FoXTeR

Additional scan result of Farbar Recovery Scan Tool (x64) Version:04-11-2015 Ran by Alex (2015-11-05 15:56:31) Running from C:\Users\Alex\Downloads Windows 10 Home (X64) (2015-10-24 12:07:21) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1261255005-3633135201-1909299041-500 - Administrator - Disabled) => C:\Users\Administrator Alex (S-1-5-21-1261255005-3633135201-1909299041-1001 - Administrator - Enabled) => C:\Users\Alex DefaultAccount (S-1-5-21-1261255005-3633135201-1909299041-503 - Limited - Disabled) Guest (S-1-5-21-1261255005-3633135201-1909299041-501 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: ESET Smart Security 9.0.318.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: ESET Smart Security 9.0.318.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834} FW: ESET Personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) CCleaner (HKLM\...\CCleaner) (Version: 5.11 - Piriform) ESET Smart Security (HKLM\...\{11994064-51F2-45DF-A83E-539B4BFE3F5A}) (Version: 9.0.318.0 - ESET, spol. s r.o.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.) Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden Malwarebytes Anti-Exploit version 1.07.1.1015 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.07.1.1015 - Malwarebytes) Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.6001.1034 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 42.0 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 en-GB)) (Version: 42.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla) Mozilla Thunderbird 38.3.0 (x86 en-GB) (HKLM-x32\...\Mozilla Thunderbird 38.3.0 (x86 en-GB)) (Version: 38.3.0 - Mozilla) Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6001.1034 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.6001.1034 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6001.1034 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7564 - Realtek Semiconductor Corp.) Spybot Anti-Beacon (HKLM-x32\...\{419A7FCF-93E1-474D-BFE9-987CF3F90C88}_is1) (Version: 1.4 - Safer-Networking Ltd.) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-1261255005-3633135201-1909299041-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation) ==================== Restore Points ========================= 04-11-2015 03:29:37 Removed TorGuard Proxy 05-11-2015 15:07:52 Removed Google Drive ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2015-10-24 12:38 - 2015-10-24 13:07 - 00002214 ____R C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 choice.microsoft.com 127.0.0.1 choice.microsoft.com.nstac.net 127.0.0.1 df.telemetry.microsoft.com 127.0.0.1 oca.telemetry.microsoft.com 127.0.0.1 oca.telemetry.microsoft.com.nsatc.net 127.0.0.1 redir.metaservices.microsoft.com 127.0.0.1 reports.wes.df.telemetry.microsoft.com 127.0.0.1 services.wes.df.telemetry.microsoft.com 127.0.0.1 settings-sandbox.data.microsoft.com 127.0.0.1 settings-win.data.microsoft.com 127.0.0.1 sqm.df.telemetry.microsoft.com 127.0.0.1 sqm.telemetry.microsoft.com 127.0.0.1 sqm.telemetry.microsoft.com.nsatc.net 127.0.0.1 telecommand.telemetry.microsoft.com 127.0.0.1 telecommand.telemetry.microsoft.com.nsatc.net 127.0.0.1 telemetry.appex.bing.net 127.0.0.1 telemetry.microsoft.com 127.0.0.1 telemetry.urs.microsoft.com 127.0.0.1 vortex-sandbox.data.microsoft.com 127.0.0.1 vortex-win.data.microsoft.com 127.0.0.1 vortex.data.microsoft.com 127.0.0.1 watson.telemetry.microsoft.com 127.0.0.1 watson.telemetry.microsoft.com.nsatc.net 127.0.0.1 watson.ppe.telemetry.microsoft.com 127.0.0.1 wes.df.telemetry.microsoft.com ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {10513C3F-9129-46A9-87A1-D84173E298E4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-10-02] (Microsoft Corporation) Task: {17C452B3-F796-4C94-9194-8EDB0D7992F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-04] (Google Inc.) Task: {1F8CDCA8-EC24-40C1-B192-F35EC33609F0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-10-15] (Microsoft Corporation) Task: {478303D5-5306-4D16-ADF1-0DF344736C42} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-10-19] (Piriform Ltd) Task: {CFFB6C60-837F-40FA-8B47-09113739C107} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-10-15] (Microsoft Corporation) Task: {D600AF9F-D51C-4C51-8AD4-30EFCBCFA1E7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-04] (Google Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2015-07-10 03:33 - 2015-07-10 03:33 - 00028160 ____N () C:\WINDOWS\SYSTEM32\efsext.dll 2015-09-10 05:12 - 2015-09-10 05:12 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll 2015-10-27 12:59 - 2015-10-15 20:45 - 00161448 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll 2015-10-18 04:13 - 2015-09-17 06:48 - 02494712 ____N () C:\WINDOWS\system32\CoreUIComponents.dll 2015-10-18 04:13 - 2015-09-17 06:48 - 02494712 ____N () C:\WINDOWS\System32\CoreUIComponents.dll 2015-10-27 13:04 - 2015-10-27 13:04 - 08901800 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll 2015-10-18 04:12 - 2015-09-17 05:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-07-10 03:13 - 2015-07-10 03:13 - 00143360 ____N () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll 2015-10-18 04:13 - 2015-09-17 05:44 - 06569472 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2015-10-18 04:12 - 2015-09-17 05:42 - 00471040 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-10-18 04:12 - 2015-09-17 05:42 - 01808384 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-10-18 04:13 - 2015-09-17 05:43 - 02274816 ____N () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00133184 _____ () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe 2015-11-05 15:11 - 2015-10-20 14:55 - 01908040 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll 2015-11-05 15:11 - 2015-10-20 14:55 - 00093512 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00143296 _____ () C:\Program Files (x86)\VideoLAN\VLC\libvlc.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 02631616 _____ () C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00554944 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00041920 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00039872 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00086464 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll 2015-04-13 13:56 - 2015-04-13 13:56 - 00070675 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 02158528 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00114112 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00245184 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00089536 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libvdr_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00055744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00072128 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libsmooth_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00593344 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libhttplive_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00771520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libdash_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00131520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00052672 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\librar_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00023488 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00145856 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 01566656 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00332736 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 01264064 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00024512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libwin_msg_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00069568 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00048576 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00242112 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 12001728 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll 2015-04-13 13:57 - 2015-04-13 13:57 - 00108992 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00046528 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00261056 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00027072 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00304576 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 01291200 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00754624 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00344512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00028608 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00036800 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00052160 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00456128 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00035776 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libg711_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00024512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00157632 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 01549248 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00356288 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00028096 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00028096 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00031680 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00363456 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll 2015-04-13 14:00 - 2015-04-13 14:00 - 00121792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00028608 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 13522368 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00772544 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00038848 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00030144 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00022464 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00702400 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libswscale_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00027072 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00036800 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00140224 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00125376 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_sse2_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00176576 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00064448 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_mmx_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00067520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00028608 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 01504704 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00027584 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00028096 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00024512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00022464 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00030656 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00022976 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00027584 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00029632 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00029120 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00022464 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00037312 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00024512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll 2015-04-13 13:58 - 2015-04-13 13:58 - 00024000 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00034240 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00023488 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll 2015-04-13 13:59 - 2015-04-13 13:59 - 00022976 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1261255005-3633135201-1909299041-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 8.8.8.8 - 8.8.4.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1261255005-3633135201-1909299041-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{DACC57F9-E7B1-4038-90FF-EE381CE66398}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{BF2490B2-D861-4C63-8691-C2403EBC7150}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{AC3B77D5-2814-47D7-8D47-75C9FD528847}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A301FE8C-F6AC-4323-9E81-521854182141}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/05/2015 03:09:25 PM) (Source: ESENT) (EventID: 413) (User: ) Description: SettingSyncHost (6900) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032. Error: (11/05/2015 03:09:25 PM) (Source: ESENT) (EventID: 488) (User: ) Description: SettingSyncHost (6900) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ". The create file operation will fail with error -1032 (0xfffffbf8). Error: (11/05/2015 03:09:14 PM) (Source: ESENT) (EventID: 413) (User: ) Description: SettingSyncHost (6900) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032. Error: (11/05/2015 03:09:14 PM) (Source: ESENT) (EventID: 488) (User: ) Description: SettingSyncHost (6900) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ". The create file operation will fail with error -1032 (0xfffffbf8). Error: (11/05/2015 03:09:04 PM) (Source: ESENT) (EventID: 413) (User: ) Description: SettingSyncHost (6900) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032. Error: (11/05/2015 03:09:04 PM) (Source: ESENT) (EventID: 488) (User: ) Description: SettingSyncHost (6900) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ". The create file operation will fail with error -1032 (0xfffffbf8). Error: (11/05/2015 03:08:54 PM) (Source: ESENT) (EventID: 413) (User: ) Description: SettingSyncHost (6900) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032. Error: (11/05/2015 03:08:54 PM) (Source: ESENT) (EventID: 488) (User: ) Description: SettingSyncHost (6900) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ". The create file operation will fail with error -1032 (0xfffffbf8). Error: (11/05/2015 03:08:43 PM) (Source: ESENT) (EventID: 413) (User: ) Description: SettingSyncHost (6900) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032. Error: (11/05/2015 03:08:43 PM) (Source: ESENT) (EventID: 488) (User: ) Description: SettingSyncHost (6900) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ". The create file operation will fail with error -1032 (0xfffffbf8). System errors: ============= Error: (11/05/2015 02:53:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-BLPCOLT) Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39} Error: (11/05/2015 02:53:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-BLPCOLT) Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39} Error: (11/05/2015 02:53:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-BLPCOLT) Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39} Error: (11/05/2015 02:53:43 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (11/05/2015 02:53:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The User Data Access_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (11/05/2015 02:53:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The User Data Storage_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (11/05/2015 02:53:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Contact Data_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (11/05/2015 02:53:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Sync Host_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (11/05/2015 02:28:00 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY) Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001. Error: (11/05/2015 02:28:00 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY) Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001. ==================== Memory info =========================== Processor: AMD A10-7300 Radeon R6, 10 Compute Cores 4C+6G Percentage of memory in use: 28% Total physical RAM: 7114.26 MB Available physical RAM: 5120.79 MB Total Virtual: 8266.26 MB Available Virtual: 6029.05 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:914.9 GB) (Free:7.82 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: CD1873CD) Partition: GPT. ==================== End of Addition.txt ============================

2015-10-18 04:16 - 2015-10-18 04:16 - 00153496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00152600 _____ C:\WINDOWS\SysWOW64\atieah32.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 00152072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00144904 _____ C:\WINDOWS\system32\amdhdl64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00143088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00140240 _____ C:\WINDOWS\system32\samu_krnl_ci.sbin 2015-10-18 04:16 - 2015-10-18 04:16 - 00138832 _____ C:\WINDOWS\system32\samu_krnl_isv_ci.sbin 2015-10-18 04:16 - 2015-10-18 04:16 - 00138416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00133632 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00130104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00117640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00113920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00112648 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00111872 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00111640 _____ C:\WINDOWS\system32\hsa-thunk64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00103424 _____ (Advanced Micro Devices) C:\WINDOWS\system32\DelayAPO.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00102912 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\AtihdWT6.sys 2015-10-18 04:16 - 2015-10-18 04:16 - 00100816 _____ C:\WINDOWS\system32\ativce02.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00099328 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00091144 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00089560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00088032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00085512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00081200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00081200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00078360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00078360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00073744 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00072712 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00068120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00066048 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00060952 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00060936 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00059928 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 00057880 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00053760 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00049672 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00047664 _____ C:\WINDOWS\system32\kapp_ci.sbin 2015-10-18 04:16 - 2015-10-18 04:16 - 00043536 _____ C:\WINDOWS\system32\kapp_si.sbin 2015-10-18 04:16 - 2015-10-18 04:16 - 00038424 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00014344 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00012824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll 2015-10-18 04:15 - 2015-10-18 04:15 - 09890832 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll 2015-10-18 04:15 - 2015-10-18 04:15 - 00751632 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsPer.sys 2015-10-18 04:15 - 2015-10-18 04:15 - 00599240 _____ (Qualcomm Atheros) C:\WINDOWS\system32\Drivers\btfilter.sys 2015-10-18 04:15 - 2015-10-18 04:15 - 00246804 _____ C:\WINDOWS\system32\Drivers\AtherosBT.bin 2015-10-18 04:15 - 2015-10-18 04:15 - 00182784 _____ (Qualcomm®Atheros®) C:\WINDOWS\system32\BtContextMenu.dll 2015-10-18 04:15 - 2015-10-18 04:15 - 00181760 _____ (Qualcomm Atheros Communications Inc.) C:\WINDOWS\system32\btcoinst.dll 2015-10-18 04:15 - 2015-10-18 04:15 - 00083984 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll 2015-10-18 04:15 - 2015-10-18 04:15 - 00048092 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x01020200.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00046748 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010000.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00046268 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x11020100.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00046212 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x11020000.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00040684 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010000_ss01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00038140 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x31010100.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00023532 _____ C:\WINDOWS\system32\Drivers\AthrBT_0x01020201.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00014464 _____ (Western Digital Technologies) C:\WINDOWS\system32\Drivers\wdcsam64.sys 2015-10-18 04:15 - 2015-10-18 04:15 - 00001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0xf0.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x21.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x11.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001926 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001922 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010100_40.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40_SS01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40_nf01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001802 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020100_40.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001796 _____ C:\WINDOWS\system32\Drivers\ramps_0x11020000_40.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_SS01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_LV01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0xf1.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x22.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x12.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001516 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010000_40_0x01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001512 _____ C:\WINDOWS\system32\Drivers\ramps_0x31010100_40_0x01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001242 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001228 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x04.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001214 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x03.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001204 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40_0x02.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001204 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_40.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001198 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_26.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00001192 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020200_26_0x01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00000296 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00000278 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x04.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x03.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40_0x02.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_40.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_26_0x01.dfu 2015-10-18 04:15 - 2015-10-18 04:15 - 00000264 _____ C:\WINDOWS\system32\Drivers\ramps_0x01020201_26.dfu 2015-10-18 04:14 - 2015-10-18 04:14 - 72121872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat 2015-10-18 04:14 - 2015-10-18 04:14 - 36778882 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2015-10-18 04:14 - 2015-10-18 04:14 - 14057256 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 13120760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 12986528 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 07172920 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 07096192 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 06370480 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 06264640 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 05804772 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat 2015-10-18 04:14 - 2015-10-18 04:14 - 05777200 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 05289952 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 04598528 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2015-10-18 04:14 - 2015-10-18 04:14 - 03299832 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 03271912 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 03232448 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 03091915 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat 2015-10-18 04:14 - 2015-10-18 04:14 - 02965632 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 02927872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 02823280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 02711296 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl 2015-10-18 04:14 - 2015-10-18 04:14 - 02617488 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 02492152 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 02423480 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 02190992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 02110600 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 02050184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01965816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01959608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01780624 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01758976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01601952 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01591064 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01508936 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01435152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01395768 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01382240 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01334384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01331336 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01211840 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01164336 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01122648 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 01003864 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00998032 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00965032 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00961024 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00953728 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00931624 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00923752 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00888480 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00874736 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00873472 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00812408 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00749776 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00743968 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00727440 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00708320 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00699072 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00678192 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00677680 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00645464 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00618192 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00596120 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00574248 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00569440 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL 2015-10-18 04:14 - 2015-10-18 04:14 - 00532384 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00514528 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00504312 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00500560 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00467168 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00448592 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00447728 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00445408 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00441272 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00428232 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00387320 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00381416 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00362064 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00358272 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00340648 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00330568 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00327464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00310432 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00272720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00259288 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00253904 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00253872 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00252880 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00231920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00224264 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaemaxapo64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00221976 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00214840 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00209544 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00195192 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00172584 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00166208 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00158704 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00151792 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00134208 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00122328 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00118600 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00118600 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00110992 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00105312 _____ C:\WINDOWS\system32\audioLibVc.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00090920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00088352 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00088328 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00084624 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00075544 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll 2015-10-18 04:14 - 2015-10-18 04:14 - 00023704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll 2015-10-18 04:13 - 2015-10-06 03:03 - 16708608 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-10-18 04:13 - 2015-10-06 02:46 - 13027840 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-10-18 04:13 - 2015-10-01 04:01 - 01294352 ____N (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2015-10-18 04:13 - 2015-10-01 04:00 - 08020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-10-18 04:13 - 2015-09-25 04:01 - 02573768 ____N (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2015-10-18 04:13 - 2015-09-25 03:56 - 22322624 ____N (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-10-18 04:13 - 2015-09-25 03:33 - 01997336 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2015-10-18 04:13 - 2015-09-25 03:26 - 20858360 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-10-18 04:13 - 2015-09-25 03:09 - 12504064 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-10-18 04:13 - 2015-09-25 03:07 - 01276416 ____N (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2015-10-18 04:13 - 2015-09-25 03:04 - 00826880 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-10-18 04:13 - 2015-09-25 03:03 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2015-10-18 04:13 - 2015-09-25 03:02 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2015-10-18 04:13 - 2015-09-25 03:02 - 00949248 ____N (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-10-18 04:13 - 2015-09-25 03:01 - 04792320 ____N (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-10-18 04:13 - 2015-09-25 03:01 - 03586560 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-10-18 04:13 - 2015-09-25 03:00 - 01423872 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll 2015-10-18 04:13 - 2015-09-25 03:00 - 00856576 ____N (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2015-10-18 04:13 - 2015-09-25 02:59 - 01205248 ____N (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2015-10-18 04:13 - 2015-09-25 02:58 - 01871360 ____N (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2015-10-18 04:13 - 2015-09-25 02:38 - 03580416 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-10-18 04:13 - 2015-09-25 02:37 - 00613376 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2015-10-18 04:13 - 2015-09-25 02:36 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-10-18 04:13 - 2015-09-25 02:36 - 05454848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2015-10-18 04:13 - 2015-09-25 02:34 - 00928256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2015-10-18 04:13 - 2015-09-25 02:32 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2015-10-18 04:13 - 2015-09-17 06:50 - 02464216 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2015-10-18 04:13 - 2015-09-17 06:50 - 01563392 ____N (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2015-10-18 04:13 - 2015-09-17 06:49 - 06487248 ____N (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2015-10-18 04:13 - 2015-09-17 06:48 - 02824248 ____N (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2015-10-18 04:13 - 2015-09-17 06:48 - 02494712 ____N C:\WINDOWS\system32\CoreUIComponents.dll 2015-10-18 04:13 - 2015-09-17 06:48 - 02432336 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2015-10-18 04:13 - 2015-09-17 06:48 - 01983824 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2015-10-18 04:13 - 2015-09-17 06:48 - 00809352 ____N (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2015-10-18 04:13 - 2015-09-17 06:48 - 00784136 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2015-10-18 04:13 - 2015-09-17 06:43 - 00966416 ____N (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2015-10-18 04:13 - 2015-09-17 06:37 - 01295712 ____N (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2015-10-18 04:13 - 2015-09-17 06:28 - 05120056 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2015-10-18 04:13 - 2015-09-17 06:28 - 02154808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2015-10-18 04:13 - 2015-09-17 06:27 - 01766952 ____N C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2015-10-18 04:13 - 2015-09-17 06:26 - 02446648 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2015-10-18 04:13 - 2015-09-17 06:26 - 00646672 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2015-10-18 04:13 - 2015-09-17 06:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2015-10-18 04:13 - 2015-09-17 06:06 - 00467968 ____N (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2015-10-18 04:13 - 2015-09-17 06:05 - 02226688 ____N (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2015-10-18 04:13 - 2015-09-17 06:04 - 07569408 ____N (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2015-10-18 04:13 - 2015-09-17 05:57 - 02228736 ____N (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2015-10-18 04:13 - 2015-09-17 05:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2015-10-18 04:13 - 2015-09-17 05:55 - 02236416 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-10-18 04:13 - 2015-09-17 05:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2015-10-18 04:13 - 2015-09-17 05:54 - 03781120 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2015-10-18 04:13 - 2015-09-17 05:53 - 07055872 ____N (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2015-10-18 04:13 - 2015-09-17 05:52 - 01181696 ____N (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2015-10-18 04:13 - 2015-09-17 05:51 - 02660864 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2015-10-18 04:13 - 2015-09-17 05:51 - 01203712 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2015-10-18 04:13 - 2015-09-17 05:49 - 02740224 ____N (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-10-18 04:13 - 2015-09-17 05:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2015-10-18 04:13 - 2015-09-17 05:49 - 01010176 ____N (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2015-10-18 04:13 - 2015-09-17 05:48 - 02093056 ____N (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2015-10-18 04:13 - 2015-09-17 05:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2015-10-18 04:13 - 2015-09-17 05:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2015-10-18 04:13 - 2015-09-17 05:40 - 06101504 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2015-10-18 04:13 - 2015-09-17 05:40 - 01162240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2015-10-18 04:13 - 2015-09-17 05:38 - 00058368 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2015-10-18 04:13 - 2015-09-17 05:35 - 05079552 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2015-10-18 04:13 - 2015-09-17 05:35 - 02207232 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-10-18 04:13 - 2015-09-17 05:35 - 01820160 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2015-10-18 04:13 - 2015-09-17 05:35 - 00828928 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2015-10-18 04:13 - 2015-09-17 05:29 - 01104384 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2015-10-18 04:13 - 2015-09-17 05:26 - 00899584 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2015-10-18 04:12 - 2015-10-10 07:12 - 00078528 ____N (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-10-18 04:12 - 2015-10-01 04:01 - 01123400 ____N (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2015-10-18 04:12 - 2015-10-01 04:01 - 01018568 ____N (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2015-10-18 04:12 - 2015-10-01 04:01 - 00858408 ____N (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2015-10-18 04:12 - 2015-10-01 03:03 - 00757760 ____N (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2015-10-18 04:12 - 2015-09-25 04:01 - 00498016 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys 2015-10-18 04:12 - 2015-09-25 03:52 - 00980832 ____N (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2015-10-18 04:12 - 2015-09-25 03:11 - 00257024 ____N (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll 2015-10-18 04:12 - 2015-09-25 03:11 - 00223232 ____N (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll 2015-10-18 04:12 - 2015-09-25 03:04 - 00771072 ____N (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2015-10-18 04:12 - 2015-09-25 03:03 - 00576000 ____N (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-10-18 04:12 - 2015-09-25 03:02 - 00689152 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2015-10-18 04:12 - 2015-09-25 03:00 - 01382400 ____N (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-10-18 04:12 - 2015-09-25 03:00 - 00752640 ____N (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll 2015-10-18 04:12 - 2015-09-25 02:59 - 00720896 ____N (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll 2015-10-18 04:12 - 2015-09-25 02:59 - 00685568 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll 2015-10-18 04:12 - 2015-09-25 02:59 - 00590336 ____N (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2015-10-18 04:12 - 2015-09-25 02:59 - 00288256 ____N (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll 2015-10-18 04:12 - 2015-09-25 02:59 - 00163840 ____N (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll 2015-10-18 04:12 - 2015-09-25 02:47 - 00195584 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll 2015-10-18 04:12 - 2015-09-25 02:47 - 00172032 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll 2015-10-18 04:12 - 2015-09-25 02:38 - 00650240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-10-18 04:12 - 2015-09-25 02:38 - 00574464 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2015-10-18 04:12 - 2015-09-25 02:38 - 00504320 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-10-18 04:12 - 2015-09-25 02:37 - 00766976 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-10-18 04:12 - 2015-09-25 02:37 - 00480256 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2015-10-18 04:12 - 2015-09-25 02:34 - 00625152 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll 2015-10-18 04:12 - 2015-09-25 02:34 - 00579584 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll 2015-10-18 04:12 - 2015-09-25 02:34 - 00557568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll 2015-10-18 04:12 - 2015-09-25 02:34 - 00525312 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll 2015-10-18 04:12 - 2015-09-25 02:33 - 00131072 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll 2015-10-18 04:12 - 2015-09-25 02:32 - 00466432 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2015-10-18 04:12 - 2015-09-19 05:14 - 00102304 ____N (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll 2015-10-18 04:12 - 2015-09-17 06:50 - 00099664 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2015-10-18 04:12 - 2015-09-17 06:50 - 00088384 ____N (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2015-10-18 04:12 - 2015-09-17 06:49 - 01563472 ____N (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2015-10-18 04:12 - 2015-09-17 06:49 - 00894256 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys 2015-10-18 04:12 - 2015-09-17 06:49 - 00553808 ____N (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2015-10-18 04:12 - 2015-09-17 06:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2015-10-18 04:12 - 2015-09-17 06:48 - 02156400 ____N (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll 2015-10-18 04:12 - 2015-09-17 06:48 - 00584656 ____N (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2015-10-18 04:12 - 2015-09-17 06:48 - 00555768 ____N (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll 2015-10-18 04:12 - 2015-09-17 06:48 - 00537080 ____N (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2015-10-18 04:12 - 2015-09-17 06:48 - 00516448 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2015-10-18 04:12 - 2015-09-17 06:48 - 00505696 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2015-10-18 04:12 - 2015-09-17 06:48 - 00476760 ____N (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2015-10-18 04:12 - 2015-09-17 06:48 - 00406864 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2015-10-18 04:12 - 2015-09-17 06:48 - 00395088 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2015-10-18 04:12 - 2015-09-17 06:48 - 00332624 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2015-10-18 04:12 - 2015-09-17 06:48 - 00278352 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2015-10-18 04:12 - 2015-09-17 06:48 - 00243760 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2015-10-18 04:12 - 2015-09-17 06:44 - 00781976 ____N (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2015-10-18 04:12 - 2015-09-17 06:37 - 01168736 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2015-10-18 04:12 - 2015-09-17 06:28 - 01357888 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2015-10-18 04:12 - 2015-09-17 06:28 - 00441168 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2015-10-18 04:12 - 2015-09-17 06:28 - 00407608 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2015-10-18 04:12 - 2015-09-17 06:28 - 00074880 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2015-10-18 04:12 - 2015-09-17 06:27 - 00454512 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll 2015-10-18 04:12 - 2015-09-17 06:26 - 01895568 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll 2015-10-18 04:12 - 2015-09-17 06:26 - 00508248 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2015-10-18 04:12 - 2015-09-17 06:26 - 00434376 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2015-10-18 04:12 - 2015-09-17 06:26 - 00428128 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2015-10-18 04:12 - 2015-09-17 06:21 - 00658528 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2015-10-18 04:12 - 2015-09-17 06:11 - 00160256 ____N (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2015-10-18 04:12 - 2015-09-17 06:10 - 00169984 ____N (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2015-10-18 04:12 - 2015-09-17 06:09 - 00269312 ____N (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2015-10-18 04:12 - 2015-09-17 06:09 - 00143360 ____N (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2015-10-18 04:12 - 2015-09-17 06:08 - 00494592 ____N (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2015-10-18 04:12 - 2015-09-17 06:08 - 00053760 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll 2015-10-18 04:12 - 2015-09-17 06:08 - 00026624 ____N (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe 2015-10-18 04:12 - 2015-09-17 06:06 - 00690688 ____N (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll 2015-10-18 04:12 - 2015-09-17 06:06 - 00149504 ____N (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2015-10-18 04:12 - 2015-09-17 06:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2015-10-18 04:12 - 2015-09-17 06:04 - 00910848 ____N (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2015-10-18 04:12 - 2015-09-17 06:04 - 00504320 ____N (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2015-10-18 04:12 - 2015-09-17 06:03 - 00267776 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2015-10-18 04:12 - 2015-09-17 06:03 - 00187904 ____N (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2015-10-18 04:12 - 2015-09-17 06:03 - 00154624 ____N (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2015-10-18 04:12 - 2015-09-17 06:03 - 00088064 ____N (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll 2015-10-18 04:12 - 2015-09-17 06:03 - 00083968 ____N (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2015-10-18 04:12 - 2015-09-17 06:02 - 00168960 ____N (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2015-10-18 04:12 - 2015-09-17 06:02 - 00068096 ____N (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2015-10-18 04:12 - 2015-09-17 06:00 - 00446976 ____N (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2015-10-18 04:12 - 2015-09-17 06:00 - 00106496 ____N (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll 2015-10-18 04:12 - 2015-09-17 05:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2015-10-18 04:12 - 2015-09-17 05:57 - 00403456 ____N (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2015-10-18 04:12 - 2015-09-17 05:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2015-10-18 04:12 - 2015-09-17 05:57 - 00137728 ____N (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2015-10-18 04:12 - 2015-09-17 05:56 - 00521728 ____N (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2015-10-18 04:12 - 2015-09-17 05:56 - 00317440 ____N (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll 2015-10-18 04:12 - 2015-09-17 05:55 - 00671232 ____N (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll 2015-10-18 04:12 - 2015-09-17 05:55 - 00366592 ____N (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2015-10-18 04:12 - 2015-09-17 05:55 - 00346112 ____N (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2015-10-18 04:12 - 2015-09-17 05:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll 2015-10-18 04:12 - 2015-09-17 05:55 - 00121856 ____N (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll 2015-10-18 04:12 - 2015-09-17 05:55 - 00120832 ____N (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2015-10-18 04:12 - 2015-09-17 05:55 - 00073728 ____N (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll 2015-10-18 04:12 - 2015-09-17 05:54 - 00780288 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2015-10-18 04:12 - 2015-09-17 05:54 - 00324096 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-10-18 04:12 - 2015-09-17 05:52 - 06572032 ____N (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2015-10-18 04:12 - 2015-09-17 05:52 - 01216512 ____N (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll 2015-10-18 04:12 - 2015-09-17 05:52 - 00856576 ____N (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2015-10-18 04:12 - 2015-09-17 05:52 - 00591360 ____N (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2015-10-18 04:12 - 2015-09-17 05:52 - 00570880 ____N (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2015-10-18 04:12 - 2015-09-17 05:52 - 00465920 ____N (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2015-10-18 04:12 - 2015-09-17 05:52 - 00371712 ____N (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2015-10-18 04:12 - 2015-09-17 05:52 - 00204800 ____N (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2015-10-18 04:12 - 2015-09-17 05:52 - 00162304 ____N (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll 2015-10-18 04:12 - 2015-09-17 05:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2015-10-18 04:12 - 2015-09-17 05:51 - 00359936 ____N (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2015-10-18 04:12 - 2015-09-17 05:51 - 00145920 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2015-10-18 04:12 - 2015-09-17 05:50 - 00929280 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2015-10-18 04:12 - 2015-09-17 05:50 - 00421888 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2015-10-18 04:12 - 2015-09-17 05:50 - 00320000 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys 2015-10-18 04:12 - 2015-09-17 05:50 - 00312832 ____N (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2015-10-18 04:12 - 2015-09-17 05:50 - 00221184 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll 2015-10-18 04:12 - 2015-09-17 05:50 - 00204288 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll 2015-10-18 04:12 - 2015-09-17 05:50 - 00036352 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys 2015-10-18 04:12 - 2015-09-17 05:49 - 00439296 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll 2015-10-18 04:12 - 2015-09-17 05:49 - 00342016 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll 2015-10-18 04:12 - 2015-09-17 05:49 - 00268800 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll 2015-10-18 04:12 - 2015-09-17 05:49 - 00215552 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll 2015-10-18 04:12 - 2015-09-17 05:49 - 00176640 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll 2015-10-18 04:12 - 2015-09-17 05:49 - 00095744 ____N (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll 2015-10-18 04:12 - 2015-09-17 05:49 - 00041472 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll 2015-10-18 04:12 - 2015-09-17 05:48 - 00517632 ____N (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2015-10-18 04:12 - 2015-09-17 05:48 - 00408064 ____N (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2015-10-18 04:12 - 2015-09-17 05:48 - 00387584 ____N (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2015-10-18 04:12 - 2015-09-17 05:48 - 00347136 ____N (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2015-10-18 04:12 - 2015-09-17 05:48 - 00273920 ____N (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2015-10-18 04:12 - 2015-09-17 05:47 - 00513536 ____N (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2015-10-18 04:12 - 2015-09-17 05:47 - 00371712 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2015-10-18 04:12 - 2015-09-17 05:47 - 00186880 ____N (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2015-10-18 04:12 - 2015-09-17 05:46 - 00928256 ____N (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2015-10-18 04:12 - 2015-09-17 05:46 - 00621056 ____N (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2015-10-18 04:12 - 2015-09-17 05:46 - 00414208 ____N (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2015-10-18 04:12 - 2015-09-17 05:46 - 00224256 ____N (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2015-10-18 04:12 - 2015-09-17 05:46 - 00118272 ____N (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2015-10-18 04:12 - 2015-09-17 05:46 - 00084480 ____N (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2015-10-18 04:12 - 2015-09-17 05:46 - 00079872 ____N (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll 2015-10-18 04:12 - 2015-09-17 05:46 - 00030208 ____N (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll 2015-10-18 04:12 - 2015-09-17 05:45 - 00869376 ____N (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2015-10-18 04:12 - 2015-09-17 05:45 - 00832512 ____N (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2015-10-18 04:12 - 2015-09-17 05:45 - 00193024 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2015-10-18 04:12 - 2015-09-17 05:44 - 01844736 ____N (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2015-10-18 04:12 - 2015-09-17 05:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2015-10-18 04:12 - 2015-09-17 05:44 - 00526336 ____N (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2015-10-18 04:12 - 2015-09-17 05:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll 2015-10-18 04:12 - 2015-09-17 05:43 - 00378368 ____N (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2015-10-18 04:12 - 2015-09-17 05:43 - 00328704 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2015-10-18 04:12 - 2015-09-17 05:43 - 00185344 ____N (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2015-10-18 04:12 - 2015-09-17 05:41 - 00217088 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2015-10-18 04:12 - 2015-09-17 05:39 - 00587264 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2015-10-18 04:12 - 2015-09-17 05:39 - 00247808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-10-18 04:12 - 2015-09-17 05:37 - 00454656 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2015-10-18 04:12 - 2015-09-17 05:36 - 01171456 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll 2015-10-18 04:12 - 2015-09-17 05:34 - 00253440 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2015-10-18 04:12 - 2015-09-17 05:32 - 00336384 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2015-10-18 04:12 - 2015-09-17 05:32 - 00313856 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll 2015-10-18 04:12 - 2015-09-17 05:32 - 00195072 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2015-10-18 04:12 - 2015-09-17 05:31 - 00268800 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2015-10-18 04:12 - 2015-09-17 05:30 - 00311808 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2015-10-18 04:12 - 2015-09-17 05:29 - 00701952 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2015-10-18 04:12 - 2015-09-17 05:29 - 00677888 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2015-10-18 04:12 - 2015-09-17 05:28 - 00473088 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2015-10-18 04:12 - 2015-09-17 05:16 - 00512000 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2015-10-18 01:04 - 2015-10-18 04:17 - 00000000 ____D C:\AMD 2015-10-18 00:49 - 2015-11-05 15:06 - 00000000 ___RD C:\Users\Alex\OneDrive 2015-10-16 00:08 - 2015-10-16 00:08 - 00625848 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp140.dll 2015-10-16 00:08 - 2015-10-16 00:08 - 00381128 _____ (Microsoft Corporation) C:\WINDOWS\system32\vccorlib140.dll 2015-10-16 00:08 - 2015-10-16 00:08 - 00323792 _____ (Microsoft Corporation) C:\WINDOWS\system32\concrt140.dll 2015-10-16 00:08 - 2015-10-16 00:08 - 00079544 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcruntime140.dll 2015-10-15 22:17 - 2015-10-15 22:17 - 00430264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp140.dll 2015-10-15 22:17 - 2015-10-15 22:17 - 00257736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vccorlib140.dll 2015-10-15 22:17 - 2015-10-15 22:17 - 00234192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\concrt140.dll 2015-10-15 22:17 - 2015-10-15 22:17 - 00075960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vcruntime140.dll 2015-10-07 05:16 - 2015-10-07 05:16 - 00142976 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-10-24 12:51 - 2015-09-08 03:40 - 00000000 __SHD C:\Recovery 2015-10-24 12:32 - 2015-07-10 03:21 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys ==================== Files in the root of some directories ======= 2015-10-28 23:27 - 2015-10-28 23:27 - 0000218 _____ () C:\Users\Alex\AppData\Local\recently-used.xbel 2015-10-24 11:58 - 2015-10-24 11:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-11-05 11:13

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:04-11-2015 Ran by Alex (administrator) on DESKTOP-BLPCOLT (05-11-2015 15:55:11) Running from C:\Users\Alex\Downloads Loaded Profiles: Alex (Available Profiles: Alex & Administrator) Platform: Windows 10 Home (X64) Language: English (United Kingdom) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE (VideoLAN) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16161536 2015-10-18] (Realtek Semiconductor) HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2620728 2015-07-22] (Malwarebytes Corporation) HKU\S-1-5-21-1261255005-3633135201-1909299041-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd) HKU\S-1-5-21-1261255005-3633135201-1909299041-1001\...\MountPoints2: {6967b6a9-756b-11e5-8d6f-5c93a2f576a2} - "D:\HTC_Sync_Manager_PC.exe" ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => No File ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => No File ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 208.67.222.222 208.67.220.220 Tcpip\..\Interfaces\{43a5e718-dc6a-4e44-81d5-568f30a818c8}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{43a5e718-dc6a-4e44-81d5-568f30a818c8}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{6c7250b0-2cb7-405f-aa19-aeb38d51177d}: [DhcpNameServer] 208.67.222.222 208.67.220.220 Tcpip\..\Interfaces\{ebc5daf5-db1e-4b54-97c8-b7a32f35cc89}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{ebc5daf5-db1e-4b54-97c8-b7a32f35cc89}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2015-10-27] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2015-10-27] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-27] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\bzcxeywt.default FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2015-10-27] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-04] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-04] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) Chrome: ======= CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-04] CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-04] CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-04] CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-04] CHR Extension: (Google Search) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-04] CHR Extension: (Google Sheets) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-04] CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-05] CHR Extension: (Chrome Web Store Payments) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-04] CHR Extension: (Gmail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-04] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2856632 2015-10-15] (Microsoft Corporation) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2505472 2015-10-09] (ESET) R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [713016 2015-07-22] (Malwarebytes Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-10-18] (Advanced Micro Devices) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264040 2015-07-30] (ESET) S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2015-07-30] (ESET) R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2015-07-30] (ESET) R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [142976 2015-10-07] (ESET) R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [206312 2015-07-30] (ESET) R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [52872 2015-07-30] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69840 2015-07-30] (ESET) S3 ESETCleanersDriver; C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys [170280 2015-11-01] (ESET) R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2015-07-22] () R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [109272 2015-10-05] (Malwarebytes) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-11-05] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-06-18] (Realtek ) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [751632 2015-10-18] (Realsil Semiconductor Corporation) S3 torguardtap0901; C:\Windows\System32\drivers\torguardtap0901.sys [39840 2015-03-13] (The OpenVPN Project) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) U0 Partizan; system32\drivers\Partizan.sys [X] S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-11-05 15:55 - 2015-11-05 15:55 - 00011204 _____ C:\Users\Alex\Downloads\FRST.txt 2015-11-05 15:54 - 2015-11-05 15:55 - 00000000 ____D C:\FRST 2015-11-05 15:53 - 2015-11-05 15:54 - 02198016 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe 2015-11-05 15:11 - 2015-11-05 15:11 - 00002340 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-11-05 15:06 - 2015-11-05 15:06 - 00000000 ___HD C:\OneDriveTemp 2015-11-05 15:04 - 2015-11-05 15:04 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-BLPCOLT_Alex_HistoryPrediction.bin 2015-11-04 04:11 - 2015-11-04 04:11 - 00018160 _____ C:\Users\Alex\Downloads\ESETPoweliksCleaner.exe_20151104.041138.208.log 2015-11-04 04:11 - 2015-11-04 04:11 - 00000022 _____ C:\Users\Alex\Downloads\ESETPoweliksCleaner.exe_20151104.041138.208.zip 2015-11-04 01:43 - 2015-11-04 01:43 - 00000000 _____ C:\Users\Alex\Downloads\un25547.cfg 2015-11-04 01:40 - 2015-11-04 03:09 - 00000000 ____D C:\Users\Alex\AppData\Local\Mozilla 2015-11-04 01:40 - 2015-11-04 01:42 - 639631360 _____ C:\Users\Alex\Downloads\drweb-livedisk-900-cd.iso 2015-11-04 01:40 - 2015-11-04 01:41 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Mozilla 2015-11-04 01:39 - 2015-11-04 01:39 - 00001224 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-11-04 01:39 - 2015-11-04 01:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-11-04 01:24 - 2015-11-05 15:06 - 00000000 ___RD C:\Users\Alex\Google Drive 2015-11-04 01:21 - 2015-11-05 15:27 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-11-04 01:21 - 2015-11-05 15:09 - 00000000 ____D C:\Users\Alex\AppData\Local\Google 2015-11-04 01:21 - 2015-11-05 15:05 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-11-04 01:21 - 2015-11-04 01:21 - 00003984 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-11-04 01:21 - 2015-11-04 01:21 - 00003752 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-11-04 00:56 - 2015-11-04 00:57 - 340670464 _____ C:\Users\Alex\Downloads\eset-sysrescue.1.0.9.0.enu.iso 2015-11-04 00:48 - 2015-11-04 00:48 - 04831744 _____ (Geza Kovacs) C:\Users\Alex\Downloads\unetbootin-windows-613.exe 2015-11-04 00:38 - 2015-11-04 01:31 - 00000096 _____ C:\Users\Alex\Downloads\rufus.ini 2015-11-04 00:38 - 2015-11-04 00:38 - 00863144 _____ (Akeo Consulting (http://akeo.ie)) C:\Users\Alex\Downloads\rufus-2.5p.exe 2015-11-04 00:31 - 2015-11-04 00:16 - 470530048 ____N C:\Users\Alex\Desktop\systemrescuecd-x86-4.6.1.iso 2015-11-03 21:32 - 2015-11-03 21:32 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2015-11-03 21:10 - 2015-11-03 21:15 - 09317168 _____ (ESET, spol. s r.o.) C:\Users\Alex\Downloads\eset_sysrescue_live_creator_enu.exe 2015-11-01 18:39 - 2015-11-01 18:28 - 01510960 ____N (Disc Soft Ltd.) C:\Users\Alex\Downloads\DTUltraInstaller1.0.exe 2015-11-01 18:11 - 2015-11-01 18:11 - 00170280 _____ (ESET) C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys 2015-10-30 14:38 - 2015-10-30 14:39 - 00000000 ____D C:\Users\Alex\AppData\Local\Thunderbird 2015-10-30 14:38 - 2015-10-30 14:38 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Thunderbird 2015-10-30 14:38 - 2015-10-30 14:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2015-10-30 14:36 - 2015-10-30 14:36 - 33851960 _____ (Mozilla) C:\Users\Alex\Downloads\Thunderbird Setup 38.3.0.exe 2015-10-30 14:28 - 2015-10-30 14:28 - 09826585 _____ C:\Users\Alex\Downloads\AbstractsDark.themepack 2015-10-30 13:26 - 2015-11-04 01:16 - 00000000 ____D C:\Program Files\Waterfox 2015-10-30 13:24 - 2015-10-30 13:25 - 72173960 _____ C:\Users\Alex\Downloads\Waterfox 40.0.3 Setup.exe 2015-10-30 13:16 - 2015-11-04 02:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-10-30 09:59 - 2015-10-27 23:38 - 21871616 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-10-30 09:59 - 2015-10-27 23:16 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-10-30 09:59 - 2015-10-21 12:43 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2015-10-30 09:59 - 2015-10-21 12:00 - 24595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-10-30 09:59 - 2015-10-21 11:57 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-10-30 09:59 - 2015-10-21 05:13 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-10-30 09:58 - 2015-10-21 12:45 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll 2015-10-30 09:58 - 2015-10-21 12:44 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2015-10-30 09:58 - 2015-10-21 12:39 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-10-30 09:58 - 2015-10-21 12:00 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2015-10-30 09:58 - 2015-10-21 11:59 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2015-10-30 09:58 - 2015-10-21 11:52 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2015-10-30 09:58 - 2015-10-21 11:50 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2015-10-30 09:58 - 2015-10-21 11:48 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-10-30 09:58 - 2015-10-21 11:47 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll 2015-10-30 09:58 - 2015-10-21 11:46 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-10-30 09:58 - 2015-10-21 11:46 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-10-30 09:58 - 2015-10-21 11:44 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2015-10-30 09:58 - 2015-10-21 11:44 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2015-10-30 09:58 - 2015-10-21 11:43 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2015-10-30 09:58 - 2015-10-21 11:42 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2015-10-30 09:58 - 2015-10-21 11:41 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-10-30 09:58 - 2015-10-21 11:40 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2015-10-30 09:58 - 2015-10-21 11:38 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll 2015-10-30 09:58 - 2015-10-21 05:53 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2015-10-30 09:58 - 2015-10-21 05:49 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-10-30 09:58 - 2015-10-21 05:11 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2015-10-30 09:58 - 2015-10-21 05:08 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-10-30 09:58 - 2015-10-21 05:05 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2015-10-30 09:58 - 2015-10-21 05:03 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-10-30 09:58 - 2015-10-21 05:03 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll 2015-10-30 09:58 - 2015-10-21 04:58 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2015-10-30 09:58 - 2015-10-21 04:58 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2015-10-30 09:58 - 2015-10-21 04:55 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll 2015-10-30 09:44 - 2015-11-05 15:02 - 00000000 ____D C:\WINDOWS\Minidump 2015-10-29 19:28 - 2015-10-29 19:28 - 00003217 _____ C:\Users\Alex\Downloads\my-ublock-backup_10-29-2015,_7-28-30_PM.txt 2015-10-29 19:08 - 2015-10-29 19:08 - 06764904 _____ (Piriform Ltd) C:\Users\Alex\Downloads\ccsetup511pro.exe 2015-10-29 18:53 - 2015-10-29 18:53 - 01694208 _____ C:\Users\Alex\Downloads\adwcleaner_5.015.exe 2015-10-29 18:48 - 2015-11-04 01:38 - 00243632 _____ C:\Users\Alex\Downloads\Firefox Setup Stub 41.0.2.exe 2015-10-29 18:45 - 2015-10-29 18:45 - 00929872 _____ (Google Inc.) C:\Users\Alex\Downloads\ChromeSetup.exe 2015-10-29 14:08 - 2015-11-05 15:09 - 00000000 ____D C:\Program Files (x86)\Google 2015-10-28 23:27 - 2015-10-28 23:27 - 00000218 _____ C:\Users\Alex\AppData\Local\recently-used.xbel 2015-10-28 00:37 - 2015-10-28 00:37 - 00000000 ____D C:\$WINDOWS.~BT 2015-10-28 00:07 - 2015-10-28 00:07 - 00000000 ___HD C:\$Windows.~WS 2015-10-27 13:32 - 2015-10-27 13:32 - 00000000 ___RD C:\Users\Alex\Documents\MEGAsync 2015-10-27 12:59 - 2015-10-29 12:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2015-10-27 12:59 - 2015-10-27 12:59 - 00000000 ____D C:\Program Files\Microsoft Office 15 2015-10-26 10:19 - 2015-10-26 10:19 - 00000002 RSHOT C:\WINDOWS\winstart.bat 2015-10-26 10:19 - 2015-10-26 10:19 - 00000002 RSHOT C:\WINDOWS\SysWOW64\CONFIG.NT 2015-10-26 10:19 - 2015-10-26 10:19 - 00000002 RSHOT C:\WINDOWS\SysWOW64\AUTOEXEC.NT 2015-10-25 20:53 - 2015-11-05 15:02 - 00000000 ____D C:\Users\Alex\AppData\Roaming\vlc 2015-10-25 20:52 - 2015-10-25 20:52 - 00000000 ____D C:\Program Files (x86)\VideoLAN 2015-10-25 16:51 - 2015-10-25 16:51 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2015-10-25 15:50 - 2015-10-25 15:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2015-10-24 21:34 - 2015-10-24 21:40 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-10-24 21:34 - 2015-10-02 11:09 - 143481208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-10-24 14:27 - 2015-10-29 18:55 - 00000000 ____D C:\AdwCleaner 2015-10-24 13:32 - 2015-10-29 19:09 - 00000000 ____D C:\Program Files\CCleaner 2015-10-24 13:32 - 2015-10-29 19:08 - 00000867 _____ C:\Users\Public\Desktop\CCleaner.lnk 2015-10-24 13:32 - 2015-10-24 13:32 - 00002868 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2015-10-24 13:27 - 2015-11-05 11:19 - 00000000 ____D C:\Users\Alex\AppData\Local\Comms 2015-10-24 13:24 - 2015-10-24 13:24 - 00000000 ____D C:\Program Files\7-Zip 2015-10-24 13:17 - 2015-11-05 15:21 - 00000000 ____D C:\Program Files (x86)\VPNetwork LLC 2015-10-24 13:14 - 2015-11-05 15:05 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-10-24 13:14 - 2015-10-24 13:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit 2015-10-24 13:13 - 2015-10-24 13:13 - 00001179 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-10-24 13:13 - 2015-10-24 13:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-10-24 13:13 - 2015-10-05 08:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-10-24 13:13 - 2015-10-05 08:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2015-10-24 13:13 - 2015-10-05 08:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2015-10-24 13:09 - 2015-10-24 13:09 - 00000000 ____D C:\Users\Alex\AppData\Local\ESET 2015-10-24 13:08 - 2015-10-24 13:08 - 00002104 _____ C:\Users\Public\Desktop\ESET Banking & Payment protection.lnk 2015-10-24 13:08 - 2015-10-24 13:08 - 00000000 ____D C:\Program Files\ESET 2015-10-24 13:06 - 2015-10-24 13:06 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2015-10-24 13:06 - 2015-10-24 13:06 - 00000000 ____D C:\Program Files (x86)\Spybot Anti-Beacon 2015-10-24 13:01 - 2015-10-27 19:57 - 00000000 ____D C:\Users\Alex\AppData\Local\MicrosoftEdge 2015-10-24 13:00 - 2015-11-03 18:42 - 00002339 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-10-24 13:00 - 2015-10-24 13:00 - 00001337 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio Manager.lnk 2015-10-24 12:59 - 2015-10-24 12:59 - 00000000 ____D C:\Users\Alex\AppData\Local\Publishers 2015-10-24 12:58 - 2015-10-29 23:15 - 00000000 ____D C:\Users\Alex\AppData\Local\Packages 2015-10-24 12:58 - 2015-10-24 12:58 - 00000000 ____D C:\Users\Alex\AppData\Local\VirtualStore 2015-10-24 12:58 - 2015-10-24 12:58 - 00000000 ____D C:\Users\Alex\AppData\Local\TileDataLayer 2015-10-24 12:57 - 2015-10-24 12:57 - 00000020 ___SH C:\Users\Alex\ntuser.ini 2015-10-24 12:51 - 2015-10-25 16:28 - 00000000 ____D C:\Windows.old 2015-10-24 12:51 - 2015-10-24 12:51 - 00028672 ___SH C:\WINDOWS\system32\config\BCD-Template.LOG 2015-10-24 12:50 - 2015-10-24 12:50 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2015-10-24 12:49 - 2015-10-24 12:49 - 00000000 ____D C:\WINDOWS\Setup 2015-10-24 12:45 - 2015-10-24 12:45 - 00000000 ____D C:\WINDOWS\OCR 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\Drivers\en-GB 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\0409 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\winrm 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\WCN 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\slmgr 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\Drivers\en-GB 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\0409 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\en-GB 2015-10-24 12:44 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\DigitalLocker 2015-10-24 12:40 - 2015-10-16 03:10 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-10-24 12:40 - 2015-10-16 03:10 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-10-24 12:38 - 2015-11-05 15:17 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-10-24 12:38 - 2015-11-05 15:03 - 00000000 ____D C:\WINDOWS\system32\sru 2015-10-24 12:38 - 2015-11-05 15:02 - 00000000 ____D C:\WINDOWS\system32\WinMetadata 2015-10-24 12:38 - 2015-11-05 15:02 - 00000000 ____D C:\WINDOWS\system32\en-GB 2015-10-24 12:38 - 2015-11-05 15:00 - 00000000 ____D C:\WINDOWS\registration 2015-10-24 12:38 - 2015-11-05 14:52 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-10-24 12:38 - 2015-11-04 00:38 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2015-10-24 12:38 - 2015-11-04 00:38 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2015-10-24 12:38 - 2015-11-03 21:20 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2015-10-24 12:38 - 2015-10-31 14:08 - 00000000 ____D C:\WINDOWS\rescache 2015-10-24 12:38 - 2015-10-30 13:03 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB 2015-10-24 12:38 - 2015-10-30 13:03 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ___SD C:\WINDOWS\system32\F12 2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ____D C:\WINDOWS\Provisioning 2015-10-24 12:38 - 2015-10-25 16:34 - 00000000 ____D C:\WINDOWS\L2Schemas 2015-10-24 12:38 - 2015-10-24 13:22 - 00000000 ____D C:\WINDOWS\system32\restore 2015-10-24 12:38 - 2015-10-24 13:09 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2015-10-24 12:38 - 2015-10-24 12:58 - 00000000 ___RD C:\WINDOWS\PrintDialog 2015-10-24 12:38 - 2015-10-24 12:58 - 00000000 ___RD C:\WINDOWS\MiracastView 2015-10-24 12:38 - 2015-10-24 12:58 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2015-10-24 12:38 - 2015-10-24 12:51 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2015-10-24 12:38 - 2015-10-24 12:49 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-24 12:38 - 2015-10-24 12:48 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2015-10-24 12:38 - 2015-10-24 12:48 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2015-10-24 12:38 - 2015-10-24 12:48 - 00000000 ____D C:\WINDOWS\system32\oobe 2015-10-24 12:38 - 2015-10-24 12:48 - 00000000 ____D C:\WINDOWS\system32\Dism 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ___SD C:\WINDOWS\system32\dsc 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\Com 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\setup 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\MUI 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\migwiz 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\system32\Com 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\IME 2015-10-24 12:38 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\Help 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 __RSD C:\WINDOWS\Media 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 __RSD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___SD C:\WINDOWS\system32\Nui 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___SD C:\WINDOWS\system32\Configuration 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___RD C:\WINDOWS\Offline Web Pages 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___RD C:\WINDOWS\DesktopTileResources 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Web 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Vss 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\tracing 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\TAPI 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\WindowsPowerShell 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sru 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-CS 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sppui 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\spp 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech_OneCore 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Speech 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\restore 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Recovery 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\RasToast 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\ras 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\networklist 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\MSDRM 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Licenses 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\InstallShield 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\fr-CA 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\es-MX 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SystemResources 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\zh-HK 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\winevt 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\WindowsPowerShell 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\uk-UA 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\tr-TR 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\th-TH 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\sppui 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\spp 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\spool 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Speech_OneCore 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Speech 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\sl-SI 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\sk-SK 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\ro-RO 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\RasToast 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\ras 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\ProximityToast 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\PointOfService 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\networklist 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\MsDtc 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\MSDRM 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Macromed 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Licenses 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Ipmi 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\IME 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\icsxml 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\ias 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\hr-HR 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\he-IL 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\fr-CA 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\et-EE 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\es-MX 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\downlevel 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\config\Journal 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\Bthprops 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\bg-BG 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\ar-SA 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\AppLocker 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system\Speech 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\System 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Speech_OneCore 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Speech 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SKB 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\ShellNew 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\security 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\schemas 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\SchCache 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Resources 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\PLA 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Performance 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\InputMethod 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Globalization 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Cursors 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\Branding 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\appcompat 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\addins 2015-10-24 12:38 - 2015-10-24 12:38 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-24 12:38 - 2015-10-24 12:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2015-10-24 12:38 - 2015-10-24 12:35 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat 2015-10-24 12:38 - 2015-10-24 12:35 - 00215943 _____ C:\WINDOWS\system32\dssec.dat 2015-10-24 12:38 - 2015-10-24 12:35 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2015-10-24 12:38 - 2015-10-24 12:35 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services 2015-10-24 12:38 - 2015-10-24 12:35 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2015-10-24 12:38 - 2015-10-24 12:35 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat 2015-10-24 12:38 - 2015-10-24 12:35 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat 2015-10-24 12:38 - 2015-10-24 12:35 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam 2015-10-24 12:38 - 2015-10-24 12:35 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat 2015-10-24 12:38 - 2015-10-24 12:35 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat 2015-10-24 12:38 - 2015-10-24 12:35 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol 2015-10-24 12:38 - 2015-10-24 12:35 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json 2015-10-24 12:38 - 2015-10-24 12:35 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT 2015-10-24 12:38 - 2015-10-24 12:35 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT 2015-10-24 12:38 - 2015-10-24 12:35 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks 2015-10-24 12:38 - 2015-10-24 12:34 - 00000219 _____ C:\WINDOWS\system.ini 2015-10-24 12:38 - 2015-10-24 12:34 - 00000092 _____ C:\WINDOWS\win.ini 2015-10-24 12:38 - 2015-10-24 12:06 - 00000000 __RHD C:\Users\Public\Libraries 2015-10-24 12:38 - 2015-10-24 12:06 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2015-10-24 12:38 - 2015-10-24 12:06 - 00000000 ____D C:\WINDOWS\system32\Recovery 2015-10-24 12:38 - 2015-10-24 12:02 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2015-10-24 12:37 - 2015-11-05 14:59 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-10-24 12:37 - 2015-10-24 12:48 - 00000000 ____D C:\Program Files\Windows Journal 2015-10-24 12:37 - 2015-10-24 12:44 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-10-24 12:37 - 2015-10-24 12:44 - 00000000 ____D C:\Program Files\Windows Defender 2015-10-24 12:37 - 2015-10-24 12:44 - 00000000 ____D C:\Program Files\Common Files\System 2015-10-24 12:37 - 2015-10-24 12:44 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2015-10-24 12:37 - 2015-10-24 12:44 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2015-10-24 12:37 - 2015-10-24 12:38 - 00000000 ____D C:\Program Files\Windows Portable Devices 2015-10-24 12:37 - 2015-10-24 12:38 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2015-10-24 12:37 - 2015-10-24 12:38 - 00000000 ____D C:\Program Files\Common Files\Services 2015-10-24 12:37 - 2015-10-24 12:38 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2015-10-24 12:37 - 2015-10-24 12:38 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 __SHD C:\Program Files\Windows Sidebar 2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 ___SD C:\Program Files\WindowsPowerShell 2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 ___SD C:\Program Files (x86)\WindowsPowerShell 2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 ____D C:\Program Files\Windows NT 2015-10-24 12:37 - 2015-10-24 12:37 - 00000000 ____D C:\Program Files (x86)\Windows NT 2015-10-24 12:37 - 2015-10-24 12:01 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2015-10-24 12:24 - 2015-10-31 13:08 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-10-24 12:11 - 2015-11-05 15:10 - 00830266 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-10-24 12:11 - 2015-11-04 01:44 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2015-10-24 12:11 - 2015-10-24 12:44 - 00000000 ____D C:\WINDOWS\servicing 2015-10-24 12:11 - 2015-10-24 12:38 - 00000000 ____D C:\WINDOWS\system32\SMI 2015-10-24 12:11 - 2015-10-24 11:56 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2015-10-24 12:11 - 2015-10-24 11:54 - 00000000 __RHD C:\Users\Default 2015-10-24 12:11 - 2015-07-10 09:11 - 00000164 _____ C:\WINDOWS\system32\config\FP 2015-10-24 12:06 - 2015-10-24 12:06 - 00002060 _____ C:\Users\Administrator\AppData\Local\Application.xml 2015-10-24 12:04 - 2015-11-05 15:04 - 00000000 ____D C:\Users\Alex 2015-10-24 12:04 - 2015-11-05 15:02 - 00000000 ____D C:\Users\Administrator 2015-10-24 12:04 - 2015-10-24 12:58 - 00000000 ___RD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-24 12:04 - 2015-10-24 12:49 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 __RSD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 __RSD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-24 12:04 - 2015-10-24 12:38 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-24 11:58 - 2015-10-24 11:58 - 34438088 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip 2015-10-24 11:57 - 2015-11-04 01:44 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin 2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\WINDOWS\system32\DAX2 2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\Program Files\Realtek 2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 ____D C:\Program Files\AMD 2015-10-24 11:57 - 2015-10-24 11:57 - 00000000 _____ C:\WINDOWS\ativpsrm.bin 2015-10-24 11:56 - 2015-10-24 11:56 - 00000000 ____D C:\Program Files\Common Files\Atheros 2015-10-24 11:56 - 2015-07-10 05:37 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2015-10-24 11:53 - 2015-11-05 15:03 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-10-24 11:53 - 2015-10-29 18:56 - 00331624 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-10-24 11:08 - 2015-10-25 16:26 - 00000000 ___HD C:\$SysReset 2015-10-19 23:49 - 2015-10-19 23:49 - 00000000 ____D C:\Users\Alex\Desktop\com.koushikdutta.backup 2015-10-18 19:01 - 2015-10-18 19:01 - 00000000 ___RD C:\Users\Administrator\OneDrive 2015-10-18 04:16 - 2015-10-18 04:16 - 47795720 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 39721496 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 30774808 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 27544600 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 25320968 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 22327320 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 21643288 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys 2015-10-18 04:16 - 2015-10-18 04:16 - 15727112 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 14312456 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 12063600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 10191296 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 09340592 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 08982472 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 08866480 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 08009392 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 07670208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 07482080 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap 2015-10-18 04:16 - 2015-10-18 04:16 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap 2015-10-18 04:16 - 2015-10-18 04:16 - 01472992 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 01256464 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 01218920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 01196072 _____ C:\WINDOWS\system32\amdocl_as64.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 01070632 _____ C:\WINDOWS\system32\amdocl_ld64.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 01004072 _____ C:\WINDOWS\SysWOW64\amdocl_as32.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 00936968 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00936968 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00876040 _____ (AMD) C:\WINDOWS\system32\coinst_15.20.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00833800 _____ C:\WINDOWS\system32\amdicdxx.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00807464 _____ C:\WINDOWS\SysWOW64\amdocl_ld32.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 00737410 _____ C:\WINDOWS\system32\atiicdxx.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00683544 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 00675840 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys 2015-10-18 04:16 - 2015-10-18 04:16 - 00662032 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb 2015-10-18 04:16 - 2015-10-18 04:16 - 00662032 _____ C:\WINDOWS\system32\atiapfxx.blb 2015-10-18 04:16 - 2015-10-18 04:16 - 00472872 _____ C:\WINDOWS\system32\amdmiracast.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00451096 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00375832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 00341528 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 00322868 _____ C:\WINDOWS\system32\ativvaxy_vi.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00321200 _____ C:\WINDOWS\system32\ativvaxy_vi_nd.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00307936 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdacpksd.sys 2015-10-18 04:16 - 2015-10-18 04:16 - 00257024 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 00255808 _____ C:\WINDOWS\system32\ativvaxy_cz_nd.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00250884 _____ C:\WINDOWS\system32\ativvaxy_FJ.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00249088 _____ C:\WINDOWS\system32\ativvaxy_FJ_nd.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00243736 _____ C:\WINDOWS\system32\clinfo.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 00234420 _____ C:\WINDOWS\system32\ativvaxy_cik.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00232752 _____ C:\WINDOWS\system32\ativvaxy_cik_nd.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00213520 _____ C:\WINDOWS\system32\amdgfxinfo64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00204952 _____ C:\WINDOWS\SysWOW64\ativvsvl.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00204952 _____ C:\WINDOWS\system32\ativvsvl.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00200200 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00199704 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00177344 _____ C:\WINDOWS\system32\ativce03.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00175648 _____ C:\WINDOWS\system32\amde31a.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00170496 _____ C:\WINDOWS\system32\atieah64.exe 2015-10-18 04:16 - 2015-10-18 04:16 - 00166912 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00163792 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll 2015-10-18 04:16 - 2015-10-18 04:16 - 00157144 _____ C:\WINDOWS\SysWOW64\ativvsva.dat 2015-10-18 04:16 - 2015-10-18 04:16 - 00157144 _____ C:\WINDOWS\system32\ativvsva.dat

Hey TwinHeadedEagle, thanks for the assist FRST.txt Addition.txt

HI, Thanks in advance for any help. Something really strange is going on on my laptop, well has been for a while now. I thought I was being paranoid and have clean installed windows 10 to reassure myself but now things have occurred to make me think otherwise again and that whatever is on my pc has survived numerous fresh operating system installs. What's got me worried is what seems like an excessive amount of svchost.exe processes that are running (about 10). The security software I have is ESET smart security 9, Malwarebytes anti-malware premium and Malwarebytes anti-exploit premium. Neither of which on the deepest level scan is picking anything up. Changing some settings on ESET I found a way to notify about allowed startup modifications to programs, upon resetting i got about six notices all of which affecting Malwarebytes anti-malware processes... from services.exe, which made me almost convince that something was wrong. I've also tried GMER to look for rootkits as well which upon launch, alerts that system32 is in use and then upon attempting a scan, my laptop blue screen's after about 10-15 seconds. I'm really worried what is on my laptop, appreciate any help anyone can give me.