Spyware / Malware / Virus Removal

Have YT Downloader removed [Solved]

4 min read

Looking for the outcome? Ask AI

kangaroo Topic Starter

Post #1March 31, 2016, 1:18 PM UTC

A neighbour has left her laptop (Toshiba Satellite Win7 home premium 64-bit) with me. She only uses this to use a business portal that requires Internet Explorer v8 (yes, some poor business practices still exist!). Windows automatic updates had installed IEv11 recently and at about the same time YT Downloader was also installed (and its icon showed in the system tray). This seemed to run "mini movies" when she started IE. She had purchased, installed and run Trend Micro Internet Security but it found no problems.

I used the Installed Updates facility to uninstall the IEv11 update and this reverted IE to v8.

I checked Control Panel | Programs but YT Downloader was not listed. There was a YT Downloader folder on the Start menu.

I installed and ran Malwarebytes but it only found 7 PUPs which I deleted.

I then ran a full scan with Trend Micro but it found no problems.

I installed Revo Uninstaller but YT Downloader was not listed. I used the Hunter mode on the System tray icon and used the Advanced mode to uninstall YT Downloader.

The "mini movies" problem has not re-appeared.

I would like advice on whether this should have fixed the problem. Can I confirm that the PC is now malware-free? Also what should I do to fix the slow PC problem; is it malware related?

Your assistance will be much appreciated.

ken545

Post #2March 31, 2016, 3:41 PM UTC

Let me see the reports from some scans so I can see whats going on

[external image: 1QYkxTZ.jpg] Please download aswMBR to your desktop.

Right click the aswMBR icon and select Run as Administrator

XP users just Double Click it to run

If it says that this computer supports VIRTUALIZATION TECHNOLOGY do you want to use it say Yes

Click the Scan button to start scan.

Select Quickscan on the dropdown list

If you are asked to update the Avast Virus database please allow it to do so.

The scan could take 20 minutes or more , please be patient and let it finish

It will say Scan Finished when its done.

When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply.

I just want to see the report….Please Do Not Fix Anything

============================================================================

Please download Farbar Recovery Scan Tool and save it to your DESKTOP

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

How to determine whether a computer is running a 32-bit version or 64-bit version of the Windows operating system

A simple way to check your system: Start –> Computer (right click) –> Properties

[external image: FRST_zps5d956a1a.jpg]

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.

Just keep the defaults as in the picture checkmarked

Press Scan button.

It will produce a log called FRST.txt in the same directory the tool is run from.

Please copy and paste log back here.

The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

kangaroo

Post #3April 1, 2016, 9:33 AM UTC last edited April 1, 2016, 9:38 AM UTC

Thanks for your help, Ken545.

My first run of the aswMBR scan aborted and the PC rebooted (I had started teh scan and gone to put the car away so am not sure what happened).

The second scan ran for 14 minutes then seemed to stick on one location for a further 12 minutes before the files being scanned scrolled by. This scan finished normally and the log saved.

Here is the log:

aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2016-04-01 17:49:46
—————————–
17:49:46.107    OS Version: Windows x64 6.1.7601 Service Pack 1
17:49:46.107    Number of processors: 2 586 0x170A
17:49:46.107    ComputerName: OWNER-PC UserName: Owner
17:49:49.617    Initialize success
17:49:50.413    VM: initialized successfully
17:49:50.413    VM: Intel CPU supported
17:50:00.298    VM: disk I/O iaStorA.sys
17:50:35.180    AVAST engine defs: 16033102
17:50:44.400    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000006a
17:50:44.400    Disk 0 Vendor: ATA_____ A230 Size: 476940MB BusType: 11
17:50:44.509    Disk 0 MBR read successfully
17:50:44.509    Disk 0 MBR scan
17:50:44.540    Disk 0 Windows 7 default MBR code
17:50:44.540    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
17:50:44.540    Disk 0 default boot code
17:50:44.571    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS       476838 MB offset 206848
17:50:44.727    Disk 0 scanning C:\Windows\system32\drivers
17:51:13.790    Service scanning
17:52:15.895    Modules scanning
17:52:15.910    Disk 0 trace - called modules:
17:52:15.926    ntoskrnl.exe CLASSPNP.SYS disk.sys iaStorF.sys storport.sys hal.dll iaStorA.sys
17:52:15.926    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004cec060]
17:52:15.942    3 CLASSPNP.SYS[fffff8800101543f] -> nt!IofCallDriver -> [0xfffffa8004ce7750]
17:52:15.957    5 iaStorF.sys[fffff880018019a0] -> nt!IofCallDriver -> \Device\0000006a[0xfffffa8004830060]
17:52:17.158    AVAST engine scan C:\Windows
17:52:21.792    AVAST engine scan C:\Windows\system32
18:00:31.065    AVAST engine scan C:\Windows\system32\drivers
18:01:02.381    AVAST engine scan C:\Users\Owner
18:21:47.031    AVAST engine scan C:\ProgramData
18:24:40.382    Disk 0 statistics 5519757/0/0 @ 2.93 MB/s
18:24:40.382    Scan finished successfully
19:10:33.513    Disk 0 MBR has been saved successfully to "C:\Users\Owner\Desktop\mccc actions\MBR.dat"
19:10:33.529    The log file has been saved successfully to "C:\Users\Owner\Desktop\mccc actions\aswMBR.txt"

I then ran the Farbar scan and saved the two logs:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by [removed] (administrator) on OWNER-PC (01-04-2016 19:21:26)
Running from C:\Users\[removed]\Desktop\mccc actions
[removed] Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\TMIDS\PwmSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\Trend Micro\TMIDS\tower\PwmTower.exe
() C:\Program Files\Trend Micro\TMIDS\tower\PwmTower.exe
() C:\Program Files\Trend Micro\TMIDS\tower\PwmTower.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\…\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2818800 2014-08-25] (Synaptics Incorporated)
HKLM\…\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [246264 2015-07-17] (Trend Micro Inc.)
HKLM\…\Run: [Platinum] => C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe [1258496 2015-07-17] (Trend Micro Inc.)
HKLM\…\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\…\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1298456 2015-04-20] (CANON INC.)
HKLM-x32\…\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\Run: [Mobile Partner] => C:\Program Files (x86)\Optus 3G WiFi Modem\Optus 3G WiFi Modem
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\MountPoints2: {520599a8-9d16-11e5-9158-002622f790ea} - E:\AutoRun.exe
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\MountPoints2: {56e44ee2-8c0b-11e5-8e28-002622f790ea} - E:\AutoRun.exe
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\MountPoints2: {56e44ef6-8c0b-11e5-8e28-002622f790ea} - F:\AutoRun.exe
ShellIconOverlayIdentifiers: [ATFPUOverlayIcon] -> {3239DBC1-B76D-4dc7-8B29-D99CBA3C7336} => C:\Program Files\TOSHIBA\TFPU\TFPUOverlayIcon.dll [2010-03-01] (TOSHIBA)
Startup: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2016-03-31]
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{182C8079-68DB-45A5-92F2-14219E5EFD22}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{916E8177-5B8E-4DDD-98D8-5A4F4ABDA8A2}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{BEA06327-9D37-4C4F-9FFC-093128DF1B17}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://ninemsn.com.au/
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2015-12-22] (Trend Micro Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Trend Micro Network Filter Plugin -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.8.1222\2.0.1084\TmopIEPlg.dll [2015-07-17] (Trend Micro Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\TmBpIe64.dll [2015-08-17] (Trend Micro Inc.)
BHO-x32: TFPUPWDBankBHO Class -> {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} -> C:\Program Files\TOSHIBA\TFPU\x86\TFPUPWDBankBHO.dll [2010-03-01] (TODO: )
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO-x32: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2015-12-22] (Trend Micro Inc.)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-03-08] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Trend Micro Network Filter Plugin -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.8.1222\2.0.1084\TmopIEPlg32.dll [2015-07-17] (Trend Micro Inc.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\TmBpIe32.dll [2015-08-17] (Trend Micro Inc.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-04-01] (Microsoft Corporation.)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-08] (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM - Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2015-12-22] (Trend Micro Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-04-01] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2015-12-22] (Trend Micro Inc.)
Toolbar: HKU\S-1-5-21-4007946012-266125307-3815581551-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\TmBpIe64.dll [2015-08-17] (Trend Micro Inc.)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\TmBpIe32.dll [2015-08-17] (Trend Micro Inc.)
Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.8.1222\2.0.1084\TmopIEPlg.dll [2015-07-17] (Trend Micro Inc.)
Handler-x32: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.8.1222\2.0.1084\TmopIEPlg32.dll [2015-07-17] (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2015-12-22] (Trend Micro Inc.)
Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2015-12-22] (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ProToolbarIMRatingActiveX.dll [2015-07-17] (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll [2015-07-17] (Trend Micro Inc.)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2015-12-11] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-12-11] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2015-12-11] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-12-11] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\73rvtbwi.default
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-17] (VideoLAN)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-03-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-03-08] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-04-01] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-02-09] (Adobe Systems Inc.)
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\firefoxextension [2016-03-03]
FF HKLM\…\Firefox\Extensions: [{C1CA7765-44E4-452e-9D00-A04F3D434281}] - => not found
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\firefoxextension
FF HKLM-x32\…\Firefox\Extensions: [{C1CA7765-44E4-452e-9D00-A04F3D434281}] - C:\Program Files\TOSHIBA\TFPU\FirefoxAddin
FF Extension: Automatic password input in Fx - C:\Program Files\TOSHIBA\TFPU\FirefoxAddin [2015-09-05] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\firefoxextension
FF HKLM-x32\…\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2016-03-17]
FF HKLM-x32\…\Firefox\Extensions: [{BBB77B49-9FF4-4d5c-8FE2-92B1D6CD696C}] - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension
FF Extension: Trend Micro Osprey Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension [2016-03-03]

Chrome:
=======
CHR HomePage: Default -> hxxp://www-searching.com/?pid=s&s;=FCGzairdk0777,2108d3e4-f7c2-4091-85de-9069eb9ae860&vp;=ch&prd;=set_ch
CHR StartupUrls: Default -> "hxxp://www-searching.com/?pid=s&s;=FCGzairdk0777,2108d3e4-f7c2-4091-85de-9069eb9ae860&vp;=ch&prd;=set_ch"
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-05]
CHR Extension: (Google Docs) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-05]
CHR Extension: (Google Drive) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-28]
CHR Extension: (YouTube) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-08]
CHR Extension: (Google Search) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Google Sheets) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-05]
CHR Extension: (Google Docs Offline) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-31]
CHR Extension: (Google Keep - notes and lists) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2016-04-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-05]
CHR Extension: (Trend Micro Toolbar) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohhcpmplhhiiaoiddkfboafbhiknefdf [2016-03-08]
CHR Extension: (Gmail) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-05]
CHR HKLM-x32\…\Chrome\Extension: [ohhcpmplhhiiaoiddkfboafbhiknefdf] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2014-01-15] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 Platinum Host Service; C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe [1137664 2015-07-17] (Trend Micro Inc.)
R2 PwmSvc; C:\Program Files\Trend Micro\TMIDS\PwmSvc.exe [1567288 2016-03-19] (Trend Micro Inc.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [191728 2014-08-25] (Synaptics Incorporated)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X]
S4 BrsHelper; [X]
S2 DGPNPSEV; E:\!Hi-Tech-Work\DriverGenius2013\DgService.exe [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 DVB7700ALL; C:\Windows\System32\Drivers\dvb7700all.sys [711168 2013-07-31] (DiBcom)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-11] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-12-11] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-01] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2014-08-25] (Synaptics Incorporated)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [133424 2015-11-23] (Trend Micro Inc.)
R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [324912 2015-11-23] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [59712 2015-06-12] (Trend Micro Inc.)
R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [116576 2015-06-09] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [99632 2015-11-23] (Trend Micro Inc.)
R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [416608 2015-05-29] (Trend Micro Inc.)
R1 tmumh; C:\Windows\System32\DRIVERS\TMUMH.sys [91536 2015-06-29] (Trend Micro Inc.)
R2 tmusa; C:\Windows\System32\DRIVERS\tmusa.sys [116528 2015-06-27] (Trend Micro Inc.)
S2 DgSafe; system32\drivers\DgSafe.sys [X]
U3 aswMBR; \??\C:\Users\Owner\AppData\Local\Temp\aswMBR.sys [X]
U3 aswVmm; \??\C:\Users\Owner\AppData\Local\Temp\aswVmm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-01 19:21 - 2016-04-01 19:21 - 00000000 ____D C:\FRST
2016-04-01 17:45 - 2016-04-01 17:45 - 00291200 _____ C:\Windows\Minidump\040116-24944-01.dmp
2016-04-01 11:23 - 2016-04-01 19:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-04-01 10:54 - 2016-04-01 10:54 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-04-01 10:54 - 2016-04-01 10:54 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-04-01 10:11 - 2016-04-01 10:11 - 00000000 ____D C:\Users\Owner\AppData\Local\WindowsUpdate
2016-04-01 09:07 - 2016-03-26 06:06 - 00038120 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-04-01 09:07 - 2016-03-26 05:54 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-04-01 09:07 - 2016-03-24 01:02 - 01385472 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-04-01 09:07 - 2016-03-24 01:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-04-01 09:07 - 2016-03-18 05:04 - 00698368 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-04-01 09:07 - 2016-03-18 05:04 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-04-01 09:07 - 2016-03-18 05:04 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-04-01 09:07 - 2016-03-18 05:04 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-04-01 09:07 - 2015-07-17 06:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-04-01 09:07 - 2015-07-17 06:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-04-01 09:07 - 2015-07-17 06:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-04-01 09:07 - 2015-07-17 06:11 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-04-01 09:07 - 2015-07-17 06:11 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-04-01 09:07 - 2015-07-17 06:11 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-04-01 09:07 - 2015-07-12 00:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2016-04-01 08:41 - 2016-04-01 08:41 - 00000000 ____D C:\Windows\system32\%commonappdata%
2016-04-01 08:38 - 2016-04-01 19:21 - 00000000 ____D C:\Users\Owner\Desktop\mccc actions
2016-04-01 08:34 - 2015-12-21 05:50 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-04-01 08:34 - 2015-12-21 05:50 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-04-01 08:34 - 2015-12-21 01:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-04-01 08:33 - 2014-12-12 04:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-04-01 00:25 - 2016-04-01 09:59 - 00000000 ____D C:\Windows\system32\appraiser
2016-04-01 00:25 - 2016-04-01 07:34 - 00000000 ___SD C:\Windows\system32\GWX
2016-04-01 00:25 - 2016-04-01 00:25 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-04-01 00:25 - 2016-04-01 00:25 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-04-01 00:03 - 2013-10-02 13:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2016-04-01 00:03 - 2013-10-02 13:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2016-04-01 00:03 - 2013-10-02 13:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2016-04-01 00:03 - 2013-10-02 12:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2016-04-01 00:03 - 2013-10-02 12:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2016-04-01 00:03 - 2013-10-02 12:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2016-04-01 00:03 - 2013-10-02 11:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2016-04-01 00:03 - 2013-10-02 11:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2016-04-01 00:03 - 2013-10-02 10:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-04-01 00:03 - 2013-10-02 09:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-03-31 23:57 - 2012-08-24 01:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2016-03-31 23:57 - 2012-08-24 01:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2016-03-31 23:56 - 2012-08-23 22:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2016-03-31 23:56 - 2012-08-23 21:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2016-03-31 23:41 - 2012-07-26 14:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2016-03-31 23:41 - 2012-07-26 14:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2016-03-31 23:41 - 2012-07-26 14:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-03-31 23:41 - 2012-07-26 14:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2016-03-31 23:41 - 2012-07-26 14:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2016-03-31 23:41 - 2012-07-26 13:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2016-03-31 23:41 - 2012-07-26 13:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2016-03-31 23:41 - 2012-06-03 01:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-03-31 23:30 - 2016-03-31 23:37 - 00000000 ____D C:\Windows\system32\MRT
2016-03-31 23:30 - 2016-03-31 23:30 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-31 23:28 - 2014-08-01 22:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-03-31 23:28 - 2014-08-01 22:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2016-03-31 23:28 - 2012-12-08 00:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-03-31 23:28 - 2012-12-08 00:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-03-31 23:28 - 2012-12-07 23:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2016-03-31 23:28 - 2012-12-07 23:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-03-31 23:28 - 2012-12-07 22:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2016-03-31 23:28 - 2012-12-07 22:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2016-03-31 23:28 - 2012-12-07 22:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2016-03-31 23:28 - 2012-12-07 22:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2016-03-31 23:28 - 2012-12-07 22:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2016-03-31 23:28 - 2012-12-07 22:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2016-03-31 23:28 - 2012-12-07 22:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2016-03-31 23:28 - 2012-12-07 22:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2016-03-31 23:28 - 2012-12-07 22:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2016-03-31 23:28 - 2012-12-07 22:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2016-03-31 23:28 - 2012-12-07 22:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2016-03-31 23:28 - 2012-12-07 22:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2016-03-31 23:28 - 2012-12-07 22:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2016-03-31 23:28 - 2012-12-07 22:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2016-03-31 23:28 - 2012-12-07 21:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2016-03-31 23:27 - 2015-08-06 04:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2016-03-31 23:27 - 2015-08-06 04:06 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-03-31 23:27 - 2015-07-23 11:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-03-31 23:27 - 2015-07-23 11:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-03-31 23:27 - 2015-07-23 04:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-03-31 23:27 - 2015-07-23 03:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-03-31 23:27 - 2013-08-05 13:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2016-03-31 23:26 - 2015-12-17 05:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-03-31 23:26 - 2015-12-17 05:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2016-03-31 23:26 - 2015-12-17 05:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2016-03-31 23:26 - 2015-12-17 05:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2016-03-31 23:26 - 2015-12-17 05:48 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2016-03-31 23:26 - 2015-12-17 05:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2016-03-31 23:26 - 2015-12-17 05:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2016-03-31 23:26 - 2015-12-17 05:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2016-03-31 23:26 - 2015-12-17 01:38 - 00419928 _____ C:\Windows\SysWOW64\locale.nls
2016-03-31 23:26 - 2015-12-17 01:37 - 00419928 _____ C:\Windows\system32\locale.nls
2016-03-31 23:26 - 2015-05-26 05:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-03-31 23:26 - 2015-05-26 05:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-03-31 23:26 - 2015-05-26 05:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-03-31 23:26 - 2015-05-26 05:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-03-31 23:26 - 2015-05-26 05:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-03-31 23:26 - 2015-05-26 05:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-03-31 23:26 - 2015-05-26 05:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-03-31 23:26 - 2015-05-26 05:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-03-31 23:26 - 2015-05-26 05:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2016-03-31 23:26 - 2015-05-26 05:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2016-03-31 23:26 - 2015-05-26 05:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2016-03-31 23:26 - 2015-05-26 05:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2016-03-31 23:25 - 2016-01-22 17:19 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-03-31 23:25 - 2016-01-22 17:15 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-03-31 23:25 - 2016-01-22 17:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-03-31 23:25 - 2016-01-22 17:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-03-31 23:25 - 2016-01-22 16:19 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-03-31 23:25 - 2016-01-22 16:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-03-31 23:25 - 2015-04-28 06:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-03-31 23:25 - 2015-04-28 06:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-03-31 23:25 - 2015-04-28 06:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-03-31 23:25 - 2015-04-28 06:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-03-31 23:25 - 2015-04-28 06:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-03-31 23:25 - 2015-04-28 06:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-03-31 23:25 - 2015-04-28 06:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-03-31 23:25 - 2015-04-28 06:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-03-31 23:25 - 2013-12-04 13:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-03-31 23:25 - 2013-12-04 13:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-03-31 23:25 - 2013-12-04 13:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-03-31 23:25 - 2013-12-04 13:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-03-31 23:25 - 2013-12-04 13:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-03-31 23:25 - 2013-12-04 13:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-03-31 23:25 - 2013-12-04 13:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-03-31 23:25 - 2013-12-04 13:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-03-31 23:25 - 2013-12-04 13:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-03-31 23:25 - 2013-12-04 13:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2016-03-31 23:25 - 2013-12-04 13:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2016-03-31 23:25 - 2013-12-04 13:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2016-03-31 23:25 - 2013-12-04 13:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2016-03-31 23:25 - 2013-12-04 13:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-03-31 23:25 - 2013-12-04 12:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2016-03-31 23:25 - 2013-12-04 12:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2016-03-31 23:25 - 2013-12-04 12:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2016-03-31 23:25 - 2013-12-04 12:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2016-03-31 23:24 - 2015-11-20 01:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-31 23:24 - 2015-11-20 01:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-31 23:24 - 2013-10-04 13:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2016-03-31 23:24 - 2013-10-04 13:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2016-03-31 23:24 - 2013-10-04 12:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2016-03-31 23:24 - 2013-10-04 12:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2016-03-31 23:24 - 2012-10-04 04:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2016-03-31 23:24 - 2012-10-04 04:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2016-03-31 23:24 - 2012-10-04 04:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-03-31 23:24 - 2012-10-04 03:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2016-03-31 23:24 - 2012-10-04 03:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2016-03-31 23:24 - 2012-10-04 03:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-03-31 23:24 - 2011-03-11 17:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2016-03-31 23:24 - 2011-03-11 17:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2016-03-31 23:24 - 2011-03-11 17:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2016-03-31 23:24 - 2011-03-11 17:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2016-03-31 23:24 - 2011-03-11 17:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2016-03-31 23:24 - 2011-03-11 17:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-03-31 23:24 - 2011-03-11 17:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2016-03-31 23:24 - 2011-03-11 16:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-03-31 23:24 - 2011-03-11 16:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2016-03-31 23:23 - 2016-02-02 06:08 - 00114624 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-03-31 23:23 - 2016-02-02 05:59 - 03243008 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-03-31 23:23 - 2016-02-02 05:59 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-03-31 23:23 - 2016-02-02 05:59 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-03-31 23:23 - 2016-02-02 05:56 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-03-31 23:23 - 2016-02-02 05:56 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-03-31 23:23 - 2016-02-02 05:49 - 02364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-03-31 23:23 - 2016-02-02 05:49 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-03-31 23:23 - 2016-02-02 05:49 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-03-31 23:23 - 2016-02-02 05:45 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-03-31 23:23 - 2015-10-30 04:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-03-31 23:23 - 2015-10-30 04:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-03-31 23:23 - 2015-10-30 04:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-03-31 23:23 - 2015-10-30 04:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-03-31 23:23 - 2015-10-30 04:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-03-31 23:23 - 2015-10-30 04:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-03-31 23:23 - 2015-10-30 04:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-03-31 23:23 - 2015-06-04 07:16 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-03-31 23:23 - 2013-05-10 16:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-03-31 23:23 - 2013-05-10 14:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2016-03-31 23:23 - 2012-10-10 05:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-03-31 23:23 - 2012-10-10 05:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-03-31 23:23 - 2012-10-10 04:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-03-31 23:23 - 2012-10-10 04:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2016-03-31 23:23 - 2012-01-04 21:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-03-31 23:23 - 2012-01-04 19:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-03-31 23:22 - 2015-11-06 06:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-03-31 23:22 - 2015-11-06 06:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-03-31 23:22 - 2012-08-22 08:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2016-03-31 23:17 - 2011-02-18 21:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2016-03-31 23:17 - 2011-02-18 16:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2016-03-31 23:11 - 2016-02-06 05:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2016-03-31 23:11 - 2016-02-06 05:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-03-31 23:11 - 2016-02-06 04:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll
2016-03-31 23:11 - 2016-01-12 06:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-31 23:11 - 2015-06-04 07:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-03-31 23:11 - 2014-07-09 13:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2016-03-31 23:11 - 2014-07-09 13:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2016-03-31 23:11 - 2014-07-09 13:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2016-03-31 23:11 - 2014-07-09 13:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2016-03-31 23:11 - 2014-07-09 13:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2016-03-31 23:11 - 2014-07-09 12:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2016-03-31 23:11 - 2014-07-09 12:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2016-03-31 23:11 - 2014-07-09 12:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2016-03-31 23:11 - 2014-07-09 12:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2016-03-31 23:11 - 2014-07-09 12:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2016-03-31 23:11 - 2014-02-04 13:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-03-31 23:11 - 2014-02-04 13:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-03-31 23:11 - 2014-02-04 13:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2016-03-31 23:11 - 2014-02-04 13:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2016-03-31 23:11 - 2014-02-04 13:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2016-03-31 23:11 - 2011-06-16 16:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2016-03-31 23:11 - 2011-06-16 15:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2016-03-31 23:11 - 2011-05-04 16:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-03-31 23:11 - 2011-05-04 16:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-03-31 23:11 - 2011-05-04 16:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-03-31 23:11 - 2011-05-04 16:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-03-31 23:11 - 2011-05-04 16:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2016-03-31 23:11 - 2011-05-04 16:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-03-31 23:11 - 2011-05-04 16:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-03-31 23:11 - 2011-05-04 16:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-03-31 23:11 - 2011-05-04 16:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-03-31 23:11 - 2011-05-04 15:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-03-31 23:11 - 2011-05-04 15:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-03-31 23:11 - 2011-05-04 15:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-03-31 23:11 - 2011-05-04 15:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-03-31 23:11 - 2011-05-04 15:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-03-31 23:11 - 2011-05-04 15:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2016-03-31 23:11 - 2011-05-04 15:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-03-31 23:11 - 2011-05-04 15:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-03-31 23:11 - 2011-05-04 15:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-03-31 23:10 - 2015-07-10 04:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-03-31 23:10 - 2015-07-10 04:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-03-31 23:10 - 2015-07-10 04:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-03-31 23:10 - 2015-07-10 04:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-03-31 23:10 - 2013-01-24 17:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-03-31 23:10 - 2012-07-05 07:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2016-03-31 23:03 - 2015-01-29 14:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-03-31 23:03 - 2015-01-29 14:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2016-03-31 23:03 - 2014-10-30 13:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2016-03-31 23:03 - 2014-10-30 12:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2016-03-31 23:03 - 2014-10-03 13:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-03-31 23:03 - 2014-10-03 13:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-03-31 23:03 - 2014-10-03 13:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-03-31 23:03 - 2014-10-03 13:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-03-31 23:03 - 2014-10-03 13:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-03-31 23:03 - 2014-10-03 12:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-03-31 23:03 - 2014-10-03 12:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-03-31 23:03 - 2014-10-03 12:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-03-31 23:03 - 2014-10-03 12:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-03-31 23:03 - 2014-10-03 12:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-03-31 23:03 - 2011-12-30 17:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-03-31 23:03 - 2011-12-30 16:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2016-03-31 23:02 - 2013-10-30 13:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-03-31 23:02 - 2013-10-30 13:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2016-03-31 23:01 - 2016-02-03 05:57 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-03-31 23:01 - 2014-01-28 13:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-03-31 23:01 - 2013-03-19 16:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-03-31 22:58 - 2016-01-21 11:51 - 00073664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2016-03-31 22:58 - 2015-08-28 05:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-03-31 22:58 - 2015-08-28 05:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-03-31 22:58 - 2015-08-28 05:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-03-31 22:58 - 2015-08-28 05:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-03-31 22:58 - 2015-08-28 04:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-03-31 22:58 - 2015-08-28 04:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-03-31 22:58 - 2015-08-28 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-03-31 22:58 - 2015-08-28 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-03-31 22:57 - 2015-01-09 14:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-03-31 22:57 - 2015-01-09 14:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2016-03-31 22:57 - 2015-01-09 14:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2016-03-31 22:57 - 2015-01-09 13:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2016-03-31 22:56 - 2015-04-11 14:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-03-31 22:54 - 2013-08-28 12:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-03-31 22:45 - 2016-03-31 22:45 - 00001409 _____ C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-03-31 11:04 - 2016-03-31 11:04 - 00000000 ____D C:\Users\Owner\AppData\Local\VS Revo Group
2016-03-31 11:04 - 2016-03-31 11:04 - 00000000 ____D C:\ProgramData\VS Revo Group
2016-03-31 11:04 - 2016-03-31 11:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2016-03-31 11:04 - 2016-03-31 11:04 - 00000000 ____D C:\Program Files\VS Revo Group
2016-03-31 11:04 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2016-03-31 11:01 - 2016-03-31 11:03 - 11199448 _____ (VS Revo Group ) C:\Users\Owner\Downloads\RevoUninProSetup.exe
2016-03-31 09:48 - 2016-04-01 19:17 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-31 09:47 - 2016-03-31 09:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-31 09:47 - 2016-03-31 09:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-31 09:47 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-31 09:47 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-31 09:47 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-29 10:16 - 2016-03-29 10:16 - 00364497 _____ C:\Users\Owner\Downloads\SOR 15-16.xlsx
2016-03-23 04:05 - 2016-03-23 04:05 - 00217369 _____ C:\Users\Owner\Documents\IMG_20160323_0001.pdf
2016-03-17 09:23 - 2016-02-13 05:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-17 09:23 - 2016-02-13 05:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-17 09:23 - 2016-02-13 05:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-17 09:23 - 2016-02-13 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-03-17 09:23 - 2016-02-13 05:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-17 09:23 - 2016-02-13 05:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-17 09:23 - 2016-02-13 05:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-17 09:23 - 2016-02-13 05:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-17 09:23 - 2016-02-13 05:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-03-17 09:23 - 2016-02-13 05:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-17 09:23 - 2016-02-13 05:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-17 09:23 - 2016-02-13 05:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-03-17 09:23 - 2016-02-13 05:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-17 09:23 - 2016-02-13 05:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-17 09:23 - 2016-02-13 05:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-17 09:23 - 2016-02-13 05:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-17 09:23 - 2016-02-05 04:52 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-17 09:23 - 2016-02-04 05:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-17 09:23 - 2016-02-04 05:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-17 09:23 - 2016-02-04 05:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-03-17 09:23 - 2016-02-04 05:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-17 09:23 - 2016-02-04 05:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-17 09:22 - 2016-02-12 05:56 - 05572032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-17 09:22 - 2016-02-12 05:56 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-17 09:22 - 2016-02-12 05:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-03-17 09:22 - 2016-02-12 05:52 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-17 09:22 - 2016-02-12 05:49 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-03-17 09:22 - 2016-02-12 05:49 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-03-17 09:22 - 2016-02-12 05:49 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-03-17 09:22 - 2016-02-12 05:49 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-03-17 09:22 - 2016-02-12 05:49 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-03-17 09:22 - 2016-02-12 05:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-03-17 09:22 - 2016-02-12 05:49 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-03-17 09:22 - 2016-02-12 05:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-03-17 09:22 - 2016-02-12 05:48 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-17 09:22 - 2016-02-12 05:48 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-03-17 09:22 - 2016-02-12 05:48 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-17 09:22 - 2016-02-12 05:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-03-17 09:22 - 2016-02-12 05:48 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-03-17 09:22 - 2016-02-12 05:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-03-17 09:22 - 2016-02-12 05:45 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-03-17 09:22 - 2016-02-12 05:45 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-03-17 09:22 - 2016-02-12 05:45 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-03-17 09:22 - 2016-02-12 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-03-17 09:22 - 2016-02-12 05:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-03-17 09:22 - 2016-02-12 05:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-03-17 09:22 - 2016-02-12 05:44 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-17 09:22 - 2016-02-12 05:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-03-17 09:22 - 2016-02-12 05:44 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-17 09:22 - 2016-02-12 05:44 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-17 09:22 - 2016-02-12 05:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-03-17 09:22 - 2016-02-12 05:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-03-17 09:22 - 2016-02-12 05:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:38 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-03-17 09:22 - 2016-02-12 05:38 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-03-17 09:22 - 2016-02-12 05:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-17 09:22 - 2016-02-12 05:38 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-03-17 09:22 - 2016-02-12 05:38 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-03-17 09:22 - 2016-02-12 05:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-03-17 09:22 - 2016-02-12 05:38 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-03-17 09:22 - 2016-02-12 05:37 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-17 09:22 - 2016-02-12 05:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-03-17 09:22 - 2016-02-12 05:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-03-17 09:22 - 2016-02-12 05:35 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-03-17 09:22 - 2016-02-12 05:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-03-17 09:22 - 2016-02-12 05:35 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-03-17 09:22 - 2016-02-12 05:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-03-17 09:22 - 2016-02-12 05:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-17 09:22 - 2016-02-12 05:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 05:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 04:48 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-03-17 09:22 - 2016-02-12 04:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-03-17 09:22 - 2016-02-12 04:41 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-03-17 09:22 - 2016-02-12 04:40 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-03-17 09:22 - 2016-02-12 04:34 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-17 09:22 - 2016-02-12 04:34 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-17 09:22 - 2016-02-12 04:33 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-03-17 09:22 - 2016-02-12 04:32 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-17 09:22 - 2016-02-12 04:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-03-17 09:22 - 2016-02-12 04:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-03-17 09:22 - 2016-02-12 04:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-03-17 09:22 - 2016-02-12 04:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-03-17 09:22 - 2016-02-12 04:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-03-17 09:22 - 2016-02-12 04:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-03-17 09:22 - 2016-02-12 04:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 04:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-17 09:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-17 09:22 - 2016-02-09 20:57 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-17 09:22 - 2016-02-09 20:57 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-03-17 09:22 - 2016-02-09 20:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-03-17 09:22 - 2016-02-09 20:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-03-17 09:22 - 2016-02-09 20:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-17 09:22 - 2016-02-09 20:54 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-03-17 09:22 - 2016-02-09 20:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-03-17 09:22 - 2016-02-09 20:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-17 09:22 - 2016-02-09 20:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-03-17 09:22 - 2016-02-09 20:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-03-17 09:22 - 2016-02-09 20:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-03-17 09:22 - 2016-02-06 05:54 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-03-17 09:22 - 2016-02-06 05:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-03-17 09:22 - 2016-02-06 05:53 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-17 09:22 - 2016-02-06 05:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-03-17 09:22 - 2016-02-06 05:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-03-17 09:22 - 2016-02-06 05:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-03-17 09:22 - 2016-02-06 05:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-03-17 09:22 - 2016-02-06 04:48 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-17 09:22 - 2016-02-06 04:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-17 09:22 - 2016-02-06 04:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-17 09:22 - 2016-02-05 12:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-17 09:22 - 2016-02-05 05:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-08 07:36 - 2016-03-08 07:36 - 00600407 _____ C:\Users\Owner\Documents\IMG_20160308_0002.pdf
2016-03-08 07:21 - 2016-03-08 07:21 - 00594856 _____ C:\Users\Owner\Documents\IMG_20160308_0001.pdf
2016-03-08 00:43 - 2013-11-26 19:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-03-08 00:43 - 2013-11-23 09:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-03-07 08:19 - 2015-12-09 08:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-03-07 08:19 - 2015-12-09 06:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-03-07 08:19 - 2015-11-11 05:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-03-07 08:19 - 2015-11-11 05:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-03-07 08:19 - 2015-11-11 05:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-03-07 08:19 - 2015-07-31 05:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-03-07 08:19 - 2015-07-31 04:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-03-07 08:19 - 2015-02-04 14:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-03-07 08:19 - 2015-02-04 13:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-03-07 08:19 - 2015-02-03 14:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-03-07 08:19 - 2015-02-03 14:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-03-07 05:05 - 2015-07-31 00:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-03-07 05:05 - 2015-07-31 00:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-03-07 04:54 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2016-03-07 04:44 - 2016-03-07 04:44 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-03-07 04:44 - 2016-03-07 04:44 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-03-07 04:35 - 2016-03-07 04:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-03-07 04:31 - 2016-03-07 04:31 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-03-07 04:31 - 2016-03-07 04:31 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-03-07 03:11 - 2012-03-01 17:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-03-07 03:11 - 2012-03-01 17:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-03-07 03:11 - 2012-03-01 16:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2016-03-07 03:03 - 2014-07-01 09:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-03-07 03:03 - 2014-07-01 09:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2016-03-07 03:03 - 2014-06-06 17:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-03-07 03:03 - 2014-06-06 17:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-03-07 03:03 - 2014-03-10 08:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-03-07 03:03 - 2014-03-10 08:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-03-07 03:03 - 2014-03-10 08:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2016-03-07 03:03 - 2014-03-10 08:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2016-03-06 21:28 - 2015-12-11 06:05 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 12306432 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 09074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 02470400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 01539584 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00495616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00290304 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-03-06 21:28 - 2015-12-11 06:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2016-03-06 21:28 - 2015-12-11 06:03 - 01538048 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-06 21:28 - 2015-12-11 06:03 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-03-06 21:28 - 2015-12-11 06:03 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-03-06 21:28 - 2015-12-11 06:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-03-06 21:28 - 2015-12-11 05:30 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 11033088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 06035968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 02088960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 01267712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00717312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00389120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00345600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00153088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-03-06 21:28 - 2015-12-11 05:29 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2016-03-06 21:28 - 2015-12-11 05:29 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\corpol.dll
2016-03-06 21:28 - 2015-12-11 05:29 - 00015872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2016-03-06 21:28 - 2015-12-11 05:28 - 01466368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-06 21:28 - 2015-12-11 05:24 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-06 21:28 - 2015-12-11 05:01 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-03-06 21:28 - 2015-12-11 05:00 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-03-06 21:28 - 2015-12-11 04:45 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-03-06 21:28 - 2015-11-14 10:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-03-06 21:28 - 2015-11-14 10:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-03-06 21:28 - 2015-11-14 10:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-03-06 21:28 - 2015-11-14 09:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
2016-03-06 21:28 - 2015-11-14 09:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
2016-03-06 21:28 - 2015-11-14 09:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
2016-03-06 21:28 - 2015-07-10 04:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-03-06 21:28 - 2015-07-10 04:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-03-06 21:28 - 2015-07-10 04:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-03-06 21:28 - 2015-06-02 11:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-03-06 21:28 - 2015-06-02 10:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2016-03-06 21:28 - 2014-06-16 13:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-03-06 21:28 - 2013-04-10 17:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-03-06 21:28 - 2011-04-29 14:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-03-06 21:28 - 2011-04-29 14:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-03-06 21:28 - 2011-04-29 14:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-03-06 21:28 - 2011-02-03 22:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-03-06 21:27 - 2016-01-07 06:02 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-03-06 21:27 - 2016-01-07 06:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-03-06 21:27 - 2016-01-07 05:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-03-06 21:27 - 2015-08-06 04:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-03-06 21:27 - 2015-07-16 05:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-03-06 21:27 - 2015-07-16 05:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-03-06 21:27 - 2015-07-16 05:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-03-06 21:27 - 2015-04-18 14:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-03-06 21:27 - 2015-04-18 13:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-03-06 21:27 - 2015-04-13 14:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-03-06 21:27 - 2011-06-15 21:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2016-03-06 21:27 - 2011-06-15 21:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2016-03-06 21:27 - 2011-06-15 21:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2016-03-06 21:27 - 2011-06-15 21:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2016-03-06 21:27 - 2011-06-15 19:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2016-03-06 21:27 - 2011-06-15 19:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2016-03-06 21:27 - 2011-06-15 19:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2016-03-06 21:27 - 2011-06-15 19:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2016-03-06 21:27 - 2011-06-15 19:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2016-03-06 21:27 - 2010-12-23 21:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2016-03-06 21:27 - 2010-12-23 21:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2016-03-06 21:27 - 2010-12-23 16:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2016-03-06 21:27 - 2010-12-23 16:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2016-03-06 21:26 - 2015-11-04 06:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-03-06 21:26 - 2015-11-04 05:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-03-06 21:26 - 2015-02-03 14:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-03-06 21:26 - 2015-02-03 14:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-03-06 21:26 - 2015-02-03 14:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-03-06 21:26 - 2015-02-03 14:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-03-06 21:26 - 2015-02-03 14:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-03-06 21:26 - 2015-02-03 14:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-03-06 21:26 - 2015-02-03 14:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-03-06 21:26 - 2015-02-03 14:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-03-06 21:26 - 2015-02-03 14:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-03-06 21:26 - 2015-02-03 14:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-03-06 21:26 - 2015-02-03 14:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-03-06 21:26 - 2015-02-03 14:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-03-06 21:26 - 2015-02-03 14:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-03-06 21:26 - 2015-02-03 14:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-03-06 21:26 - 2015-02-03 14:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-03-06 21:26 - 2015-02-03 14:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-03-06 21:26 - 2015-02-03 14:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-03-06 21:26 - 2015-02-03 14:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-03-06 21:26 - 2015-02-03 14:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-03-06 21:26 - 2015-02-03 14:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-03-06 21:26 - 2015-02-03 14:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-03-06 21:26 - 2015-02-03 14:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-03-06 21:26 - 2015-02-03 14:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-03-06 21:26 - 2015-02-03 14:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-03-06 21:26 - 2015-02-03 14:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-03-06 21:26 - 2015-02-03 14:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-03-06 21:26 - 2015-02-03 14:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-03-06 21:26 - 2015-02-03 14:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-03-06 21:26 - 2015-02-03 14:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-03-06 21:26 - 2015-02-03 14:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-03-06 21:26 - 2015-02-03 14:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-03-06 21:25 - 2014-12-19 14:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-03-06 21:25 - 2014-06-19 09:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-03-06 21:25 - 2014-06-19 09:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-03-06 21:25 - 2014-06-19 09:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2016-03-06 21:25 - 2014-06-19 09:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-03-06 21:25 - 2014-06-19 09:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2016-03-06 21:25 - 2014-06-19 09:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-03-06 21:25 - 2014-04-05 13:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-03-06 21:25 - 2014-04-05 13:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-03-06 21:25 - 2014-01-29 13:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-03-06 21:25 - 2014-01-29 13:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-03-06 21:25 - 2013-11-26 22:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-03-06 21:25 - 2013-10-19 13:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-03-06 21:25 - 2013-10-19 12:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-03-06 21:25 - 2011-11-17 17:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-03-06 21:25 - 2011-11-17 16:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2016-03-06 21:24 - 2016-01-08 04:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-03-06 21:24 - 2015-11-11 05:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-03-06 21:24 - 2015-11-11 05:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-03-06 21:24 - 2015-07-15 14:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-03-06 21:24 - 2015-07-02 07:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-03-06 21:24 - 2015-07-02 07:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-03-06 21:24 - 2015-07-02 07:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-03-06 21:24 - 2015-07-02 07:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-03-06 21:24 - 2015-04-25 05:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-03-06 21:24 - 2015-04-25 04:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-03-06 21:24 - 2015-02-03 14:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-03-06 21:24 - 2015-02-03 14:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2016-03-06 21:24 - 2014-12-06 15:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-03-06 21:24 - 2014-12-06 14:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2016-03-06 21:24 - 2014-12-06 14:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2016-03-06 21:24 - 2014-10-14 13:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-03-06 21:24 - 2014-06-18 13:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-03-06 21:24 - 2014-06-18 12:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-03-06 21:24 - 2013-11-27 12:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-03-06 21:24 - 2013-11-27 12:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-03-06 21:24 - 2013-11-27 12:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-03-06 21:24 - 2013-11-27 12:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-03-06 21:24 - 2013-11-27 12:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-03-06 21:24 - 2013-11-27 12:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-03-06 21:24 - 2013-02-12 15:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-03-06 21:24 - 2012-10-04 04:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-03-06 21:24 - 2012-10-04 04:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-03-06 21:24 - 2011-03-11 17:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-03-06 21:24 - 2011-03-11 17:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-03-06 21:24 - 2011-03-11 16:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2016-03-06 21:24 - 2011-03-11 16:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2016-03-06 21:23 - 2015-11-12 05:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-03-06 21:23 - 2015-11-12 05:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-03-06 21:23 - 2015-11-12 05:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-03-06 21:23 - 2015-11-12 05:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-03-06 21:23 - 2015-11-06 06:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-03-06 21:23 - 2015-11-06 06:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-03-06 21:23 - 2015-11-05 20:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-03-06 21:23 - 2015-10-14 03:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-03-06 21:23 - 2015-10-14 03:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-03-06 21:23 - 2015-10-02 05:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-03-06 21:23 - 2015-10-02 05:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-03-06 21:23 - 2015-10-02 05:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-03-06 21:23 - 2015-10-02 05:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-03-06 21:23 - 2015-10-02 05:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-03-06 21:23 - 2015-10-02 05:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-03-06 21:23 - 2015-10-02 05:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-03-06 21:23 - 2015-10-02 04:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-03-06 21:23 - 2015-10-02 04:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-03-06 21:23 - 2015-06-16 08:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-03-06 21:23 - 2015-06-16 08:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-03-06 21:23 - 2015-06-04 07:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-03-06 21:23 - 2015-06-04 07:16 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-03-06 21:23 - 2015-06-04 07:16 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-03-06 21:23 - 2013-07-12 21:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2016-03-06 21:23 - 2013-07-12 21:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-03-06 21:23 - 2013-07-03 15:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2016-03-06 21:23 - 2013-07-03 15:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-03-06 21:23 - 2013-07-03 15:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-03-06 21:23 - 2013-06-26 09:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-03-06 21:23 - 2012-11-02 16:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-03-06 21:23 - 2012-11-02 16:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2016-03-06 21:23 - 2011-03-03 17:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-03-06 21:23 - 2011-03-03 17:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-03-06 21:23 - 2011-03-03 17:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2016-03-06 21:23 - 2011-03-03 16:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-03-06 21:23 - 2011-03-03 16:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2016-03-06 21:22 - 2014-03-04 20:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-03-06 21:22 - 2014-03-04 20:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-03-06 21:22 - 2014-03-04 20:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-03-06 21:22 - 2014-03-04 20:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-03-06 21:22 - 2014-03-04 20:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-03-06 21:22 - 2014-03-04 20:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-03-06 21:22 - 2014-03-04 20:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-03-06 21:22 - 2014-03-04 20:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2016-03-06 21:22 - 2014-03-04 20:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2016-03-06 21:22 - 2014-03-04 20:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2016-03-06 21:22 - 2014-03-04 20:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2016-03-06 21:22 - 2014-03-04 20:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2016-03-06 21:22 - 2014-03-04 20:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2016-03-06 21:22 - 2014-03-04 20:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2016-03-06 21:20 - 2014-08-12 13:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-03-06 21:20 - 2014-08-12 12:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2016-03-06 21:18 - 2015-12-09 08:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-03-06 21:18 - 2015-12-09 06:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-03-06 21:18 - 2015-02-18 18:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-03-06 21:18 - 2015-02-18 18:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-03-06 21:18 - 2014-11-11 14:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-03-06 21:18 - 2014-11-11 13:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-03-06 21:18 - 2012-03-17 18:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-03-06 21:18 - 2011-08-17 16:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-03-06 21:18 - 2011-08-17 16:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-03-06 21:18 - 2011-08-17 15:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2016-03-06 21:18 - 2011-08-17 15:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2016-03-06 21:17 - 2016-01-17 06:01 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-03-06 21:17 - 2016-01-17 05:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-03-06 21:17 - 2015-12-09 08:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-03-06 21:17 - 2015-12-09 08:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-03-06 21:17 - 2015-12-09 08:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-03-06 21:17 - 2015-12-09 08:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-03-06 21:17 - 2015-12-09 08:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-03-06 21:17 - 2015-12-09 08:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-03-06 21:17 - 2015-12-09 08:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-03-06 21:17 - 2015-12-09 08:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-03-06 21:17 - 2015-12-09 08:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-03-06 21:17 - 2015-12-09 08:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-03-06 21:17 - 2015-12-09 08:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-03-06 21:17 - 2015-12-09 08:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-03-06 21:17 - 2015-12-09 08:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-03-06 21:17 - 2015-12-09 08:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-03-06 21:17 - 2015-12-09 08:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-03-06 21:17 - 2015-12-09 08:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-03-06 21:17 - 2015-12-09 08:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-03-06 21:17 - 2015-12-09 08:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-03-06 21:17 - 2015-12-09 08:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-03-06 21:17 - 2015-12-09 08:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-03-06 21:17 - 2015-12-09 08:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-03-06 21:17 - 2015-12-09 08:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-03-06 21:17 - 2015-12-09 08:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-03-06 21:17 - 2015-12-09 08:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-03-06 21:17 - 2015-12-09 08:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-03-06 21:17 - 2015-12-09 08:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-03-06 21:17 - 2015-12-09 08:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-03-06 21:17 - 2015-12-09 08:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-03-06 21:17 - 2015-12-09 08:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-03-06 21:17 - 2015-12-09 08:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-03-06 21:17 - 2015-12-09 08:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-03-06 21:17 - 2015-12-09 08:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-03-06 21:17 - 2015-12-09 08:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-03-06 21:17 - 2015-12-09 08:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 01393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-03-06 21:17 - 2015-12-09 06:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-03-06 21:17 - 2015-12-09 06:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-03-06 21:17 - 2015-12-09 06:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-03-06 21:17 - 2015-12-09 06:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-03-06 21:17 - 2015-12-09 06:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-03-06 21:17 - 2015-12-09 06:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-03-06 21:17 - 2015-12-09 05:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-03-06 21:17 - 2015-12-09 05:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-03-06 21:17 - 2015-12-09 05:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-03-06 21:17 - 2015-02-25 14:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-03-06 21:17 - 2013-07-26 13:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-03-06 21:17 - 2013-07-26 12:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2016-03-06 21:17 - 2012-09-26 09:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2016-03-06 21:17 - 2012-09-26 09:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-03-06 21:17 - 2011-02-06 04:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2016-03-06 21:17 - 2011-02-06 04:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2016-03-06 21:17 - 2011-02-06 04:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2016-03-06 21:16 - 2016-01-22 17:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-03-06 21:16 - 2016-01-22 17:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-03-06 21:16 - 2016-01-22 17:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-03-06 21:16 - 2016-01-22 17:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-03-06 21:16 - 2016-01-22 17:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-03-06 21:16 - 2016-01-22 17:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-03-06 21:16 - 2016-01-22 17:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-03-06 21:16 - 2015-09-24 00:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-03-06 21:16 - 2015-09-24 00:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-03-06 21:16 - 2015-09-24 00:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-03-06 21:16 - 2015-01-17 13:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-03-06 21:16 - 2015-01-17 13:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-03-06 21:16 - 2014-09-04 16:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-03-06 21:16 - 2014-09-04 16:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-03-06 21:16 - 2013-04-26 16:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-03-06 21:16 - 2013-04-26 15:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-03-06 21:15 - 2015-10-13 15:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-03-06 21:15 - 2014-10-25 12:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-03-06 21:15 - 2014-10-25 12:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2016-03-06 21:15 - 2014-07-17 13:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-03-06 21:15 - 2014-07-17 13:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-03-06 21:15 - 2014-07-17 13:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-03-06 21:15 - 2014-07-17 12:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2016-03-06 21:15 - 2014-07-17 12:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-03-06 21:15 - 2012-11-23 14:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-03-06 21:15 - 2012-04-26 16:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-03-06 21:15 - 2012-04-26 16:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-03-06 21:15 - 2011-05-24 22:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-03-06 21:15 - 2011-05-24 21:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2016-03-06 21:15 - 2011-05-24 21:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2016-03-06 21:15 - 2011-05-24 21:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2016-03-06 21:15 - 2011-05-24 21:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2016-03-06 21:14 - 2015-12-09 08:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-03-06 21:14 - 2015-12-09 06:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-03-06 21:14 - 2015-11-04 06:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-03-06 21:14 - 2015-11-04 05:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-03-06 21:14 - 2014-12-08 14:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-03-06 21:14 - 2014-12-08 13:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2016-03-06 21:14 - 2013-10-12 13:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-03-06 21:14 - 2013-10-12 13:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-03-06 21:14 - 2013-10-12 13:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2016-03-06 21:14 - 2013-10-12 13:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-03-06 21:14 - 2013-10-12 12:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-03-06 21:14 - 2013-10-12 12:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-03-06 21:14 - 2013-10-12 12:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2016-03-06 21:14 - 2013-10-12 12:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-03-06 21:14 - 2013-05-13 16:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-03-06 21:14 - 2013-05-13 14:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-03-06 21:14 - 2013-05-13 14:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2016-03-06 21:14 - 2013-05-13 14:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2016-03-06 21:14 - 2012-07-05 09:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-03-06 21:14 - 2012-07-05 09:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-03-06 21:14 - 2012-07-05 09:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-03-06 21:14 - 2012-07-05 08:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-03-06 21:14 - 2012-07-05 08:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-03-06 21:14 - 2011-12-16 19:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-03-06 21:14 - 2011-12-16 18:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2016-03-06 21:14 - 2011-05-03 16:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-03-06 21:14 - 2011-05-03 15:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-03-06 21:14 - 2011-02-12 22:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2016-03-06 21:13 - 2015-03-04 15:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-03-06 21:13 - 2015-03-04 15:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-03-06 21:13 - 2015-03-04 15:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-03-06 21:13 - 2012-06-06 17:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-03-06 21:13 - 2012-06-06 16:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2016-03-06 21:13 - 2012-05-14 16:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-03-06 21:13 - 2011-08-27 16:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-03-06 21:13 - 2011-08-27 15:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-03-06 21:13 - 2011-02-23 15:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-03-06 21:12 - 2013-10-12 13:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-03-06 21:12 - 2013-10-12 13:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-03-06 21:12 - 2013-10-12 13:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-03-06 21:12 - 2013-10-12 13:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-03-06 21:12 - 2013-10-12 13:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-03-06 20:44 - 2012-02-17 17:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-03-06 20:44 - 2012-02-17 16:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-03-06 20:44 - 2012-02-17 15:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2016-03-03 13:49 - 2016-04-01 11:04 - 00000010 _____ C:\Users\Owner\AppData\Local\sponge.last.runtime.cache
2016-03-03 12:44 - 2016-03-03 12:44 - 00003102 _____ C:\Windows\System32\Tasks\{05F07E14-7DBA-42A0-97D3-283777807169}
2016-03-03 12:35 - 2016-03-20 01:01 - 00399360 _____ (Trend Micro Inc.) C:\Windows\RegBootClean64.exe
2016-03-03 12:34 - 2016-03-03 12:34 - 00000000 ___HD C:\TMRescueDisk
2016-03-03 12:31 - 2016-03-31 10:43 - 00001441 _____ C:\Users\Owner\Desktop\Trend Micro Maximum Security.lnk
2016-03-03 12:31 - 2016-03-03 12:31 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trend Micro Maximum Security
2016-03-03 12:30 - 2016-03-03 12:30 - 00000000 ____D C:\Windows\SysWOW64\tmumh
2016-03-03 12:30 - 2016-03-03 12:30 - 00000000 ____D C:\Windows\system32\tmumh
2016-03-03 12:30 - 2015-11-23 19:47 - 00324912 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmcomm.sys
2016-03-03 12:30 - 2015-11-23 19:47 - 00133424 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmactmon.sys
2016-03-03 12:30 - 2015-11-23 19:47 - 00099632 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmevtmgr.sys
2016-03-03 12:30 - 2015-06-29 21:38 - 00091536 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\TMUMH.sys
2016-03-03 12:30 - 2015-06-27 05:20 - 00116528 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmusa.sys
2016-03-03 12:30 - 2015-06-12 03:54 - 00059712 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\TMEBC64.sys
2016-03-03 12:30 - 2015-06-09 00:54 - 00116576 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmeevw.sys
2016-03-03 12:30 - 2015-05-29 05:26 - 00416608 ____N (Trend Micro Inc.) C:\Windows\system32\Drivers\tmnciesc.sys
2016-03-03 12:26 - 2016-03-03 12:26 - 00000059 _____ C:\Windows\system32\SupportTool.exe.bat
2016-03-03 12:25 - 2016-04-01 10:03 - 00000000 ____D C:\Users\Owner\AppData\Local\DP_Tower
2016-03-03 12:25 - 2016-03-03 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trend Micro Password Manager
2016-03-03 12:22 - 2016-03-03 12:26 - 00000000 ____D C:\Program Files\Trend Micro
2016-03-03 12:16 - 2016-03-31 10:44 - 00002183 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-03 12:16 - 2016-03-31 10:44 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-03 12:15 - 2016-04-01 19:20 - 00000896 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-03 12:15 - 2016-04-01 17:46 - 00000892 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-03 12:15 - 2016-03-03 12:15 - 00003892 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-03-03 12:15 - 2016-03-03 12:15 - 00003640 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-03-03 11:51 - 2016-03-03 11:51 - 00017197 _____ C:\Users\Owner\Desktop\CONACT LIST.xlsx
2016-03-03 10:53 - 2016-03-03 10:53 - 00464023 _____ C:\Users\Owner\Documents\WO 9641959.pdf
2016-03-03 10:44 - 2016-03-03 10:45 - 00741864 _____ C:\Users\Owner\Documents\WO 9642328.pdf
2016-03-03 10:31 - 2016-03-03 10:31 - 00535572 _____ C:\Users\Owner\Documents\WO 9555349.pdf
2016-03-03 09:02 - 2016-03-03 09:03 - 00000000 ___HD C:\ProgramData\CanonIJMIG
2016-03-03 09:02 - 2016-03-03 09:02 - 00639106 _____ C:\Users\Owner\Documents\WO 9568751.pdf
2016-03-03 08:03 - 2016-04-01 08:18 - 00000000 ____D C:\ProgramData\CanonIJPLM
2016-03-03 07:53 - 2016-03-03 07:53 - 00000000 ____D C:\Users\Owner\Mozilla
2016-03-03 07:35 - 2016-03-03 07:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2500 series
2016-03-03 07:35 - 2013-03-24 05:00 - 00393728 _____ (CANON INC.) C:\Windows\system32\CNMXLMBX.DLL
2016-03-03 07:34 - 2016-03-03 08:10 - 00000000 ____D C:\Users\Owner\AppData\LocalLow\Canon Easy-WebPrint EX
2016-03-03 07:34 - 2013-02-04 15:10 - 00321536 _____ (CANON INC.) C:\Windows\SysWOW64\CNC_BXL.dll
2016-03-03 07:34 - 2012-11-09 10:43 - 00088064 _____ C:\Windows\SysWOW64\CNC176DD.TBL
2016-03-03 07:34 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll
2016-03-03 07:33 - 2016-03-31 10:44 - 00002015 _____ C:\Users\Public\Desktop\Canon Quick Menu.lnk
2016-03-03 07:28 - 2016-03-31 10:44 - 00002334 _____ C:\Users\Public\Desktop\Canon MG2500 series On-screen Manual.lnk
2016-03-03 07:28 - 2016-03-03 07:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2016-03-03 07:28 - 2016-03-03 07:34 - 00000000 ____D C:\Program Files\Canon
2016-03-03 07:28 - 2016-03-03 07:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2500 series Manual
2016-03-03 07:27 - 2016-03-03 07:27 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-03-03 07:27 - 2016-03-03 07:27 - 00000000 ___HD C:\Program Files\CanonBJ
2016-03-03 07:27 - 2013-02-04 15:12 - 00367104 _____ (CANON INC.) C:\Windows\system32\CNC_BXL.dll
2016-03-03 07:27 - 2012-11-08 13:04 - 00282624 _____ (CANON INC.) C:\Windows\system32\CNC_BXC.dll
2016-03-03 07:27 - 2012-11-08 13:03 - 00106496 _____ (CANON INC.) C:\Windows\system32\CNC_BXI.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-01 19:14 - 2015-12-16 12:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-04-01 19:08 - 2015-09-05 17:26 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-01 17:53 - 2009-07-14 15:45 - 00022064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-01 17:53 - 2009-07-14 15:45 - 00022064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-01 17:50 - 2009-07-14 16:13 - 00783114 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-01 17:50 - 2009-07-14 14:20 - 00000000 ____D C:\Windows\inf
2016-04-01 17:45 - 2015-09-05 14:59 - 546757168 _____ C:\Windows\MEMORY.DMP
2016-04-01 17:45 - 2015-09-05 14:59 - 00000000 ____D C:\Windows\Minidump
2016-04-01 17:45 - 2009-07-14 16:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-01 12:57 - 2009-07-14 13:34 - 00000615 _____ C:\Windows\win.ini
2016-04-01 12:29 - 2009-07-14 14:20 - 00000000 ____D C:\Windows\rescache
2016-04-01 10:49 - 2009-07-14 14:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-04-01 07:56 - 2015-09-05 16:26 - 00000000 ____D C:\ProgramData\Trend Micro
2016-04-01 07:26 - 2015-09-05 13:05 - 00110424 _____ C:\Users\Owner\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-01 07:22 - 2009-07-14 15:45 - 00414672 _____ C:\Windows\system32\FNTCACHE.DAT
2016-04-01 00:25 - 2009-07-14 14:20 - 00000000 ____D C:\Windows\tracing
2016-04-01 00:25 - 2009-07-14 14:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-04-01 00:25 - 2009-07-14 14:20 - 00000000 ____D C:\Windows\system32\Dism
2016-04-01 00:25 - 2009-07-14 14:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-04-01 00:25 - 2009-07-14 14:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-04-01 00:25 - 2009-07-14 14:20 - 00000000 ____D C:\Windows\AppCompat
2016-03-31 23:51 - 2015-09-05 13:05 - 00767516 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-03-31 22:45 - 2015-09-05 11:28 - 00001443 _____ C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-31 18:15 - 2015-09-05 16:26 - 00000000 ____D C:\ProgramData\TMDP_Log
2016-03-31 10:44 - 2015-12-16 12:40 - 00001147 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-31 10:44 - 2015-12-16 12:40 - 00001141 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-03-31 10:44 - 2015-11-16 13:51 - 00001204 _____ C:\Users\Public\Desktop\Optus 3G WiFi Modem.lnk
2016-03-31 10:44 - 2015-11-03 13:41 - 00001998 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2016-03-31 10:44 - 2015-09-05 17:23 - 00000950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR Registration.lnk
2016-03-31 10:44 - 2015-09-05 14:50 - 00001293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
2016-03-31 10:44 - 2015-09-05 14:49 - 00001446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2016-03-31 10:44 - 2015-09-05 14:49 - 00001362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
2016-03-31 10:44 - 2015-09-05 14:48 - 00002474 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2016-03-31 10:44 - 2015-09-05 12:48 - 00000909 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-03-31 10:44 - 2015-09-05 12:19 - 00002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-03-31 10:44 - 2015-09-05 12:19 - 00002041 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-03-31 10:44 - 2015-09-05 11:15 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-03-31 10:44 - 2015-09-05 11:15 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-03-31 10:44 - 2009-07-14 15:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-03-31 10:44 - 2009-07-14 15:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-03-31 10:44 - 2009-07-14 15:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-03-31 10:44 - 2009-07-14 15:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-03-31 10:44 - 2009-07-14 15:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-03-31 10:43 - 2015-10-05 17:09 - 00001383 _____ C:\Users\Owner\Desktop\Dream Day First Home.lnk
2016-03-31 10:43 - 2015-09-08 12:39 - 00002265 _____ C:\Users\Owner\Desktop\NEW REPORT - Copy - Shortcut.lnk
2016-03-31 10:43 - 2009-07-14 16:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-03-31 10:43 - 2009-07-14 15:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-03-29 10:13 - 2015-09-05 17:26 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-29 10:13 - 2015-09-05 17:26 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-29 10:13 - 2015-09-05 17:26 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-08 09:17 - 2015-09-05 12:46 - 00000000 ____D C:\ProgramData\Oracle
2016-03-08 09:16 - 2015-09-05 12:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-03-08 09:16 - 2015-09-05 12:46 - 00000000 ____D C:\Program Files (x86)\Java
2016-03-08 09:15 - 2015-12-16 13:04 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-03-08 09:15 - 2015-09-05 12:46 - 00000000 ____D C:\Users\Owner\.oracle_jre_usage
2016-03-08 09:01 - 2015-09-05 16:29 - 00000000 ____D C:\Users\Owner\AppData\Local\Trend Micro
2016-03-07 06:18 - 2011-04-12 19:28 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-07 06:17 - 2009-07-14 14:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-03-07 06:16 - 2009-07-14 16:32 - 00000000 ____D C:\Program Files\Windows Defender
2016-03-07 06:16 - 2009-07-14 16:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-03-03 12:25 - 2015-09-05 16:27 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Trend Micro
2016-03-03 12:23 - 2015-09-05 16:26 - 00000000 ____D C:\ProgramData\TMDP_Setup
2016-03-03 12:15 - 2015-09-05 17:25 - 00000000 ____D C:\Users\Owner\AppData\Local\Deployment
2016-03-03 12:15 - 2015-09-05 17:25 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-03 09:01 - 2015-11-03 15:04 - 00000000 ___HD C:\ProgramData\CanonIJScan
2016-03-03 09:01 - 2015-11-03 15:03 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Canon
2016-03-03 08:13 - 2015-09-05 14:43 - 00000000 ____D C:\Users\Owner\AppData\Local\Windows Live
2016-03-03 08:13 - 2015-09-05 12:45 - 00000000 ____D C:\Program Files (x86)\Opera
2016-03-03 08:08 - 2015-09-05 17:25 - 00000000 ____D C:\Users\Owner\AppData\Local\Google
2016-03-03 08:00 - 2015-12-15 13:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2016-03-03 08:00 - 2015-09-05 17:23 - 00000000 ____D C:\Program Files (x86)\HP
2016-03-03 07:59 - 2015-09-05 17:23 - 00000000 ____D C:\ProgramData\HP
2016-03-03 07:53 - 2015-11-03 14:39 - 00000000 ____D C:\Program Files (x86)\Canon
2016-03-03 07:53 - 2015-09-05 11:27 - 00000000 ____D C:\Users\Owner
2016-03-03 07:35 - 2009-07-14 16:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-03-03 07:34 - 2009-07-14 14:20 - 00000000 __RSD C:\Windows\Media
2016-03-03 07:33 - 2015-11-03 14:45 - 00000000 ____D C:\ProgramData\CanonIJWSpt
2016-03-03 07:27 - 2015-09-05 12:19 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-03-03 07:03 - 2015-11-15 09:06 - 00000000 ____D C:\Users\Owner\AppData\Local\ElevatedDiagnostics
2016-03-03 07:02 - 2015-12-15 13:48 - 00000000 ____D C:\Users\Owner\AppData\Roaming\HpUpdate

==================== Files in the root of some directories =======

2015-09-05 13:41 - 2015-09-05 13:41 - 0000021 _____ () C:\Users\Owner\AppData\Roaming\fixcfg.ini
2015-09-05 16:25 - 2015-09-05 16:25 - 0000036 _____ () C:\Users\Owner\AppData\Local\housecall.guid.cache
2016-03-03 13:49 - 2016-04-01 11:04 - 0000010 _____ () C:\Users\Owner\AppData\Local\sponge.last.runtime.cache
2015-09-05 17:23 - 2015-09-05 17:23 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-09-05 11:57 - 2015-09-05 11:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Owner\AppData\Local\Temp\3B12087B7E279AC5F81BC6BD4B72049F.exe
C:\Users\Owner\AppData\Local\Temp\ACLMInstaller.exe
C:\Users\Owner\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\Owner\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Owner\AppData\Local\Temp\uninstall.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-03-29 16:59

==================== End of FRST.txt ============================

and the Addition.txt:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by [removed] (2016-04-01 19:22:44)
Running from C:\Users\[removed]\Desktop\mccc actions
Windows 7 Home Premium Service Pack 1 (X64) (2015-09-05 00:27:42)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-4007946012-266125307-3815581551-500 - Administrator - Disabled)
Guest (S-1-5-21-4007946012-266125307-3815581551-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4007946012-266125307-3815581551-1002 - Limited - Enabled)
Owner (S-1-5-21-4007946012-266125307-3815581551-1000 - Administrator - Enabled) => C:\Users\Owner

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Trend Micro Maximum Security (Enabled - Up to date) {8242D66F-41BD-4049-C2E6-E578E73B62A0}
AS: Trend Micro Maximum Security (Enabled - Up to date) {3923378B-6787-4FC7-F856-DE0A9CBC281D}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\…\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\…\Adobe Flash Player ActiveX) (Version: 21.0.0.197 - Adobe Systems Incorporated)
AuthenTec Fingerprint Software (HKLM\…\{5F1DFCC1-595D-4235-A044-E05B706D800A}) (Version: 9.0.6.22 - AuthenTec, Inc.)
Bing Bar (HKLM-x32\…\{449CE12D-E2C7-4B97-B19E-55D163EA9435}) (Version: 7.0.619.0 - Microsoft Corporation)
Bluetooth Stack for Windows by Toshiba (HKLM\…\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v8.00.13(T) - TOSHIBA CORPORATION)
Canon Easy-WebPrint EX (HKLM-x32\…\Easy-WebPrint EX) (Version: 1.6.0.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\…\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG2500 series MP Drivers (HKLM\…\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2500_series) (Version: 1.02 - Canon Inc.)
Canon MG2500 series On-screen Manual (HKLM-x32\…\Canon MG2500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM-x32\…\Canon My Image Garden) (Version: 3.3.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\…\Canon My Image Garden Design Files) (Version: 3.2.0 - Canon Inc.)
Canon My Printer (HKLM-x32\…\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\…\CanonQuickMenu) (Version: 2.6.1 - Canon Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dream Day First Home (HKLM-x32\…\Dream Day First Home_is1) (Version: - My Real Games Ltd)
Google Chrome (HKLM-x32\…\Google Chrome) (Version: 49.0.2623.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
I.R.I.S. OCR (HKLM-x32\…\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
Intel(R) Rapid Storage Technology (HKLM-x32\…\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.1.1001 - Intel Corporation)
Java 8 Update 73 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
JMicron Flash Media Controller Driver (HKLM-x32\…\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.76.1 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\…\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.6.1 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\…\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\…\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\…\Office14.SingleImage) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\…\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\…\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\…\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 43.0.1 (x86 en-US) (HKLM-x32\…\Mozilla Firefox 43.0.1 (x86 en-US)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\…\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
NVIDIA Graphics Driver 326.60 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 326.60 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0725 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
Optus 3G WiFi Modem (HKLM-x32\…\Optus 3G WiFi Modem) (Version: 1.12.03.74 - Huawei Technologies Co.,Ltd)
PlayReady PC Runtime amd64 (HKLM\…\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Product Improvement Study for HP Officejet Pro 8620 (HKLM\…\{71768BEC-CCE7-471C-B1FD-8E45A9AB0A72}) (Version: 32.0.90.45518 - Hewlett-Packard Co.)
Realtek Ethernet Controller Driver (HKLM-x32\…\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.92.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.5 (HKLM\…\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.5 - VS Revo Group, Ltd.)
Synaptics Pointing Device Driver (HKLM\…\SynTPDeinstKey) (Version: 18.1.7.18 - Synaptics Incorporated)
TFPU (Version: 1.0.0 - TOSHIBA) Hidden
TOSHIBA Fingerprint Utility (HKLM\…\TFPU{A7760E07-4C23-4766-A99E-F715F298E99C}) (Version: 1.0.2.27 - TOSHIBA Corporation)
Trend Micro Maximum Security (HKLM\…\{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}) (Version: 10.0 - Trend Micro Inc.)
Trend Micro Password Manager (HKLM\…\3A0FB4E3-2C0D-4572-A24D-67F1CAABDDP35_is1) (Version: 3.5.0.1355 - Trend Micro Inc.)
Trend Micro Titanium (Version: 10.0 - Trend Micro Inc.) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\…\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VLC media player (HKLM\…\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Driver Package - TOSHIBA (DVB7700ALL) Media (07/02/2013 2.3.3.56) (HKLM\…\FEB96EFD43393B6FF8BAEE8133683E668483F039) (Version: 07/02/2013 2.3.3.56 - TOSHIBA)
Windows Driver Package - TOSHIBA (TVALZ) System (07/14/2009 2.0.0.3) (HKLM\…\431B595EBA877CE1D3E3A48B287D4E74DA9EE7D2) (Version: 07/14/2009 2.0.0.3 - TOSHIBA)
Windows Live Essentials (HKLM-x32\…\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\…\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4007946012-266125307-3815581551-1000_Classes\CLSID\{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}\InprocServer32 -> C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll (TOSHIBA)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {6A579DB2-3F38-4CB0-BEF8-CDA093FB34E7} - System32\Tasks\HPCustParticipation HP Officejet Pro 8620 => C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPCustPartic.exe [2013-09-11] (Hewlett-Packard Co.)
Task: {732876DD-4BC1-4DD6-BA36-422EB9FEC2C5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {AC5E6700-B2B8-4481-95AA-55501EAAF7B6} - \{0C050B47-0A7E-7E09-7811-0E04080E117A} -> No File <==== ATTENTION
Task: {CEA24517-6399-479D-99C6-626802AD754A} - \YTDownloader -> No File <==== ATTENTION
Task: {D31B1E2B-238F-4692-B5BA-AC3031AD1E7E} - \YTDownloaderUpd -> No File <==== ATTENTION
Task: {EABD8738-0F93-49A0-80DE-8D4BD2743658} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-03] (Google Inc.)
Task: {F7BE1439-D5D4-4719-9224-6B1C1CE050FD} - System32\Tasks\{05F07E14-7DBA-42A0-97D3-283777807169} => pcalua.exe -a "C:\Program Files (x86)\YTDownloader\YTDUninstall.exe"
Task: {FAA2EA7D-734A-4114-9913-DDDD7292A6E5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-29] (Adobe Systems Incorporated)
Task: {FD09E1AB-7101-4299-B3CE-F06D232BC772} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-03] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-09-05 13:46 - 2013-08-10 04:32 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-03-03 12:25 - 2015-04-01 06:08 - 00026408 _____ () C:\Program Files\Trend Micro\AMSP\boost_system-vc110-mt-1_57.dll
2016-03-03 12:25 - 2015-04-01 06:08 - 00058320 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc110-mt-1_57.dll
2016-03-03 12:25 - 2015-04-01 06:09 - 00686608 _____ () C:\Program Files\Trend Micro\AMSP\sqlite3.dll
2016-03-03 12:25 - 2015-04-01 06:08 - 00110320 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc110-mt-1_57.dll
2016-03-03 12:25 - 2015-04-01 06:08 - 00036160 _____ () C:\Program Files\Trend Micro\AMSP\boost_chrono-vc110-mt-1_57.dll
2016-03-03 12:25 - 2015-04-01 06:09 - 01314920 _____ () C:\Program Files\Trend Micro\AMSP\libprotobuf.dll
2015-07-17 13:31 - 2015-07-17 13:31 - 00168544 ____N () C:\Program Files\Trend Micro\UniClient\plugins\LUADLL.dll
2014-01-15 14:42 - 2014-01-15 14:42 - 00351824 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2016-03-03 12:28 - 2015-07-17 13:31 - 00089088 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_thread-vc110-mt-1_52.dll
2016-03-03 12:28 - 2015-07-17 13:31 - 00018944 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_system-vc110-mt-1_52.dll
2016-03-03 12:28 - 2015-07-17 13:31 - 00049664 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_date_time-vc110-mt-1_52.dll
2016-03-03 12:28 - 2015-07-17 13:31 - 00761856 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_regex-vc110-mt-1_52.dll
2016-03-03 12:23 - 2016-03-19 19:15 - 00048128 _____ () C:\Program Files\Trend Micro\TMIDS\boost_date_time-vc110-mt-1_49.dll
2015-07-17 13:31 - 2015-07-17 13:31 - 00026408 ____N () C:\Program Files\Trend Micro\Titanium\plugin\boost_system-vc110-mt-1_57.dll
2015-07-17 13:31 - 2015-07-17 13:31 - 00065520 ____N () C:\Program Files\Trend Micro\Titanium\plugin\fcMsgDispatcher.dll
2016-03-03 12:24 - 2016-01-12 21:01 - 46400568 _____ () C:\Program Files\Trend Micro\TMIDS\tower\PwmTower.exe
2016-04-01 08:50 - 2016-04-01 08:50 - 00016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\ac4701918c30b429fd697650ccb0d06f\PSIClient.ni.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Owner\Downloads\Norton_Removal_Tool.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Owner\Downloads\TISPro_Download_SP_32bit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Owner\Downloads\TISPro_Download_SP_64bit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Owner\Downloads\ViberSetup.exe:$CmdTcID [64]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\trendmicro.com -> hxxps://pwm.trendmicro.com
IE restricted site: HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\bing.com -> bing.com
IE restricted site: HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\www-searching.com%20bing -> hxxp://www-searching.com%20bing

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 13:34 - 2009-06-11 08:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4007946012-266125307-3815581551-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: ATService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk => C:\Windows\pss\Bluetooth Manager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Owner^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Screen Clipper and Launcher.lnk => C:\Windows\pss\OneNote 2010 Screen Clipper and Launcher.lnk.Startup
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: ITSecMng => %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: TFPUPWDBankService => C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe /start
MSCONFIG\startupreg: TFPUService => C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe /start

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CEC5268F-7E87-4C1E-8F34-635D107811D8}] => (Allow) E:\!Hi-Tech-Work\DriverGenius2013\ksoft\xlmodule\download\minithunderplatform.exe
FirewallRules: [{DA49A86B-A0AE-42E7-B328-B6BFA2FDBD3C}] => (Allow) E:\!Hi-Tech-Work\DriverGenius2013\ksoft\xlmodule\download\minithunderplatform.exe
FirewallRules: [{564A07DA-D783-46F8-A2DE-ACE804F394AB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{7725FF72-5BEF-464E-AEDC-7E5142FAF2DD}] => (Allow) LPort=2869
FirewallRules: [{6EC50266-AEAC-49F7-9336-064EC173DDDE}] => (Allow) LPort=1900
FirewallRules: [{6ADC8B54-60FA-4217-8B2B-5DAA9A0A83CD}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C7FD42BA-36B6-4E8D-AA4A-E78834473652}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{C30FF6CD-6F78-4F15-BCFA-25CFE88C8175}] => (Allow) C:\Users\Owner\AppData\Local\Temp\7zS4023\HPDiagnosticCoreUI.exe
FirewallRules: [{E3D12BD4-3882-498D-86C9-ACEFAB70D86E}] => (Allow) C:\Users\Owner\AppData\Local\Temp\7zS4023\HPDiagnosticCoreUI.exe
FirewallRules: [{13078566-41E1-4EDF-8D5A-811AD69AB6E1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E1BC6C04-5BDF-44DC-91A9-6357156857CF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DD1A1BC8-1E28-4287-B791-69985780E5BD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

31-03-2016 18:44:23 Scheduled Checkpoint
31-03-2016 22:40:28 Windows Modules Installer
31-03-2016 23:28:59 Windows Update
01-04-2016 08:01:58 Windows Update
01-04-2016 08:34:59 Windows Update
01-04-2016 09:07:49 Windows Update
01-04-2016 10:33:44 Windows Update
01-04-2016 10:48:38 Windows Update
01-04-2016 10:53:58 Windows Update
01-04-2016 11:06:33 Windows Update
01-04-2016 11:10:57 Windows Update
01-04-2016 11:39:09 Windows Update
01-04-2016 12:55:38 Windows Update

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:
==================
Error: (04/01/2016 05:46:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2016 01:02:49 PM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (384) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x0000000000BB04A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x000000000000145C

   Cleanup: 1

Error: (04/01/2016 11:42:31 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (384) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x0000000000B904A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000000D70

   Cleanup: 1

Error: (04/01/2016 11:13:44 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (384) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x0000000000B804A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000000D70

   Cleanup: 1

Error: (04/01/2016 11:10:10 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (384) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x0000000000B804A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000000D70

   Cleanup: 1

Error: (04/01/2016 10:56:11 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (384) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x0000000000B804A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000000D70

   Cleanup: 1

Error: (04/01/2016 10:53:31 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (384) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x0000000000B804A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000000D70

   Cleanup: 1

Error: (04/01/2016 10:37:19 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (384) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x0000000000B704A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000000D70

   Cleanup: 1

Error: (04/01/2016 10:25:37 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (384) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x00000000015304A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000000D70

   Cleanup: 1

Error: (04/01/2016 10:09:22 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (384) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x00000000015304A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000000D70

   Cleanup: 1

System errors:
=============
Error: (04/01/2016 05:45:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DriverGenius Core Service service failed to start due to the following error:
%%2

Error: (04/01/2016 05:45:31 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000109 (0xa3a039d8988375d1, 0xb3b7465eeb01b33b, 0xfffff880009f1540, 0x0000000000000002)C:\Windows\MEMORY.DMP040116-24944-01

Error: (04/01/2016 05:45:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DgSafe service failed to start due to the following error:
%%2

Error: (04/01/2016 05:45:20 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 5:43:32 PM on ‎1/‎04/‎2016 was unexpected.

Error: (04/01/2016 10:00:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DriverGenius Core Service service failed to start due to the following error:
%%2

Error: (04/01/2016 10:00:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DgSafe service failed to start due to the following error:
%%2

Error: (04/01/2016 08:42:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DriverGenius Core Service service failed to start due to the following error:
%%2

Error: (04/01/2016 08:42:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DgSafe service failed to start due to the following error:
%%2

Error: (04/01/2016 08:41:23 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070308: Security Update for Windows 7 for x64-based Systems (KB3075226).

Error: (04/01/2016 08:19:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DriverGenius Core Service service failed to start due to the following error:
%%2

==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU P8800 @ 2.66GHz
Percentage of memory in use: 52%
Total physical RAM: 4060.86 MB
Available physical RAM: 1928.77 MB
Total Virtual: 8119.93 MB
Available Virtual: 5569.45 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:405.28 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 69F30708)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

I look forward to your advice.

ken545

Post #4April 1, 2016, 10:50 AM UTC

Good Morning

Thanks for the logs. Still see a bit of YT downloader running, lets fix it

All our tools and scanners run more efficiently when run from the desktop, so go into mccc actions , look for FRST64, right click on it and select CUT, come back to the desktop and right click on a blank space and select PASTE

I also posted instructions for Malwarebytes, its already installed, run a new scan with it and make sure it comes back clean

Open notepad , Go to Start –> All Programs –> Accessories –> Notepad.

Please copy the entire contents Inside of the code box below beginning with START and ending with END

(To do this highlight the contents of the box, right click on it and select copy. Right-click in the open notepad and select Paste).

Name the file Fixlist.txt , Save it to your desktop where you have FRST/FRST64 or the fix wont work. Right Click on FRST/FRST64 and select RUN AS ADMINISTRATOR Then click on >FIX< (Not Scan) It won't take long, after your computer reboots you will find a FIXLOG.TXT on your desktop, post it please

Start
CloseProcesses:
CreateRestorePoint: 
CHR HomePage: Default -> hxxp://www-searching.com/?pid=s&s=FCGzairdk0777,2108d3e4-f7c2-4091-85de-9069eb9ae860&vp=ch&prd=set_ch
CHR StartupUrls: Default -> "hxxp://www-searching.com/?pid=s&s=FCGzairdk0777,2108d3e4-f7c2-4091-85de-9069eb9ae860&vp=ch&prd=set_ch"
Task: {AC5E6700-B2B8-4481-95AA-55501EAAF7B6} - \{0C050B47-0A7E-7E09-7811-0E04080E117A} -> No File <==== ATTENTION
Task: {CEA24517-6399-479D-99C6-626802AD754A} - \YTDownloader -> No File <==== ATTENTION
Task: {D31B1E2B-238F-4692-B5BA-AC3031AD1E7E} - \YTDownloaderUpd -> No File <==== ATTENTION
CMD: ipconfig /flushdns
Hosts:
EmptyTemp:
End

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

==========================================================================

-AdwCleaner-by Xplode

Click on this link to download : ADWCleaner TO YOUR DESKTOP

Use my link only, do not do a search for AdwCleaner as there is a bogus copy going around by scammers

[external image: AdwCleaner4.201_zpsxrbk2llq.jpg]

Close all open programs and internet browsers.

Double click on AdwCleaner.exe to run the tool.

Click on Scan.

After the scan is complete click on "Clean"

Confirm each time with Ok.

Your computer will be rebooted automatically. A text file will open after the restart.

Please post the content of that logfile with your next reply.

You can find the logfile at C:\AdwCleaner[S1].txt as well.

===============================================================================

[external image: thisisujrt.gif] Please download Junkware Removal Tool TO YOUR DESKTOP

Download the one from Bleeping Computer

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Post the contents of JRT.txt into your next message.

===============================================================================

Download Malwarebytes' Anti-Malware TO YOUR DESKTOP

Windows XP : Double click on the icon to run it.

Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"

[external image: MB%202.2.1.1043_zps9tg44ubl.jpg]

On the Dashboard click on Update Now

Go to the Setting Tab

Under Setting go to Detection and Protection

Under PUP and PUM make sure both are set to show Treat Detections as Malware

Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked

Then on the Dashboard click on Scan

Make sure to select THREAT SCAN

Then click on Scan

When the scan is finished on the bottom right click on SAVE RESULTS then select Copy to Clipboard

Please paste the log back into this thread for review

Exit Malwarebytes

kangaroo

Post #5April 3, 2016, 2:45 PM UTC

Thanks Ken454 for your continued help and clarification about running utilities from desktop.

The FRST64 scan log is:

Fix result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by [removed] (2016-04-03 22:57:35) Run:1
Running from C:\Users\[removed]\Desktop
[removed] Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
CHR HomePage: Default -> hxxp://www-searching.com/?pid=s&s=FCGzairdk0777,2108d3e4-f7c2-4091-85de-9069eb9ae860&vp=ch&prd=set_ch
CHR StartupUrls: Default -> "hxxp://www-searching.com/?pid=s&s=FCGzairdk0777,2108d3e4-f7c2-4091-85de-9069eb9ae860&vp=ch&prd=set_ch"
Task: {AC5E6700-B2B8-4481-95AA-55501EAAF7B6} - \{0C050B47-0A7E-7E09-7811-0E04080E117A} -> No File <==== ATTENTION
Task: {CEA24517-6399-479D-99C6-626802AD754A} - \YTDownloader -> No File <==== ATTENTION
Task: {D31B1E2B-238F-4692-B5BA-AC3031AD1E7E} - \YTDownloaderUpd -> No File <==== ATTENTION
CMD: ipconfig /flushdns
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.
Chrome HomePage => removed successfully
Chrome StartupUrls => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC5E6700-B2B8-4481-95AA-55501EAAF7B6}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC5E6700-B2B8-4481-95AA-55501EAAF7B6}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{0C050B47-0A7E-7E09-7811-0E04080E117A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CEA24517-6399-479D-99C6-626802AD754A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CEA24517-6399-479D-99C6-626802AD754A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YTDownloader" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D31B1E2B-238F-4692-B5BA-AC3031AD1E7E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D31B1E2B-238F-4692-B5BA-AC3031AD1E7E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YTDownloaderUpd" => key removed successfully

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 3.4 GB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 23:01:45 ====

Next was AdwCleaner; this produced two logs: AdwCleaner[S1].txt and AdwCleaner[C1].txt. You asked for the [S1] log but I'll give both in case they help. First here is the AdwCleaner[S1].txt:

# AdwCleaner v5.108 - Logfile created 03/04/2016 at 23:34:16
# Updated 30/03/2016 by Xplode
# Database : 2016-03-30.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Owner - OWNER-PC
# Running from : C:\Users\Owner\Desktop\AdwCleaner.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****

Service Found : BrsHelper

***** [ Folders ] *****

Folder Found : C:\Users\Owner\AppData\Local\Installer\Install_23787
Folder Found : C:\Users\Owner\AppData\Local\Installer\Install_3570

***** [ Files ] *****

***** [ DLL ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\Classes\AniGIFPpg.AniGIFPpg
Key Found : HKLM\SOFTWARE\Classes\AniGIFPpg.AniGIFPpg.1
Key Found : HKLM\SOFTWARE\Classes\AniGIFPpg2.AniGIFPpg2
Key Found : HKLM\SOFTWARE\Classes\AniGIFPpg2.AniGIFPpg2.1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
Key Found : [x64] HKLM\SOFTWARE\WebBar

***** [ Web browsers ] *****

[C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : www-searching.com

*************************

C:\AdwCleaner\AdwCleaner[S1].txt - [1249 bytes] - [03/04/2016 23:34:16]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1322 bytes] ##########

and here is the AdwCleaner[C1].txt log:

# AdwCleaner v5.108 - Logfile created 03/04/2016 at 23:36:55
# Updated 30/03/2016 by Xplode
# Database : 2016-03-30.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Owner - OWNER-PC
# Running from : C:\Users\Owner\Desktop\AdwCleaner.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : BrsHelper

***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Owner\AppData\Local\Installer\Install_23787
[-] Folder Deleted : C:\Users\Owner\AppData\Local\Installer\Install_3570

***** [ Files ] *****

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFPpg.AniGIFPpg
[-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFPpg.AniGIFPpg.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFPpg2.AniGIFPpg2
[-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFPpg2.AniGIFPpg2.1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
[-] Key Deleted : [x64] HKLM\SOFTWARE\WebBar

***** [ Web browsers ] *****

[-] [C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : www-searching.com

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1398 bytes] - [03/04/2016 23:36:55]
C:\AdwCleaner\AdwCleaner[S1].txt - [1405 bytes] - [03/04/2016 23:34:16]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1544 bytes] ##########

Next was the JRT tool and here is its log:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.4 (03.14.2016)
Operating System: Windows 7 Home Premium x64
Ran by [removed] (Administrator) on Sun 03/04/2016 at 23:55:29.11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 20

Successfully deleted: C:\ProgramData\thunder network (Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\{083E5BBD-6FC6-43E2-9032-B83C93EF9B2E} (Empty Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\{3BBF7E2C-C914-455A-9E27-327DE67070EC} (Empty Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\{4B971D83-7896-4773-8EB5-835953934F7D} (Empty Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\{564F6249-166C-4C81-88D6-6C1BF9A86686} (Empty Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\{6B4C2C8F-095E-4217-8F66-AFCE68EDFD5C} (Empty Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\{7A31CFB6-26AE-4C09-A63E-36F2990AE188} (Empty Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\{DC1FC98A-905D-47F7-9501-3924B9B89A52} (Empty Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\crashrpt (Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\installer (Folder)
Successfully deleted: C:\Users\Owner\AppData\Roaming\dg (Folder)
Successfully deleted: C:\Users\Public\thunder network (Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4TKFVQM5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7N7BSAH8 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7WIK2RMR (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIKD68BY (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4TKFVQM5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7N7BSAH8 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7WIK2RMR (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIKD68BY (Temporary Internet Files Folder)

Registry: 2

Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\DGPNPSEV (Registry Key)
Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\DgSafe (Registry Key)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 03/04/2016 at 23:58:04.11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

And finally, the Malwarebytes log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/04/2016
Scan Time: 12:09 AM
Logfile:
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.04.03.03
Rootkit Database: v2016.03.30.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Owner

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 337361
Time Elapsed: 12 min, 48 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)

Again, I look forward to your further comments.

ken545

Post #6April 3, 2016, 3:12 PM UTC

Looking good, nice job with running the programs and posting the logs…Thank you

How is this system running now, any better ? Anything showing up related to YT Downloader ?

Let me take a final look, open up FRST64 by Right clicking on it and select RUN AS ADMINISTRATOR. Make sure that Additions is checked, leave everything else as is, click on Scan and post new FRST64 and Additions logs please

kangaroo

Post #7April 4, 2016, 12:12 AM UTC last edited April 4, 2016, 12:15 AM UTC

Hi Ken454,

System seems to be much better now. No sign that I can see of YT Downloader.

Here are some timings that I have done:

Startup time:
to Starting Windows:      0:12
to Welcome:                      1:21
to Desktop:                        1:30
to stable:                             2:25

Open Word time:
to splash image: 0:21 then 0:01
to document (161Kb): 0:24 and 0:02

Open IE8 time: 0:19 (two home tabs: blank and ninemsn)

Open Firefox time: 0:18 (one tab: Mozilla Firefox start page)

Open link to WTT from msg in SquirrelMail time: 0:06

Open Excel time:
to splash image: 0:06
to document (161Kb): 0:07 (blank sheet)

One issue I noticed, which now seems to have cleared up:

I deleted two left over Word temp files and then opened Recycle Bin to check what was in it (just those two); emptied RB but two files still remained in open RB but “Empty RB” option greyed out on Organize menu; closed RB but icon still showed crumpled paper in wastepaper basket version; “Empty RB” option on context menu greyed out; opened RB and no files showed; closed RB still showing full icon on desktop. Trend Micro has added an option to context menu for RB: “Empty RB securely” (also greyed out), could this be why RB icon remains as Full version regardless?

I then deleted another Word tmp file and this time did the “Empty securely” option. After this the RB (empty) icon version is shown. This now seems to be working normally again. Not sure if this means anything.

I've run the FRST64 scan as requested. Here is the FRST.txt log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by [removed] (administrator) on OWNER-PC (04-04-2016 09:13:08)
Running from C:\Users\[removed]\Desktop
[removed] Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Malwarebytes) C:\Users\Owner\Desktop\Malwarebytes Anti-Malware\mbamscheduler.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Malwarebytes) C:\Users\Owner\Desktop\Malwarebytes Anti-Malware\mbamservice.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\TMIDS\PwmSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Users\Owner\Desktop\Malwarebytes Anti-Malware\mbam.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
() C:\Program Files\Trend Micro\TMIDS\tower\PwmTower.exe
() C:\Program Files\Trend Micro\TMIDS\tower\PwmTower.exe
() C:\Program Files\Trend Micro\TMIDS\tower\PwmTower.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\…\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2818800 2014-08-25] (Synaptics Incorporated)
HKLM\…\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [246264 2015-07-17] (Trend Micro Inc.)
HKLM\…\Run: [Platinum] => C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe [1258496 2015-07-17] (Trend Micro Inc.)
HKLM\…\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\…\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1298456 2015-04-20] (CANON INC.)
HKLM-x32\…\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\Run: [Mobile Partner] => C:\Program Files (x86)\Optus 3G WiFi Modem\Optus 3G WiFi Modem
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\MountPoints2: {520599a8-9d16-11e5-9158-002622f790ea} - E:\AutoRun.exe
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\MountPoints2: {56e44ee2-8c0b-11e5-8e28-002622f790ea} - E:\AutoRun.exe
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\MountPoints2: {56e44ef6-8c0b-11e5-8e28-002622f790ea} - F:\AutoRun.exe
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\MountPoints2: {ee185b1e-f847-11e5-92a8-002622f790ea} - E:\AutoRun.exe
ShellIconOverlayIdentifiers: [ATFPUOverlayIcon] -> {3239DBC1-B76D-4dc7-8B29-D99CBA3C7336} => C:\Program Files\TOSHIBA\TFPU\TFPUOverlayIcon.dll [2010-03-01] (TOSHIBA)
Startup: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2016-03-31]
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{182C8079-68DB-45A5-92F2-14219E5EFD22}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{916E8177-5B8E-4DDD-98D8-5A4F4ABDA8A2}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{BEA06327-9D37-4C4F-9FFC-093128DF1B17}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{C6C59350-361C-4F0E-8F4B-319E6D2BE832}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-4007946012-266125307-3815581551-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://ninemsn.com.au/
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2015-12-21] (Trend Micro Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Trend Micro Network Filter Plugin -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.8.1222\2.0.1084\TmopIEPlg.dll [2015-07-17] (Trend Micro Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\TmBpIe64.dll [2015-08-17] (Trend Micro Inc.)
BHO-x32: TFPUPWDBankBHO Class -> {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} -> C:\Program Files\TOSHIBA\TFPU\x86\TFPUPWDBankBHO.dll [2010-03-01] (TODO: )
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO-x32: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2015-12-21] (Trend Micro Inc.)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll [2016-04-02] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Trend Micro Network Filter Plugin -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.8.1222\2.0.1084\TmopIEPlg32.dll [2015-07-17] (Trend Micro Inc.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\TmBpIe32.dll [2015-08-17] (Trend Micro Inc.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-04-01] (Microsoft Corporation.)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-04-02] (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM - Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2015-12-21] (Trend Micro Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-04-01] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2015-12-21] (Trend Micro Inc.)
Toolbar: HKU\S-1-5-21-4007946012-266125307-3815581551-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\TmBpIe64.dll [2015-08-17] (Trend Micro Inc.)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\TmBpIe32.dll [2015-08-17] (Trend Micro Inc.)
Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.8.1222\2.0.1084\TmopIEPlg.dll [2015-07-17] (Trend Micro Inc.)
Handler-x32: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.8.1222\2.0.1084\TmopIEPlg32.dll [2015-07-17] (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2015-12-21] (Trend Micro Inc.)
Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2015-12-21] (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ProToolbarIMRatingActiveX.dll [2015-07-17] (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll [2015-07-17] (Trend Micro Inc.)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2015-12-11] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-12-11] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2015-12-11] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-12-11] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\73rvtbwi.default
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-17] (VideoLAN)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-04-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-04-02] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-04-01] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-02-09] (Adobe Systems Inc.)
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\firefoxextension [2016-03-03]
FF HKLM\…\Firefox\Extensions: [{C1CA7765-44E4-452e-9D00-A04F3D434281}] - => not found
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\firefoxextension
FF HKLM-x32\…\Firefox\Extensions: [{C1CA7765-44E4-452e-9D00-A04F3D434281}] - C:\Program Files\TOSHIBA\TFPU\FirefoxAddin
FF Extension: Automatic password input in Fx - C:\Program Files\TOSHIBA\TFPU\FirefoxAddin [2015-09-05] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\firefoxextension
FF HKLM-x32\…\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2016-03-17]
FF HKLM-x32\…\Firefox\Extensions: [{BBB77B49-9FF4-4d5c-8FE2-92B1D6CD696C}] - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension
FF Extension: Trend Micro Osprey Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension [2016-03-03]

Chrome:
=======
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-05]
CHR Extension: (Google Docs) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-05]
CHR Extension: (Google Drive) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-28]
CHR Extension: (YouTube) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-08]
CHR Extension: (Google Search) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Google Sheets) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-05]
CHR Extension: (Google Docs Offline) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-31]
CHR Extension: (Google Keep - notes and lists) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2016-04-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-05]
CHR Extension: (Trend Micro Toolbar) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohhcpmplhhiiaoiddkfboafbhiknefdf [2016-03-08]
CHR Extension: (Gmail) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-05]
CHR HKLM-x32\…\Chrome\Extension: [ohhcpmplhhiiaoiddkfboafbhiknefdf] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2014-01-15] ()
R2 MBAMScheduler; C:\Users\Owner\Desktop\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Users\Owner\Desktop\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 Platinum Host Service; C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe [1137664 2015-07-17] (Trend Micro Inc.)
R2 PwmSvc; C:\Program Files\Trend Micro\TMIDS\PwmSvc.exe [1567288 2016-03-19] (Trend Micro Inc.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [191728 2014-08-25] (Synaptics Incorporated)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 DVB7700ALL; C:\Windows\System32\Drivers\dvb7700all.sys [711168 2013-07-31] (DiBcom)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-11] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-12-11] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-04] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2014-08-25] (Synaptics Incorporated)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [133424 2015-11-23] (Trend Micro Inc.)
R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [324912 2015-11-23] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [59712 2015-06-12] (Trend Micro Inc.)
R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [116576 2015-06-08] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [99632 2015-11-23] (Trend Micro Inc.)
R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [416608 2015-05-29] (Trend Micro Inc.)
R1 tmumh; C:\Windows\System32\DRIVERS\TMUMH.sys [91536 2015-06-29] (Trend Micro Inc.)
R2 tmusa; C:\Windows\System32\DRIVERS\tmusa.sys [116528 2015-06-27] (Trend Micro Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-04 09:13 - 2016-04-04 09:13 - 00020943 _____ C:\Users\Owner\Desktop\FRST.txt
2016-04-04 00:04 - 2016-04-04 00:04 - 00000000 ____D C:\Users\Owner\Desktop\Malwarebytes Anti-Malware
2016-04-04 00:02 - 2016-03-31 08:42 - 22851472 _____ (Malwarebytes ) C:\Users\Owner\Desktop\mbam-setup-2.2.1.1043.exe
2016-04-03 23:58 - 2016-04-03 23:58 - 00003128 _____ C:\Users\Owner\Desktop\JRT.txt
2016-04-03 23:47 - 2016-04-03 23:47 - 01610352 _____ (Malwarebytes) C:\Users\Owner\Desktop\JRT.exe
2016-04-03 23:33 - 2016-04-03 23:36 - 00000000 ____D C:\AdwCleaner
2016-04-03 23:29 - 2016-04-03 23:30 - 03102720 _____ C:\Users\Owner\Desktop\AdwCleaner.exe
2016-04-03 22:57 - 2016-04-03 23:01 - 00002756 _____ C:\Users\Owner\Desktop\Fixlog.txt
2016-04-01 18:21 - 2016-04-04 09:13 - 00000000 ____D C:\FRST
2016-04-01 18:16 - 2016-04-01 18:17 - 02374144 _____ (Farbar) C:\Users\Owner\Desktop\FRST64.exe
2016-04-01 16:45 - 2016-04-01 16:45 - 00291200 _____ C:\Windows\Minidump\040116-24944-01.dmp
2016-04-01 10:23 - 2016-04-02 06:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-04-01 09:54 - 2016-04-01 09:54 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-04-01 09:54 - 2016-04-01 09:54 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-04-01 09:11 - 2016-04-01 09:11 - 00000000 ____D C:\Users\Owner\AppData\Local\WindowsUpdate
2016-04-01 08:07 - 2016-03-26 05:06 - 00038120 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-04-01 08:07 - 2016-03-26 04:54 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-04-01 08:07 - 2016-03-24 00:02 - 01385472 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-04-01 08:07 - 2016-03-24 00:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-04-01 08:07 - 2016-03-18 04:04 - 00698368 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-04-01 08:07 - 2016-03-18 04:04 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-04-01 08:07 - 2016-03-18 04:04 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-04-01 08:07 - 2016-03-18 04:04 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-04-01 08:07 - 2015-07-17 05:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-04-01 08:07 - 2015-07-17 05:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-04-01 08:07 - 2015-07-17 05:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-04-01 08:07 - 2015-07-17 05:11 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-04-01 08:07 - 2015-07-17 05:11 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-04-01 08:07 - 2015-07-17 05:11 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-04-01 08:07 - 2015-07-11 23:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2016-04-01 07:41 - 2016-04-01 07:41 - 00000000 ____D C:\Windows\system32\%commonappdata%
2016-04-01 07:38 - 2016-04-04 09:12 - 00000000 ____D C:\Users\Owner\Desktop\mccc actions
2016-04-01 07:34 - 2015-12-21 04:50 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-04-01 07:34 - 2015-12-21 04:50 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-04-01 07:34 - 2015-12-21 00:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-04-01 07:33 - 2014-12-12 03:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-03-31 23:25 - 2016-04-01 08:59 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-31 23:25 - 2016-04-01 06:34 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-31 23:25 - 2016-03-31 23:25 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-31 23:25 - 2016-03-31 23:25 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-03-31 23:03 - 2013-10-02 12:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2016-03-31 23:03 - 2013-10-02 12:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2016-03-31 23:03 - 2013-10-02 12:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2016-03-31 23:03 - 2013-10-02 11:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2016-03-31 23:03 - 2013-10-02 11:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2016-03-31 23:03 - 2013-10-02 11:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2016-03-31 23:03 - 2013-10-02 10:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2016-03-31 23:03 - 2013-10-02 10:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2016-03-31 23:03 - 2013-10-02 09:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-03-31 23:03 - 2013-10-02 08:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-03-31 22:57 - 2012-08-24 00:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2016-03-31 22:57 - 2012-08-24 00:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2016-03-31 22:56 - 2012-08-23 21:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2016-03-31 22:56 - 2012-08-23 20:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2016-03-31 22:41 - 2012-07-26 13:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2016-03-31 22:41 - 2012-07-26 13:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2016-03-31 22:41 - 2012-07-26 13:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-03-31 22:41 - 2012-07-26 13:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2016-03-31 22:41 - 2012-07-26 13:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2016-03-31 22:41 - 2012-07-26 12:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2016-03-31 22:41 - 2012-07-26 12:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2016-03-31 22:41 - 2012-06-03 00:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-03-31 22:30 - 2016-03-31 22:37 - 00000000 ____D C:\Windows\system32\MRT
2016-03-31 22:30 - 2016-03-31 22:30 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-31 22:28 - 2014-08-01 21:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-03-31 22:28 - 2014-08-01 21:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2016-03-31 22:28 - 2012-12-07 23:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-03-31 22:28 - 2012-12-07 23:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-03-31 22:28 - 2012-12-07 22:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2016-03-31 22:28 - 2012-12-07 22:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-03-31 22:28 - 2012-12-07 21:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2016-03-31 22:28 - 2012-12-07 21:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2016-03-31 22:28 - 2012-12-07 21:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2016-03-31 22:28 - 2012-12-07 21:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2016-03-31 22:28 - 2012-12-07 21:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2016-03-31 22:28 - 2012-12-07 21:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2016-03-31 22:28 - 2012-12-07 21:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2016-03-31 22:28 - 2012-12-07 21:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2016-03-31 22:28 - 2012-12-07 21:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2016-03-31 22:28 - 2012-12-07 21:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2016-03-31 22:28 - 2012-12-07 21:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2016-03-31 22:28 - 2012-12-07 21:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2016-03-31 22:28 - 2012-12-07 21:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2016-03-31 22:28 - 2012-12-07 21:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2016-03-31 22:28 - 2012-12-07 20:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2016-03-31 22:27 - 2015-08-06 03:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2016-03-31 22:27 - 2015-08-06 03:06 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-03-31 22:27 - 2015-07-23 10:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-03-31 22:27 - 2015-07-23 10:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-03-31 22:27 - 2015-07-23 03:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-03-31 22:27 - 2015-07-23 02:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-03-31 22:27 - 2013-08-05 12:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2016-03-31 22:26 - 2015-12-17 04:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-03-31 22:26 - 2015-12-17 04:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2016-03-31 22:26 - 2015-12-17 04:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2016-03-31 22:26 - 2015-12-17 04:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2016-03-31 22:26 - 2015-12-17 04:48 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2016-03-31 22:26 - 2015-12-17 04:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2016-03-31 22:26 - 2015-12-17 04:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2016-03-31 22:26 - 2015-12-17 04:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2016-03-31 22:26 - 2015-12-17 00:38 - 00419928 _____ C:\Windows\SysWOW64\locale.nls
2016-03-31 22:26 - 2015-12-17 00:37 - 00419928 _____ C:\Windows\system32\locale.nls
2016-03-31 22:26 - 2015-05-26 04:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-03-31 22:26 - 2015-05-26 04:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-03-31 22:26 - 2015-05-26 04:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-03-31 22:26 - 2015-05-26 04:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-03-31 22:26 - 2015-05-26 04:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-03-31 22:26 - 2015-05-26 04:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-03-31 22:26 - 2015-05-26 04:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-03-31 22:26 - 2015-05-26 04:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-03-31 22:26 - 2015-05-26 04:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2016-03-31 22:26 - 2015-05-26 04:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2016-03-31 22:26 - 2015-05-26 04:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2016-03-31 22:26 - 2015-05-26 04:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2016-03-31 22:25 - 2016-01-22 16:19 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-03-31 22:25 - 2016-01-22 16:15 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-03-31 22:25 - 2016-01-22 16:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-03-31 22:25 - 2016-01-22 16:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-03-31 22:25 - 2016-01-22 15:19 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-03-31 22:25 - 2016-01-22 15:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-03-31 22:25 - 2015-04-28 05:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-03-31 22:25 - 2015-04-28 05:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-03-31 22:25 - 2015-04-28 05:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-03-31 22:25 - 2015-04-28 05:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-03-31 22:25 - 2015-04-28 05:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-03-31 22:25 - 2015-04-28 05:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-03-31 22:25 - 2015-04-28 05:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-03-31 22:25 - 2015-04-28 05:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-03-31 22:25 - 2013-12-04 12:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-03-31 22:25 - 2013-12-04 12:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-03-31 22:25 - 2013-12-04 12:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-03-31 22:25 - 2013-12-04 12:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-03-31 22:25 - 2013-12-04 12:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-03-31 22:25 - 2013-12-04 12:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-03-31 22:25 - 2013-12-04 12:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-03-31 22:25 - 2013-12-04 12:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-03-31 22:25 - 2013-12-04 12:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-03-31 22:25 - 2013-12-04 12:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2016-03-31 22:25 - 2013-12-04 12:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2016-03-31 22:25 - 2013-12-04 12:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2016-03-31 22:25 - 2013-12-04 12:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2016-03-31 22:25 - 2013-12-04 12:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-03-31 22:25 - 2013-12-04 11:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2016-03-31 22:25 - 2013-12-04 11:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2016-03-31 22:25 - 2013-12-04 11:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2016-03-31 22:25 - 2013-12-04 11:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2016-03-31 22:24 - 2015-11-20 00:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-31 22:24 - 2015-11-20 00:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-31 22:24 - 2013-10-04 12:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2016-03-31 22:24 - 2013-10-04 12:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2016-03-31 22:24 - 2013-10-04 11:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2016-03-31 22:24 - 2013-10-04 11:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2016-03-31 22:24 - 2012-10-04 03:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2016-03-31 22:24 - 2012-10-04 03:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2016-03-31 22:24 - 2012-10-04 03:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-03-31 22:24 - 2012-10-04 02:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2016-03-31 22:24 - 2012-10-04 02:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2016-03-31 22:24 - 2012-10-04 02:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-03-31 22:24 - 2011-03-11 16:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2016-03-31 22:24 - 2011-03-11 16:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2016-03-31 22:24 - 2011-03-11 16:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2016-03-31 22:24 - 2011-03-11 16:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2016-03-31 22:24 - 2011-03-11 16:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2016-03-31 22:24 - 2011-03-11 16:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-03-31 22:24 - 2011-03-11 16:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2016-03-31 22:24 - 2011-03-11 15:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-03-31 22:24 - 2011-03-11 15:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2016-03-31 22:23 - 2016-02-02 05:08 - 00114624 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-03-31 22:23 - 2016-02-02 04:59 - 03243008 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-03-31 22:23 - 2016-02-02 04:59 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-03-31 22:23 - 2016-02-02 04:59 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-03-31 22:23 - 2016-02-02 04:56 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-03-31 22:23 - 2016-02-02 04:56 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-03-31 22:23 - 2016-02-02 04:49 - 02364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-03-31 22:23 - 2016-02-02 04:49 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-03-31 22:23 - 2016-02-02 04:49 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-03-31 22:23 - 2016-02-02 04:45 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-03-31 22:23 - 2015-10-30 03:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-03-31 22:23 - 2015-10-30 03:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-03-31 22:23 - 2015-10-30 03:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-03-31 22:23 - 2015-10-30 03:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-03-31 22:23 - 2015-10-30 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-03-31 22:23 - 2015-10-30 03:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-03-31 22:23 - 2015-10-30 03:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-03-31 22:23 - 2015-06-04 06:16 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-03-31 22:23 - 2013-05-10 15:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-03-31 22:23 - 2013-05-10 13:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2016-03-31 22:23 - 2012-10-10 04:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-03-31 22:23 - 2012-10-10 04:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-03-31 22:23 - 2012-10-10 03:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-03-31 22:23 - 2012-10-10 03:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2016-03-31 22:23 - 2012-01-04 20:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-03-31 22:23 - 2012-01-04 18:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-03-31 22:22 - 2015-11-06 05:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-03-31 22:22 - 2015-11-06 05:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-03-31 22:22 - 2012-08-22 07:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2016-03-31 22:17 - 2011-02-18 20:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2016-03-31 22:17 - 2011-02-18 15:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2016-03-31 22:11 - 2016-02-06 04:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2016-03-31 22:11 - 2016-02-06 04:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-03-31 22:11 - 2016-02-06 03:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll
2016-03-31 22:11 - 2016-01-12 05:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-31 22:11 - 2015-06-04 06:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-03-31 22:11 - 2014-07-09 12:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2016-03-31 22:11 - 2014-07-09 12:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2016-03-31 22:11 - 2014-07-09 12:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2016-03-31 22:11 - 2014-07-09 12:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2016-03-31 22:11 - 2014-07-09 12:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2016-03-31 22:11 - 2014-07-09 11:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2016-03-31 22:11 - 2014-07-09 11:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2016-03-31 22:11 - 2014-07-09 11:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2016-03-31 22:11 - 2014-07-09 11:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2016-03-31 22:11 - 2014-07-09 11:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2016-03-31 22:11 - 2014-02-04 12:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-03-31 22:11 - 2014-02-04 12:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-03-31 22:11 - 2014-02-04 12:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2016-03-31 22:11 - 2014-02-04 12:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2016-03-31 22:11 - 2014-02-04 12:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2016-03-31 22:11 - 2011-06-16 15:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2016-03-31 22:11 - 2011-06-16 14:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2016-03-31 22:11 - 2011-05-04 15:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-03-31 22:11 - 2011-05-04 15:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-03-31 22:11 - 2011-05-04 15:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-03-31 22:11 - 2011-05-04 15:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-03-31 22:11 - 2011-05-04 15:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2016-03-31 22:11 - 2011-05-04 15:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-03-31 22:11 - 2011-05-04 15:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-03-31 22:11 - 2011-05-04 15:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-03-31 22:11 - 2011-05-04 15:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-03-31 22:11 - 2011-05-04 14:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-03-31 22:11 - 2011-05-04 14:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-03-31 22:11 - 2011-05-04 14:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-03-31 22:11 - 2011-05-04 14:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-03-31 22:11 - 2011-05-04 14:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-03-31 22:11 - 2011-05-04 14:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2016-03-31 22:11 - 2011-05-04 14:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-03-31 22:11 - 2011-05-04 14:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-03-31 22:11 - 2011-05-04 14:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-03-31 22:10 - 2015-07-10 03:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-03-31 22:10 - 2015-07-10 03:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-03-31 22:10 - 2015-07-10 03:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-03-31 22:10 - 2015-07-10 03:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-03-31 22:10 - 2013-01-24 16:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-03-31 22:10 - 2012-07-05 06:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2016-03-31 22:03 - 2015-01-29 13:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-03-31 22:03 - 2015-01-29 13:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2016-03-31 22:03 - 2014-10-30 12:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2016-03-31 22:03 - 2014-10-30 11:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2016-03-31 22:03 - 2014-10-03 12:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-03-31 22:03 - 2014-10-03 12:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-03-31 22:03 - 2014-10-03 12:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-03-31 22:03 - 2014-10-03 12:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-03-31 22:03 - 2014-10-03 12:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-03-31 22:03 - 2014-10-03 11:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-03-31 22:03 - 2014-10-03 11:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-03-31 22:03 - 2014-10-03 11:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-03-31 22:03 - 2014-10-03 11:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-03-31 22:03 - 2014-10-03 11:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-03-31 22:03 - 2011-12-30 16:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-03-31 22:03 - 2011-12-30 15:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2016-03-31 22:02 - 2013-10-30 12:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-03-31 22:02 - 2013-10-30 12:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2016-03-31 22:01 - 2016-02-03 04:57 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-03-31 22:01 - 2014-01-28 12:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-03-31 22:01 - 2013-03-19 15:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-03-31 21:58 - 2016-01-21 10:51 - 00073664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2016-03-31 21:58 - 2015-08-28 04:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-03-31 21:58 - 2015-08-28 04:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-03-31 21:58 - 2015-08-28 04:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-03-31 21:58 - 2015-08-28 04:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-03-31 21:58 - 2015-08-28 03:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-03-31 21:58 - 2015-08-28 03:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-03-31 21:58 - 2015-08-28 03:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-03-31 21:58 - 2015-08-28 03:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-03-31 21:57 - 2015-01-09 13:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-03-31 21:57 - 2015-01-09 13:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2016-03-31 21:57 - 2015-01-09 13:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2016-03-31 21:57 - 2015-01-09 12:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2016-03-31 21:56 - 2015-04-11 13:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-03-31 21:54 - 2013-08-28 11:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-03-31 21:45 - 2016-03-31 21:45 - 00001409 _____ C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-03-31 10:04 - 2016-03-31 10:04 - 00000000 ____D C:\Users\Owner\AppData\Local\VS Revo Group
2016-03-31 10:04 - 2016-03-31 10:04 - 00000000 ____D C:\ProgramData\VS Revo Group
2016-03-31 10:04 - 2016-03-31 10:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2016-03-31 10:04 - 2016-03-31 10:04 - 00000000 ____D C:\Program Files\VS Revo Group
2016-03-31 10:04 - 2009-12-30 09:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2016-03-31 10:01 - 2016-03-31 10:03 - 11199448 _____ (VS Revo Group ) C:\Users\Owner\Downloads\RevoUninProSetup.exe
2016-03-31 08:48 - 2016-04-04 08:19 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-31 08:47 - 2016-03-31 08:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-31 08:47 - 2016-03-31 08:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-31 08:47 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-31 08:47 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-31 08:47 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-29 09:16 - 2016-03-29 09:16 - 00364497 _____ C:\Users\Owner\Downloads\SOR 15-16.xlsx
2016-03-23 03:05 - 2016-03-23 03:05 - 00217369 _____ C:\Users\Owner\Documents\IMG_20160323_0001.pdf
2016-03-17 08:23 - 2016-02-13 04:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-17 08:23 - 2016-02-13 04:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-17 08:23 - 2016-02-13 04:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-17 08:23 - 2016-02-13 04:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-03-17 08:23 - 2016-02-13 04:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-17 08:23 - 2016-02-13 04:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-17 08:23 - 2016-02-13 04:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-17 08:23 - 2016-02-13 04:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-17 08:23 - 2016-02-13 04:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-03-17 08:23 - 2016-02-13 04:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-17 08:23 - 2016-02-13 04:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-17 08:23 - 2016-02-13 04:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-03-17 08:23 - 2016-02-13 04:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-17 08:23 - 2016-02-13 04:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-17 08:23 - 2016-02-13 04:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-17 08:23 - 2016-02-13 04:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-17 08:23 - 2016-02-05 03:52 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-17 08:23 - 2016-02-04 04:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-17 08:23 - 2016-02-04 04:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-17 08:23 - 2016-02-04 04:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-03-17 08:23 - 2016-02-04 04:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-17 08:23 - 2016-02-04 04:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-17 08:22 - 2016-02-12 04:56 - 05572032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-17 08:22 - 2016-02-12 04:56 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-17 08:22 - 2016-02-12 04:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-03-17 08:22 - 2016-02-12 04:52 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-17 08:22 - 2016-02-12 04:49 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-03-17 08:22 - 2016-02-12 04:49 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-03-17 08:22 - 2016-02-12 04:49 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-03-17 08:22 - 2016-02-12 04:49 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-03-17 08:22 - 2016-02-12 04:49 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-03-17 08:22 - 2016-02-12 04:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-03-17 08:22 - 2016-02-12 04:49 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-03-17 08:22 - 2016-02-12 04:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-03-17 08:22 - 2016-02-12 04:48 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-17 08:22 - 2016-02-12 04:48 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-03-17 08:22 - 2016-02-12 04:48 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-17 08:22 - 2016-02-12 04:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-03-17 08:22 - 2016-02-12 04:48 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-03-17 08:22 - 2016-02-12 04:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-03-17 08:22 - 2016-02-12 04:45 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-03-17 08:22 - 2016-02-12 04:45 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-03-17 08:22 - 2016-02-12 04:45 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-03-17 08:22 - 2016-02-12 04:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-03-17 08:22 - 2016-02-12 04:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-03-17 08:22 - 2016-02-12 04:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-03-17 08:22 - 2016-02-12 04:44 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-17 08:22 - 2016-02-12 04:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-03-17 08:22 - 2016-02-12 04:44 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-17 08:22 - 2016-02-12 04:44 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-17 08:22 - 2016-02-12 04:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-03-17 08:22 - 2016-02-12 04:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-03-17 08:22 - 2016-02-12 04:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:38 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-03-17 08:22 - 2016-02-12 04:38 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-03-17 08:22 - 2016-02-12 04:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-17 08:22 - 2016-02-12 04:38 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-03-17 08:22 - 2016-02-12 04:38 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-03-17 08:22 - 2016-02-12 04:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-03-17 08:22 - 2016-02-12 04:38 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-03-17 08:22 - 2016-02-12 04:37 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-17 08:22 - 2016-02-12 04:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-03-17 08:22 - 2016-02-12 04:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-03-17 08:22 - 2016-02-12 04:35 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-03-17 08:22 - 2016-02-12 04:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-03-17 08:22 - 2016-02-12 04:35 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-03-17 08:22 - 2016-02-12 04:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-03-17 08:22 - 2016-02-12 04:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-17 08:22 - 2016-02-12 04:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 04:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 03:48 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-03-17 08:22 - 2016-02-12 03:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-03-17 08:22 - 2016-02-12 03:41 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-03-17 08:22 - 2016-02-12 03:40 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-03-17 08:22 - 2016-02-12 03:34 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-17 08:22 - 2016-02-12 03:34 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-17 08:22 - 2016-02-12 03:33 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-03-17 08:22 - 2016-02-12 03:32 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-17 08:22 - 2016-02-12 03:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-03-17 08:22 - 2016-02-12 03:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-03-17 08:22 - 2016-02-12 03:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-03-17 08:22 - 2016-02-12 03:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-03-17 08:22 - 2016-02-12 03:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-03-17 08:22 - 2016-02-12 03:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-03-17 08:22 - 2016-02-12 03:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 03:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 03:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-17 08:22 - 2016-02-12 03:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-17 08:22 - 2016-02-09 19:57 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-17 08:22 - 2016-02-09 19:57 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-03-17 08:22 - 2016-02-09 19:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-03-17 08:22 - 2016-02-09 19:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-03-17 08:22 - 2016-02-09 19:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-17 08:22 - 2016-02-09 19:54 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-03-17 08:22 - 2016-02-09 19:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-03-17 08:22 - 2016-02-09 19:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-17 08:22 - 2016-02-09 19:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-03-17 08:22 - 2016-02-09 19:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-03-17 08:22 - 2016-02-09 19:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-03-17 08:22 - 2016-02-06 04:54 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-03-17 08:22 - 2016-02-06 04:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-03-17 08:22 - 2016-02-06 04:53 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-17 08:22 - 2016-02-06 04:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-03-17 08:22 - 2016-02-06 04:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-03-17 08:22 - 2016-02-06 04:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-03-17 08:22 - 2016-02-06 04:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-03-17 08:22 - 2016-02-06 03:48 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-17 08:22 - 2016-02-06 03:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-17 08:22 - 2016-02-06 03:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-17 08:22 - 2016-02-05 11:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-17 08:22 - 2016-02-05 04:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-08 06:36 - 2016-03-08 06:36 - 00600407 _____ C:\Users\Owner\Documents\IMG_20160308_0002.pdf
2016-03-08 06:21 - 2016-03-08 06:21 - 00594856 _____ C:\Users\Owner\Documents\IMG_20160308_0001.pdf
2016-03-07 23:43 - 2013-11-26 18:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-03-07 23:43 - 2013-11-23 08:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-03-07 07:19 - 2015-12-09 07:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-03-07 07:19 - 2015-12-09 05:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-03-07 07:19 - 2015-11-11 04:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-03-07 07:19 - 2015-11-11 04:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-03-07 07:19 - 2015-11-11 04:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-03-07 07:19 - 2015-07-31 04:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-03-07 07:19 - 2015-07-31 03:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-03-07 07:19 - 2015-02-04 13:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-03-07 07:19 - 2015-02-04 12:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-03-07 07:19 - 2015-02-03 13:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-03-07 07:19 - 2015-02-03 13:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-03-07 04:05 - 2015-07-30 23:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-03-07 04:05 - 2015-07-30 23:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-03-07 03:54 - 2013-10-14 17:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2016-03-07 03:44 - 2016-03-07 03:44 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-03-07 03:44 - 2016-03-07 03:44 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-03-07 03:35 - 2016-03-07 03:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-03-07 03:31 - 2016-03-07 03:31 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-03-07 03:31 - 2016-03-07 03:31 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-03-07 02:11 - 2012-03-01 16:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-03-07 02:11 - 2012-03-01 16:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-03-07 02:11 - 2012-03-01 15:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2016-03-07 02:03 - 2014-07-01 08:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-03-07 02:03 - 2014-07-01 08:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2016-03-07 02:03 - 2014-06-06 16:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-03-07 02:03 - 2014-06-06 16:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-03-07 02:03 - 2014-03-10 07:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-03-07 02:03 - 2014-03-10 07:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-03-07 02:03 - 2014-03-10 07:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2016-03-07 02:03 - 2014-03-10 07:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2016-03-06 20:28 - 2015-12-11 05:05 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 12306432 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 09074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 02470400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 01539584 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00495616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00290304 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-03-06 20:28 - 2015-12-11 05:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2016-03-06 20:28 - 2015-12-11 05:03 - 01538048 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-06 20:28 - 2015-12-11 05:03 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-03-06 20:28 - 2015-12-11 05:03 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-03-06 20:28 - 2015-12-11 05:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-03-06 20:28 - 2015-12-11 04:30 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 11033088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 06035968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 02088960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 01267712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00717312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00389120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00345600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00153088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-03-06 20:28 - 2015-12-11 04:29 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2016-03-06 20:28 - 2015-12-11 04:29 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\corpol.dll
2016-03-06 20:28 - 2015-12-11 04:29 - 00015872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2016-03-06 20:28 - 2015-12-11 04:28 - 01466368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-06 20:28 - 2015-12-11 04:24 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-06 20:28 - 2015-12-11 04:01 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-03-06 20:28 - 2015-12-11 04:00 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-03-06 20:28 - 2015-12-11 03:45 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-03-06 20:28 - 2015-11-14 09:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-03-06 20:28 - 2015-11-14 09:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-03-06 20:28 - 2015-11-14 09:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-03-06 20:28 - 2015-11-14 08:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
2016-03-06 20:28 - 2015-11-14 08:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
2016-03-06 20:28 - 2015-11-14 08:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
2016-03-06 20:28 - 2015-07-10 03:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-03-06 20:28 - 2015-07-10 03:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-03-06 20:28 - 2015-07-10 03:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-03-06 20:28 - 2015-06-02 10:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-03-06 20:28 - 2015-06-02 09:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2016-03-06 20:28 - 2014-06-16 12:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-03-06 20:28 - 2013-04-10 16:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-03-06 20:28 - 2011-04-29 13:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-03-06 20:28 - 2011-04-29 13:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-03-06 20:28 - 2011-04-29 13:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-03-06 20:28 - 2011-02-03 21:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-03-06 20:27 - 2016-01-07 05:02 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-03-06 20:27 - 2016-01-07 05:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-03-06 20:27 - 2016-01-07 04:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-03-06 20:27 - 2015-08-06 03:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-03-06 20:27 - 2015-07-16 04:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-03-06 20:27 - 2015-07-16 04:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-03-06 20:27 - 2015-07-16 04:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-03-06 20:27 - 2015-04-18 13:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-03-06 20:27 - 2015-04-18 12:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-03-06 20:27 - 2015-04-13 13:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-03-06 20:27 - 2011-06-15 20:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2016-03-06 20:27 - 2011-06-15 20:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2016-03-06 20:27 - 2011-06-15 20:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2016-03-06 20:27 - 2011-06-15 20:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2016-03-06 20:27 - 2011-06-15 18:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2016-03-06 20:27 - 2011-06-15 18:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2016-03-06 20:27 - 2011-06-15 18:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2016-03-06 20:27 - 2011-06-15 18:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2016-03-06 20:27 - 2011-06-15 18:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2016-03-06 20:27 - 2010-12-23 20:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2016-03-06 20:27 - 2010-12-23 20:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2016-03-06 20:27 - 2010-12-23 15:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2016-03-06 20:27 - 2010-12-23 15:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2016-03-06 20:26 - 2015-11-04 05:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-03-06 20:26 - 2015-11-04 04:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-03-06 20:26 - 2015-02-03 13:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-03-06 20:26 - 2015-02-03 13:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-03-06 20:26 - 2015-02-03 13:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-03-06 20:26 - 2015-02-03 13:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-03-06 20:26 - 2015-02-03 13:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-03-06 20:26 - 2015-02-03 13:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-03-06 20:26 - 2015-02-03 13:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-03-06 20:26 - 2015-02-03 13:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-03-06 20:26 - 2015-02-03 13:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-03-06 20:26 - 2015-02-03 13:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-03-06 20:26 - 2015-02-03 13:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-03-06 20:26 - 2015-02-03 13:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-03-06 20:26 - 2015-02-03 13:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-03-06 20:26 - 2015-02-03 13:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-03-06 20:26 - 2015-02-03 13:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-03-06 20:26 - 2015-02-03 13:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-03-06 20:26 - 2015-02-03 13:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-03-06 20:26 - 2015-02-03 13:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-03-06 20:26 - 2015-02-03 13:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-03-06 20:26 - 2015-02-03 13:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-03-06 20:26 - 2015-02-03 13:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-03-06 20:26 - 2015-02-03 13:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-03-06 20:26 - 2015-02-03 13:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-03-06 20:26 - 2015-02-03 13:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-03-06 20:26 - 2015-02-03 13:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-03-06 20:26 - 2015-02-03 13:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-03-06 20:26 - 2015-02-03 13:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-03-06 20:26 - 2015-02-03 13:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-03-06 20:26 - 2015-02-03 13:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-03-06 20:26 - 2015-02-03 13:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-03-06 20:26 - 2015-02-03 13:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-03-06 20:25 - 2014-12-19 13:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-03-06 20:25 - 2014-06-19 08:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-03-06 20:25 - 2014-06-19 08:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-03-06 20:25 - 2014-06-19 08:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2016-03-06 20:25 - 2014-06-19 08:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-03-06 20:25 - 2014-06-19 08:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2016-03-06 20:25 - 2014-06-19 08:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-03-06 20:25 - 2014-04-05 12:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-03-06 20:25 - 2014-04-05 12:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-03-06 20:25 - 2014-01-29 12:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-03-06 20:25 - 2014-01-29 12:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-03-06 20:25 - 2013-11-26 21:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-03-06 20:25 - 2013-10-19 12:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-03-06 20:25 - 2013-10-19 11:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-03-06 20:25 - 2011-11-17 16:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-03-06 20:25 - 2011-11-17 15:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2016-03-06 20:24 - 2016-01-08 03:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-03-06 20:24 - 2015-11-11 04:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-03-06 20:24 - 2015-11-11 04:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-03-06 20:24 - 2015-07-15 13:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-03-06 20:24 - 2015-07-02 06:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-03-06 20:24 - 2015-07-02 06:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-03-06 20:24 - 2015-07-02 06:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-03-06 20:24 - 2015-07-02 06:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-03-06 20:24 - 2015-04-25 04:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-03-06 20:24 - 2015-04-25 03:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-03-06 20:24 - 2015-02-03 13:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-03-06 20:24 - 2015-02-03 13:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2016-03-06 20:24 - 2014-12-06 14:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-03-06 20:24 - 2014-12-06 13:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2016-03-06 20:24 - 2014-12-06 13:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2016-03-06 20:24 - 2014-10-14 12:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-03-06 20:24 - 2014-06-18 12:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-03-06 20:24 - 2014-06-18 11:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-03-06 20:24 - 2013-11-27 11:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-03-06 20:24 - 2013-11-27 11:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-03-06 20:24 - 2013-11-27 11:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-03-06 20:24 - 2013-11-27 11:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-03-06 20:24 - 2013-11-27 11:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-03-06 20:24 - 2013-11-27 11:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-03-06 20:24 - 2013-02-12 14:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-03-06 20:24 - 2012-10-04 03:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-03-06 20:24 - 2012-10-04 03:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-03-06 20:24 - 2011-03-11 16:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-03-06 20:24 - 2011-03-11 16:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-03-06 20:24 - 2011-03-11 15:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2016-03-06 20:24 - 2011-03-11 15:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2016-03-06 20:23 - 2015-11-12 04:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-03-06 20:23 - 2015-11-12 04:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-03-06 20:23 - 2015-11-12 04:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-03-06 20:23 - 2015-11-12 04:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-03-06 20:23 - 2015-11-06 05:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-03-06 20:23 - 2015-11-06 05:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-03-06 20:23 - 2015-11-05 19:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-03-06 20:23 - 2015-10-14 02:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-03-06 20:23 - 2015-10-14 02:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-03-06 20:23 - 2015-10-02 04:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-03-06 20:23 - 2015-10-02 04:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-03-06 20:23 - 2015-10-02 04:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-03-06 20:23 - 2015-10-02 04:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-03-06 20:23 - 2015-10-02 04:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-03-06 20:23 - 2015-10-02 04:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-03-06 20:23 - 2015-10-02 04:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-03-06 20:23 - 2015-10-02 03:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-03-06 20:23 - 2015-10-02 03:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-03-06 20:23 - 2015-06-16 07:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-03-06 20:23 - 2015-06-16 07:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-03-06 20:23 - 2015-06-04 06:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-03-06 20:23 - 2015-06-04 06:16 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-03-06 20:23 - 2015-06-04 06:16 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-03-06 20:23 - 2013-07-12 20:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2016-03-06 20:23 - 2013-07-12 20:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-03-06 20:23 - 2013-07-03 14:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2016-03-06 20:23 - 2013-07-03 14:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-03-06 20:23 - 2013-07-03 14:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-03-06 20:23 - 2013-06-26 08:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-03-06 20:23 - 2012-11-02 15:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-03-06 20:23 - 2012-11-02 15:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2016-03-06 20:23 - 2011-03-03 16:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-03-06 20:23 - 2011-03-03 16:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-03-06 20:23 - 2011-03-03 16:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2016-03-06 20:23 - 2011-03-03 15:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-03-06 20:23 - 2011-03-03 15:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2016-03-06 20:22 - 2014-03-04 19:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-03-06 20:22 - 2014-03-04 19:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-03-06 20:22 - 2014-03-04 19:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-03-06 20:22 - 2014-03-04 19:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-03-06 20:22 - 2014-03-04 19:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-03-06 20:22 - 2014-03-04 19:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-03-06 20:22 - 2014-03-04 19:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-03-06 20:22 - 2014-03-04 19:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2016-03-06 20:22 - 2014-03-04 19:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2016-03-06 20:22 - 2014-03-04 19:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2016-03-06 20:22 - 2014-03-04 19:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2016-03-06 20:22 - 2014-03-04 19:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2016-03-06 20:22 - 2014-03-04 19:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2016-03-06 20:22 - 2014-03-04 19:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2016-03-06 20:20 - 2014-08-12 12:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-03-06 20:20 - 2014-08-12 11:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2016-03-06 20:18 - 2015-12-09 07:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-03-06 20:18 - 2015-12-09 05:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-03-06 20:18 - 2015-02-18 17:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-03-06 20:18 - 2015-02-18 17:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-03-06 20:18 - 2014-11-11 13:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-03-06 20:18 - 2014-11-11 12:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-03-06 20:18 - 2012-03-17 17:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-03-06 20:18 - 2011-08-17 15:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-03-06 20:18 - 2011-08-17 15:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-03-06 20:18 - 2011-08-17 14:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2016-03-06 20:18 - 2011-08-17 14:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2016-03-06 20:17 - 2016-01-17 05:01 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-03-06 20:17 - 2016-01-17 04:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-03-06 20:17 - 2015-12-09 07:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-03-06 20:17 - 2015-12-09 07:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-03-06 20:17 - 2015-12-09 07:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-03-06 20:17 - 2015-12-09 07:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-03-06 20:17 - 2015-12-09 07:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-03-06 20:17 - 2015-12-09 07:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-03-06 20:17 - 2015-12-09 07:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-03-06 20:17 - 2015-12-09 07:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-03-06 20:17 - 2015-12-09 07:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-03-06 20:17 - 2015-12-09 07:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-03-06 20:17 - 2015-12-09 07:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-03-06 20:17 - 2015-12-09 07:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-03-06 20:17 - 2015-12-09 07:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-03-06 20:17 - 2015-12-09 07:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-03-06 20:17 - 2015-12-09 07:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-03-06 20:17 - 2015-12-09 07:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-03-06 20:17 - 2015-12-09 07:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-03-06 20:17 - 2015-12-09 07:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-03-06 20:17 - 2015-12-09 07:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-03-06 20:17 - 2015-12-09 07:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-03-06 20:17 - 2015-12-09 07:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-03-06 20:17 - 2015-12-09 07:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-03-06 20:17 - 2015-12-09 07:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-03-06 20:17 - 2015-12-09 07:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-03-06 20:17 - 2015-12-09 07:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-03-06 20:17 - 2015-12-09 07:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-03-06 20:17 - 2015-12-09 07:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-03-06 20:17 - 2015-12-09 07:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-03-06 20:17 - 2015-12-09 07:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-03-06 20:17 - 2015-12-09 07:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-03-06 20:17 - 2015-12-09 07:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-03-06 20:17 - 2015-12-09 07:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-03-06 20:17 - 2015-12-09 07:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-03-06 20:17 - 2015-12-09 07:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 01393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-03-06 20:17 - 2015-12-09 05:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-03-06 20:17 - 2015-12-09 05:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-03-06 20:17 - 2015-12-09 05:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-03-06 20:17 - 2015-12-09 05:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-03-06 20:17 - 2015-12-09 05:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-03-06 20:17 - 2015-12-09 05:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-03-06 20:17 - 2015-12-09 04:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-03-06 20:17 - 2015-12-09 04:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-03-06 20:17 - 2015-12-09 04:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-03-06 20:17 - 2015-02-25 13:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-03-06 20:17 - 2013-07-26 12:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-03-06 20:17 - 2013-07-26 11:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2016-03-06 20:17 - 2012-09-26 08:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2016-03-06 20:17 - 2012-09-26 08:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-03-06 20:17 - 2011-02-06 03:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2016-03-06 20:17 - 2011-02-06 03:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2016-03-06 20:17 - 2011-02-06 03:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2016-03-06 20:16 - 2016-01-22 16:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-03-06 20:16 - 2016-01-22 16:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-03-06 20:16 - 2016-01-22 16:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-03-06 20:16 - 2016-01-22 16:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-03-06 20:16 - 2016-01-22 16:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-03-06 20:16 - 2016-01-22 16:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-03-06 20:16 - 2016-01-22 16:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-03-06 20:16 - 2015-09-23 23:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-03-06 20:16 - 2015-09-23 23:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-03-06 20:16 - 2015-09-23 23:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-03-06 20:16 - 2015-01-17 12:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-03-06 20:16 - 2015-01-17 12:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-03-06 20:16 - 2014-09-04 15:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-03-06 20:16 - 2014-09-04 15:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-03-06 20:16 - 2013-04-26 15:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-03-06 20:16 - 2013-04-26 14:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-03-06 20:15 - 2015-10-13 14:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-03-06 20:15 - 2014-10-25 11:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-03-06 20:15 - 2014-10-25 11:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2016-03-06 20:15 - 2014-07-17 12:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-03-06 20:15 - 2014-07-17 12:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-03-06 20:15 - 2014-07-17 12:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-03-06 20:15 - 2014-07-17 11:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2016-03-06 20:15 - 2014-07-17 11:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-03-06 20:15 - 2012-11-23 13:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-03-06 20:15 - 2012-04-26 15:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-03-06 20:15 - 2012-04-26 15:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-03-06 20:15 - 2011-05-24 21:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-03-06 20:15 - 2011-05-24 20:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2016-03-06 20:15 - 2011-05-24 20:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2016-03-06 20:15 - 2011-05-24 20:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2016-03-06 20:15 - 2011-05-24 20:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2016-03-06 20:14 - 2015-12-09 07:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-03-06 20:14 - 2015-12-09 05:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-03-06 20:14 - 2015-11-04 05:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-03-06 20:14 - 2015-11-04 04:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-03-06 20:14 - 2014-12-08 13:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-03-06 20:14 - 2014-12-08 12:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2016-03-06 20:14 - 2013-10-12 12:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-03-06 20:14 - 2013-10-12 12:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-03-06 20:14 - 2013-10-12 12:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2016-03-06 20:14 - 2013-10-12 12:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-03-06 20:14 - 2013-10-12 11:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-03-06 20:14 - 2013-10-12 11:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-03-06 20:14 - 2013-10-12 11:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2016-03-06 20:14 - 2013-10-12 11:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-03-06 20:14 - 2013-05-13 15:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-03-06 20:14 - 2013-05-13 13:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-03-06 20:14 - 2013-05-13 13:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2016-03-06 20:14 - 2013-05-13 13:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2016-03-06 20:14 - 2012-07-05 08:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-03-06 20:14 - 2012-07-05 08:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-03-06 20:14 - 2012-07-05 08:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-03-06 20:14 - 2012-07-05 07:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-03-06 20:14 - 2012-07-05 07:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-03-06 20:14 - 2011-12-16 18:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-03-06 20:14 - 2011-12-16 17:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2016-03-06 20:14 - 2011-05-03 15:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-03-06 20:14 - 2011-05-03 14:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-03-06 20:14 - 2011-02-12 21:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2016-03-06 20:13 - 2015-03-04 14:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-03-06 20:13 - 2015-03-04 14:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-03-06 20:13 - 2015-03-04 14:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-03-06 20:13 - 2012-06-06 16:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-03-06 20:13 - 2012-06-06 15:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2016-03-06 20:13 - 2012-05-14 15:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-03-06 20:13 - 2011-08-27 15:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-03-06 20:13 - 2011-08-27 14:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-03-06 20:13 - 2011-02-23 14:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-03-06 20:12 - 2013-10-12 12:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-03-06 20:12 - 2013-10-12 12:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-03-06 20:12 - 2013-10-12 12:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-03-06 20:12 - 2013-10-12 12:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-03-06 20:12 - 2013-10-12 12:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-03-06 19:44 - 2012-02-17 16:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-03-06 19:44 - 2012-02-17 15:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-03-06 19:44 - 2012-02-17 14:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-04 09:08 - 2015-09-05 16:26 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-04 08:27 - 2009-07-14 14:45 - 00022064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-04 08:27 - 2009-07-14 14:45 - 00022064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-04 08:25 - 2009-07-14 15:13 - 00783114 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-04 08:25 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\inf
2016-04-04 08:20 - 2016-03-03 11:15 - 00000896 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-04 08:19 - 2016-03-03 11:25 - 00000000 ____D C:\Users\Owner\AppData\Local\DP_Tower
2016-04-04 08:18 - 2016-03-03 11:15 - 00000892 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-04 08:18 - 2009-07-14 15:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-03 23:41 - 2015-11-16 12:47 - 00000000 ____D C:\ProgramData\DatacardService
2016-04-03 22:21 - 2016-03-03 12:49 - 00000010 _____ C:\Users\Owner\AppData\Local\sponge.last.runtime.cache
2016-04-02 06:26 - 2015-12-16 11:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-04-02 05:41 - 2015-09-05 11:46 - 00000000 ____D C:\ProgramData\Oracle
2016-04-02 05:34 - 2015-09-05 11:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-04-02 05:34 - 2015-09-05 11:46 - 00000000 ____D C:\Program Files (x86)\Java
2016-04-02 05:33 - 2015-12-16 12:04 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-04-02 05:33 - 2015-09-05 11:46 - 00000000 ____D C:\Users\Owner\.oracle_jre_usage
2016-04-02 05:20 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\AppCompat
2016-04-01 16:45 - 2015-09-05 13:59 - 546757168 _____ C:\Windows\MEMORY.DMP
2016-04-01 16:45 - 2015-09-05 13:59 - 00000000 ____D C:\Windows\Minidump
2016-04-01 11:57 - 2009-07-14 12:34 - 00000615 _____ C:\Windows\win.ini
2016-04-01 11:29 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\rescache
2016-04-01 09:49 - 2009-07-14 13:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-04-01 07:18 - 2016-03-03 07:03 - 00000000 ____D C:\ProgramData\CanonIJPLM
2016-04-01 06:56 - 2015-09-05 15:26 - 00000000 ____D C:\ProgramData\Trend Micro
2016-04-01 06:26 - 2015-09-05 12:05 - 00110424 _____ C:\Users\Owner\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-01 06:22 - 2009-07-14 14:45 - 00414672 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-31 23:25 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\tracing
2016-03-31 23:25 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-03-31 23:25 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\system32\Dism
2016-03-31 23:25 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-03-31 23:25 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-03-31 22:51 - 2015-09-05 12:05 - 00767516 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-03-31 21:45 - 2015-09-05 10:28 - 00001443 _____ C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-31 17:15 - 2015-09-05 15:26 - 00000000 ____D C:\ProgramData\TMDP_Log
2016-03-31 09:44 - 2016-03-03 11:16 - 00002183 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-31 09:44 - 2016-03-03 11:16 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-31 09:44 - 2016-03-03 06:33 - 00002015 _____ C:\Users\Public\Desktop\Canon Quick Menu.lnk
2016-03-31 09:44 - 2016-03-03 06:28 - 00002334 _____ C:\Users\Public\Desktop\Canon MG2500 series On-screen Manual.lnk
2016-03-31 09:44 - 2015-12-16 11:40 - 00001147 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-31 09:44 - 2015-12-16 11:40 - 00001141 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-03-31 09:44 - 2015-11-16 12:51 - 00001204 _____ C:\Users\Public\Desktop\Optus 3G WiFi Modem.lnk
2016-03-31 09:44 - 2015-11-03 12:41 - 00001998 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2016-03-31 09:44 - 2015-09-05 16:23 - 00000950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR Registration.lnk
2016-03-31 09:44 - 2015-09-05 13:50 - 00001293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
2016-03-31 09:44 - 2015-09-05 13:49 - 00001446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2016-03-31 09:44 - 2015-09-05 13:49 - 00001362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
2016-03-31 09:44 - 2015-09-05 13:48 - 00002474 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2016-03-31 09:44 - 2015-09-05 11:48 - 00000909 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-03-31 09:44 - 2015-09-05 11:19 - 00002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-03-31 09:44 - 2015-09-05 11:19 - 00002041 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-03-31 09:44 - 2015-09-05 10:15 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-03-31 09:44 - 2015-09-05 10:15 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-03-31 09:44 - 2009-07-14 14:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-03-31 09:44 - 2009-07-14 14:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-03-31 09:44 - 2009-07-14 14:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-03-31 09:44 - 2009-07-14 14:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-03-31 09:44 - 2009-07-14 14:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-03-31 09:43 - 2016-03-03 11:31 - 00001441 _____ C:\Users\Owner\Desktop\Trend Micro Maximum Security.lnk
2016-03-31 09:43 - 2015-10-05 16:09 - 00001383 _____ C:\Users\Owner\Desktop\Dream Day First Home.lnk
2016-03-31 09:43 - 2015-09-08 11:39 - 00002265 _____ C:\Users\Owner\Desktop\NEW REPORT - Copy - Shortcut.lnk
2016-03-31 09:43 - 2009-07-14 15:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-03-31 09:43 - 2009-07-14 14:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-03-29 09:13 - 2015-09-05 16:26 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-29 09:13 - 2015-09-05 16:26 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-29 09:13 - 2015-09-05 16:26 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-20 00:01 - 2016-03-03 11:35 - 00399360 _____ (Trend Micro Inc.) C:\Windows\RegBootClean64.exe
2016-03-08 08:01 - 2015-09-05 15:29 - 00000000 ____D C:\Users\Owner\AppData\Local\Trend Micro
2016-03-07 05:18 - 2011-04-12 18:28 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-07 05:17 - 2009-07-14 13:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-03-07 05:16 - 2009-07-14 15:32 - 00000000 ____D C:\Program Files\Windows Defender
2016-03-07 05:16 - 2009-07-14 15:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender

==================== Files in the root of some directories =======

2015-09-05 12:41 - 2015-09-05 12:41 - 0000021 _____ () C:\Users\Owner\AppData\Roaming\fixcfg.ini
2015-09-05 15:25 - 2015-09-05 15:25 - 0000036 _____ () C:\Users\Owner\AppData\Local\housecall.guid.cache
2016-03-03 12:49 - 2016-04-03 22:21 - 0000010 _____ () C:\Users\Owner\AppData\Local\sponge.last.runtime.cache
2015-09-05 16:23 - 2015-09-05 16:23 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-09-05 10:57 - 2015-09-05 10:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Owner\AppData\Local\Temp\libeay32.dll
C:\Users\Owner\AppData\Local\Temp\msvcr120.dll
C:\Users\Owner\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-03-29 15:59

==================== End of FRST.txt ============================

and here is the Additions.txt log:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by [removed] (2016-04-04 09:14:50)
Running from C:\Users\[removed]\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2015-09-05 00:27:42)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-4007946012-266125307-3815581551-500 - Administrator - Disabled)
Guest (S-1-5-21-4007946012-266125307-3815581551-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4007946012-266125307-3815581551-1002 - Limited - Enabled)
Owner (S-1-5-21-4007946012-266125307-3815581551-1000 - Administrator - Enabled) => C:\Users\Owner

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Trend Micro Maximum Security (Enabled - Up to date) {8242D66F-41BD-4049-C2E6-E578E73B62A0}
AS: Trend Micro Maximum Security (Enabled - Up to date) {3923378B-6787-4FC7-F856-DE0A9CBC281D}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\…\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\…\Adobe Flash Player ActiveX) (Version: 21.0.0.197 - Adobe Systems Incorporated)
AuthenTec Fingerprint Software (HKLM\…\{5F1DFCC1-595D-4235-A044-E05B706D800A}) (Version: 9.0.6.22 - AuthenTec, Inc.)
Bing Bar (HKLM-x32\…\{449CE12D-E2C7-4B97-B19E-55D163EA9435}) (Version: 7.0.619.0 - Microsoft Corporation)
Bluetooth Stack for Windows by Toshiba (HKLM\…\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v8.00.13(T) - TOSHIBA CORPORATION)
Canon Easy-WebPrint EX (HKLM-x32\…\Easy-WebPrint EX) (Version: 1.6.0.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\…\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG2500 series MP Drivers (HKLM\…\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2500_series) (Version: 1.02 - Canon Inc.)
Canon MG2500 series On-screen Manual (HKLM-x32\…\Canon MG2500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM-x32\…\Canon My Image Garden) (Version: 3.3.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\…\Canon My Image Garden Design Files) (Version: 3.2.0 - Canon Inc.)
Canon My Printer (HKLM-x32\…\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\…\CanonQuickMenu) (Version: 2.6.1 - Canon Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dream Day First Home (HKLM-x32\…\Dream Day First Home_is1) (Version: - My Real Games Ltd)
Google Chrome (HKLM-x32\…\Google Chrome) (Version: 49.0.2623.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
I.R.I.S. OCR (HKLM-x32\…\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
Intel(R) Rapid Storage Technology (HKLM-x32\…\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.1.1001 - Intel Corporation)
Java 8 Update 77 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F83218077F0}) (Version: 8.0.770.3 - Oracle Corporation)
JMicron Flash Media Controller Driver (HKLM-x32\…\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.76.1 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\…\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.6.1 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\…\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\…\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\…\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\…\Office14.SingleImage) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\…\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\…\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\…\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 43.0.1 (x86 en-US) (HKLM-x32\…\Mozilla Firefox 43.0.1 (x86 en-US)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\…\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
NVIDIA Graphics Driver 326.60 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 326.60 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0725 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
Optus 3G WiFi Modem (HKLM-x32\…\Optus 3G WiFi Modem) (Version: 1.12.03.74 - Huawei Technologies Co.,Ltd)
PlayReady PC Runtime amd64 (HKLM\…\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Product Improvement Study for HP Officejet Pro 8620 (HKLM\…\{71768BEC-CCE7-471C-B1FD-8E45A9AB0A72}) (Version: 32.0.90.45518 - Hewlett-Packard Co.)
Realtek Ethernet Controller Driver (HKLM-x32\…\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.92.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.5 (HKLM\…\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.5 - VS Revo Group, Ltd.)
Synaptics Pointing Device Driver (HKLM\…\SynTPDeinstKey) (Version: 18.1.7.18 - Synaptics Incorporated)
TFPU (Version: 1.0.0 - TOSHIBA) Hidden
TOSHIBA Fingerprint Utility (HKLM\…\TFPU{A7760E07-4C23-4766-A99E-F715F298E99C}) (Version: 1.0.2.27 - TOSHIBA Corporation)
Trend Micro Maximum Security (HKLM\…\{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}) (Version: 10.0 - Trend Micro Inc.)
Trend Micro Password Manager (HKLM\…\3A0FB4E3-2C0D-4572-A24D-67F1CAABDDP35_is1) (Version: 3.5.0.1355 - Trend Micro Inc.)
Trend Micro Titanium (Version: 10.0 - Trend Micro Inc.) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\…\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VLC media player (HKLM\…\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Driver Package - TOSHIBA (DVB7700ALL) Media (07/02/2013 2.3.3.56) (HKLM\…\FEB96EFD43393B6FF8BAEE8133683E668483F039) (Version: 07/02/2013 2.3.3.56 - TOSHIBA)
Windows Driver Package - TOSHIBA (TVALZ) System (07/14/2009 2.0.0.3) (HKLM\…\431B595EBA877CE1D3E3A48B287D4E74DA9EE7D2) (Version: 07/14/2009 2.0.0.3 - TOSHIBA)
Windows Live Essentials (HKLM-x32\…\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\…\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4007946012-266125307-3815581551-1000_Classes\CLSID\{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}\InprocServer32 -> C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll (TOSHIBA)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {6A579DB2-3F38-4CB0-BEF8-CDA093FB34E7} - System32\Tasks\HPCustParticipation HP Officejet Pro 8620 => C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPCustPartic.exe [2013-09-11] (Hewlett-Packard Co.)
Task: {732876DD-4BC1-4DD6-BA36-422EB9FEC2C5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {EABD8738-0F93-49A0-80DE-8D4BD2743658} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-03] (Google Inc.)
Task: {F7BE1439-D5D4-4719-9224-6B1C1CE050FD} - System32\Tasks\{05F07E14-7DBA-42A0-97D3-283777807169} => pcalua.exe -a "C:\Program Files (x86)\YTDownloader\YTDUninstall.exe"
Task: {FAA2EA7D-734A-4114-9913-DDDD7292A6E5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-29] (Adobe Systems Incorporated)
Task: {FD09E1AB-7101-4299-B3CE-F06D232BC772} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-03] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-09-05 12:46 - 2013-08-10 03:32 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-03-03 11:25 - 2015-04-01 05:08 - 00026408 _____ () C:\Program Files\Trend Micro\AMSP\boost_system-vc110-mt-1_57.dll
2016-03-03 11:25 - 2015-04-01 05:08 - 00058320 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc110-mt-1_57.dll
2016-03-03 11:25 - 2015-04-01 05:09 - 00686608 _____ () C:\Program Files\Trend Micro\AMSP\sqlite3.dll
2016-03-03 11:25 - 2015-04-01 05:08 - 00110320 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc110-mt-1_57.dll
2016-03-03 11:25 - 2015-04-01 05:08 - 00036160 _____ () C:\Program Files\Trend Micro\AMSP\boost_chrono-vc110-mt-1_57.dll
2016-03-03 11:25 - 2015-04-01 05:09 - 01314920 _____ () C:\Program Files\Trend Micro\AMSP\libprotobuf.dll
2015-07-17 12:31 - 2015-07-17 12:31 - 00168544 ____N () C:\Program Files\Trend Micro\UniClient\plugins\LUADLL.dll
2014-01-15 13:42 - 2014-01-15 13:42 - 00351824 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2016-03-03 11:28 - 2015-07-17 12:31 - 00089088 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_thread-vc110-mt-1_52.dll
2016-03-03 11:28 - 2015-07-17 12:31 - 00018944 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_system-vc110-mt-1_52.dll
2016-03-03 11:28 - 2015-07-17 12:31 - 00049664 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_date_time-vc110-mt-1_52.dll
2016-03-03 11:28 - 2015-07-17 12:31 - 00761856 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_regex-vc110-mt-1_52.dll
2016-03-03 11:23 - 2016-03-19 18:15 - 00048128 _____ () C:\Program Files\Trend Micro\TMIDS\boost_date_time-vc110-mt-1_49.dll
2015-07-17 12:31 - 2015-07-17 12:31 - 00026408 ____N () C:\Program Files\Trend Micro\Titanium\plugin\boost_system-vc110-mt-1_57.dll
2010-03-01 19:24 - 2010-03-01 19:24 - 00359344 _____ () C:\Program Files\TOSHIBA\TFPU\TFPUCommon.dll
2015-07-17 12:31 - 2015-07-17 12:31 - 00065520 ____N () C:\Program Files\Trend Micro\Titanium\plugin\fcMsgDispatcher.dll
2016-03-03 11:24 - 2016-01-12 20:01 - 46400568 _____ () C:\Program Files\Trend Micro\TMIDS\tower\PwmTower.exe
2016-04-01 07:50 - 2016-04-01 07:50 - 00016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\ac4701918c30b429fd697650ccb0d06f\PSIClient.ni.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Owner\Downloads\Norton_Removal_Tool.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Owner\Downloads\TISPro_Download_SP_32bit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Owner\Downloads\TISPro_Download_SP_64bit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Owner\Downloads\ViberSetup.exe:$CmdTcID [64]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\trendmicro.com -> hxxps://pwm.trendmicro.com
IE restricted site: HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\bing.com -> bing.com
IE restricted site: HKU\S-1-5-21-4007946012-266125307-3815581551-1000\…\www-searching.com%20bing -> hxxp://www-searching.com%20bing

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 12:34 - 2016-04-03 22:58 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4007946012-266125307-3815581551-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: ATService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk => C:\Windows\pss\Bluetooth Manager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Owner^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Screen Clipper and Launcher.lnk => C:\Windows\pss\OneNote 2010 Screen Clipper and Launcher.lnk.Startup
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: ITSecMng => %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: TFPUPWDBankService => C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe /start
MSCONFIG\startupreg: TFPUService => C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe /start

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CEC5268F-7E87-4C1E-8F34-635D107811D8}] => (Allow) E:\!Hi-Tech-Work\DriverGenius2013\ksoft\xlmodule\download\minithunderplatform.exe
FirewallRules: [{DA49A86B-A0AE-42E7-B328-B6BFA2FDBD3C}] => (Allow) E:\!Hi-Tech-Work\DriverGenius2013\ksoft\xlmodule\download\minithunderplatform.exe
FirewallRules: [{564A07DA-D783-46F8-A2DE-ACE804F394AB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{7725FF72-5BEF-464E-AEDC-7E5142FAF2DD}] => (Allow) LPort=2869
FirewallRules: [{6EC50266-AEAC-49F7-9336-064EC173DDDE}] => (Allow) LPort=1900
FirewallRules: [{6ADC8B54-60FA-4217-8B2B-5DAA9A0A83CD}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C7FD42BA-36B6-4E8D-AA4A-E78834473652}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{C30FF6CD-6F78-4F15-BCFA-25CFE88C8175}] => (Allow) C:\Users\Owner\AppData\Local\Temp\7zS4023\HPDiagnosticCoreUI.exe
FirewallRules: [{E3D12BD4-3882-498D-86C9-ACEFAB70D86E}] => (Allow) C:\Users\Owner\AppData\Local\Temp\7zS4023\HPDiagnosticCoreUI.exe
FirewallRules: [{13078566-41E1-4EDF-8D5A-811AD69AB6E1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E1BC6C04-5BDF-44DC-91A9-6357156857CF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DD1A1BC8-1E28-4287-B791-69985780E5BD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

01-04-2016 07:01:58 Windows Update
01-04-2016 07:34:59 Windows Update
01-04-2016 08:07:49 Windows Update
01-04-2016 09:33:44 Windows Update
01-04-2016 09:48:38 Windows Update
01-04-2016 09:53:58 Windows Update
01-04-2016 10:06:33 Windows Update
01-04-2016 10:10:57 Windows Update
01-04-2016 10:39:09 Windows Update
01-04-2016 11:55:38 Windows Update
02-04-2016 05:44:56 Windows Update
02-04-2016 05:52:17 Windows Update
02-04-2016 05:57:51 Windows Update
02-04-2016 06:02:01 Windows Update
02-04-2016 06:10:41 Windows Update
02-04-2016 06:18:35 Windows Update
02-04-2016 06:46:34 Windows Update
02-04-2016 06:54:02 Windows Update
02-04-2016 07:07:09 Windows Update
02-04-2016 07:49:15 Windows Update
02-04-2016 07:52:46 Windows Update
03-04-2016 22:25:53 Windows Update
03-04-2016 22:58:46 Restore Point Created by FRST
03-04-2016 23:55:33 JRT Pre-Junkware Removal

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:
==================
Error: (04/04/2016 08:26:25 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (1028) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x0000000000E004A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000000DDC

   Cleanup: 1

Error: (04/04/2016 08:22:01 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (1028) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x0000000000E004A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x00000000000010DC

   Cleanup: 1

Error: (04/04/2016 08:21:44 AM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (1028) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x0000000000E004A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x00000000000010DC

   Cleanup: 1

Error: (04/04/2016 08:19:39 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/03/2016 11:43:39 PM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (1076) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x00000000012604A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000001494

   Cleanup: 1

Error: (04/03/2016 11:43:21 PM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (1076) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x00000000012604A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000001494

   Cleanup: 1

Error: (04/03/2016 11:40:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/03/2016 11:15:15 PM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (780) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x00000000013104A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x0000000000000BF8

   Cleanup: 1

Error: (04/03/2016 11:11:32 PM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (780) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x00000000013104A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x000000000000097C

   Cleanup: 1

Error: (04/03/2016 11:11:16 PM) (Source: ESENT) (EventID: 623) (User: )
Description: wuaueng.dll (780) SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 32Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Possible long-running transaction:

   SessionId: 0x00000000013104A0

   Session-context: 0x00000000

   Session-context ThreadId: 0x000000000000097C

   Cleanup: 1

System errors:
=============
Error: (04/03/2016 11:55:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).

Error: (04/03/2016 11:39:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DriverGenius Core Service service failed to start due to the following error:
%%2

Error: (04/03/2016 11:39:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DgSafe service failed to start due to the following error:
%%2

Error: (04/03/2016 11:37:24 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:
%%1056

Error: (04/03/2016 11:36:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Office Software Protection Platform service terminated unexpectedly. It has done this 1 time(s).

Error: (04/03/2016 11:36:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Modules Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (04/03/2016 11:36:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (04/03/2016 11:36:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The SeaPort service terminated unexpectedly. It has done this 1 time(s).

Error: (04/03/2016 11:36:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s).

Error: (04/03/2016 11:36:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Adobe Acrobat Update Service service terminated unexpectedly. It has done this 1 time(s).

==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU P8800 @ 2.66GHz
Percentage of memory in use: 43%
Total physical RAM: 4060.86 MB
Available physical RAM: 2310.26 MB
Total Virtual: 8119.93 MB
Available Virtual: 5780.27 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:404.49 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 69F30708)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Looking forward to your comments.

ken545

Post #8April 4, 2016, 12:51 AM UTC

Looking good. Not sure of the RB thing but it looks like it resolved itself. Glad all is ok again.

Double click on AdwCleaner.exe to run the tool again.

Click on the Uninstall button.

Click Yes when asked are you sure you want to uninstall.

Both AdwCleaner.exe, its folder and all logs will be removed.

==========================================================

Please download DelFix and save the file to your Desktop.

[external image: DelFix_zps139e2ea1.jpg]

Windows XP Double Click DelFix.exe to run the program.

Windows Vista > Win 7 > Win 8 Right Click on DelFix.exe and select RUN AS ADMINISTRATOR

Checkmark " Remove Disinfection Tools"

Click the Run button

This will remove the specialised tools we used to clean your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually

So How did I get infected in the first place <– Some reading for you to keep yourself safe online

Safe Surfn

Ken

kangaroo

Post #9April 4, 2016, 8:34 AM UTC

Thanks Ken for all your help and prompt attention.

I've done the clean-up you provided and have given the good news to my neighbour who will come by to collect her PC between my goat milking and caring duties for my wife. She asked me to pass on her thanks for your help as well.

Warm regards for Autumnal Clear Range,

Kangaroo (Mike)

ken545

Post #10April 4, 2016, 10:32 AM UTC

Your more than welcome Mike

Take care,

Ken

ken545

Post #11April 4, 2016, 3:04 PM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Have YT Downloader removed [Solved]

✨ Ask AI

Ask AI