Possible keylogger on my computer - please help :(

[gail jackson]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:11-10-2015 02
Ran by missg (administrator) on DESKTOP-7E5LF1P (12-10-2015 04:14:52)
Running from C:\Users\missg\Downloads
Loaded Profiles: missg (Available Profiles: missg)
Platform: Windows 10 Home (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
() C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
() C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_bg.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Reason Software Company Inc.) C:\Program Files\Reason\Security\rsUI.exe
(Reason Software Company Inc.) C:\Program Files\Reason\Security\rsEngineSvc.exe
() C:\Program Files\WindowsApps\Microsoft.Getstarted_2.3.4.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6306.42251.0_x64__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6306.42251.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.10.5.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-08-21] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8497368 2015-10-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-10-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [Codec Settings UAC Manager] => C:\WINDOWS\SysWOW64\Codecs\CodecUACManager.exe [60416 2015-09-18] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-09] (AVAST Software)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5889824 2015-07-28] (IObit)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Codec Pack Update Checker] => "C:\WINDOWS\system32\Codecs\UpdateChecker.exe"
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [57981568 2015-09-28] (Skype Technologies S.A.)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [BingSvc] => C:\Users\missg\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [GoogleChromeAutoLaunch_6DB381FA150BEC1DEE19427A951342A0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944 2015-09-24] (Google Inc.)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-09] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2015-10-06]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\syswow64\Codecs\TrayMenu.exe (No File)
BootExecute: autocheck autochk * 搀渀挀氀攀愀渀㘀㐀⸀攀砀攀

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fb5b723b-fe72-426b-84c3-5a9be0c2b7a2}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.co.uk
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://pandasecurity.mystart.com/results.php?pr=vmn&gen=ms&id=pandasecuritytb&v=4_3&idate=2015-10-08&ent=ch_671&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-08-31] (IObit)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-09] (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-09] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-05] (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-09]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR StartupUrls: Default -> "hxxps://www.google.co.uk/","hxxps://uk.search.yahoo.com/?type=994519&fr=yo-yhp-ch"
CHR Profile: C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-05]
CHR Extension: (YouTube) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-05]
CHR Extension: (Google Search) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-05]
CHR Extension: (Google Docs Offline) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-05]
CHR Extension: (Google Play) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2015-10-08]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-10-05]
CHR Extension: (Skype Click to Call) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-10-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-05]
CHR Extension: (Azov Sea Theme #2) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\oalokjhcnhmboncjbmhicgmiinlfacio [2015-10-07]
CHR Extension: (Gmail) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-05]
CHR HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-09]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-09] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [882464 2015-07-17] (IObit)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-08-31] (IObit)
R2 rscp; C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe [163576 2015-10-11] ()
R2 rsEngineSvc; C:\Program Files\Reason\Security\rsEngineSvc.exe [80104 2015-10-07] (Reason Software Company Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-10-11] (Realtek Semiconductor)
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [1055008 2015-09-21] (IObit)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-08-21] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-09] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-10-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-09] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-09] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-09] (AVAST Software)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-10-11] (REALiX(tm))
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2015-03-25] (IObit.com)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [888064 2015-10-11] (Realtek )
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [42184 2015-08-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [42696 2015-08-21] (Synaptics Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16056 2015-10-10] (SlimWare Utilities, Inc.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2015-03-25] (IObit.com)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-12 04:14 - 2015-10-12 04:15 - 00017009 _____ C:\Users\missg\Downloads\FRST.txt
2015-10-12 04:12 - 2015-10-12 04:14 - 00000000 ____D C:\FRST
2015-10-12 04:11 - 2015-10-12 04:12 - 02195968 _____ (Farbar) C:\Users\missg\Downloads\FRST64.exe
2015-10-12 03:48 - 2015-10-12 03:48 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7E5LF1P_missg_HistoryPrediction.bin
2015-10-12 03:11 - 2015-10-12 03:11 - 00000000 ____D C:\Users\missg\OneDrive\Documents\MPC-HC Capture
2015-10-12 03:10 - 2015-10-12 03:10 - 00000000 ____D C:\Users\missg\AppData\Roaming\MPC-HC
2015-10-12 02:49 - 2015-10-12 02:49 - 00000000 ____D C:\Users\missg\AppData\Roaming\DVDVideoSoft
2015-10-11 22:39 - 2015-10-11 22:39 - 00888064 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2015-10-11 22:39 - 2015-10-11 22:39 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2015-10-11 22:35 - 2015-10-11 22:36 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-10-11 22:33 - 2015-10-11 22:33 - 72113152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2015-10-11 22:33 - 2015-10-11 22:33 - 35222128 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2015-10-11 22:33 - 2015-10-11 22:33 - 03234520 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 02930904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 02918104 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 02702552 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2015-10-11 22:33 - 2015-10-11 22:33 - 01749208 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 01413776 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 01310936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 01104040 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00943784 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00734376 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00631000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00454288 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00369296 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00329360 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00250536 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00184688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 01576976 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 00560328 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2015-10-11 22:27 - 2015-10-11 22:42 - 00002227 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2015-10-11 22:27 - 2015-10-11 22:27 - 00026528 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS
2015-10-11 22:27 - 2015-10-11 22:27 - 00003428 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler
2015-10-11 22:27 - 2015-10-11 22:27 - 00003316 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Startup
2015-10-11 22:27 - 2015-10-11 22:27 - 00003312 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Update
2015-10-11 22:27 - 2015-10-11 22:27 - 00003076 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (missg)
2015-10-11 22:27 - 2015-10-11 22:27 - 00001356 _____ C:\Users\Public\Desktop\Start Menu 8.lnk
2015-10-11 22:27 - 2015-10-11 22:27 - 00001247 _____ C:\Users\Public\Desktop\Smart Defrag 4.lnk
2015-10-11 22:27 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Start Menu 8
2015-10-11 22:27 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
2015-10-11 22:27 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\SysWOW64\IObitSmartDefragExtension.dll
2015-10-11 22:27 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll
2015-10-11 22:27 - 2014-06-04 15:17 - 00034080 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe
2015-10-11 22:27 - 2014-06-04 15:17 - 00021184 _____ (IObit) C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys
2015-10-11 22:26 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2015-10-11 22:26 - 2015-10-11 22:26 - 00001250 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2015-10-11 22:26 - 2015-10-11 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2015-10-11 20:27 - 2015-10-11 20:27 - 03794200 _____ (Reason Software Company Inc.) C:\Users\missg\Downloads\reason-core-security-setup (1).exe
2015-10-11 20:26 - 2015-10-11 20:26 - 00003638 _____ C:\WINDOWS\System32\Tasks\ReasonSecurityScheduledScan
2015-10-11 20:26 - 2015-10-11 20:26 - 00003502 _____ C:\WINDOWS\System32\Tasks\ReasonSecurityStart
2015-10-11 20:26 - 2015-10-11 20:26 - 00000000 ____D C:\ProgramData\Reason
2015-10-11 19:02 - 2015-10-11 20:27 - 00000956 _____ C:\Users\Public\Desktop\Reason Core Security.lnk
2015-10-11 19:02 - 2015-10-11 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reason Core Security
2015-10-11 19:02 - 2015-10-11 19:02 - 00000000 ____D C:\Program Files\Reason
2015-10-11 19:01 - 2015-10-11 19:01 - 03794200 _____ (Reason Software Company Inc.) C:\Users\missg\Downloads\reason-core-security-setup.exe
2015-10-11 18:41 - 2015-10-11 18:43 - 00018944 ___SH C:\Users\missg\Downloads\Thumbs.db
2015-10-10 03:18 - 2015-10-11 21:43 - 00000000 ____D C:\Program Files\SlimService
2015-10-10 03:18 - 2015-10-10 03:18 - 00002481 _____ C:\Users\Public\Desktop\SlimCleaner Plus.lnk
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\Users\missg\AppData\Local\Downloaded Installers
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\ProgramData\SlimWare Utilities Inc
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner Plus
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\Program Files\SlimCleaner Plus
2015-10-10 03:17 - 2015-10-12 00:57 - 00000000 ____D C:\Users\missg\AppData\Local\SlimWare Utilities Inc
2015-10-10 03:17 - 2015-10-10 03:17 - 00016056 _____ (SlimWare Utilities, Inc.) C:\WINDOWS\system32\Drivers\SWDUMon.sys
2015-10-09 15:28 - 2015-10-09 15:28 - 02513235 _____ C:\Users\missg\Downloads\takeout-20151008T004828Z.zip
2015-10-09 06:44 - 2015-10-12 03:28 - 00004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B304D8BB-B3F8-449A-9B89-6D69F86BE87E}
2015-10-09 02:16 - 2015-10-09 02:16 - 00002027 _____ C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-10-09 02:16 - 2015-10-09 02:16 - 00001967 _____ C:\Users\Public\Desktop\Avast Pro Antivirus.lnk
2015-10-09 02:16 - 2015-10-09 02:16 - 00000000 ____D C:\Users\missg\AppData\Roaming\AVAST Software
2015-10-09 02:16 - 2015-10-09 02:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-09 02:15 - 2015-10-09 02:15 - 01049880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-10-09 02:15 - 2015-10-09 02:15 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00153744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-10-09 02:15 - 2015-10-09 02:15 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00028144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-10-09 02:12 - 2015-10-09 02:12 - 00000000 ____D C:\Program Files\AVAST Software
2015-10-08 23:58 - 2015-10-11 22:33 - 04514008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2015-10-08 23:58 - 2015-10-11 22:33 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2015-10-08 21:20 - 2015-10-08 21:20 - 00003322 _____ C:\WINDOWS\System32\Tasks\ASC8_PerformanceMonitor
2015-10-08 21:18 - 2015-10-11 22:42 - 00000274 _____ C:\WINDOWS\Tasks\ASC8_SkipUac_missg.job
2015-10-08 21:18 - 2015-10-08 21:18 - 00002446 _____ C:\WINDOWS\System32\Tasks\ASC8_SkipUac_missg
2015-10-08 21:18 - 2015-10-08 21:18 - 00002258 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\Users\missg\AppData\Roaming\Apple Computer
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-10-08 21:16 - 2015-10-12 00:57 - 00000000 ____D C:\ProgramData\ProductData
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Users\missg\AppData\Roaming\IObit
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Users\missg\AppData\LocalLow\IObit
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\IObit
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Program Files (x86)\IObit
2015-10-08 21:16 - 2015-10-11 16:01 - 00002496 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_missg
2015-10-08 21:16 - 2015-10-11 16:01 - 00000310 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_missg.job
2015-10-08 21:16 - 2015-10-08 21:16 - 00001443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2015-10-08 21:16 - 2015-10-08 21:16 - 00001431 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-10-08 21:16 - 2015-10-08 21:16 - 00000000 ____D C:\Users\missg\AppData\Roaming\ProductData
2015-10-08 21:16 - 2015-10-08 21:16 - 00000000 ____D C:\Users\missg\AppData\IObit
2015-10-08 21:15 - 2015-10-08 21:15 - 11117856 _____ (IObit) C:\Users\missg\Downloads\iobituninstaller.exe
2015-10-08 21:11 - 2015-10-08 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mercerion
2015-10-08 21:11 - 2015-10-08 21:11 - 00000000 ____D C:\Program Files (x86)\WifiDefender
2015-10-08 21:01 - 2015-10-08 22:22 - 00000000 ____D C:\Program Files (x86)\NirSoft
2015-10-08 19:34 - 2015-10-08 19:35 - 07837168 _____ (Safebytes) C:\Users\missg\Downloads\TotalSystemCare-Setup.exe
2015-10-08 19:05 - 2015-10-08 19:05 - 00000000 ____D C:\Users\missg\AppData\Roaming\Search The Web
2015-10-08 18:51 - 2015-07-05 11:08 - 00300704 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-10-08 01:58 - 2015-10-08 01:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-10-07 21:35 - 2015-10-07 21:35 - 00000000 ____D C:\Users\missg\OneDrive\Documents\word docx CV
2015-10-07 21:11 - 2015-10-07 21:11 - 00000842 _____ C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppRemover.lnk
2015-10-07 18:24 - 2015-10-07 18:24 - 11972672 _____ (OPSWAT, Inc.) C:\Users\missg\Downloads\AppRemover.exe
2015-10-07 10:43 - 2015-10-07 10:43 - 00000085 _____ C:\WINDOWS\wininit.ini
2015-10-06 23:05 - 2015-10-06 23:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-10-06 18:41 - 2015-10-06 18:41 - 00000000 ____D C:\Users\missg\AppData\Local\Skype
2015-10-06 18:40 - 2015-10-11 14:51 - 00000000 ____D C:\Users\missg\AppData\Roaming\Skype
2015-10-06 18:40 - 2015-10-06 18:47 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-06 18:40 - 2015-10-06 18:40 - 00002640 _____ C:\Users\Public\Desktop\Skype.lnk
2015-10-06 18:40 - 2015-10-06 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-10-06 18:39 - 2015-10-06 18:40 - 00000000 ____D C:\ProgramData\Skype
2015-10-06 18:36 - 2015-10-06 18:36 - 01503872 _____ (Skype Technologies S.A.) C:\Users\missg\Downloads\SkypeSetup.exe
2015-10-06 17:38 - 2015-10-08 19:05 - 00000000 ____D C:\ProgramData\panda_url_filtering
2015-10-06 17:37 - 2015-10-08 22:07 - 00000000 ____D C:\Users\missg\AppData\Roaming\Panda Security
2015-10-06 17:35 - 2015-10-08 22:22 - 00000000 ____D C:\Program Files (x86)\Panda Security
2015-10-06 17:31 - 2015-10-08 22:08 - 00000000 ____D C:\ProgramData\Panda Security
2015-10-06 17:31 - 2015-10-06 17:31 - 02113152 _____ C:\Users\missg\Downloads\PANDAFREEAV.exe
2015-10-06 17:29 - 2015-10-12 03:37 - 00000000 ____D C:\WINDOWS\SysWOW64\Codecs
2015-10-06 17:29 - 2015-10-06 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player - Codec Pack
2015-10-06 17:04 - 2015-10-06 17:05 - 41435632 _____ (Media Player - Codec Pack) C:\Users\missg\Downloads\media.player.codec.pack.v4.3.9.setup.exe
2015-10-06 10:37 - 2015-10-06 10:37 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-10-06 05:55 - 2015-10-06 05:55 - 00000000 _____ C:\Recovery.txt
2015-10-06 05:15 - 2015-10-12 01:03 - 00005384 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-06 05:15 - 2015-09-15 17:12 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-10-06 05:15 - 2015-09-15 17:12 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-06 05:12 - 2015-07-10 11:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-10-06 05:11 - 2015-10-06 05:11 - 00000000 ____D C:\ProgramData\USOShared
2015-10-06 05:10 - 2015-10-12 00:55 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-06 05:09 - 2015-10-06 05:09 - 00000000 __SHD C:\Recovery
2015-10-06 05:03 - 2015-10-11 22:36 - 00012844 _____ C:\WINDOWS\setupact.log
2015-10-06 05:03 - 2015-10-11 22:35 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____D C:\Program Files\Realtek
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-10-06 04:58 - 2015-10-06 04:58 - 00001344 _____ C:\WINDOWS\lsasetup.log
2015-10-06 04:57 - 2015-10-09 09:13 - 00189240 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-10-06 04:43 - 2015-10-09 02:11 - 00000000 ____D C:\ProgramData\AVAST Software
2015-10-06 04:33 - 2015-10-06 04:33 - 00000000 ____D C:\Users\missg\AppData\Local\NetworkTiles
2015-10-06 04:13 - 2015-10-06 04:15 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-06 04:13 - 2015-08-26 18:37 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-10-06 04:07 - 2015-10-06 04:07 - 00000000 ____D C:\Program Files\Common Files\AV
2015-10-06 04:07 - 2015-10-06 04:05 - 00450709 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20151006-040715.backup
2015-10-06 04:05 - 2015-10-06 03:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20151006-040528.backup
2015-10-06 03:21 - 2015-10-07 10:43 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-10-06 03:21 - 2015-10-06 03:21 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2015-10-06 03:19 - 2015-10-05 21:35 - 00000000 ___DC C:\WINDOWS\Panther
2015-10-06 03:18 - 2015-10-06 03:18 - 00028672 ___SH C:\WINDOWS\system32\config\BCD-Template.LOG
2015-10-06 03:18 - 2015-10-06 03:18 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-10-06 03:17 - 2015-10-06 03:17 - 00000000 ____D C:\Program Files\Synaptics
2015-10-06 03:16 - 2015-10-06 03:16 - 00000000 ____D C:\WINDOWS\Setup
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\WINDOWS\OCR
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files\MSBuild
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\SysWOW64\0409
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\slmgr
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\0409
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-10-06 03:05 - 2015-10-06 05:06 - 00001189 _____ C:\WINDOWS\DtcInstall.log
2015-10-06 03:04 - 2015-10-06 05:55 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-10-06 03:04 - 2015-10-06 03:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2015-10-06 03:04 - 2015-10-06 03:00 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2015-10-06 03:04 - 2015-10-06 03:00 - 00215943 _____ C:\WINDOWS\system32\dssec.dat
2015-10-06 03:04 - 2015-10-06 03:00 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2015-10-06 03:04 - 2015-10-06 03:00 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services
2015-10-06 03:04 - 2015-10-06 03:00 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2015-10-06 03:04 - 2015-10-06 03:00 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2015-10-06 03:04 - 2015-10-06 03:00 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2015-10-06 03:04 - 2015-10-06 03:00 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2015-10-06 03:04 - 2015-10-06 03:00 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2015-10-06 03:04 - 2015-10-06 03:00 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT
2015-10-06 03:04 - 2015-10-06 03:00 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2015-10-06 03:04 - 2015-10-06 03:00 - 00000219 _____ C:\WINDOWS\system.ini
2015-10-06 03:04 - 2015-10-06 03:00 - 00000092 _____ C:\WINDOWS\win.ini
2015-10-06 03:03 - 2015-10-12 03:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-10-06 03:03 - 2015-10-11 18:38 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-10-06 03:03 - 2015-10-10 06:19 - 00000000 ____D C:\WINDOWS\rescache
2015-10-06 03:03 - 2015-10-07 18:57 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-10-06 03:03 - 2015-10-06 05:12 - 00000000 ____D C:\WINDOWS\system32\spool
2015-10-06 03:03 - 2015-10-06 05:12 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-10-06 03:03 - 2015-10-06 05:11 - 00000000 ____D C:\ProgramData\USOPrivate
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___SD C:\WINDOWS\system32\F12
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\Provisioning
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\L2Schemas
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\Program Files\Windows Journal
2015-10-06 03:03 - 2015-10-06 05:06 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-10-06 03:03 - 2015-10-06 03:17 - 00000000 ____D C:\WINDOWS\appcompat
2015-10-06 03:03 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2015-10-06 03:03 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\system32\dsc
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\setup
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\migwiz
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\Com
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\IME
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\Help
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Windows Defender
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Common Files\System
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\WINDOWS\Media
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RHD C:\Users\Public\Libraries
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___SD C:\WINDOWS\system32\Nui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\WINDOWS\DesktopTileResources
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-CS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sppui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Recovery
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MSDRM
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\fr-CA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\es-MX
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\th-TH
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sppui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MSDRM
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\icsxml
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ias
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\he-IL
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\fr-CA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\es-MX
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\downlevel
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\Bthprops
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system\Speech
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\ShellNew
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\Registration
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\Cursors
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\addins
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Common Files\Services
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\WINDOWS\system32\Configuration
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\Program Files\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\Program Files (x86)\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Web
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Vss
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\tracing
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\TAPI
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\sru
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\spp
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech_OneCore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\restore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\RasToast
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\ras
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\networklist
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Licenses
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SystemResources
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\winevt
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\spp
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Speech_OneCore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Speech
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\RasToast
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\ras
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\ProximityToast
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\PointOfService
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\networklist
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Macromed
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Licenses
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Ipmi
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\IME
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\config\Journal
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\System
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Speech_OneCore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Speech
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SKB
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\security
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\schemas
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SchCache
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Resources
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\PLA
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Performance
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\InputMethod
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Globalization
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Branding
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\ProgramData\Comms
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\Program Files\Windows NT
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\Program Files (x86)\Windows NT
2015-10-06 03:03 - 2015-10-05 21:50 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-10-06 03:03 - 2015-10-05 21:50 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-10-06 03:03 - 2015-10-05 21:48 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-10-06 03:03 - 2015-10-05 21:34 - 00000000 ____D C:\WINDOWS\system32\restore
2015-10-06 02:52 - 2015-10-06 04:16 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-06 02:45 - 2015-10-11 22:43 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-10-06 02:45 - 2015-10-06 05:10 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-10-06 02:45 - 2015-10-06 05:09 - 00000000 __RHD C:\Users\Default
2015-10-06 02:45 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\servicing
2015-10-06 02:45 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\SMI
2015-10-06 02:45 - 2015-07-10 10:11 - 00000164 _____ C:\WINDOWS\system32\config\FP
2015-10-06 02:08 - 2015-10-11 22:44 - 00404828 _____ C:\WINDOWS\PFRO.log
2015-10-05 22:23 - 2015-10-05 22:23 - 00002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-05 22:23 - 2015-10-05 22:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-05 22:22 - 2015-10-12 03:27 - 00000928 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-05 22:22 - 2015-10-12 00:58 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-05 22:22 - 2015-10-05 22:23 - 00000000 ____D C:\Users\missg\AppData\Local\Google
2015-10-05 22:22 - 2015-10-05 22:23 - 00000000 ____D C:\Program Files (x86)\Google
2015-10-05 22:22 - 2015-10-05 22:22 - 00003986 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-10-05 22:22 - 2015-10-05 22:22 - 00003754 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-10-05 22:14 - 2015-10-05 22:22 - 00929872 _____ (Google Inc.) C:\Users\missg\Downloads\ChromeSetup.exe
2015-10-05 22:08 - 2015-10-10 00:07 - 00000000 ____D C:\Users\missg\AppData\Local\PackageStaging
2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\Users\missg\AppData\Roaming\Macromedia
2015-10-05 21:54 - 2015-10-05 21:54 - 00000000 ____D C:\Users\missg\AppData\Local\MicrosoftEdge
2015-10-05 21:53 - 2015-10-11 22:42 - 00000000 ____D C:\Users\missg\OneDrive
2015-10-05 21:53 - 2015-10-05 21:54 - 00002338 _____ C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-10-05 21:53 - 2015-10-05 21:53 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-10-05 21:52 - 2015-10-06 18:33 - 00000000 ____D C:\Users\missg\AppData\Local\Comms
2015-10-05 21:51 - 2015-10-08 08:58 - 00000000 ____D C:\Users\missg\AppData\Local\Publishers
2015-10-05 21:49 - 2015-10-11 18:33 - 00000000 ____D C:\Users\missg\AppData\Local\Packages
2015-10-05 21:49 - 2015-10-05 21:49 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7E5LF1P_defaultuser0_HistoryPrediction.bin
2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Roaming\Adobe
2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Local\VirtualStore
2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Local\TileDataLayer
2015-10-05 21:41 - 2015-10-12 00:56 - 00000000 ____D C:\Users\missg
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ____D C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-05 21:41 - 2015-10-05 21:49 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-05 21:41 - 2015-10-05 21:41 - 00000020 ___SH C:\Users\missg\ntuser.ini
2015-10-05 21:33 - 2015-10-12 03:38 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-01 02:50 - 2015-09-17 07:50 - 02464216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-10-01 02:50 - 2015-09-17 07:49 - 06487248 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-10-01 02:50 - 2015-09-17 07:48 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 02:50 - 2015-09-17 07:48 - 02494712 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 02:50 - 2015-09-17 07:28 - 05120056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2015-10-01 02:50 - 2015-09-17 07:28 - 02154808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-10-01 02:50 - 2015-09-17 07:12 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-01 02:50 - 2015-09-17 07:07 - 21875712 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-10-01 02:50 - 2015-09-17 07:04 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-10-01 02:50 - 2015-09-17 07:00 - 24595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-10-01 02:50 - 2015-09-17 07:00 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 02:50 - 2015-09-17 07:00 - 02417664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 02:50 - 2015-09-17 06:54 - 03781120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 02:50 - 2015-09-17 06:53 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-10-01 02:50 - 2015-09-17 06:51 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-10-01 02:50 - 2015-09-17 06:51 - 02660864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 02:50 - 2015-09-17 06:49 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-10-01 02:50 - 2015-09-17 06:47 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-10-01 02:50 - 2015-09-17 06:45 - 19325440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-10-01 02:50 - 2015-09-17 06:42 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-10-01 02:50 - 2015-09-17 06:40 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-10-01 02:50 - 2015-09-17 06:40 - 01918464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-10-01 02:50 - 2015-09-17 06:37 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-10-01 02:50 - 2015-09-17 06:35 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-10-01 02:50 - 2015-09-17 06:31 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-10-01 02:49 - 2015-09-25 00:17 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-01 02:49 - 2015-09-25 00:08 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-10-01 02:49 - 2015-09-25 00:06 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-10-01 02:49 - 2015-09-24 23:42 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-01 02:49 - 2015-09-17 07:50 - 01563392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-10-01 02:49 - 2015-09-17 07:49 - 08020816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-10-01 02:49 - 2015-09-17 07:49 - 01563472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-10-01 02:49 - 2015-09-17 07:49 - 00894256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2015-10-01 02:49 - 2015-09-17 07:48 - 02432336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-10-01 02:49 - 2015-09-17 07:48 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 01983824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-10-01 02:49 - 2015-09-17 07:48 - 00809352 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 00555768 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 00537080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 02:49 - 2015-09-17 07:47 - 01397088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 02:49 - 2015-09-17 07:44 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-10-01 02:49 - 2015-09-17 07:43 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 02:49 - 2015-09-17 07:37 - 01295712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2015-10-01 02:49 - 2015-09-17 07:27 - 01766952 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-10-01 02:49 - 2015-09-17 07:26 - 02446648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2015-10-01 02:49 - 2015-09-17 07:26 - 00646672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-10-01 02:49 - 2015-09-17 07:25 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-10-01 02:49 - 2015-09-17 07:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-10-01 02:49 - 2015-09-17 07:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-10-01 02:49 - 2015-09-17 07:06 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 02:49 - 2015-09-17 07:05 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 02:49 - 2015-09-17 07:04 - 00910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 02:49 - 2015-09-17 06:57 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2015-10-01 02:49 - 2015-09-17 06:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 02:49 - 2015-09-17 06:55 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-10-01 02:49 - 2015-09-17 06:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 02:49 - 2015-09-17 06:52 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-10-01 02:49 - 2015-09-17 06:52 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 02:49 - 2015-09-17 06:51 - 01203712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 02:49 - 2015-09-17 06:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 02:49 - 2015-09-17 06:49 - 01010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-10-01 02:49 - 2015-09-17 06:48 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 02:49 - 2015-09-17 06:48 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2015-10-01 02:49 - 2015-09-17 06:47 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 02:49 - 2015-09-17 06:45 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-10-01 02:49 - 2015-09-17 06:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 02:49 - 2015-09-17 06:45 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 02:49 - 2015-09-17 06:44 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2015-10-01 02:49 - 2015-09-17 06:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 02:49 - 2015-09-17 06:40 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2015-10-01 02:49 - 2015-09-17 06:39 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-10-01 02:49 - 2015-09-17 06:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2015-10-01 02:49 - 2015-09-17 06:35 - 02207232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-10-01 02:49 - 2015-09-17 06:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2015-10-01 02:49 - 2015-09-17 06:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2015-10-01 02:49 - 2015-09-17 06:32 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-10-01 02:49 - 2015-09-17 06:29 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-10-01 02:49 - 2015-09-17 06:29 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-10-01 02:49 - 2015-09-17 06:26 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2015-10-01 02:49 - 2015-09-17 06:16 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2015-10-01 02:49 - 2015-09-13 03:05 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-10-01 02:48 - 2015-09-25 01:13 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-01 02:48 - 2015-09-25 00:24 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2015-10-01 02:48 - 2015-09-25 00:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-01 02:48 - 2015-09-25 00:23 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-10-01 02:48 - 2015-09-25 00:07 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-10-01 02:48 - 2015-09-25 00:01 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-10-01 02:48 - 2015-09-25 00:00 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-10-01 02:48 - 2015-09-25 00:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2015-10-01 02:48 - 2015-09-24 23:43 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2015-10-01 02:48 - 2015-09-24 23:25 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-10-01 02:48 - 2015-09-24 23:25 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2015-10-01 02:48 - 2015-09-17 07:50 - 00099664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-10-01 02:48 - 2015-09-17 07:49 - 00553808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 02:48 - 2015-09-17 07:48 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-10-01 02:48 - 2015-09-17 07:48 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-10-01 02:48 - 2015-09-17 07:48 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-10-01 02:48 - 2015-09-17 07:48 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 02:48 - 2015-09-17 07:48 - 00395088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-10-01 02:48 - 2015-09-17 07:48 - 00332624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2015-10-01 02:48 - 2015-09-17 07:48 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-10-01 02:48 - 2015-09-17 07:39 - 00081488 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-10-01 02:48 - 2015-09-17 07:28 - 01357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-10-01 02:48 - 2015-09-17 07:28 - 00441168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2015-10-01 02:48 - 2015-09-17 07:27 - 00454512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 01895568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 00434376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 00428128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-10-01 02:48 - 2015-09-17 07:09 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-10-01 02:48 - 2015-09-17 07:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 02:48 - 2015-09-17 07:06 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 02:48 - 2015-09-17 07:06 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 02:48 - 2015-09-17 07:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 02:48 - 2015-09-17 07:00 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 02:48 - 2015-09-17 06:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 02:48 - 2015-09-17 06:57 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 02:48 - 2015-09-17 06:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 02:48 - 2015-09-17 06:57 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 02:48 - 2015-09-17 06:56 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2015-10-01 02:48 - 2015-09-17 06:54 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 02:48 - 2015-09-17 06:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-10-01 02:48 - 2015-09-17 06:51 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-10-01 02:48 - 2015-09-17 06:51 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-10-01 02:48 - 2015-09-17 06:50 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 02:48 - 2015-09-17 06:50 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys
2015-10-01 02:48 - 2015-09-17 06:48 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 02:48 - 2015-09-17 06:48 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 02:48 - 2015-09-17 06:48 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 02:48 - 2015-09-17 06:48 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 02:48 - 2015-09-17 06:47 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2015-10-01 02:48 - 2015-09-17 06:47 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 02:48 - 2015-09-17 06:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 02:48 - 2015-09-17 06:45 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-10-01 02:48 - 2015-09-17 06:45 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 02:48 - 2015-09-17 06:44 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 02:48 - 2015-09-17 06:43 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 02:48 - 2015-09-17 06:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-10-01 02:48 - 2015-09-17 06:41 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2015-10-01 02:48 - 2015-09-17 06:37 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-10-01 02:48 - 2015-09-17 06:34 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2015-10-01 02:48 - 2015-09-17 06:32 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2015-10-01 02:48 - 2015-09-17 06:32 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2015-10-01 02:48 - 2015-09-17 06:32 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-01 02:48 - 2015-09-17 06:31 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2015-10-01 02:48 - 2015-09-17 06:30 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2015-10-01 02:48 - 2015-09-17 06:29 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-10-01 02:48 - 2015-09-17 06:29 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-10-01 02:48 - 2015-09-13 02:41 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-10-01 02:47 - 2015-09-25 00:05 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-01 02:47 - 2015-09-25 00:00 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2015-10-01 02:47 - 2015-09-24 23:53 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-01 02:47 - 2015-09-24 23:43 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-01 02:47 - 2015-09-24 23:25 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2015-10-01 02:47 - 2015-09-24 23:25 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2015-10-01 02:47 - 2015-09-24 23:25 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2015-10-01 02:47 - 2015-09-24 23:19 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2015-10-01 02:47 - 2015-09-19 06:14 - 00102304 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2015-10-01 02:47 - 2015-09-17 07:50 - 00088384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 02:47 - 2015-09-17 07:37 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-10-01 02:47 - 2015-09-17 07:28 - 00074880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-10-01 02:47 - 2015-09-17 07:08 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 02:47 - 2015-09-17 07:08 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 02:47 - 2015-09-17 07:03 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 02:47 - 2015-09-17 07:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 02:47 - 2015-09-17 07:00 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 02:47 - 2015-09-17 06:52 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-10-01 02:47 - 2015-09-17 06:50 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2015-10-01 02:47 - 2015-09-17 06:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 02:47 - 2015-09-17 06:49 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
2015-10-01 02:45 - 2015-09-25 01:35 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-01 02:45 - 2015-09-25 01:34 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-01 02:45 - 2015-09-25 00:34 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2015-10-01 02:45 - 2015-09-25 00:34 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2015-10-01 02:45 - 2015-09-25 00:01 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2015-10-01 02:45 - 2015-09-25 00:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-01 02:45 - 2015-09-24 23:24 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2015-10-01 02:45 - 2015-09-17 07:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-10-01 02:45 - 2015-09-17 07:48 - 00406864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-10-01 02:45 - 2015-09-17 07:48 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-10-01 02:45 - 2015-09-17 07:28 - 00407608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-10-01 02:45 - 2015-09-17 07:11 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 02:45 - 2015-09-17 07:09 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-10-01 02:45 - 2015-09-17 07:04 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 02:45 - 2015-09-17 07:03 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 02:45 - 2015-09-17 06:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 02:45 - 2015-09-17 06:55 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-10-01 02:45 - 2015-09-17 06:52 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll
2015-10-01 02:45 - 2015-09-17 06:52 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 02:45 - 2015-09-17 06:51 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2015-10-01 02:45 - 2015-09-17 06:50 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll
2015-10-01 02:45 - 2015-09-17 06:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 02:45 - 2015-09-17 06:45 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2015-10-01 02:45 - 2015-09-17 06:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-10-01 02:45 - 2015-09-17 06:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll
2015-10-01 02:45 - 2015-09-17 06:43 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-10-01 02:45 - 2015-09-17 06:33 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2015-10-01 02:44 - 2015-09-17 07:10 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 02:44 - 2015-09-17 07:03 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 02:44 - 2015-09-17 07:03 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 02:44 - 2015-09-17 07:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 02:44 - 2015-09-17 07:02 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 02:44 - 2015-09-17 06:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2015-10-01 02:44 - 2015-09-17 06:55 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2015-10-01 02:44 - 2015-09-17 06:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 02:44 - 2015-09-17 06:52 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-10-01 02:44 - 2015-09-17 06:50 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-01 02:44 - 2015-09-17 06:50 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll
2015-10-01 02:44 - 2015-09-17 06:49 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2015-10-01 02:44 - 2015-09-17 06:46 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll
2015-10-01 02:44 - 2015-09-17 06:39 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 02:44 - 2015-09-17 06:36 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll
2015-10-01 02:44 - 2015-09-17 06:28 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2015-09-18 11:14 - 2015-09-18 11:14 - 00047096 _____ C:\WINDOWS\SysWOW64\DiscHandler.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-06 05:55 - 2015-08-12 18:56 - 00000000 ___HD C:\$SysReset

Some files in TEMP:
====================
C:\Users\missg\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\missg\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\missg\AppData\Local\Temp\fupxsehn.dll
C:\Users\missg\AppData\Local\Temp\scpF847.tmp.exe
C:\Users\missg\AppData\Local\Temp\{AF2B58C9-D569-4BAE-94F0-49E88695FD51}.exe
C:\Users\missg\AppData\Local\Temp\{BEA8507A-F470-4150-B29A-F70EFCB5680D}.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-10-06 04:56

==================== End of FRST.txt ============================

 

[TwinHeadedEagle]

Hello,



They call me TwinHeadedEagle around here, and I'll be working with you.



Before we start please read and note the following:

• At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
• Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
• Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
• Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.
  
• All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
• If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
• I visit forum several times at day, making sure to respond to everyone's topic as fast as possible. But bear in mind that I have private life like everyone and I cannot be here 24/7. So please be patient with me. Also, some infections require less, and some more time to be removed completely, so bear this in mind and be patient.
• Please stay with me until the end of all steps and procedures and I declare your system clean. Just because there is a lack of symptoms does not indicate a clean machine. If you solved your problem yourself, set aside two minutes to let me know.
  
• Please attach all report using
  
  button below. Doing this, you make it easier for me to analyze and fix your problem.
  
• Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay for the repair.
• If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

Rules and policies

We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.