API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Feb 6th, 2016
119
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 84.69 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016
  2. Ran by Ward (administrator) on WARD-PC (06-02-2016 13:55:55)
  3. Running from C:\Users\Ward\Desktop
  4. Loaded Profiles: Ward (Available Profiles: Ward)
  5. Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: IE)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  16. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  17. (Microsoft Corporation) C:\Windows\System32\wlanext.exe
  18. (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  19. (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
  20. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  21. (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
  22. (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
  23. (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
  24. (Juniper Networks, Inc.) C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe
  25. (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
  26. (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
  27. (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
  28. (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
  29. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  30. (Intel Corporation) C:\Windows\System32\igfxpers.exe
  31. (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
  32. (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
  33. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
  34. (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
  35. (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
  36. (Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\22.5.5.15\n360.exe
  37. (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
  38. (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
  39. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  40. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  41. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
  42. (Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\22.5.5.15\n360.exe
  43. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  44. (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
  45. (Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 5530 series\Bin\ScanToPCActivationApp.exe
  46. (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
  47. (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
  48. (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
  49. (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
  50. (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
  51. (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
  52. (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
  53. (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
  54. (Dolby Laboratories Inc.) C:\DOLBY PCEE4\pcee4.exe
  55. (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
  56. (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
  57. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
  58. (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
  59. (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
  60. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  61. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
  62. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
  63. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  64. (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
  65. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  66. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  67. (Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 5530 series\Bin\HPNetworkCommunicatorCom.exe
  68. (Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
  69. (Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
  70. (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
  71. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
  72. (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
  73. (Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe
  74. (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_20_0_0_286_ActiveX.exe
  75.  
  76.  
  77. ==================== Registry (Whitelisted) ===========================
  78.  
  79. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  80.  
  81. HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
  82. HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
  83. HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.)
  84. HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [499304 2011-03-28] (Acer Incorporated)
  85. HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
  86. HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
  87. HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  88. HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-11] (NVIDIA Corporation)
  89. HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-16] (Renesas Electronics Corporation)
  90. HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-06-21] (Egis Technology Inc.)
  91. HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
  92. HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-06-30] (Dritek System Inc.)
  93. HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
  94. HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
  95. HKLM-x32\...\Run: [] => [X]
  96. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation)
  97. Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
  98. HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
  99. HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
  100. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\...\Run: [HP ENVY 5530 series (NET)] => C:\Program Files\HP\HP ENVY 5530 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP)
  101. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\...\Run: [UM] => C:\Users\Ward\AppData\Roaming\Update Manager\UM.EXE
  102. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\...\Run: [NETGEARGenie] => C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2015-06-01] (NETGEAR Inc.)
  103. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\...\Run: [NowUSeeIt Player] => "C:\Program Files (x86)\NowUSeeItPlayer\NowUSeeItPlayer.exe" /autostart=1
  104. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\...\Run: [GoogleChromeAutoLaunch_F68F7FC49005F4B11802D204FDBCFA1D] => "C:\Users\Ward\AppData\Local\Chromium\Application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session
  105. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\...\MountPoints2: {02c41e85-80e8-11e1-8b45-dc0ea12529c7} - E:\TL-Bootstrap.exe
  106. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\...\MountPoints2: {d1d02d5c-f6ff-11e1-9085-dc0ea12529c7} - E:\TL-Bootstrap.exe
  107. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [241664 2010-11-20] (Microsoft Corporation)
  108. HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
  109. AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [175368 2015-12-16] (NVIDIA Corporation)
  110. AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [153392 2015-12-16] (NVIDIA Corporation)
  111. Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
  112. ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-01-15] (Google)
  113. ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-01-15] (Google)
  114. ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-01-15] (Google)
  115. ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security Suite\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
  116. ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security Suite\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
  117. ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security Suite\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
  118. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk [2011-09-12]
  119. ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
  120. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2011-12-20]
  121. ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
  122.  
  123. ==================== Internet (Whitelisted) ====================
  124.  
  125. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  126.  
  127. Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
  128. Tcpip\..\Interfaces\{BC240D13-9886-411B-889A-CE433F433CB4}: [DhcpNameServer] 192.168.1.1
  129. Tcpip\..\Interfaces\{C9F8F33F-70B8-4A21-87CE-15DDD33D71AA}: [DhcpNameServer] 192.168.1.1
  130.  
  131. Internet Explorer:
  132. ==================
  133. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=N360&pvid=22.5.4.24
  134. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=N360&pvid=22.5.4.24
  135. HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  136. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  137. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
  138. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
  139. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  140. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  141. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
  142. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  143. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=N360&pvid=22.5.4.24
  144. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  145. HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
  146. HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  147. HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=N360&pvid=22.5.4.24
  148. HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  149. HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
  150. HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  151. HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=N360&pvid=22.5.4.24
  152. HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  153. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
  154. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  155. HKU\S-1-5-21-3574914645-719415806-2970912433-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  156. SearchScopes: HKLM -> DefaultScope value is missing
  157. SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL =
  158. SearchScopes: HKLM-x32 -> DefaultScope value is missing
  159. SearchScopes: HKU\S-1-5-21-3574914645-719415806-2970912433-1000 -> DefaultScope {829EF893-02D4-4443-9728-92641B481A8A} URL = hxxp://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bimmed_15_49&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dus%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtByDtBzy0CyBzytAyEyBtN0D0Tzu0StCyEtAyEtN1L2XzutAtFtCtBtFyBtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StBzytAzy0DyCtC0FtGyEtC0E0FtGyEzyzz0CtGyByCtD0AtG0F0DtDtCyByE0CtDtA0BtD0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0B0ByBtDtAyDyDtGyByC0BzytGyEyD0DyCtG0Azzzz0CtGyE0EtBtDtByE0D0E0B0EyEyD2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtDzzzy%26cr%3D936629119%26a%3Dwbf_bimmed_15_49%26os%3DWindows%2B7%2BHome%2BPremium&p={searchTerms}
  160. SearchScopes: HKU\S-1-5-21-3574914645-719415806-2970912433-1000 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=667671&p={searchTerms}
  161. SearchScopes: HKU\S-1-5-21-3574914645-719415806-2970912433-1000 -> {829EF893-02D4-4443-9728-92641B481A8A} URL = hxxp://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bimmed_15_49&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dus%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtByDtBzy0CyBzytAyEyBtN0D0Tzu0StCyEtAyEtN1L2XzutAtFtCtBtFyBtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StBzytAzy0DyCtC0FtGyEtC0E0FtGyEzyzz0CtGyByCtD0AtG0F0DtDtCyByE0CtDtA0BtD0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0B0ByBtDtAyDyDtGyByC0BzytGyEyD0DyCtG0Azzzz0CtGyE0EtBtDtByE0D0E0B0EyEyD2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtDzzzy%26cr%3D936629119%26a%3Dwbf_bimmed_15_49%26os%3DWindows%2B7%2BHome%2BPremium&p={searchTerms}
  162. SearchScopes: HKU\S-1-5-21-3574914645-719415806-2970912433-1000 -> {C4E3F438-DC3E-4740-B64D-43F78D1B7FDE} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=714647&p={searchTerms}
  163. BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security Suite\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
  164. BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
  165. BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
  166. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
  167. BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH)
  168. BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security Suite\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
  169. BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Security Suite\Engine\21.7.0.11\IPS\IPSBHO.DLL => No File
  170. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-02-01] (Oracle Corporation)
  171. BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
  172. BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
  173. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
  174. BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-06-07] (Microsoft Corporation.)
  175. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-02-01] (Oracle Corporation)
  176. BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH)
  177. Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
  178. Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-06-07] (Microsoft Corporation.)
  179. Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
  180. DPF: HKLM {AA570693-00E2-4907-B6F1-60A1199B030C} hxxps://juniper.net/dana-cached/sc/JuniperSetupClient64.cab
  181. DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
  182. DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
  183. DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
  184. DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
  185. DPF: HKLM-x32 {917623D1-D8E5-11D2-BE8B-00104B06BDE3} hxxp://webcams.mtu.edu/webcam15/AxisCamControl.ocx
  186. DPF: HKLM-x32 {B3E32D88-8E7F-468F-B0E2-3A300FD4A82C} hxxp://myitlab.pearsoned.com/Pegasus/Modules/SIMIntegration/Resources/ax/stub.cab
  187. DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} hxxps://access.heico.com/dana-cached/sc/JuniperSetupClient.cab
  188. Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
  189. Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
  190.  
  191. FireFox:
  192. ========
  193. FF ProfilePath: C:\Users\Ward\AppData\Roaming\Mozilla\Firefox\Profiles\1m2xt2sr.default
  194. FF DefaultSearchEngine: Search Provided by Yahoo
  195. FF SelectedSearchEngine: Search Provided by Yahoo
  196. FF Homepage: hxxp://us.yhs4.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bimmed_15_49&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dus%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtByDtBzy0CyBzytAyEyBtN0D0Tzu0StCyEtAyEtN1L2XzutAtFtCtBtFyBtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StBzytAzy0DyCtC0FtGyEtC0E0FtGyEzyzz0CtGyByCtD0AtG0F0DtDtCyByE0CtDtA0BtD0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0B0ByBtDtAyDyDtGyByC0BzytGyEyD0DyCtG0Azzzz0CtGyE0EtBtDtByE0D0E0B0EyEyD2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtDzzzy%26cr%3D936629119%26a%3Dwbf_bimmed_15_49%26os%3DWindows%2B7%2BHome%2BPremium
  197. FF Keyword.URL: hxxps://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=667671&p=
  198. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-19] ()
  199. FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
  200. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
  201. FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  202. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-19] ()
  203. FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
  204. FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-20] ()
  205. FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
  206. FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2015-09-02] (DivX, LLC)
  207. FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-02-01] (Oracle Corporation)
  208. FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-02-01] (Oracle Corporation)
  209. FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
  210. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
  211. FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  212. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
  213. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
  214. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
  215. FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-07-07] (Pando Networks)
  216. FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\Ward\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-10-21] (RocketLife, LLP)
  217. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
  218. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
  219. FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-08-13] ()
  220. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
  221. FF Plugin HKU\S-1-5-21-3574914645-719415806-2970912433-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Ward\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
  222. FF Plugin HKU\S-1-5-21-3574914645-719415806-2970912433-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Ward\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-11-20] (Unity Technologies ApS)
  223. FF Plugin HKU\S-1-5-21-3574914645-719415806-2970912433-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll [2013-03-07] (Amazon.com, Inc.)
  224. FF Plugin HKU\S-1-5-21-3574914645-719415806-2970912433-1000: CouponNetwork.com/CMDUniversalCouponPrintActivator -> C:\Users\Ward\AppData\Roaming\CATALI~1\NPBCSK~1.DLL [No File]
  225. FF Plugin HKU\S-1-5-21-3574914645-719415806-2970912433-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-07-07] (Pando Networks)
  226. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npCouponPrinter.dll [2010-10-06] (Coupons, Inc.)
  227. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMozCouponPrinter.dll [2010-10-06] (Coupons, Inc.)
  228. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
  229. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2014-09-16] (Apple Inc.)
  230. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2014-09-16] (Apple Inc.)
  231. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2014-09-16] (Apple Inc.)
  232. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2014-09-16] (Apple Inc.)
  233. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2014-09-16] (Apple Inc.)
  234. FF SearchPlugin: C:\Users\Ward\AppData\Roaming\Mozilla\Firefox\Profiles\1m2xt2sr.default\searchplugins\Search Provided by Yahoo.xml [2015-12-05]
  235. FF Extension: Lavasoft Search Plugin - C:\Users\Ward\AppData\Roaming\Mozilla\Firefox\Profiles\1m2xt2sr.default\Extensions\jid1-yZwVFzbsyfMrqQ@jetpack [2012-12-10] [not signed]
  236. FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-04-28] [not signed]
  237. FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-04-28] [not signed]
  238. FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.2.15\coFFAddon
  239. FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.2.15\coFFAddon [2016-01-13]
  240. FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.2.15\coFFAddon
  241.  
  242. Chrome:
  243. =======
  244. CHR HomePage: Default -> hxxp://us.yhs4.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bimmed_15_49&param1=1&param2=f%3D1%26b%3DChrome%26cc%3Dus%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtByDtBzy0CyBzytAyEyBtN0D0Tzu0StCyEtAyEtN1L2XzutAtFtCtBtFyBtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StBzytAzy0DyCtC0FtGyEtC0E0FtGyEzyzz0CtGyByCtD0AtG0F0DtDtCyByE0CtDtA0BtD0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0B0ByBtDtAyDyDtGyByC0BzytGyEyD0DyCtG0Azzzz0CtGyE0EtBtDtByE0D0E0B0EyEyD2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtDzzzy%26cr%3D936629119%26a%3Dwbf_bimmed_15_49%26os%3DWindows%2B7%2BHome%2BPremium
  245. CHR StartupUrls: Default -> "hxxp://us.yhs4.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bimmed_15_49&param1=1&param2=f%3D7%26b%3DChrome%26cc%3Dus%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtByDtBzy0CyBzytAyEyBtN0D0Tzu0StCyEtAyEtN1L2XzutAtFtCtBtFyBtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StBzytAzy0DyCtC0FtGyEtC0E0FtGyEzyzz0CtGyByCtD0AtG0F0DtDtCyByE0CtDtA0BtD0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0B0ByBtDtAyDyDtGyByC0BzytGyEyD0DyCtG0Azzzz0CtGyE0EtBtDtByE0D0E0B0EyEyD2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtDzzzy%26cr%3D936629119%26a%3Dwbf_bimmed_15_49%26os%3DWindows%2B7%2BHome%2BPremium"
  246. CHR DefaultSearchURL: Default -> hxxp://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bimmed_15_49&param1=1&param2=f%3D4%26b%3DChrome%26cc%3Dus%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtByDtBzy0CyBzytAyEyBtN0D0Tzu0StCyEtAyEtN1L2XzutAtFtCtBtFyBtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StBzytAzy0DyCtC0FtGyEtC0E0FtGyEzyzz0CtGyByCtD0AtG0F0DtDtCyByE0CtDtA0BtD0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0B0ByBtDtAyDyDtGyByC0BzytGyEyD0DyCtG0Azzzz0CtGyE0EtBtDtByE0D0E0B0EyEyD2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtDzzzy%26cr%3D936629119%26a%3Dwbf_bimmed_15_49%26os%3DWindows%2B7%2BHome%2BPremium&p={searchTerms}
  247. CHR DefaultSearchKeyword: Default -> Search Provided by Yahoo.com
  248. CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
  249. CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\PepperFlash\pepflashplayer.dll => No File
  250. CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll => No File
  251. CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\ppGoogleNaClPluginChrome.dll => No File
  252. CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\pdf.dll => No File
  253. CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll => No File
  254. CHR Plugin: (Coupons Inc., Coupon Printer Manager ) - C:\Program Files (x86)\Mozilla Firefox\plugins\npCouponPrinter.dll (Coupons, Inc.)
  255. CHR Plugin: (Coupons Inc., Coupon Printer Manager ) - C:\Program Files (x86)\Mozilla Firefox\plugins\npMozCouponPrinter.dll (Coupons, Inc.)
  256. CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  257. CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  258. CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
  259. CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll => No File
  260. CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => No File
  261. CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  262. CHR Plugin: (WildTangent Games App V2 Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
  263. CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  264. CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  265. CHR Plugin: (RocketLife Secure Plug-In Layer) - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
  266. CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll => No File
  267. CHR Profile: C:\Users\Ward\AppData\Local\Google\Chrome\User Data\Default
  268. CHR Extension: (YouTube) - C:\Users\Ward\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-10]
  269. CHR Extension: (Norton Security Toolbar) - C:\Users\Ward\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2015-10-18]
  270. CHR Extension: (Google Search) - C:\Users\Ward\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-05]
  271. CHR Extension: (Norton Identity Safe) - C:\Users\Ward\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-07-01]
  272. CHR Extension: (Chrome Web Store Payments) - C:\Users\Ward\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-02]
  273. CHR Extension: (Gmail) - C:\Users\Ward\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-20]
  274. CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security Suite\Engine\22.5.5.15\Exts\Chrome.crx [2015-11-29]
  275. CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
  276. CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security Suite\Engine\22.5.5.15\Exts\Chrome.crx [2015-11-29]
  277. CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
  278. StartMenuInternet: Google Chrome - chrome.exe
  279.  
  280. ==================== Services (Whitelisted) ========================
  281.  
  282. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  283.  
  284. R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [799848 2011-03-28] (Acer Incorporated)
  285. S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-08-13] (WildTangent)
  286. R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-01-11] (NVIDIA Corporation)
  287. S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
  288. R2 N360; C:\Program Files (x86)\Norton Security Suite\Engine\22.5.5.15\N360.exe [282016 2015-11-20] (Symantec Corporation)
  289. S3 NETGEARGenieDaemon; C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe [232192 2015-06-01] (NETGEAR)
  290. R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
  291. R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)
  292. R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-01-11] (NVIDIA Corporation)
  293. R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6308288 2016-01-11] (NVIDIA Corporation)
  294. R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-01-11] (NVIDIA Corporation)
  295. S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2099720 2015-11-14] (Electronic Arts)
  296. R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-29] (Acer Incorporated)
  297. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  298.  
  299. ===================== Drivers (Whitelisted) ==========================
  300.  
  301. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  302.  
  303. R1 BHDrvx64; C:\Program Files (x86)\Norton Security Suite\NortonData\22.5.2.15\Definitions\BASHDefs\20160125.001\BHDrvx64.sys [1665608 2015-10-08] (Symantec Corporation)
  304. S3 BTWDPAN; C:\Windows\System32\DRIVERS\btwdpan.sys [89640 2011-08-30] (Broadcom Corporation.)
  305. R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1605050.00F\ccSetx64.sys [173808 2015-07-10] (Symantec Corporation)
  306. S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
  307. R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-17] (Symantec Corporation)
  308. R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2015-11-17] (Symantec Corporation)
  309. R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2012-12-10] (GFI Software)
  310. R1 IDSVia64; C:\Program Files (x86)\Norton Security Suite\NortonData\22.5.2.15\Definitions\IPSDefs\20160205.001\IDSvia64.sys [767224 2015-12-04] (Symantec Corporation)
  311. R3 NAVENG; C:\Program Files (x86)\Norton Security Suite\NortonData\22.5.2.15\Definitions\VirusDefs\20160205.019\ENG64.SYS [138488 2015-10-27] (Symantec Corporation)
  312. R3 NAVEX15; C:\Program Files (x86)\Norton Security Suite\NortonData\22.5.2.15\Definitions\VirusDefs\20160205.019\EX64.SYS [2148080 2015-10-27] (Symantec Corporation)
  313. R2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2015-07-03] (CACE Technologies, Inc.)
  314. R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-01-11] (NVIDIA Corporation)
  315. R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
  316. R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1605050.00F\SRTSP64.SYS [928496 2015-11-11] (Symantec Corporation)
  317. R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1605050.00F\SRTSPX64.SYS [50936 2015-07-10] (Symantec Corporation)
  318. S3 sscdserd; C:\Windows\System32\DRIVERS\sscdserd.sys [141384 2010-11-11] (MCCI Corporation)
  319. R0 SymEFASI; C:\Windows\System32\drivers\N360x64\1605050.00F\SYMEFASI64.SYS [1621232 2015-11-11] (Symantec Corporation)
  320. R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [111344 2015-08-01] (Symantec Corporation)
  321. R1 SymIRON; C:\Windows\system32\drivers\N360x64\1605050.00F\Ironx64.SYS [297720 2015-07-10] (Symantec Corporation)
  322. R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1605050.00F\SYMNETS.SYS [577768 2015-11-11] (Symantec Corporation)
  323. S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]
  324.  
  325. ==================== NetSvcs (Whitelisted) ===================
  326.  
  327. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  328.  
  329.  
  330. ==================== One Month Created files and folders ========
  331.  
  332. (If an entry is included in the fixlist, the file/folder will be moved.)
  333.  
  334. 2016-02-06 13:55 - 2016-02-06 13:56 - 00039762 _____ C:\Users\Ward\Desktop\FRST.txt
  335. 2016-02-06 13:53 - 2016-02-06 13:55 - 00000000 ____D C:\FRST
  336. 2016-02-06 13:53 - 2016-02-06 13:53 - 02370560 _____ (Farbar) C:\Users\Ward\Desktop\FRST64.exe
  337. 2016-02-01 21:28 - 2016-02-01 21:28 - 00003280 _____ C:\Windows\System32\Tasks\{36CFBC02-CEF8-41A9-A556-5A46DCE9360F}
  338. 2016-01-18 06:40 - 2016-01-18 06:40 - 00000000 ____D C:\Users\Ward\AppData\Roaming\NVIDIA
  339. 2016-01-17 22:57 - 2016-01-17 22:58 - 00000000 ____D C:\Windows\SysWOW64\NV
  340. 2016-01-17 22:57 - 2016-01-17 22:58 - 00000000 ____D C:\Windows\system32\NV
  341. 2016-01-17 22:55 - 2015-12-16 09:53 - 06359672 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
  342. 2016-01-17 22:55 - 2015-12-16 09:53 - 02985080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
  343. 2016-01-17 22:55 - 2015-12-16 09:53 - 02554488 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
  344. 2016-01-17 22:55 - 2015-12-16 09:53 - 01256240 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
  345. 2016-01-17 22:55 - 2015-12-16 09:53 - 00523384 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
  346. 2016-01-17 22:55 - 2015-12-16 09:53 - 00385328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
  347. 2016-01-17 22:55 - 2015-12-16 09:53 - 00075056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
  348. 2016-01-17 22:55 - 2015-12-16 09:53 - 00062768 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
  349. 2016-01-17 22:55 - 2015-12-16 09:49 - 06090019 _____ C:\Windows\system32\nvcoproc.bin
  350. 2016-01-17 22:54 - 2015-12-16 12:34 - 00207152 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
  351. 2016-01-17 22:54 - 2015-12-16 12:34 - 00194680 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
  352. 2016-01-17 22:43 - 2015-12-16 12:34 - 42977072 _____ C:\Windows\system32\nvcompiler.dll
  353. 2016-01-17 22:43 - 2015-12-16 12:34 - 37609080 _____ C:\Windows\SysWOW64\nvcompiler.dll
  354. 2016-01-17 22:43 - 2015-12-16 12:34 - 31061624 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
  355. 2016-01-17 22:43 - 2015-12-16 12:34 - 24895792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
  356. 2016-01-17 22:43 - 2015-12-16 12:34 - 21122456 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
  357. 2016-01-17 22:43 - 2015-12-16 12:34 - 20663816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
  358. 2016-01-17 22:43 - 2015-12-16 12:34 - 18716176 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
  359. 2016-01-17 22:43 - 2015-12-16 12:34 - 17561432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
  360. 2016-01-17 22:43 - 2015-12-16 12:34 - 17156968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
  361. 2016-01-17 22:43 - 2015-12-16 12:34 - 16981976 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
  362. 2016-01-17 22:43 - 2015-12-16 12:34 - 16286888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
  363. 2016-01-17 22:43 - 2015-12-16 12:34 - 14005408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
  364. 2016-01-17 22:43 - 2015-12-16 12:34 - 12334200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
  365. 2016-01-17 22:43 - 2015-12-16 12:34 - 03637352 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
  366. 2016-01-17 22:43 - 2015-12-16 12:34 - 03211760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
  367. 2016-01-17 22:43 - 2015-12-16 12:34 - 03168376 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
  368. 2016-01-17 22:43 - 2015-12-16 12:34 - 02755704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
  369. 2016-01-17 22:43 - 2015-12-16 12:34 - 01915696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436143.dll
  370. 2016-01-17 22:43 - 2015-12-16 12:34 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436143.dll
  371. 2016-01-17 22:43 - 2015-12-16 12:34 - 00938104 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
  372. 2016-01-17 22:43 - 2015-12-16 12:34 - 00872056 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
  373. 2016-01-17 22:43 - 2015-12-16 12:34 - 00734512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
  374. 2016-01-17 22:43 - 2015-12-16 12:34 - 00681592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
  375. 2016-01-17 22:43 - 2015-12-16 12:34 - 00469144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
  376. 2016-01-17 22:43 - 2015-12-16 12:34 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
  377. 2016-01-17 22:43 - 2015-12-16 12:34 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
  378. 2016-01-17 22:43 - 2015-12-16 12:34 - 00153392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
  379. 2016-01-17 22:43 - 2015-12-16 12:34 - 00151184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
  380. 2016-01-17 22:43 - 2015-12-16 12:34 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
  381. 2016-01-17 22:43 - 2015-12-16 12:34 - 00034848 _____ C:\Windows\system32\nvinfo.pb
  382. 2016-01-17 22:43 - 2015-12-16 12:34 - 00031352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
  383. 2016-01-17 22:35 - 2016-01-11 23:40 - 00112032 _____ C:\Windows\system32\NvRtmpStreamer64.dll
  384. 2016-01-17 22:33 - 2015-12-18 01:11 - 00047760 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
  385. 2016-01-17 22:33 - 2015-12-18 01:10 - 00099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
  386. 2016-01-17 22:33 - 2015-12-18 01:10 - 00090768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
  387. 2016-01-16 11:29 - 2016-01-16 11:29 - 00000000 ____D C:\Users\Ward\AppData\Local\{7E738C45-85EF-4CC2-8706-F72E6603A1FB}
  388. 2016-01-15 23:28 - 2016-01-15 23:28 - 00000000 ____D C:\Users\Ward\AppData\Local\{E582FB98-5270-4E84-97D3-0F4E8D607F97}
  389. 2016-01-15 22:02 - 2016-01-15 22:02 - 00000000 ____D C:\Users\Ward\AppData\LocalLow\Macromedia
  390. 2016-01-12 15:57 - 2015-12-23 18:13 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  391. 2016-01-12 15:57 - 2015-12-23 17:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  392. 2016-01-12 15:57 - 2015-12-12 13:54 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  393. 2016-01-12 15:57 - 2015-12-12 13:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  394. 2016-01-12 15:57 - 2015-12-12 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  395. 2016-01-12 15:57 - 2015-12-12 13:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  396. 2016-01-12 15:57 - 2015-12-12 13:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  397. 2016-01-12 15:57 - 2015-12-12 13:15 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  398. 2016-01-12 15:57 - 2015-12-12 13:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
  399. 2016-01-12 15:57 - 2015-12-12 13:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  400. 2016-01-12 15:57 - 2015-12-12 13:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  401. 2016-01-12 15:57 - 2015-12-12 13:07 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  402. 2016-01-12 15:57 - 2015-12-12 13:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  403. 2016-01-12 15:57 - 2015-12-12 13:07 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  404. 2016-01-12 15:57 - 2015-12-12 13:03 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  405. 2016-01-12 15:57 - 2015-12-12 13:02 - 20367360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  406. 2016-01-12 15:57 - 2015-12-12 13:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  407. 2016-01-12 15:57 - 2015-12-12 13:02 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  408. 2016-01-12 15:57 - 2015-12-12 13:02 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  409. 2016-01-12 15:57 - 2015-12-12 13:02 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  410. 2016-01-12 15:57 - 2015-12-12 12:55 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  411. 2016-01-12 15:57 - 2015-12-12 12:51 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  412. 2016-01-12 15:57 - 2015-12-12 12:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  413. 2016-01-12 15:57 - 2015-12-12 12:44 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  414. 2016-01-12 15:57 - 2015-12-12 12:40 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  415. 2016-01-12 15:57 - 2015-12-12 12:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  416. 2016-01-12 15:57 - 2015-12-12 12:37 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  417. 2016-01-12 15:57 - 2015-12-12 12:37 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  418. 2016-01-12 15:57 - 2015-12-12 12:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  419. 2016-01-12 15:57 - 2015-12-12 12:37 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  420. 2016-01-12 15:57 - 2015-12-12 12:36 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
  421. 2016-01-12 15:57 - 2015-12-12 12:36 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  422. 2016-01-12 15:57 - 2015-12-12 12:35 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
  423. 2016-01-12 15:57 - 2015-12-12 12:33 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  424. 2016-01-12 15:57 - 2015-12-12 12:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  425. 2016-01-12 15:57 - 2015-12-12 12:30 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  426. 2016-01-12 15:57 - 2015-12-12 12:28 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  427. 2016-01-12 15:57 - 2015-12-12 12:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
  428. 2016-01-12 15:57 - 2015-12-12 12:27 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  429. 2016-01-12 15:57 - 2015-12-12 12:27 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  430. 2016-01-12 15:57 - 2015-12-12 12:25 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
  431. 2016-01-12 15:57 - 2015-12-12 12:23 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  432. 2016-01-12 15:57 - 2015-12-12 12:22 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  433. 2016-01-12 15:57 - 2015-12-12 12:21 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  434. 2016-01-12 15:57 - 2015-12-12 12:20 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  435. 2016-01-12 15:57 - 2015-12-12 12:19 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  436. 2016-01-12 15:57 - 2015-12-12 12:18 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  437. 2016-01-12 15:57 - 2015-12-12 12:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  438. 2016-01-12 15:57 - 2015-12-12 12:12 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  439. 2016-01-12 15:57 - 2015-12-12 12:10 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  440. 2016-01-12 15:57 - 2015-12-12 12:10 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  441. 2016-01-12 15:57 - 2015-12-12 12:09 - 04610560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  442. 2016-01-12 15:57 - 2015-12-12 12:08 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
  443. 2016-01-12 15:57 - 2015-12-12 12:06 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  444. 2016-01-12 15:57 - 2015-12-12 12:02 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
  445. 2016-01-12 15:57 - 2015-12-12 12:00 - 12856320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  446. 2016-01-12 15:57 - 2015-12-12 12:00 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  447. 2016-01-12 15:57 - 2015-12-12 12:00 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  448. 2016-01-12 15:57 - 2015-12-12 12:00 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  449. 2016-01-12 15:57 - 2015-12-12 11:54 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  450. 2016-01-12 15:57 - 2015-12-12 11:42 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  451. 2016-01-12 15:57 - 2015-12-12 11:41 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  452. 2016-01-12 15:57 - 2015-12-12 11:38 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  453. 2016-01-12 15:57 - 2015-12-12 11:36 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  454. 2016-01-12 15:57 - 2015-12-11 13:57 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  455. 2016-01-12 15:57 - 2015-12-08 16:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
  456. 2016-01-12 15:57 - 2015-12-08 16:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
  457. 2016-01-12 15:57 - 2015-12-08 16:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
  458. 2016-01-12 15:57 - 2015-12-08 16:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
  459. 2016-01-12 15:57 - 2015-12-08 16:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
  460. 2016-01-12 15:57 - 2015-12-08 16:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
  461. 2016-01-12 15:57 - 2015-12-08 16:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
  462. 2016-01-12 15:57 - 2015-12-08 16:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
  463. 2016-01-12 15:57 - 2015-12-08 16:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
  464. 2016-01-12 15:57 - 2015-12-08 16:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
  465. 2016-01-12 15:57 - 2015-12-08 16:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
  466. 2016-01-12 15:57 - 2015-12-08 16:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
  467. 2016-01-12 15:57 - 2015-12-08 16:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
  468. 2016-01-12 15:57 - 2015-12-08 16:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
  469. 2016-01-12 15:57 - 2015-12-08 16:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
  470. 2016-01-12 15:57 - 2015-12-08 16:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
  471. 2016-01-12 15:57 - 2015-12-08 16:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
  472. 2016-01-12 15:57 - 2015-12-08 16:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
  473. 2016-01-12 15:57 - 2015-12-08 16:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
  474. 2016-01-12 15:57 - 2015-12-08 16:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
  475. 2016-01-12 15:57 - 2015-12-08 16:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
  476. 2016-01-12 15:57 - 2015-12-08 16:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
  477. 2016-01-12 15:57 - 2015-12-08 16:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
  478. 2016-01-12 15:57 - 2015-12-08 16:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
  479. 2016-01-12 15:57 - 2015-12-08 16:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
  480. 2016-01-12 15:57 - 2015-12-08 16:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
  481. 2016-01-12 15:57 - 2015-12-08 16:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
  482. 2016-01-12 15:57 - 2015-12-08 16:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
  483. 2016-01-12 15:57 - 2015-12-08 16:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
  484. 2016-01-12 15:57 - 2015-12-08 16:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
  485. 2016-01-12 15:57 - 2015-12-08 16:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
  486. 2016-01-12 15:57 - 2015-12-08 16:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
  487. 2016-01-12 15:57 - 2015-12-08 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
  488. 2016-01-12 15:57 - 2015-12-08 16:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
  489. 2016-01-12 15:57 - 2015-12-08 16:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
  490. 2016-01-12 15:57 - 2015-12-08 16:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
  491. 2016-01-12 15:57 - 2015-12-08 14:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
  492. 2016-01-12 15:57 - 2015-12-08 14:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
  493. 2016-01-12 15:57 - 2015-12-08 14:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
  494. 2016-01-12 15:57 - 2015-12-08 14:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
  495. 2016-01-12 15:57 - 2015-12-08 14:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
  496. 2016-01-12 15:57 - 2015-12-08 14:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
  497. 2016-01-12 15:57 - 2015-12-08 14:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
  498. 2016-01-12 15:57 - 2015-12-08 14:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
  499. 2016-01-12 15:57 - 2015-12-08 14:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
  500. 2016-01-12 15:57 - 2015-12-08 14:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
  501. 2016-01-12 15:57 - 2015-12-08 14:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
  502. 2016-01-12 15:57 - 2015-12-08 14:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
  503. 2016-01-12 15:57 - 2015-12-08 14:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
  504. 2016-01-12 15:57 - 2015-12-08 14:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
  505. 2016-01-12 15:57 - 2015-12-08 14:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
  506. 2016-01-12 15:57 - 2015-12-08 14:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
  507. 2016-01-12 15:57 - 2015-12-08 14:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
  508. 2016-01-12 15:57 - 2015-12-08 14:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
  509. 2016-01-12 15:57 - 2015-12-08 14:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
  510. 2016-01-12 15:57 - 2015-12-08 14:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
  511. 2016-01-12 15:57 - 2015-12-08 14:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
  512. 2016-01-12 15:57 - 2015-12-08 14:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
  513. 2016-01-12 15:57 - 2015-12-08 14:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
  514. 2016-01-12 15:57 - 2015-12-08 14:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
  515. 2016-01-12 15:57 - 2015-12-08 14:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
  516. 2016-01-12 15:57 - 2015-12-08 14:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
  517. 2016-01-12 15:57 - 2015-12-08 14:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
  518. 2016-01-12 15:57 - 2015-12-08 14:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
  519. 2016-01-12 15:57 - 2015-12-08 14:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
  520. 2016-01-12 15:57 - 2015-12-08 14:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
  521. 2016-01-12 15:57 - 2015-12-08 14:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
  522. 2016-01-12 15:57 - 2015-12-08 14:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
  523. 2016-01-12 15:57 - 2015-12-08 14:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
  524. 2016-01-12 15:57 - 2015-12-08 14:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
  525. 2016-01-12 15:57 - 2015-12-08 14:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
  526. 2016-01-12 15:57 - 2015-12-08 14:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
  527. 2016-01-12 15:57 - 2015-12-08 14:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
  528. 2016-01-12 15:57 - 2015-12-08 14:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
  529. 2016-01-12 15:57 - 2015-12-08 13:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
  530. 2016-01-12 15:57 - 2015-12-08 13:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
  531. 2016-01-12 15:57 - 2015-12-08 13:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
  532. 2016-01-12 15:57 - 2015-12-08 12:58 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  533. 2016-01-12 15:57 - 2015-11-16 20:11 - 00025024 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
  534. 2016-01-12 15:57 - 2015-11-16 20:08 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
  535. 2016-01-12 15:57 - 2015-11-16 20:08 - 00792064 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
  536. 2016-01-12 15:57 - 2015-11-16 20:08 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
  537. 2016-01-12 15:57 - 2015-11-16 20:08 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
  538. 2016-01-12 15:57 - 2015-11-16 20:08 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
  539. 2016-01-12 15:57 - 2015-11-16 15:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
  540. 2016-01-12 15:57 - 2015-11-13 18:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
  541. 2016-01-12 15:57 - 2015-11-13 18:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
  542. 2016-01-12 15:57 - 2015-11-13 18:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
  543. 2016-01-12 15:57 - 2015-11-13 17:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
  544. 2016-01-12 15:57 - 2015-11-13 17:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
  545. 2016-01-12 15:57 - 2015-11-13 17:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
  546. 2016-01-12 15:56 - 2015-12-08 16:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
  547. 2016-01-12 15:56 - 2015-12-08 16:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
  548. 2016-01-12 15:56 - 2015-12-08 14:07 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
  549. 2016-01-12 15:56 - 2015-12-08 14:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
  550. 2016-01-12 15:55 - 2015-12-30 14:08 - 05572544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  551. 2016-01-12 15:55 - 2015-12-30 14:08 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
  552. 2016-01-12 15:55 - 2015-12-30 14:08 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  553. 2016-01-12 15:55 - 2015-12-30 14:05 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
  554. 2016-01-12 15:55 - 2015-12-30 14:02 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
  555. 2016-01-12 15:55 - 2015-12-30 14:02 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
  556. 2016-01-12 15:55 - 2015-12-30 14:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
  557. 2016-01-12 15:55 - 2015-12-30 14:02 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  558. 2016-01-12 15:55 - 2015-12-30 14:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  559. 2016-01-12 15:55 - 2015-12-30 14:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
  560. 2016-01-12 15:55 - 2015-12-30 14:01 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
  561. 2016-01-12 15:55 - 2015-12-30 14:01 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
  562. 2016-01-12 15:55 - 2015-12-30 14:01 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  563. 2016-01-12 15:55 - 2015-12-30 14:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  564. 2016-01-12 15:55 - 2015-12-30 14:01 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
  565. 2016-01-12 15:55 - 2015-12-30 14:01 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  566. 2016-01-12 15:55 - 2015-12-30 14:01 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
  567. 2016-01-12 15:55 - 2015-12-30 14:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
  568. 2016-01-12 15:55 - 2015-12-30 13:59 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  569. 2016-01-12 15:55 - 2015-12-30 13:59 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  570. 2016-01-12 15:55 - 2015-12-30 13:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
  571. 2016-01-12 15:55 - 2015-12-30 13:58 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  572. 2016-01-12 15:55 - 2015-12-30 13:58 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
  573. 2016-01-12 15:55 - 2015-12-30 13:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
  574. 2016-01-12 15:55 - 2015-12-30 13:57 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  575. 2016-01-12 15:55 - 2015-12-30 13:57 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
  576. 2016-01-12 15:55 - 2015-12-30 13:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
  577. 2016-01-12 15:55 - 2015-12-30 13:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
  578. 2016-01-12 15:55 - 2015-12-30 13:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  579. 2016-01-12 15:55 - 2015-12-30 13:54 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
  580. 2016-01-12 15:55 - 2015-12-30 13:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
  581. 2016-01-12 15:55 - 2015-12-30 13:54 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
  582. 2016-01-12 15:55 - 2015-12-30 13:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
  583. 2016-01-12 15:55 - 2015-12-30 13:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
  584. 2016-01-12 15:55 - 2015-12-30 13:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
  585. 2016-01-12 15:55 - 2015-12-30 13:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
  586. 2016-01-12 15:55 - 2015-12-30 13:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
  587. 2016-01-12 15:55 - 2015-12-30 13:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
  588. 2016-01-12 15:55 - 2015-12-30 13:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
  589. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
  590. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
  591. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
  592. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
  593. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
  594. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
  595. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
  596. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
  597. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
  598. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
  599. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
  600. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
  601. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
  602. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
  603. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
  604. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
  605. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
  606. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
  607. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
  608. 2016-01-12 15:55 - 2015-12-30 13:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
  609. 2016-01-12 15:55 - 2015-12-30 13:47 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
  610. 2016-01-12 15:55 - 2015-12-30 13:47 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
  611. 2016-01-12 15:55 - 2015-12-30 13:44 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
  612. 2016-01-12 15:55 - 2015-12-30 13:41 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
  613. 2016-01-12 15:55 - 2015-12-30 13:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
  614. 2016-01-12 15:55 - 2015-12-30 13:41 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
  615. 2016-01-12 15:55 - 2015-12-30 13:41 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  616. 2016-01-12 15:55 - 2015-12-30 13:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  617. 2016-01-12 15:55 - 2015-12-30 13:41 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  618. 2016-01-12 15:55 - 2015-12-30 13:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
  619. 2016-01-12 15:55 - 2015-12-30 13:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
  620. 2016-01-12 15:55 - 2015-12-30 13:40 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  621. 2016-01-12 15:55 - 2015-12-30 13:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  622. 2016-01-12 15:55 - 2015-12-30 13:39 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  623. 2016-01-12 15:55 - 2015-12-30 13:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  624. 2016-01-12 15:55 - 2015-12-30 13:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
  625. 2016-01-12 15:55 - 2015-12-30 13:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
  626. 2016-01-12 15:55 - 2015-12-30 13:38 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  627. 2016-01-12 15:55 - 2015-12-30 13:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  628. 2016-01-12 15:55 - 2015-12-30 13:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
  629. 2016-01-12 15:55 - 2015-12-30 13:37 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
  630. 2016-01-12 15:55 - 2015-12-30 13:37 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
  631. 2016-01-12 15:55 - 2015-12-30 13:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
  632. 2016-01-12 15:55 - 2015-12-30 13:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
  633. 2016-01-12 15:55 - 2015-12-30 13:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
  634. 2016-01-12 15:55 - 2015-12-30 13:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
  635. 2016-01-12 15:55 - 2015-12-30 13:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
  636. 2016-01-12 15:55 - 2015-12-30 13:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
  637. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
  638. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
  639. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
  640. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
  641. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
  642. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
  643. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
  644. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
  645. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
  646. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
  647. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
  648. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
  649. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
  650. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
  651. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
  652. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
  653. 2016-01-12 15:55 - 2015-12-30 13:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
  654. 2016-01-12 15:55 - 2015-12-30 12:57 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
  655. 2016-01-12 15:55 - 2015-12-30 12:50 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
  656. 2016-01-12 15:55 - 2015-12-30 12:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
  657. 2016-01-12 15:55 - 2015-12-30 12:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
  658. 2016-01-12 15:55 - 2015-12-30 12:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
  659. 2016-01-12 15:55 - 2015-12-30 12:42 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
  660. 2016-01-12 15:55 - 2015-12-30 12:42 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
  661. 2016-01-12 15:55 - 2015-12-30 12:41 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
  662. 2016-01-12 15:55 - 2015-12-30 12:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  663. 2016-01-12 15:55 - 2015-12-30 12:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
  664. 2016-01-12 15:55 - 2015-12-30 12:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
  665. 2016-01-12 15:55 - 2015-12-30 12:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
  666. 2016-01-12 15:55 - 2015-12-30 12:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
  667. 2016-01-12 15:55 - 2015-12-30 12:30 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
  668. 2016-01-12 15:55 - 2015-12-30 12:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
  669. 2016-01-12 15:55 - 2015-12-30 12:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
  670. 2016-01-12 15:55 - 2015-12-30 12:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
  671. 2016-01-12 15:55 - 2015-12-30 12:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
  672. 2016-01-11 22:07 - 2016-01-11 22:07 - 00000000 ____D C:\Users\Ward\AppData\Local\{83493984-5407-463D-9BF0-21CD721584BA}
  673. 2016-01-11 08:51 - 2016-02-05 18:40 - 00000000 ____D C:\Users\Ward\AppData\LocalLow\Adblock Plus for IE
  674. 2016-01-11 08:51 - 2016-01-11 08:59 - 00000000 ____D C:\Program Files\Adblock Plus for IE
  675.  
  676. ==================== One Month Modified files and folders ========
  677.  
  678. (If an entry is included in the fixlist, the file/folder will be moved.)
  679.  
  680. 2016-02-06 13:24 - 2012-03-29 21:42 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
  681. 2016-02-06 13:02 - 2013-05-30 12:22 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  682. 2016-02-06 13:00 - 2009-07-13 23:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  683. 2016-02-06 13:00 - 2009-07-13 23:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  684. 2016-02-06 12:26 - 2013-09-12 07:21 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3574914645-719415806-2970912433-1000UA.job
  685. 2016-02-06 11:23 - 2015-10-23 11:04 - 00001134 _____ C:\Users\Ward\Desktop\nativelog.txt
  686. 2016-02-06 10:28 - 2012-06-22 01:06 - 00000000 ____D C:\Users\Ward\AppData\Roaming\.minecraft
  687. 2016-02-06 09:26 - 2013-09-12 07:21 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3574914645-719415806-2970912433-1000Core.job
  688. 2016-02-06 07:42 - 2012-09-09 07:26 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{47E9D8EA-9E6A-4E16-A3AC-AE72F169B502}
  689. 2016-02-05 20:01 - 2013-05-30 12:22 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  690. 2016-02-04 19:12 - 2015-10-10 13:46 - 00000000 ____D C:\Program Files (x86)\istation
  691. 2016-02-02 19:56 - 2013-05-30 12:22 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
  692. 2016-02-02 19:56 - 2013-05-30 12:22 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
  693. 2016-02-01 21:36 - 2013-09-26 18:58 - 00000000 ____D C:\ProgramData\Oracle
  694. 2016-02-01 21:32 - 2014-10-21 18:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  695. 2016-02-01 21:29 - 2015-08-30 22:26 - 00000000 ____D C:\Users\Ward\.oracle_jre_usage
  696. 2016-02-01 21:29 - 2014-10-21 18:53 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
  697. 2016-02-01 21:29 - 2014-10-21 18:52 - 00000000 ____D C:\Program Files (x86)\Java
  698. 2016-02-01 20:35 - 2015-07-31 04:15 - 00000000 ____D C:\Windows\System32\Tasks\Remediation
  699. 2016-02-01 20:31 - 2012-02-11 20:00 - 00000000 ____D C:\ProgramData\clear.fi
  700. 2016-02-01 20:30 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
  701. 2016-01-30 09:58 - 2013-09-13 10:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
  702. 2016-01-27 06:37 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\NDF
  703. 2016-01-25 22:43 - 2009-07-14 00:13 - 00796158 _____ C:\Windows\system32\PerfStringBackup.INI
  704. 2016-01-25 22:43 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\inf
  705. 2016-01-21 21:50 - 2012-04-28 23:34 - 00007601 _____ C:\Windows\SysWOW64\SystemData.xml
  706. 2016-01-19 19:24 - 2012-03-29 21:42 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  707. 2016-01-19 19:24 - 2012-03-29 21:42 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
  708. 2016-01-19 19:24 - 2011-09-12 22:03 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  709. 2016-01-17 22:57 - 2011-12-20 21:26 - 00000000 ____D C:\ProgramData\NVIDIA
  710. 2016-01-17 22:55 - 2011-12-20 21:23 - 00000000 ____D C:\Program Files\NVIDIA Corporation
  711. 2016-01-17 22:55 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\Help
  712. 2016-01-17 22:54 - 2013-11-09 09:50 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
  713. 2016-01-17 22:54 - 2011-12-20 21:23 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
  714. 2016-01-17 22:36 - 2013-11-09 10:34 - 00000000 ____D C:\Users\Ward\AppData\Local\NVIDIA
  715. 2016-01-16 13:10 - 2015-03-31 18:34 - 00000000 ____D C:\Users\Ward\Documents\Adam Youtube
  716. 2016-01-16 10:47 - 2012-07-07 15:29 - 00000000 ____D C:\ProgramData\Media Center Programs
  717. 2016-01-16 10:47 - 2009-07-14 00:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
  718. 2016-01-15 22:01 - 2011-09-12 22:03 - 00000000 ____D C:\Windows\SysWOW64\Macromed
  719. 2016-01-15 00:17 - 2009-07-13 21:34 - 00000510 _____ C:\Windows\win.ini
  720. 2016-01-14 08:43 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache
  721. 2016-01-14 07:40 - 2013-03-19 11:50 - 00000000 ____D C:\Program Files\Microsoft Silverlight
  722. 2016-01-14 07:40 - 2013-03-19 11:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
  723. 2016-01-14 07:40 - 2009-07-13 23:45 - 00412424 _____ C:\Windows\system32\FNTCACHE.DAT
  724. 2016-01-14 07:36 - 2015-04-15 04:31 - 00000000 ____D C:\Windows\system32\appraiser
  725. 2016-01-14 07:36 - 2014-05-10 19:37 - 00000000 ___SD C:\Windows\system32\CompatTel
  726. 2016-01-14 07:30 - 2013-03-19 11:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
  727. 2016-01-14 07:28 - 2013-08-14 22:19 - 00000000 ____D C:\Windows\system32\MRT
  728. 2016-01-14 07:19 - 2012-02-12 18:38 - 143671360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
  729. 2016-01-14 07:15 - 2014-12-23 18:07 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
  730. 2016-01-14 07:13 - 2015-11-12 23:35 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
  731. 2016-01-11 23:41 - 2014-10-28 00:22 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
  732. 2016-01-11 23:41 - 2013-11-09 09:52 - 01542600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
  733. 2016-01-11 23:40 - 2014-10-28 00:22 - 01756608 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
  734. 2016-01-11 23:40 - 2013-11-09 09:52 - 01860120 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
  735.  
  736. ==================== Files in the root of some directories =======
  737.  
  738. 2014-11-16 19:12 - 2014-11-16 19:12 - 6000640 _____ () C:\Program Files (x86)\GUT18AF.tmp
  739. 2012-06-10 17:54 - 2012-06-12 20:13 - 0000064 _____ () C:\Users\Ward\AppData\Roaming\Statdisk.prefs
  740. 2014-11-07 21:16 - 2014-11-07 21:25 - 0000038 _____ () C:\Users\Ward\AppData\Roaming\Microsoft\{22FEB183-1967-A425-B376-5D18970AE1CC}
  741. 2012-07-07 16:00 - 2012-07-07 16:00 - 0000092 _____ () C:\Users\Ward\AppData\Local\fusioncache.dat
  742. 2015-01-27 20:12 - 2015-01-27 20:12 - 0006439 _____ () C:\Users\Ward\AppData\Local\HWVendorDetection.log
  743. 2012-02-19 18:24 - 2012-02-19 18:24 - 0001524 _____ () C:\Users\Ward\AppData\Local\PDLSetup.20120219.182404.txt
  744. 2012-02-28 20:09 - 2012-02-28 20:09 - 0001549 _____ () C:\Users\Ward\AppData\Local\PDLSetup.20120228.200907.txt
  745. 2012-02-24 08:43 - 2015-05-25 08:51 - 0007597 _____ () C:\Users\Ward\AppData\Local\resmon.resmoncfg
  746. 2015-02-10 23:04 - 2015-02-10 23:04 - 0000057 _____ () C:\ProgramData\Ament.ini
  747. 2011-12-20 21:54 - 2011-12-20 21:56 - 0015222 _____ () C:\ProgramData\ArcadeDeluxe5.log
  748.  
  749. Some files in TEMP:
  750. ====================
  751. C:\Users\Ward\AppData\Local\Temp\jre-8u71-windows-au.exe
  752.  
  753.  
  754. ==================== Bamital & volsnap =================
  755.  
  756. (There is no automatic fix for files that do not pass verification.)
  757.  
  758. C:\Windows\system32\winlogon.exe => File is digitally signed
  759. C:\Windows\system32\wininit.exe => File is digitally signed
  760. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  761. C:\Windows\explorer.exe => File is digitally signed
  762. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  763. C:\Windows\system32\svchost.exe => File is digitally signed
  764. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  765. C:\Windows\system32\services.exe => File is digitally signed
  766. C:\Windows\system32\User32.dll => File is digitally signed
  767. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  768. C:\Windows\system32\userinit.exe => File is digitally signed
  769. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  770. C:\Windows\system32\rpcss.dll => File is digitally signed
  771. C:\Windows\system32\dnsapi.dll => File is digitally signed
  772. C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
  773. C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
  774.  
  775.  
  776. LastRegBack: 2016-01-30 14:00
  777.  
  778. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!