Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Possible keylogger on my computer - please help :(
Message
<blockquote data-quote="gail jackson" data-source="post: 440578" data-attributes="member: 43542"><p>Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:11-10-2015 02</p><p>Ran by missg (administrator) on DESKTOP-7E5LF1P (12-10-2015 04:14:52)</p><p>Running from C:\Users\missg\Downloads</p><p>Loaded Profiles: missg (Available Profiles: missg)</p><p>Platform: Windows 10 Home (X64) Language: English (United States)</p><p>Internet Explorer Version 11 (Default browser: Edge)</p><p>Boot Mode: Normal</p><p>Tutorial for Farbar Recovery Scan Tool: <a href="http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/" target="_blank">FRST Tutorial - How to use Farbar Recovery Scan Tool</a></p><p></p><p>==================== Processes (Whitelisted) =================</p><p></p><p>(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)</p><p></p><p>(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe</p><p>(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe</p><p>(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe</p><p>(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe</p><p>(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe</p><p>(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe</p><p>(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe</p><p>(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe</p><p>(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe</p><p>(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe</p><p>() C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe</p><p>(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe</p><p>() C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_bg.exe</p><p>(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe</p><p>(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe</p><p>(IObit) C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe</p><p>(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe</p><p>(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe</p><p>(Microsoft Corporation) C:\Windows\System32\dllhost.exe</p><p>(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe</p><p>(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe</p><p>(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe</p><p>(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe</p><p>(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Reason Software Company Inc.) C:\Program Files\Reason\Security\rsUI.exe</p><p>(Reason Software Company Inc.) C:\Program Files\Reason\Security\rsEngineSvc.exe</p><p>() C:\Program Files\WindowsApps\Microsoft.Getstarted_2.3.4.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe</p><p>(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6306.42251.0_x64__8wekyb3d8bbwe\HxMail.exe</p><p>(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6306.42251.0_x64__8wekyb3d8bbwe\HxTsr.exe</p><p>(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.10.5.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe</p><p>() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p></p><p></p><p>==================== Registry (Whitelisted) ===========================</p><p></p><p>(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)</p><p></p><p>HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-08-21] (Synaptics Incorporated)</p><p>HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8497368 2015-10-11] (Realtek Semiconductor)</p><p>HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-10-11] (Realtek Semiconductor)</p><p>HKLM-x32\...\Run: [Codec Settings UAC Manager] => C:\WINDOWS\SysWOW64\Codecs\CodecUACManager.exe [60416 2015-09-18] ()</p><p>HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-09] (AVAST Software)</p><p>HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5889824 2015-07-28] (IObit)</p><p>HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Codec Pack Update Checker] => "C:\WINDOWS\system32\Codecs\UpdateChecker.exe"</p><p>HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [57981568 2015-09-28] (Skype Technologies S.A.)</p><p>HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [BingSvc] => C:\Users\missg\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)</p><p>HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [GoogleChromeAutoLaunch_6DB381FA150BEC1DEE19427A951342A0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944 2015-09-24] (Google Inc.)</p><p>HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)</p><p>ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-09] (AVAST Software)</p><p>Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2015-10-06]</p><p>ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\syswow64\Codecs\TrayMenu.exe (No File)</p><p>BootExecute: autocheck autochk * 搀渀挀氀攀愀渀㘀㐀⸀攀砀攀</p><p></p><p>==================== Internet (Whitelisted) ====================</p><p></p><p>(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)</p><p></p><p>Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt</p><p>Tcpip\Parameters: [DhcpNameServer] 192.168.1.1</p><p>Tcpip\..\Interfaces\{fb5b723b-fe72-426b-84c3-5a9be0c2b7a2}: [DhcpNameServer] 192.168.1.1</p><p></p><p>Internet Explorer:</p><p>==================</p><p>HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://<a href="http://www.google.com/?trackid=sp-006" target="_blank">www.google.com/?trackid=sp-006</a></p><p>HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://<a href="http://www.google.com/search?trackid=sp-006&q={searchTerms}" target="_blank">www.google.com/search?trackid=sp-006&q={searchTerms}</a></p><p>HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = </p><p>HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = </p><p>HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://<a href="http://www.google.com/search?trackid=sp-006&q={searchTerms}" target="_blank">www.google.com/search?trackid=sp-006&q={searchTerms}</a></p><p>HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://<a href="http://www.google.co.uk" target="_blank">www.google.co.uk</a></p><p>HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://<a href="http://www.google.com/?trackid=sp-006" target="_blank">www.google.com/?trackid=sp-006</a></p><p>SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://<a href="http://www.google.com/search?trackid=sp-006&q={searchTerms}" target="_blank">www.google.com/search?trackid=sp-006&q={searchTerms}</a></p><p>SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://<a href="http://www.google.com/search?trackid=sp-006&q={searchTerms}" target="_blank">www.google.com/search?trackid=sp-006&q={searchTerms}</a></p><p>SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://<a href="http://www.google.com/search?trackid=sp-006&q={searchTerms}" target="_blank">www.google.com/search?trackid=sp-006&q={searchTerms}</a></p><p>SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://pandasecurity.mystart.com/results.php?pr=vmn&gen=ms&id=pandasecuritytb&v=4_3&idate=2015-10-08&ent=ch_671&q={searchTerms}</p><p>SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://<a href="http://www.google.com/search?trackid=sp-006&q={searchTerms}" target="_blank">www.google.com/search?trackid=sp-006&q={searchTerms}</a></p><p>BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-08-31] (IObit)</p><p>BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-09] (AVAST Software)</p><p>BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)</p><p>BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-09] (AVAST Software)</p><p>BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)</p><p>BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)</p><p>Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)</p><p>Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)</p><p></p><p>FireFox:</p><p>========</p><p>FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-05] (Google Inc.)</p><p>FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-05] (Google Inc.)</p><p>FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF</p><p>FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-09]</p><p></p><p>Chrome: </p><p>=======</p><p>CHR HomePage: Default -> hxxp://<a href="http://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us" target="_blank">www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us</a></p><p>CHR StartupUrls: Default -> "hxxps://<a href="http://www.google.co.uk/" target="_blank">www.google.co.uk/</a>","hxxps://uk.search.yahoo.com/?type=994519&fr=yo-yhp-ch"</p><p>CHR Profile: C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default</p><p>CHR Extension: (Google Drive) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-05]</p><p>CHR Extension: (YouTube) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-05]</p><p>CHR Extension: (Google Search) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-05]</p><p>CHR Extension: (Google Docs Offline) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-05]</p><p>CHR Extension: (Google Play) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2015-10-08]</p><p>CHR Extension: (Chrome Hotword Shared Module) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-10-05]</p><p>CHR Extension: (Skype Click to Call) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-10-07]</p><p>CHR Extension: (Chrome Web Store Payments) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-05]</p><p>CHR Extension: (Azov Sea Theme #2) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\oalokjhcnhmboncjbmhicgmiinlfacio [2015-10-07]</p><p>CHR Extension: (Gmail) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-05]</p><p>CHR HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx</p><p>CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-09]</p><p>CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]</p><p></p><p>==================== Services (Whitelisted) ========================</p><p></p><p>(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)</p><p></p><p>R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit)</p><p>R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-09] (AVAST Software)</p><p>R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)</p><p>R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)</p><p>R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [882464 2015-07-17] (IObit)</p><p>R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-08-31] (IObit)</p><p>R2 rscp; C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe [163576 2015-10-11] ()</p><p>R2 rsEngineSvc; C:\Program Files\Reason\Security\rsEngineSvc.exe [80104 2015-10-07] (Reason Software Company Inc.)</p><p>R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-10-11] (Realtek Semiconductor)</p><p>R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [1055008 2015-09-21] (IObit)</p><p>R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-08-21] (Synaptics Incorporated)</p><p>S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)</p><p>S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)</p><p></p><p>===================== Drivers (Whitelisted) ==========================</p><p></p><p>(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)</p><p></p><p>R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-09] (AVAST Software)</p><p>R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-10-09] (AVAST Software)</p><p>R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-09] (AVAST Software)</p><p>R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-09] (AVAST Software)</p><p>R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-09] (AVAST Software)</p><p>R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-09] (AVAST Software)</p><p>R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-09] (AVAST Software)</p><p>R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-09] (AVAST Software)</p><p>R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-09] (AVAST Software)</p><p>S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit)</p><p>R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-10-11] (REALiX(tm))</p><p>S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2015-03-25] (IObit.com)</p><p>R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [888064 2015-10-11] (Realtek )</p><p>R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)</p><p>S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [42184 2015-08-21] (Synaptics Incorporated)</p><p>R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [42696 2015-08-21] (Synaptics Incorporated)</p><p>S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16056 2015-10-10] (SlimWare Utilities, Inc.)</p><p>S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()</p><p>S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2015-03-25] (IObit.com)</p><p>S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)</p><p>S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)</p><p>S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)</p><p>S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]</p><p></p><p>==================== NetSvcs (Whitelisted) ===================</p><p></p><p>(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)</p><p></p><p></p><p>==================== One Month Created files and folders ========</p><p></p><p>(If an entry is included in the fixlist, the file/folder will be moved.)</p><p></p><p>2015-10-12 04:14 - 2015-10-12 04:15 - 00017009 _____ C:\Users\missg\Downloads\FRST.txt</p><p>2015-10-12 04:12 - 2015-10-12 04:14 - 00000000 ____D C:\FRST</p><p>2015-10-12 04:11 - 2015-10-12 04:12 - 02195968 _____ (Farbar) C:\Users\missg\Downloads\FRST64.exe</p><p>2015-10-12 03:48 - 2015-10-12 03:48 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7E5LF1P_missg_HistoryPrediction.bin</p><p>2015-10-12 03:11 - 2015-10-12 03:11 - 00000000 ____D C:\Users\missg\OneDrive\Documents\MPC-HC Capture</p><p>2015-10-12 03:10 - 2015-10-12 03:10 - 00000000 ____D C:\Users\missg\AppData\Roaming\MPC-HC</p><p>2015-10-12 02:49 - 2015-10-12 02:49 - 00000000 ____D C:\Users\missg\AppData\Roaming\DVDVideoSoft</p><p>2015-10-11 22:39 - 2015-10-11 22:39 - 00888064 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys</p><p>2015-10-11 22:39 - 2015-10-11 22:39 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll</p><p>2015-10-11 22:35 - 2015-10-11 22:36 - 00000000 ____D C:\WINDOWS\LastGood.Tmp</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 72113152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 35222128 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 03234520 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 02930904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 02918104 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 02702552 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 01749208 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 01413776 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 01310936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 01104040 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00943784 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00734376 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00631000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00454288 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00369296 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00329360 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00250536 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00184688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll</p><p>2015-10-11 22:33 - 2015-10-11 22:33 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll</p><p>2015-10-11 22:32 - 2015-10-11 22:32 - 01576976 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll</p><p>2015-10-11 22:32 - 2015-10-11 22:32 - 00560328 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll</p><p>2015-10-11 22:32 - 2015-10-11 22:32 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll</p><p>2015-10-11 22:32 - 2015-10-11 22:32 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll</p><p>2015-10-11 22:27 - 2015-10-11 22:42 - 00002227 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk</p><p>2015-10-11 22:27 - 2015-10-11 22:27 - 00026528 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS</p><p>2015-10-11 22:27 - 2015-10-11 22:27 - 00003428 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler</p><p>2015-10-11 22:27 - 2015-10-11 22:27 - 00003316 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Startup</p><p>2015-10-11 22:27 - 2015-10-11 22:27 - 00003312 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Update</p><p>2015-10-11 22:27 - 2015-10-11 22:27 - 00003076 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (missg)</p><p>2015-10-11 22:27 - 2015-10-11 22:27 - 00001356 _____ C:\Users\Public\Desktop\Start Menu 8.lnk</p><p>2015-10-11 22:27 - 2015-10-11 22:27 - 00001247 _____ C:\Users\Public\Desktop\Smart Defrag 4.lnk</p><p>2015-10-11 22:27 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Start Menu 8</p><p>2015-10-11 22:27 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4</p><p>2015-10-11 22:27 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\SysWOW64\IObitSmartDefragExtension.dll</p><p>2015-10-11 22:27 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll</p><p>2015-10-11 22:27 - 2014-06-04 15:17 - 00034080 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe</p><p>2015-10-11 22:27 - 2014-06-04 15:17 - 00021184 _____ (IObit) C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys</p><p>2015-10-11 22:26 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3</p><p>2015-10-11 22:26 - 2015-10-11 22:26 - 00001250 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk</p><p>2015-10-11 22:26 - 2015-10-11 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter</p><p>2015-10-11 20:27 - 2015-10-11 20:27 - 03794200 _____ (Reason Software Company Inc.) C:\Users\missg\Downloads\reason-core-security-setup (1).exe</p><p>2015-10-11 20:26 - 2015-10-11 20:26 - 00003638 _____ C:\WINDOWS\System32\Tasks\ReasonSecurityScheduledScan</p><p>2015-10-11 20:26 - 2015-10-11 20:26 - 00003502 _____ C:\WINDOWS\System32\Tasks\ReasonSecurityStart</p><p>2015-10-11 20:26 - 2015-10-11 20:26 - 00000000 ____D C:\ProgramData\Reason</p><p>2015-10-11 19:02 - 2015-10-11 20:27 - 00000956 _____ C:\Users\Public\Desktop\Reason Core Security.lnk</p><p>2015-10-11 19:02 - 2015-10-11 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reason Core Security</p><p>2015-10-11 19:02 - 2015-10-11 19:02 - 00000000 ____D C:\Program Files\Reason</p><p>2015-10-11 19:01 - 2015-10-11 19:01 - 03794200 _____ (Reason Software Company Inc.) C:\Users\missg\Downloads\reason-core-security-setup.exe</p><p>2015-10-11 18:41 - 2015-10-11 18:43 - 00018944 ___SH C:\Users\missg\Downloads\Thumbs.db</p><p>2015-10-10 03:18 - 2015-10-11 21:43 - 00000000 ____D C:\Program Files\SlimService</p><p>2015-10-10 03:18 - 2015-10-10 03:18 - 00002481 _____ C:\Users\Public\Desktop\SlimCleaner Plus.lnk</p><p>2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\Users\missg\AppData\Local\Downloaded Installers</p><p>2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\ProgramData\SlimWare Utilities Inc</p><p>2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner Plus</p><p>2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\Program Files\SlimCleaner Plus</p><p>2015-10-10 03:17 - 2015-10-12 00:57 - 00000000 ____D C:\Users\missg\AppData\Local\SlimWare Utilities Inc</p><p>2015-10-10 03:17 - 2015-10-10 03:17 - 00016056 _____ (SlimWare Utilities, Inc.) C:\WINDOWS\system32\Drivers\SWDUMon.sys</p><p>2015-10-09 15:28 - 2015-10-09 15:28 - 02513235 _____ C:\Users\missg\Downloads\takeout-20151008T004828Z.zip</p><p>2015-10-09 06:44 - 2015-10-12 03:28 - 00004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B304D8BB-B3F8-449A-9B89-6D69F86BE87E}</p><p>2015-10-09 02:16 - 2015-10-09 02:16 - 00002027 _____ C:\Users\Public\Desktop\Avast SafeZone.lnk</p><p>2015-10-09 02:16 - 2015-10-09 02:16 - 00001967 _____ C:\Users\Public\Desktop\Avast Pro Antivirus.lnk</p><p>2015-10-09 02:16 - 2015-10-09 02:16 - 00000000 ____D C:\Users\missg\AppData\Roaming\AVAST Software</p><p>2015-10-09 02:16 - 2015-10-09 02:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 01049880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00153744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00028144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys</p><p>2015-10-09 02:15 - 2015-10-09 02:15 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update</p><p>2015-10-09 02:12 - 2015-10-09 02:12 - 00000000 ____D C:\Program Files\AVAST Software</p><p>2015-10-08 23:58 - 2015-10-11 22:33 - 04514008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys</p><p>2015-10-08 23:58 - 2015-10-11 22:33 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll</p><p>2015-10-08 21:20 - 2015-10-08 21:20 - 00003322 _____ C:\WINDOWS\System32\Tasks\ASC8_PerformanceMonitor</p><p>2015-10-08 21:18 - 2015-10-11 22:42 - 00000274 _____ C:\WINDOWS\Tasks\ASC8_SkipUac_missg.job</p><p>2015-10-08 21:18 - 2015-10-08 21:18 - 00002446 _____ C:\WINDOWS\System32\Tasks\ASC8_SkipUac_missg</p><p>2015-10-08 21:18 - 2015-10-08 21:18 - 00002258 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk</p><p>2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled</p><p>2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\Users\missg\AppData\Roaming\Apple Computer</p><p>2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8</p><p>2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}</p><p>2015-10-08 21:16 - 2015-10-12 00:57 - 00000000 ____D C:\ProgramData\ProductData</p><p>2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Users\missg\AppData\Roaming\IObit</p><p>2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Users\missg\AppData\LocalLow\IObit</p><p>2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\IObit</p><p>2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Program Files (x86)\IObit</p><p>2015-10-08 21:16 - 2015-10-11 16:01 - 00002496 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_missg</p><p>2015-10-08 21:16 - 2015-10-11 16:01 - 00000310 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_missg.job</p><p>2015-10-08 21:16 - 2015-10-08 21:16 - 00001443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk</p><p>2015-10-08 21:16 - 2015-10-08 21:16 - 00001431 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk</p><p>2015-10-08 21:16 - 2015-10-08 21:16 - 00000000 ____D C:\Users\missg\AppData\Roaming\ProductData</p><p>2015-10-08 21:16 - 2015-10-08 21:16 - 00000000 ____D C:\Users\missg\AppData\IObit</p><p>2015-10-08 21:15 - 2015-10-08 21:15 - 11117856 _____ (IObit) C:\Users\missg\Downloads\iobituninstaller.exe</p><p>2015-10-08 21:11 - 2015-10-08 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mercerion</p><p>2015-10-08 21:11 - 2015-10-08 21:11 - 00000000 ____D C:\Program Files (x86)\WifiDefender</p><p>2015-10-08 21:01 - 2015-10-08 22:22 - 00000000 ____D C:\Program Files (x86)\NirSoft</p><p>2015-10-08 19:34 - 2015-10-08 19:35 - 07837168 _____ (Safebytes) C:\Users\missg\Downloads\TotalSystemCare-Setup.exe</p><p>2015-10-08 19:05 - 2015-10-08 19:05 - 00000000 ____D C:\Users\missg\AppData\Roaming\Search The Web</p><p>2015-10-08 18:51 - 2015-07-05 11:08 - 00300704 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe</p><p>2015-10-08 01:58 - 2015-10-08 01:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf</p><p>2015-10-07 21:35 - 2015-10-07 21:35 - 00000000 ____D C:\Users\missg\OneDrive\Documents\word docx CV</p><p>2015-10-07 21:11 - 2015-10-07 21:11 - 00000842 _____ C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppRemover.lnk</p><p>2015-10-07 18:24 - 2015-10-07 18:24 - 11972672 _____ (OPSWAT, Inc.) C:\Users\missg\Downloads\AppRemover.exe</p><p>2015-10-07 10:43 - 2015-10-07 10:43 - 00000085 _____ C:\WINDOWS\wininit.ini</p><p>2015-10-06 23:05 - 2015-10-06 23:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy</p><p>2015-10-06 18:41 - 2015-10-06 18:41 - 00000000 ____D C:\Users\missg\AppData\Local\Skype</p><p>2015-10-06 18:40 - 2015-10-11 14:51 - 00000000 ____D C:\Users\missg\AppData\Roaming\Skype</p><p>2015-10-06 18:40 - 2015-10-06 18:47 - 00000000 ___RD C:\Program Files (x86)\Skype</p><p>2015-10-06 18:40 - 2015-10-06 18:40 - 00002640 _____ C:\Users\Public\Desktop\Skype.lnk</p><p>2015-10-06 18:40 - 2015-10-06 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype</p><p>2015-10-06 18:39 - 2015-10-06 18:40 - 00000000 ____D C:\ProgramData\Skype</p><p>2015-10-06 18:36 - 2015-10-06 18:36 - 01503872 _____ (Skype Technologies S.A.) C:\Users\missg\Downloads\SkypeSetup.exe</p><p>2015-10-06 17:38 - 2015-10-08 19:05 - 00000000 ____D C:\ProgramData\panda_url_filtering</p><p>2015-10-06 17:37 - 2015-10-08 22:07 - 00000000 ____D C:\Users\missg\AppData\Roaming\Panda Security</p><p>2015-10-06 17:35 - 2015-10-08 22:22 - 00000000 ____D C:\Program Files (x86)\Panda Security</p><p>2015-10-06 17:31 - 2015-10-08 22:08 - 00000000 ____D C:\ProgramData\Panda Security</p><p>2015-10-06 17:31 - 2015-10-06 17:31 - 02113152 _____ C:\Users\missg\Downloads\PANDAFREEAV.exe</p><p>2015-10-06 17:29 - 2015-10-12 03:37 - 00000000 ____D C:\WINDOWS\SysWOW64\Codecs</p><p>2015-10-06 17:29 - 2015-10-06 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player - Codec Pack</p><p>2015-10-06 17:04 - 2015-10-06 17:05 - 41435632 _____ (Media Player - Codec Pack) C:\Users\missg\Downloads\media.player.codec.pack.v4.3.9.setup.exe</p><p>2015-10-06 10:37 - 2015-10-06 10:37 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf</p><p>2015-10-06 05:55 - 2015-10-06 05:55 - 00000000 _____ C:\Recovery.txt</p><p>2015-10-06 05:15 - 2015-10-12 01:03 - 00005384 _____ C:\WINDOWS\system32\PerfStringBackup.INI</p><p>2015-10-06 05:15 - 2015-09-15 17:12 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe</p><p>2015-10-06 05:15 - 2015-09-15 17:12 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl</p><p>2015-10-06 05:12 - 2015-07-10 11:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll</p><p>2015-10-06 05:11 - 2015-10-06 05:11 - 00000000 ____D C:\ProgramData\USOShared</p><p>2015-10-06 05:10 - 2015-10-12 00:55 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT</p><p>2015-10-06 05:09 - 2015-10-06 05:09 - 00000000 __SHD C:\Recovery</p><p>2015-10-06 05:03 - 2015-10-11 22:36 - 00012844 _____ C:\WINDOWS\setupact.log</p><p>2015-10-06 05:03 - 2015-10-11 22:35 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM</p><p>2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf</p><p>2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf</p><p>2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____D C:\Program Files\Realtek</p><p>2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 _____ C:\WINDOWS\setuperr.log</p><p>2015-10-06 04:58 - 2015-10-06 04:58 - 00001344 _____ C:\WINDOWS\lsasetup.log</p><p>2015-10-06 04:57 - 2015-10-09 09:13 - 00189240 _____ C:\WINDOWS\system32\FNTCACHE.DAT</p><p>2015-10-06 04:43 - 2015-10-09 02:11 - 00000000 ____D C:\ProgramData\AVAST Software</p><p>2015-10-06 04:33 - 2015-10-06 04:33 - 00000000 ____D C:\Users\missg\AppData\Local\NetworkTiles</p><p>2015-10-06 04:13 - 2015-10-06 04:15 - 00000000 ____D C:\WINDOWS\system32\MRT</p><p>2015-10-06 04:13 - 2015-08-26 18:37 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe</p><p>2015-10-06 04:07 - 2015-10-06 04:07 - 00000000 ____D C:\Program Files\Common Files\AV</p><p>2015-10-06 04:07 - 2015-10-06 04:05 - 00450709 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20151006-040715.backup</p><p>2015-10-06 04:05 - 2015-10-06 03:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20151006-040528.backup</p><p>2015-10-06 03:21 - 2015-10-07 10:43 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy</p><p>2015-10-06 03:21 - 2015-10-06 03:21 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking</p><p>2015-10-06 03:19 - 2015-10-05 21:35 - 00000000 ___DC C:\WINDOWS\Panther</p><p>2015-10-06 03:18 - 2015-10-06 03:18 - 00028672 ___SH C:\WINDOWS\system32\config\BCD-Template.LOG</p><p>2015-10-06 03:18 - 2015-10-06 03:18 - 00008192 _____ C:\WINDOWS\system32\config\userdiff</p><p>2015-10-06 03:17 - 2015-10-06 03:17 - 00000000 ____D C:\Program Files\Synaptics</p><p>2015-10-06 03:16 - 2015-10-06 03:16 - 00000000 ____D C:\WINDOWS\Setup</p><p>2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\WINDOWS\OCR</p><p>2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files\Reference Assemblies</p><p>2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files\MSBuild</p><p>2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies</p><p>2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files (x86)\MSBuild</p><p>2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm</p><p>2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN</p><p>2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep</p><p>2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr</p><p>2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts</p><p>2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\SysWOW64\0409</p><p>2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\winrm</p><p>2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\WCN</p><p>2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\slmgr</p><p>2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts</p><p>2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\0409</p><p>2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\DigitalLocker</p><p>2015-10-06 03:05 - 2015-10-06 05:06 - 00001189 _____ C:\WINDOWS\DtcInstall.log</p><p>2015-10-06 03:04 - 2015-10-06 05:55 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00215943 _____ C:\WINDOWS\system32\dssec.dat</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00000219 _____ C:\WINDOWS\system.ini</p><p>2015-10-06 03:04 - 2015-10-06 03:00 - 00000092 _____ C:\WINDOWS\win.ini</p><p>2015-10-06 03:03 - 2015-10-12 03:36 - 00000000 ____D C:\WINDOWS\system32\sru</p><p>2015-10-06 03:03 - 2015-10-11 18:38 - 00000000 ____D C:\WINDOWS\AppReadiness</p><p>2015-10-06 03:03 - 2015-10-10 06:19 - 00000000 ____D C:\WINDOWS\rescache</p><p>2015-10-06 03:03 - 2015-10-07 18:57 - 00000000 ____D C:\WINDOWS\system32\NDF</p><p>2015-10-06 03:03 - 2015-10-06 05:12 - 00000000 ____D C:\WINDOWS\system32\spool</p><p>2015-10-06 03:03 - 2015-10-06 05:12 - 00000000 ____D C:\WINDOWS\system32\FxsTmp</p><p>2015-10-06 03:03 - 2015-10-06 05:11 - 00000000 ____D C:\ProgramData\USOPrivate</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___SD C:\WINDOWS\system32\F12</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\WINDOWS\PurchaseDialog</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\oobe</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\Dism</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\appraiser</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\Provisioning</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\L2Schemas</p><p>2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\Program Files\Windows Journal</p><p>2015-10-06 03:03 - 2015-10-06 05:06 - 00000000 ____D C:\WINDOWS\system32\Sysprep</p><p>2015-10-06 03:03 - 2015-10-06 03:17 - 00000000 ____D C:\WINDOWS\appcompat</p><p>2015-10-06 03:03 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\setup</p><p>2015-10-06 03:03 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\system32\dsc</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Com</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\setup</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\MUI</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\migwiz</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\Com</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\PolicyDefinitions</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\IME</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\Help</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Windows Photo Viewer</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Windows Defender</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Common Files\System</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Common Files\microsoft shared</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer</p><p>2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files (x86)\Windows Defender</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\WINDOWS\Media</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RHD C:\Users\Public\Libraries</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___SD C:\WINDOWS\system32\Nui</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\WINDOWS\Offline Web Pages</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\WINDOWS\DesktopTileResources</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-CS</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sppui</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Recovery</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MSDRM</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\InstallShield</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\fr-CA</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\es-MX</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\WinMetadata</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\th-TH</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sppui</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\Recovery</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MsDtc</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MSDRM</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\icsxml</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ias</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\he-IL</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\fr-CA</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\et-EE</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\es-MX</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\en-GB</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\downlevel</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\Bthprops</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system\Speech</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\ShellNew</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\Registration</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\Cursors</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\addins</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Windows Portable Devices</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Windows Multimedia Platform</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Common Files\Services</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices</p><p>2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __SHD C:\Program Files\Windows Sidebar</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\WINDOWS\system32\Configuration</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\Program Files\WindowsPowerShell</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\Program Files (x86)\WindowsPowerShell</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Web</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Vss</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\tracing</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\TAPI</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\WindowsPowerShell</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\sru</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\spp</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech_OneCore</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\restore</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\RasToast</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\ras</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\networklist</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Licenses</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SystemResources</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\winevt</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\WindowsPowerShell</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\spp</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Speech_OneCore</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Speech</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\RasToast</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\ras</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\ProximityToast</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\PointOfService</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\networklist</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Macromed</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Licenses</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Ipmi</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\InputMethod</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\IME</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\config\Journal</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\AppLocker</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\System</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Speech_OneCore</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Speech</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SKB</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\security</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\schemas</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SchCache</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Resources</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\PLA</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Performance</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\InputMethod</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Globalization</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Branding</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\ProgramData\Comms</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\Program Files\Windows NT</p><p>2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\Program Files (x86)\Windows NT</p><p>2015-10-06 03:03 - 2015-10-05 21:50 - 00000000 ___RD C:\WINDOWS\PrintDialog</p><p>2015-10-06 03:03 - 2015-10-05 21:50 - 00000000 ___RD C:\WINDOWS\MiracastView</p><p>2015-10-06 03:03 - 2015-10-05 21:48 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase</p><p>2015-10-06 03:03 - 2015-10-05 21:34 - 00000000 ____D C:\WINDOWS\system32\restore</p><p>2015-10-06 02:52 - 2015-10-06 04:16 - 00000000 ____D C:\WINDOWS\CbsTemp</p><p>2015-10-06 02:45 - 2015-10-11 22:43 - 00262144 ___SH C:\WINDOWS\system32\config\BBI</p><p>2015-10-06 02:45 - 2015-10-06 05:10 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM</p><p>2015-10-06 02:45 - 2015-10-06 05:09 - 00000000 __RHD C:\Users\Default</p><p>2015-10-06 02:45 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\servicing</p><p>2015-10-06 02:45 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\SMI</p><p>2015-10-06 02:45 - 2015-07-10 10:11 - 00000164 _____ C:\WINDOWS\system32\config\FP</p><p>2015-10-06 02:08 - 2015-10-11 22:44 - 00404828 _____ C:\WINDOWS\PFRO.log</p><p>2015-10-05 22:23 - 2015-10-05 22:23 - 00002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk</p><p>2015-10-05 22:23 - 2015-10-05 22:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome</p><p>2015-10-05 22:22 - 2015-10-12 03:27 - 00000928 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job</p><p>2015-10-05 22:22 - 2015-10-12 00:58 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job</p><p>2015-10-05 22:22 - 2015-10-05 22:23 - 00000000 ____D C:\Users\missg\AppData\Local\Google</p><p>2015-10-05 22:22 - 2015-10-05 22:23 - 00000000 ____D C:\Program Files (x86)\Google</p><p>2015-10-05 22:22 - 2015-10-05 22:22 - 00003986 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA</p><p>2015-10-05 22:22 - 2015-10-05 22:22 - 00003754 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore</p><p>2015-10-05 22:14 - 2015-10-05 22:22 - 00929872 _____ (Google Inc.) C:\Users\missg\Downloads\ChromeSetup.exe</p><p>2015-10-05 22:08 - 2015-10-10 00:07 - 00000000 ____D C:\Users\missg\AppData\Local\PackageStaging</p><p>2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\Users\missg\AppData\Roaming\Macromedia</p><p>2015-10-05 21:54 - 2015-10-05 21:54 - 00000000 ____D C:\Users\missg\AppData\Local\MicrosoftEdge</p><p>2015-10-05 21:53 - 2015-10-11 22:42 - 00000000 ____D C:\Users\missg\OneDrive</p><p>2015-10-05 21:53 - 2015-10-05 21:54 - 00002338 _____ C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk</p><p>2015-10-05 21:53 - 2015-10-05 21:53 - 00000000 ____D C:\ProgramData\Microsoft OneDrive</p><p>2015-10-05 21:52 - 2015-10-06 18:33 - 00000000 ____D C:\Users\missg\AppData\Local\Comms</p><p>2015-10-05 21:51 - 2015-10-08 08:58 - 00000000 ____D C:\Users\missg\AppData\Local\Publishers</p><p>2015-10-05 21:49 - 2015-10-11 18:33 - 00000000 ____D C:\Users\missg\AppData\Local\Packages</p><p>2015-10-05 21:49 - 2015-10-05 21:49 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7E5LF1P_defaultuser0_HistoryPrediction.bin</p><p>2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Roaming\Adobe</p><p>2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Local\VirtualStore</p><p>2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Local\TileDataLayer</p><p>2015-10-05 21:41 - 2015-10-12 00:56 - 00000000 ____D C:\Users\missg</p><p>2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell</p><p>2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools</p><p>2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility</p><p>2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ____D C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance</p><p>2015-10-05 21:41 - 2015-10-05 21:49 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories</p><p>2015-10-05 21:41 - 2015-10-05 21:41 - 00000020 ___SH C:\Users\missg\ntuser.ini</p><p>2015-10-05 21:33 - 2015-10-12 03:38 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log</p><p>2015-10-01 02:50 - 2015-09-17 07:50 - 02464216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:49 - 06487248 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:48 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:48 - 02494712 _____ C:\WINDOWS\system32\CoreUIComponents.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:28 - 05120056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:28 - 02154808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:12 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:07 - 21875712 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:04 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:00 - 24595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:00 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll</p><p>2015-10-01 02:50 - 2015-09-17 07:00 - 02417664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:54 - 03781120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:53 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:51 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:51 - 02660864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:49 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:47 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:45 - 19325440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:42 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:40 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:40 - 01918464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:37 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:35 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll</p><p>2015-10-01 02:50 - 2015-09-17 06:31 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll</p><p>2015-10-01 02:49 - 2015-09-25 00:17 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll</p><p>2015-10-01 02:49 - 2015-09-25 00:08 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys</p><p>2015-10-01 02:49 - 2015-09-25 00:06 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll</p><p>2015-10-01 02:49 - 2015-09-24 23:42 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:50 - 01563392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:49 - 08020816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe</p><p>2015-10-01 02:49 - 2015-09-17 07:49 - 01563472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:49 - 00894256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys</p><p>2015-10-01 02:49 - 2015-09-17 07:48 - 02432336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys</p><p>2015-10-01 02:49 - 2015-09-17 07:48 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:48 - 01983824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys</p><p>2015-10-01 02:49 - 2015-09-17 07:48 - 00809352 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:48 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:48 - 00555768 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:48 - 00537080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:47 - 01397088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:44 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:43 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:37 - 01295712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:27 - 01766952 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:26 - 02446648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:26 - 00646672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:25 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:06 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:05 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll</p><p>2015-10-01 02:49 - 2015-09-17 07:04 - 00910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:57 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:55 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:52 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:52 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:51 - 01203712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:49 - 01010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:48 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:48 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:47 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:45 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:45 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:44 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:40 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:39 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:35 - 02207232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:32 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:29 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:29 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:26 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll</p><p>2015-10-01 02:49 - 2015-09-17 06:16 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll</p><p>2015-10-01 02:49 - 2015-09-13 03:05 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll</p><p>2015-10-01 02:48 - 2015-09-25 01:13 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll</p><p>2015-10-01 02:48 - 2015-09-25 00:24 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll</p><p>2015-10-01 02:48 - 2015-09-25 00:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll</p><p>2015-10-01 02:48 - 2015-09-25 00:23 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe</p><p>2015-10-01 02:48 - 2015-09-25 00:07 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys</p><p>2015-10-01 02:48 - 2015-09-25 00:01 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll</p><p>2015-10-01 02:48 - 2015-09-25 00:00 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll</p><p>2015-10-01 02:48 - 2015-09-25 00:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll</p><p>2015-10-01 02:48 - 2015-09-24 23:43 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll</p><p>2015-10-01 02:48 - 2015-09-24 23:25 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll</p><p>2015-10-01 02:48 - 2015-09-24 23:25 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:50 - 00099664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys</p><p>2015-10-01 02:48 - 2015-09-17 07:49 - 00553808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe</p><p>2015-10-01 02:48 - 2015-09-17 07:48 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:48 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS</p><p>2015-10-01 02:48 - 2015-09-17 07:48 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys</p><p>2015-10-01 02:48 - 2015-09-17 07:48 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:48 - 00395088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys</p><p>2015-10-01 02:48 - 2015-09-17 07:48 - 00332624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys</p><p>2015-10-01 02:48 - 2015-09-17 07:48 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:39 - 00081488 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:28 - 01357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:28 - 00441168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe</p><p>2015-10-01 02:48 - 2015-09-17 07:27 - 00454512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:26 - 01895568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:26 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:26 - 00434376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:26 - 00428128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:09 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:06 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:06 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll</p><p>2015-10-01 02:48 - 2015-09-17 07:00 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:57 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:57 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:56 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:55 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:55 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe</p><p>2015-10-01 02:48 - 2015-09-17 06:54 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:52 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:52 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:52 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:51 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:51 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:50 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:50 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys</p><p>2015-10-01 02:48 - 2015-09-17 06:48 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:48 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:48 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:48 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:47 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:47 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:46 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:46 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:46 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:46 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe</p><p>2015-10-01 02:48 - 2015-09-17 06:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:45 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:45 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:44 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:43 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:41 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:37 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:34 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:32 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:32 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:32 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:31 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:30 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:29 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll</p><p>2015-10-01 02:48 - 2015-09-17 06:29 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll</p><p>2015-10-01 02:48 - 2015-09-13 02:41 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll</p><p>2015-10-01 02:47 - 2015-09-25 00:05 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll</p><p>2015-10-01 02:47 - 2015-09-25 00:00 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll</p><p>2015-10-01 02:47 - 2015-09-24 23:53 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll</p><p>2015-10-01 02:47 - 2015-09-24 23:43 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll</p><p>2015-10-01 02:47 - 2015-09-24 23:25 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll</p><p>2015-10-01 02:47 - 2015-09-24 23:25 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll</p><p>2015-10-01 02:47 - 2015-09-24 23:25 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll</p><p>2015-10-01 02:47 - 2015-09-24 23:19 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll</p><p>2015-10-01 02:47 - 2015-09-19 06:14 - 00102304 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll</p><p>2015-10-01 02:47 - 2015-09-17 07:50 - 00088384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll</p><p>2015-10-01 02:47 - 2015-09-17 07:37 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys</p><p>2015-10-01 02:47 - 2015-09-17 07:28 - 00074880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll</p><p>2015-10-01 02:47 - 2015-09-17 07:08 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll</p><p>2015-10-01 02:47 - 2015-09-17 07:08 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe</p><p>2015-10-01 02:47 - 2015-09-17 07:03 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll</p><p>2015-10-01 02:47 - 2015-09-17 07:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe</p><p>2015-10-01 02:47 - 2015-09-17 07:00 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll</p><p>2015-10-01 02:47 - 2015-09-17 06:52 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll</p><p>2015-10-01 02:47 - 2015-09-17 06:50 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys</p><p>2015-10-01 02:47 - 2015-09-17 06:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll</p><p>2015-10-01 02:47 - 2015-09-17 06:49 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll</p><p>2015-10-01 02:45 - 2015-09-25 01:35 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll</p><p>2015-10-01 02:45 - 2015-09-25 01:34 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll</p><p>2015-10-01 02:45 - 2015-09-25 00:34 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll</p><p>2015-10-01 02:45 - 2015-09-25 00:34 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll</p><p>2015-10-01 02:45 - 2015-09-25 00:01 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll</p><p>2015-10-01 02:45 - 2015-09-25 00:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll</p><p>2015-10-01 02:45 - 2015-09-24 23:24 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll</p><p>2015-10-01 02:45 - 2015-09-17 07:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll</p><p>2015-10-01 02:45 - 2015-09-17 07:48 - 00406864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS</p><p>2015-10-01 02:45 - 2015-09-17 07:48 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys</p><p>2015-10-01 02:45 - 2015-09-17 07:28 - 00407608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll</p><p>2015-10-01 02:45 - 2015-09-17 07:11 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll</p><p>2015-10-01 02:45 - 2015-09-17 07:09 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll</p><p>2015-10-01 02:45 - 2015-09-17 07:04 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll</p><p>2015-10-01 02:45 - 2015-09-17 07:03 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:55 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:52 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:52 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:51 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:50 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:49 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:49 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:49 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:49 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:49 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:45 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:43 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll</p><p>2015-10-01 02:45 - 2015-09-17 06:33 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll</p><p>2015-10-01 02:44 - 2015-09-17 07:10 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll</p><p>2015-10-01 02:44 - 2015-09-17 07:03 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll</p><p>2015-10-01 02:44 - 2015-09-17 07:03 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe</p><p>2015-10-01 02:44 - 2015-09-17 07:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll</p><p>2015-10-01 02:44 - 2015-09-17 07:02 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:55 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:52 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:50 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:50 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:49 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:46 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:39 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:36 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll</p><p>2015-10-01 02:44 - 2015-09-17 06:28 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll</p><p>2015-09-18 11:14 - 2015-09-18 11:14 - 00047096 _____ C:\WINDOWS\SysWOW64\DiscHandler.exe</p><p></p><p>==================== One Month Modified files and folders ========</p><p></p><p>(If an entry is included in the fixlist, the file/folder will be moved.)</p><p></p><p>2015-10-06 05:55 - 2015-08-12 18:56 - 00000000 ___HD C:\$SysReset</p><p></p><p>Some files in TEMP:</p><p>====================</p><p>C:\Users\missg\AppData\Local\Temp\BSvcProcessor.exe</p><p>C:\Users\missg\AppData\Local\Temp\BSvcUpdater.exe</p><p>C:\Users\missg\AppData\Local\Temp\fupxsehn.dll</p><p>C:\Users\missg\AppData\Local\Temp\scpF847.tmp.exe</p><p>C:\Users\missg\AppData\Local\Temp\{AF2B58C9-D569-4BAE-94F0-49E88695FD51}.exe</p><p>C:\Users\missg\AppData\Local\Temp\{BEA8507A-F470-4150-B29A-F70EFCB5680D}.exe</p><p></p><p></p><p>==================== Bamital & volsnap =================</p><p></p><p>(There is no automatic fix for files that do not pass verification.)</p><p></p><p>C:\WINDOWS\system32\winlogon.exe => File is digitally signed</p><p>C:\WINDOWS\system32\wininit.exe => File is digitally signed</p><p>C:\WINDOWS\explorer.exe => File is digitally signed</p><p>C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed</p><p>C:\WINDOWS\system32\svchost.exe => File is digitally signed</p><p>C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed</p><p>C:\WINDOWS\system32\services.exe => File is digitally signed</p><p>C:\WINDOWS\system32\User32.dll => File is digitally signed</p><p>C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed</p><p>C:\WINDOWS\system32\userinit.exe => File is digitally signed</p><p>C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed</p><p>C:\WINDOWS\system32\rpcss.dll => File is digitally signed</p><p>C:\WINDOWS\system32\dnsapi.dll => File is digitally signed</p><p>C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed</p><p>C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed</p><p></p><p></p><p>LastRegBack: 2015-10-06 04:56</p><p></p><p>==================== End of FRST.txt ============================</p></blockquote><p></p>
[QUOTE="gail jackson, post: 440578, member: 43542"] Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:11-10-2015 02 Ran by missg (administrator) on DESKTOP-7E5LF1P (12-10-2015 04:14:52) Running from C:\Users\missg\Downloads Loaded Profiles: missg (Available Profiles: missg) Platform: Windows 10 Home (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: [URL="http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/"]FRST Tutorial - How to use Farbar Recovery Scan Tool[/URL] ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe () C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe () C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_bg.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe (IObit) C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe (IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe (IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe (IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Reason Software Company Inc.) C:\Program Files\Reason\Security\rsUI.exe (Reason Software Company Inc.) C:\Program Files\Reason\Security\rsEngineSvc.exe () C:\Program Files\WindowsApps\Microsoft.Getstarted_2.3.4.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6306.42251.0_x64__8wekyb3d8bbwe\HxMail.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6306.42251.0_x64__8wekyb3d8bbwe\HxTsr.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.10.5.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-08-21] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8497368 2015-10-11] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-10-11] (Realtek Semiconductor) HKLM-x32\...\Run: [Codec Settings UAC Manager] => C:\WINDOWS\SysWOW64\Codecs\CodecUACManager.exe [60416 2015-09-18] () HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-09] (AVAST Software) HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5889824 2015-07-28] (IObit) HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Codec Pack Update Checker] => "C:\WINDOWS\system32\Codecs\UpdateChecker.exe" HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [57981568 2015-09-28] (Skype Technologies S.A.) HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [BingSvc] => C:\Users\missg\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation) HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [GoogleChromeAutoLaunch_6DB381FA150BEC1DEE19427A951342A0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944 2015-09-24] (Google Inc.) HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-09] (AVAST Software) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2015-10-06] ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\syswow64\Codecs\TrayMenu.exe (No File) BootExecute: autocheck autochk * 搀渀挀氀攀愀渀㘀㐀⸀攀砀攀 ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{fb5b723b-fe72-426b-84c3-5a9be0c2b7a2}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://[URL="http://www.google.com/?trackid=sp-006"]www.google.com/?trackid=sp-006[/URL] HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://[URL="http://www.google.com/search?trackid=sp-006&q={searchTerms}"]www.google.com/search?trackid=sp-006&q={searchTerms}[/URL] HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://[URL="http://www.google.com/search?trackid=sp-006&q={searchTerms}"]www.google.com/search?trackid=sp-006&q={searchTerms}[/URL] HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://[URL="http://www.google.co.uk"]www.google.co.uk[/URL] HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://[URL="http://www.google.com/?trackid=sp-006"]www.google.com/?trackid=sp-006[/URL] SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://[URL="http://www.google.com/search?trackid=sp-006&q={searchTerms}"]www.google.com/search?trackid=sp-006&q={searchTerms}[/URL] SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://[URL="http://www.google.com/search?trackid=sp-006&q={searchTerms}"]www.google.com/search?trackid=sp-006&q={searchTerms}[/URL] SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://[URL="http://www.google.com/search?trackid=sp-006&q={searchTerms}"]www.google.com/search?trackid=sp-006&q={searchTerms}[/URL] SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://pandasecurity.mystart.com/results.php?pr=vmn&gen=ms&id=pandasecuritytb&v=4_3&idate=2015-10-08&ent=ch_671&q={searchTerms} SearchScopes: HKU\S-1-5-21-3672075780-4069356554-2275120762-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://[URL="http://www.google.com/search?trackid=sp-006&q={searchTerms}"]www.google.com/search?trackid=sp-006&q={searchTerms}[/URL] BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-08-31] (IObit) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-09] (AVAST Software) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-09] (AVAST Software) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) FireFox: ======== FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-05] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-05] (Google Inc.) FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-09] Chrome: ======= CHR HomePage: Default -> hxxp://[URL="http://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us"]www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us[/URL] CHR StartupUrls: Default -> "hxxps://[URL="http://www.google.co.uk/"]www.google.co.uk/[/URL]","hxxps://uk.search.yahoo.com/?type=994519&fr=yo-yhp-ch" CHR Profile: C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-05] CHR Extension: (YouTube) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-05] CHR Extension: (Google Search) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-05] CHR Extension: (Google Docs Offline) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-05] CHR Extension: (Google Play) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2015-10-08] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-10-05] CHR Extension: (Skype Click to Call) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-10-07] CHR Extension: (Chrome Web Store Payments) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-05] CHR Extension: (Azov Sea Theme #2) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\oalokjhcnhmboncjbmhicgmiinlfacio [2015-10-07] CHR Extension: (Gmail) - C:\Users\missg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-05] CHR HKU\S-1-5-21-3672075780-4069356554-2275120762-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-09] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-09] (AVAST Software) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation) R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [882464 2015-07-17] (IObit) R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-08-31] (IObit) R2 rscp; C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe [163576 2015-10-11] () R2 rsEngineSvc; C:\Program Files\Reason\Security\rsEngineSvc.exe [80104 2015-10-07] (Reason Software Company Inc.) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-10-11] (Realtek Semiconductor) R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [1055008 2015-09-21] (IObit) R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-08-21] (Synaptics Incorporated) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-09] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-10-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-09] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-09] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-09] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-09] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-09] (AVAST Software) S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit) R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-10-11] (REALiX(tm)) S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2015-03-25] (IObit.com) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [888064 2015-10-11] (Realtek ) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [42184 2015-08-21] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [42696 2015-08-21] (Synaptics Incorporated) S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16056 2015-10-10] (SlimWare Utilities, Inc.) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2015-03-25] (IObit.com) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-10-12 04:14 - 2015-10-12 04:15 - 00017009 _____ C:\Users\missg\Downloads\FRST.txt 2015-10-12 04:12 - 2015-10-12 04:14 - 00000000 ____D C:\FRST 2015-10-12 04:11 - 2015-10-12 04:12 - 02195968 _____ (Farbar) C:\Users\missg\Downloads\FRST64.exe 2015-10-12 03:48 - 2015-10-12 03:48 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7E5LF1P_missg_HistoryPrediction.bin 2015-10-12 03:11 - 2015-10-12 03:11 - 00000000 ____D C:\Users\missg\OneDrive\Documents\MPC-HC Capture 2015-10-12 03:10 - 2015-10-12 03:10 - 00000000 ____D C:\Users\missg\AppData\Roaming\MPC-HC 2015-10-12 02:49 - 2015-10-12 02:49 - 00000000 ____D C:\Users\missg\AppData\Roaming\DVDVideoSoft 2015-10-11 22:39 - 2015-10-11 22:39 - 00888064 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys 2015-10-11 22:39 - 2015-10-11 22:39 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll 2015-10-11 22:35 - 2015-10-11 22:36 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2015-10-11 22:33 - 2015-10-11 22:33 - 72113152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat 2015-10-11 22:33 - 2015-10-11 22:33 - 35222128 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2015-10-11 22:33 - 2015-10-11 22:33 - 03234520 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 02930904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 02918104 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 02702552 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl 2015-10-11 22:33 - 2015-10-11 22:33 - 01749208 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 01413776 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 01310936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 01104040 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00943784 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00734376 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00631000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00454288 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00369296 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00329360 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00250536 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00184688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll 2015-10-11 22:33 - 2015-10-11 22:33 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll 2015-10-11 22:32 - 2015-10-11 22:32 - 01576976 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll 2015-10-11 22:32 - 2015-10-11 22:32 - 00560328 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll 2015-10-11 22:32 - 2015-10-11 22:32 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll 2015-10-11 22:32 - 2015-10-11 22:32 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll 2015-10-11 22:27 - 2015-10-11 22:42 - 00002227 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk 2015-10-11 22:27 - 2015-10-11 22:27 - 00026528 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS 2015-10-11 22:27 - 2015-10-11 22:27 - 00003428 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler 2015-10-11 22:27 - 2015-10-11 22:27 - 00003316 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Startup 2015-10-11 22:27 - 2015-10-11 22:27 - 00003312 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Update 2015-10-11 22:27 - 2015-10-11 22:27 - 00003076 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (missg) 2015-10-11 22:27 - 2015-10-11 22:27 - 00001356 _____ C:\Users\Public\Desktop\Start Menu 8.lnk 2015-10-11 22:27 - 2015-10-11 22:27 - 00001247 _____ C:\Users\Public\Desktop\Smart Defrag 4.lnk 2015-10-11 22:27 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Start Menu 8 2015-10-11 22:27 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4 2015-10-11 22:27 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\SysWOW64\IObitSmartDefragExtension.dll 2015-10-11 22:27 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll 2015-10-11 22:27 - 2014-06-04 15:17 - 00034080 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe 2015-10-11 22:27 - 2014-06-04 15:17 - 00021184 _____ (IObit) C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys 2015-10-11 22:26 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3 2015-10-11 22:26 - 2015-10-11 22:26 - 00001250 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk 2015-10-11 22:26 - 2015-10-11 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter 2015-10-11 20:27 - 2015-10-11 20:27 - 03794200 _____ (Reason Software Company Inc.) C:\Users\missg\Downloads\reason-core-security-setup (1).exe 2015-10-11 20:26 - 2015-10-11 20:26 - 00003638 _____ C:\WINDOWS\System32\Tasks\ReasonSecurityScheduledScan 2015-10-11 20:26 - 2015-10-11 20:26 - 00003502 _____ C:\WINDOWS\System32\Tasks\ReasonSecurityStart 2015-10-11 20:26 - 2015-10-11 20:26 - 00000000 ____D C:\ProgramData\Reason 2015-10-11 19:02 - 2015-10-11 20:27 - 00000956 _____ C:\Users\Public\Desktop\Reason Core Security.lnk 2015-10-11 19:02 - 2015-10-11 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reason Core Security 2015-10-11 19:02 - 2015-10-11 19:02 - 00000000 ____D C:\Program Files\Reason 2015-10-11 19:01 - 2015-10-11 19:01 - 03794200 _____ (Reason Software Company Inc.) C:\Users\missg\Downloads\reason-core-security-setup.exe 2015-10-11 18:41 - 2015-10-11 18:43 - 00018944 ___SH C:\Users\missg\Downloads\Thumbs.db 2015-10-10 03:18 - 2015-10-11 21:43 - 00000000 ____D C:\Program Files\SlimService 2015-10-10 03:18 - 2015-10-10 03:18 - 00002481 _____ C:\Users\Public\Desktop\SlimCleaner Plus.lnk 2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\Users\missg\AppData\Local\Downloaded Installers 2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\ProgramData\SlimWare Utilities Inc 2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner Plus 2015-10-10 03:18 - 2015-10-10 03:18 - 00000000 ____D C:\Program Files\SlimCleaner Plus 2015-10-10 03:17 - 2015-10-12 00:57 - 00000000 ____D C:\Users\missg\AppData\Local\SlimWare Utilities Inc 2015-10-10 03:17 - 2015-10-10 03:17 - 00016056 _____ (SlimWare Utilities, Inc.) C:\WINDOWS\system32\Drivers\SWDUMon.sys 2015-10-09 15:28 - 2015-10-09 15:28 - 02513235 _____ C:\Users\missg\Downloads\takeout-20151008T004828Z.zip 2015-10-09 06:44 - 2015-10-12 03:28 - 00004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B304D8BB-B3F8-449A-9B89-6D69F86BE87E} 2015-10-09 02:16 - 2015-10-09 02:16 - 00002027 _____ C:\Users\Public\Desktop\Avast SafeZone.lnk 2015-10-09 02:16 - 2015-10-09 02:16 - 00001967 _____ C:\Users\Public\Desktop\Avast Pro Antivirus.lnk 2015-10-09 02:16 - 2015-10-09 02:16 - 00000000 ____D C:\Users\missg\AppData\Roaming\AVAST Software 2015-10-09 02:16 - 2015-10-09 02:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2015-10-09 02:15 - 2015-10-09 02:15 - 01049880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2015-10-09 02:15 - 2015-10-09 02:15 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2015-10-09 02:15 - 2015-10-09 02:15 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2015-10-09 02:15 - 2015-10-09 02:15 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2015-10-09 02:15 - 2015-10-09 02:15 - 00153744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2015-10-09 02:15 - 2015-10-09 02:15 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2015-10-09 02:15 - 2015-10-09 02:15 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2015-10-09 02:15 - 2015-10-09 02:15 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2015-10-09 02:15 - 2015-10-09 02:15 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2015-10-09 02:15 - 2015-10-09 02:15 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2015-10-09 02:15 - 2015-10-09 02:15 - 00028144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2015-10-09 02:15 - 2015-10-09 02:15 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update 2015-10-09 02:12 - 2015-10-09 02:12 - 00000000 ____D C:\Program Files\AVAST Software 2015-10-08 23:58 - 2015-10-11 22:33 - 04514008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2015-10-08 23:58 - 2015-10-11 22:33 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll 2015-10-08 21:20 - 2015-10-08 21:20 - 00003322 _____ C:\WINDOWS\System32\Tasks\ASC8_PerformanceMonitor 2015-10-08 21:18 - 2015-10-11 22:42 - 00000274 _____ C:\WINDOWS\Tasks\ASC8_SkipUac_missg.job 2015-10-08 21:18 - 2015-10-08 21:18 - 00002446 _____ C:\WINDOWS\System32\Tasks\ASC8_SkipUac_missg 2015-10-08 21:18 - 2015-10-08 21:18 - 00002258 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk 2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled 2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\Users\missg\AppData\Roaming\Apple Computer 2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8 2015-10-08 21:18 - 2015-10-08 21:18 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} 2015-10-08 21:16 - 2015-10-12 00:57 - 00000000 ____D C:\ProgramData\ProductData 2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Users\missg\AppData\Roaming\IObit 2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Users\missg\AppData\LocalLow\IObit 2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\ProgramData\IObit 2015-10-08 21:16 - 2015-10-11 22:27 - 00000000 ____D C:\Program Files (x86)\IObit 2015-10-08 21:16 - 2015-10-11 16:01 - 00002496 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_missg 2015-10-08 21:16 - 2015-10-11 16:01 - 00000310 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_missg.job 2015-10-08 21:16 - 2015-10-08 21:16 - 00001443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk 2015-10-08 21:16 - 2015-10-08 21:16 - 00001431 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk 2015-10-08 21:16 - 2015-10-08 21:16 - 00000000 ____D C:\Users\missg\AppData\Roaming\ProductData 2015-10-08 21:16 - 2015-10-08 21:16 - 00000000 ____D C:\Users\missg\AppData\IObit 2015-10-08 21:15 - 2015-10-08 21:15 - 11117856 _____ (IObit) C:\Users\missg\Downloads\iobituninstaller.exe 2015-10-08 21:11 - 2015-10-08 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mercerion 2015-10-08 21:11 - 2015-10-08 21:11 - 00000000 ____D C:\Program Files (x86)\WifiDefender 2015-10-08 21:01 - 2015-10-08 22:22 - 00000000 ____D C:\Program Files (x86)\NirSoft 2015-10-08 19:34 - 2015-10-08 19:35 - 07837168 _____ (Safebytes) C:\Users\missg\Downloads\TotalSystemCare-Setup.exe 2015-10-08 19:05 - 2015-10-08 19:05 - 00000000 ____D C:\Users\missg\AppData\Roaming\Search The Web 2015-10-08 18:51 - 2015-07-05 11:08 - 00300704 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2015-10-08 01:58 - 2015-10-08 01:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2015-10-07 21:35 - 2015-10-07 21:35 - 00000000 ____D C:\Users\missg\OneDrive\Documents\word docx CV 2015-10-07 21:11 - 2015-10-07 21:11 - 00000842 _____ C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppRemover.lnk 2015-10-07 18:24 - 2015-10-07 18:24 - 11972672 _____ (OPSWAT, Inc.) C:\Users\missg\Downloads\AppRemover.exe 2015-10-07 10:43 - 2015-10-07 10:43 - 00000085 _____ C:\WINDOWS\wininit.ini 2015-10-06 23:05 - 2015-10-06 23:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2015-10-06 18:41 - 2015-10-06 18:41 - 00000000 ____D C:\Users\missg\AppData\Local\Skype 2015-10-06 18:40 - 2015-10-11 14:51 - 00000000 ____D C:\Users\missg\AppData\Roaming\Skype 2015-10-06 18:40 - 2015-10-06 18:47 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-10-06 18:40 - 2015-10-06 18:40 - 00002640 _____ C:\Users\Public\Desktop\Skype.lnk 2015-10-06 18:40 - 2015-10-06 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-10-06 18:39 - 2015-10-06 18:40 - 00000000 ____D C:\ProgramData\Skype 2015-10-06 18:36 - 2015-10-06 18:36 - 01503872 _____ (Skype Technologies S.A.) C:\Users\missg\Downloads\SkypeSetup.exe 2015-10-06 17:38 - 2015-10-08 19:05 - 00000000 ____D C:\ProgramData\panda_url_filtering 2015-10-06 17:37 - 2015-10-08 22:07 - 00000000 ____D C:\Users\missg\AppData\Roaming\Panda Security 2015-10-06 17:35 - 2015-10-08 22:22 - 00000000 ____D C:\Program Files (x86)\Panda Security 2015-10-06 17:31 - 2015-10-08 22:08 - 00000000 ____D C:\ProgramData\Panda Security 2015-10-06 17:31 - 2015-10-06 17:31 - 02113152 _____ C:\Users\missg\Downloads\PANDAFREEAV.exe 2015-10-06 17:29 - 2015-10-12 03:37 - 00000000 ____D C:\WINDOWS\SysWOW64\Codecs 2015-10-06 17:29 - 2015-10-06 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player - Codec Pack 2015-10-06 17:04 - 2015-10-06 17:05 - 41435632 _____ (Media Player - Codec Pack) C:\Users\missg\Downloads\media.player.codec.pack.v4.3.9.setup.exe 2015-10-06 10:37 - 2015-10-06 10:37 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2015-10-06 05:55 - 2015-10-06 05:55 - 00000000 _____ C:\Recovery.txt 2015-10-06 05:15 - 2015-10-12 01:03 - 00005384 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-10-06 05:15 - 2015-09-15 17:12 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-10-06 05:15 - 2015-09-15 17:12 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-10-06 05:12 - 2015-07-10 11:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2015-10-06 05:11 - 2015-10-06 05:11 - 00000000 ____D C:\ProgramData\USOShared 2015-10-06 05:10 - 2015-10-12 00:55 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-10-06 05:09 - 2015-10-06 05:09 - 00000000 __SHD C:\Recovery 2015-10-06 05:03 - 2015-10-11 22:36 - 00012844 _____ C:\WINDOWS\setupact.log 2015-10-06 05:03 - 2015-10-11 22:35 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 ____D C:\Program Files\Realtek 2015-10-06 05:03 - 2015-10-06 05:03 - 00000000 _____ C:\WINDOWS\setuperr.log 2015-10-06 04:58 - 2015-10-06 04:58 - 00001344 _____ C:\WINDOWS\lsasetup.log 2015-10-06 04:57 - 2015-10-09 09:13 - 00189240 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-10-06 04:43 - 2015-10-09 02:11 - 00000000 ____D C:\ProgramData\AVAST Software 2015-10-06 04:33 - 2015-10-06 04:33 - 00000000 ____D C:\Users\missg\AppData\Local\NetworkTiles 2015-10-06 04:13 - 2015-10-06 04:15 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-10-06 04:13 - 2015-08-26 18:37 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-10-06 04:07 - 2015-10-06 04:07 - 00000000 ____D C:\Program Files\Common Files\AV 2015-10-06 04:07 - 2015-10-06 04:05 - 00450709 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20151006-040715.backup 2015-10-06 04:05 - 2015-10-06 03:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20151006-040528.backup 2015-10-06 03:21 - 2015-10-07 10:43 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2015-10-06 03:21 - 2015-10-06 03:21 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2015-10-06 03:19 - 2015-10-05 21:35 - 00000000 ___DC C:\WINDOWS\Panther 2015-10-06 03:18 - 2015-10-06 03:18 - 00028672 ___SH C:\WINDOWS\system32\config\BCD-Template.LOG 2015-10-06 03:18 - 2015-10-06 03:18 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2015-10-06 03:17 - 2015-10-06 03:17 - 00000000 ____D C:\Program Files\Synaptics 2015-10-06 03:16 - 2015-10-06 03:16 - 00000000 ____D C:\WINDOWS\Setup 2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\WINDOWS\OCR 2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files\Reference Assemblies 2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files\MSBuild 2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2015-10-06 03:12 - 2015-10-06 03:12 - 00000000 ____D C:\Program Files (x86)\MSBuild 2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2015-10-06 03:11 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\SysWOW64\0409 2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\winrm 2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\WCN 2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\slmgr 2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\0409 2015-10-06 03:10 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\DigitalLocker 2015-10-06 03:05 - 2015-10-06 05:06 - 00001189 _____ C:\WINDOWS\DtcInstall.log 2015-10-06 03:04 - 2015-10-06 05:55 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2015-10-06 03:04 - 2015-10-06 03:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2015-10-06 03:04 - 2015-10-06 03:00 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat 2015-10-06 03:04 - 2015-10-06 03:00 - 00215943 _____ C:\WINDOWS\system32\dssec.dat 2015-10-06 03:04 - 2015-10-06 03:00 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2015-10-06 03:04 - 2015-10-06 03:00 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services 2015-10-06 03:04 - 2015-10-06 03:00 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2015-10-06 03:04 - 2015-10-06 03:00 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat 2015-10-06 03:04 - 2015-10-06 03:00 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat 2015-10-06 03:04 - 2015-10-06 03:00 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam 2015-10-06 03:04 - 2015-10-06 03:00 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat 2015-10-06 03:04 - 2015-10-06 03:00 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat 2015-10-06 03:04 - 2015-10-06 03:00 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol 2015-10-06 03:04 - 2015-10-06 03:00 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json 2015-10-06 03:04 - 2015-10-06 03:00 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT 2015-10-06 03:04 - 2015-10-06 03:00 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT 2015-10-06 03:04 - 2015-10-06 03:00 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks 2015-10-06 03:04 - 2015-10-06 03:00 - 00000219 _____ C:\WINDOWS\system.ini 2015-10-06 03:04 - 2015-10-06 03:00 - 00000092 _____ C:\WINDOWS\win.ini 2015-10-06 03:03 - 2015-10-12 03:36 - 00000000 ____D C:\WINDOWS\system32\sru 2015-10-06 03:03 - 2015-10-11 18:38 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-10-06 03:03 - 2015-10-10 06:19 - 00000000 ____D C:\WINDOWS\rescache 2015-10-06 03:03 - 2015-10-07 18:57 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-10-06 03:03 - 2015-10-06 05:12 - 00000000 ____D C:\WINDOWS\system32\spool 2015-10-06 03:03 - 2015-10-06 05:12 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2015-10-06 03:03 - 2015-10-06 05:11 - 00000000 ____D C:\ProgramData\USOPrivate 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___SD C:\WINDOWS\system32\F12 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\oobe 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\Dism 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\Provisioning 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\WINDOWS\L2Schemas 2015-10-06 03:03 - 2015-10-06 05:10 - 00000000 ____D C:\Program Files\Windows Journal 2015-10-06 03:03 - 2015-10-06 05:06 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2015-10-06 03:03 - 2015-10-06 03:17 - 00000000 ____D C:\WINDOWS\appcompat 2015-10-06 03:03 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2015-10-06 03:03 - 2015-10-06 03:11 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\system32\dsc 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\SysWOW64\Com 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\setup 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\MUI 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\migwiz 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\system32\Com 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\IME 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\Help 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Windows Defender 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Common Files\System 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2015-10-06 03:03 - 2015-10-06 03:10 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\WINDOWS\Media 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 __RHD C:\Users\Public\Libraries 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___SD C:\WINDOWS\system32\Nui 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\WINDOWS\Offline Web Pages 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\WINDOWS\DesktopTileResources 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-CS 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sppui 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Recovery 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\MSDRM 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\InstallShield 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\fr-CA 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\es-MX 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\WinMetadata 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\th-TH 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sppui 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\Recovery 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MsDtc 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MSDRM 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\icsxml 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ias 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\he-IL 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\fr-CA 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\et-EE 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\es-MX 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\en-GB 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\downlevel 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\Bthprops 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\system\Speech 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\ShellNew 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\Registration 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\Cursors 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\WINDOWS\addins 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Windows Portable Devices 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files\Common Files\Services 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2015-10-06 03:03 - 2015-10-06 03:04 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __SHD C:\Program Files\Windows Sidebar 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\WINDOWS\system32\Configuration 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\Program Files\WindowsPowerShell 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ___SD C:\Program Files (x86)\WindowsPowerShell 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Web 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Vss 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\tracing 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\TAPI 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\WindowsPowerShell 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\sru 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\spp 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech_OneCore 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\restore 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\RasToast 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\ras 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\networklist 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Licenses 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SystemResources 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\winevt 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\WindowsPowerShell 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\spp 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Speech_OneCore 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Speech 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\RasToast 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\ras 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\ProximityToast 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\PointOfService 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\networklist 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Macromed 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Licenses 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\Ipmi 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\IME 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\config\Journal 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\AppLocker 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\System 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Speech_OneCore 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Speech 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SKB 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\security 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\schemas 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\SchCache 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Resources 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\PLA 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Performance 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\InputMethod 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Globalization 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\Branding 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\ProgramData\Comms 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\Program Files\Windows NT 2015-10-06 03:03 - 2015-10-06 03:03 - 00000000 ____D C:\Program Files (x86)\Windows NT 2015-10-06 03:03 - 2015-10-05 21:50 - 00000000 ___RD C:\WINDOWS\PrintDialog 2015-10-06 03:03 - 2015-10-05 21:50 - 00000000 ___RD C:\WINDOWS\MiracastView 2015-10-06 03:03 - 2015-10-05 21:48 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2015-10-06 03:03 - 2015-10-05 21:34 - 00000000 ____D C:\WINDOWS\system32\restore 2015-10-06 02:52 - 2015-10-06 04:16 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-10-06 02:45 - 2015-10-11 22:43 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2015-10-06 02:45 - 2015-10-06 05:10 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2015-10-06 02:45 - 2015-10-06 05:09 - 00000000 __RHD C:\Users\Default 2015-10-06 02:45 - 2015-10-06 03:10 - 00000000 ____D C:\WINDOWS\servicing 2015-10-06 02:45 - 2015-10-06 03:03 - 00000000 ____D C:\WINDOWS\system32\SMI 2015-10-06 02:45 - 2015-07-10 10:11 - 00000164 _____ C:\WINDOWS\system32\config\FP 2015-10-06 02:08 - 2015-10-11 22:44 - 00404828 _____ C:\WINDOWS\PFRO.log 2015-10-05 22:23 - 2015-10-05 22:23 - 00002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-10-05 22:23 - 2015-10-05 22:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-10-05 22:22 - 2015-10-12 03:27 - 00000928 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-10-05 22:22 - 2015-10-12 00:58 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-10-05 22:22 - 2015-10-05 22:23 - 00000000 ____D C:\Users\missg\AppData\Local\Google 2015-10-05 22:22 - 2015-10-05 22:23 - 00000000 ____D C:\Program Files (x86)\Google 2015-10-05 22:22 - 2015-10-05 22:22 - 00003986 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-10-05 22:22 - 2015-10-05 22:22 - 00003754 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-10-05 22:14 - 2015-10-05 22:22 - 00929872 _____ (Google Inc.) C:\Users\missg\Downloads\ChromeSetup.exe 2015-10-05 22:08 - 2015-10-10 00:07 - 00000000 ____D C:\Users\missg\AppData\Local\PackageStaging 2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\Users\missg\AppData\Roaming\Macromedia 2015-10-05 21:54 - 2015-10-05 21:54 - 00000000 ____D C:\Users\missg\AppData\Local\MicrosoftEdge 2015-10-05 21:53 - 2015-10-11 22:42 - 00000000 ____D C:\Users\missg\OneDrive 2015-10-05 21:53 - 2015-10-05 21:54 - 00002338 _____ C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-10-05 21:53 - 2015-10-05 21:53 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2015-10-05 21:52 - 2015-10-06 18:33 - 00000000 ____D C:\Users\missg\AppData\Local\Comms 2015-10-05 21:51 - 2015-10-08 08:58 - 00000000 ____D C:\Users\missg\AppData\Local\Publishers 2015-10-05 21:49 - 2015-10-11 18:33 - 00000000 ____D C:\Users\missg\AppData\Local\Packages 2015-10-05 21:49 - 2015-10-05 21:49 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7E5LF1P_defaultuser0_HistoryPrediction.bin 2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Roaming\Adobe 2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Local\VirtualStore 2015-10-05 21:49 - 2015-10-05 21:49 - 00000000 ____D C:\Users\missg\AppData\Local\TileDataLayer 2015-10-05 21:41 - 2015-10-12 00:56 - 00000000 ____D C:\Users\missg 2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 __RSD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-10-05 21:41 - 2015-10-06 03:04 - 00000000 ____D C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-05 21:41 - 2015-10-05 21:49 - 00000000 ___RD C:\Users\missg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-05 21:41 - 2015-10-05 21:41 - 00000020 ___SH C:\Users\missg\ntuser.ini 2015-10-05 21:33 - 2015-10-12 03:38 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log 2015-10-01 02:50 - 2015-09-17 07:50 - 02464216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2015-10-01 02:50 - 2015-09-17 07:49 - 06487248 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2015-10-01 02:50 - 2015-09-17 07:48 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2015-10-01 02:50 - 2015-09-17 07:48 - 02494712 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2015-10-01 02:50 - 2015-09-17 07:28 - 05120056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2015-10-01 02:50 - 2015-09-17 07:28 - 02154808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2015-10-01 02:50 - 2015-09-17 07:12 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-10-01 02:50 - 2015-09-17 07:07 - 21875712 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-10-01 02:50 - 2015-09-17 07:04 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2015-10-01 02:50 - 2015-09-17 07:00 - 24595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-10-01 02:50 - 2015-09-17 07:00 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2015-10-01 02:50 - 2015-09-17 07:00 - 02417664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-10-01 02:50 - 2015-09-17 06:54 - 03781120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2015-10-01 02:50 - 2015-09-17 06:53 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2015-10-01 02:50 - 2015-09-17 06:51 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-10-01 02:50 - 2015-09-17 06:51 - 02660864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2015-10-01 02:50 - 2015-09-17 06:49 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-10-01 02:50 - 2015-09-17 06:47 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2015-10-01 02:50 - 2015-09-17 06:45 - 19325440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-10-01 02:50 - 2015-09-17 06:42 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2015-10-01 02:50 - 2015-09-17 06:40 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2015-10-01 02:50 - 2015-09-17 06:40 - 01918464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-10-01 02:50 - 2015-09-17 06:37 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-10-01 02:50 - 2015-09-17 06:35 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2015-10-01 02:50 - 2015-09-17 06:31 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2015-10-01 02:49 - 2015-09-25 00:17 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-10-01 02:49 - 2015-09-25 00:08 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-10-01 02:49 - 2015-09-25 00:06 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll 2015-10-01 02:49 - 2015-09-24 23:42 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-10-01 02:49 - 2015-09-17 07:50 - 01563392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2015-10-01 02:49 - 2015-09-17 07:49 - 08020816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-10-01 02:49 - 2015-09-17 07:49 - 01563472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2015-10-01 02:49 - 2015-09-17 07:49 - 00894256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys 2015-10-01 02:49 - 2015-09-17 07:48 - 02432336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2015-10-01 02:49 - 2015-09-17 07:48 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll 2015-10-01 02:49 - 2015-09-17 07:48 - 01983824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2015-10-01 02:49 - 2015-09-17 07:48 - 00809352 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2015-10-01 02:49 - 2015-09-17 07:48 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2015-10-01 02:49 - 2015-09-17 07:48 - 00555768 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll 2015-10-01 02:49 - 2015-09-17 07:48 - 00537080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2015-10-01 02:49 - 2015-09-17 07:47 - 01397088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2015-10-01 02:49 - 2015-09-17 07:44 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2015-10-01 02:49 - 2015-09-17 07:43 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2015-10-01 02:49 - 2015-09-17 07:37 - 01295712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2015-10-01 02:49 - 2015-09-17 07:27 - 01766952 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2015-10-01 02:49 - 2015-09-17 07:26 - 02446648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2015-10-01 02:49 - 2015-09-17 07:26 - 00646672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2015-10-01 02:49 - 2015-09-17 07:25 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2015-10-01 02:49 - 2015-09-17 07:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2015-10-01 02:49 - 2015-09-17 07:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2015-10-01 02:49 - 2015-09-17 07:06 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2015-10-01 02:49 - 2015-09-17 07:05 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2015-10-01 02:49 - 2015-09-17 07:04 - 00910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2015-10-01 02:49 - 2015-09-17 06:57 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2015-10-01 02:49 - 2015-09-17 06:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2015-10-01 02:49 - 2015-09-17 06:55 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-10-01 02:49 - 2015-09-17 06:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2015-10-01 02:49 - 2015-09-17 06:52 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2015-10-01 02:49 - 2015-09-17 06:52 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2015-10-01 02:49 - 2015-09-17 06:51 - 01203712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2015-10-01 02:49 - 2015-09-17 06:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2015-10-01 02:49 - 2015-09-17 06:49 - 01010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2015-10-01 02:49 - 2015-09-17 06:48 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2015-10-01 02:49 - 2015-09-17 06:48 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2015-10-01 02:49 - 2015-09-17 06:47 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2015-10-01 02:49 - 2015-09-17 06:45 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-10-01 02:49 - 2015-09-17 06:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2015-10-01 02:49 - 2015-09-17 06:45 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2015-10-01 02:49 - 2015-09-17 06:44 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2015-10-01 02:49 - 2015-09-17 06:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2015-10-01 02:49 - 2015-09-17 06:40 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2015-10-01 02:49 - 2015-09-17 06:39 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2015-10-01 02:49 - 2015-09-17 06:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2015-10-01 02:49 - 2015-09-17 06:35 - 02207232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-10-01 02:49 - 2015-09-17 06:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2015-10-01 02:49 - 2015-09-17 06:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2015-10-01 02:49 - 2015-09-17 06:32 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-10-01 02:49 - 2015-09-17 06:29 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2015-10-01 02:49 - 2015-09-17 06:29 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2015-10-01 02:49 - 2015-09-17 06:26 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2015-10-01 02:49 - 2015-09-17 06:16 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2015-10-01 02:49 - 2015-09-13 03:05 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2015-10-01 02:48 - 2015-09-25 01:13 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2015-10-01 02:48 - 2015-09-25 00:24 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2015-10-01 02:48 - 2015-09-25 00:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2015-10-01 02:48 - 2015-09-25 00:23 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2015-10-01 02:48 - 2015-09-25 00:07 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-10-01 02:48 - 2015-09-25 00:01 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2015-10-01 02:48 - 2015-09-25 00:00 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2015-10-01 02:48 - 2015-09-25 00:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll 2015-10-01 02:48 - 2015-09-24 23:43 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2015-10-01 02:48 - 2015-09-24 23:25 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2015-10-01 02:48 - 2015-09-24 23:25 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll 2015-10-01 02:48 - 2015-09-17 07:50 - 00099664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2015-10-01 02:48 - 2015-09-17 07:49 - 00553808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2015-10-01 02:48 - 2015-09-17 07:48 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2015-10-01 02:48 - 2015-09-17 07:48 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2015-10-01 02:48 - 2015-09-17 07:48 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2015-10-01 02:48 - 2015-09-17 07:48 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2015-10-01 02:48 - 2015-09-17 07:48 - 00395088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2015-10-01 02:48 - 2015-09-17 07:48 - 00332624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2015-10-01 02:48 - 2015-09-17 07:48 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2015-10-01 02:48 - 2015-09-17 07:39 - 00081488 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-10-01 02:48 - 2015-09-17 07:28 - 01357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2015-10-01 02:48 - 2015-09-17 07:28 - 00441168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2015-10-01 02:48 - 2015-09-17 07:27 - 00454512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll 2015-10-01 02:48 - 2015-09-17 07:26 - 01895568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll 2015-10-01 02:48 - 2015-09-17 07:26 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2015-10-01 02:48 - 2015-09-17 07:26 - 00434376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2015-10-01 02:48 - 2015-09-17 07:26 - 00428128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2015-10-01 02:48 - 2015-09-17 07:09 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2015-10-01 02:48 - 2015-09-17 07:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2015-10-01 02:48 - 2015-09-17 07:06 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll 2015-10-01 02:48 - 2015-09-17 07:06 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2015-10-01 02:48 - 2015-09-17 07:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2015-10-01 02:48 - 2015-09-17 07:00 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll 2015-10-01 02:48 - 2015-09-17 06:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2015-10-01 02:48 - 2015-09-17 06:57 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2015-10-01 02:48 - 2015-09-17 06:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2015-10-01 02:48 - 2015-09-17 06:57 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2015-10-01 02:48 - 2015-09-17 06:56 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2015-10-01 02:48 - 2015-09-17 06:55 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll 2015-10-01 02:48 - 2015-09-17 06:55 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2015-10-01 02:48 - 2015-09-17 06:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2015-10-01 02:48 - 2015-09-17 06:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2015-10-01 02:48 - 2015-09-17 06:54 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2015-10-01 02:48 - 2015-09-17 06:52 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2015-10-01 02:48 - 2015-09-17 06:52 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2015-10-01 02:48 - 2015-09-17 06:52 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2015-10-01 02:48 - 2015-09-17 06:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll 2015-10-01 02:48 - 2015-09-17 06:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2015-10-01 02:48 - 2015-09-17 06:51 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-10-01 02:48 - 2015-09-17 06:51 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2015-10-01 02:48 - 2015-09-17 06:50 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2015-10-01 02:48 - 2015-09-17 06:50 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys 2015-10-01 02:48 - 2015-09-17 06:48 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2015-10-01 02:48 - 2015-09-17 06:48 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2015-10-01 02:48 - 2015-09-17 06:48 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2015-10-01 02:48 - 2015-09-17 06:48 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2015-10-01 02:48 - 2015-09-17 06:47 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2015-10-01 02:48 - 2015-09-17 06:47 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2015-10-01 02:48 - 2015-09-17 06:46 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2015-10-01 02:48 - 2015-09-17 06:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2015-10-01 02:48 - 2015-09-17 06:46 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2015-10-01 02:48 - 2015-09-17 06:46 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2015-10-01 02:48 - 2015-09-17 06:46 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2015-10-01 02:48 - 2015-09-17 06:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll 2015-10-01 02:48 - 2015-09-17 06:45 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2015-10-01 02:48 - 2015-09-17 06:45 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2015-10-01 02:48 - 2015-09-17 06:44 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2015-10-01 02:48 - 2015-09-17 06:43 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2015-10-01 02:48 - 2015-09-17 06:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2015-10-01 02:48 - 2015-09-17 06:41 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2015-10-01 02:48 - 2015-09-17 06:37 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2015-10-01 02:48 - 2015-09-17 06:34 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2015-10-01 02:48 - 2015-09-17 06:32 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2015-10-01 02:48 - 2015-09-17 06:32 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll 2015-10-01 02:48 - 2015-09-17 06:32 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2015-10-01 02:48 - 2015-09-17 06:31 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2015-10-01 02:48 - 2015-09-17 06:30 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2015-10-01 02:48 - 2015-09-17 06:29 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2015-10-01 02:48 - 2015-09-17 06:29 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2015-10-01 02:48 - 2015-09-13 02:41 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2015-10-01 02:47 - 2015-09-25 00:05 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll 2015-10-01 02:47 - 2015-09-25 00:00 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll 2015-10-01 02:47 - 2015-09-24 23:53 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2015-10-01 02:47 - 2015-09-24 23:43 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2015-10-01 02:47 - 2015-09-24 23:25 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll 2015-10-01 02:47 - 2015-09-24 23:25 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll 2015-10-01 02:47 - 2015-09-24 23:25 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll 2015-10-01 02:47 - 2015-09-24 23:19 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2015-10-01 02:47 - 2015-09-19 06:14 - 00102304 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll 2015-10-01 02:47 - 2015-09-17 07:50 - 00088384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2015-10-01 02:47 - 2015-09-17 07:37 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2015-10-01 02:47 - 2015-09-17 07:28 - 00074880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2015-10-01 02:47 - 2015-09-17 07:08 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll 2015-10-01 02:47 - 2015-09-17 07:08 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe 2015-10-01 02:47 - 2015-09-17 07:03 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll 2015-10-01 02:47 - 2015-09-17 07:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2015-10-01 02:47 - 2015-09-17 07:00 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2015-10-01 02:47 - 2015-09-17 06:52 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2015-10-01 02:47 - 2015-09-17 06:50 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys 2015-10-01 02:47 - 2015-09-17 06:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll 2015-10-01 02:47 - 2015-09-17 06:49 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll 2015-10-01 02:45 - 2015-09-25 01:35 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll 2015-10-01 02:45 - 2015-09-25 01:34 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll 2015-10-01 02:45 - 2015-09-25 00:34 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll 2015-10-01 02:45 - 2015-09-25 00:34 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll 2015-10-01 02:45 - 2015-09-25 00:01 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll 2015-10-01 02:45 - 2015-09-25 00:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll 2015-10-01 02:45 - 2015-09-24 23:24 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll 2015-10-01 02:45 - 2015-09-17 07:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2015-10-01 02:45 - 2015-09-17 07:48 - 00406864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2015-10-01 02:45 - 2015-09-17 07:48 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2015-10-01 02:45 - 2015-09-17 07:28 - 00407608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2015-10-01 02:45 - 2015-09-17 07:11 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2015-10-01 02:45 - 2015-09-17 07:09 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2015-10-01 02:45 - 2015-09-17 07:04 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2015-10-01 02:45 - 2015-09-17 07:03 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2015-10-01 02:45 - 2015-09-17 06:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll 2015-10-01 02:45 - 2015-09-17 06:55 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll 2015-10-01 02:45 - 2015-09-17 06:52 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll 2015-10-01 02:45 - 2015-09-17 06:52 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2015-10-01 02:45 - 2015-09-17 06:51 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2015-10-01 02:45 - 2015-09-17 06:50 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2015-10-01 02:45 - 2015-09-17 06:49 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2015-10-01 02:45 - 2015-09-17 06:49 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll 2015-10-01 02:45 - 2015-09-17 06:49 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll 2015-10-01 02:45 - 2015-09-17 06:49 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll 2015-10-01 02:45 - 2015-09-17 06:49 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll 2015-10-01 02:45 - 2015-09-17 06:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2015-10-01 02:45 - 2015-09-17 06:45 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2015-10-01 02:45 - 2015-09-17 06:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2015-10-01 02:45 - 2015-09-17 06:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll 2015-10-01 02:45 - 2015-09-17 06:43 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2015-10-01 02:45 - 2015-09-17 06:33 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2015-10-01 02:44 - 2015-09-17 07:10 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2015-10-01 02:44 - 2015-09-17 07:03 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2015-10-01 02:44 - 2015-09-17 07:03 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2015-10-01 02:44 - 2015-09-17 07:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2015-10-01 02:44 - 2015-09-17 07:02 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2015-10-01 02:44 - 2015-09-17 06:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll 2015-10-01 02:44 - 2015-09-17 06:55 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll 2015-10-01 02:44 - 2015-09-17 06:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-10-01 02:44 - 2015-09-17 06:52 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2015-10-01 02:44 - 2015-09-17 06:50 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll 2015-10-01 02:44 - 2015-09-17 06:50 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll 2015-10-01 02:44 - 2015-09-17 06:49 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll 2015-10-01 02:44 - 2015-09-17 06:46 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll 2015-10-01 02:44 - 2015-09-17 06:39 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-10-01 02:44 - 2015-09-17 06:36 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll 2015-10-01 02:44 - 2015-09-17 06:28 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2015-09-18 11:14 - 2015-09-18 11:14 - 00047096 _____ C:\WINDOWS\SysWOW64\DiscHandler.exe ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-10-06 05:55 - 2015-08-12 18:56 - 00000000 ___HD C:\$SysReset Some files in TEMP: ==================== C:\Users\missg\AppData\Local\Temp\BSvcProcessor.exe C:\Users\missg\AppData\Local\Temp\BSvcUpdater.exe C:\Users\missg\AppData\Local\Temp\fupxsehn.dll C:\Users\missg\AppData\Local\Temp\scpF847.tmp.exe C:\Users\missg\AppData\Local\Temp\{AF2B58C9-D569-4BAE-94F0-49E88695FD51}.exe C:\Users\missg\AppData\Local\Temp\{BEA8507A-F470-4150-B29A-F70EFCB5680D}.exe ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-10-06 04:56 ==================== End of FRST.txt ============================ [/QUOTE]
Insert quotes…
Verification
Post reply
Top