Snooks

Hello Porthos, Had to search elsewhere. It appears that I was suppose to upgrade Windows 7 Professional, with Windows 10 Professional. As I noted the operating software above. Simply, I may do a clean 'restore' install, recovery, what ever the process is to get it to original factory setup. This is what I thought I had indicated, when I said, 'Windows 7 Pro, is fine. I have 2 of these computers that have minimal software on them, so with the licenses, keys and other identifying factors, I can re-install software and continue with my studies with little down time. I don't know what this forum is for, however, it's been over a week and not even a 'we're still working on it, can't isolate a fix, etc.' So I wish you well with this group. Signing Off, Snooks

Firefox, I followed the link you supplied to get further assistance. The process (authored by AdvancedSetup) re-routed me back to this forum, but I entered the same topic heading with some dialogue and attached files. So, I hope this is not backlogging other concerns. If there is another area of this forum this topic needs to be directed to, let me know. AdvancedSetup, Who can assist within a 'timeframe' the roll back to Windows 7, Clean up Computer, then re-install Windows 10? Snooks

This message is displayed when desktop is displayed. I click, OK (thinking I can't go further, until I do), then computer works fine. This message appeared after attempting to install Windows 10 (which is not fully installed) on Windows 7 Professional. I was attempting to upgrade before expiration date, but I am fine with Windows 7 Pro. Firefox, replied: "its possible something got changed during you Win10 upgrade that failed to get removed after it failed. I also see this (which may be a possible hard drive failure): Error: (07/19/2016 08:54:56 AM) (Source: atapi) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Ide\IdePort1. It going to require more work than what is permitted in this section of the forum.... I am going to direct you to another section where you can have a one on one expert help you get this cleaned up, simply follow the instructions below. Basically go start a topic there, and post your logs there and wait for someone to pick up your topic. So, for expert assistance, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers. It explains the options for free, expert help -->>AND<<-- the suggested, preliminary steps to expedite the process. A malware analyst will assist you with looking into your issue" I have uploaded files and look forward to working with someone to resolve this issue. Sincerely, Snooks FRST 07192016.txt Addition 07192016.txt CheckResults.txt

Hello Firefox, I started this with AdvancedSetup, July 3, 2016, who I thought would be better able to handle this particular item. I put message in search engine and I selected this site and Tech that seemed to have helped ShooMoe out. However, AdvancedSetup re-directed me back to start a topic. Message below: 'service has been disabled or Sign in to follow this deleted'. The console cannot continue. Started by ShooMoe, July 18, 2014. I have same message on my (used) computer and saved the page of instructions. I am new to this forum and don't know how to 'use' the forum. I saw your solution to this and wanted your (members) advice; proceed with listing as you instructed ShooMoe, etc. I don't know if Windows 10, upgrade from Window 7 Pro, is the cause of this and don't really need to upgrade. Since this is 2016, maybe there are other solutions to this. To be more specific, that message is displayed when desktop is displayed. I click, OK (thinking I can't go further, until I do), then computer works fine. This message appeared after attempting to install Windows 10 (which is not fully installed) on Windows 7 Professional. I was attempting to upgrade before expiration date, but I am fine with Windows 7 Pro. Hope this helps with your question. Snooks

Yes, I forgot. I have uploaded it, now. Snooks CheckResults.txt

I have the uploaded the Farber Recovery Scan Reports. I appreciate your review! Sincerely, Snooks FRST 07192016.txt Addition 07192016.txt

Firefox, Per the instructions: Click on the More Reply Options button, then click on the Browse button to locate your log then click the Attach button to attach the log to your post. Where is the More Reply Options button located? Or, do I attach files here? thanks, Snooks

I get this message when I start computer.

Hello 1PW, Bear with me, this type of communication is a learning experience for me. I don't know where to insert/attach the context (below) to the original topic. Below is the dialogue I had with Advanced Setup: Snooks: 'Service has been disabled or deleted. The console cannot continue. OK.' is a window that pops up when Computer is starting up. I put this message in search and I followed the result to the Malwarebytes, site. It looked like someone else (Started by ShooMoe, July 18, 2014) had same issue and you (Advanced Setup) gave ShooMoe instructions. Advanced Setup: Please open a new topic in the Malware Removal forum and post the FRST logs and someone will take a look at your system for you. Don't post back the logs here in private message, start a new topic on the forum please. Thanks for looking at this!

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-07-2016 Ran by QCGTraining2 (administrator) on TRAINING2-THINK (03-07-2016 12:22:25) Running from C:\Users\QCGTraining2\Downloads Loaded Profiles: QCGTraining2 (Available Profiles: QCGTraining2) Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe (Lenovo) C:\Program Files (x86)\Lenovo\PowerMgr\PWMDBSVC.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\splwow64.exe (CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE (CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\PowerMgr\SCHTASK.EXE (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe (Lenovo) C:\Users\QCGTraining2\AppData\Local\Apps\2.0\GPP7XD07.Z87\V1N32HP2.Q1H\lsb...tion_2d7b41b05b24775e_0001.0006_6c5982beb50abfca\LSB.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-06-01] (Apple Inc.) HKLM-x32\...\Run: [Power Manager Startup Utility] => C:\Program Files (x86)\Lenovo\PowerMgr\DPMHost.exe [23352 2012-02-22] () HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [1091376 2012-01-17] (Lenovo) HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe /boot HKLM-x32\...\Run: [Intuit SyncManager] => C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe [3776824 2015-03-17] (Intuit Inc. All rights reserved.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1298456 2015-04-20] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [438888 2014-01-15] (CANON INC.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2388064668-909700833-3194644588-1000\...\MountPoints2: {ef75c126-bf20-11e1-9e2f-806e6f6e6963} - Q:\LenovoQDrive.exe HKU\S-1-5-21-2388064668-909700833-3194644588-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-20] (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 75.114.81.1 75.114.81.2 Tcpip\..\Interfaces\{BA8A02BB-8183-47D2-8094-8BAFA6C77BE1}: [DhcpNameServer] 75.114.81.1 75.114.81.2 Internet Explorer: ================== HKU\S-1-5-21-2388064668-909700833-3194644588-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkcentre HKU\S-1-5-21-2388064668-909700833-3194644588-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP HKU\S-1-5-21-2388064668-909700833-3194644588-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP HKU\S-1-5-21-2388064668-909700833-3194644588-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkcentre SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2388064668-909700833-3194644588-1000 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_enUS499 SearchScopes: HKU\S-1-5-21-2388064668-909700833-3194644588-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_enUS499 BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-06-23] (Microsoft Corporation) BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-06] (Google Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-06-23] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-23] (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-06-23] (Microsoft Corporation) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-06] (Google Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-06-23] (Microsoft Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-06-23] (Microsoft Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-06] (Google Inc.) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-06] (Google Inc.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Toolbar: HKU\S-1-5-21-2388064668-909700833-3194644588-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-06] (Google Inc.) Handler-x32: intu-help-qb5 - {867FCB77-9823-4cd6-8210-D85F968D466F} - C:\Program Files (x86)\Intuit\QuickBooks 2012\HelpAsyncPluggableProtocol.dll [2012-12-06] (Intuit, Inc.) Handler-x32: intu-help-qb7 - {5A03BD9D-766D-47A6-8E87-CD90F60BE245} - C:\Program Files (x86)\Intuit\QuickBooks 2014\HelpAsyncPluggableProtocol.dll [2014-06-26] (Intuit, Inc.) Handler-x32: intu-help-qb8 - {CD17C364-2EC8-4929-91A9-C4839A20E909} - C:\Program Files (x86)\Intuit\QuickBooks 2015\HelpAsyncPluggableProtocol.dll [2015-03-17] (Intuit, Inc.) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-23] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-23] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-23] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-23] (Microsoft Corporation) Handler-x32: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation) FireFox: ======== FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2015-10-29] (CANON INC.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-05] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-05] (Intel Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-06-23] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-06-23] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-21] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-21] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [VIP5X@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client FF Extension: No Name - C:\Program Files (x86)\Symantec\VIP Access Client [2016-06-28] [not signed] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP CHR StartupUrls: Default -> "hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\PepperFlash\pepflashplayer.dll () CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\ppGoogleNaClPluginChrome.dll => No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\pdf.dll => No File CHR Plugin: (Norton Confidential) - C:\Users\QCGTraining2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.1.0.30_0\npcoplgn.dll => No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => No File CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll => No File CHR Profile: C:\Users\QCGTraining2\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (YouTube) - C:\Users\QCGTraining2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-22] CHR Extension: (Google Search) - C:\Users\QCGTraining2\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-11] CHR Extension: (Chrome Web Store Payments) - C:\Users\QCGTraining2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-22] CHR Extension: (Gmail) - C:\Users\QCGTraining2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-22] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2855152 2016-06-05] (Microsoft Corporation) S4 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [169776 2012-01-17] (Lenovo) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-28] (Intel Corporation) R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [162640 2012-02-09] (Lenovo Group Limited) S3 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [273232 2016-06-02] (Lenovo) R2 Power Manager DBC Service; C:\Program Files (x86)\Lenovo\PowerMgr\PWMDBSVC.EXE [70968 2012-02-22] (Lenovo) S3 PwmEWSvc; C:\Program Files (x86)\Lenovo\PowerMgr\PWMEWSVC.EXE [165176 2012-02-22] (Lenovo Group Limited) S2 QBCFMonitorService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [45056 2015-03-17] (Intuit) [File not signed] S4 QBFCService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2013-12-02] (Intuit Inc.) [File not signed] S4 QBVSS; C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [1248256 2011-08-19] (Intuit Inc.) [File not signed] S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] () R2 UleadBurningHelper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [61440 2008-01-10] (Ulead Systems, Inc.) [File not signed] R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [75336 2014-07-14] (Symantec Corporation) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [70416 2012-01-17] (Windows (R) Win 7 DDK provider) R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-07] (ThinkVantage Communications Utility) R3 VMC444; C:\Windows\System32\Drivers\VMC444.sys [194304 2011-07-26] (Vimicro Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-07-03 12:22 - 2016-07-03 12:22 - 00020372 _____ C:\Users\QCGTraining2\Downloads\FRST.txt 2016-07-03 12:21 - 2016-07-03 12:22 - 00000000 ____D C:\FRST 2016-07-03 12:21 - 2016-07-03 12:21 - 02390016 _____ (Farbar) C:\Users\QCGTraining2\Downloads\FRST64.exe 2016-07-03 12:15 - 2016-07-03 12:15 - 00000000 ____D C:\Users\QCGTraining2\Documents\SanDiskSecureAccessV2.0 2016-07-03 12:15 - 2016-07-03 12:15 - 00000000 ____D C:\Users\QCGTraining2\AppData\Roaming\EncryptStick 2016-07-03 12:15 - 2014-03-31 14:40 - 07773176 _____ (ENC Security Systems LLC) C:\Users\QCGTraining2\Documents\SanDiskSecureAccessV2_win.exe 2016-07-02 20:09 - 2016-07-02 20:21 - 00216802 _____ C:\Windows\ntbtlog.txt 2016-07-01 22:09 - 2016-07-01 22:14 - 00000000 ___HD C:\$WINDOWS.~BT 2016-07-01 14:17 - 2016-07-01 14:17 - 00220980 _____ C:\Users\QCGTraining2\Downloads\w_weal01.pdf 2016-07-01 14:16 - 2016-07-01 14:16 - 02372266 _____ C:\Users\QCGTraining2\Downloads\w_msf227.pdf 2016-07-01 14:16 - 2016-07-01 14:16 - 00401769 _____ C:\Users\QCGTraining2\Downloads\w_frec25.pdf 2016-07-01 14:15 - 2016-07-01 14:16 - 00547051 _____ C:\Users\QCGTraining2\Downloads\w_bush59.pdf 2016-07-01 14:03 - 2016-07-01 14:03 - 02948915 _____ C:\Users\QCGTraining2\Downloads\NWP_052016.pdf 2016-06-30 17:38 - 2016-06-30 17:38 - 00109804 _____ C:\Users\QCGTraining2\Documents\Lenovo_Start Up Message_Inquiry2.pdf 2016-06-30 17:33 - 2016-06-30 17:33 - 00264308 _____ C:\Users\QCGTraining2\Documents\Lenovo_Start Up Message_Inquiry.pdf 2016-06-28 21:54 - 2016-07-01 21:40 - 03100623 _____ C:\Users\QCGTraining2\Documents\HSC_Assesments_ch01.pdf 2016-06-28 20:37 - 2016-06-28 20:37 - 00338688 _____ C:\Users\QCGTraining2\Downloads\anspaugh7e_activities_ch01.pdf 2016-06-28 16:17 - 2016-06-28 16:17 - 00002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIP Access.lnk 2016-06-28 16:17 - 2016-06-28 16:17 - 00002070 _____ C:\Users\Public\Desktop\VIP Access.lnk 2016-06-27 18:44 - 2016-07-03 12:03 - 00000000 ____D C:\Users\QCGTraining2\Desktop\Shelley Bacon.qbw.SearchIndex 2016-06-27 16:01 - 2016-06-27 16:01 - 00014035 _____ C:\Users\QCGTraining2\Downloads\msg0003.WAV 2016-06-27 14:54 - 2016-06-27 16:05 - 00013029 _____ C:\Users\QCGTraining2\Downloads\PartResults-Export-2016-06-27-18-54-56.xlsx 2016-06-27 14:53 - 2016-07-03 12:02 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\Deployment 2016-06-27 14:53 - 2016-06-27 14:53 - 00000000 ____D C:\Users\QCGTraining2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2016-06-27 14:53 - 2016-06-27 14:53 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\Apps\2.0 2016-06-27 14:51 - 2016-06-27 14:51 - 00611400 _____ () C:\Users\QCGTraining2\Downloads\LSBsetup.exe 2016-06-27 14:44 - 2016-06-27 14:49 - 00107881 _____ C:\Users\QCGTraining2\Documents\How to Take a Eucalyptus Cutting _ Home Guides _ SF Gate.pdf 2016-06-27 14:08 - 2016-06-27 14:08 - 00243618 _____ C:\Users\QCGTraining2\Documents\Legal_MorganMorgan_BH_Reply1.pdf 2016-06-27 13:31 - 2016-06-27 13:32 - 00085555 _____ C:\Users\QCGTraining2\Documents\HSC_eTextBook_Rental.pdf 2016-06-27 13:15 - 2016-06-27 13:15 - 01957227 _____ C:\Users\QCGTraining2\Downloads\w_jame01.pdf 2016-06-26 12:28 - 2016-06-26 12:28 - 00260027 _____ C:\Users\QCGTraining2\Documents\_How to install Linux Mint on your Windows PC _ ZDNet.pdf 2016-06-26 11:32 - 2016-06-26 11:32 - 00845393 _____ C:\Users\QCGTraining2\Downloads\w_morg10.pdf 2016-06-26 11:31 - 2016-06-26 11:31 - 01249566 _____ C:\Users\QCGTraining2\Downloads\w_robb04.pdf 2016-06-26 11:30 - 2016-06-26 11:30 - 00948105 _____ C:\Users\QCGTraining2\Downloads\w_cusb55.pdf 2016-06-26 11:30 - 2016-06-26 11:30 - 00317581 _____ C:\Users\QCGTraining2\Downloads\w_frec11.pdf 2016-06-26 11:25 - 2016-06-27 13:34 - 00000000 ____D C:\Users\QCGTraining2\Documents\My Kindle Content 2016-06-26 11:25 - 2016-06-26 11:25 - 00000000 ____D C:\Users\QCGTraining2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2016-06-26 11:24 - 2016-06-26 11:25 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\Amazon 2016-06-26 11:24 - 2016-06-26 11:24 - 00000000 ___HD C:\ProgramData\CanonIJQuickMenu 2016-06-26 11:20 - 2016-06-26 11:20 - 65292192 _____ (Amazon.com) C:\Users\QCGTraining2\Downloads\KindleForPC-installer-1.16.44025.exe 2016-06-26 11:14 - 2016-06-30 18:09 - 00471336 _____ C:\Users\QCGTraining2\Documents\HP_Things To Do_032015.xlsx 2016-06-26 11:14 - 2016-06-22 10:40 - 00055213 _____ C:\Users\QCGTraining2\Documents\PF_cash flow1.xlsx 2016-06-26 11:14 - 2016-06-22 10:40 - 00016865 _____ C:\Users\QCGTraining2\Documents\BUDGET WORKSHEET1.xlsx 2016-06-26 11:14 - 2016-06-22 10:39 - 00019957 _____ C:\Users\QCGTraining2\Documents\personal balance sheet - wealth analysis1.xlsx 2016-06-26 11:14 - 2016-06-16 16:31 - 00226304 _____ C:\Users\QCGTraining2\Documents\PF_cash flow2.xls 2016-06-26 11:14 - 2016-06-16 16:31 - 00028672 _____ C:\Users\QCGTraining2\Documents\PF_BUDGET WORKSHEET2.xls 2016-06-26 11:14 - 2016-06-16 16:30 - 00025600 _____ C:\Users\QCGTraining2\Documents\personal balance sheet - wealth analysis2.xls 2016-06-26 11:14 - 2016-06-16 16:29 - 00055236 _____ C:\Users\QCGTraining2\Documents\PF_cash flow.xltx 2016-06-26 11:14 - 2016-06-16 16:29 - 00016759 _____ C:\Users\QCGTraining2\Documents\PF_BUDGET WORKSHEET.xltx 2016-06-26 11:14 - 2016-06-16 16:28 - 00997376 _____ C:\Users\QCGTraining2\Documents\LN17Keown7192047_06_LN17.ppt 2016-06-26 11:14 - 2016-06-16 16:28 - 00019935 _____ C:\Users\QCGTraining2\Documents\personal balance sheet - wealth analysis.xltx 2016-06-26 11:14 - 2016-06-16 16:27 - 02138112 _____ C:\Users\QCGTraining2\Documents\LN16Keown7192047_06_LN16.ppt 2016-06-26 11:14 - 2016-06-16 16:27 - 01201664 _____ C:\Users\QCGTraining2\Documents\LN14Keown7192047_06_LN14.ppt 2016-06-26 11:14 - 2016-06-16 16:26 - 01448448 _____ C:\Users\QCGTraining2\Documents\LN13Keown7192047_06_LN13.ppt 2016-06-26 11:14 - 2016-06-16 16:26 - 01185792 _____ C:\Users\QCGTraining2\Documents\LN12Keown7192047_06_LN12.ppt 2016-06-26 11:14 - 2016-06-16 16:25 - 01362944 _____ C:\Users\QCGTraining2\Documents\LN11Keown7192047_06_LN11.ppt 2016-06-26 11:14 - 2016-06-16 16:24 - 02087424 _____ C:\Users\QCGTraining2\Documents\LN09Keown7192047_06_LN09.ppt 2016-06-26 11:14 - 2016-06-16 16:22 - 00290947 _____ C:\Users\QCGTraining2\Documents\PERSONAL FINANCIAL PLAN PROJECT - SUMMER2016-ONLINE-v2.pdf 2016-06-26 11:14 - 2016-06-16 16:22 - 00290947 _____ C:\Users\QCGTraining2\Documents\PERSONAL FINANCIAL PLAN PROJECT - SUMMER2016-ONLINE-v2 (1).pdf 2016-06-26 11:14 - 2016-06-16 10:11 - 00060366 _____ C:\Users\QCGTraining2\Documents\Florida Contacts _ USDA Rural Development.pdf 2016-06-26 11:14 - 2016-04-03 16:06 - 00096091 _____ C:\Users\QCGTraining2\Documents\FHA Requirements_ Closing Costs.pdf 2016-06-26 11:14 - 2016-03-19 15:14 - 00027329 _____ C:\Users\QCGTraining2\Documents\Nelnet_03192016.pdf 2016-06-26 11:14 - 2016-03-13 17:10 - 00012567 _____ C:\Users\QCGTraining2\Documents\Cayenne_COA.xlsx 2016-06-26 11:14 - 2016-02-07 12:00 - 00094048 _____ C:\Users\QCGTraining2\Documents\RE_ALTA_TitleInsuranceOverview.pdf 2016-06-26 11:14 - 2016-02-01 19:19 - 00078114 _____ C:\Users\QCGTraining2\Documents\SocialSecurity_Benefit Letter_02012016.pdf 2016-06-26 11:14 - 2016-01-16 08:31 - 00072491 _____ C:\Users\QCGTraining2\Documents\Access_Notice.pdf 2016-06-26 11:14 - 2015-12-31 16:34 - 00134710 _____ C:\Users\QCGTraining2\Documents\Stmnt_042015_1690.pdf 2016-06-26 11:14 - 2015-12-31 16:34 - 00134372 _____ C:\Users\QCGTraining2\Documents\Stmnt_052015_1690.pdf 2016-06-26 11:14 - 2015-12-31 16:32 - 00138042 _____ C:\Users\QCGTraining2\Documents\Stmnt_022015_1690.pdf 2016-06-26 11:14 - 2015-12-31 16:32 - 00135077 _____ C:\Users\QCGTraining2\Documents\Stmnt_032015_1690.pdf 2016-06-26 11:14 - 2015-12-31 16:31 - 00286334 _____ C:\Users\QCGTraining2\Documents\Stmnt_012015_1690.pdf 2016-06-26 11:14 - 2015-12-26 20:29 - 00065102 _____ C:\Users\QCGTraining2\Documents\3565-1chapter01.pdf 2016-06-26 11:14 - 2015-11-11 10:03 - 00089398 _____ C:\Users\QCGTraining2\Documents\RE_how-to-analyze-a-deal.pdf 2016-06-26 11:14 - 2015-10-14 17:19 - 00850036 _____ C:\Users\QCGTraining2\Documents\RE_Financing for Your Homestead or Farm.pdf 2016-06-26 11:14 - 2015-09-13 21:07 - 03391362 _____ C:\Users\QCGTraining2\Documents\Property-Information-Sheet-Raw-Land.pdf 2016-06-26 11:14 - 2015-09-13 20:53 - 00217736 _____ C:\Users\QCGTraining2\Documents\agreement-for-purchase-and-sale+of-vacant-land.pdf 2016-06-26 11:14 - 2015-09-13 20:42 - 00038186 _____ C:\Users\QCGTraining2\Documents\RE_Owner-Financing-GC2.pdf 2016-06-26 11:14 - 2011-04-05 18:11 - 00313300 _____ C:\Users\QCGTraining2\Documents\HUD 1 form.pdf 2016-06-26 11:05 - 2016-06-26 11:24 - 00000000 ____D C:\Users\QCGTraining2\AppData\Roaming\canon 2016-06-26 11:00 - 2016-06-26 11:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2900 series 2016-06-26 10:59 - 2014-03-18 05:00 - 00408576 _____ (CANON INC.) C:\Windows\system32\CNMXLMCB.DLL 2016-06-26 10:58 - 2016-06-26 10:58 - 00000000 ____D C:\Windows\system32\STRING 2016-06-26 10:58 - 2016-06-26 10:58 - 00000000 ____D C:\ProgramData\Canon IJ Network Tool 2016-06-26 10:58 - 2014-03-17 19:15 - 00380928 _____ (CANON INC.) C:\Windows\SysWOW64\CNMNPPM.DLL 2016-06-26 10:58 - 2014-03-17 19:15 - 00375296 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL 2016-06-26 10:58 - 2014-03-17 19:15 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL 2016-06-26 10:58 - 2014-01-21 13:15 - 00336896 _____ (CANON INC.) C:\Windows\SysWOW64\CNC_CBL.dll 2016-06-26 10:58 - 2013-12-02 09:57 - 00088320 _____ C:\Windows\SysWOW64\CNC1780D.TBL 2016-06-26 10:58 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2016-06-26 10:57 - 2016-06-26 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2900 series User Registration 2016-06-26 10:53 - 2016-06-26 10:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2900 series Manual 2016-06-26 10:47 - 2016-07-01 21:44 - 00000000 ____D C:\ProgramData\CanonIJPLM 2016-06-26 10:45 - 2016-06-26 10:45 - 00000000 ___HD C:\ProgramData\CanonIJETV 2016-06-26 10:37 - 2016-06-26 10:37 - 00000000 ____D C:\Users\QCGTraining2\AppData\LocalLow\Canon Easy-WebPrint EX2 2016-06-26 10:37 - 2016-06-26 10:37 - 00000000 ____D C:\Users\QCGTraining2\AppData\LocalLow\Canon Easy-WebPrint EX 2016-06-26 10:36 - 2016-06-26 10:57 - 00000000 ____D C:\ProgramData\CanonIJWSpt 2016-06-26 10:32 - 2016-06-26 10:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2016-06-26 10:32 - 2016-06-26 10:54 - 00000000 ____D C:\Program Files\Canon 2016-06-26 10:32 - 2016-06-26 10:32 - 00000000 ___HD C:\ProgramData\CanonBJ 2016-06-26 10:31 - 2016-06-26 10:32 - 00000000 ___HD C:\Program Files\CanonBJ 2016-06-26 10:31 - 2014-03-18 05:00 - 00406016 _____ (CANON INC.) C:\Windows\system32\CNMLMCB.DLL 2016-06-26 10:22 - 2016-06-26 11:24 - 00000000 ____D C:\Program Files (x86)\Canon 2016-06-26 10:21 - 2016-06-26 10:21 - 51285592 _____ C:\Users\QCGTraining2\Downloads\win-mg2900-1_1-ucd.exe 2016-06-26 10:11 - 2016-06-26 10:11 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\ElevatedDiagnostics 2016-06-25 16:29 - 2016-06-25 16:30 - 00000000 ____D C:\Users\QCGTraining2\Desktop\QB_Training 2016-06-25 13:41 - 2016-06-25 13:41 - 00008192 _____ C:\Windows\system32\config\userdiff 2016-06-25 11:14 - 2016-06-25 11:14 - 00000727 _____ C:\Users\QCGTraining2\Documents\My Calendar.ics 2016-06-25 11:09 - 2016-06-25 11:09 - 00002383 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk 2016-06-25 11:07 - 2016-07-01 14:31 - 00000000 ____D C:\Users\QCGTraining2\Documents\Outlook Files 2016-06-25 00:24 - 2016-06-25 00:35 - 00000000 ____D C:\Windows\system32\MRT 2016-06-25 00:24 - 2016-06-25 00:24 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-06-24 19:50 - 2016-06-24 19:50 - 00000000 ____D C:\Users\QCGTraining2\Documents\Hillsborough Community College 2016-06-24 14:03 - 2016-06-24 14:03 - 00000000 ____D C:\Users\QCGTraining2\Documents\Custom Office Templates 2016-06-24 13:54 - 2016-06-24 13:55 - 09319477 _____ C:\Users\QCGTraining2\Downloads\Lenovo_m93z_Hardware Maintenance Manual.pdf 2016-06-23 14:51 - 2015-07-15 14:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2016-06-23 14:51 - 2015-07-15 14:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2016-06-23 14:51 - 2015-07-15 14:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll 2016-06-23 14:49 - 2015-12-08 17:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2016-06-23 14:49 - 2015-12-08 17:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2016-06-23 14:49 - 2015-12-08 17:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL 2016-06-23 14:49 - 2015-12-08 17:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL 2016-06-23 14:49 - 2015-12-08 17:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL 2016-06-23 14:49 - 2015-12-08 17:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL 2016-06-23 14:49 - 2015-12-08 17:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2016-06-23 14:49 - 2015-12-08 17:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL 2016-06-23 14:49 - 2015-12-08 17:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL 2016-06-23 14:49 - 2015-12-08 17:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL 2016-06-23 14:49 - 2015-12-08 17:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL 2016-06-23 14:49 - 2015-12-08 17:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL 2016-06-23 14:49 - 2015-12-08 17:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2016-06-23 14:49 - 2015-12-08 17:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2016-06-23 14:49 - 2015-12-08 17:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll 2016-06-23 14:49 - 2015-12-08 17:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL 2016-06-23 14:49 - 2015-12-08 17:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL 2016-06-23 14:49 - 2015-12-08 17:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2016-06-23 14:49 - 2015-12-08 17:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2016-06-23 14:49 - 2015-12-08 17:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL 2016-06-23 14:49 - 2015-12-08 17:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2016-06-23 14:49 - 2015-12-08 17:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL 2016-06-23 14:49 - 2015-12-08 17:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL 2016-06-23 14:49 - 2015-12-08 17:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL 2016-06-23 14:49 - 2015-12-08 17:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll 2016-06-23 14:49 - 2015-12-08 17:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax 2016-06-23 14:49 - 2015-12-08 17:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL 2016-06-23 14:49 - 2015-12-08 17:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2016-06-23 14:49 - 2015-12-08 17:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL 2016-06-23 14:49 - 2015-12-08 17:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll 2016-06-23 14:49 - 2015-12-08 17:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll 2016-06-23 14:49 - 2015-12-08 17:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2016-06-23 14:49 - 2015-12-08 17:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2016-06-23 14:49 - 2015-12-08 17:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll 2016-06-23 14:49 - 2015-12-08 17:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 01393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL 2016-06-23 14:49 - 2015-12-08 15:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll 2016-06-23 14:49 - 2015-12-08 15:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2016-06-23 14:49 - 2015-12-08 15:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll 2016-06-23 14:49 - 2015-12-08 15:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2016-06-23 14:49 - 2015-12-08 15:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2016-06-23 14:49 - 2015-12-08 15:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2016-06-23 14:49 - 2015-12-08 14:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2016-06-23 14:49 - 2015-12-08 14:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2016-06-23 14:49 - 2015-12-08 14:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys 2016-06-23 14:48 - 2016-03-15 20:16 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2016-06-23 14:48 - 2016-03-15 20:16 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll 2016-06-23 14:48 - 2016-03-15 19:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll 2016-06-23 14:47 - 2016-05-13 18:15 - 00382184 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2016-06-23 14:47 - 2016-05-13 18:09 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2016-06-23 14:47 - 2016-05-13 18:09 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2016-06-23 14:47 - 2016-05-13 18:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2016-06-23 14:47 - 2016-05-13 18:09 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2016-06-23 14:47 - 2016-05-13 17:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2016-06-23 14:47 - 2016-05-13 17:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2016-06-23 14:47 - 2016-05-13 17:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2016-06-23 14:47 - 2016-05-13 17:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2016-06-23 14:47 - 2016-05-13 17:27 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2016-06-23 14:47 - 2016-03-16 14:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll 2016-06-23 14:47 - 2016-03-16 14:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll 2016-06-23 14:47 - 2016-03-16 14:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll 2016-06-23 14:47 - 2015-11-13 19:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2016-06-23 14:47 - 2015-11-13 19:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2016-06-23 14:47 - 2015-11-13 19:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe 2016-06-23 14:47 - 2015-11-13 18:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll 2016-06-23 14:47 - 2015-11-13 18:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll 2016-06-23 14:47 - 2015-11-13 18:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe 2016-06-23 14:47 - 2015-06-01 20:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2016-06-23 14:47 - 2015-06-01 19:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2016-06-23 14:46 - 2016-03-17 18:56 - 02084864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2016-06-23 14:46 - 2016-03-17 18:28 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2016-06-23 14:46 - 2016-03-06 14:53 - 01885696 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2016-06-23 14:46 - 2016-03-06 14:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2016-06-23 14:46 - 2016-03-06 14:38 - 01240576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2016-06-23 14:46 - 2016-03-06 14:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2016-06-23 14:46 - 2016-02-02 14:57 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2016-06-23 14:46 - 2015-08-05 13:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2016-06-23 14:45 - 2015-07-10 13:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2016-06-23 14:45 - 2015-07-10 13:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2016-06-23 14:45 - 2015-07-10 13:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2016-06-23 14:45 - 2015-07-10 13:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2016-06-23 14:45 - 2015-07-10 13:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2016-06-23 14:45 - 2015-07-10 13:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2016-06-23 14:44 - 2015-11-03 15:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2016-06-23 14:44 - 2015-11-03 14:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2016-06-23 14:18 - 2016-05-12 13:15 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-06-23 14:18 - 2016-05-12 11:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2016-06-23 14:18 - 2016-01-20 20:51 - 00073664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys 2016-06-23 14:18 - 2015-11-19 10:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2016-06-23 14:18 - 2015-11-19 10:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2016-06-23 14:17 - 2015-07-14 23:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll 2016-06-23 14:17 - 2015-07-09 13:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2016-06-23 14:17 - 2015-07-09 13:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2016-06-23 14:17 - 2015-07-09 13:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2016-06-23 14:17 - 2015-07-09 13:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2016-06-23 14:16 - 2016-02-12 14:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2016-06-23 14:16 - 2016-02-12 14:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2016-06-23 14:16 - 2016-02-12 14:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2016-06-23 14:16 - 2016-02-12 14:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2016-06-23 14:16 - 2016-02-12 14:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2016-06-23 14:16 - 2016-02-12 14:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2016-06-23 14:16 - 2016-02-12 14:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2016-06-23 14:16 - 2016-02-12 14:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2016-06-23 14:16 - 2016-02-12 14:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2016-06-23 14:16 - 2016-02-12 14:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2016-06-23 14:16 - 2016-02-12 14:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2016-06-23 14:16 - 2016-02-12 14:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2016-06-23 14:16 - 2016-02-12 14:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2016-06-23 14:16 - 2016-02-12 14:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2016-06-23 14:16 - 2016-02-12 14:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2016-06-23 14:16 - 2016-02-12 14:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2016-06-23 14:15 - 2016-05-12 13:20 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-06-23 14:15 - 2016-05-12 13:20 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-06-23 14:15 - 2016-05-12 13:15 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-06-23 14:15 - 2016-05-12 13:15 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-06-23 14:15 - 2016-05-12 13:15 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-06-23 14:15 - 2016-05-12 13:15 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-06-23 14:15 - 2016-05-12 13:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-06-23 14:15 - 2016-05-12 11:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-06-23 14:15 - 2016-05-12 11:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-06-23 14:15 - 2016-05-12 11:03 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-06-23 14:15 - 2016-05-12 10:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2016-06-23 14:15 - 2016-05-12 10:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2016-06-23 14:15 - 2016-05-12 10:58 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-06-23 14:15 - 2016-05-12 10:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2016-06-23 14:15 - 2016-05-12 10:58 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-06-23 14:15 - 2016-05-12 10:58 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-06-23 14:15 - 2016-05-12 10:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-06-23 14:15 - 2016-05-12 10:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-06-23 14:15 - 2016-05-12 10:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-06-23 14:15 - 2016-05-12 09:05 - 00459640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2016-06-23 14:15 - 2016-05-12 09:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2016-06-23 14:15 - 2016-05-12 09:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2016-06-23 14:15 - 2016-04-09 03:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-06-23 14:15 - 2016-04-09 03:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-06-23 14:15 - 2016-04-09 02:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2016-06-23 14:14 - 2015-04-27 15:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2016-06-23 14:14 - 2015-04-27 15:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2016-06-23 14:14 - 2015-04-27 15:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2016-06-23 14:14 - 2015-04-27 15:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2016-06-23 14:14 - 2015-04-27 15:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2016-06-23 14:14 - 2015-04-27 15:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2016-06-23 14:14 - 2015-04-27 15:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2016-06-23 14:14 - 2015-04-27 15:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2016-06-23 13:41 - 2016-02-05 15:03 - 00147904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys 2016-06-23 13:41 - 2016-02-05 14:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll 2016-06-23 13:41 - 2015-07-30 14:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2016-06-23 13:41 - 2015-07-30 13:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2016-06-23 13:41 - 2015-06-03 16:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2016-06-23 13:40 - 2016-02-05 14:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll 2016-06-23 13:40 - 2016-02-05 13:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll 2016-06-23 13:38 - 2015-11-10 14:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2016-06-23 13:38 - 2015-11-10 14:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2016-06-23 13:38 - 2015-11-10 14:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2016-06-23 13:38 - 2015-11-10 14:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2016-06-23 13:38 - 2015-11-10 14:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2016-06-23 13:38 - 2015-07-01 16:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2016-06-23 13:38 - 2015-07-01 16:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2016-06-23 13:38 - 2015-07-01 16:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2016-06-23 13:38 - 2015-07-01 16:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2016-06-23 13:37 - 2016-06-06 12:58 - 00041704 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2016-06-23 13:37 - 2016-06-06 12:50 - 01204224 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2016-06-23 13:37 - 2016-06-03 09:05 - 01413120 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2016-06-23 13:37 - 2016-05-27 09:06 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2016-06-23 13:37 - 2016-05-27 09:06 - 00544256 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2016-06-23 13:37 - 2016-05-27 09:06 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2016-06-23 13:37 - 2016-05-27 09:06 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2016-06-23 13:37 - 2016-05-22 09:06 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2016-06-23 13:37 - 2016-03-23 18:40 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2016-06-23 13:37 - 2016-02-03 14:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2016-06-23 13:37 - 2016-02-03 14:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2016-06-23 13:37 - 2016-02-03 14:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2016-06-23 13:37 - 2016-02-03 14:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll 2016-06-23 13:37 - 2016-02-03 14:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2016-06-23 13:37 - 2016-01-11 15:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2016-06-23 13:37 - 2016-01-07 13:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2016-06-23 13:37 - 2015-11-05 15:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll 2016-06-23 13:37 - 2015-11-05 15:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll 2016-06-23 13:37 - 2015-11-05 05:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2016-06-23 13:35 - 2016-02-04 21:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2016-06-23 13:35 - 2016-02-04 14:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll 2016-06-23 13:35 - 2015-11-11 14:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2016-06-23 13:35 - 2015-11-11 14:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll 2016-06-23 13:35 - 2015-11-11 14:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll 2016-06-23 13:35 - 2015-11-11 14:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll 2016-06-23 13:34 - 2015-12-08 17:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2016-06-23 13:34 - 2015-12-08 15:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2016-06-23 13:34 - 2015-10-29 13:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2016-06-23 13:34 - 2015-10-29 13:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2016-06-23 13:34 - 2015-10-29 13:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2016-06-23 13:34 - 2015-10-29 13:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2016-06-23 13:34 - 2015-10-29 13:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll 2016-06-23 13:34 - 2015-10-29 13:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2016-06-23 13:34 - 2015-10-29 13:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe 2016-06-23 13:34 - 2015-10-13 12:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2016-06-23 13:34 - 2015-10-13 12:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2016-06-23 13:34 - 2015-07-22 20:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2016-06-23 13:34 - 2015-07-22 20:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2016-06-23 13:34 - 2015-07-22 13:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2016-06-23 13:34 - 2015-07-22 12:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2016-06-23 13:28 - 2015-08-27 14:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2016-06-23 13:28 - 2015-08-27 14:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2016-06-23 13:28 - 2015-08-27 13:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2016-06-23 13:28 - 2015-08-27 13:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2016-06-23 10:12 - 2016-06-23 10:12 - 00002432 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk 2016-06-23 10:12 - 2016-06-23 10:12 - 00002427 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk 2016-06-23 10:12 - 2016-06-23 10:12 - 00002426 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk 2016-06-23 10:12 - 2016-06-23 10:12 - 00002377 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk 2016-06-23 10:12 - 2016-06-23 10:12 - 00002369 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2016-06-23 10:11 - 2016-06-25 14:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools 2016-06-23 10:11 - 2016-06-23 10:11 - 00002468 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk 2016-06-23 10:11 - 2016-06-23 10:11 - 00002390 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk 2016-06-23 10:11 - 2016-06-23 10:11 - 00002389 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk 2016-06-23 10:07 - 2016-06-25 14:19 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-06-23 10:04 - 2016-06-23 10:04 - 00000000 ____D C:\Program Files\Microsoft Office 15 2016-06-23 10:02 - 2016-06-23 10:02 - 03482304 _____ (Microsoft Corporation) C:\Users\QCGTraining2\Downloads\Setup.X86.en-US_O365ProPlusRetail_06713ae4-3f6a-4787-b12b-4212c41287a8_TX_PR_b_67_.exe 2016-06-22 15:04 - 2016-06-25 14:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-06-22 15:03 - 2016-06-24 13:04 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-06-22 15:03 - 2016-06-24 13:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-06-22 15:00 - 2015-07-30 09:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2016-06-22 15:00 - 2015-07-30 09:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2016-06-22 14:27 - 2016-06-22 14:27 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2016-06-22 14:27 - 2016-06-22 14:27 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2016-06-22 14:02 - 2016-06-22 14:03 - 00000000 ____D C:\Users\QCGTraining2\AppData\Roaming\Apple Computer 2016-06-22 14:02 - 2016-06-22 14:02 - 00001764 _____ C:\Users\Public\Desktop\iTunes.lnk 2016-06-22 14:02 - 2016-06-22 14:02 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\Apple Computer 2016-06-22 14:01 - 2016-06-25 14:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2016-06-22 14:01 - 2016-06-22 14:01 - 00000000 ____D C:\ProgramData\Apple Computer 2016-06-22 14:01 - 2016-06-22 14:01 - 00000000 ____D C:\Program Files\iTunes 2016-06-22 14:01 - 2016-06-22 14:01 - 00000000 ____D C:\Program Files\iPod 2016-06-22 14:01 - 2016-06-22 14:01 - 00000000 ____D C:\Program Files (x86)\iTunes 2016-06-22 14:00 - 2016-06-22 14:00 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-06-22 14:00 - 2016-06-22 14:00 - 00000000 ____D C:\Windows\System32\Tasks\Apple 2016-06-22 14:00 - 2016-06-22 14:00 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\Apple 2016-06-22 14:00 - 2016-06-22 14:00 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2016-06-22 13:58 - 2016-06-22 14:01 - 00000000 ____D C:\Program Files\Common Files\Apple 2016-06-22 13:58 - 2016-06-22 13:58 - 00000000 ____D C:\Program Files\Bonjour 2016-06-22 13:58 - 2016-06-22 13:58 - 00000000 ____D C:\Program Files (x86)\Bonjour 2016-06-22 13:57 - 2016-06-22 13:59 - 00000000 ____D C:\ProgramData\Apple 2016-06-22 12:43 - 2016-05-11 13:02 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2016-06-22 12:43 - 2016-05-11 13:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2016-06-22 12:43 - 2016-05-11 13:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2016-06-22 12:43 - 2016-05-11 13:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2016-06-22 12:43 - 2016-05-11 11:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2016-06-22 12:43 - 2016-05-11 11:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2016-06-22 12:43 - 2016-05-11 11:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2016-06-22 12:43 - 2016-05-11 11:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll 2016-06-22 12:43 - 2016-05-11 11:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe 2016-06-22 12:43 - 2016-05-11 11:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe 2016-06-22 12:43 - 2016-05-11 10:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2016-06-22 12:43 - 2016-04-14 09:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2016-06-22 12:43 - 2016-04-14 09:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-06-22 12:43 - 2016-02-09 05:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll 2016-06-22 12:22 - 2016-06-22 12:25 - 170473288 _____ (Apple Inc.) C:\Users\QCGTraining2\Downloads\iTunes6464Setup.exe 2016-06-22 12:22 - 2016-01-22 02:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2016-06-22 12:22 - 2016-01-22 02:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2016-06-22 12:22 - 2016-01-22 02:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll 2016-06-22 12:22 - 2016-01-22 02:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2016-06-22 12:20 - 2016-05-12 13:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll 2016-06-22 12:20 - 2016-05-12 13:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2016-06-22 12:20 - 2016-05-12 13:14 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll 2016-06-22 12:20 - 2016-05-12 13:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2016-06-22 12:20 - 2016-05-12 13:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll 2016-06-22 12:20 - 2016-05-12 13:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll 2016-06-22 12:20 - 2016-05-12 13:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll 2016-06-22 12:20 - 2016-05-12 13:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll 2016-06-22 12:20 - 2016-05-12 11:18 - 00591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll 2016-06-22 12:20 - 2016-05-12 11:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll 2016-06-22 12:20 - 2016-05-12 11:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll 2016-06-22 12:20 - 2016-05-12 11:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll 2016-06-22 12:20 - 2016-05-12 11:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll 2016-06-22 12:20 - 2016-05-12 11:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe 2016-06-22 12:20 - 2016-05-12 10:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll 2016-06-22 12:20 - 2016-05-12 10:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.exe 2016-06-22 12:19 - 2016-05-18 12:10 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-06-22 12:19 - 2016-05-18 12:09 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-06-22 12:19 - 2016-04-09 02:58 - 14186496 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2016-06-22 12:19 - 2016-04-09 02:57 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2016-06-22 12:19 - 2016-04-09 02:54 - 12881408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2016-06-22 12:19 - 2016-04-09 02:54 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2016-06-22 12:19 - 2016-04-09 01:53 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2016-06-22 12:19 - 2016-04-09 01:44 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2016-06-22 12:19 - 2016-04-06 11:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-06-22 12:19 - 2016-03-09 15:00 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2016-06-22 12:19 - 2016-03-09 14:40 - 00316416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2016-06-22 12:19 - 2016-02-09 05:57 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2016-06-22 12:19 - 2016-02-09 05:57 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2016-06-22 12:19 - 2016-02-09 05:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2016-06-22 12:19 - 2016-02-09 05:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2016-06-22 12:19 - 2016-02-09 05:54 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2016-06-22 12:19 - 2016-02-09 05:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2016-06-22 12:19 - 2016-02-09 05:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2016-06-22 12:19 - 2016-02-09 05:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll 2016-06-22 12:19 - 2016-02-09 05:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx 2016-06-22 12:19 - 2016-02-09 05:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll 2016-06-22 12:19 - 2015-10-13 00:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2016-06-22 12:18 - 2016-04-14 12:46 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2016-06-22 12:18 - 2016-04-14 12:42 - 03243520 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2016-06-22 12:18 - 2016-04-14 12:42 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2016-06-22 12:18 - 2016-04-14 12:42 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2016-06-22 12:18 - 2016-04-14 12:42 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2016-06-22 12:18 - 2016-04-14 12:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2016-06-22 12:18 - 2016-04-14 11:33 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2016-06-22 12:18 - 2016-04-14 11:33 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2016-06-22 12:18 - 2016-04-14 11:33 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2016-06-22 12:18 - 2016-04-14 11:33 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2016-06-22 12:18 - 2016-04-14 11:19 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2016-06-22 12:18 - 2016-04-14 11:11 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2016-06-22 12:18 - 2016-04-09 03:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-06-22 12:18 - 2016-04-09 03:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-06-22 12:18 - 2016-04-09 03:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-06-22 12:18 - 2016-04-09 02:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-06-22 12:18 - 2016-04-09 02:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-06-22 12:18 - 2016-04-09 02:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-06-22 12:18 - 2016-04-09 02:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-06-22 12:18 - 2016-04-09 02:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-06-22 12:18 - 2016-04-09 02:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-06-22 12:18 - 2016-04-09 02:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-06-22 12:18 - 2016-04-09 02:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-06-22 12:18 - 2016-04-09 02:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-06-22 12:18 - 2016-04-09 02:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 01:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-06-22 12:18 - 2016-04-09 01:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-06-22 12:18 - 2016-04-09 01:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-06-22 12:18 - 2016-04-09 01:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-06-22 12:18 - 2016-04-09 01:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-06-22 12:18 - 2016-04-09 01:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-06-22 12:18 - 2016-04-09 01:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-06-22 12:18 - 2016-04-09 01:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-06-22 12:18 - 2016-04-09 01:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-06-22 12:18 - 2016-04-09 01:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-06-22 12:18 - 2016-04-09 01:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 01:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 01:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-06-22 12:18 - 2016-04-09 01:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-06-22 12:18 - 2016-03-23 18:40 - 00634432 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2016-06-22 12:18 - 2016-03-09 14:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-06-22 12:18 - 2016-03-09 14:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2016-06-22 12:18 - 2015-11-03 15:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll 2016-06-22 12:18 - 2015-11-03 14:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll 2016-06-22 12:13 - 2016-05-23 19:37 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-06-22 12:13 - 2016-05-23 18:54 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-06-22 12:13 - 2016-05-21 13:28 - 25802752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-06-22 12:13 - 2016-05-21 12:57 - 20341248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-06-22 12:13 - 2016-05-20 18:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-06-22 12:13 - 2016-05-20 18:27 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-06-22 12:13 - 2016-05-20 18:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-06-22 12:13 - 2016-05-20 18:10 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-06-22 12:13 - 2016-05-20 18:09 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-06-22 12:13 - 2016-05-20 18:09 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-06-22 12:13 - 2016-05-20 18:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-06-22 12:13 - 2016-05-20 18:08 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-06-22 12:13 - 2016-05-20 18:08 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-06-22 12:13 - 2016-05-20 18:02 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-06-22 12:13 - 2016-05-20 18:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-06-22 12:13 - 2016-05-20 17:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-06-22 12:13 - 2016-05-20 17:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-06-22 12:13 - 2016-05-20 17:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-06-22 12:13 - 2016-05-20 17:57 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-06-22 12:13 - 2016-05-20 17:56 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-06-22 12:13 - 2016-05-20 17:56 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-06-22 12:13 - 2016-05-20 17:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-06-22 12:13 - 2016-05-20 17:54 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-06-22 12:13 - 2016-05-20 17:54 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-06-22 12:13 - 2016-05-20 17:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-06-22 12:13 - 2016-05-20 17:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-06-22 12:13 - 2016-05-20 17:50 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-06-22 12:13 - 2016-05-20 17:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-06-22 12:13 - 2016-05-20 17:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-06-22 12:13 - 2016-05-20 17:45 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-06-22 12:13 - 2016-05-20 17:45 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-06-22 12:13 - 2016-05-20 17:44 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-06-22 12:13 - 2016-05-20 17:44 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-06-22 12:13 - 2016-05-20 17:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-06-22 12:13 - 2016-05-20 17:41 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-06-22 12:13 - 2016-05-20 17:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-06-22 12:13 - 2016-05-20 17:33 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-06-22 12:13 - 2016-05-20 17:32 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-06-22 12:13 - 2016-05-20 17:29 - 13815808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-06-22 12:13 - 2016-05-20 17:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-06-22 12:13 - 2016-05-20 17:27 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-06-22 12:13 - 2016-05-20 17:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-06-22 12:13 - 2016-05-20 17:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-06-22 12:13 - 2016-05-20 17:25 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-06-22 12:13 - 2016-05-20 17:23 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-06-22 12:13 - 2016-05-20 17:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-06-22 12:13 - 2016-05-20 17:22 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-06-22 12:13 - 2016-05-20 17:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-06-22 12:13 - 2016-05-20 17:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-06-22 12:13 - 2016-05-20 17:14 - 04610048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-06-22 12:13 - 2016-05-20 17:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-06-22 12:13 - 2016-05-20 17:11 - 15420928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-06-22 12:13 - 2016-05-20 17:11 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-06-22 12:13 - 2016-05-20 17:09 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-06-22 12:13 - 2016-05-20 17:09 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-06-22 12:13 - 2016-05-20 17:08 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-06-22 12:13 - 2016-05-20 17:08 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-06-22 12:13 - 2016-05-20 17:07 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-06-22 12:13 - 2016-05-20 17:07 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-06-22 12:13 - 2016-05-20 17:06 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-06-22 12:13 - 2016-05-20 16:46 - 02597888 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-06-22 12:13 - 2016-05-20 16:42 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-06-22 12:13 - 2016-05-20 16:38 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-06-22 12:13 - 2016-05-20 16:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-06-22 12:13 - 2016-05-20 16:34 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-06-22 12:13 - 2016-05-20 16:23 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-06-22 12:13 - 2016-04-09 00:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2016-06-22 12:13 - 2016-04-08 23:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2016-06-22 10:43 - 2016-06-22 10:43 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software 2016-06-22 10:43 - 2016-06-22 10:43 - 00000000 ____D C:\Program Files\Common Files\AV 2016-06-22 10:38 - 2016-07-01 21:46 - 00000000 ____D C:\ProgramData\AVAST Software 2016-06-22 10:21 - 2016-06-22 10:24 - 221833168 _____ (AVAST Software) C:\Users\QCGTraining2\Downloads\avast_free_antivirus_setup_offline.exe 2016-06-22 00:29 - 2016-06-22 00:29 - 00000017 _____ C:\Windows\SysWOW64\shortcut_ex.dat 2016-06-21 22:03 - 2016-06-21 22:04 - 00000000 ____D C:\ProgramData\VirtualizedApplications 2016-06-21 21:08 - 2016-06-21 21:08 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\CEF 2016-06-21 21:05 - 2016-06-21 21:05 - 00000000 ____D C:\Users\QCGTraining2\AppData\LocalLow\Adobe 2016-06-21 20:08 - 2016-07-01 22:09 - 00001890 _____ C:\Windows\diagwrn.xml 2016-06-21 20:08 - 2016-07-01 22:09 - 00001890 _____ C:\Windows\diagerr.xml 2016-06-21 19:58 - 2016-07-03 12:00 - 00000066 _____ C:\Windows\progress.ini 2016-06-21 19:49 - 2016-06-26 14:56 - 00000000 ____D C:\Users\QCGTraining2\AppData\Roaming\SoftGrid Client 2016-06-21 19:49 - 2016-06-21 19:49 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\SoftGrid Client 2016-06-21 19:48 - 2016-06-21 19:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (English) 2016-06-21 19:47 - 2016-06-22 15:00 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client 2016-06-21 19:47 - 2016-06-21 19:49 - 00000000 ____D C:\Users\QCGTraining2\AppData\Roaming\TP 2016-06-21 19:45 - 2016-06-21 21:24 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-06-21 19:44 - 2016-06-21 21:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-06-21 19:44 - 2016-06-21 19:44 - 00002058 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk 2016-06-21 19:32 - 2016-07-03 12:00 - 00000000 ___HD C:\$GetCurrent 2016-06-21 19:32 - 2016-07-01 21:50 - 00000000 ____D C:\Windows10Upgrade 2016-06-21 19:32 - 2016-06-21 19:32 - 00000705 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10 Upgrade Assistant.lnk 2016-06-21 19:32 - 2016-06-21 19:32 - 00000693 _____ C:\Users\QCGTraining2\Desktop\Windows 10 Upgrade Assistant.lnk 2016-06-21 19:31 - 2016-06-21 19:31 - 05788016 _____ (Microsoft Corporation) C:\Users\QCGTraining2\Downloads\Windows10Upgrade9194.exe 2016-06-21 19:18 - 2016-07-03 12:04 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-06-21 19:18 - 2016-06-21 19:18 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-06-21 19:18 - 2016-06-21 19:18 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-06-21 19:18 - 2016-06-21 19:18 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-06-05 11:08 - 2016-06-05 11:08 - 00635120 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll 2016-06-05 11:08 - 2016-06-05 11:08 - 00390408 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll 2016-06-05 11:08 - 2016-06-05 11:08 - 00333080 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll 2016-06-05 11:08 - 2016-06-05 11:08 - 00088816 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll 2016-06-05 08:55 - 2016-06-05 08:55 - 00439536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll 2016-06-05 08:55 - 2016-06-05 08:55 - 00267008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll 2016-06-05 08:55 - 2016-06-05 08:55 - 00243480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll 2016-06-05 08:55 - 2016-06-05 08:55 - 00085232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-07-03 12:14 - 2009-07-14 01:13 - 00783424 _____ C:\Windows\system32\PerfStringBackup.INI 2016-07-03 12:14 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\inf 2016-07-03 12:09 - 2009-07-14 00:45 - 00031296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-07-03 12:09 - 2009-07-14 00:45 - 00031296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-07-03 12:00 - 2012-06-25 20:20 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-07-03 12:00 - 2009-07-14 01:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-07-01 22:09 - 2011-02-15 05:42 - 00000000 ____D C:\Windows\Panther 2016-06-30 20:01 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\rescache 2016-06-27 18:17 - 2009-07-14 01:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2016-06-27 14:54 - 2012-06-25 20:10 - 00000000 ____D C:\Windows\System32\Tasks\Lenovo 2016-06-26 10:58 - 2009-07-13 23:20 - 00000000 __RSD C:\Windows\Media 2016-06-26 10:01 - 2012-06-25 20:26 - 00000000 ____D C:\ProgramData\Norton 2016-06-25 14:19 - 2012-12-19 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-06-25 14:19 - 2012-08-18 12:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickBooks 2016-06-25 14:19 - 2012-07-16 16:05 - 00000000 ____D C:\Users\QCGTraining2 2016-06-25 14:19 - 2012-06-25 20:25 - 00000000 ____D C:\Windows\en 2016-06-25 14:19 - 2012-06-25 20:24 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2016-06-25 14:19 - 2012-06-25 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote 2016-06-25 14:19 - 2012-06-25 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel DVD MovieFactory Lenovo Edition 2016-06-25 14:19 - 2012-06-25 20:09 - 00000000 ____D C:\Program Files\Lenovo 2016-06-25 14:19 - 2012-06-25 20:08 - 00000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools 2016-06-25 14:19 - 2012-06-25 20:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Integrated Camera 2016-06-25 14:19 - 2010-11-21 03:16 - 00000000 ___RD C:\Users\Public\Recorded TV 2016-06-25 14:19 - 2010-11-21 03:16 - 00000000 ____D C:\Windows\ShellNew 2016-06-25 14:19 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\NDF 2016-06-25 14:19 - 2009-07-13 23:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2016-06-25 10:17 - 2012-06-25 20:20 - 00002283 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-06-25 09:15 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\Registration 2016-06-24 22:41 - 2012-06-25 20:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-06-24 13:06 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2016-06-24 07:34 - 2009-07-14 00:45 - 00476560 _____ C:\Windows\system32\FNTCACHE.DAT 2016-06-24 07:31 - 2015-06-28 13:28 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-06-24 07:31 - 2015-06-28 13:28 - 00000000 ___SD C:\Windows\system32\GWX 2016-06-24 07:31 - 2014-12-20 15:46 - 00000000 ____D C:\Windows\system32\appraiser 2016-06-24 07:31 - 2014-05-07 03:34 - 00000000 ___SD C:\Windows\system32\CompatTel 2016-06-23 18:16 - 2012-08-18 12:05 - 00775482 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2016-06-23 13:17 - 2012-07-16 16:07 - 00127960 _____ C:\Users\QCGTraining2\AppData\Local\GDIPFONTCACHEV1.DAT 2016-06-23 09:08 - 2010-11-21 03:17 - 00000000 ____D C:\Program Files\Windows Journal 2016-06-22 06:55 - 2012-07-16 17:18 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\LSC 2016-06-22 06:55 - 2012-06-25 19:39 - 00000000 ____D C:\ProgramData\Lenovo 2016-06-22 06:48 - 2012-06-25 20:10 - 00000000 ____D C:\Windows\Downloaded Installations 2016-06-22 04:16 - 2012-07-16 17:17 - 00000000 ____D C:\Users\QCGTraining2\AppData\Roaming\LSC 2016-06-21 21:09 - 2012-06-25 20:10 - 00000000 ____D C:\ProgramData\Adobe 2016-06-21 21:08 - 2012-07-16 17:17 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\Adobe 2016-06-21 21:05 - 2012-07-16 17:17 - 00000000 ____D C:\Users\QCGTraining2\AppData\Roaming\Adobe 2016-06-21 19:59 - 2012-07-16 17:17 - 00000000 ____D C:\Users\QCGTraining2\AppData\Local\Google 2016-06-21 19:44 - 2012-06-25 20:10 - 00000000 ____D C:\Program Files (x86)\Adobe 2016-06-21 19:24 - 2012-07-16 17:12 - 00000000 ____D C:\Users\QCGTraining2\AppData\LocalLow\VeriSign 2016-06-21 18:47 - 2009-07-13 23:20 - 00000000 __RHD C:\Users\Public\Libraries 2016-06-21 18:46 - 2012-06-25 20:20 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-06-21 18:46 - 2012-06-25 20:20 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-06-21 18:46 - 2012-06-25 20:20 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-06-13 19:31 - 2010-11-20 23:27 - 00484008 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe ==================== Files in the root of some directories ======= 2014-03-28 10:32 - 2014-03-28 10:32 - 0003480 _____ () C:\Users\QCGTraining2\AppData\Roaming\QBFileDrTool.log 2015-07-10 12:46 - 2015-07-10 12:46 - 0000000 _____ () C:\Users\QCGTraining2\AppData\Local\{D28E03AA-D5E1-47E2-A9EC-8410AE6908AE} Some files in TEMP: ==================== C:\Users\QCGTraining2\AppData\Local\Temp\Abspdf.exe C:\Users\QCGTraining2\AppData\Local\Temp\acfpdfu.dll C:\Users\QCGTraining2\AppData\Local\Temp\acfpdfuamd64.dll C:\Users\QCGTraining2\AppData\Local\Temp\acfpdfui.dll C:\Users\QCGTraining2\AppData\Local\Temp\acfpdfuia64.dll C:\Users\QCGTraining2\AppData\Local\Temp\acfpdfuiamd64.dll C:\Users\QCGTraining2\AppData\Local\Temp\acfpdfuiia64.dll C:\Users\QCGTraining2\AppData\Local\Temp\cdintf.dll C:\Users\QCGTraining2\AppData\Local\Temp\InstallAX.exe C:\Users\QCGTraining2\AppData\Local\Temp\MSETUP4.EXE C:\Users\QCGTraining2\AppData\Local\Temp\ose00000.exe C:\Users\QCGTraining2\AppData\Local\Temp\PDFPRT400.exe C:\Users\QCGTraining2\AppData\Local\Temp\uninstall.exe C:\Users\QCGTraining2\AppData\Local\Temp\Windows10Upgrade.exe C:\Users\QCGTraining2\AppData\Local\Temp\xmllite.dll ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-06-28 17:19 ==================== End of FRST.txt ============================