 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA751BA266D2DB023BF.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00697172 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7AC392EA8043570E0.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00617525 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7F68FA11D53DD05BC.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00608108 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA74BCB77FC9F0C9775.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00526159 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7D3C7158EA030B1C0.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00526159 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA71706DCDCA5C513DF.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00512245 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA79988386C3473871E.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00507240 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA71B29549591881DC5.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00465728 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7ADBBB1FF71C25A7C.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00424908 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7E90237CF0089C6DD.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00414042 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7F98D4DB77FBBA8B4.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00413457 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7DBE9CA98D8F21EEF.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00413423 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA78D950CE9985569A6.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00409210 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7654DD807240B0AB2.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00409210 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA709F1E4278A43A904.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00369321 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7155D67B4E3CB9C39.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00330261 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7677BF1D5C20FC05F.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00326852 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA73874FA985B192793.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00324083 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7B4E95542B63E0249.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00301191 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7ADFC99B03DC46C07.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00278867 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA700F7F9F80F1E7A24.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00261446 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7C95F159603385367.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00261446 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA77C1600042330A3A8.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00248838 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7ABD3CDBE82C6DEEF.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00248838 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA79F80F8D4254D9A7E.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00226586 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA703C682D4D4495DA4.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00179881 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA70EE8CE6DE213B73B.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00176505 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA798303FBFAB1270DF.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00097811 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7D0F3EBCF09B33D0E.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00051404 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7EE0A0065902C7608.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00038498 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA75BCCD3E42C79E84F.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00038498 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7466797F725EE7489.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00035060 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7F6A5288D30BA92A4.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00029849 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7C425083A7D4878E0.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00014811 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA75AC7F7034928B520.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00008298 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA73C8E8857B6A1DF37.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00001040 _____ C:\270FB73FE38F6BA738094174A632F263.locky
2016-03-29 07:37 - 2016-03-29 07:37 - 00000836 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7E2B3DC33B3CD5D45.locky
2016-03-29 07:34 - 2016-03-29 07:34 - 00378690 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7E4ED2BC6B1D36DCD.locky
2016-03-29 07:34 - 2016-03-29 07:34 - 00022402 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA77E91182D21C69BB7.locky
2016-03-29 07:34 - 2016-03-29 07:34 - 00006812 _____ C:\270FB73FE38F6BA748101BE5F18517D3.locky
2016-03-29 07:34 - 2016-03-29 07:34 - 00001151 _____ C:\_HELP_instructions.txt
2016-03-29 07:26 - 2016-03-29 07:26 - 00164323 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7A714C8A3B04816CD.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00164323 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA74DEBFCCC7342D6B7.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00164323 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA70B8CBD0B3CBBD69F.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00047940 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA76142A669F97B4F3D.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00036561 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7C258A4BA8BE1B7C8.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00034997 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7DB6491A0DA9726F3.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00032871 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA757933956520D9656.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00032871 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA73A9A0F78F9A10D82.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00018113 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA78A20D7A11F219B22.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00018085 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA75EDB342F33D1C6E0.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00014178 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA783C43363A57FF25E.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00014178 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA77C237C23F22AB767.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012557 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7E82DADFF8736ADF2.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012528 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA741030CEB9CA4BC5B.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012528 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7B592FAEE83F0C711.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012527 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7036B1926232503CF.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012526 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA75F2C3915E5E42BBB.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012223 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA78EA8E32154A4044D.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012221 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7EEFE75326B28C09B.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012204 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7E6C04D441B79A345.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012203 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7E3FADA9D6A468ABB.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012200 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA73B7383B6AFA39810.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012171 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7967EABD875310FC5.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012171 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA78819F222245BD03E.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00012170 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7ADCAA6D0A871F98F.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011862 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7952DFDDBB227C86B.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011843 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7A84C80D9E5E0D09E.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011840 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7EAF221A0EB8BCCC7.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011813 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7EC4999B754D3B753.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011813 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7CBD794EECB04D18B.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011813 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7B2D349F5D1B8A649.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011785 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7958DA5B3B48B402E.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011784 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7EBA332C742739204.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011784 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7D81932F81A6396A2.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011784 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA75F6CC7286C32B321.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011784 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA72246B8FC29A43905.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011782 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7AEAA044C3E4DF811.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00011122 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7FC5910D1642C4118.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00010864 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7544E315183103F5E.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00007898 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7E65D6C7A8ADB15D3.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00007879 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA78D483A0227421D17.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00007879 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA71535E9D58034DFCD.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00005375 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA74FBE4F984A5B55A8.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00005375 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA73DE17DB3A49A986E.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00005019 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA79E4B2FD05FA86B3F.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00004660 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7E5BA62E77D31FCFD.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00003595 _____ C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA791CD70B2D3E49164.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00002159 ____N C:\Users\Engr. Bokowe\Downloads\270FB73FE38F6BA7D57CA7AAB803460A.locky
2016-03-29 07:25 - 2016-03-29 07:25 - 00001151 _____ C:\Users\Engr. Bokowe\Downloads\_HELP_instructions.txt
2016-03-24 11:29 - 2016-03-24 12:08 - 05306560 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2016-03-23 07:33 - 2016-03-29 07:25 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\GAPS NASS Staff
2016-03-23 07:32 - 2016-03-29 07:25 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\GAPS - regular
2016-03-09 09:09 - 2016-02-09 07:53 - 00387792 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2016-03-09 09:09 - 2016-02-09 07:10 - 00341200 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2016-03-09 09:09 - 2016-02-08 22:05 - 20352512 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2016-03-09 09:09 - 2016-02-08 21:51 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2016-03-09 09:09 - 2016-02-08 21:39 - 00496640 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2016-03-09 09:09 - 2016-02-08 21:39 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2016-03-09 09:09 - 2016-02-08 21:38 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2016-03-09 09:09 - 2016-02-08 21:38 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2016-03-09 09:09 - 2016-02-08 21:37 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2016-03-09 09:09 - 2016-02-08 21:34 - 02280448 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2016-03-09 09:09 - 2016-02-08 21:32 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2016-03-09 09:09 - 2016-02-08 21:31 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2016-03-09 09:09 - 2016-02-08 21:30 - 00476160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2016-03-09 09:09 - 2016-02-08 21:28 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2016-03-09 09:09 - 2016-02-08 21:28 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2016-03-09 09:09 - 2016-02-08 21:28 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2016-03-09 09:09 - 2016-02-08 21:20 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2016-03-09 09:09 - 2016-02-08 21:16 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-03-09 09:09 - 2016-02-08 21:15 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2016-03-09 09:09 - 2016-02-08 21:13 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2016-03-09 09:09 - 2016-02-08 21:12 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2016-03-09 09:09 - 2016-02-08 21:11 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2016-03-09 09:09 - 2016-02-08 21:10 - 04611072 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2016-03-09 09:09 - 2016-02-08 21:10 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2016-03-09 09:09 - 2016-02-08 21:05 - 25816576 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2016-03-09 09:09 - 2016-02-08 21:03 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2016-03-09 09:09 - 2016-02-08 21:02 - 13012480 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2016-03-09 09:09 - 2016-02-08 21:02 - 00687104 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2016-03-09 09:09 - 2016-02-08 21:01 - 02050560 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2016-03-09 09:09 - 2016-02-08 21:01 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2016-03-09 09:09 - 2016-02-08 20:43 - 02121216 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2016-03-09 09:09 - 2016-02-08 20:39 - 01311744 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2016-03-09 09:09 - 2016-02-08 20:38 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2016-03-09 09:09 - 2016-02-08 19:41 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2016-03-09 09:09 - 2016-02-08 19:41 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2016-03-09 09:09 - 2016-02-08 19:27 - 02887680 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2016-03-09 09:09 - 2016-02-08 19:27 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2016-03-09 09:09 - 2016-02-08 19:26 - 00571904 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2016-03-09 09:09 - 2016-02-08 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2016-03-09 09:09 - 2016-02-08 19:26 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2016-03-09 09:09 - 2016-02-08 19:26 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2016-03-09 09:09 - 2016-02-08 19:19 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2016-03-09 09:09 - 2016-02-08 19:18 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2016-03-09 09:09 - 2016-02-08 19:16 - 06052352 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2016-03-09 09:09 - 2016-02-08 19:15 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2016-03-09 09:09 - 2016-02-08 19:14 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2016-03-09 09:09 - 2016-02-08 19:14 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2016-03-09 09:09 - 2016-02-08 19:13 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2016-03-09 09:09 - 2016-02-08 19:13 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2016-03-09 09:09 - 2016-02-08 19:06 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2016-03-09 09:09 - 2016-02-08 19:03 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2016-03-09 09:09 - 2016-02-08 18:55 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2016-03-09 09:09 - 2016-02-08 18:54 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2016-03-09 09:09 - 2016-02-08 18:52 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2016-03-09 09:09 - 2016-02-08 18:51 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2016-03-09 09:09 - 2016-02-08 18:49 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2016-03-09 09:09 - 2016-02-08 18:47 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2016-03-09 09:09 - 2016-02-08 18:37 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2016-03-09 09:09 - 2016-02-08 18:35 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2016-03-09 09:09 - 2016-02-08 18:34 - 00798720 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2016-03-09 09:09 - 2016-02-08 18:33 - 14613504 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2016-03-09 09:09 - 2016-02-08 18:33 - 02123264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2016-03-09 09:09 - 2016-02-08 18:33 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2016-03-09 09:09 - 2016-02-08 18:19 - 02597376 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2016-03-09 09:09 - 2016-02-08 18:07 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2016-03-09 09:09 - 2016-02-08 17:55 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2016-03-09 08:22 - 2016-02-12 19:52 - 03169792 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2016-03-09 08:22 - 2016-02-12 19:52 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2016-03-09 08:22 - 2016-02-12 19:52 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2016-03-09 08:22 - 2016-02-12 19:44 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2016-03-09 08:22 - 2016-02-12 19:39 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2016-03-09 08:22 - 2016-02-12 19:22 - 02610688 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2016-03-09 08:22 - 2016-02-12 19:19 - 00709120 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2016-03-09 08:22 - 2016-02-12 19:18 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2016-03-09 08:22 - 2016-02-12 19:18 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2016-03-09 08:22 - 2016-02-12 19:18 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2016-03-09 08:22 - 2016-02-12 19:18 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2016-03-09 08:22 - 2016-02-12 19:18 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2016-03-09 08:22 - 2016-02-12 19:06 - 00573440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2016-03-09 08:22 - 2016-02-12 19:05 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2016-03-09 08:22 - 2016-02-12 19:05 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2016-03-09 08:22 - 2016-02-12 19:05 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2016-03-09 08:22 - 2016-02-04 18:52 - 03211264 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2016-03-09 08:22 - 2016-02-03 19:58 - 00862208 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2016-03-09 08:22 - 2016-02-03 19:52 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\asycfilt.dll
2016-03-09 08:22 - 2016-02-03 19:49 - 00572416 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2016-03-09 08:22 - 2016-02-03 19:43 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\asycfilt.dll
2016-03-09 08:22 - 2016-02-03 19:07 - 00091648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
2016-03-09 08:22 - 2016-01-11 20:11 - 01684416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2016-03-09 08:22 - 2015-11-19 15:07 - 00994760 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00063840 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00020832 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00019808 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00016224 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00015712 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00013664 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00922432 _____ (Microsoft Corporation) C:\windows\SysWOW64\ucrtbase.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00066400 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00022368 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00019808 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00016224 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00015712 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00013664 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-09 08:22 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-09 08:17 - 2016-02-11 19:56 - 05572032 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2016-03-09 08:17 - 2016-02-11 19:56 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2016-03-09 08:17 - 2016-02-11 19:56 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2016-03-09 08:17 - 2016-02-11 19:52 - 01733592 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2016-03-09 08:17 - 2016-02-11 19:49 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2016-03-09 08:17 - 2016-02-11 19:49 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2016-03-09 08:17 - 2016-02-11 19:49 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2016-03-09 08:17 - 2016-02-11 19:49 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2016-03-09 08:17 - 2016-02-11 19:49 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2016-03-09 08:17 - 2016-02-11 19:49 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2016-03-09 08:17 - 2016-02-11 19:49 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2016-03-09 08:17 - 2016-02-11 19:49 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2016-03-09 08:17 - 2016-02-11 19:48 - 01214464 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2016-03-09 08:17 - 2016-02-11 19:48 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2016-03-09 08:17 - 2016-02-11 19:48 - 00344064 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2016-03-09 08:17 - 2016-02-11 19:48 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2016-03-09 08:17 - 2016-02-11 19:48 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2016-03-09 08:17 - 2016-02-11 19:47 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2016-03-09 08:17 - 2016-02-11 19:45 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2016-03-09 08:17 - 2016-02-11 19:45 - 00312320 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2016-03-09 08:17 - 2016-02-11 19:45 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2016-03-09 08:17 - 2016-02-11 19:45 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2016-03-09 08:17 - 2016-02-11 19:44 - 03994560 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2016-03-09 08:17 - 2016-02-11 19:44 - 03938240 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2016-03-09 08:17 - 2016-02-11 19:44 - 01461248 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2016-03-09 08:17 - 2016-02-11 19:44 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2016-03-09 08:17 - 2016-02-11 19:44 - 00730112 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2016-03-09 08:17 - 2016-02-11 19:44 - 00422400 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2016-03-09 08:17 - 2016-02-11 19:42 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2016-03-09 08:17 - 2016-02-11 19:42 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2016-03-09 08:17 - 2016-02-11 19:42 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 01314328 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00880128 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:41 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:38 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2016-03-09 08:17 - 2016-02-11 19:38 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2016-03-09 08:17 - 2016-02-11 19:38 - 00275456 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2016-03-09 08:17 - 2016-02-11 19:38 - 00171520 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2016-03-09 08:17 - 2016-02-11 19:38 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2016-03-09 08:17 - 2016-02-11 19:38 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2016-03-09 08:17 - 2016-02-11 19:38 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2016-03-09 08:17 - 2016-02-11 19:37 - 00251392 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2016-03-09 08:17 - 2016-02-11 19:37 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2016-03-09 08:17 - 2016-02-11 19:37 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2016-03-09 08:17 - 2016-02-11 19:35 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2016-03-09 08:17 - 2016-02-11 19:35 - 00223232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2016-03-09 08:17 - 2016-02-11 19:35 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2016-03-09 08:17 - 2016-02-11 19:34 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2016-03-09 08:17 - 2016-02-11 19:33 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2016-03-09 08:17 - 2016-02-11 19:31 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00642560 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 18:48 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2016-03-09 08:17 - 2016-02-11 18:43 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2016-03-09 08:17 - 2016-02-11 18:41 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2016-03-09 08:17 - 2016-02-11 18:40 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2016-03-09 08:17 - 2016-02-11 18:34 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2016-03-09 08:17 - 2016-02-11 18:34 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2016-03-09 08:17 - 2016-02-11 18:33 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2016-03-09 08:17 - 2016-02-11 18:32 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2016-03-09 08:17 - 2016-02-11 18:32 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2016-03-09 08:17 - 2016-02-11 18:32 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2016-03-09 08:17 - 2016-02-11 18:32 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2016-03-09 08:17 - 2016-02-11 18:32 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2016-03-09 08:17 - 2016-02-11 18:32 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2016-03-09 08:17 - 2016-02-11 18:31 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2016-03-09 08:17 - 2016-02-11 18:30 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 18:30 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 18:30 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 08:17 - 2016-02-11 18:30 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-09 08:17 - 2016-02-05 19:54 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2016-03-09 08:17 - 2016-02-05 19:54 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2016-03-09 08:17 - 2016-02-05 19:53 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2016-03-09 08:17 - 2016-02-05 19:53 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2016-03-09 08:17 - 2016-02-05 19:50 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2016-03-09 08:17 - 2016-02-05 19:44 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2016-03-09 08:17 - 2016-02-05 19:42 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2016-03-09 08:17 - 2016-02-05 18:48 - 00372736 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2016-03-09 08:17 - 2016-02-05 18:43 - 00299520 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2016-03-09 08:17 - 2016-02-05 18:43 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2016-03-09 08:17 - 2016-02-05 02:19 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\mfds.dll
2016-03-09 08:17 - 2016-02-04 19:41 - 00296448 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfds.dll
2016-03-09 08:15 - 2016-02-19 20:02 - 00038336 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2016-03-09 08:15 - 2016-02-19 19:54 - 01168896 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2016-03-09 08:15 - 2016-02-19 15:07 - 01373184 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2016-03-09 08:15 - 2016-02-11 15:07 - 00689152 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2016-03-09 08:15 - 2016-02-09 10:57 - 14634496 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2016-03-09 08:15 - 2016-02-09 10:57 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2016-03-09 08:15 - 2016-02-09 10:56 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\msdxm.ocx
2016-03-09 08:15 - 2016-02-09 10:56 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\dxmasf.dll
2016-03-09 08:15 - 2016-02-09 10:55 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\seclogon.dll
2016-03-09 08:15 - 2016-02-09 10:54 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\spwmp.dll
2016-03-09 08:15 - 2016-02-09 10:51 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2016-03-09 08:15 - 2016-02-09 10:51 - 11411456 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2016-03-09 08:15 - 2016-02-09 10:13 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\spwmp.dll
2016-03-09 08:15 - 2016-02-09 10:13 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdxm.ocx
2016-03-09 08:15 - 2016-02-09 10:13 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxmasf.dll
2016-03-09 08:15 - 2016-02-05 15:07 - 00696832 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2016-03-09 08:15 - 2016-02-05 15:07 - 00499200 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2016-03-09 08:15 - 2016-02-05 15:07 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-30 10:26 - 2012-02-13 09:18 - 00000000 ____D C:\Users\Engr. Bokowe\AppData\LocalLow\HPAppData
2016-03-30 10:24 - 2009-07-14 04:20 - 00000000 ____D C:\windows\tracing
2016-03-30 10:07 - 2014-01-29 07:44 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2016-03-30 09:11 - 2009-07-14 06:13 - 00782470 _____ C:\windows\system32\PerfStringBackup.INI
2016-03-30 09:11 - 2009-07-14 04:20 - 00000000 ____D C:\windows\inf
2016-03-30 07:25 - 2009-07-14 05:45 - 00022704 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-30 07:25 - 2009-07-14 05:45 - 00022704 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-30 07:18 - 2011-05-05 01:54 - 00000000 ____D C:\ProgramData\PDFC
2016-03-30 07:17 - 2015-02-24 16:39 - 00065536 _____ C:\windows\system32\Ikeext.etl
2016-03-30 07:17 - 2014-06-23 07:51 - 00000000 ____D C:\ProgramData\TorchCrashHandler
2016-03-30 07:17 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-03-29 14:07 - 2015-02-02 16:45 - 00000000 ____D C:\ProgramData\ESET
2016-03-29 08:38 - 2012-02-15 10:40 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\HIVOSYSTEMS
2016-03-29 08:05 - 2015-05-13 12:55 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\DAVID
2016-03-29 08:05 - 2013-08-12 11:42 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Experience
2016-03-29 08:04 - 2013-12-19 08:11 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Generators Price & Tech Specs
2016-03-29 08:03 - 2013-08-18 15:12 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Flash Drive
2016-03-29 08:02 - 2016-01-15 08:03 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\ABB Questionaire
2016-03-29 08:02 - 2012-02-15 11:18 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Research Works
2016-03-29 08:01 - 2012-11-15 09:18 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\POWER POINT PRESENTATION
2016-03-29 08:01 - 2012-02-15 16:57 - 00000000 ____D C:\MediaBrowser
2016-03-29 07:59 - 2012-02-15 11:17 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Site Photos
2016-03-29 07:57 - 2014-08-12 17:47 - 00000000 ____D C:\Users\Engr. Bokowe\Downloads\0024610008-(323257956110)_files
2016-03-29 07:57 - 2014-08-05 12:20 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Timberland  Engineered winches, hoists, sheaves, derricks and conductor handling equipment for the world’s most challenging projects_files
2016-03-29 07:57 - 2014-08-05 12:16 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\TSE Pullers, Tensioners, Reel Winders, Puller-Tensioners, Reel Stands and Carriers, Pilot Line Winders for Transmission Line Construction_files
2016-03-29 07:57 - 2014-08-05 12:09 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Trailers_files
2016-03-29 07:57 - 2014-08-05 11:40 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\XCMG cement mixer G06ZZ, View cement mixer G06ZZ, XCMG Product Details from Evangel Industrial (Shanghai) Co., Ltd. on Alibaba.com_files
2016-03-29 07:57 - 2014-08-05 10:37 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Transformer Oils _ Tulstar Products, Inc_files
2016-03-29 07:56 - 2014-08-05 12:25 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Hydralic Pullers for Overhead TX_files
2016-03-29 07:56 - 2014-08-05 11:33 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\mini excavator prices 15 tons crawler excavator XCMG XE150D, View mini excavator prices, XCMG Product Details from Evangel Industrial (Shanghai) Co., Ltd. on Alibaba.com_files
2016-03-29 07:52 - 2014-12-31 09:49 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\PTDF 33 KV Substation Equipment Datasheets & Foundation Details
2016-03-29 07:52 - 2014-01-28 11:08 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Memory Stick Content
2016-03-29 07:52 - 2013-11-27 08:44 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\RITA C KADIRI
2016-03-29 07:52 - 2013-10-09 07:33 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\SYN-TECH NIG LTD
2016-03-29 07:51 - 2014-01-08 08:13 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Cyndy Nkem Obi
2016-03-29 07:51 - 2012-02-15 10:40 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\BOKMAM LTD
2016-03-29 07:50 - 2014-07-18 14:23 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\(3) Evidence & details of successfully completed projects
2016-03-29 07:45 - 2013-12-16 16:41 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\AGBOR REPORTS
2016-03-29 07:38 - 2012-11-29 15:56 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\ABEKMO LTD
2016-03-29 07:37 - 2015-01-27 10:52 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\MailStore Home
2016-03-29 07:37 - 2014-06-30 07:01 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Mrs M C Bokowe
2016-03-29 07:37 - 2013-01-17 07:43 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Importation Processes
2016-03-29 07:37 - 2012-02-15 11:18 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\NSE REGISTRATION
2016-03-29 07:36 - 2012-02-13 09:15 - 00000000 ____D C:\ProgramData\WEBREG
2016-03-29 07:36 - 2011-05-05 01:50 - 00000000 ____D C:\ProgramData\HPQLOG
2016-03-29 07:34 - 2015-04-07 07:19 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\MAL
2016-03-29 07:34 - 2014-10-03 17:39 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Drafts Pastors Doc
2016-03-29 07:34 - 2014-02-17 08:29 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Engr Uareme testing details
2016-03-29 07:34 - 2013-12-04 13:43 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\RfPs for Bayelsa - Copy
2016-03-29 07:34 - 2012-11-29 15:57 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\KAMSONIC NIG LTD
2016-03-29 07:34 - 2012-02-15 16:57 - 00000000 ____D C:\crack
2016-03-29 07:34 - 2012-02-15 11:17 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\House Mgt
2016-03-29 07:34 - 2011-05-05 01:20 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2016-03-29 07:26 - 2015-06-05 19:13 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Upgrade of High Voltage Power Supply to the NASS Complex
2016-03-29 07:26 - 2014-07-17 17:42 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Local Content Plan
2016-03-29 07:25 - 2015-06-05 19:13 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\Facility Mgt of High & Low Voltage Equipments within the NASS Complex
2016-03-29 07:21 - 2016-02-25 16:00 - 00000000 ____D C:\Users\Engr. Bokowe\Documents\AGHOGHOR BOKOWE
2016-03-29 07:15 - 2015-04-07 16:51 - 00000000 ___SD C:\windows\SysWOW64\GWX
2016-03-29 07:15 - 2015-04-07 16:51 - 00000000 ___SD C:\windows\system32\GWX
2016-03-24 15:46 - 2015-11-12 15:33 - 00003348 _____ C:\windows\System32\Tasks\ESET Windows 10 upgrade – Refresh settings
2016-03-24 15:22 - 2014-01-29 07:44 - 00003768 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2016-03-24 12:08 - 2014-01-29 07:44 - 00797376 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2016-03-24 12:08 - 2014-01-29 07:44 - 00142528 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-21 16:43 - 2012-02-15 08:45 - 00000000 ____D C:\Users\Engr. Bokowe\AppData\Local\CrashDumps
2016-03-21 08:51 - 2012-02-11 16:06 - 00003228 _____ C:\windows\System32\Tasks\HPCeeScheduleForENGRBOKOWE-HP$
2016-03-21 08:51 - 2012-02-11 16:06 - 00000352 _____ C:\windows\Tasks\HPCeeScheduleForENGRBOKOWE-HP$.job
2016-03-16 06:48 - 2009-07-14 06:08 - 00032550 _____ C:\windows\Tasks\SCHEDLGU.TXT
2016-03-10 07:28 - 2016-02-15 14:10 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-03-10 07:05 - 2009-07-14 05:45 - 00494296 _____ C:\windows\system32\FNTCACHE.DAT
2016-03-09 17:24 - 2013-07-17 18:33 - 00000000 ____D C:\windows\system32\MRT
2016-03-09 17:20 - 2012-02-16 19:24 - 143659408 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2016-03-09 17:19 - 2014-12-11 07:11 - 00000000 ____D C:\windows\system32\appraiser

==================== Files in the root of some directories =======

2014-11-20 13:12 - 2014-11-20 13:12 - 0004096 ____H () C:\Users\Engr. Bokowe\AppData\Local\keyfile3.drm
2012-02-11 16:17 - 2012-02-11 16:17 - 0017408 _____ () C:\Users\Engr. Bokowe\AppData\Local\WebpageIcons.db
2012-02-13 09:00 - 2012-09-19 11:00 - 0001291 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\SysWOW64\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-09 07:26

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by [removed] (2016-03-30 10:39:09)
Running from C:\Users\[removed]\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-02-11 14:44:46)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-215815765-518078125-4221165855-500 - Administrator - Disabled)
Engr. Bokowe (S-1-5-21-215815765-518078125-4221165855-1001 - Administrator - Enabled) => C:\Users\Engr. Bokowe
Guest (S-1-5-21-215815765-518078125-4221165855-501 - Limited - Disabled)
Hivo (S-1-5-21-215815765-518078125-4221165855-1002 - Administrator - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Smart Security 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

4500_G510gm_Help (x32 Version: 000.0.439.000 - Hewlett-Packard) Hidden
4500G510gm (x32 Version: 000.0.423.000 - Hewlett-Packard) Hidden
4500G510gm_Software_Min (x32 Version: 000.0.423.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.4 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\…\Adobe Flash Player ActiveX) (Version: 21.0.0.197 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\…\Adobe Flash Player NPAPI) (Version: 21.0.0.197 - Adobe Systems Incorporated)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
ArcSoft TotalMedia (HKLM-x32\…\ArcSoft TotalMedia) (Version: 2.0.39.12 - ArcSoft)
ArcSoft TotalMedia (x32 Version: 1.0.48.25 - ArcSoft) Hidden
ArcSoft Webcam Sharing Manager (HKLM-x32\…\{190A7D93-3823-439C-91B9-ADCE3EC2A6A2}) (Version: 2.0.0.30 - ArcSoft)
AutoCAD 2010 - English (HKLM\…\AutoCAD 2010 - English) (Version: 18.0.55.0 - Autodesk)
AutoCAD 2010 - English (Version: 18.0.55.0 - Autodesk) Hidden
AutoCAD 2010 Language Pack - English (Version: 18.0.55.0 - Autodesk) Hidden
Autodesk DWF Viewer (HKLM-x32\…\Autodesk DWF Viewer) (Version: 6.5 - Autodesk, Inc.)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\…\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Build-a-Lot - The Elizabethan Era (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cisco EAP-FAST Module (HKLM-x32\…\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\…\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\…\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CorelDRAW Graphics Suite 12 (HKLM-x32\…\{505AFDC0-5E72-4928-8368-5DEA385E3647}) (Version: 12.0.0.458 - Corel Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
Device Access Manager for HP ProtectTools (HKLM\…\{55B52830-024A-443E-AF61-61E1E71AFA1B}) (Version: 6.0.0.9 - Hewlett-Packard Company)
DeviceDiscovery (x32 Version: 130.0.372.000 - Hewlett-Packard) Hidden
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DocMgr (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Drive Encryption For HP ProtectTools (HKLM\…\{8A0041CD-277C-4C1F-BFE4-7AC508B20B4C}) (Version: 6.0.33.24411 - Hewlett-Packard Company)
Energy Star Digital Logo (HKLM-x32\…\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
ESET Smart Security (HKLM\…\{D6AE843D-B858-4813-BAF6-6F0B266579EF}) (Version: 8.0.301.0 - ESET, spol s r. o.)
Etisalat Nigeria (HKLM-x32\…\Etisalat Nigeria) (Version: 23.009.09.02.533 - Huawei Technologies Co.,Ltd)
Evernote v. 4.2.2 (HKLM-x32\…\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.)
Face Recognition for HP ProtectTools (HKLM\…\{D3A775F2-2674-4452-8D80-1FC1446052EE}) (Version: 6.00.4303 - Hewlett-Packard Company)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
File Sanitizer For HP ProtectTools (HKLM-x32\…\{6D6ADF03-B257-4EA5-BBC1-1D145AF8D514}) (Version: 6.0.0.8 - Hewlett-Packard Company)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP 3D DriveGuard (HKLM\…\{83DA38AB-1014-41C2-A3CD-E2B93832A71A}) (Version: 4.1.4.1 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\…\{4B21E4B2-89B8-499D-803A-34ABF929401E}) (Version: 4.1.10.1 - Hewlett-Packard Company)
HP Customer Participation Program 13.0 (HKLM\…\HPExtendedCapabilities) (Version: 13.0 - HP)
HP DayStarter (HKLM\…\{483D5A49-A26B-4CB8-AA2D-0D1811322061}) (Version: 2.0.0.12 - Hewlett-Packard Company)
HP Document Manager 2.0 (HKLM\…\HP Document Manager) (Version: 2.0 - HP)
HP Documentation (HKLM-x32\…\{6A9C9BE1-14A3-42ED-A388-42E30A1412E9}) (Version: 1.2.0.0 - Hewlett-Packard)
HP ESU for Microsoft Windows 7 (HKLM-x32\…\{CFC1988A-F492-4BC5-B6F7-683A95718AE9}) (Version: 1.1.11.1 - Hewlett-Packard Company)
HP FWUpdateEDO3 (HKLM-x32\…\{A82D0C46-EBDF-4B27-A731-D06EF2056E81}) (Version: 1.0.0.0 - Hewlett-Packard Company)
HP Games (HKLM-x32\…\WildTangent hp Master Uninstall) (Version: 1.0.1.5 - WildTangent)
HP HotKey Support (HKLM\…\{7D1C63D1-6520-49DA-B738-958133526E80}) (Version: 4.0.10.1 - Hewlett-Packard Company)
HP Imaging Device Functions 13.0 (HKLM\…\HP Imaging Device Functions) (Version: 13.0 - HP)
HP LaserJet Professional CM1410 Series (HKLM-x32\…\{0EF0EA0D-F945-4958-85CC-60FF1E86D216}) (Version:  - Hewlett-Packard)
HP LJ CM1410 MFP Series HP Scan (HKLM-x32\…\{21749F4E-02A1-4828-9A1E-BBDF5929C5D0}) (Version: 1.0.302.0 - Hewlett-Packard Co.)
HP Officejet 4500 G510g-m (HKLM\…\{E5083D57-D93F-404C-A91F-1C50D67C2BEB}) (Version: 13.0 - HP)
HP Power Assistant (HKLM\…\{3D8EDF72-13CC-4E51-AAB6-32A20524D2E0}) (Version: 2.0.2.0 - Hewlett-Packard Company)
HP ProtectTools Security Manager (HKLM\…\HPProtectTools) (Version: 6.00.888 - Hewlett-Packard Company)
HP QuickWeb (HKLM-x32\…\{20976B1F-E910-404D-9261-C16EE7E12DC8}) (Version: 3.0.0.9057 - Hewlett-Packard Company)
HP Setup (HKLM-x32\…\{03046EBB-CB7C-4B98-BEFB-690EB955DA22}) (Version: 8.5.4526.3645 - Hewlett-Packard Company)
HP Smart Web Printing 4.5 (HKLM\…\HP Smart Web Printing) (Version: 4.5 - HP)
HP SoftPaq Download Manager (HKLM-x32\…\{344A1AA2-AC8E-4741-BDB0-65B68FDA883C}) (Version: 3.2.0.0 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\…\{B7F60A16-7A7B-41FB-9AE3-DE9E324FBA06}) (Version: 4.0.112.1 - Hewlett-Packard Company)
HP Software Setup (HKLM-x32\…\{531000B3-DBEE-4115-BBF3-DA48B67C053F}) (Version: 8.2.1.1 - Hewlett-Packard Company)
HP Solution Center 13.0 (HKLM\…\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Assistant (HKLM-x32\…\{E02FBF01-0DE3-4BCB-89E8-D300FEFC3289}) (Version: 5.2.3.4 - Hewlett-Packard Company)
HP System Default Settings (HKLM-x32\…\{54C65FE7-83BD-4A5B-A9B4-41F793C5F241}) (Version: 2.1.2 - Hewlett-Packard Company)
HP Update (HKLM-x32\…\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Wallpaper (HKLM-x32\…\{11C9A461-DD9D-4C71-85A4-6DCE7F99CC44}) (Version: 2.00 - Hewlett-Packard Company)
HP Webcam Driver (HKLM-x32\…\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.50058.0 - Sonix)
HPAsset component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
HPLaserJetHelp_LearnCenter (HKLM-x32\…\{22FE3793-5961-4ADE-AE66-69D9291C22B1}) (Version: 1.03.0000 - Hewlett-Packard)
hppCM1410LaserJetService (x32 Version: 001.008.00477 - Hewlett-Packard) Hidden
hppFaxDrvCM1410 (x32 Version: 003.000.00001 - Hewlett-Packard) Hidden
hppFaxUtilityCM1410 (x32 Version: 000.002.00001 - Hewlett-Packard) Hidden
hppLaserJetService (x32 Version: 002.015.00599 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
hppSendFaxCM1410 (x32 Version: 003.000.00001 - Hewlett-Packard) Hidden
hppTLBXFXCM1410 (x32 Version: 001.012.00948 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
hpzTLBXFX (x32 Version: 006.015.01163 - Hewlett-Packard) Hidden
I.R.I.S. OCR (HKLM-x32\…\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
IDT Audio (HKLM-x32\…\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6325.0 - IDT)
iLivid (HKU\S-1-5-21-215815765-518078125-4221165855-1001\…\iLivid) (Version: 5.0.0.4612 - Bandoo Media Inc) <==== ATTENTION
Insaniquarium Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Intel(R) Identity Protection Technology 1.0.71.0 (HKLM-x32\…\{2C43790E-8470-1027-82D3-DF319F3C410F}) (Version: 1.0.71.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\…\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\…\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\…\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
Iomega Product Registration (HKLM-x32\…\{90FF23FE-0E1B-40DF-A22E-B4C0372E5936}) (Version: 7.24.0000 - Iomega Corporation)
Iomega Storage Manager (HKLM-x32\…\Iomega Storage Manager) (Version: 1.1.0.35983 - EMC)
Jewel Quest II (x32 Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
JMicron Flash Media Controller Driver (HKLM-x32\…\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.57.2 - JMicron Technology Corp.)
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
MailStore Home 8.2.1.10082 (HKLM-x32\…\MailStore Home_universal1) (Version: 8.2.1.10082 - MailStore Software GmbH)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.6.1 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\…\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\…\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\…\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Save as PDF Add-in for 2007 Microsoft Office programs (HKLM-x32\…\{90120000-00B0-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\…\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\…\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\…\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\…\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft_VC90_CRT_x86 (HKLM-x32\…\{DF2035BE-5820-4965-BD97-7FAF8D4A7879}) (Version: 1.0.0 - Microsoft Corporation)
Mozilla Firefox 43.0.1 (x86 en-US) (HKLM-x32\…\Mozilla Firefox 43.0.1 (x86 en-US)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\…\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
Mozilla Thunderbird 31.4.0 (x86 en-US) (HKLM-x32\…\Mozilla Thunderbird 31.4.0 (x86 en-US)) (Version: 31.4.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\…\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\…\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MTN F@stLink (HKLM-x32\…\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.1 - ZTE Corporation)
Network64 (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 13.0 (HKLM\…\HPOCR) (Version: 13.0 - HP)
PDF Complete Special Edition (HKLM-x32\…\PDF Complete) (Version: 4.0.33 - PDF Complete, Inc)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Privacy Manager for HP ProtectTools (HKLM\…\{ACA53F68-B003-4D0E-9C3D-0C4EE09D08A8}) (Version: 6.00.831 - Hewlett-Packard Company)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\…\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 1.12.0016 - Realtek)
REALTEK Wireless LAN Driver (HKLM-x32\…\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.11.0323 - REALTEK Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\…\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
SDK (x32 Version: 2.24.025 - Portrait Displays, Inc.) Hidden
Shop for HP Supplies (HKLM\…\Shop for HP Supplies) (Version: 13.0 - HP)
Skype™ 7.0 (HKLM-x32\…\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
SmartWebPrinting (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\…\SynTPDeinstKey) (Version: 15.2.11.1 - Synaptics Incorporated)
TelevisionFanatic Toolbar (HKLM-x32\…\TelevisionFanaticbar Uninstall) (Version:  - Mindspark Interactive Network) <==== ATTENTION
Theft Recovery for HP ProtectTools (HKLM-x32\…\InstallShield_{ADC70B7A-530B-46E3-8384-48D22681A41E}) (Version: 6.0.0.30 - Hewlett-Packard Company)
Theft Recovery for HP ProtectTools (x32 Version: 6.0.0.30 - Hewlett-Packard Company) Hidden
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
Torch (HKU\S-1-5-21-215815765-518078125-4221165855-1001\…\Torch) (Version: 36.0.0.8226 - Torch Media, Inc) <==== ATTENTION
TrayApp (x32 Version: 130.0.376.000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\…\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Utility Chest Toolbar (HKLM-x32\…\UtilityChest_49bar Uninstall) (Version:  - Mindspark Interactive Network) <==== ATTENTION
Validity Fingerprint Sensor Driver (HKLM\…\{FFC3E41D-2C2B-45B7-9AD9-5EA19572DD26}) (Version: 4.3.117.0 - Validity Sensors, Inc.)
VIP Access SDK x64(1.0.0.50)  (HKLM-x32\…\VIP Access SDK) (Version: 1.0.0.50 - Symantec Inc.)
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\…\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
WinRAR 4.11 (32-bit) (HKLM-x32\…\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WinZip 14.5 (HKLM-x32\…\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}) (Version: 14.5.9095 - WinZip Computing, S.L. )
Xobni (HKLM-x32\…\XobniMain) (Version: 1.9.5.13282 - Xobni Corp.)
Xobni Core (x32 Version: 1.0.0 - Xobni, Inc.) Hidden
Yahoo! Toolbar (HKLM-x32\…\Yahoo! Companion) (Version:  - )
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-215815765-518078125-4221165855-1001_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-215815765-518078125-4221165855-1001_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-215815765-518078125-4221165855-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\AutoCAD 2010\acadficn.dll (Autodesk, Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {3DCB8327-E9DF-4ED1-9A31-692DD2DCFD73} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-12-09] (Hewlett-Packard Company)
Task: {427843C6-76E2-40F0-910D-4039E1C2DE4A} - System32\Tasks\HPCeeScheduleForENGRBOKOWE-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {43CCFB5F-A55C-441B-A58E-E1F8230DE60E} - System32\Tasks\{269F4D52-5574-4D28-B8C5-C486522CC4AC} => pcalua.exe -a G:\Setup.exe -d G:\
Task: {44F987AD-71EB-4F37-BC03-D5775606EDE7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {5DA1EB12-6294-4E1B-A0AB-1688BF0D007A} - System32\Tasks\Microsoft\Windows\Setup\xtgt\refreshxtgtconfig => C:\Windows\system32\XTgt\XTgtMgr.exe [2015-10-05] (Microsoft Corporation)
Task: {7596EA7D-B4B8-43B2-9E5E-813F4D6F5D85} - System32\Tasks\ESET Windows 10 upgrade – Refresh settings => C:\Program Files\Common Files\AV\ESET Smart Security 8.0\upgrade.exe [2015-11-23] (ESET)
Task: {8836E20D-ED2E-426B-8EA0-D5C00FB65F29} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-24] (Adobe Systems Incorporated)
Task: {E0A73749-6A53-4DFC-A541-9F5F4B7CE0BE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-12-09] (Hewlett-Packard Company)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\HPCeeScheduleForENGRBOKOWE-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Engr. Bokowe\Desktop\Facebook.lnk -> C:\Users\Engr. Bokowe\AppData\Local\Torch\Application\torch.exe (Torch Media Inc.) ->  –run-by-facebook hxxp://www.facebook.com
ShortcutWithArgument: C:\Users\Engr. Bokowe\Desktop\Free Games.lnk -> C:\Users\Engr. Bokowe\AppData\Local\Torch\Application\torch.exe (Torch Media Inc.) ->  hxxp://games.torchbrowser.com
ShortcutWithArgument: C:\Users\Engr. Bokowe\Desktop\Free Music.lnk -> C:\Users\Engr. Bokowe\AppData\Local\Torch\Application\torch.exe (Torch Media Inc.) ->  hxxp://music.torchbrowser.com
ShortcutWithArgument: C:\Users\Engr. Bokowe\Desktop\Youtube.lnk -> C:\Users\Engr. Bokowe\AppData\Local\Torch\Application\torch.exe (Torch Media Inc.) ->  –run-by-youtube hxxp://www.youtube.com

==================== Loaded Modules (Whitelisted) ==============

2011-01-31 19:54 - 2011-01-31 19:54 - 00107008 _____ () c:\Program Files\Hewlett-Packard\Pre-Boot Security for HP ProtectTools\BIOSDomainPlugin.dll
2011-02-09 20:04 - 2011-02-09 20:04 - 02905600 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeHpFve64.dll
2010-09-06 21:18 - 2010-09-06 21:18 - 01412608 _____ () C:\windows\system32\LIBEAY32.dll
2015-01-27 09:45 - 2012-11-12 06:59 - 00657504 _____ () C:\ProgramData\Etisalat Nigeria\OnlineUpdate\ouc.exe
2011-03-14 16:27 - 2011-03-14 16:27 - 00346976 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2011-02-09 19:28 - 2011-02-09 19:28 - 01318912 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
2014-12-20 10:40 - 2011-03-17 15:41 - 00261456 _____ () C:\Program Files (x86)\MTN F@stLink\AssistantServices.exe
2012-06-01 15:16 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2011-01-27 02:14 - 2011-01-27 02:14 - 00036408 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Remote.dll
2014-12-20 10:40 - 2011-03-17 15:41 - 00139088 _____ () C:\Program Files (x86)\MTN F@stLink\UIExec.exe
2011-05-05 01:56 - 2011-01-27 01:34 - 01083392 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\System.Data.SQLite.dll
2010-06-24 11:21 - 2010-06-24 11:21 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll
2015-01-27 09:45 - 2009-01-10 19:32 - 00011362 _____ () C:\ProgramData\Etisalat Nigeria\OnlineUpdate\mingwm10.dll
2015-01-27 09:45 - 2009-06-23 03:42 - 00043008 _____ () C:\ProgramData\Etisalat Nigeria\OnlineUpdate\libgcc_s_dw2-1.dll
2015-01-27 09:45 - 2012-10-31 10:11 - 02417152 _____ () C:\ProgramData\Etisalat Nigeria\OnlineUpdate\QtCore4.dll
2015-01-27 09:45 - 2012-10-31 10:14 - 01148416 _____ () C:\ProgramData\Etisalat Nigeria\OnlineUpdate\QtNetwork4.dll
2015-01-27 09:45 - 2012-11-12 04:48 - 00843264 _____ () C:\ProgramData\Etisalat Nigeria\OnlineUpdate\QueryStrategy.dll
2015-01-27 09:45 - 2012-10-31 10:11 - 00398336 _____ () C:\ProgramData\Etisalat Nigeria\OnlineUpdate\QtXml4.dll
2011-02-09 19:48 - 2011-02-09 19:48 - 02637824 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcEncryptionProviderPlugin.dll
2011-02-09 19:27 - 2011-02-09 19:27 - 00126976 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHostInterface.dll
2011-02-09 19:51 - 2011-02-09 19:51 - 02650112 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeHpDpHostPlugin.dll
2011-02-09 19:29 - 2011-02-09 19:29 - 02035712 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeCoreEncryptionPlugin.dll
2011-02-09 19:30 - 2011-02-09 19:30 - 01929216 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeProductDetectionPlugin.dll
2011-09-14 16:38 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2010-06-24 11:19 - 2010-06-24 11:19 - 00514570 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-215815765-518078125-4221165855-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Engr. Bokowe\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: [removed] - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: CryptSvc => 2

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B2D3BA98-68F5-47A5-868D-C1E6F278A051}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{900D6A16-8D89-4CC6-95A5-AE312874D0A4}] => (Allow) LPort=2869
FirewallRules: [{7F0B70FA-796D-49F0-9611-E03D9D0449CC}] => (Allow) LPort=1900
FirewallRules: [{7E6ABAC3-327B-430A-849A-BFDBFD352C0D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E53FE1FA-EB00-40CF-AF7A-C964B5087E57}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{D57B4A09-DEF7-4419-A76C-CBD8781A2A52}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{85BE609C-2B32-4F5A-850B-F9FF3244B404}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{FA33FC3E-C177-4C86-974B-F81AA6F5A2B0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{84BC41FB-3AEB-4F3D-A01F-13C636FDC021}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{1ED1AB6A-55EE-4DC4-8FBC-F98C23F1868F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{D5647817-8116-4DEE-9F13-94E0B94975C2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{5C19BAFC-F7BD-41C2-A61D-790AD890A1E6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{2ADF7552-40EE-4C68-A20E-1305D8BA9247}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{DBA64C24-E763-4D47-BB71-998D3F03CE68}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{DD39D812-B6F9-4E35-BBE8-5E7077A5BAA0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{F6F943B4-A86F-4F1E-93F7-C66014CB265B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{7CDF7BDF-C39A-4992-8434-AAFEFECC8B09}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{755EB9E8-A8D2-4EA3-AA91-DE36305EF13D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{FCC6BBA1-8876-49A9-B138-7157B890C8DC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{EA6A266F-67F5-49E1-8A51-B79970F4319B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{32BEAF7E-AD98-4DE1-9C4E-E08B21617656}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{470DD3A1-822B-4BBF-BE39-F177E5DC4DB5}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{DEC4CCE5-01BB-4B3C-8F58-1B804B2BAE25}] => (Allow) G:\Installer\hpbcsiInstaller.exe
FirewallRules: [{0502A8DF-CF62-4B7E-9C3E-61430FC9B708}] => (Allow) G:\Installer\hpbcsiInstaller.exe
FirewallRules: [{1188C4F0-E1E2-484C-A271-432CBBC35F90}] => (Allow) C:\Users\Engr. Bokowe\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{FA6536EB-E9FF-48C4-84FF-FD4E2E6C3E08}] => (Allow) C:\Users\Engr. Bokowe\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{B378B096-874B-4045-95B5-8404F5667ABC}] => (Allow) C:\Users\Engr. Bokowe\AppData\Local\Torch\Application\torch.exe
FirewallRules: [{CB830052-E837-43C5-B553-A56E49C3F9E4}] => (Allow) C:\Users\Engr. Bokowe\AppData\Local\Torch\Plugins\Hola\hola_plugin.exe
FirewallRules: [{88415A8A-450A-4E10-A27F-2E521127DFE2}] => (Allow) C:\Users\Engr. Bokowe\AppData\Local\Torch\Plugins\Hola\hola_plugin_x64.exe
FirewallRules: [{C2E3EECE-BC23-42C9-8DFC-D434D000F482}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8A4002C4-8DD0-4AAA-B752-593E1446E3F4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: Iomega Virtual Ethernet Adapter
Description: Iomega Virtual Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Iomega
Service: vNICdrv
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/30/2016 10:37:38 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program FRST64.exe version 5.3.2016.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 9e4

Start Time: 01d18a676b663a04

Termination Time: 0

Application Path: C:\Users\Engr. Bokowe\Desktop\FRST64.exe

Report Id: f23e00c9-f65a-11e5-a070-101f74e8ac0e

Error: (03/30/2016 08:51:02 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/29/2016 03:07:51 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program OUTLOOK.EXE version 12.0.6744.5000 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 908

Start Time: 01d189bd5e382a72

Termination Time: 15

Application Path: C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE

Report Id: 92ed76e8-f5b7-11e5-931a-101f74e8ac0e

Error: (03/29/2016 02:13:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 11.0.9600.18231 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 123c

Start Time: 01d189bcab950a7c

Termination Time: 16

Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Report Id:

Error: (03/29/2016 02:00:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: HPLaserJetService.exe, version: 2.15.599.0, time stamp: 0x4cc5ee57
Faulting module name: hppccompio.DLL, version: 1.3.0.24, time stamp: 0x4c9685d0
Exception code: 0xc0000417
Fault offset: 0x000073bf
Faulting process id: 0x53c
Faulting application start time: 0xHPLaserJetService.exe0
Faulting application path: HPLaserJetService.exe1
Faulting module path: HPLaserJetService.exe2
Report Id: HPLaserJetService.exe3

Error: (03/29/2016 01:44:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: HPLaserJetService.exe, version: 2.15.599.0, time stamp: 0x4cc5ee57
Faulting module name: hppccompio.DLL, version: 1.3.0.24, time stamp: 0x4c9685d0
Exception code: 0xc0000417
Fault offset: 0x000073bf
Faulting process id: 0x3fc
Faulting application start time: 0xHPLaserJetService.exe0
Faulting application path: HPLaserJetService.exe1
Faulting module path: HPLaserJetService.exe2
Report Id: HPLaserJetService.exe3

Error: (03/29/2016 01:43:03 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: )
Description: The Cryptographic Services service failed to initialize the VSS backup "System Writer" object.

Details:
Could not query the status of the EventSystem service.

System Error:
A system shutdown is in progress.
.

Error: (03/29/2016 01:29:53 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/29/2016 09:17:39 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Explorer.EXE version 6.1.7601.19135 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 7cc

Start Time: 01d1898bfc69fc3c

Termination Time: 203

Application Path: C:\windows\Explorer.EXE

Report Id: b08c1859-f586-11e5-9ab9-101f74e8ac0e

Error: (03/29/2016 08:52:34 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 11.0.9600.18231 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1294

Start Time: 01d1898fe34d1c55

Termination Time: 15

Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Report Id:


System errors:
=============
Error: (03/30/2016 07:48:40 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 20.

Error: (03/30/2016 07:17:50 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Utility ChestService service failed to start due to the following error:
%%5

Error: (03/30/2016 07:17:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The TelevisionFanaticService service failed to start due to the following error:
%%2

Error: (03/30/2016 07:17:19 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Etisalat Nigeria. OUC service failed to start due to the following error:
%%1053

Error: (03/30/2016 07:17:19 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Etisalat Nigeria. OUC service to connect.

Error: (03/29/2016 03:32:55 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: The name "WORKGROUP      :1d" could not be registered on the interface with IP address 192.168.1.104.
The computer with the IP address 192.168.1.101 did not allow the name to be claimed by
this computer.

Error: (03/29/2016 03:27:44 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: The name "WORKGROUP      :1d" could not be registered on the interface with IP address 192.168.1.104.
The computer with the IP address 192.168.1.101 did not allow the name to be claimed by
this computer.

Error: (03/29/2016 02:54:34 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 20.

Error: (03/29/2016 02:01:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The HP LaserJet Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/29/2016 02:00:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Utility ChestService service failed to start due to the following error:
%%5


CodeIntegrity:
===================================
  Date: 2014-12-12 07:31:30.515
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-12 07:31:30.500
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-12 07:26:52.755
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-12 07:26:52.739
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-13 07:16:40.283
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-13 07:16:40.267
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-13 07:16:40.251
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-13 07:16:40.251
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-13 07:13:52.207
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-13 07:13:52.113
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3-2330M CPU @ 2.20GHz
Percentage of memory in use: 66%
Total physical RAM: 4030.37 MB
Available physical RAM: 1360.85 MB
Total Virtual: 8058.94 MB
Available Virtual: 5073.09 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:443.66 GB) (Free:321.42 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: () (Removable) (Total:3.73 GB) (Free:3.69 GB) FAT32
Drive e: (HP_RECOVERY) (Fixed) (Total:16.8 GB) (Free:2.54 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:4.98 GB) (Free:2.12 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 4166D6A8)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=443.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=16.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=5 GB) - (Type=0C)

========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================

 

FYI…The way the forum works is when you start a new topic in any of our forums it also places the topic in Unreplied Topics so our helpers can find someone to help, when you replied to your own topic it removed you from Unreplied Topics and shows that your being helped.

You have quite a mess going on, first if you can go to Programs and Features in the Control Panel and see if you can uninstall these

Start
CloseProcesses:
CreateRestorePoint: 
HKLM-x32\…\Run: [] => [X]
HKU\S-1-5-21-215815765-518078125-4221165855-1001\…\Run: [iLivid] => C:\Users\Engr. Bokowe\AppData\Local\iLivid\iLivid.exe [7913472 2014-05-25] (Bandoo Media Inc.)
HKU\S-1-5-21-215815765-518078125-4221165855-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.mywebsearch.com/index.jhtml?n=77DE8857&ptnrS;=XPxdm116YYde&ptb;=72AEE93D-C283-441E-971F-20C52A569066&si;=COfzgZvF7rECFQ0htAodj3IAJQ
URLSearchHook: HKU\S-1-5-21-215815765-518078125-4221165855-1001 - (No Name) - {0696f815-a3a9-490a-bb14-9ec3350b1276} - C:\Program Files (x86)\TelevisionFanatic\bar\1.bin\64SrcAs.dll (MindSpark)
URLSearchHook: HKU\S-1-5-21-215815765-518078125-4221165855-1001 - (No Name) - {7a55cbb2-2b2e-4a41-9de1-6ac5d2c2be0a} - C:\Program Files (x86)\UtilityChest_49\bar\1.bin\49SrcAs.dll No File
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://search.ask.com/web?q={searchterms}&l;=dis&o;=CMNTDF
SearchScopes: HKLM-x32 -> {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm116YYde&ptnrS;=XPxdm116YYde&si;=COfzgZvF7rECFQ0htAodj3IAJQ&ptb;=72AEE93D-C283-441E-971F-20C52A569066&psa;=&ind;=2012081707&st;=sb&n;=77edee2b&searchfor;={searchTerms}
SearchScopes: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> DefaultScope {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm116YYde&ptnrS;=XPxdm116YYde&si;=COfzgZvF7rECFQ0htAodj3IAJQ&ptb;=72AEE93D-C283-441E-971F-20C52A569066&psa;=&ind;=2012081707&st;=sb&n;=77edee2b&searchfor;={searchTerms}
SearchScopes: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://search.ask.com/web?q={searchterms}&l;=dis&o;=CMNTDF
SearchScopes: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm116YYde&ptnrS;=XPxdm116YYde&si;=COfzgZvF7rECFQ0htAodj3IAJQ&ptb;=72AEE93D-C283-441E-971F-20C52A569066&psa;=&ind;=2012081707&st;=sb&n;=77edee2b&searchfor;={searchTerms}
BHO-x32: Toolbar BHO -> {cb41fc95-f1b3-4797-8bb6-1012ff62abba} -> C:\Program Files (x86)\TelevisionFanatic\bar\1.bin\64bar.dll [2012-08-17] ()
Toolbar: HKLM-x32 - TelevisionFanatic - {c98d5b61-b0ea-4d48-9839-1079d352d880} - C:\Program Files (x86)\TelevisionFanatic\bar\1.bin\64bar.dll [2012-08-17] ()
Toolbar: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> No Name - {CF67755F-9265-449C-87CF-B945519E073B} -  No File
Toolbar: HKU\S-1-5-21-215815765-518078125-4221165855-1001 -> No Name - {C98D5B61-B0EA-4D48-9839-1079D352D880} -  No File
FF Plugin-x32: @TelevisionFanatic.com/Plugin -> C:\Program Files (x86)\TelevisionFanatic\bar\1.bin\NP64Stub.dll [2012-08-17] ()
FF Plugin-x32: @UtilityChest_49.com/Plugin -> C:\Program Files (x86)\UtilityChest_49\bar\1.bin\NP49Stub.dll [2012-09-28] ()
FF Plugin-x32: TorchVLC -> C:\Users\Engr. Bokowe\AppData\Local\Torch\Plugins\Video\VLC\npvlc.dll [2013-07-30] (VideoLAN)
FF Extension: Allin1Convert - C:\Users\Engr. Bokowe\AppData\Roaming\Mozilla\Firefox\Profiles\ui0mlt9x.default\Extensions\[removed] [2015-10-12] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\TelevisionFanatic\bar\1.bin
FF Extension: No Name - C:\Program Files (x86)\TelevisionFanatic\bar\1.bin [2015-02-02] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [49ffxtbr@UtilityChest_49.com] - C:\Program Files (x86)\UtilityChest_49\bar\1.bin
FF Extension: No Name - C:\Program Files (x86)\UtilityChest_49\bar\1.bin [2015-02-02] [not signed]
R2 TorchCrashHandler; C:\Users\Engr. Bokowe\AppData\Local\Torch\Update\TorchCrashHandler.exe [1217032 2014-10-29] (TorchMedia Inc.) <==== ATTENTION
S2 UtilityChest_49Service; C:\Program Files (x86)\UtilityChest_49\bar\1.bin\49barsvc.exe [42504 2012-09-28] () [File not signed
S2 TelevisionFanaticService; C:\PROGRA~2\TELEVI~2\bar\1.bin\64barsvc.exe [X]
ShortcutWithArgument: C:\Users\Engr. Bokowe\Desktop\Facebook.lnk -> C:\Users\Engr. Bokowe\AppData\Local\Torch\Application\torch.exe (Torch Media Inc.) ->  –run-by-facebook hxxp://www.facebook.com
ShortcutWithArgument: C:\Users\Engr. Bokowe\Desktop\Free Games.lnk -> C:\Users\Engr. Bokowe\AppData\Local\Torch\Application\torch.exe (Torch Media Inc.) ->  hxxp://games.torchbrowser.com
ShortcutWithArgument: C:\Users\Engr. Bokowe\Desktop\Free Music.lnk -> C:\Users\Engr. Bokowe\AppData\Local\Torch\Application\torch.exe (Torch Media Inc.) ->  hxxp://music.torchbrowser.com
ShortcutWithArgument: C:\Users\Engr. Bokowe\Desktop\Youtube.lnk -> C:\Users\Engr. Bokowe\AppData\Local\Torch\Application\torch.exe (Torch Media Inc.) ->  –run-by-youtube hxxp://www.youtube.com
FirewallRules: [{1188C4F0-E1E2-484C-A271-432CBBC35F90}] => (Allow) C:\Users\Engr. Bokowe\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{FA6536EB-E9FF-48C4-84FF-FD4E2E6C3E08}] => (Allow) C:\Users\Engr. Bokowe\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{B378B096-874B-4045-95B5-8404F5667ABC}] => (Allow) C:\Users\Engr. Bokowe\AppData\Local\Torch\Application\torch.exe
FirewallRules: [{CB830052-E837-43C5-B553-A56E49C3F9E4}] => (Allow) C:\Users\Engr. Bokowe\AppData\Local\Torch\Plugins\Hola\hola_plugin.exe
FirewallRules: [{88415A8A-450A-4E10-A27F-2E521127DFE2}] => (Allow) C:\Users\Engr. Bokowe\AppData\Local\Torch\Plugins\Hola\hola_plugin_x64.exe
CMD: ipconfig /flushdns
Hosts:
EmptyTemp:
End