- Oct 11, 2015
- 1
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:11-10-2015 02
Ran by missg (administrator) on DESKTOP-7E5LF1P (12-10-2015 04:14:52)
Running from C:\Users\missg\Downloads
Loaded Profiles: missg (Available Profiles: missg)
Platform: Windows 10 Home (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
() C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
() C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_bg.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Reason Software Company Inc.) C:\Program Files\Reason\Security\rsUI.exe
(Reason Software Company Inc.) C:\Program Files\Reason\Security\rsEngineSvc.exe
() C:\Program Files\WindowsApps\Microsoft.Getstarted_2.3.4.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6306.42251.0_x64__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6306.42251.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.10.5.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-08-21] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8497368 2015-10-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-10-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [Codec Settings UAC Manager] => C:\WINDOWS\SysWOW64\Codecs\CodecUACManager.exe [60416 2015-09-18] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-09] (AVAST Software)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5889824 2015-07-28] (IObit)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Codec Pack Update Checker] => "C:\WINDOWS\system32\Codecs\UpdateChecker.exe"
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [57981568 2015-09-28] (Skype Technologies S.A.)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [BingSvc] => C:\Users\missg\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [GoogleChromeAutoLaunch_6DB381FA150BEC1DEE19427A951342A0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944 2015-09-24] (Google Inc.)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-09] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2015-10-06]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\syswow64\Codecs\TrayMenu.exe (No File)
BootExecute: autocheck autochk * 搀渀挀氀攀愀渀㘀㐀⸀攀砀攀
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fb5b723b-fe72-426b-84c3-5a9be0c2b7a2}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.co.uk
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://pandasecurity.mystart.com/results.php?pr=vmn&gen=ms&id=pandasecuritytb&v=4_3&idate=2015-10-08&ent=ch_671&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-08-31] (IObit)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-09] (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-09] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-05] (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-09]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR StartupUrls: Default -> "hxxps://www.google.co.uk/","hxxps://uk.search.yahoo.com/?type=994519&fr=yo-yhp-ch"
CHR Profile: C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-05]
CHR Extension: (YouTube) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-05]
CHR Extension: (Google Search) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-05]
CHR Extension: (Google Docs Offline) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-05]
CHR Extension: (Google Play) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2015-10-08]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-10-05]
CHR Extension: (Skype Click to Call) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-10-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-05]
CHR Extension: (Azov Sea Theme #2) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\oalokjhcnhmboncjbmhicgmiinlfacio [2015-10-07]
CHR Extension: (Gmail) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-05]
CHR HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-09]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-09] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [882464 2015-07-17] (IObit)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-08-31] (IObit)
R2 rscp; C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe [163576 2015-10-11] ()
R2 rsEngineSvc; C:\Program Files\Reason\Security\rsEngineSvc.exe [80104 2015-10-07] (Reason Software Company Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-10-11] (Realtek Semiconductor)
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [1055008 2015-09-21] (IObit)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-08-21] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-09] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-10-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-09] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-09] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-09] (AVAST Software)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-10-11] (REALiX(tm))
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2015-03-25] (IObit.com)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [888064 2015-10-11] (Realtek )
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [42184 2015-08-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [42696 2015-08-21] (Synaptics Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16056 2015-10-10] (SlimWare Utilities, Inc.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2015-03-25] (IObit.com)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-12 04:14 - 2015-10-12 04:15 - 00017009 _____ C:\Users\missg\Downloads\FRST.txt
2015-10-12 04:12 - 2015-10-12 04:14 - 00000000 ____D C:\FRST
2015-10-12 04:11 - 2015-10-12 04:12 - 02195968 _____ (Farbar) C:\Users\missg\Downloads\FRST64.exe
2015-10-12 03:48 - 2015-10-12 03:48 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7E5LF1P_missg_HistoryPrediction.bin
2015-10-12 03:11 - 2015-10-12 03:11 - 00000000 ____D C:\Users\missg\OneDrive\Documents\MPC-HC Capture
2015-10-12 03:10 - 2015-10-12 03:10 - 00000000 ____D C:\Users\missg\AppData\Roaming\MPC-HC
2015-10-12 02:49 - 2015-10-12 02:49 - 00000000 ____D C:\Users\missg\AppData\Roaming\DVDVideoSoft
2015-10-11 22:39 - 2015-10-11 22:39 - 00888064 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2015-10-11 22:39 - 2015-10-11 22:39 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2015-10-11 22:35 - 2015-10-11 22:36 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-10-11 22:33 - 2015-10-11 22:33 - 72113152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2015-10-11 22:33 - 2015-10-11 22:33 - 35222128 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2015-10-11 22:33 - 2015-10-11 22:33 - 03234520 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 02930904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 02918104 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 02702552 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2015-10-11 22:33 - 2015-10-11 22:33 - 01749208 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 01413776 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 01310936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 01104040 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00943784 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00734376 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00631000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00454288 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00369296 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00329360 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00250536 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00184688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 01576976 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 00560328 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2015-10-11 22:27 - 2015-10-11 22:42 - 00002227 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2015-10-11 22:27 - 2015-10-11 22:27 - 00026528 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS
2015-10-11 22:27 - 2015-10-11 22:27 - 00003428 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler
2015-10-11 22:27 - 2015-10-11 22:27 - 00003316 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Startup
2015-10-11 22:27 - 2015-10-11 22:27 - 00003312 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Update
2015-10-11 22:27 - 2015-10-11 22:27 - 00003076 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (missg)
2015-10-11 22:27 - 2015-10-11 22:27 - 00001356 _____ C:\Users\Public\Desktop\Start Menu 8.lnk
2015-10-11 22:27 - 2015-10-11 22:27 - 00001247 _____ C:\Users\Public\Desktop\Smart Defrag 4.lnk
2015-10-11 22:27 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Start Menu 8
2015-10-11 22:27 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
2015-10-11 22:27 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\SysWOW64\IObitSmartDefragExtension.dll
2015-10-11 22:27 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll
2015-10-11 22:27 - 2014-06-04 15:17 - 00034080 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe
2015-10-11 22:27 - 2014-06-04 15:17 - 00021184 _____ (IObit) C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys
2015-10-11 22:26 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2015-10-11 22:26 - 2015-10-11 22:26 - 00001250 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2015-10-11 22:26 - 2015-10-11 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2015-10-11 20:27 - 2015-10-11 20:27 - 03794200 _____ (Reason Software Company Inc.) C:\Users\missg\Downloads\reason-core-security-setup (1).exe
2015-10-11 20:26 - 2015-10-11 20:26 - 00003638 _____ C:\WINDOWS\System32\Tasks\ReasonSecurityScheduledScan
2015-10-11 20:26 - 2015-10-11 20:26 - 00003502 _____ C:\WINDOWS\System32\Tasks\ReasonSecurityStart
2015-10-11 20:26 - 2015-10-11 20:26 - 00000000 ____D C:\ProgramData\Reason
2015-10-11 19:02 - 2015-10-11 20:27 - 00000956 _____ C:\Users\Public\Desktop\Reason Core Security.lnk
2015-10-11 19:02 - 2015-10-11 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reason Core Security
2015-10-11 19:02 - 2015-10-11 19:02 - 00000000 ____D C:\Program Files\Reason
2015-10-11 19:01 - 2015-10-11 19:01 - 03794200 _____ (Reason Software Company Inc.) C:\Users\missg\Downloads\reason-core-security-setup.exe
2015-10-11 18:41 - 2015-10-11 18:43 - 00018944 ___SH C:\Users\missg\Downloads\Thumbs.db
2015-10-10 03:18 - 2015-10-11 21:43 - 00000000 ____D C:\Program Files\SlimService
2015-10-10 03:18 - 2015-10-10 03:18 - 00002481 _____ C:\Users\Public\Desktop\SlimCleaner Plus.lnk
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\Users\missg\AppData\Local\Downloaded Installers
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\ProgramData\SlimWare Utilities Inc
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner Plus
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\Program Files\SlimCleaner Plus
2015-10-10 03:17 - 2015-10-12 00:57 - 00000000 ____D C:\Users\missg\AppData\Local\SlimWare Utilities Inc
2015-10-10 03:17 - 2015-10-10 03:17 - 00016056 _____ (SlimWare Utilities, Inc.) C:\WINDOWS\system32\Drivers\SWDUMon.sys
2015-10-09 15:28 - 2015-10-09 15:28 - 02513235 _____ C:\Users\missg\Downloads\takeout-20151008T004828Z.zip
2015-10-09 06:44 - 2015-10-12 03:28 - 00004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B304D8BB-B3F8-449A-9B89-6D69F86BE87E}
2015-10-09 02:16 - 2015-10-09 02:16 - 00002027 _____ C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-10-09 02:16 - 2015-10-09 02:16 - 00001967 _____ C:\Users\Public\Desktop\Avast Pro Antivirus.lnk
2015-10-09 02:16 - 2015-10-09 02:16 - 00000000 ____D C:\Users\missg\AppData\Roaming\AVAST Software
2015-10-09 02:16 - 2015-10-09 02:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-09 02:15 - 2015-10-09 02:15 - 01049880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-10-09 02:15 - 2015-10-09 02:15 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00153744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-10-09 02:15 - 2015-10-09 02:15 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00028144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-10-09 02:12 - 2015-10-09 02:12 - 00000000 ____D C:\Program Files\AVAST Software
2015-10-08 23:58 - 2015-10-11 22:33 - 04514008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2015-10-08 23:58 - 2015-10-11 22:33 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2015-10-08 21:20 - 2015-10-08 21:20 - 00003322 _____ C:\WINDOWS\System32\Tasks\ASC8_PerformanceMonitor
2015-10-08 21:18 - 2015-10-11 22:42 - 00000274 _____ C:\WINDOWS\Tasks\ASC8_SkipUac_missg.job
2015-10-08 21:18 - 2015-10-08 21:18 - 00002446 _____ C:\WINDOWS\System32\Tasks\ASC8_SkipUac_missg
2015-10-08 21:18 - 2015-10-08 21:18 - 00002258 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\Users\missg\AppData\Roaming\Apple Computer
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-10-08 21:16 - 2015-10-12 00:57 - 00000000 ____D C:\ProgramData\ProductData
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Users\missg\AppData\Roaming\IObit
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Users\missg\AppData\LocalLow\IObit
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\IObit
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Program Files (x86)\IObit
2015-10-08 21:16 - 2015-10-11 16:01 - 00002496 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_missg
2015-10-08 21:16 - 2015-10-11 16:01 - 00000310 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_missg.job
2015-10-08 21:16 - 2015-10-08 21:16 - 00001443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2015-10-08 21:16 - 2015-10-08 21:16 - 00001431 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-10-08 21:16 - 2015-10-08 21:16 - 00000000 ____D C:\Users\missg\AppData\Roaming\ProductData
2015-10-08 21:16 - 2015-10-08 21:16 - 00000000 ____D C:\Users\missg\AppData\IObit
2015-10-08 21:15 - 2015-10-08 21:15 - 11117856 _____ (IObit) C:\Users\missg\Downloads\iobituninstaller.exe
2015-10-08 21:11 - 2015-10-08 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mercerion
2015-10-08 21:11 - 2015-10-08 21:11 - 00000000 ____D C:\Program Files (x86)\WifiDefender
2015-10-08 21:01 - 2015-10-08 22:22 - 00000000 ____D C:\Program Files (x86)\NirSoft
2015-10-08 19:34 - 2015-10-08 19:35 - 07837168 _____ (Safebytes) C:\Users\missg\Downloads\TotalSystemCare-Setup.exe
2015-10-08 19:05 - 2015-10-08 19:05 - 00000000 ____D C:\Users\missg\AppData\Roaming\Search The Web
2015-10-08 18:51 - 2015-07-05 11:08 - 00300704 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-10-08 01:58 - 2015-10-08 01:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-10-07 21:35 - 2015-10-07 21:35 - 00000000 ____D C:\Users\missg\OneDrive\Documents\word docx CV
2015-10-07 21:11 - 2015-10-07 21:11 - 00000842 _____ C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppRemover.lnk
2015-10-07 18:24 - 2015-10-07 18:24 - 11972672 _____ (OPSWAT, Inc.) C:\Users\missg\Downloads\AppRemover.exe
2015-10-07 10:43 - 2015-10-07 10:43 - 00000085 _____ C:\WINDOWS\wininit.ini
2015-10-06 23:05 - 2015-10-06 23:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-10-06 18:41 - 2015-10-06 18:41 - 00000000 ____D C:\Users\missg\AppData\Local\Skype
2015-10-06 18:40 - 2015-10-11 14:51 - 00000000 ____D C:\Users\missg\AppData\Roaming\Skype
2015-10-06 18:40 - 2015-10-06 18:47 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-06 18:40 - 2015-10-06 18:40 - 00002640 _____ C:\Users\Public\Desktop\Skype.lnk
2015-10-06 18:40 - 2015-10-06 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-10-06 18:39 - 2015-10-06 18:40 - 00000000 ____D C:\ProgramData\Skype
2015-10-06 18:36 - 2015-10-06 18:36 - 01503872 _____ (Skype Technologies S.A.) C:\Users\missg\Downloads\SkypeSetup.exe
2015-10-06 17:38 - 2015-10-08 19:05 - 00000000 ____D C:\ProgramData\panda_url_filtering
2015-10-06 17:37 - 2015-10-08 22:07 - 00000000 ____D C:\Users\missg\AppData\Roaming\Panda Security
2015-10-06 17:35 - 2015-10-08 22:22 - 00000000 ____D C:\Program Files (x86)\Panda Security
2015-10-06 17:31 - 2015-10-08 22:08 - 00000000 ____D C:\ProgramData\Panda Security
2015-10-06 17:31 - 2015-10-06 17:31 - 02113152 _____ C:\Users\missg\Downloads\PANDAFREEAV.exe
2015-10-06 17:29 - 2015-10-12 03:37 - 00000000 ____D C:\WINDOWS\SysWOW64\Codecs
2015-10-06 17:29 - 2015-10-06 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player - Codec Pack
2015-10-06 17:04 - 2015-10-06 17:05 - 41435632 _____ (Media Player - Codec Pack) C:\Users\missg\Downloads\media.player.codec.pack.v4.3.9.setup.exe
2015-10-06 10:37 - 2015-10-06 10:37 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-10-06 05:55 - 2015-10-06 05:55 - 00000000 _____ C:\Recovery.txt
2015-10-06 05:15 - 2015-10-12 01:03 - 00005384 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-06 05:15 - 2015-09-15 17:12 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-10-06 05:15 - 2015-09-15 17:12 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-06 05:12 - 2015-07-10 11:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-10-06 05:11 - 2015-10-06 05:11 - 00000000 ____D C:\ProgramData\USOShared
2015-10-06 05:10 - 2015-10-12 00:55 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-06 05:09 - 2015-10-06 05:09 - 00000000 __SHD C:\Recovery
2015-10-06 05:03 - 2015-10-11 22:36 - 00012844 _____ C:\WINDOWS\setupact.log
2015-10-06 05:03 - 2015-10-11 22:35 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____D C:\Program Files\Realtek
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-10-06 04:58 - 2015-10-06 04:58 - 00001344 _____ C:\WINDOWS\lsasetup.log
2015-10-06 04:57 - 2015-10-09 09:13 - 00189240 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-10-06 04:43 - 2015-10-09 02:11 - 00000000 ____D C:\ProgramData\AVAST Software
2015-10-06 04:33 - 2015-10-06 04:33 - 00000000 ____D C:\Users\missg\AppData\Local\NetworkTiles
2015-10-06 04:13 - 2015-10-06 04:15 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-06 04:13 - 2015-08-26 18:37 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-10-06 04:07 - 2015-10-06 04:07 - 00000000 ____D C:\Program Files\Common Files\AV
2015-10-06 04:07 - 2015-10-06 04:05 - 00450709 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20151006-040715.backup
2015-10-06 04:05 - 2015-10-06 03:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20151006-040528.backup
2015-10-06 03:21 - 2015-10-07 10:43 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-10-06 03:21 - 2015-10-06 03:21 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2015-10-06 03:19 - 2015-10-05 21:35 - 00000000 ___DC C:\WINDOWS\Panther
2015-10-06 03:18 - 2015-10-06 03:18 - 00028672 ___SH C:\WINDOWS\system32\config\BCD-Template.LOG
2015-10-06 03:18 - 2015-10-06 03:18 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-10-06 03:17 - 2015-10-06 03:17 - 00000000 ____D C:\Program Files\Synaptics
2015-10-06 03:16 - 2015-10-06 03:16 - 00000000 ____D C:\WINDOWS\Setup
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\WINDOWS\OCR
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files\MSBuild
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\SysWOW64\0409
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\slmgr
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\0409
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-10-06 03:05 - 2015-10-06 05:06 - 00001189 _____ C:\WINDOWS\DtcInstall.log
2015-10-06 03:04 - 2015-10-06 05:55 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-10-06 03:04 - 2015-10-06 03:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2015-10-06 03:04 - 2015-10-06 03:00 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2015-10-06 03:04 - 2015-10-06 03:00 - 00215943 _____ C:\WINDOWS\system32\dssec.dat
2015-10-06 03:04 - 2015-10-06 03:00 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2015-10-06 03:04 - 2015-10-06 03:00 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services
2015-10-06 03:04 - 2015-10-06 03:00 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2015-10-06 03:04 - 2015-10-06 03:00 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2015-10-06 03:04 - 2015-10-06 03:00 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2015-10-06 03:04 - 2015-10-06 03:00 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2015-10-06 03:04 - 2015-10-06 03:00 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2015-10-06 03:04 - 2015-10-06 03:00 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT
2015-10-06 03:04 - 2015-10-06 03:00 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2015-10-06 03:04 - 2015-10-06 03:00 - 00000219 _____ C:\WINDOWS\system.ini
2015-10-06 03:04 - 2015-10-06 03:00 - 00000092 _____ C:\WINDOWS\win.ini
2015-10-06 03:03 - 2015-10-12 03:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-10-06 03:03 - 2015-10-11 18:38 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-10-06 03:03 - 2015-10-10 06:19 - 00000000 ____D C:\WINDOWS\rescache
2015-10-06 03:03 - 2015-10-07 18:57 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-10-06 03:03 - 2015-10-06 05:12 - 00000000 ____D C:\WINDOWS\system32\spool
2015-10-06 03:03 - 2015-10-06 05:12 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-10-06 03:03 - 2015-10-06 05:11 - 00000000 ____D C:\ProgramData\USOPrivate
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___SD C:\WINDOWS\system32\F12
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\Provisioning
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\L2Schemas
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\Program Files\Windows Journal
2015-10-06 03:03 - 2015-10-06 05:06 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-10-06 03:03 - 2015-10-06 03:17 - 00000000 ____D C:\WINDOWS\appcompat
2015-10-06 03:03 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2015-10-06 03:03 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\system32\dsc
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\setup
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\migwiz
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\Com
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\IME
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\Help
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Windows Defender
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Common Files\System
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\WINDOWS\Media
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RHD C:\Users\Public\Libraries
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___SD C:\WINDOWS\system32\Nui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\WINDOWS\DesktopTileResources
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-CS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sppui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Recovery
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MSDRM
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\fr-CA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\es-MX
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\th-TH
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sppui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MSDRM
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\icsxml
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ias
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\he-IL
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\fr-CA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\es-MX
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\downlevel
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\Bthprops
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system\Speech
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\ShellNew
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\Registration
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\Cursors
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\addins
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Common Files\Services
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\WINDOWS\system32\Configuration
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\Program Files\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\Program Files (x86)\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Web
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Vss
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\tracing
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\TAPI
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\sru
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\spp
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech_OneCore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\restore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\RasToast
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\ras
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\networklist
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Licenses
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SystemResources
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\winevt
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\spp
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Speech_OneCore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Speech
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\RasToast
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\ras
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\ProximityToast
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\PointOfService
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\networklist
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Macromed
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Licenses
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Ipmi
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\IME
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\config\Journal
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\System
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Speech_OneCore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Speech
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SKB
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\security
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\schemas
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SchCache
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Resources
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\PLA
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Performance
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\InputMethod
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Globalization
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Branding
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\ProgramData\Comms
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\Program Files\Windows NT
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\Program Files (x86)\Windows NT
2015-10-06 03:03 - 2015-10-05 21:50 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-10-06 03:03 - 2015-10-05 21:50 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-10-06 03:03 - 2015-10-05 21:48 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-10-06 03:03 - 2015-10-05 21:34 - 00000000 ____D C:\WINDOWS\system32\restore
2015-10-06 02:52 - 2015-10-06 04:16 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-06 02:45 - 2015-10-11 22:43 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-10-06 02:45 - 2015-10-06 05:10 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-10-06 02:45 - 2015-10-06 05:09 - 00000000 __RHD C:\Users\Default
2015-10-06 02:45 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\servicing
2015-10-06 02:45 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\SMI
2015-10-06 02:45 - 2015-07-10 10:11 - 00000164 _____ C:\WINDOWS\system32\config\FP
2015-10-06 02:08 - 2015-10-11 22:44 - 00404828 _____ C:\WINDOWS\PFRO.log
2015-10-05 22:23 - 2015-10-05 22:23 - 00002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-05 22:23 - 2015-10-05 22:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-05 22:22 - 2015-10-12 03:27 - 00000928 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-05 22:22 - 2015-10-12 00:58 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-05 22:22 - 2015-10-05 22:23 - 00000000 ____D C:\Users\missg\AppData\Local\Google
2015-10-05 22:22 - 2015-10-05 22:23 - 00000000 ____D C:\Program Files (x86)\Google
2015-10-05 22:22 - 2015-10-05 22:22 - 00003986 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-10-05 22:22 - 2015-10-05 22:22 - 00003754 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-10-05 22:14 - 2015-10-05 22:22 - 00929872 _____ (Google Inc.) C:\Users\missg\Downloads\ChromeSetup.exe
2015-10-05 22:08 - 2015-10-10 00:07 - 00000000 ____D C:\Users\missg\AppData\Local\PackageStaging
2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\Users\missg\AppData\Roaming\Macromedia
2015-10-05 21:54 - 2015-10-05 21:54 - 00000000 ____D C:\Users\missg\AppData\Local\MicrosoftEdge
2015-10-05 21:53 - 2015-10-11 22:42 - 00000000 ____D C:\Users\missg\OneDrive
2015-10-05 21:53 - 2015-10-05 21:54 - 00002338 _____ C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-10-05 21:53 - 2015-10-05 21:53 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-10-05 21:52 - 2015-10-06 18:33 - 00000000 ____D C:\Users\missg\AppData\Local\Comms
2015-10-05 21:51 - 2015-10-08 08:58 - 00000000 ____D C:\Users\missg\AppData\Local\Publishers
2015-10-05 21:49 - 2015-10-11 18:33 - 00000000 ____D C:\Users\missg\AppData\Local\Packages
2015-10-05 21:49 - 2015-10-05 21:49 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7E5LF1P_defaultuser0_HistoryPrediction.bin
2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Roaming\Adobe
2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Local\VirtualStore
2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Local\TileDataLayer
2015-10-05 21:41 - 2015-10-12 00:56 - 00000000 ____D C:\Users\missg
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ____D C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-05 21:41 - 2015-10-05 21:49 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-05 21:41 - 2015-10-05 21:41 - 00000020 ___SH C:\Users\missg\ntuser.ini
2015-10-05 21:33 - 2015-10-12 03:38 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-01 02:50 - 2015-09-17 07:50 - 02464216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-10-01 02:50 - 2015-09-17 07:49 - 06487248 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-10-01 02:50 - 2015-09-17 07:48 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 02:50 - 2015-09-17 07:48 - 02494712 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 02:50 - 2015-09-17 07:28 - 05120056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2015-10-01 02:50 - 2015-09-17 07:28 - 02154808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-10-01 02:50 - 2015-09-17 07:12 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-01 02:50 - 2015-09-17 07:07 - 21875712 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-10-01 02:50 - 2015-09-17 07:04 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-10-01 02:50 - 2015-09-17 07:00 - 24595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-10-01 02:50 - 2015-09-17 07:00 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 02:50 - 2015-09-17 07:00 - 02417664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 02:50 - 2015-09-17 06:54 - 03781120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 02:50 - 2015-09-17 06:53 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-10-01 02:50 - 2015-09-17 06:51 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-10-01 02:50 - 2015-09-17 06:51 - 02660864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 02:50 - 2015-09-17 06:49 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-10-01 02:50 - 2015-09-17 06:47 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-10-01 02:50 - 2015-09-17 06:45 - 19325440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-10-01 02:50 - 2015-09-17 06:42 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-10-01 02:50 - 2015-09-17 06:40 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-10-01 02:50 - 2015-09-17 06:40 - 01918464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-10-01 02:50 - 2015-09-17 06:37 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-10-01 02:50 - 2015-09-17 06:35 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-10-01 02:50 - 2015-09-17 06:31 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-10-01 02:49 - 2015-09-25 00:17 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-01 02:49 - 2015-09-25 00:08 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-10-01 02:49 - 2015-09-25 00:06 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-10-01 02:49 - 2015-09-24 23:42 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-01 02:49 - 2015-09-17 07:50 - 01563392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-10-01 02:49 - 2015-09-17 07:49 - 08020816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-10-01 02:49 - 2015-09-17 07:49 - 01563472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-10-01 02:49 - 2015-09-17 07:49 - 00894256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2015-10-01 02:49 - 2015-09-17 07:48 - 02432336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-10-01 02:49 - 2015-09-17 07:48 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 01983824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-10-01 02:49 - 2015-09-17 07:48 - 00809352 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 00555768 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 00537080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 02:49 - 2015-09-17 07:47 - 01397088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 02:49 - 2015-09-17 07:44 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-10-01 02:49 - 2015-09-17 07:43 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 02:49 - 2015-09-17 07:37 - 01295712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2015-10-01 02:49 - 2015-09-17 07:27 - 01766952 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-10-01 02:49 - 2015-09-17 07:26 - 02446648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2015-10-01 02:49 - 2015-09-17 07:26 - 00646672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-10-01 02:49 - 2015-09-17 07:25 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-10-01 02:49 - 2015-09-17 07:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-10-01 02:49 - 2015-09-17 07:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-10-01 02:49 - 2015-09-17 07:06 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 02:49 - 2015-09-17 07:05 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 02:49 - 2015-09-17 07:04 - 00910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 02:49 - 2015-09-17 06:57 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2015-10-01 02:49 - 2015-09-17 06:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 02:49 - 2015-09-17 06:55 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-10-01 02:49 - 2015-09-17 06:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 02:49 - 2015-09-17 06:52 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-10-01 02:49 - 2015-09-17 06:52 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 02:49 - 2015-09-17 06:51 - 01203712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 02:49 - 2015-09-17 06:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 02:49 - 2015-09-17 06:49 - 01010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-10-01 02:49 - 2015-09-17 06:48 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 02:49 - 2015-09-17 06:48 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2015-10-01 02:49 - 2015-09-17 06:47 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 02:49 - 2015-09-17 06:45 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-10-01 02:49 - 2015-09-17 06:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 02:49 - 2015-09-17 06:45 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 02:49 - 2015-09-17 06:44 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2015-10-01 02:49 - 2015-09-17 06:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 02:49 - 2015-09-17 06:40 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2015-10-01 02:49 - 2015-09-17 06:39 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-10-01 02:49 - 2015-09-17 06:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2015-10-01 02:49 - 2015-09-17 06:35 - 02207232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-10-01 02:49 - 2015-09-17 06:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2015-10-01 02:49 - 2015-09-17 06:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2015-10-01 02:49 - 2015-09-17 06:32 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-10-01 02:49 - 2015-09-17 06:29 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-10-01 02:49 - 2015-09-17 06:29 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-10-01 02:49 - 2015-09-17 06:26 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2015-10-01 02:49 - 2015-09-17 06:16 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2015-10-01 02:49 - 2015-09-13 03:05 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-10-01 02:48 - 2015-09-25 01:13 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-01 02:48 - 2015-09-25 00:24 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2015-10-01 02:48 - 2015-09-25 00:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-01 02:48 - 2015-09-25 00:23 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-10-01 02:48 - 2015-09-25 00:07 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-10-01 02:48 - 2015-09-25 00:01 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-10-01 02:48 - 2015-09-25 00:00 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-10-01 02:48 - 2015-09-25 00:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2015-10-01 02:48 - 2015-09-24 23:43 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2015-10-01 02:48 - 2015-09-24 23:25 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-10-01 02:48 - 2015-09-24 23:25 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2015-10-01 02:48 - 2015-09-17 07:50 - 00099664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-10-01 02:48 - 2015-09-17 07:49 - 00553808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 02:48 - 2015-09-17 07:48 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-10-01 02:48 - 2015-09-17 07:48 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-10-01 02:48 - 2015-09-17 07:48 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-10-01 02:48 - 2015-09-17 07:48 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 02:48 - 2015-09-17 07:48 - 00395088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-10-01 02:48 - 2015-09-17 07:48 - 00332624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2015-10-01 02:48 - 2015-09-17 07:48 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-10-01 02:48 - 2015-09-17 07:39 - 00081488 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-10-01 02:48 - 2015-09-17 07:28 - 01357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-10-01 02:48 - 2015-09-17 07:28 - 00441168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2015-10-01 02:48 - 2015-09-17 07:27 - 00454512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 01895568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 00434376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 00428128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-10-01 02:48 - 2015-09-17 07:09 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-10-01 02:48 - 2015-09-17 07:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 02:48 - 2015-09-17 07:06 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 02:48 - 2015-09-17 07:06 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 02:48 - 2015-09-17 07:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 02:48 - 2015-09-17 07:00 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 02:48 - 2015-09-17 06:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 02:48 - 2015-09-17 06:57 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 02:48 - 2015-09-17 06:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 02:48 - 2015-09-17 06:57 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 02:48 - 2015-09-17 06:56 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2015-10-01 02:48 - 2015-09-17 06:54 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 02:48 - 2015-09-17 06:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-10-01 02:48 - 2015-09-17 06:51 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-10-01 02:48 - 2015-09-17 06:51 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-10-01 02:48 - 2015-09-17 06:50 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 02:48 - 2015-09-17 06:50 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys
2015-10-01 02:48 - 2015-09-17 06:48 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 02:48 - 2015-09-17 06:48 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 02:48 - 2015-09-17 06:48 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 02:48 - 2015-09-17 06:48 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 02:48 - 2015-09-17 06:47 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2015-10-01 02:48 - 2015-09-17 06:47 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 02:48 - 2015-09-17 06:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 02:48 - 2015-09-17 06:45 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-10-01 02:48 - 2015-09-17 06:45 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 02:48 - 2015-09-17 06:44 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 02:48 - 2015-09-17 06:43 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 02:48 - 2015-09-17 06:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-10-01 02:48 - 2015-09-17 06:41 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2015-10-01 02:48 - 2015-09-17 06:37 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-10-01 02:48 - 2015-09-17 06:34 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2015-10-01 02:48 - 2015-09-17 06:32 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2015-10-01 02:48 - 2015-09-17 06:32 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2015-10-01 02:48 - 2015-09-17 06:32 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-01 02:48 - 2015-09-17 06:31 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2015-10-01 02:48 - 2015-09-17 06:30 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2015-10-01 02:48 - 2015-09-17 06:29 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-10-01 02:48 - 2015-09-17 06:29 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-10-01 02:48 - 2015-09-13 02:41 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-10-01 02:47 - 2015-09-25 00:05 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-01 02:47 - 2015-09-25 00:00 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2015-10-01 02:47 - 2015-09-24 23:53 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-01 02:47 - 2015-09-24 23:43 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-01 02:47 - 2015-09-24 23:25 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2015-10-01 02:47 - 2015-09-24 23:25 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2015-10-01 02:47 - 2015-09-24 23:25 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2015-10-01 02:47 - 2015-09-24 23:19 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2015-10-01 02:47 - 2015-09-19 06:14 - 00102304 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2015-10-01 02:47 - 2015-09-17 07:50 - 00088384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 02:47 - 2015-09-17 07:37 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-10-01 02:47 - 2015-09-17 07:28 - 00074880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-10-01 02:47 - 2015-09-17 07:08 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 02:47 - 2015-09-17 07:08 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 02:47 - 2015-09-17 07:03 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 02:47 - 2015-09-17 07:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 02:47 - 2015-09-17 07:00 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 02:47 - 2015-09-17 06:52 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-10-01 02:47 - 2015-09-17 06:50 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2015-10-01 02:47 - 2015-09-17 06:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 02:47 - 2015-09-17 06:49 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
2015-10-01 02:45 - 2015-09-25 01:35 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-01 02:45 - 2015-09-25 01:34 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-01 02:45 - 2015-09-25 00:34 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2015-10-01 02:45 - 2015-09-25 00:34 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2015-10-01 02:45 - 2015-09-25 00:01 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2015-10-01 02:45 - 2015-09-25 00:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-01 02:45 - 2015-09-24 23:24 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2015-10-01 02:45 - 2015-09-17 07:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-10-01 02:45 - 2015-09-17 07:48 - 00406864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-10-01 02:45 - 2015-09-17 07:48 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-10-01 02:45 - 2015-09-17 07:28 - 00407608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-10-01 02:45 - 2015-09-17 07:11 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 02:45 - 2015-09-17 07:09 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-10-01 02:45 - 2015-09-17 07:04 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 02:45 - 2015-09-17 07:03 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 02:45 - 2015-09-17 06:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 02:45 - 2015-09-17 06:55 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-10-01 02:45 - 2015-09-17 06:52 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll
2015-10-01 02:45 - 2015-09-17 06:52 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 02:45 - 2015-09-17 06:51 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2015-10-01 02:45 - 2015-09-17 06:50 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll
2015-10-01 02:45 - 2015-09-17 06:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 02:45 - 2015-09-17 06:45 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2015-10-01 02:45 - 2015-09-17 06:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-10-01 02:45 - 2015-09-17 06:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll
2015-10-01 02:45 - 2015-09-17 06:43 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-10-01 02:45 - 2015-09-17 06:33 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2015-10-01 02:44 - 2015-09-17 07:10 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 02:44 - 2015-09-17 07:03 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 02:44 - 2015-09-17 07:03 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 02:44 - 2015-09-17 07:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 02:44 - 2015-09-17 07:02 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 02:44 - 2015-09-17 06:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2015-10-01 02:44 - 2015-09-17 06:55 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2015-10-01 02:44 - 2015-09-17 06:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 02:44 - 2015-09-17 06:52 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-10-01 02:44 - 2015-09-17 06:50 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-01 02:44 - 2015-09-17 06:50 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll
2015-10-01 02:44 - 2015-09-17 06:49 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2015-10-01 02:44 - 2015-09-17 06:46 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll
2015-10-01 02:44 - 2015-09-17 06:39 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 02:44 - 2015-09-17 06:36 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll
2015-10-01 02:44 - 2015-09-17 06:28 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2015-09-18 11:14 - 2015-09-18 11:14 - 00047096 _____ C:\WINDOWS\SysWOW64\DiscHandler.exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-06 05:55 - 2015-08-12 18:56 - 00000000 ___HD C:\$SysReset
Some files in TEMP:
====================
C:\Users\missg\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\missg\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\missg\AppData\Local\Temp\fupxsehn.dll
C:\Users\missg\AppData\Local\Temp\scpF847.tmp.exe
C:\Users\missg\AppData\Local\Temp\{AF2B58C9-D569-4BAE-94F0-49E88695FD51}.exe
C:\Users\missg\AppData\Local\Temp\{BEA8507A-F470-4150-B29A-F70EFCB5680D}.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-10-06 04:56
==================== End of FRST.txt ============================
Ran by missg (administrator) on DESKTOP-7E5LF1P (12-10-2015 04:14:52)
Running from C:\Users\missg\Downloads
Loaded Profiles: missg (Available Profiles: missg)
Platform: Windows 10 Home (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
() C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
() C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_bg.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Reason Software Company Inc.) C:\Program Files\Reason\Security\rsUI.exe
(Reason Software Company Inc.) C:\Program Files\Reason\Security\rsEngineSvc.exe
() C:\Program Files\WindowsApps\Microsoft.Getstarted_2.3.4.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6306.42251.0_x64__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6306.42251.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.10.5.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-08-21] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8497368 2015-10-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-10-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [Codec Settings UAC Manager] => C:\WINDOWS\SysWOW64\Codecs\CodecUACManager.exe [60416 2015-09-18] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-09] (AVAST Software)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5889824 2015-07-28] (IObit)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Codec Pack Update Checker] => "C:\WINDOWS\system32\Codecs\UpdateChecker.exe"
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [57981568 2015-09-28] (Skype Technologies S.A.)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [BingSvc] => C:\Users\missg\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [GoogleChromeAutoLaunch_6DB381FA150BEC1DEE19427A951342A0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944 2015-09-24] (Google Inc.)
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-09] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2015-10-06]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\syswow64\Codecs\TrayMenu.exe (No File)
BootExecute: autocheck autochk * 搀渀挀氀攀愀渀㘀㐀⸀攀砀攀
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fb5b723b-fe72-426b-84c3-5a9be0c2b7a2}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.co.uk
HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://pandasecurity.mystart.com/results.php?pr=vmn&gen=ms&id=pandasecuritytb&v=4_3&idate=2015-10-08&ent=ch_671&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-08-31] (IObit)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-09] (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-09] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-05] (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-09]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR StartupUrls: Default -> "hxxps://www.google.co.uk/","hxxps://uk.search.yahoo.com/?type=994519&fr=yo-yhp-ch"
CHR Profile: C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-05]
CHR Extension: (YouTube) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-05]
CHR Extension: (Google Search) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-05]
CHR Extension: (Google Docs Offline) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-05]
CHR Extension: (Google Play) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2015-10-08]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-10-05]
CHR Extension: (Skype Click to Call) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-10-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-05]
CHR Extension: (Azov Sea Theme #2) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\oalokjhcnhmboncjbmhicgmiinlfacio [2015-10-07]
CHR Extension: (Gmail) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-05]
CHR HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-09]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-09] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [882464 2015-07-17] (IObit)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-08-31] (IObit)
R2 rscp; C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe [163576 2015-10-11] ()
R2 rsEngineSvc; C:\Program Files\Reason\Security\rsEngineSvc.exe [80104 2015-10-07] (Reason Software Company Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-10-11] (Realtek Semiconductor)
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [1055008 2015-09-21] (IObit)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-08-21] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-09] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-10-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-09] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-09] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-09] (AVAST Software)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-10-11] (REALiX(tm))
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2015-03-25] (IObit.com)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [888064 2015-10-11] (Realtek )
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [42184 2015-08-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [42696 2015-08-21] (Synaptics Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16056 2015-10-10] (SlimWare Utilities, Inc.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2015-03-25] (IObit.com)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-12 04:14 - 2015-10-12 04:15 - 00017009 _____ C:\Users\missg\Downloads\FRST.txt
2015-10-12 04:12 - 2015-10-12 04:14 - 00000000 ____D C:\FRST
2015-10-12 04:11 - 2015-10-12 04:12 - 02195968 _____ (Farbar) C:\Users\missg\Downloads\FRST64.exe
2015-10-12 03:48 - 2015-10-12 03:48 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7E5LF1P_missg_HistoryPrediction.bin
2015-10-12 03:11 - 2015-10-12 03:11 - 00000000 ____D C:\Users\missg\OneDrive\Documents\MPC-HC Capture
2015-10-12 03:10 - 2015-10-12 03:10 - 00000000 ____D C:\Users\missg\AppData\Roaming\MPC-HC
2015-10-12 02:49 - 2015-10-12 02:49 - 00000000 ____D C:\Users\missg\AppData\Roaming\DVDVideoSoft
2015-10-11 22:39 - 2015-10-11 22:39 - 00888064 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2015-10-11 22:39 - 2015-10-11 22:39 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2015-10-11 22:35 - 2015-10-11 22:36 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-10-11 22:33 - 2015-10-11 22:33 - 72113152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2015-10-11 22:33 - 2015-10-11 22:33 - 35222128 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2015-10-11 22:33 - 2015-10-11 22:33 - 03234520 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 02930904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 02918104 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 02702552 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2015-10-11 22:33 - 2015-10-11 22:33 - 01749208 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 01413776 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 01310936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 01104040 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00943784 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00734376 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00631000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00454288 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00369296 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00329360 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00250536 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00184688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2015-10-11 22:33 - 2015-10-11 22:33 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 01576976 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 00560328 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-10-11 22:32 - 2015-10-11 22:32 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2015-10-11 22:27 - 2015-10-11 22:42 - 00002227 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2015-10-11 22:27 - 2015-10-11 22:27 - 00026528 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS
2015-10-11 22:27 - 2015-10-11 22:27 - 00003428 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler
2015-10-11 22:27 - 2015-10-11 22:27 - 00003316 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Startup
2015-10-11 22:27 - 2015-10-11 22:27 - 00003312 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Update
2015-10-11 22:27 - 2015-10-11 22:27 - 00003076 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (missg)
2015-10-11 22:27 - 2015-10-11 22:27 - 00001356 _____ C:\Users\Public\Desktop\Start Menu 8.lnk
2015-10-11 22:27 - 2015-10-11 22:27 - 00001247 _____ C:\Users\Public\Desktop\Smart Defrag 4.lnk
2015-10-11 22:27 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Start Menu 8
2015-10-11 22:27 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
2015-10-11 22:27 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\SysWOW64\IObitSmartDefragExtension.dll
2015-10-11 22:27 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll
2015-10-11 22:27 - 2014-06-04 15:17 - 00034080 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe
2015-10-11 22:27 - 2014-06-04 15:17 - 00021184 _____ (IObit) C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys
2015-10-11 22:26 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2015-10-11 22:26 - 2015-10-11 22:26 - 00001250 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2015-10-11 22:26 - 2015-10-11 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2015-10-11 20:27 - 2015-10-11 20:27 - 03794200 _____ (Reason Software Company Inc.) C:\Users\missg\Downloads\reason-core-security-setup (1).exe
2015-10-11 20:26 - 2015-10-11 20:26 - 00003638 _____ C:\WINDOWS\System32\Tasks\ReasonSecurityScheduledScan
2015-10-11 20:26 - 2015-10-11 20:26 - 00003502 _____ C:\WINDOWS\System32\Tasks\ReasonSecurityStart
2015-10-11 20:26 - 2015-10-11 20:26 - 00000000 ____D C:\ProgramData\Reason
2015-10-11 19:02 - 2015-10-11 20:27 - 00000956 _____ C:\Users\Public\Desktop\Reason Core Security.lnk
2015-10-11 19:02 - 2015-10-11 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reason Core Security
2015-10-11 19:02 - 2015-10-11 19:02 - 00000000 ____D C:\Program Files\Reason
2015-10-11 19:01 - 2015-10-11 19:01 - 03794200 _____ (Reason Software Company Inc.) C:\Users\missg\Downloads\reason-core-security-setup.exe
2015-10-11 18:41 - 2015-10-11 18:43 - 00018944 ___SH C:\Users\missg\Downloads\Thumbs.db
2015-10-10 03:18 - 2015-10-11 21:43 - 00000000 ____D C:\Program Files\SlimService
2015-10-10 03:18 - 2015-10-10 03:18 - 00002481 _____ C:\Users\Public\Desktop\SlimCleaner Plus.lnk
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\Users\missg\AppData\Local\Downloaded Installers
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\ProgramData\SlimWare Utilities Inc
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner Plus
2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\Program Files\SlimCleaner Plus
2015-10-10 03:17 - 2015-10-12 00:57 - 00000000 ____D C:\Users\missg\AppData\Local\SlimWare Utilities Inc
2015-10-10 03:17 - 2015-10-10 03:17 - 00016056 _____ (SlimWare Utilities, Inc.) C:\WINDOWS\system32\Drivers\SWDUMon.sys
2015-10-09 15:28 - 2015-10-09 15:28 - 02513235 _____ C:\Users\missg\Downloads\takeout-20151008T004828Z.zip
2015-10-09 06:44 - 2015-10-12 03:28 - 00004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B304D8BB-B3F8-449A-9B89-6D69F86BE87E}
2015-10-09 02:16 - 2015-10-09 02:16 - 00002027 _____ C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-10-09 02:16 - 2015-10-09 02:16 - 00001967 _____ C:\Users\Public\Desktop\Avast Pro Antivirus.lnk
2015-10-09 02:16 - 2015-10-09 02:16 - 00000000 ____D C:\Users\missg\AppData\Roaming\AVAST Software
2015-10-09 02:16 - 2015-10-09 02:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-09 02:15 - 2015-10-09 02:15 - 01049880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-10-09 02:15 - 2015-10-09 02:15 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00153744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-10-09 02:15 - 2015-10-09 02:15 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00028144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2015-10-09 02:15 - 2015-10-09 02:15 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-10-09 02:12 - 2015-10-09 02:12 - 00000000 ____D C:\Program Files\AVAST Software
2015-10-08 23:58 - 2015-10-11 22:33 - 04514008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2015-10-08 23:58 - 2015-10-11 22:33 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2015-10-08 21:20 - 2015-10-08 21:20 - 00003322 _____ C:\WINDOWS\System32\Tasks\ASC8_PerformanceMonitor
2015-10-08 21:18 - 2015-10-11 22:42 - 00000274 _____ C:\WINDOWS\Tasks\ASC8_SkipUac_missg.job
2015-10-08 21:18 - 2015-10-08 21:18 - 00002446 _____ C:\WINDOWS\System32\Tasks\ASC8_SkipUac_missg
2015-10-08 21:18 - 2015-10-08 21:18 - 00002258 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\Users\missg\AppData\Roaming\Apple Computer
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-10-08 21:16 - 2015-10-12 00:57 - 00000000 ____D C:\ProgramData\ProductData
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Users\missg\AppData\Roaming\IObit
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Users\missg\AppData\LocalLow\IObit
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\IObit
2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Program Files (x86)\IObit
2015-10-08 21:16 - 2015-10-11 16:01 - 00002496 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_missg
2015-10-08 21:16 - 2015-10-11 16:01 - 00000310 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_missg.job
2015-10-08 21:16 - 2015-10-08 21:16 - 00001443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2015-10-08 21:16 - 2015-10-08 21:16 - 00001431 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-10-08 21:16 - 2015-10-08 21:16 - 00000000 ____D C:\Users\missg\AppData\Roaming\ProductData
2015-10-08 21:16 - 2015-10-08 21:16 - 00000000 ____D C:\Users\missg\AppData\IObit
2015-10-08 21:15 - 2015-10-08 21:15 - 11117856 _____ (IObit) C:\Users\missg\Downloads\iobituninstaller.exe
2015-10-08 21:11 - 2015-10-08 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mercerion
2015-10-08 21:11 - 2015-10-08 21:11 - 00000000 ____D C:\Program Files (x86)\WifiDefender
2015-10-08 21:01 - 2015-10-08 22:22 - 00000000 ____D C:\Program Files (x86)\NirSoft
2015-10-08 19:34 - 2015-10-08 19:35 - 07837168 _____ (Safebytes) C:\Users\missg\Downloads\TotalSystemCare-Setup.exe
2015-10-08 19:05 - 2015-10-08 19:05 - 00000000 ____D C:\Users\missg\AppData\Roaming\Search The Web
2015-10-08 18:51 - 2015-07-05 11:08 - 00300704 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-10-08 01:58 - 2015-10-08 01:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-10-07 21:35 - 2015-10-07 21:35 - 00000000 ____D C:\Users\missg\OneDrive\Documents\word docx CV
2015-10-07 21:11 - 2015-10-07 21:11 - 00000842 _____ C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppRemover.lnk
2015-10-07 18:24 - 2015-10-07 18:24 - 11972672 _____ (OPSWAT, Inc.) C:\Users\missg\Downloads\AppRemover.exe
2015-10-07 10:43 - 2015-10-07 10:43 - 00000085 _____ C:\WINDOWS\wininit.ini
2015-10-06 23:05 - 2015-10-06 23:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-10-06 18:41 - 2015-10-06 18:41 - 00000000 ____D C:\Users\missg\AppData\Local\Skype
2015-10-06 18:40 - 2015-10-11 14:51 - 00000000 ____D C:\Users\missg\AppData\Roaming\Skype
2015-10-06 18:40 - 2015-10-06 18:47 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-06 18:40 - 2015-10-06 18:40 - 00002640 _____ C:\Users\Public\Desktop\Skype.lnk
2015-10-06 18:40 - 2015-10-06 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-10-06 18:39 - 2015-10-06 18:40 - 00000000 ____D C:\ProgramData\Skype
2015-10-06 18:36 - 2015-10-06 18:36 - 01503872 _____ (Skype Technologies S.A.) C:\Users\missg\Downloads\SkypeSetup.exe
2015-10-06 17:38 - 2015-10-08 19:05 - 00000000 ____D C:\ProgramData\panda_url_filtering
2015-10-06 17:37 - 2015-10-08 22:07 - 00000000 ____D C:\Users\missg\AppData\Roaming\Panda Security
2015-10-06 17:35 - 2015-10-08 22:22 - 00000000 ____D C:\Program Files (x86)\Panda Security
2015-10-06 17:31 - 2015-10-08 22:08 - 00000000 ____D C:\ProgramData\Panda Security
2015-10-06 17:31 - 2015-10-06 17:31 - 02113152 _____ C:\Users\missg\Downloads\PANDAFREEAV.exe
2015-10-06 17:29 - 2015-10-12 03:37 - 00000000 ____D C:\WINDOWS\SysWOW64\Codecs
2015-10-06 17:29 - 2015-10-06 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player - Codec Pack
2015-10-06 17:04 - 2015-10-06 17:05 - 41435632 _____ (Media Player - Codec Pack) C:\Users\missg\Downloads\media.player.codec.pack.v4.3.9.setup.exe
2015-10-06 10:37 - 2015-10-06 10:37 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-10-06 05:55 - 2015-10-06 05:55 - 00000000 _____ C:\Recovery.txt
2015-10-06 05:15 - 2015-10-12 01:03 - 00005384 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-06 05:15 - 2015-09-15 17:12 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-10-06 05:15 - 2015-09-15 17:12 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-06 05:12 - 2015-07-10 11:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-10-06 05:11 - 2015-10-06 05:11 - 00000000 ____D C:\ProgramData\USOShared
2015-10-06 05:10 - 2015-10-12 00:55 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-06 05:09 - 2015-10-06 05:09 - 00000000 __SHD C:\Recovery
2015-10-06 05:03 - 2015-10-11 22:36 - 00012844 _____ C:\WINDOWS\setupact.log
2015-10-06 05:03 - 2015-10-11 22:35 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____D C:\Program Files\Realtek
2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-10-06 04:58 - 2015-10-06 04:58 - 00001344 _____ C:\WINDOWS\lsasetup.log
2015-10-06 04:57 - 2015-10-09 09:13 - 00189240 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-10-06 04:43 - 2015-10-09 02:11 - 00000000 ____D C:\ProgramData\AVAST Software
2015-10-06 04:33 - 2015-10-06 04:33 - 00000000 ____D C:\Users\missg\AppData\Local\NetworkTiles
2015-10-06 04:13 - 2015-10-06 04:15 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-06 04:13 - 2015-08-26 18:37 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-10-06 04:07 - 2015-10-06 04:07 - 00000000 ____D C:\Program Files\Common Files\AV
2015-10-06 04:07 - 2015-10-06 04:05 - 00450709 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20151006-040715.backup
2015-10-06 04:05 - 2015-10-06 03:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20151006-040528.backup
2015-10-06 03:21 - 2015-10-07 10:43 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-10-06 03:21 - 2015-10-06 03:21 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2015-10-06 03:19 - 2015-10-05 21:35 - 00000000 ___DC C:\WINDOWS\Panther
2015-10-06 03:18 - 2015-10-06 03:18 - 00028672 ___SH C:\WINDOWS\system32\config\BCD-Template.LOG
2015-10-06 03:18 - 2015-10-06 03:18 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-10-06 03:17 - 2015-10-06 03:17 - 00000000 ____D C:\Program Files\Synaptics
2015-10-06 03:16 - 2015-10-06 03:16 - 00000000 ____D C:\WINDOWS\Setup
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\WINDOWS\OCR
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files\MSBuild
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\SysWOW64\0409
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\slmgr
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\0409
2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-10-06 03:05 - 2015-10-06 05:06 - 00001189 _____ C:\WINDOWS\DtcInstall.log
2015-10-06 03:04 - 2015-10-06 05:55 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-10-06 03:04 - 2015-10-06 03:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2015-10-06 03:04 - 2015-10-06 03:00 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2015-10-06 03:04 - 2015-10-06 03:00 - 00215943 _____ C:\WINDOWS\system32\dssec.dat
2015-10-06 03:04 - 2015-10-06 03:00 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2015-10-06 03:04 - 2015-10-06 03:00 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services
2015-10-06 03:04 - 2015-10-06 03:00 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2015-10-06 03:04 - 2015-10-06 03:00 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2015-10-06 03:04 - 2015-10-06 03:00 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat
2015-10-06 03:04 - 2015-10-06 03:00 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2015-10-06 03:04 - 2015-10-06 03:00 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2015-10-06 03:04 - 2015-10-06 03:00 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2015-10-06 03:04 - 2015-10-06 03:00 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT
2015-10-06 03:04 - 2015-10-06 03:00 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2015-10-06 03:04 - 2015-10-06 03:00 - 00000219 _____ C:\WINDOWS\system.ini
2015-10-06 03:04 - 2015-10-06 03:00 - 00000092 _____ C:\WINDOWS\win.ini
2015-10-06 03:03 - 2015-10-12 03:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-10-06 03:03 - 2015-10-11 18:38 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-10-06 03:03 - 2015-10-10 06:19 - 00000000 ____D C:\WINDOWS\rescache
2015-10-06 03:03 - 2015-10-07 18:57 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-10-06 03:03 - 2015-10-06 05:12 - 00000000 ____D C:\WINDOWS\system32\spool
2015-10-06 03:03 - 2015-10-06 05:12 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-10-06 03:03 - 2015-10-06 05:11 - 00000000 ____D C:\ProgramData\USOPrivate
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___SD C:\WINDOWS\system32\F12
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\Provisioning
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\L2Schemas
2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\Program Files\Windows Journal
2015-10-06 03:03 - 2015-10-06 05:06 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-10-06 03:03 - 2015-10-06 03:17 - 00000000 ____D C:\WINDOWS\appcompat
2015-10-06 03:03 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2015-10-06 03:03 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\system32\dsc
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\setup
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\migwiz
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\Com
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\IME
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\Help
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Windows Defender
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Common Files\System
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\WINDOWS\Media
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RHD C:\Users\Public\Libraries
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___SD C:\WINDOWS\system32\Nui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\WINDOWS\DesktopTileResources
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-CS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sppui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Recovery
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MSDRM
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\fr-CA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\es-MX
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\th-TH
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sppui
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MSDRM
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\icsxml
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ias
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\he-IL
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\fr-CA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\es-MX
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\downlevel
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\Bthprops
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system\Speech
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\ShellNew
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\Registration
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\Cursors
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\addins
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Common Files\Services
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\WINDOWS\system32\Configuration
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\Program Files\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\Program Files (x86)\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Web
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Vss
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\tracing
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\TAPI
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\sru
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\spp
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech_OneCore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\restore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\RasToast
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\ras
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\networklist
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Licenses
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SystemResources
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\winevt
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\WindowsPowerShell
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\spp
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Speech_OneCore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Speech
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\RasToast
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\ras
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\ProximityToast
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\PointOfService
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\networklist
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Macromed
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Licenses
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Ipmi
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\IME
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\config\Journal
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\System
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Speech_OneCore
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Speech
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SKB
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\security
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\schemas
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SchCache
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Resources
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\PLA
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Performance
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\InputMethod
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Globalization
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Branding
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\ProgramData\Comms
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\Program Files\Windows NT
2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\Program Files (x86)\Windows NT
2015-10-06 03:03 - 2015-10-05 21:50 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-10-06 03:03 - 2015-10-05 21:50 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-10-06 03:03 - 2015-10-05 21:48 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-10-06 03:03 - 2015-10-05 21:34 - 00000000 ____D C:\WINDOWS\system32\restore
2015-10-06 02:52 - 2015-10-06 04:16 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-06 02:45 - 2015-10-11 22:43 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-10-06 02:45 - 2015-10-06 05:10 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-10-06 02:45 - 2015-10-06 05:09 - 00000000 __RHD C:\Users\Default
2015-10-06 02:45 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\servicing
2015-10-06 02:45 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\SMI
2015-10-06 02:45 - 2015-07-10 10:11 - 00000164 _____ C:\WINDOWS\system32\config\FP
2015-10-06 02:08 - 2015-10-11 22:44 - 00404828 _____ C:\WINDOWS\PFRO.log
2015-10-05 22:23 - 2015-10-05 22:23 - 00002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-05 22:23 - 2015-10-05 22:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-05 22:22 - 2015-10-12 03:27 - 00000928 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-05 22:22 - 2015-10-12 00:58 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-05 22:22 - 2015-10-05 22:23 - 00000000 ____D C:\Users\missg\AppData\Local\Google
2015-10-05 22:22 - 2015-10-05 22:23 - 00000000 ____D C:\Program Files (x86)\Google
2015-10-05 22:22 - 2015-10-05 22:22 - 00003986 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-10-05 22:22 - 2015-10-05 22:22 - 00003754 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-10-05 22:14 - 2015-10-05 22:22 - 00929872 _____ (Google Inc.) C:\Users\missg\Downloads\ChromeSetup.exe
2015-10-05 22:08 - 2015-10-10 00:07 - 00000000 ____D C:\Users\missg\AppData\Local\PackageStaging
2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\Users\missg\AppData\Roaming\Macromedia
2015-10-05 21:54 - 2015-10-05 21:54 - 00000000 ____D C:\Users\missg\AppData\Local\MicrosoftEdge
2015-10-05 21:53 - 2015-10-11 22:42 - 00000000 ____D C:\Users\missg\OneDrive
2015-10-05 21:53 - 2015-10-05 21:54 - 00002338 _____ C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-10-05 21:53 - 2015-10-05 21:53 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-10-05 21:52 - 2015-10-06 18:33 - 00000000 ____D C:\Users\missg\AppData\Local\Comms
2015-10-05 21:51 - 2015-10-08 08:58 - 00000000 ____D C:\Users\missg\AppData\Local\Publishers
2015-10-05 21:49 - 2015-10-11 18:33 - 00000000 ____D C:\Users\missg\AppData\Local\Packages
2015-10-05 21:49 - 2015-10-05 21:49 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7E5LF1P_defaultuser0_HistoryPrediction.bin
2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Roaming\Adobe
2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Local\VirtualStore
2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Local\TileDataLayer
2015-10-05 21:41 - 2015-10-12 00:56 - 00000000 ____D C:\Users\missg
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ____D C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-10-05 21:41 - 2015-10-05 21:49 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-05 21:41 - 2015-10-05 21:41 - 00000020 ___SH C:\Users\missg\ntuser.ini
2015-10-05 21:33 - 2015-10-12 03:38 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-01 02:50 - 2015-09-17 07:50 - 02464216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-10-01 02:50 - 2015-09-17 07:49 - 06487248 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-10-01 02:50 - 2015-09-17 07:48 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 02:50 - 2015-09-17 07:48 - 02494712 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 02:50 - 2015-09-17 07:28 - 05120056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2015-10-01 02:50 - 2015-09-17 07:28 - 02154808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-10-01 02:50 - 2015-09-17 07:12 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-01 02:50 - 2015-09-17 07:07 - 21875712 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-10-01 02:50 - 2015-09-17 07:04 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-10-01 02:50 - 2015-09-17 07:00 - 24595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-10-01 02:50 - 2015-09-17 07:00 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 02:50 - 2015-09-17 07:00 - 02417664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 02:50 - 2015-09-17 06:54 - 03781120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 02:50 - 2015-09-17 06:53 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-10-01 02:50 - 2015-09-17 06:51 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-10-01 02:50 - 2015-09-17 06:51 - 02660864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 02:50 - 2015-09-17 06:49 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-10-01 02:50 - 2015-09-17 06:47 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-10-01 02:50 - 2015-09-17 06:45 - 19325440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-10-01 02:50 - 2015-09-17 06:42 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-10-01 02:50 - 2015-09-17 06:40 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-10-01 02:50 - 2015-09-17 06:40 - 01918464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-10-01 02:50 - 2015-09-17 06:37 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-10-01 02:50 - 2015-09-17 06:35 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-10-01 02:50 - 2015-09-17 06:31 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-10-01 02:49 - 2015-09-25 00:17 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-01 02:49 - 2015-09-25 00:08 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-10-01 02:49 - 2015-09-25 00:06 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-10-01 02:49 - 2015-09-24 23:42 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-01 02:49 - 2015-09-17 07:50 - 01563392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-10-01 02:49 - 2015-09-17 07:49 - 08020816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-10-01 02:49 - 2015-09-17 07:49 - 01563472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-10-01 02:49 - 2015-09-17 07:49 - 00894256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2015-10-01 02:49 - 2015-09-17 07:48 - 02432336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-10-01 02:49 - 2015-09-17 07:48 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 01983824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-10-01 02:49 - 2015-09-17 07:48 - 00809352 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 00555768 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 02:49 - 2015-09-17 07:48 - 00537080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 02:49 - 2015-09-17 07:47 - 01397088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 02:49 - 2015-09-17 07:44 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-10-01 02:49 - 2015-09-17 07:43 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 02:49 - 2015-09-17 07:37 - 01295712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2015-10-01 02:49 - 2015-09-17 07:27 - 01766952 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-10-01 02:49 - 2015-09-17 07:26 - 02446648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2015-10-01 02:49 - 2015-09-17 07:26 - 00646672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-10-01 02:49 - 2015-09-17 07:25 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-10-01 02:49 - 2015-09-17 07:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-10-01 02:49 - 2015-09-17 07:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-10-01 02:49 - 2015-09-17 07:06 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 02:49 - 2015-09-17 07:05 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 02:49 - 2015-09-17 07:04 - 00910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 02:49 - 2015-09-17 06:57 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2015-10-01 02:49 - 2015-09-17 06:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 02:49 - 2015-09-17 06:55 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-10-01 02:49 - 2015-09-17 06:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 02:49 - 2015-09-17 06:52 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-10-01 02:49 - 2015-09-17 06:52 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 02:49 - 2015-09-17 06:51 - 01203712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 02:49 - 2015-09-17 06:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 02:49 - 2015-09-17 06:49 - 01010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-10-01 02:49 - 2015-09-17 06:48 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 02:49 - 2015-09-17 06:48 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2015-10-01 02:49 - 2015-09-17 06:47 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 02:49 - 2015-09-17 06:45 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-10-01 02:49 - 2015-09-17 06:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 02:49 - 2015-09-17 06:45 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 02:49 - 2015-09-17 06:44 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2015-10-01 02:49 - 2015-09-17 06:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 02:49 - 2015-09-17 06:40 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2015-10-01 02:49 - 2015-09-17 06:39 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-10-01 02:49 - 2015-09-17 06:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2015-10-01 02:49 - 2015-09-17 06:35 - 02207232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-10-01 02:49 - 2015-09-17 06:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2015-10-01 02:49 - 2015-09-17 06:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2015-10-01 02:49 - 2015-09-17 06:32 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-10-01 02:49 - 2015-09-17 06:29 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-10-01 02:49 - 2015-09-17 06:29 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-10-01 02:49 - 2015-09-17 06:26 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2015-10-01 02:49 - 2015-09-17 06:16 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2015-10-01 02:49 - 2015-09-13 03:05 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-10-01 02:48 - 2015-09-25 01:13 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-01 02:48 - 2015-09-25 00:24 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2015-10-01 02:48 - 2015-09-25 00:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-01 02:48 - 2015-09-25 00:23 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-10-01 02:48 - 2015-09-25 00:07 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-10-01 02:48 - 2015-09-25 00:01 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-10-01 02:48 - 2015-09-25 00:00 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-10-01 02:48 - 2015-09-25 00:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2015-10-01 02:48 - 2015-09-24 23:43 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2015-10-01 02:48 - 2015-09-24 23:25 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-10-01 02:48 - 2015-09-24 23:25 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2015-10-01 02:48 - 2015-09-17 07:50 - 00099664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-10-01 02:48 - 2015-09-17 07:49 - 00553808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 02:48 - 2015-09-17 07:48 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-10-01 02:48 - 2015-09-17 07:48 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-10-01 02:48 - 2015-09-17 07:48 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-10-01 02:48 - 2015-09-17 07:48 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 02:48 - 2015-09-17 07:48 - 00395088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-10-01 02:48 - 2015-09-17 07:48 - 00332624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2015-10-01 02:48 - 2015-09-17 07:48 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-10-01 02:48 - 2015-09-17 07:39 - 00081488 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-10-01 02:48 - 2015-09-17 07:28 - 01357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-10-01 02:48 - 2015-09-17 07:28 - 00441168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2015-10-01 02:48 - 2015-09-17 07:27 - 00454512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 01895568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 00434376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-10-01 02:48 - 2015-09-17 07:26 - 00428128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-10-01 02:48 - 2015-09-17 07:09 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-10-01 02:48 - 2015-09-17 07:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 02:48 - 2015-09-17 07:06 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 02:48 - 2015-09-17 07:06 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 02:48 - 2015-09-17 07:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 02:48 - 2015-09-17 07:00 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 02:48 - 2015-09-17 06:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 02:48 - 2015-09-17 06:57 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 02:48 - 2015-09-17 06:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 02:48 - 2015-09-17 06:57 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 02:48 - 2015-09-17 06:56 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 02:48 - 2015-09-17 06:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2015-10-01 02:48 - 2015-09-17 06:54 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 02:48 - 2015-09-17 06:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 02:48 - 2015-09-17 06:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-10-01 02:48 - 2015-09-17 06:51 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-10-01 02:48 - 2015-09-17 06:51 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-10-01 02:48 - 2015-09-17 06:50 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 02:48 - 2015-09-17 06:50 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys
2015-10-01 02:48 - 2015-09-17 06:48 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 02:48 - 2015-09-17 06:48 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 02:48 - 2015-09-17 06:48 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 02:48 - 2015-09-17 06:48 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 02:48 - 2015-09-17 06:47 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2015-10-01 02:48 - 2015-09-17 06:47 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 02:48 - 2015-09-17 06:46 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 02:48 - 2015-09-17 06:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 02:48 - 2015-09-17 06:45 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-10-01 02:48 - 2015-09-17 06:45 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 02:48 - 2015-09-17 06:44 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 02:48 - 2015-09-17 06:43 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 02:48 - 2015-09-17 06:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-10-01 02:48 - 2015-09-17 06:41 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2015-10-01 02:48 - 2015-09-17 06:37 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-10-01 02:48 - 2015-09-17 06:34 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2015-10-01 02:48 - 2015-09-17 06:32 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2015-10-01 02:48 - 2015-09-17 06:32 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2015-10-01 02:48 - 2015-09-17 06:32 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-01 02:48 - 2015-09-17 06:31 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2015-10-01 02:48 - 2015-09-17 06:30 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2015-10-01 02:48 - 2015-09-17 06:29 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-10-01 02:48 - 2015-09-17 06:29 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-10-01 02:48 - 2015-09-13 02:41 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-10-01 02:47 - 2015-09-25 00:05 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-01 02:47 - 2015-09-25 00:00 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2015-10-01 02:47 - 2015-09-24 23:53 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-01 02:47 - 2015-09-24 23:43 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-01 02:47 - 2015-09-24 23:25 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2015-10-01 02:47 - 2015-09-24 23:25 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2015-10-01 02:47 - 2015-09-24 23:25 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2015-10-01 02:47 - 2015-09-24 23:19 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2015-10-01 02:47 - 2015-09-19 06:14 - 00102304 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2015-10-01 02:47 - 2015-09-17 07:50 - 00088384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 02:47 - 2015-09-17 07:37 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-10-01 02:47 - 2015-09-17 07:28 - 00074880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-10-01 02:47 - 2015-09-17 07:08 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 02:47 - 2015-09-17 07:08 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 02:47 - 2015-09-17 07:03 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 02:47 - 2015-09-17 07:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 02:47 - 2015-09-17 07:00 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 02:47 - 2015-09-17 06:52 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-10-01 02:47 - 2015-09-17 06:50 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2015-10-01 02:47 - 2015-09-17 06:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 02:47 - 2015-09-17 06:49 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
2015-10-01 02:45 - 2015-09-25 01:35 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-01 02:45 - 2015-09-25 01:34 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-01 02:45 - 2015-09-25 00:34 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2015-10-01 02:45 - 2015-09-25 00:34 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2015-10-01 02:45 - 2015-09-25 00:01 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2015-10-01 02:45 - 2015-09-25 00:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-01 02:45 - 2015-09-24 23:24 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2015-10-01 02:45 - 2015-09-17 07:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-10-01 02:45 - 2015-09-17 07:48 - 00406864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-10-01 02:45 - 2015-09-17 07:48 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-10-01 02:45 - 2015-09-17 07:28 - 00407608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-10-01 02:45 - 2015-09-17 07:11 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 02:45 - 2015-09-17 07:09 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-10-01 02:45 - 2015-09-17 07:04 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 02:45 - 2015-09-17 07:03 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 02:45 - 2015-09-17 06:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 02:45 - 2015-09-17 06:55 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-10-01 02:45 - 2015-09-17 06:52 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll
2015-10-01 02:45 - 2015-09-17 06:52 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 02:45 - 2015-09-17 06:51 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2015-10-01 02:45 - 2015-09-17 06:50 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 02:45 - 2015-09-17 06:49 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll
2015-10-01 02:45 - 2015-09-17 06:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 02:45 - 2015-09-17 06:45 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2015-10-01 02:45 - 2015-09-17 06:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-10-01 02:45 - 2015-09-17 06:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll
2015-10-01 02:45 - 2015-09-17 06:43 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-10-01 02:45 - 2015-09-17 06:33 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2015-10-01 02:44 - 2015-09-17 07:10 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 02:44 - 2015-09-17 07:03 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 02:44 - 2015-09-17 07:03 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 02:44 - 2015-09-17 07:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 02:44 - 2015-09-17 07:02 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 02:44 - 2015-09-17 06:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2015-10-01 02:44 - 2015-09-17 06:55 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2015-10-01 02:44 - 2015-09-17 06:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 02:44 - 2015-09-17 06:52 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-10-01 02:44 - 2015-09-17 06:50 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-01 02:44 - 2015-09-17 06:50 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll
2015-10-01 02:44 - 2015-09-17 06:49 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2015-10-01 02:44 - 2015-09-17 06:46 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll
2015-10-01 02:44 - 2015-09-17 06:39 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 02:44 - 2015-09-17 06:36 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll
2015-10-01 02:44 - 2015-09-17 06:28 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2015-09-18 11:14 - 2015-09-18 11:14 - 00047096 _____ C:\WINDOWS\SysWOW64\DiscHandler.exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-06 05:55 - 2015-08-12 18:56 - 00000000 ___HD C:\$SysReset
Some files in TEMP:
====================
C:\Users\missg\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\missg\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\missg\AppData\Local\Temp\fupxsehn.dll
C:\Users\missg\AppData\Local\Temp\scpF847.tmp.exe
C:\Users\missg\AppData\Local\Temp\{AF2B58C9-D569-4BAE-94F0-49E88695FD51}.exe
C:\Users\missg\AppData\Local\Temp\{BEA8507A-F470-4150-B29A-F70EFCB5680D}.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-10-06 04:56
==================== End of FRST.txt ============================