-
Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.
Why not Click Here To Sign Up and start enjoying great FREE Tech Support.
This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Closed/Inactive Scanning of my PC
- Thread starter Eddie Paul Litz
- Start date
- Status
Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.
If you are unsure if your operating system is 32 or 64 Bit please go HERE.
Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu.
If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
Frst will open with two dialogue boxes, accept the disclaimer.
Accept the default whitelist options,
If the additions.txt options box is not checked please select it.
Then select "Scan"
Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.
Please Copy and Paste the contents of these logs in your next post for review by our Security Team
If you are unsure if your operating system is 32 or 64 Bit please go HERE.
Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu.
If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
Frst will open with two dialogue boxes, accept the disclaimer.
Accept the default whitelist options,
If the additions.txt options box is not checked please select it.
Then select "Scan"
Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.
Please Copy and Paste the contents of these logs in your next post for review by our Security Team
Here are the results.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-08-2017
Ran by eddie (administrator) on WIN10XP-1703PRO (16-08-2017 15:21:37)
Running from C:\Users\eddie\Desktop
Loaded Profiles: eddie (Available Profiles: eddie)
Platform: Windows 10 Pro Version 1703 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(SlimWare Utilities Holdings, Inc.) C:\Program Files\SlimWare Utilities\Services\SlimWare.Services.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(COMODO) C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Comodo) C:\Program Files (x86)\COMODO\Dragon\dragon_updater.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(pCloud AG) C:\Program Files (x86)\pCloud Drive\pCloud.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(SlimWare Utilities, Inc.) C:\Program Files\DriverUpdate\DriverUpdate.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Suo10_SmartRAM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe
(SlimWare Utilities Holdings, Inc.) C:\Program Files\SlimWare Utilities\Services\SlimWare.Session.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9231328 2017-08-02] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2017-08-13] (IvoSoft)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1489088 2017-07-11] (COMODO)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [3632848 2017-07-05] (COMODO)
HKLM-x32\...\Run: [vdcss] => C:\Program Files (x86)\COMODO\COMODO Secure Shopping\vdcss.exe [7690936 2017-06-30] (COMODO)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [pCloud] => C:\Program Files (x86)\pCloud Drive\pCloud.exe [3885832 2017-06-16] (pCloud AG)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [OpenVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] ()
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCEnhancer] => E:\CCEnhancer\CCEnhancer-4.4.1.exe [282112 2017-03-06] (SingularLabs)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [GoogleChromeAutoLaunch_E3F5740D1C7070D0CABB3741A4F94C0C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1301848 2017-08-11] (Google Inc.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [DriverUpdate] => C:\Program Files\DriverUpdate\DriverUpdate.exe [40742232 2017-07-31] (SlimWare Utilities, Inc.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [Advanced SystemCare 10] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3924256 2017-05-17] (IObit)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [SmartRAM] => C:\Program Files (x86)\IObit\Advanced SystemCare\Suo10_SmartRAM.exe [560416 2017-07-26] (IObit)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
SSODL: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\system32\cbfsMntNtf6.dll (/n software, Inc.)
SSODL-x32: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll (/n software, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{27427e43-89c9-4d14-b85e-f8cbc9b59dfe}: [DhcpNameServer] 192.168.254.254
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2896426177-3843145535-1853849027-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files (x86)\COMODO\COMODO Secure Shopping\cssbho64.dll [2017-06-30] (COMODO)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-14] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-14] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2017-08-13] (IvoSoft)
BHO-x32: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files (x86)\COMODO\COMODO Secure Shopping\cssbho32.dll [2017-06-30] (COMODO)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
BHO-x32: IObit Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2016-08-03] (IObit)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2017-08-13] (IvoSoft)
BHO-x32: IObit Ads Removal -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Adblock\Adblock.dll [2016-06-23] (IObit)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
FireFox:
========
FF DefaultProfile: oomuvn3h.default
FF ProfilePath: C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default [2017-08-16]
FF user.js: detected! => C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default\user.js [2017-08-15]
FF Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi [2017-07-03]
FF Extension: (Activity Stream) - C:\Program Files\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Click-to-Play staged rollout) - C:\Program Files\Mozilla Firefox\browser\features\clicktoplay-rollout@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Follow-on Search Telemetry) - C:\Program Files\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi [2017-08-10] [not signed]
FF Extension: (Photon onboarding) - C:\Program Files\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Shield Recipe Client) - C:\Program Files\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi [2017-08-10] [not signed]
FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-14] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://getchrome.eu/home/
CHR StartupUrls: Default -> "hxxp://getchrome.eu/home"
CHR DefaultSearchKeyword: Default -> wiki
CHR Profile: C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default [2017-08-16]
CHR Extension: (ProxFlow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2017-08-14]
CHR Extension: (Google Slides) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-14]
CHR Extension: (Security Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abbpkdnljicgejmkndbncgpeamlcjhom [2017-08-14]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2017-08-16]
CHR Extension: (GameShark) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\acmchkofncmmkabbadlofeffhchdmkop [2017-08-14]
CHR Extension: (Movie4K) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\adkbpinkibeobfkgfoolfpnldifjdedp [2017-08-14]
CHR Extension: (CB Channels) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afdeaaklpenijgadfgaljjnknlbaphae [2017-08-14]
CHR Extension: (Microsoft Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afiaggegejgnhhkfjpbbplaigaeijppc [2017-08-14]
CHR Extension: (Microsoft Virtual Agent) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahhncecjhnalimedngnkpfacimkmlafh [2017-08-14]
CHR Extension: (My Win10 PC) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akhdcannjobjjbbfabajjchleaccalng [2017-08-14]
CHR Extension: (HD for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2017-08-14]
CHR Extension: (LR EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akkmbnlaijgepeeldfglekgfajoiklph [2017-08-14]
CHR Extension: (ToonGet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\almbnkdlegibjhcgfbflpemghhdmalmf [2017-08-14]
CHR Extension: (Google Docs) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-14]
CHR Extension: (Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-14]
CHR Extension: (ARChon4Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbooacojifhcpicigmefgdhaiihjhnmd [2017-08-14]
CHR Extension: (Open with Google Drive™ Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdkpinfdldjdngmgfbifbdbgaoampkan [2017-08-14]
CHR Extension: (Super Nintendo Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\beogeghicacplhninfdmhiianhjimccp [2017-08-14]
CHR Extension: (Bitmoji) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfgdeiadkckfbkeigkoncpdieiiefpig [2017-08-14]
CHR Extension: (Google Groups) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfmbadcfdhiklafcdohpfphhhakmiakk [2017-08-14]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2017-08-14]
CHR Extension: (Mingle 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjeepgflngbnlkmfikinngokbcijkean [2017-08-14]
CHR Extension: (Amazon Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjjmjgafamolafiboomflecccipeddim [2017-08-14]
CHR Extension: (Win10 ISO) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjlhajlpdpmfebiokogbjhdgmkehgcbe [2017-08-14]
CHR Extension: (OpenDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmeclafhfpefpfndaigmiojllfgmbcm [2017-08-14]
CHR Extension: (YouTube) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-14]
CHR Extension: (1M AppStore) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bminhbeeccgdnghnabbhiafpndlbkedn [2017-08-14]
CHR Extension: (Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cagpfhohgbclhfgfggnbgfhnjehoknpk [2017-08-14]
CHR Extension: (History 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cahejgbbfgmlmjgdjlibphdjeldhagkp [2017-08-14]
CHR Extension: (Amazon) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\camkdhjofheljkflfmfgbnajgjnhlopf [2017-08-14]
CHR Extension: (Update) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbkkihljhphdkjhiabaomgfninkfihhe [2017-08-14]
CHR Extension: (Toons Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdibbihehmddkghfgiblbflocphmmooc [2017-08-14]
CHR Extension: (Snoopy vs. The Red Baron) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfalonhgbljhcmcajnbdebedcjdoblnl [2017-08-14]
CHR Extension: (Adblock Plus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-08-14]
CHR Extension: (Pushbullet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-08-14]
CHR Extension: (OneNote Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciniambnphakdoflgeamacamhfllbkmo [2017-08-14]
CHR Extension: (Monopoly Empire game | Play Kids Games Online | Hasbro) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjdhdhilfeoikokoiakkgnckknaekled [2017-08-14]
CHR Extension: (YT2MP3) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjhmdjffbkdmddmdmmbabiaclojaomeg [2017-08-14]
CHR Extension: (TechSupportGuy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckffimcpiheacclckfmmdcbhbmfmfikd [2017-08-14]
CHR Extension: (TWC Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckifgoknanfhclklbfjlpblncjpdfmfj [2017-08-14]
CHR Extension: (Microsoft Flow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clldiedkmkolghagmnpmnoljbhijiboi [2017-08-14]
CHR Extension: (HP ENVY) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clpdjjcfniihldhfchnjbiladapnbahi [2017-08-14]
CHR Extension: (MAFYT Settings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmelobemnghobnlpdfmmbejdoaleajcf [2017-08-14]
CHR Extension: (SSF2 Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnlencpcagccinnhoijdgmobkmfhalcc [2017-08-14]
CHR Extension: (Harakirimail extension) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coaagmonnnldglbilekplfnphpdencce [2017-08-14]
CHR Extension: (ComputerHelpForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbhjgghkoimcbpnbgjikmpgffkgajfk [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\damfhmjfmeiigloagjpelmocjoeobdno [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dccnabnbnagheglhfmgdcjlcjbeibaje [2017-08-14]
CHR Extension: (Chase Online ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcofdmelmmjneoonenbhpagpbpiojkhf [2017-08-14]
CHR Extension: (Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\deceagebecbceejblnlcjooeohmmeldh [2017-08-14]
CHR Extension: (3DS Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfkhponeglmiiobiihilahinlckifjjh [2017-08-14]
CHR Extension: (Fus.Fall Legacy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgmdnngojpofdigdidplfaebnjohmfng [2017-08-14]
CHR Extension: (Tampermonkey) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-08-14]
CHR Extension: (Janifer Boston) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhpkkleekhaceehoigfcnaaidjoleflh [2017-08-14]
CHR Extension: (Glitch Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djahbfbhacphllgemcekmdnlilahhmge [2017-08-14]
CHR Extension: (Nintendo Chat) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djeppnpeahmgfaohhidhjpipjkahimfe [2017-08-14]
CHR Extension: (Google+) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2017-08-14]
CHR Extension: (NORAD Tracks Santa) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmkoneajelflpbfjpchjaiglipefmnki [2017-08-14]
CHR Extension: (Frontier DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnabfpdnbkmdmcoillihefhnjjknnona [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dolkddbfbhledadcdepacaljbglglcoe [2017-08-14]
CHR Extension: (Sumo Paint) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpgjihldbpodlmnjolekemlfbcajnmod [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ebgecmolaheocnobalndebpehpimdghi [2017-08-14]
CHR Extension: (Inbox) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\edmijkelpnflahpdblkkobimcplcgmgj [2017-08-14]
CHR Extension: (Amazon Shop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eecahhmlcjafclfkjodjjgllpmcmkgko [2017-08-14]
CHR Extension: (Novelty, OH Weather Forecast and Cond...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eenemnbihadgbcjemdnobckofmiihfnk [2017-08-14]
CHR Extension: (Shortcut to Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\efcdnfkhiiafogbhcainplbbgemgaaen [2017-08-14]
CHR Extension: (YouTubeDownloader) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eieafdgibiahkjdgdccmldmjidglnbjj [2017-08-14]
CHR Extension: (Google Fourms) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejiggjokppepehmfdngjefbhjeheknmp [2017-08-14]
CHR Extension: (Cast Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejliejcnhkkaaipdgkeiihbefhjeoemp [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejppoecfdibjchmpdcphbanegdjebcgo [2017-08-14]
CHR Extension: (HelpSupport Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekimmgolelbekdhafemjekjhkempbkfd [2017-08-14]
CHR Extension: (Comodo AdBlocker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhcnbjoomhmifmfeggoalmplblcmcin [2017-08-14]
CHR Extension: (Chrome Goodies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\emmdmeocdlghmhbfjaldhjahnfbkbpck [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\enffghkdjcgkndjodbaelocgmcbmbhpp [2017-08-14]
CHR Extension: (Filter by WOT) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eomhfalemadkajmgmppkoenihlljdjoj [2017-08-14]
CHR Extension: (Update Windows 10) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\epejeipipakmkmdfnkpghcjfmeigpggo [2017-08-14]
CHR Extension: (G SSH2 SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabhojopefodnkcighibfcnamgmplloh [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fajdleioencnfbnmiienoibkoimkooli [2017-08-14]
CHR Extension: (Old EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fanigphfdfepmnelohpfhcpecoekibml [2017-08-14]
CHR Extension: (DiskImager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdfeicageglnlelmohmkojdjccgkdmcb [2017-08-14]
CHR Extension: (FREE App Creator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdhglomjccccgggpeabmiadbpmofeedc [2017-08-14]
CHR Extension: (Motorola) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fekllafapcbanabhhooobibaanmndalm [2017-08-14]
CHR Extension: (Google Sheets) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-14]
CHR Extension: (Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdhgdfhcclnmednjibbajgcpcpppknl [2017-08-14]
CHR Extension: (FB Game Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijlioglnahpdajepoinkodlegkolkam [2017-08-14]
CHR Extension: (Villionaire) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fimebapbdliodpciaalpoijonhdfhhkd [2017-08-14]
CHR Extension: (Word Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2017-08-14]
CHR Extension: (G SSH SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fipamjmedinmfclljanbjhhbdkfinpkc [2017-08-14]
CHR Extension: (Nintendo ThemeShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkhaiaahhhomnfnnjhmnkkhloogihnfa [2017-08-14]
CHR Extension: (EMails) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fknmbhaaehfdjpmooilcabjgooldjdoo [2017-08-14]
CHR Extension: (Google Voice ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fldbfpjncfkebegiobhnjanbokdlbnij [2017-08-14]
CHR Extension: (Rufus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljfobnflghnobgffmkpjddbdehgmfol [2017-08-14]
CHR Extension: (Who's on first?) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljmpldncihcmabdfjkgonhijjkpbgkl [2017-08-14]
CHR Extension: (Norton DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\focoenonfjfpphaadindagmhlijgklak [2017-08-14]
CHR Extension: (Nintendo CS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpdddhjdalfonhmejlkcfhjcckhealoc [2017-08-14]
CHR Extension: (Chrome Remote Desktop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-08-14]
CHR Extension: (SPdate) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmnahlpnikhhgldfmeajheocdileadd [2017-08-14]
CHR Extension: (Super Mario) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdljahompmnjdcmnlcfeobicdpepefbf [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegmdadojdijhnemaeolhalohelcagod [2017-08-14]
CHR Extension: (Network Test) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\geklcdelofkoldghehnhggalmoahklbi [2017-08-14]
CHR Extension: (Homebrew Browser) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjnhndecndnepbjpmaloifckdmgcac [2017-08-14]
CHR Extension: (About GPG Services) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaoeklfaibbbipibbalclmnllojibkh [2017-08-14]
CHR Extension: (Google Docs Offline) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-14]
CHR Extension: (Click&Clean) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2017-08-14]
CHR Extension: (Anyfile Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghlichmdnegmcpafgmmlpkegmcndlndi [2017-08-14]
CHR Extension: (Outlook People) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\giafdibgibbipnlecfckidkecmpkedho [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjaejhlejagppekogippmigjbkdjmcdk [2017-08-14]
CHR Extension: (Open PayPal) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glghgmejmmepalcnengjekjfmfbailbl [2017-08-14]
CHR Extension: (Google Wallet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhhiiglleiipdnodkaabbbbjhepnbcb [2017-08-14]
CHR Extension: (Save to Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2017-08-14]
CHR Extension: (Bookmark Manager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2017-08-14]
CHR Extension: (UnRAR and RAR Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\goeclnlkhfoejbhdebemhjljlmcbhfkp [2017-08-14]
CHR Extension: (Drive Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpgjomejfimnbmobcocilppikhncegaj [2017-08-14]
CHR Extension: (Win10 Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpjminmgekffdgiancflhaojkgjcdgmc [2017-08-14]
CHR Extension: (Microsoft Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplepoifohkaepkncehnpljceeljlabi [2017-08-14]
CHR Extension: (WC Forums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbiinloenjigabpbdlogbimfgbopcfce [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfbcjnjfeolgeoddhcdjpogocmpkmncp [2017-08-14]
CHR Extension: (GSSH.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmckcabobcmbdlimkenccopfnpokmie [2017-08-14]
CHR Extension: (GV Phone) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmpoeaghekodfplkofpeabpnipphcjh [2017-08-14]
CHR Extension: (Outlook Tasks) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkaimcgnicopmhblimdmfjahhifkfcoi [2017-08-14]
CHR Extension: (Dead Skin) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnjjcekgbjlpiegjcdmmpojndajlndok [2017-08-14]
CHR Extension: (RomsEShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hohhmomfljojjeaaehdcocalfpejjccc [2017-08-14]
CHR Extension: (USPS Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\idammebdkcmcjhminehllfamifenkhbn [2017-08-14]
CHR Extension: (Android Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbnciaeojfhgeihkflgcgajopfjeohg [2017-08-14]
CHR Extension: (Get Human) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifcelejocgjieghblljgkemmnlejjlep [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igabecodgkgfkdhglpojbnbobbnaajai [2017-08-14]
CHR Extension: (SEGA Bandonware) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igelfoafbodelegelfonpkanedmogdpm [2017-08-14]
CHR Extension: (OMG! Chrome!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igpknfbadalohcopbkaepbgblomnbdma [2017-08-14]
CHR Extension: (Frontier Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihjgglhacdljfhmlinhcagchbkcgdhio [2017-08-14]
CHR Extension: (Zip, UnZip App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiaianhgacnhnnhejddkghikgnhgpeaa [2017-08-14]
CHR Extension: (Bible Questions Answered) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiipijolbcononkgjpepkplcchmajanm [2017-08-14]
CHR Extension: (Apps Launcher) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijmgkhchjindcjamnckoiahagecjnkdc [2017-08-14]
CHR Extension: (Office Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikhblhjgapcilfennndodceemdoomngn [2017-08-14]
CHR Extension: (Excel Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2017-08-14]
CHR Extension: (PC Help Forum) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\illdlgkhakmollnophmajedfblhpijak [2017-08-14]
CHR Extension: (COSwallpapers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\inpceamnbdnjkljfebkpdgfnnfckopap [2017-08-14]
CHR Extension: (HTML5 Flash Warning Fix for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipdkokhdeppifjgcmhbfgmjmdllfpkln [2017-08-14]
CHR Extension: (File System for OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdfcehgafdbfpniaimfbfomafoadgo [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbjamgmfdlbplimhkomcjjlemjaddogn [2017-08-14]
CHR Extension: (PCTechForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jecdgjmkjbcagbkoifleegbplpnaobfa [2017-08-14]
CHR Extension: (Microsoft Update Catalog) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhgndoofkbbhhfcoldgjcakejekefcd [2017-08-14]
CHR Extension: (SSF2 Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgplhfbmmkajpgnpldoaafagambccjje [2017-08-14]
CHR Extension: (BibleGateway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjmdfkmnphhfgilhfofaiffmhjlnopan [2017-08-14]
CHR Extension: (SM Trial Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljcdndcgbkbjonffogpnljganhabgmj [2017-08-14]
CHR Extension: (Save to Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfikkaogpplgnfjmbjdpalkhclendgd [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jomemcnjdjkjipodmcpfjhioloioplfh [2017-08-14]
CHR Extension: (CDFF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kahonebhcmapeomaemhjakphnpffhhhf [2017-08-14]
CHR Extension: (My Sway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcnmjbpdljgcffbninlkelpbfmbbbohp [2017-08-14]
CHR Extension: (North Pole Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdggiihhdpfglclmfghofjbiagonaplo [2017-08-14]
CHR Extension: (Chrome Web Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfknblmmckdmlklbncfodpomfoejlbgm [2017-08-14]
CHR Extension: (Range Extender Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgaimanaoiiecgbljbpjhkdicaogkinf [2017-08-14]
CHR Extension: (4Shared) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khdleokphdcnmagagajnchlcmacfphan [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khomnbdfmhfppiemgglncdlbbnppffdo [2017-08-14]
CHR Extension: (Pure Flix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiiijkmmlfiofadnffcomgcmdlppddhd [2017-08-14]
CHR Extension: (Novelty, OH Weather Conditions & Fore...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkphahjiaiaahfhcbedhbgfpodbojbje [2017-08-14]
CHR Extension: (MyAptoideBU) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpdcjojlnaceggdkglndamdmaonfnpi [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2017-08-14]
CHR Extension: (GSSH2.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\laekopehhnfklajodmbbhdfhmkfbnblc [2017-08-14]
CHR Extension: (Wake Up!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbbcfplbfbmimpnlammmeaheakhcogke [2017-08-14]
CHR Extension: (AnimeDub Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbdcckpbjegpnhhdejaipegkabkofhla [2017-08-14]
CHR Extension: (Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lddagfjihimnacaabfnfagjcokfmnekc [2017-08-14]
CHR Extension: (Aptoide) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhhjndfejaoaiaaokjmhoiedppdmknki [2017-08-14]
CHR Extension: (AnimeDub) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhnnmimodonfbnmpgmcjahlblaenkgle [2017-08-14]
CHR Extension: (Files2Zip) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhoadfgjeimckjlphkdebfmhbpeniljo [2017-08-14]
CHR Extension: (USPS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\liocengmpmiiejdoebmlifecbmcpfigg [2017-08-14]
CHR Extension: (Wikipedia Search) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lipakennkogpodadpikgipnogamhklmk [2017-08-14]
CHR Extension: (MSN Games - Free Online Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkbgddpallgbhlldcnnjomnodmohpklf [2017-08-14]
CHR Extension: (IHeart Christmas) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lndoiaoagbajoadpgmfgckfckmchepmj [2017-08-14]
CHR Extension: (Google Maps) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2017-08-14]
CHR Extension: (SSB) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lockfglcfjlaagpghflagedkkgojipke [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\locmdgkcjcjacipaokcoochhjhpklbih [2017-08-14]
CHR Extension: (B1 File Extracter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbgobeedadfbponkgffobhpmokjmlhol [2017-08-14]
CHR Extension: (Documents Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbhgihpdipbgifogehncdehebkpehoap [2017-08-14]
CHR Extension: (GoogleDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbogpnkehmjcidggfooapenefhckeehd [2017-08-14]
CHR Extension: (PowerPoint Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2017-08-14]
CHR Extension: (Messenger (Unofficial)) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdapmeleikeppmfgadilffngabfpibok [2017-08-14]
CHR Extension: (GoogleFuchsia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mejnaonfdocegokbjldkeafifpnfnpan [2017-08-14]
CHR Extension: (CN Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mekgfnmophledbpkmikhnfkimoahjohn [2017-08-14]
CHR Extension: (CraigTechShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfbfebnljjciechbmlehdcmnmdhacgmi [2017-08-14]
CHR Extension: (COMODO DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfnnnpncpeeecbbdepenkkgpjoenkbbo [2017-08-14]
CHR Extension: (T-Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhpgceapcpooallmggianccbakegnhnb [2017-08-14]
CHR Extension: (V.FreeMovies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkopchcfcbchhnbpldmdjfbdhgkcpgkn [2017-08-14]
CHR Extension: (CB Central) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlieflpkidahjkojakjlpnlnchobihbl [2017-08-14]
CHR Extension: (ZIP Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmfcakoljjhncfphlflcedhgogfhpbcd [2017-08-14]
CHR Extension: (GC Options) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmmanlicckcagdkabbemhccfpmgojncl [2017-08-14]
CHR Extension: (My Google Account) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnepgpaicadoimgdlajhkgokfenaadkh [2017-08-14]
CHR Extension: (PogoTM) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmklochmlghbgebbmkldomoihjbgfie [2017-08-14]
CHR Extension: (Nintendo Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mogfngbfndeeecglaejajbioegpimija [2017-08-14]
CHR Extension: (What's on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbeopbccnmkgdlbpicobflenbjceoaka [2017-08-14]
CHR Extension: (Chrome OS Features) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbjdhanphhipjfkmicljakgnbaicfojk [2017-08-14]
CHR Extension: (Ws on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncjendjahmgpgjdeenknmdoecofmfdod [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2017-08-14]
CHR Extension: (Reload It) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nconjighkgcoppohfilfinlimdfmjafg [2017-08-14]
CHR Extension: (Games4Summer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndphblldagopagiodebolhdjohgindbm [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2017-08-14]
CHR Extension: (UNetbootin - Homepage and Downloads) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhanbcbjhjcgpccibphcicainkkinool [2017-08-14]
CHR Extension: (SupportSpace) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nigmaeimafjgjfodjfhnancnahfeindg [2017-08-14]
CHR Extension: (FedEx Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikgcnimkfeopobooaahjpbdkdfhchao [2017-08-14]
CHR Extension: (SEGA Online Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nilhogoffgcdfgmejcjpidfaiefpccpl [2017-08-14]
CHR Extension: (WeatherBug) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\njkkjobcechefaoknodniidfjapgfoco [2017-08-14]
CHR Extension: (Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nklbmhejmcjofglijalidajdlihahnpd [2017-08-14]
CHR Extension: (Archive Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknadlalodfadgegkigkmbhofcmkhfnc [2017-08-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-14]
CHR Extension: (Win10 Pro keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnelnnlfcdhjfbfglandknndlonidojg [2017-08-14]
CHR Extension: (Toonova) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobhijfkaffjbkocimaaembibggenkdc [2017-08-14]
CHR Extension: (Frontier) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nofcknkefjengmgmlnmdmgbmlakhhnok [2017-08-14]
CHR Extension: (SM63.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\noijjjifnenaafboiipobhiflmiaimof [2017-08-14]
CHR Extension: (Chrome OS EOL) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\npmnpehbihaieehmoaifdkdlcgndmpjn [2017-08-14]
CHR Extension: (System) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocjnemjmlhjkeilmaidemofakmpclcbi [2017-08-14]
CHR Extension: (COMODO GeekBuddy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oebmcdnandbcnfmpjecmmhcoogfneelj [2017-08-14]
CHR Extension: (Google Santa Tracker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehagbcimlpafjbdijnjmaboblcfdnoh [2017-08-14]
CHR Extension: (PDF Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oemmndcbldboiebfnladdacbdfmadadm [2017-08-14]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2017-08-15]
CHR Extension: (App Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogffnakkboiaoifjbhjbahamkdojaemm [2017-08-14]
CHR Extension: (EPForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oimkklcnelpdlkkbjjablakandmmddio [2017-08-14]
CHR Extension: (Fullscreen Anything) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\olcfgpmjldkkjdclidhcbonieibfhhdh [2017-08-14]
CHR Extension: (SM 63) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oldjcgpcnneleakkepogfghcehnjcngf [2017-08-14]
CHR Extension: (YouTube™ Flash-HTML5) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\omimccinlhlkpjaeaocglgmkbelejlhj [2017-08-14]
CHR Extension: (Christian Date) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ompnolbokepechjidcgpaddaaeoocajn [2017-08-14]
CHR Extension: (Consumer AV Providers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ongfjpmgcneinonelpaljjdaigppnneo [2017-08-14]
CHR Extension: (Putlocker ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookjcnljofpnadeabapgadihfhngblfe [2017-08-14]
CHR Extension: (Nintendo RomShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pahokmgpomeaakdfnahejklhcifhaige [2017-08-14]
CHR Extension: (Microsoft Office Home) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\palennhedgekbnbmokheidadmghcncgl [2017-08-14]
CHR Extension: (I Heart Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcbnpgdibikphcelmkjldlfjjepjipl [2017-08-14]
CHR Extension: (Click&Clean App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-08-14]
CHR Extension: (Shortcuts for Google™ Products) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdlecffodcfabchelafoljcdphfpkpcl [2017-08-14]
CHR Extension: (Date Countdown) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfbpikfaigmikdjkghbkbapjhfoglipj [2017-08-14]
CHR Extension: (Data Saver) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmgfdlgomnbgkofeojodiodmgpgmkac [2017-08-14]
CHR Extension: (Outlook.com) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\phfegmcgballapgnbppeeidckejebknn [2017-08-14]
CHR Extension: (Super Smash Bros For NDS !!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pifamkpimegbfnakceigajiljjodcfla [2017-08-14]
CHR Extension: (Gmail) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-14]
CHR Extension: (Chrome Media Router) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-14]
CHR Extension: (OMG! Ubuntu!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmoodaljflkhbojjaiibgnlindbhebme [2017-08-14]
CHR Extension: (EBay) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppaellakmlibbcfkgkmbkkllnhcmghca [2017-08-14]
CHR Extension: (Google Contacts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppbiamkfhlcpgijakdgbbffikmkkofnl [2017-08-14]
CHR Extension: (Apps On Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppmdjabijijblhfhnbgcpnoamkibcclm [2017-08-14]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdvancedSystemCareService10; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [462624 2017-03-21] (IObit)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [10501104 2017-07-11] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2017-07-11] (COMODO)
R2 csssrv; C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe [3210936 2017-06-30] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2273432 2017-08-08] (Comodo)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [356352 2017-08-02] (Intel Corporation)
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-07-05] (COMODO)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324576 2017-08-02] (Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-04-11] (Microsoft Corporation)
R2 SlimWareServices; C:\Program Files\SlimWare Utilities\Services\SlimWare.Services.exe [79704 2017-07-31] (SlimWare Utilities Holdings, Inc.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269912 2017-01-17] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-19] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-09-09] (/n software, Inc.)
R1 cmdcss; C:\WINDOWS\system32\drivers\cmdcss.sys [126056 2017-03-31] (COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [40936 2017-06-02] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [831992 2017-06-02] (COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [50776 2017-06-02] (COMODO)
S3 dot4; C:\WINDOWS\System32\drivers\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [72584 2017-01-12] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [67976 2017-01-12] (Intel Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77376 2017-06-27] ()
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7407080 2017-08-02] (Intel Corporation)
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [132880 2017-06-07] (COMODO)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [62208 2017-03-29] (COMODO)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [188352 2017-08-16] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [101784 2017-08-16] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [45472 2017-08-16] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-16] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93600 2017-08-16] (Malwarebytes)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [947712 2017-02-15] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [420832 2017-08-02] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [6804480 2017-05-03] (Realtek Semiconductor Corporation )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [60504 2017-01-17] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [64088 2017-01-17] (Synaptics Incorporated)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2015-10-15] (Intel Corporation)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [18624 2016-09-09] (/n software, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30392 2017-04-25] (HP)
S3 WiseUnlock; C:\WINDOWS\WiseUnlock64.sys [33864 2017-08-15] (WiseCleaner.com)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 15:21 - 2017-08-16 15:24 - 000054927 _____ C:\Users\eddie\Desktop\FRST.txt
2017-08-16 15:21 - 2017-08-16 15:21 - 000000000 ____D C:\FRST
2017-08-16 15:18 - 2017-08-16 15:19 - 002395648 _____ (Farbar) C:\Users\eddie\Desktop\FRST64.exe
2017-08-16 12:40 - 2017-08-16 12:40 - 009791816 _____ (Piriform Ltd) C:\Users\eddie\Downloads\ccsetup533.exe
2017-08-16 01:03 - 2017-08-16 01:03 - 000000000 ___HD C:\OneDriveTemp
2017-08-16 01:01 - 2017-08-16 01:01 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-08-16 00:53 - 2017-08-16 00:53 - 000003656 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default\AppData\Roaming\IObit
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default User\AppData\Roaming\IObit
2017-08-16 00:29 - 2017-08-16 00:29 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-08-16 00:28 - 2017-08-16 13:45 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-08-16 00:28 - 2017-08-16 01:01 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-08-16 00:27 - 2017-08-16 01:01 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-08-16 00:27 - 2017-08-16 00:27 - 000001927 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-16 00:27 - 2017-06-27 12:06 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-08-16 00:25 - 2017-08-16 01:01 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-16 00:24 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-15 23:54 - 2017-06-19 22:05 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2017-08-15 23:54 - 2017-03-18 13:58 - 000587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2017-08-15 23:54 - 2017-03-18 13:58 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxinit.dll
2017-08-15 18:07 - 2017-08-15 18:13 - 000000000 ____D C:\Users\eddie\AppData\Local\PackageStaging
2017-08-15 12:57 - 2017-08-15 12:59 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000033864 _____ (WiseCleaner.com) C:\WINDOWS\WiseUnlock64.sys
2017-08-15 12:57 - 2017-08-15 12:57 - 000001287 _____ C:\Users\Public\Desktop\Wise Force Deleter.lnk
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\Program Files (x86)\Wise
2017-08-15 03:39 - 2017-08-15 03:39 - 000000000 ____D C:\WINDOWS\System32\Tasks\Games
2017-08-15 03:29 - 2017-08-15 03:29 - 000000000 ____D C:\WINDOWS\System32\Tasks\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000001357 _____ C:\Users\eddie\Desktop\Auslogics Disk Defrag.lnk
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\Program Files (x86)\Auslogics
2017-08-15 03:21 - 2017-08-15 03:21 - 000000000 ___HD C:\VTRoot
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ____D C:\Program Files (x86)\Realtek
2017-08-15 02:25 - 2017-02-15 21:50 - 000947712 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2017-08-15 02:25 - 2017-02-15 21:50 - 000082536 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2017-08-15 02:23 - 2017-08-15 02:23 - 000000000 ____D C:\ProgramData\SlimWare Utilities Inc
2017-08-15 01:46 - 2017-08-15 01:46 - 005373952 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2017-08-15 01:17 - 2017-08-15 01:30 - 000000000 ____D C:\Users\eddie\AppData\Local\CrashDumps
2017-08-15 00:48 - 2017-08-15 00:48 - 000001796 _____ C:\Users\eddie\Desktop\Virtual Kiosk.lnk
2017-08-15 00:31 - 2017-08-15 00:31 - 000002374 _____ C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-08-14 22:18 - 2017-08-15 01:37 - 000003474 _____ C:\WINDOWS\System32\Tasks\ASC10_AutoCare
2017-08-14 22:09 - 2017-08-14 22:09 - 000000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2017-08-14 22:01 - 2017-08-14 22:01 - 000002908 _____ C:\WINDOWS\System32\Tasks\ASC10_SkipUac_eddie
2017-08-14 22:01 - 2017-08-14 22:01 - 000000000 ____D C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
2017-08-14 22:00 - 2017-08-14 22:01 - 000002249 _____ C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
2017-08-14 22:00 - 2017-08-14 22:00 - 000003114 _____ C:\WINDOWS\System32\Tasks\ASC10_PerformanceMonitor
2017-08-14 22:00 - 2017-08-14 22:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2017-08-14 21:54 - 2017-08-16 15:20 - 000062144 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2017-08-14 21:40 - 2017-08-14 21:40 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2017-08-14 21:40 - 2017-08-14 21:40 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2017-08-14 21:38 - 2017-08-14 21:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Comodo
2017-08-14 21:27 - 2017-08-16 15:21 - 001336640 _____ C:\WINDOWS\system32\Drivers\sfi.dat
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\Program Files\COMODO
2017-08-14 21:26 - 2017-06-30 07:08 - 000332472 _____ (COMODO) C:\WINDOWS\system32\cmdkbdcss64.dll
2017-08-14 21:26 - 2017-06-30 07:08 - 000263352 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdkbdcss32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000432104 _____ (COMODO) C:\WINDOWS\system32\cssguard64.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000338560 _____ (COMODO) C:\WINDOWS\SysWOW64\cssguard32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000048728 _____ (COMODO) C:\WINDOWS\system32\csscsr64.dll
2017-08-14 21:26 - 2017-03-31 23:15 - 000126056 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdcss.sys
2017-08-14 21:25 - 2017-08-14 21:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Comodo
2017-08-14 21:21 - 2017-08-14 21:35 - 000000480 _____ C:\WINDOWS\Tasks\DriverUpdate Scan.job
2017-08-14 21:21 - 2017-08-14 21:21 - 000003258 _____ C:\WINDOWS\System32\Tasks\DriverUpdate Scan
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Shared Space
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Comodo Downloader
2017-08-14 21:20 - 2017-08-15 16:19 - 000000000 ____D C:\Program Files\DriverUpdate
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\Users\eddie\AppData\Local\SlimWare Utilities Inc
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\Program Files\SlimWare Utilities
2017-08-14 21:19 - 2017-08-15 01:44 - 000000000 ____D C:\ProgramData\COMODO
2017-08-14 21:19 - 2017-08-15 00:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-08-14 21:19 - 2017-08-14 21:47 - 000000000 ____D C:\Program Files (x86)\COMODO
2017-08-14 21:19 - 2017-07-05 00:30 - 000256040 _____ (COMODO) C:\WINDOWS\system32\iseguard64.dll
2017-08-14 21:19 - 2017-07-05 00:29 - 000205536 _____ (COMODO) C:\WINDOWS\SysWOW64\iseguard32.dll
2017-08-14 21:19 - 2017-03-29 14:49 - 000062208 _____ (COMODO) C:\WINDOWS\system32\Drivers\isedrv.sys
2017-08-14 17:10 - 2017-08-14 17:11 - 000002676 _____ C:\Users\eddie\Desktop\PC Help Forum.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001006 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-14 16:12 - 2017-08-14 16:12 - 000000859 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Explorer.lnk
2017-08-14 14:46 - 2017-08-14 15:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
2017-08-14 14:41 - 2017-08-14 14:41 - 000002357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-14 14:41 - 2017-08-14 14:41 - 000002345 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-14 14:40 - 2017-08-14 14:40 - 000003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-08-14 14:40 - 2017-08-14 14:40 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-08-14 14:28 - 2017-08-14 14:28 - 000000000 ____D C:\WINDOWS\Panther
2017-08-14 14:15 - 2017-08-14 14:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-14 14:15 - 2017-08-14 14:15 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Sun
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-08-14 14:15 - 2017-08-14 14:14 - 000110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2017-08-14 14:14 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\ProgramData\Oracle
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\Program Files\Java
2017-08-14 04:00 - 2017-08-14 04:00 - 000041800 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2017-08-14 03:49 - 2017-08-14 03:49 - 000000000 ____D C:\Users\eddie\AppData\Local\PeerDistRepub
2017-08-14 02:55 - 2017-08-14 02:55 - 069640192 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000491520 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000065536 _____ C:\WINDOWS\system32\config\SAM.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2017-08-14 02:53 - 2017-08-16 02:56 - 000000000 ____D C:\Users\eddie\AppData\Local\ClassicShell
2017-08-14 02:53 - 2017-08-16 02:33 - 000000000 ____D C:\ProgramData\ClassicShell
2017-08-14 02:53 - 2017-08-14 02:53 - 000000000 ____D C:\Users\eddie\AppData\Roaming\ClassicShell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\Program Files\Classic Shell
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\BDLogging
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
2017-08-14 02:26 - 2017-08-14 02:26 - 000565416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-08-14 02:18 - 2017-08-14 04:54 - 000002956 _____ C:\WINDOWS\System32\Tasks\CCleanerClean
2017-08-14 02:18 - 2017-08-14 04:54 - 000000258 _____ C:\WINDOWS\Tasks\CCleanerClean.job
2017-08-14 02:05 - 2017-08-16 12:42 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-14 02:05 - 2017-08-16 12:39 - 000000000 ____D C:\Program Files\CCleaner
2017-08-14 02:05 - 2017-08-14 02:05 - 000002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-08-14 02:05 - 2017-08-14 02:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-14 01:52 - 2017-08-14 01:52 - 000001129 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Users\eddie\AppData\Local\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Program Files\VS Revo Group
2017-08-14 01:52 - 2016-12-21 14:52 - 000040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2017-08-14 01:46 - 2017-08-14 01:46 - 000000000 ____D C:\Users\eddie\AppData\Local\MicrosoftEdge
2017-08-14 01:45 - 2017-08-14 21:59 - 000000000 ____D C:\ProgramData\IObit
2017-08-14 01:45 - 2017-08-14 04:53 - 000000000 ____D C:\Program Files (x86)\IObit
2017-08-14 01:45 - 2017-08-14 02:45 - 000000000 ____D C:\ProgramData\ProductData
2017-08-14 01:45 - 2017-08-14 02:33 - 000000000 ____D C:\Users\eddie\AppData\Roaming\IObit
2017-08-14 01:45 - 2017-08-14 01:45 - 000000000 ____D C:\ProgramData\{EAAB5A83-3809-4B0E-83A6-E4B0DBF2157E}
2017-08-14 01:37 - 2017-08-14 01:37 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\3C64355F.sys
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\TAP-Windows
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2017-08-14 01:23 - 2017-08-14 01:23 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\Users\eddie\AppData\Roaming\WinRAR
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 01:22 - 2017-08-14 01:23 - 000000000 ____D C:\Program Files\WinRAR
2017-08-14 01:16 - 2017-08-14 01:16 - 000000634 _____ C:\Users\eddie\OneDrive\Documents\MagicActions-Options.json
2017-08-14 01:02 - 2017-08-14 04:57 - 000000000 ____D C:\Users\eddie\AppData\Local\pCloud
2017-08-14 00:56 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Google
2017-08-14 00:56 - 2017-08-14 00:56 - 000000000 ____D C:\WINDOWS\InfusedApps
2017-08-14 00:54 - 2017-08-14 00:54 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-08-14 00:54 - 2017-08-13 23:58 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-08-14 00:52 - 2017-08-14 00:52 - 000000000 ____D C:\Program Files\Synaptics
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\Program Files (x86)\HP
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\WINDOWS\Setup
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\Users\eddie\AppData\Local\DBG
2017-08-14 00:49 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Google
2017-08-14 00:49 - 2017-08-14 14:40 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-14 00:48 - 2017-08-14 00:49 - 000000000 ____D C:\Users\eddie\AppData\Local\Deployment
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Macromedia
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Local\Apps\2.0
2017-08-14 00:46 - 2017-08-16 12:16 - 000004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{FA13B12A-B6F1-4CA4-9E37-D55E2EE30D0B}
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\OCR
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\MSBuild
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pCloud
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\Program Files (x86)\pCloud Drive
2017-08-14 00:43 - 2016-09-09 16:33 - 000018848 _____ (/n software, Inc.) C:\WINDOWS\system32\elevtmsg.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000235424 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000196000 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000134560 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:31 - 000170400 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:23 - 000460992 _____ (/n software, Inc.) C:\WINDOWS\system32\Drivers\cbfs6.sys
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\DigitalLocker
2017-08-14 00:37 - 2017-07-31 08:15 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-08-14 00:37 - 2017-07-31 08:15 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-14 00:32 - 2017-08-14 00:55 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-08-14 00:32 - 2017-08-14 00:27 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2017-08-14 00:32 - 2017-08-14 00:27 - 000015940 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2017-08-14 00:32 - 2017-08-14 00:27 - 000004096 _____ C:\WINDOWS\system32\config\VSMIDK
2017-08-14 00:32 - 2017-08-14 00:27 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2017-08-14 00:32 - 2017-08-14 00:27 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2017-08-14 00:32 - 2017-08-14 00:27 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2017-08-14 00:32 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-14 00:31 - 2017-08-16 00:55 - 000000000 ___RD C:\Program Files (x86)
2017-08-14 00:31 - 2017-08-15 01:44 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2017-08-14 00:31 - 2017-08-14 14:36 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-08-14 00:31 - 2017-08-14 03:25 - 000000000 ____D C:\WINDOWS\appcompat
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files (x86)\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\migwiz
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\Provisioning
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\SystemApps
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\dsc
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\IME
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\Help
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 __RSD C:\WINDOWS\Media
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\AppV
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\ias
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\DDFs
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\Registration
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\L2Schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Web
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Vss
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\tracing
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\TAPI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SystemResources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\winevt
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\System
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SKB
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SchCache
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Resources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\RemotePackages
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\PLA
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Performance
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\ModemLogs
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Globalization
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Cursors
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Branding
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\bcastdvr
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\addins
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Common Files\Services
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:27 - 000000219 _____ C:\WINDOWS\system.ini
2017-08-14 00:31 - 2017-08-14 00:27 - 000000092 _____ C:\WINDOWS\win.ini
2017-08-14 00:31 - 2017-08-14 00:20 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-08-14 00:31 - 2017-08-14 00:19 - 000000000 __RHD C:\Users\Public\Libraries
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\spool
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\CSC
2017-08-14 00:31 - 2017-08-14 00:10 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOPrivate
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\PrintDialog
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\MiracastView
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-14 00:31 - 2017-08-14 00:05 - 000000000 ____D C:\WINDOWS\HoloShell
2017-08-14 00:30 - 2017-08-14 00:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Skype
2017-08-14 00:28 - 2017-08-15 23:08 - 000000000 ____D C:\WINDOWS\INF
2017-08-14 00:27 - 2017-08-14 00:27 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-08-14 00:26 - 2017-08-14 00:26 - 000000000 ____D C:\Users\eddie\AppData\Local\Comms
2017-08-14 00:25 - 2017-08-14 13:58 - 000908880 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-14 00:25 - 2017-08-14 00:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Publishers
2017-08-14 00:24 - 2017-08-15 18:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Packages
2017-08-14 00:24 - 2017-08-14 04:56 - 000000000 ____D C:\Users\eddie\AppData\Local\ConnectedDevicesPlatform
2017-08-14 00:24 - 2017-08-14 00:24 - 000000020 ___SH C:\Users\eddie\ntuser.ini
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Synaptics
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Adobe
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\VirtualStore
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\TileDataLayer
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\ProgramData\Synaptics
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\Default User
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\All Users
2017-08-14 00:21 - 2017-08-16 01:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-14 00:20 - 2017-08-14 00:20 - 000026274 _____ C:\Users\eddie\OneDrive\Documents\Removed Apps.html
2017-08-14 00:18 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-14 00:15 - 2017-08-15 22:52 - 000000000 ____D C:\Users\eddie
2017-08-14 00:12 - 2017-08-16 00:58 - 082051072 _____ C:\WINDOWS\system32\config\SYSTEM
2017-08-14 00:12 - 2017-08-16 00:58 - 071827456 _____ C:\WINDOWS\system32\config\SOFTWARE
2017-08-14 00:12 - 2017-08-16 00:58 - 009175040 _____ C:\WINDOWS\system32\config\BBI
2017-08-14 00:12 - 2017-08-16 00:58 - 001572864 _____ C:\WINDOWS\system32\config\DEFAULT
2017-08-14 00:12 - 2017-08-16 00:58 - 000057344 _____ C:\WINDOWS\system32\config\SECURITY
2017-08-14 00:12 - 2017-08-14 00:54 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2017-08-14 00:12 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\servicing
2017-08-14 00:12 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\SMI
2017-08-14 00:12 - 2017-08-14 00:23 - 000000000 ___HD C:\$Windows.~BT
2017-08-14 00:12 - 2017-08-14 00:22 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-08-14 00:09 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOShared
2017-08-14 00:04 - 2017-08-14 00:04 - 000021910 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2017-08-14 00:04 - 2017-08-14 00:04 - 000002065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2017-08-14 00:04 - 2017-08-14 00:04 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\ProgramData\SRS Labs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\Program Files\Realtek
2017-08-14 00:04 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____D C:\Program Files\Intel
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2017-08-14 00:02 - 2017-03-18 13:56 - 002233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-08-13 23:58 - 2017-08-16 15:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-13 22:50 - 2017-08-14 00:57 - 000000000 ___HD C:\$SysReset
2017-08-13 08:49 - 2017-08-13 08:49 - 000291128 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper64.dll
2017-08-13 08:49 - 2017-08-13 08:49 - 000248120 _____ (IvoSoft) C:\WINDOWS\SysWOW64\StartMenuHelper32.dll
2017-08-13 01:40 - 2017-08-15 00:06 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\Mozilla
2017-08-12 23:19 - 2017-08-15 02:24 - 000000000 ___HD C:\SWSetup
2017-08-12 22:31 - 2017-08-14 00:19 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Restore Explorer
2017-08-09 02:19 - 2017-08-14 01:45 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\IObit
2017-08-08 22:10 - 2017-07-31 19:36 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-08-08 22:10 - 2017-07-31 19:34 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-08-08 22:10 - 2017-07-31 19:20 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-08-08 22:10 - 2017-07-31 19:18 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-08-08 22:10 - 2017-07-31 19:18 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-08-08 22:10 - 2017-07-31 19:13 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-08-08 22:10 - 2017-07-31 19:07 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-08 22:10 - 2017-07-31 19:06 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-08-08 22:10 - 2017-07-31 19:03 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-08-08 22:10 - 2017-07-31 18:30 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-08 22:09 - 2017-07-31 19:39 - 008319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-08 22:09 - 2017-07-31 19:38 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:38 - 000382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-08 22:09 - 2017-07-31 19:36 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:36 - 000119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-08 22:09 - 2017-07-31 19:35 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:35 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:34 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:33 - 000473240 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:32 - 002444704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-08 22:09 - 2017-07-31 19:32 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:32 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-08 22:09 - 2017-07-31 19:31 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 002645680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000723680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000410160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000315288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000143736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000082336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-08 22:09 - 2017-07-31 19:26 - 000204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 19:17 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 19:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 19:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-08-08 22:09 - 2017-07-31 19:10 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 19:09 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-08-08 22:09 - 2017-07-31 19:08 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:57 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-08 22:09 - 2017-07-31 18:45 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-08 22:09 - 2017-07-31 18:44 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 18:44 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2017-08-08 22:09 - 2017-07-31 18:44 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-08 22:09 - 2017-07-31 18:42 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 017366528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-08 22:09 - 2017-07-31 18:39 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-08 22:09 - 2017-07-31 18:36 - 023681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-08 22:09 - 2017-07-31 18:35 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-08-08 22:09 - 2017-07-31 18:34 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 007336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 012786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 001396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 008209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 002055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-08 22:09 - 2017-07-31 18:30 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-08-08 22:09 - 2017-07-31 18:26 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-08 22:09 - 2017-07-31 18:25 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-08 16:27 - 2017-08-08 16:28 - 000000000 ___HD C:\7e1b197988dcf5ad4a9391ddfe6621
2017-08-03 10:27 - 2017-07-27 22:20 - 000279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-03 10:27 - 2017-07-27 21:36 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll
2017-08-03 10:27 - 2017-07-27 21:26 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:21 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:20 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-08-03 10:27 - 2017-07-27 21:08 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-03 10:26 - 2017-07-27 21:40 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-08-03 10:26 - 2017-07-27 21:36 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2017-08-03 10:26 - 2017-07-27 21:33 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-08-03 10:26 - 2017-07-27 21:27 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-03 10:26 - 2017-07-27 21:20 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IpNatHlpClient.dll
2017-08-03 10:26 - 2017-07-27 21:19 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2017-08-03 10:26 - 2017-07-27 21:18 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2017-08-03 10:26 - 2017-07-27 21:13 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2017-08-03 10:26 - 2017-07-27 21:12 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-08-03 10:26 - 2017-07-27 21:10 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-08-03 10:26 - 2017-07-27 21:08 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-08-03 10:26 - 2017-07-27 21:02 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2017-08-03 10:25 - 2017-07-27 22:23 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-03 10:25 - 2017-07-27 22:15 - 000554400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-03 10:25 - 2017-07-27 22:07 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2017-08-03 10:25 - 2017-07-27 21:47 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-08-03 10:25 - 2017-07-27 21:37 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-08-03 10:25 - 2017-07-27 21:35 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2017-08-03 10:25 - 2017-07-27 21:33 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-08-03 10:25 - 2017-07-27 21:19 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:25 - 2017-07-27 21:16 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-08-03 10:25 - 2017-07-27 21:15 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:25 - 2017-07-27 21:13 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-08-03 10:25 - 2017-07-27 21:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll
2017-08-03 10:25 - 2017-07-27 21:09 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-08-03 10:24 - 2017-07-27 21:40 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-08-03 10:24 - 2017-07-27 21:38 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-08-03 10:24 - 2017-07-27 21:35 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-08-03 10:24 - 2017-07-27 21:33 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-08-03 10:24 - 2017-07-27 21:17 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-08-03 10:24 - 2017-07-27 21:15 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-08-03 10:24 - 2017-07-27 21:14 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-08-03 10:24 - 2017-07-27 21:13 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-08-03 10:24 - 2017-07-27 21:12 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-08-03 10:24 - 2017-07-27 21:11 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-08-03 10:24 - 2017-07-27 21:07 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-08-03 10:24 - 2017-07-27 21:05 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-08-03 10:23 - 2017-07-27 21:36 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-08-03 10:22 - 2017-07-27 21:24 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-03 10:21 - 2017-07-27 21:21 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-03 10:20 - 2017-07-27 22:10 - 002679200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-03 10:20 - 2017-07-27 21:19 - 000942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-03 10:20 - 2017-07-27 21:19 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-03 10:20 - 2017-07-27 21:16 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-03 10:18 - 2017-07-27 22:09 - 000529992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-03 10:17 - 2017-07-27 22:25 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-03 10:17 - 2017-07-27 21:25 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-03 10:17 - 2017-07-27 21:19 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 002604248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-03 10:16 - 2017-07-27 22:09 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-08-03 10:16 - 2017-07-27 21:21 - 008333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-03 10:16 - 2017-07-27 21:13 - 004535296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-03 10:16 - 2017-07-27 21:12 - 002939392 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000455584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000116280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-03 10:14 - 2017-07-27 22:17 - 000660680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-03 10:14 - 2017-07-27 22:09 - 000527976 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-03 10:14 - 2017-07-27 21:48 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2017-08-03 10:14 - 2017-07-27 21:22 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-03 10:14 - 2017-07-27 21:19 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-03 10:14 - 2017-07-27 21:18 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-03 10:14 - 2017-07-27 21:07 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-03 10:13 - 2017-07-27 22:24 - 002327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-03 10:13 - 2017-07-27 22:13 - 001033544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-03 10:13 - 2017-07-27 21:21 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-03 10:13 - 2017-07-27 21:19 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-03 10:13 - 2017-07-27 21:07 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-03 10:12 - 2017-07-27 22:23 - 002969888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-03 10:12 - 2017-07-27 22:16 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-03 10:12 - 2017-07-27 22:15 - 005302968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-03 10:12 - 2017-07-27 22:14 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-03 10:12 - 2017-07-27 22:12 - 001325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-03 10:12 - 2017-07-27 21:26 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-03 10:12 - 2017-07-27 21:24 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:12 - 2017-07-27 21:14 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-03 10:12 - 2017-07-27 21:12 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-03 10:12 - 2017-07-27 21:06 - 001833984 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-03 10:10 - 2017-07-27 22:24 - 000119904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-03 10:10 - 2017-07-27 22:22 - 000923048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000192264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000104432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-03 10:10 - 2017-07-27 22:12 - 021353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-03 10:10 - 2017-07-27 21:29 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-03 10:10 - 2017-07-27 21:24 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:24 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-08-03 10:10 - 2017-07-27 21:21 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-03 10:10 - 2017-07-27 21:19 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:10 - 2017-07-27 21:15 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-03 10:10 - 2017-07-27 21:08 - 000600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-03 10:09 - 2017-07-27 22:12 - 000323936 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-03 10:09 - 2017-07-27 21:25 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-03 10:09 - 2017-07-27 21:24 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-03 10:09 - 2017-07-27 21:23 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-03 10:09 - 2017-07-27 21:22 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-03 10:09 - 2017-07-27 21:21 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-03 10:09 - 2017-07-27 21:17 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-03 10:09 - 2017-07-27 21:16 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-03 10:09 - 2017-07-27 21:14 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-03 10:09 - 2017-07-27 21:13 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-03 10:09 - 2017-07-27 21:12 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-03 10:09 - 2017-07-27 21:06 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-03 10:09 - 2017-07-27 21:05 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-03 10:08 - 2017-07-27 22:30 - 001068720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-03 10:08 - 2017-07-27 22:14 - 000318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-03 10:08 - 2017-07-27 22:10 - 001114528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-03 10:08 - 2017-07-27 21:31 - 003995136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:29 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-03 10:08 - 2017-07-27 21:23 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-03 10:08 - 2017-07-27 21:22 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-03 10:08 - 2017-07-27 21:21 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-03 10:08 - 2017-07-27 21:20 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001298432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-03 10:08 - 2017-07-27 21:18 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-03 10:08 - 2017-07-27 21:15 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-03 10:08 - 2017-07-27 21:10 - 001706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-03 10:07 - 2017-07-27 22:16 - 000961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-03 10:07 - 2017-07-27 22:13 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:07 - 2017-07-27 22:13 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-03 10:07 - 2017-07-27 22:12 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-03 10:07 - 2017-07-27 21:30 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-08-03 10:07 - 2017-07-27 21:26 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-03 10:07 - 2017-07-27 21:22 - 000778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-03 10:07 - 2017-07-27 21:20 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-03 10:07 - 2017-07-27 21:19 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-03 10:07 - 2017-07-27 21:18 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-03 10:07 - 2017-07-27 21:15 - 003204608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 002444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-03 10:07 - 2017-07-27 21:11 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-03 10:07 - 2017-07-27 21:10 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-03 10:07 - 2017-07-27 21:09 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-03 10:07 - 2017-07-27 21:09 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-03 10:07 - 2017-07-27 21:06 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-03 10:06 - 2017-07-27 21:23 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 003867040 _____ C:\WINDOWS\system32\PortChanger.exe
2017-08-02 02:45 - 2012-09-25 00:52 - 002398112 _____ (Hewlett Packard) C:\WINDOWS\system32\hppldcoi.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 000151968 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\Dot4.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000049056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4usb.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000019872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4Scan.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 009891328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2017-08-02 02:29 - 2017-08-02 02:29 - 004332032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtCRU64.exe
2017-08-02 02:29 - 2017-08-02 02:29 - 000420832 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsUer.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 000084480 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll
2017-08-02 02:20 - 2017-08-02 02:20 - 000831685 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2017-08-02 02:16 - 2017-08-02 02:16 - 005799386 _____ C:\WINDOWS\system32\igdclbif.bin
2017-08-02 02:16 - 2017-08-02 02:16 - 000225280 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2017-08-02 02:15 - 2017-08-02 02:16 - 003972096 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 019861504 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 005688832 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 004368896 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000388608 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000318464 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000266232 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2017-08-02 02:14 - 2017-08-02 02:15 - 029101560 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 004934144 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 002393160 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 001858632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000439288 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000416256 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2017-08-02 02:13 - 2017-08-02 02:14 - 015488920 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll
2017-08-02 02:13 - 2017-08-02 02:13 - 013483192 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 013655032 _____ (Intel Corporation) C:\WINDOWS\system32\ig8icd64.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 010329088 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig8icd32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 005262848 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 002142208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 001009664 _____ C:\WINDOWS\system32\igfxSDK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000950784 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000947200 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000756224 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000705024 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000641530 _____ C:\WINDOWS\system32\FilmModeDetection.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000449536 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000403671 _____ C:\WINDOWS\system32\ImageStabilization.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000398848 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000390144 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000384512 _____ C:\WINDOWS\system32\igfxTray.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000375173 _____ C:\WINDOWS\system32\ColorImageEnhancement.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000356352 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000337408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000273408 _____ C:\WINDOWS\system32\igfxCPL.cpl
2017-08-02 02:11 - 2017-08-02 02:11 - 000254976 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000251392 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000219648 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000215040 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000214528 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000111616 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000103416 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000100864 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000095232 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000084992 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000055240 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000052736 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\Gfxv4_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\DPTopologyApp.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\Gfxv2_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\DPTopologyAppv2_0.exe.config
2017-08-02 02:10 - 2017-08-02 02:11 - 000220160 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4624.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 006696824 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 005137296 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 002813952 _____ C:\WINDOWS\system32\iglhxa64.cpa
2017-08-02 02:10 - 2017-08-02 02:10 - 001816712 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001814056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001590784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001178624 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000511260 _____ C:\WINDOWS\system32\cp_resources.bin
2017-08-02 02:10 - 2017-08-02 02:10 - 000431104 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000284160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000242152 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000223240 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000205344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000193016 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000183968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000182944 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000181832 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000173568 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160264 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160256 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000157696 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040343 _____ C:\WINDOWS\system32\iglhxo64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040316 _____ C:\WINDOWS\system32\iglhxc64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039658 _____ C:\WINDOWS\system32\iglhxg64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2017-08-02 02:09 - 2017-08-02 02:10 - 039864472 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2017-08-02 02:08 - 2017-08-02 02:09 - 038903384 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2017-08-02 02:07 - 2017-08-02 02:08 - 033479864 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004270672 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004240208 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 000312296 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll
2017-08-02 02:06 - 2017-08-02 02:07 - 016457272 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2017-08-02 02:05 - 2017-08-02 02:06 - 034823448 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 013070648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000297152 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000005412 _____ C:\WINDOWS\system32\iglhxs64lp.vp
2017-08-02 02:04 - 2017-08-02 02:05 - 007407080 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64lp.sys
2017-08-02 02:00 - 2017-08-02 02:00 - 000877424 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000866640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000737960 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll
2017-08-02 01:59 - 2017-08-02 02:00 - 001016928 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003410832 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003122656 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 001435136 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000984912 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000868176 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000691680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000526280 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000467152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000381408 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000258856 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2017-08-02 01:57 - 2017-08-02 01:59 - 072520704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2017-08-02 01:57 - 2017-08-02 01:57 - 012951320 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2017-08-02 01:56 - 2017-08-02 01:56 - 003516984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003509200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003205120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 002210784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 001347136 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000532376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000387312 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000192976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000166200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000088344 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000023688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2017-08-02 01:55 - 2017-08-02 01:55 - 005874144 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2017-08-02 01:55 - 2017-08-02 01:55 - 003677152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2017-08-02 01:55 - 2017-08-02 01:55 - 000122312 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2017-07-18 16:18 - 2017-07-18 16:19 - 000000000 ____D C:\Users\eddie\OpenVPN
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 01:03 - 2017-04-11 16:55 - 000000000 ___RD C:\Users\eddie\OneDrive
2017-08-16 01:01 - 2017-04-11 20:03 - 000000000 __SHD C:\Users\eddie\IntelGraphicsProfiles
2017-08-14 02:25 - 2017-04-11 20:15 - 000000000 __RDX C:\Users\eddie\OneDrive\Documents\Extra
2017-08-14 01:23 - 2017-04-11 20:16 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 00:25 - 2017-03-18 13:57 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2017-08-14 00:24 - 2017-04-11 16:51 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-14 00:24 - 2017-03-18 13:57 - 000430848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-08-14 00:20 - 2017-04-13 18:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-08-08 23:44 - 2017-06-26 14:45 - 000000779 _____ C:\Users\eddie\Desktop\SSF2.lnk
2017-07-18 13:30 - 2017-06-26 15:39 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-08-13 23:57
==================== End of FRST.txt ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-08-2017
Ran by eddie (administrator) on WIN10XP-1703PRO (16-08-2017 15:21:37)
Running from C:\Users\eddie\Desktop
Loaded Profiles: eddie (Available Profiles: eddie)
Platform: Windows 10 Pro Version 1703 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(SlimWare Utilities Holdings, Inc.) C:\Program Files\SlimWare Utilities\Services\SlimWare.Services.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(COMODO) C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Comodo) C:\Program Files (x86)\COMODO\Dragon\dragon_updater.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(pCloud AG) C:\Program Files (x86)\pCloud Drive\pCloud.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(SlimWare Utilities, Inc.) C:\Program Files\DriverUpdate\DriverUpdate.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Suo10_SmartRAM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe
(SlimWare Utilities Holdings, Inc.) C:\Program Files\SlimWare Utilities\Services\SlimWare.Session.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9231328 2017-08-02] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2017-08-13] (IvoSoft)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1489088 2017-07-11] (COMODO)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [3632848 2017-07-05] (COMODO)
HKLM-x32\...\Run: [vdcss] => C:\Program Files (x86)\COMODO\COMODO Secure Shopping\vdcss.exe [7690936 2017-06-30] (COMODO)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [pCloud] => C:\Program Files (x86)\pCloud Drive\pCloud.exe [3885832 2017-06-16] (pCloud AG)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [OpenVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] ()
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCEnhancer] => E:\CCEnhancer\CCEnhancer-4.4.1.exe [282112 2017-03-06] (SingularLabs)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [GoogleChromeAutoLaunch_E3F5740D1C7070D0CABB3741A4F94C0C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1301848 2017-08-11] (Google Inc.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [DriverUpdate] => C:\Program Files\DriverUpdate\DriverUpdate.exe [40742232 2017-07-31] (SlimWare Utilities, Inc.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [Advanced SystemCare 10] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3924256 2017-05-17] (IObit)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [SmartRAM] => C:\Program Files (x86)\IObit\Advanced SystemCare\Suo10_SmartRAM.exe [560416 2017-07-26] (IObit)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
SSODL: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\system32\cbfsMntNtf6.dll (/n software, Inc.)
SSODL-x32: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll (/n software, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{27427e43-89c9-4d14-b85e-f8cbc9b59dfe}: [DhcpNameServer] 192.168.254.254
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2896426177-3843145535-1853849027-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files (x86)\COMODO\COMODO Secure Shopping\cssbho64.dll [2017-06-30] (COMODO)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-14] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-14] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2017-08-13] (IvoSoft)
BHO-x32: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files (x86)\COMODO\COMODO Secure Shopping\cssbho32.dll [2017-06-30] (COMODO)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
BHO-x32: IObit Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2016-08-03] (IObit)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2017-08-13] (IvoSoft)
BHO-x32: IObit Ads Removal -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Adblock\Adblock.dll [2016-06-23] (IObit)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
FireFox:
========
FF DefaultProfile: oomuvn3h.default
FF ProfilePath: C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default [2017-08-16]
FF user.js: detected! => C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default\user.js [2017-08-15]
FF Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi [2017-07-03]
FF Extension: (Activity Stream) - C:\Program Files\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Click-to-Play staged rollout) - C:\Program Files\Mozilla Firefox\browser\features\clicktoplay-rollout@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Follow-on Search Telemetry) - C:\Program Files\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi [2017-08-10] [not signed]
FF Extension: (Photon onboarding) - C:\Program Files\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Shield Recipe Client) - C:\Program Files\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi [2017-08-10] [not signed]
FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-14] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://getchrome.eu/home/
CHR StartupUrls: Default -> "hxxp://getchrome.eu/home"
CHR DefaultSearchKeyword: Default -> wiki
CHR Profile: C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default [2017-08-16]
CHR Extension: (ProxFlow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2017-08-14]
CHR Extension: (Google Slides) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-14]
CHR Extension: (Security Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abbpkdnljicgejmkndbncgpeamlcjhom [2017-08-14]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2017-08-16]
CHR Extension: (GameShark) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\acmchkofncmmkabbadlofeffhchdmkop [2017-08-14]
CHR Extension: (Movie4K) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\adkbpinkibeobfkgfoolfpnldifjdedp [2017-08-14]
CHR Extension: (CB Channels) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afdeaaklpenijgadfgaljjnknlbaphae [2017-08-14]
CHR Extension: (Microsoft Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afiaggegejgnhhkfjpbbplaigaeijppc [2017-08-14]
CHR Extension: (Microsoft Virtual Agent) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahhncecjhnalimedngnkpfacimkmlafh [2017-08-14]
CHR Extension: (My Win10 PC) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akhdcannjobjjbbfabajjchleaccalng [2017-08-14]
CHR Extension: (HD for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2017-08-14]
CHR Extension: (LR EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akkmbnlaijgepeeldfglekgfajoiklph [2017-08-14]
CHR Extension: (ToonGet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\almbnkdlegibjhcgfbflpemghhdmalmf [2017-08-14]
CHR Extension: (Google Docs) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-14]
CHR Extension: (Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-14]
CHR Extension: (ARChon4Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbooacojifhcpicigmefgdhaiihjhnmd [2017-08-14]
CHR Extension: (Open with Google Drive™ Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdkpinfdldjdngmgfbifbdbgaoampkan [2017-08-14]
CHR Extension: (Super Nintendo Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\beogeghicacplhninfdmhiianhjimccp [2017-08-14]
CHR Extension: (Bitmoji) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfgdeiadkckfbkeigkoncpdieiiefpig [2017-08-14]
CHR Extension: (Google Groups) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfmbadcfdhiklafcdohpfphhhakmiakk [2017-08-14]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2017-08-14]
CHR Extension: (Mingle 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjeepgflngbnlkmfikinngokbcijkean [2017-08-14]
CHR Extension: (Amazon Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjjmjgafamolafiboomflecccipeddim [2017-08-14]
CHR Extension: (Win10 ISO) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjlhajlpdpmfebiokogbjhdgmkehgcbe [2017-08-14]
CHR Extension: (OpenDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmeclafhfpefpfndaigmiojllfgmbcm [2017-08-14]
CHR Extension: (YouTube) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-14]
CHR Extension: (1M AppStore) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bminhbeeccgdnghnabbhiafpndlbkedn [2017-08-14]
CHR Extension: (Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cagpfhohgbclhfgfggnbgfhnjehoknpk [2017-08-14]
CHR Extension: (History 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cahejgbbfgmlmjgdjlibphdjeldhagkp [2017-08-14]
CHR Extension: (Amazon) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\camkdhjofheljkflfmfgbnajgjnhlopf [2017-08-14]
CHR Extension: (Update) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbkkihljhphdkjhiabaomgfninkfihhe [2017-08-14]
CHR Extension: (Toons Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdibbihehmddkghfgiblbflocphmmooc [2017-08-14]
CHR Extension: (Snoopy vs. The Red Baron) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfalonhgbljhcmcajnbdebedcjdoblnl [2017-08-14]
CHR Extension: (Adblock Plus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-08-14]
CHR Extension: (Pushbullet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-08-14]
CHR Extension: (OneNote Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciniambnphakdoflgeamacamhfllbkmo [2017-08-14]
CHR Extension: (Monopoly Empire game | Play Kids Games Online | Hasbro) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjdhdhilfeoikokoiakkgnckknaekled [2017-08-14]
CHR Extension: (YT2MP3) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjhmdjffbkdmddmdmmbabiaclojaomeg [2017-08-14]
CHR Extension: (TechSupportGuy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckffimcpiheacclckfmmdcbhbmfmfikd [2017-08-14]
CHR Extension: (TWC Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckifgoknanfhclklbfjlpblncjpdfmfj [2017-08-14]
CHR Extension: (Microsoft Flow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clldiedkmkolghagmnpmnoljbhijiboi [2017-08-14]
CHR Extension: (HP ENVY) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clpdjjcfniihldhfchnjbiladapnbahi [2017-08-14]
CHR Extension: (MAFYT Settings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmelobemnghobnlpdfmmbejdoaleajcf [2017-08-14]
CHR Extension: (SSF2 Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnlencpcagccinnhoijdgmobkmfhalcc [2017-08-14]
CHR Extension: (Harakirimail extension) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coaagmonnnldglbilekplfnphpdencce [2017-08-14]
CHR Extension: (ComputerHelpForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbhjgghkoimcbpnbgjikmpgffkgajfk [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\damfhmjfmeiigloagjpelmocjoeobdno [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dccnabnbnagheglhfmgdcjlcjbeibaje [2017-08-14]
CHR Extension: (Chase Online ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcofdmelmmjneoonenbhpagpbpiojkhf [2017-08-14]
CHR Extension: (Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\deceagebecbceejblnlcjooeohmmeldh [2017-08-14]
CHR Extension: (3DS Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfkhponeglmiiobiihilahinlckifjjh [2017-08-14]
CHR Extension: (Fus.Fall Legacy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgmdnngojpofdigdidplfaebnjohmfng [2017-08-14]
CHR Extension: (Tampermonkey) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-08-14]
CHR Extension: (Janifer Boston) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhpkkleekhaceehoigfcnaaidjoleflh [2017-08-14]
CHR Extension: (Glitch Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djahbfbhacphllgemcekmdnlilahhmge [2017-08-14]
CHR Extension: (Nintendo Chat) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djeppnpeahmgfaohhidhjpipjkahimfe [2017-08-14]
CHR Extension: (Google+) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2017-08-14]
CHR Extension: (NORAD Tracks Santa) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmkoneajelflpbfjpchjaiglipefmnki [2017-08-14]
CHR Extension: (Frontier DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnabfpdnbkmdmcoillihefhnjjknnona [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dolkddbfbhledadcdepacaljbglglcoe [2017-08-14]
CHR Extension: (Sumo Paint) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpgjihldbpodlmnjolekemlfbcajnmod [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ebgecmolaheocnobalndebpehpimdghi [2017-08-14]
CHR Extension: (Inbox) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\edmijkelpnflahpdblkkobimcplcgmgj [2017-08-14]
CHR Extension: (Amazon Shop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eecahhmlcjafclfkjodjjgllpmcmkgko [2017-08-14]
CHR Extension: (Novelty, OH Weather Forecast and Cond...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eenemnbihadgbcjemdnobckofmiihfnk [2017-08-14]
CHR Extension: (Shortcut to Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\efcdnfkhiiafogbhcainplbbgemgaaen [2017-08-14]
CHR Extension: (YouTubeDownloader) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eieafdgibiahkjdgdccmldmjidglnbjj [2017-08-14]
CHR Extension: (Google Fourms) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejiggjokppepehmfdngjefbhjeheknmp [2017-08-14]
CHR Extension: (Cast Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejliejcnhkkaaipdgkeiihbefhjeoemp [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejppoecfdibjchmpdcphbanegdjebcgo [2017-08-14]
CHR Extension: (HelpSupport Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekimmgolelbekdhafemjekjhkempbkfd [2017-08-14]
CHR Extension: (Comodo AdBlocker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhcnbjoomhmifmfeggoalmplblcmcin [2017-08-14]
CHR Extension: (Chrome Goodies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\emmdmeocdlghmhbfjaldhjahnfbkbpck [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\enffghkdjcgkndjodbaelocgmcbmbhpp [2017-08-14]
CHR Extension: (Filter by WOT) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eomhfalemadkajmgmppkoenihlljdjoj [2017-08-14]
CHR Extension: (Update Windows 10) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\epejeipipakmkmdfnkpghcjfmeigpggo [2017-08-14]
CHR Extension: (G SSH2 SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabhojopefodnkcighibfcnamgmplloh [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fajdleioencnfbnmiienoibkoimkooli [2017-08-14]
CHR Extension: (Old EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fanigphfdfepmnelohpfhcpecoekibml [2017-08-14]
CHR Extension: (DiskImager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdfeicageglnlelmohmkojdjccgkdmcb [2017-08-14]
CHR Extension: (FREE App Creator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdhglomjccccgggpeabmiadbpmofeedc [2017-08-14]
CHR Extension: (Motorola) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fekllafapcbanabhhooobibaanmndalm [2017-08-14]
CHR Extension: (Google Sheets) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-14]
CHR Extension: (Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdhgdfhcclnmednjibbajgcpcpppknl [2017-08-14]
CHR Extension: (FB Game Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijlioglnahpdajepoinkodlegkolkam [2017-08-14]
CHR Extension: (Villionaire) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fimebapbdliodpciaalpoijonhdfhhkd [2017-08-14]
CHR Extension: (Word Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2017-08-14]
CHR Extension: (G SSH SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fipamjmedinmfclljanbjhhbdkfinpkc [2017-08-14]
CHR Extension: (Nintendo ThemeShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkhaiaahhhomnfnnjhmnkkhloogihnfa [2017-08-14]
CHR Extension: (EMails) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fknmbhaaehfdjpmooilcabjgooldjdoo [2017-08-14]
CHR Extension: (Google Voice ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fldbfpjncfkebegiobhnjanbokdlbnij [2017-08-14]
CHR Extension: (Rufus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljfobnflghnobgffmkpjddbdehgmfol [2017-08-14]
CHR Extension: (Who's on first?) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljmpldncihcmabdfjkgonhijjkpbgkl [2017-08-14]
CHR Extension: (Norton DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\focoenonfjfpphaadindagmhlijgklak [2017-08-14]
CHR Extension: (Nintendo CS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpdddhjdalfonhmejlkcfhjcckhealoc [2017-08-14]
CHR Extension: (Chrome Remote Desktop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-08-14]
CHR Extension: (SPdate) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmnahlpnikhhgldfmeajheocdileadd [2017-08-14]
CHR Extension: (Super Mario) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdljahompmnjdcmnlcfeobicdpepefbf [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegmdadojdijhnemaeolhalohelcagod [2017-08-14]
CHR Extension: (Network Test) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\geklcdelofkoldghehnhggalmoahklbi [2017-08-14]
CHR Extension: (Homebrew Browser) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjnhndecndnepbjpmaloifckdmgcac [2017-08-14]
CHR Extension: (About GPG Services) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaoeklfaibbbipibbalclmnllojibkh [2017-08-14]
CHR Extension: (Google Docs Offline) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-14]
CHR Extension: (Click&Clean) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2017-08-14]
CHR Extension: (Anyfile Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghlichmdnegmcpafgmmlpkegmcndlndi [2017-08-14]
CHR Extension: (Outlook People) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\giafdibgibbipnlecfckidkecmpkedho [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjaejhlejagppekogippmigjbkdjmcdk [2017-08-14]
CHR Extension: (Open PayPal) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glghgmejmmepalcnengjekjfmfbailbl [2017-08-14]
CHR Extension: (Google Wallet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhhiiglleiipdnodkaabbbbjhepnbcb [2017-08-14]
CHR Extension: (Save to Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2017-08-14]
CHR Extension: (Bookmark Manager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2017-08-14]
CHR Extension: (UnRAR and RAR Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\goeclnlkhfoejbhdebemhjljlmcbhfkp [2017-08-14]
CHR Extension: (Drive Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpgjomejfimnbmobcocilppikhncegaj [2017-08-14]
CHR Extension: (Win10 Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpjminmgekffdgiancflhaojkgjcdgmc [2017-08-14]
CHR Extension: (Microsoft Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplepoifohkaepkncehnpljceeljlabi [2017-08-14]
CHR Extension: (WC Forums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbiinloenjigabpbdlogbimfgbopcfce [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfbcjnjfeolgeoddhcdjpogocmpkmncp [2017-08-14]
CHR Extension: (GSSH.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmckcabobcmbdlimkenccopfnpokmie [2017-08-14]
CHR Extension: (GV Phone) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmpoeaghekodfplkofpeabpnipphcjh [2017-08-14]
CHR Extension: (Outlook Tasks) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkaimcgnicopmhblimdmfjahhifkfcoi [2017-08-14]
CHR Extension: (Dead Skin) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnjjcekgbjlpiegjcdmmpojndajlndok [2017-08-14]
CHR Extension: (RomsEShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hohhmomfljojjeaaehdcocalfpejjccc [2017-08-14]
CHR Extension: (USPS Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\idammebdkcmcjhminehllfamifenkhbn [2017-08-14]
CHR Extension: (Android Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbnciaeojfhgeihkflgcgajopfjeohg [2017-08-14]
CHR Extension: (Get Human) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifcelejocgjieghblljgkemmnlejjlep [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igabecodgkgfkdhglpojbnbobbnaajai [2017-08-14]
CHR Extension: (SEGA Bandonware) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igelfoafbodelegelfonpkanedmogdpm [2017-08-14]
CHR Extension: (OMG! Chrome!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igpknfbadalohcopbkaepbgblomnbdma [2017-08-14]
CHR Extension: (Frontier Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihjgglhacdljfhmlinhcagchbkcgdhio [2017-08-14]
CHR Extension: (Zip, UnZip App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiaianhgacnhnnhejddkghikgnhgpeaa [2017-08-14]
CHR Extension: (Bible Questions Answered) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiipijolbcononkgjpepkplcchmajanm [2017-08-14]
CHR Extension: (Apps Launcher) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijmgkhchjindcjamnckoiahagecjnkdc [2017-08-14]
CHR Extension: (Office Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikhblhjgapcilfennndodceemdoomngn [2017-08-14]
CHR Extension: (Excel Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2017-08-14]
CHR Extension: (PC Help Forum) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\illdlgkhakmollnophmajedfblhpijak [2017-08-14]
CHR Extension: (COSwallpapers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\inpceamnbdnjkljfebkpdgfnnfckopap [2017-08-14]
CHR Extension: (HTML5 Flash Warning Fix for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipdkokhdeppifjgcmhbfgmjmdllfpkln [2017-08-14]
CHR Extension: (File System for OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdfcehgafdbfpniaimfbfomafoadgo [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbjamgmfdlbplimhkomcjjlemjaddogn [2017-08-14]
CHR Extension: (PCTechForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jecdgjmkjbcagbkoifleegbplpnaobfa [2017-08-14]
CHR Extension: (Microsoft Update Catalog) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhgndoofkbbhhfcoldgjcakejekefcd [2017-08-14]
CHR Extension: (SSF2 Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgplhfbmmkajpgnpldoaafagambccjje [2017-08-14]
CHR Extension: (BibleGateway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjmdfkmnphhfgilhfofaiffmhjlnopan [2017-08-14]
CHR Extension: (SM Trial Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljcdndcgbkbjonffogpnljganhabgmj [2017-08-14]
CHR Extension: (Save to Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfikkaogpplgnfjmbjdpalkhclendgd [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jomemcnjdjkjipodmcpfjhioloioplfh [2017-08-14]
CHR Extension: (CDFF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kahonebhcmapeomaemhjakphnpffhhhf [2017-08-14]
CHR Extension: (My Sway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcnmjbpdljgcffbninlkelpbfmbbbohp [2017-08-14]
CHR Extension: (North Pole Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdggiihhdpfglclmfghofjbiagonaplo [2017-08-14]
CHR Extension: (Chrome Web Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfknblmmckdmlklbncfodpomfoejlbgm [2017-08-14]
CHR Extension: (Range Extender Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgaimanaoiiecgbljbpjhkdicaogkinf [2017-08-14]
CHR Extension: (4Shared) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khdleokphdcnmagagajnchlcmacfphan [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khomnbdfmhfppiemgglncdlbbnppffdo [2017-08-14]
CHR Extension: (Pure Flix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiiijkmmlfiofadnffcomgcmdlppddhd [2017-08-14]
CHR Extension: (Novelty, OH Weather Conditions & Fore...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkphahjiaiaahfhcbedhbgfpodbojbje [2017-08-14]
CHR Extension: (MyAptoideBU) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpdcjojlnaceggdkglndamdmaonfnpi [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2017-08-14]
CHR Extension: (GSSH2.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\laekopehhnfklajodmbbhdfhmkfbnblc [2017-08-14]
CHR Extension: (Wake Up!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbbcfplbfbmimpnlammmeaheakhcogke [2017-08-14]
CHR Extension: (AnimeDub Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbdcckpbjegpnhhdejaipegkabkofhla [2017-08-14]
CHR Extension: (Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lddagfjihimnacaabfnfagjcokfmnekc [2017-08-14]
CHR Extension: (Aptoide) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhhjndfejaoaiaaokjmhoiedppdmknki [2017-08-14]
CHR Extension: (AnimeDub) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhnnmimodonfbnmpgmcjahlblaenkgle [2017-08-14]
CHR Extension: (Files2Zip) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhoadfgjeimckjlphkdebfmhbpeniljo [2017-08-14]
CHR Extension: (USPS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\liocengmpmiiejdoebmlifecbmcpfigg [2017-08-14]
CHR Extension: (Wikipedia Search) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lipakennkogpodadpikgipnogamhklmk [2017-08-14]
CHR Extension: (MSN Games - Free Online Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkbgddpallgbhlldcnnjomnodmohpklf [2017-08-14]
CHR Extension: (IHeart Christmas) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lndoiaoagbajoadpgmfgckfckmchepmj [2017-08-14]
CHR Extension: (Google Maps) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2017-08-14]
CHR Extension: (SSB) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lockfglcfjlaagpghflagedkkgojipke [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\locmdgkcjcjacipaokcoochhjhpklbih [2017-08-14]
CHR Extension: (B1 File Extracter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbgobeedadfbponkgffobhpmokjmlhol [2017-08-14]
CHR Extension: (Documents Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbhgihpdipbgifogehncdehebkpehoap [2017-08-14]
CHR Extension: (GoogleDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbogpnkehmjcidggfooapenefhckeehd [2017-08-14]
CHR Extension: (PowerPoint Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2017-08-14]
CHR Extension: (Messenger (Unofficial)) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdapmeleikeppmfgadilffngabfpibok [2017-08-14]
CHR Extension: (GoogleFuchsia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mejnaonfdocegokbjldkeafifpnfnpan [2017-08-14]
CHR Extension: (CN Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mekgfnmophledbpkmikhnfkimoahjohn [2017-08-14]
CHR Extension: (CraigTechShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfbfebnljjciechbmlehdcmnmdhacgmi [2017-08-14]
CHR Extension: (COMODO DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfnnnpncpeeecbbdepenkkgpjoenkbbo [2017-08-14]
CHR Extension: (T-Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhpgceapcpooallmggianccbakegnhnb [2017-08-14]
CHR Extension: (V.FreeMovies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkopchcfcbchhnbpldmdjfbdhgkcpgkn [2017-08-14]
CHR Extension: (CB Central) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlieflpkidahjkojakjlpnlnchobihbl [2017-08-14]
CHR Extension: (ZIP Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmfcakoljjhncfphlflcedhgogfhpbcd [2017-08-14]
CHR Extension: (GC Options) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmmanlicckcagdkabbemhccfpmgojncl [2017-08-14]
CHR Extension: (My Google Account) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnepgpaicadoimgdlajhkgokfenaadkh [2017-08-14]
CHR Extension: (PogoTM) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmklochmlghbgebbmkldomoihjbgfie [2017-08-14]
CHR Extension: (Nintendo Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mogfngbfndeeecglaejajbioegpimija [2017-08-14]
CHR Extension: (What's on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbeopbccnmkgdlbpicobflenbjceoaka [2017-08-14]
CHR Extension: (Chrome OS Features) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbjdhanphhipjfkmicljakgnbaicfojk [2017-08-14]
CHR Extension: (Ws on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncjendjahmgpgjdeenknmdoecofmfdod [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2017-08-14]
CHR Extension: (Reload It) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nconjighkgcoppohfilfinlimdfmjafg [2017-08-14]
CHR Extension: (Games4Summer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndphblldagopagiodebolhdjohgindbm [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2017-08-14]
CHR Extension: (UNetbootin - Homepage and Downloads) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhanbcbjhjcgpccibphcicainkkinool [2017-08-14]
CHR Extension: (SupportSpace) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nigmaeimafjgjfodjfhnancnahfeindg [2017-08-14]
CHR Extension: (FedEx Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikgcnimkfeopobooaahjpbdkdfhchao [2017-08-14]
CHR Extension: (SEGA Online Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nilhogoffgcdfgmejcjpidfaiefpccpl [2017-08-14]
CHR Extension: (WeatherBug) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\njkkjobcechefaoknodniidfjapgfoco [2017-08-14]
CHR Extension: (Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nklbmhejmcjofglijalidajdlihahnpd [2017-08-14]
CHR Extension: (Archive Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknadlalodfadgegkigkmbhofcmkhfnc [2017-08-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-14]
CHR Extension: (Win10 Pro keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnelnnlfcdhjfbfglandknndlonidojg [2017-08-14]
CHR Extension: (Toonova) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobhijfkaffjbkocimaaembibggenkdc [2017-08-14]
CHR Extension: (Frontier) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nofcknkefjengmgmlnmdmgbmlakhhnok [2017-08-14]
CHR Extension: (SM63.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\noijjjifnenaafboiipobhiflmiaimof [2017-08-14]
CHR Extension: (Chrome OS EOL) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\npmnpehbihaieehmoaifdkdlcgndmpjn [2017-08-14]
CHR Extension: (System) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocjnemjmlhjkeilmaidemofakmpclcbi [2017-08-14]
CHR Extension: (COMODO GeekBuddy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oebmcdnandbcnfmpjecmmhcoogfneelj [2017-08-14]
CHR Extension: (Google Santa Tracker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehagbcimlpafjbdijnjmaboblcfdnoh [2017-08-14]
CHR Extension: (PDF Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oemmndcbldboiebfnladdacbdfmadadm [2017-08-14]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2017-08-15]
CHR Extension: (App Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogffnakkboiaoifjbhjbahamkdojaemm [2017-08-14]
CHR Extension: (EPForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oimkklcnelpdlkkbjjablakandmmddio [2017-08-14]
CHR Extension: (Fullscreen Anything) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\olcfgpmjldkkjdclidhcbonieibfhhdh [2017-08-14]
CHR Extension: (SM 63) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oldjcgpcnneleakkepogfghcehnjcngf [2017-08-14]
CHR Extension: (YouTube™ Flash-HTML5) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\omimccinlhlkpjaeaocglgmkbelejlhj [2017-08-14]
CHR Extension: (Christian Date) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ompnolbokepechjidcgpaddaaeoocajn [2017-08-14]
CHR Extension: (Consumer AV Providers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ongfjpmgcneinonelpaljjdaigppnneo [2017-08-14]
CHR Extension: (Putlocker ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookjcnljofpnadeabapgadihfhngblfe [2017-08-14]
CHR Extension: (Nintendo RomShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pahokmgpomeaakdfnahejklhcifhaige [2017-08-14]
CHR Extension: (Microsoft Office Home) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\palennhedgekbnbmokheidadmghcncgl [2017-08-14]
CHR Extension: (I Heart Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcbnpgdibikphcelmkjldlfjjepjipl [2017-08-14]
CHR Extension: (Click&Clean App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-08-14]
CHR Extension: (Shortcuts for Google™ Products) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdlecffodcfabchelafoljcdphfpkpcl [2017-08-14]
CHR Extension: (Date Countdown) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfbpikfaigmikdjkghbkbapjhfoglipj [2017-08-14]
CHR Extension: (Data Saver) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmgfdlgomnbgkofeojodiodmgpgmkac [2017-08-14]
CHR Extension: (Outlook.com) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\phfegmcgballapgnbppeeidckejebknn [2017-08-14]
CHR Extension: (Super Smash Bros For NDS !!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pifamkpimegbfnakceigajiljjodcfla [2017-08-14]
CHR Extension: (Gmail) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-14]
CHR Extension: (Chrome Media Router) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-14]
CHR Extension: (OMG! Ubuntu!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmoodaljflkhbojjaiibgnlindbhebme [2017-08-14]
CHR Extension: (EBay) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppaellakmlibbcfkgkmbkkllnhcmghca [2017-08-14]
CHR Extension: (Google Contacts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppbiamkfhlcpgijakdgbbffikmkkofnl [2017-08-14]
CHR Extension: (Apps On Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppmdjabijijblhfhnbgcpnoamkibcclm [2017-08-14]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdvancedSystemCareService10; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [462624 2017-03-21] (IObit)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [10501104 2017-07-11] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2017-07-11] (COMODO)
R2 csssrv; C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe [3210936 2017-06-30] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2273432 2017-08-08] (Comodo)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [356352 2017-08-02] (Intel Corporation)
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-07-05] (COMODO)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324576 2017-08-02] (Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-04-11] (Microsoft Corporation)
R2 SlimWareServices; C:\Program Files\SlimWare Utilities\Services\SlimWare.Services.exe [79704 2017-07-31] (SlimWare Utilities Holdings, Inc.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269912 2017-01-17] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-19] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-09-09] (/n software, Inc.)
R1 cmdcss; C:\WINDOWS\system32\drivers\cmdcss.sys [126056 2017-03-31] (COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [40936 2017-06-02] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [831992 2017-06-02] (COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [50776 2017-06-02] (COMODO)
S3 dot4; C:\WINDOWS\System32\drivers\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [72584 2017-01-12] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [67976 2017-01-12] (Intel Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77376 2017-06-27] ()
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7407080 2017-08-02] (Intel Corporation)
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [132880 2017-06-07] (COMODO)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [62208 2017-03-29] (COMODO)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [188352 2017-08-16] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [101784 2017-08-16] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [45472 2017-08-16] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-16] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93600 2017-08-16] (Malwarebytes)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [947712 2017-02-15] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [420832 2017-08-02] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [6804480 2017-05-03] (Realtek Semiconductor Corporation )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [60504 2017-01-17] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [64088 2017-01-17] (Synaptics Incorporated)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2015-10-15] (Intel Corporation)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [18624 2016-09-09] (/n software, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30392 2017-04-25] (HP)
S3 WiseUnlock; C:\WINDOWS\WiseUnlock64.sys [33864 2017-08-15] (WiseCleaner.com)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 15:21 - 2017-08-16 15:24 - 000054927 _____ C:\Users\eddie\Desktop\FRST.txt
2017-08-16 15:21 - 2017-08-16 15:21 - 000000000 ____D C:\FRST
2017-08-16 15:18 - 2017-08-16 15:19 - 002395648 _____ (Farbar) C:\Users\eddie\Desktop\FRST64.exe
2017-08-16 12:40 - 2017-08-16 12:40 - 009791816 _____ (Piriform Ltd) C:\Users\eddie\Downloads\ccsetup533.exe
2017-08-16 01:03 - 2017-08-16 01:03 - 000000000 ___HD C:\OneDriveTemp
2017-08-16 01:01 - 2017-08-16 01:01 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-08-16 00:53 - 2017-08-16 00:53 - 000003656 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default\AppData\Roaming\IObit
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default User\AppData\Roaming\IObit
2017-08-16 00:29 - 2017-08-16 00:29 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-08-16 00:28 - 2017-08-16 13:45 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-08-16 00:28 - 2017-08-16 01:01 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-08-16 00:27 - 2017-08-16 01:01 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-08-16 00:27 - 2017-08-16 00:27 - 000001927 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-16 00:27 - 2017-06-27 12:06 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-08-16 00:25 - 2017-08-16 01:01 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-16 00:24 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-15 23:54 - 2017-06-19 22:05 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2017-08-15 23:54 - 2017-03-18 13:58 - 000587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2017-08-15 23:54 - 2017-03-18 13:58 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxinit.dll
2017-08-15 18:07 - 2017-08-15 18:13 - 000000000 ____D C:\Users\eddie\AppData\Local\PackageStaging
2017-08-15 12:57 - 2017-08-15 12:59 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000033864 _____ (WiseCleaner.com) C:\WINDOWS\WiseUnlock64.sys
2017-08-15 12:57 - 2017-08-15 12:57 - 000001287 _____ C:\Users\Public\Desktop\Wise Force Deleter.lnk
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\Program Files (x86)\Wise
2017-08-15 03:39 - 2017-08-15 03:39 - 000000000 ____D C:\WINDOWS\System32\Tasks\Games
2017-08-15 03:29 - 2017-08-15 03:29 - 000000000 ____D C:\WINDOWS\System32\Tasks\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000001357 _____ C:\Users\eddie\Desktop\Auslogics Disk Defrag.lnk
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\Program Files (x86)\Auslogics
2017-08-15 03:21 - 2017-08-15 03:21 - 000000000 ___HD C:\VTRoot
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ____D C:\Program Files (x86)\Realtek
2017-08-15 02:25 - 2017-02-15 21:50 - 000947712 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2017-08-15 02:25 - 2017-02-15 21:50 - 000082536 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2017-08-15 02:23 - 2017-08-15 02:23 - 000000000 ____D C:\ProgramData\SlimWare Utilities Inc
2017-08-15 01:46 - 2017-08-15 01:46 - 005373952 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2017-08-15 01:17 - 2017-08-15 01:30 - 000000000 ____D C:\Users\eddie\AppData\Local\CrashDumps
2017-08-15 00:48 - 2017-08-15 00:48 - 000001796 _____ C:\Users\eddie\Desktop\Virtual Kiosk.lnk
2017-08-15 00:31 - 2017-08-15 00:31 - 000002374 _____ C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-08-14 22:18 - 2017-08-15 01:37 - 000003474 _____ C:\WINDOWS\System32\Tasks\ASC10_AutoCare
2017-08-14 22:09 - 2017-08-14 22:09 - 000000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2017-08-14 22:01 - 2017-08-14 22:01 - 000002908 _____ C:\WINDOWS\System32\Tasks\ASC10_SkipUac_eddie
2017-08-14 22:01 - 2017-08-14 22:01 - 000000000 ____D C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
2017-08-14 22:00 - 2017-08-14 22:01 - 000002249 _____ C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
2017-08-14 22:00 - 2017-08-14 22:00 - 000003114 _____ C:\WINDOWS\System32\Tasks\ASC10_PerformanceMonitor
2017-08-14 22:00 - 2017-08-14 22:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2017-08-14 21:54 - 2017-08-16 15:20 - 000062144 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2017-08-14 21:40 - 2017-08-14 21:40 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2017-08-14 21:40 - 2017-08-14 21:40 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2017-08-14 21:38 - 2017-08-14 21:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Comodo
2017-08-14 21:27 - 2017-08-16 15:21 - 001336640 _____ C:\WINDOWS\system32\Drivers\sfi.dat
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\Program Files\COMODO
2017-08-14 21:26 - 2017-06-30 07:08 - 000332472 _____ (COMODO) C:\WINDOWS\system32\cmdkbdcss64.dll
2017-08-14 21:26 - 2017-06-30 07:08 - 000263352 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdkbdcss32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000432104 _____ (COMODO) C:\WINDOWS\system32\cssguard64.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000338560 _____ (COMODO) C:\WINDOWS\SysWOW64\cssguard32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000048728 _____ (COMODO) C:\WINDOWS\system32\csscsr64.dll
2017-08-14 21:26 - 2017-03-31 23:15 - 000126056 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdcss.sys
2017-08-14 21:25 - 2017-08-14 21:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Comodo
2017-08-14 21:21 - 2017-08-14 21:35 - 000000480 _____ C:\WINDOWS\Tasks\DriverUpdate Scan.job
2017-08-14 21:21 - 2017-08-14 21:21 - 000003258 _____ C:\WINDOWS\System32\Tasks\DriverUpdate Scan
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Shared Space
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Comodo Downloader
2017-08-14 21:20 - 2017-08-15 16:19 - 000000000 ____D C:\Program Files\DriverUpdate
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\Users\eddie\AppData\Local\SlimWare Utilities Inc
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\Program Files\SlimWare Utilities
2017-08-14 21:19 - 2017-08-15 01:44 - 000000000 ____D C:\ProgramData\COMODO
2017-08-14 21:19 - 2017-08-15 00:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-08-14 21:19 - 2017-08-14 21:47 - 000000000 ____D C:\Program Files (x86)\COMODO
2017-08-14 21:19 - 2017-07-05 00:30 - 000256040 _____ (COMODO) C:\WINDOWS\system32\iseguard64.dll
2017-08-14 21:19 - 2017-07-05 00:29 - 000205536 _____ (COMODO) C:\WINDOWS\SysWOW64\iseguard32.dll
2017-08-14 21:19 - 2017-03-29 14:49 - 000062208 _____ (COMODO) C:\WINDOWS\system32\Drivers\isedrv.sys
2017-08-14 17:10 - 2017-08-14 17:11 - 000002676 _____ C:\Users\eddie\Desktop\PC Help Forum.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001006 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-14 16:12 - 2017-08-14 16:12 - 000000859 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Explorer.lnk
2017-08-14 14:46 - 2017-08-14 15:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
2017-08-14 14:41 - 2017-08-14 14:41 - 000002357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-14 14:41 - 2017-08-14 14:41 - 000002345 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-14 14:40 - 2017-08-14 14:40 - 000003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-08-14 14:40 - 2017-08-14 14:40 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-08-14 14:28 - 2017-08-14 14:28 - 000000000 ____D C:\WINDOWS\Panther
2017-08-14 14:15 - 2017-08-14 14:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-14 14:15 - 2017-08-14 14:15 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Sun
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-08-14 14:15 - 2017-08-14 14:14 - 000110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2017-08-14 14:14 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\ProgramData\Oracle
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\Program Files\Java
2017-08-14 04:00 - 2017-08-14 04:00 - 000041800 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2017-08-14 03:49 - 2017-08-14 03:49 - 000000000 ____D C:\Users\eddie\AppData\Local\PeerDistRepub
2017-08-14 02:55 - 2017-08-14 02:55 - 069640192 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000491520 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000065536 _____ C:\WINDOWS\system32\config\SAM.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2017-08-14 02:53 - 2017-08-16 02:56 - 000000000 ____D C:\Users\eddie\AppData\Local\ClassicShell
2017-08-14 02:53 - 2017-08-16 02:33 - 000000000 ____D C:\ProgramData\ClassicShell
2017-08-14 02:53 - 2017-08-14 02:53 - 000000000 ____D C:\Users\eddie\AppData\Roaming\ClassicShell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\Program Files\Classic Shell
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\BDLogging
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
2017-08-14 02:26 - 2017-08-14 02:26 - 000565416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-08-14 02:18 - 2017-08-14 04:54 - 000002956 _____ C:\WINDOWS\System32\Tasks\CCleanerClean
2017-08-14 02:18 - 2017-08-14 04:54 - 000000258 _____ C:\WINDOWS\Tasks\CCleanerClean.job
2017-08-14 02:05 - 2017-08-16 12:42 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-14 02:05 - 2017-08-16 12:39 - 000000000 ____D C:\Program Files\CCleaner
2017-08-14 02:05 - 2017-08-14 02:05 - 000002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-08-14 02:05 - 2017-08-14 02:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-14 01:52 - 2017-08-14 01:52 - 000001129 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Users\eddie\AppData\Local\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Program Files\VS Revo Group
2017-08-14 01:52 - 2016-12-21 14:52 - 000040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2017-08-14 01:46 - 2017-08-14 01:46 - 000000000 ____D C:\Users\eddie\AppData\Local\MicrosoftEdge
2017-08-14 01:45 - 2017-08-14 21:59 - 000000000 ____D C:\ProgramData\IObit
2017-08-14 01:45 - 2017-08-14 04:53 - 000000000 ____D C:\Program Files (x86)\IObit
2017-08-14 01:45 - 2017-08-14 02:45 - 000000000 ____D C:\ProgramData\ProductData
2017-08-14 01:45 - 2017-08-14 02:33 - 000000000 ____D C:\Users\eddie\AppData\Roaming\IObit
2017-08-14 01:45 - 2017-08-14 01:45 - 000000000 ____D C:\ProgramData\{EAAB5A83-3809-4B0E-83A6-E4B0DBF2157E}
2017-08-14 01:37 - 2017-08-14 01:37 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\3C64355F.sys
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\TAP-Windows
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2017-08-14 01:23 - 2017-08-14 01:23 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\Users\eddie\AppData\Roaming\WinRAR
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 01:22 - 2017-08-14 01:23 - 000000000 ____D C:\Program Files\WinRAR
2017-08-14 01:16 - 2017-08-14 01:16 - 000000634 _____ C:\Users\eddie\OneDrive\Documents\MagicActions-Options.json
2017-08-14 01:02 - 2017-08-14 04:57 - 000000000 ____D C:\Users\eddie\AppData\Local\pCloud
2017-08-14 00:56 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Google
2017-08-14 00:56 - 2017-08-14 00:56 - 000000000 ____D C:\WINDOWS\InfusedApps
2017-08-14 00:54 - 2017-08-14 00:54 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-08-14 00:54 - 2017-08-13 23:58 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-08-14 00:52 - 2017-08-14 00:52 - 000000000 ____D C:\Program Files\Synaptics
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\Program Files (x86)\HP
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\WINDOWS\Setup
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\Users\eddie\AppData\Local\DBG
2017-08-14 00:49 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Google
2017-08-14 00:49 - 2017-08-14 14:40 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-14 00:48 - 2017-08-14 00:49 - 000000000 ____D C:\Users\eddie\AppData\Local\Deployment
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Macromedia
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Local\Apps\2.0
2017-08-14 00:46 - 2017-08-16 12:16 - 000004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{FA13B12A-B6F1-4CA4-9E37-D55E2EE30D0B}
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\OCR
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\MSBuild
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pCloud
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\Program Files (x86)\pCloud Drive
2017-08-14 00:43 - 2016-09-09 16:33 - 000018848 _____ (/n software, Inc.) C:\WINDOWS\system32\elevtmsg.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000235424 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000196000 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000134560 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:31 - 000170400 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:23 - 000460992 _____ (/n software, Inc.) C:\WINDOWS\system32\Drivers\cbfs6.sys
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\DigitalLocker
2017-08-14 00:37 - 2017-07-31 08:15 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-08-14 00:37 - 2017-07-31 08:15 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-14 00:32 - 2017-08-14 00:55 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-08-14 00:32 - 2017-08-14 00:27 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2017-08-14 00:32 - 2017-08-14 00:27 - 000015940 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2017-08-14 00:32 - 2017-08-14 00:27 - 000004096 _____ C:\WINDOWS\system32\config\VSMIDK
2017-08-14 00:32 - 2017-08-14 00:27 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2017-08-14 00:32 - 2017-08-14 00:27 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2017-08-14 00:32 - 2017-08-14 00:27 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2017-08-14 00:32 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-14 00:31 - 2017-08-16 00:55 - 000000000 ___RD C:\Program Files (x86)
2017-08-14 00:31 - 2017-08-15 01:44 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2017-08-14 00:31 - 2017-08-14 14:36 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-08-14 00:31 - 2017-08-14 03:25 - 000000000 ____D C:\WINDOWS\appcompat
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files (x86)\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\migwiz
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\Provisioning
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\SystemApps
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\dsc
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\IME
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\Help
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 __RSD C:\WINDOWS\Media
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\AppV
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\ias
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\DDFs
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\Registration
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\L2Schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Web
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Vss
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\tracing
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\TAPI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SystemResources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\winevt
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\System
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SKB
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SchCache
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Resources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\RemotePackages
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\PLA
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Performance
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\ModemLogs
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Globalization
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Cursors
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Branding
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\bcastdvr
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\addins
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Common Files\Services
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:27 - 000000219 _____ C:\WINDOWS\system.ini
2017-08-14 00:31 - 2017-08-14 00:27 - 000000092 _____ C:\WINDOWS\win.ini
2017-08-14 00:31 - 2017-08-14 00:20 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-08-14 00:31 - 2017-08-14 00:19 - 000000000 __RHD C:\Users\Public\Libraries
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\spool
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\CSC
2017-08-14 00:31 - 2017-08-14 00:10 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOPrivate
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\PrintDialog
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\MiracastView
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-14 00:31 - 2017-08-14 00:05 - 000000000 ____D C:\WINDOWS\HoloShell
2017-08-14 00:30 - 2017-08-14 00:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Skype
2017-08-14 00:28 - 2017-08-15 23:08 - 000000000 ____D C:\WINDOWS\INF
2017-08-14 00:27 - 2017-08-14 00:27 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-08-14 00:26 - 2017-08-14 00:26 - 000000000 ____D C:\Users\eddie\AppData\Local\Comms
2017-08-14 00:25 - 2017-08-14 13:58 - 000908880 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-14 00:25 - 2017-08-14 00:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Publishers
2017-08-14 00:24 - 2017-08-15 18:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Packages
2017-08-14 00:24 - 2017-08-14 04:56 - 000000000 ____D C:\Users\eddie\AppData\Local\ConnectedDevicesPlatform
2017-08-14 00:24 - 2017-08-14 00:24 - 000000020 ___SH C:\Users\eddie\ntuser.ini
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Synaptics
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Adobe
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\VirtualStore
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\TileDataLayer
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\ProgramData\Synaptics
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\Default User
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\All Users
2017-08-14 00:21 - 2017-08-16 01:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-14 00:20 - 2017-08-14 00:20 - 000026274 _____ C:\Users\eddie\OneDrive\Documents\Removed Apps.html
2017-08-14 00:18 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-14 00:15 - 2017-08-15 22:52 - 000000000 ____D C:\Users\eddie
2017-08-14 00:12 - 2017-08-16 00:58 - 082051072 _____ C:\WINDOWS\system32\config\SYSTEM
2017-08-14 00:12 - 2017-08-16 00:58 - 071827456 _____ C:\WINDOWS\system32\config\SOFTWARE
2017-08-14 00:12 - 2017-08-16 00:58 - 009175040 _____ C:\WINDOWS\system32\config\BBI
2017-08-14 00:12 - 2017-08-16 00:58 - 001572864 _____ C:\WINDOWS\system32\config\DEFAULT
2017-08-14 00:12 - 2017-08-16 00:58 - 000057344 _____ C:\WINDOWS\system32\config\SECURITY
2017-08-14 00:12 - 2017-08-14 00:54 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2017-08-14 00:12 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\servicing
2017-08-14 00:12 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\SMI
2017-08-14 00:12 - 2017-08-14 00:23 - 000000000 ___HD C:\$Windows.~BT
2017-08-14 00:12 - 2017-08-14 00:22 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-08-14 00:09 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOShared
2017-08-14 00:04 - 2017-08-14 00:04 - 000021910 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2017-08-14 00:04 - 2017-08-14 00:04 - 000002065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2017-08-14 00:04 - 2017-08-14 00:04 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\ProgramData\SRS Labs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\Program Files\Realtek
2017-08-14 00:04 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____D C:\Program Files\Intel
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2017-08-14 00:02 - 2017-03-18 13:56 - 002233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-08-13 23:58 - 2017-08-16 15:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-13 22:50 - 2017-08-14 00:57 - 000000000 ___HD C:\$SysReset
2017-08-13 08:49 - 2017-08-13 08:49 - 000291128 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper64.dll
2017-08-13 08:49 - 2017-08-13 08:49 - 000248120 _____ (IvoSoft) C:\WINDOWS\SysWOW64\StartMenuHelper32.dll
2017-08-13 01:40 - 2017-08-15 00:06 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\Mozilla
2017-08-12 23:19 - 2017-08-15 02:24 - 000000000 ___HD C:\SWSetup
2017-08-12 22:31 - 2017-08-14 00:19 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Restore Explorer
2017-08-09 02:19 - 2017-08-14 01:45 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\IObit
2017-08-08 22:10 - 2017-07-31 19:36 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-08-08 22:10 - 2017-07-31 19:34 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-08-08 22:10 - 2017-07-31 19:20 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-08-08 22:10 - 2017-07-31 19:18 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-08-08 22:10 - 2017-07-31 19:18 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-08-08 22:10 - 2017-07-31 19:13 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-08-08 22:10 - 2017-07-31 19:07 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-08 22:10 - 2017-07-31 19:06 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-08-08 22:10 - 2017-07-31 19:03 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-08-08 22:10 - 2017-07-31 18:30 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-08 22:09 - 2017-07-31 19:39 - 008319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-08 22:09 - 2017-07-31 19:38 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:38 - 000382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-08 22:09 - 2017-07-31 19:36 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:36 - 000119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-08 22:09 - 2017-07-31 19:35 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:35 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:34 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:33 - 000473240 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:32 - 002444704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-08 22:09 - 2017-07-31 19:32 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:32 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-08 22:09 - 2017-07-31 19:31 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 002645680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000723680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000410160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000315288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000143736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000082336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-08 22:09 - 2017-07-31 19:26 - 000204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 19:17 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 19:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 19:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-08-08 22:09 - 2017-07-31 19:10 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 19:09 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-08-08 22:09 - 2017-07-31 19:08 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:57 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-08 22:09 - 2017-07-31 18:45 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-08 22:09 - 2017-07-31 18:44 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 18:44 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2017-08-08 22:09 - 2017-07-31 18:44 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-08 22:09 - 2017-07-31 18:42 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 017366528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-08 22:09 - 2017-07-31 18:39 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-08 22:09 - 2017-07-31 18:36 - 023681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-08 22:09 - 2017-07-31 18:35 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-08-08 22:09 - 2017-07-31 18:34 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 007336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 012786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 001396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 008209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 002055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-08 22:09 - 2017-07-31 18:30 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-08-08 22:09 - 2017-07-31 18:26 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-08 22:09 - 2017-07-31 18:25 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-08 16:27 - 2017-08-08 16:28 - 000000000 ___HD C:\7e1b197988dcf5ad4a9391ddfe6621
2017-08-03 10:27 - 2017-07-27 22:20 - 000279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-03 10:27 - 2017-07-27 21:36 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll
2017-08-03 10:27 - 2017-07-27 21:26 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:21 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:20 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-08-03 10:27 - 2017-07-27 21:08 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-03 10:26 - 2017-07-27 21:40 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-08-03 10:26 - 2017-07-27 21:36 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2017-08-03 10:26 - 2017-07-27 21:33 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-08-03 10:26 - 2017-07-27 21:27 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-03 10:26 - 2017-07-27 21:20 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IpNatHlpClient.dll
2017-08-03 10:26 - 2017-07-27 21:19 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2017-08-03 10:26 - 2017-07-27 21:18 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2017-08-03 10:26 - 2017-07-27 21:13 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2017-08-03 10:26 - 2017-07-27 21:12 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-08-03 10:26 - 2017-07-27 21:10 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-08-03 10:26 - 2017-07-27 21:08 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-08-03 10:26 - 2017-07-27 21:02 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2017-08-03 10:25 - 2017-07-27 22:23 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-03 10:25 - 2017-07-27 22:15 - 000554400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-03 10:25 - 2017-07-27 22:07 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2017-08-03 10:25 - 2017-07-27 21:47 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-08-03 10:25 - 2017-07-27 21:37 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-08-03 10:25 - 2017-07-27 21:35 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2017-08-03 10:25 - 2017-07-27 21:33 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-08-03 10:25 - 2017-07-27 21:19 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:25 - 2017-07-27 21:16 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-08-03 10:25 - 2017-07-27 21:15 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:25 - 2017-07-27 21:13 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-08-03 10:25 - 2017-07-27 21:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll
2017-08-03 10:25 - 2017-07-27 21:09 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-08-03 10:24 - 2017-07-27 21:40 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-08-03 10:24 - 2017-07-27 21:38 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-08-03 10:24 - 2017-07-27 21:35 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-08-03 10:24 - 2017-07-27 21:33 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-08-03 10:24 - 2017-07-27 21:17 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-08-03 10:24 - 2017-07-27 21:15 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-08-03 10:24 - 2017-07-27 21:14 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-08-03 10:24 - 2017-07-27 21:13 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-08-03 10:24 - 2017-07-27 21:12 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-08-03 10:24 - 2017-07-27 21:11 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-08-03 10:24 - 2017-07-27 21:07 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-08-03 10:24 - 2017-07-27 21:05 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-08-03 10:23 - 2017-07-27 21:36 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-08-03 10:22 - 2017-07-27 21:24 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-03 10:21 - 2017-07-27 21:21 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-03 10:20 - 2017-07-27 22:10 - 002679200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-03 10:20 - 2017-07-27 21:19 - 000942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-03 10:20 - 2017-07-27 21:19 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-03 10:20 - 2017-07-27 21:16 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-03 10:18 - 2017-07-27 22:09 - 000529992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-03 10:17 - 2017-07-27 22:25 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-03 10:17 - 2017-07-27 21:25 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-03 10:17 - 2017-07-27 21:19 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 002604248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-03 10:16 - 2017-07-27 22:09 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-08-03 10:16 - 2017-07-27 21:21 - 008333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-03 10:16 - 2017-07-27 21:13 - 004535296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-03 10:16 - 2017-07-27 21:12 - 002939392 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000455584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000116280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-03 10:14 - 2017-07-27 22:17 - 000660680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-03 10:14 - 2017-07-27 22:09 - 000527976 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-03 10:14 - 2017-07-27 21:48 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2017-08-03 10:14 - 2017-07-27 21:22 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-03 10:14 - 2017-07-27 21:19 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-03 10:14 - 2017-07-27 21:18 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-03 10:14 - 2017-07-27 21:07 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-03 10:13 - 2017-07-27 22:24 - 002327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-03 10:13 - 2017-07-27 22:13 - 001033544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-03 10:13 - 2017-07-27 21:21 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-03 10:13 - 2017-07-27 21:19 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-03 10:13 - 2017-07-27 21:07 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-03 10:12 - 2017-07-27 22:23 - 002969888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-03 10:12 - 2017-07-27 22:16 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-03 10:12 - 2017-07-27 22:15 - 005302968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-03 10:12 - 2017-07-27 22:14 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-03 10:12 - 2017-07-27 22:12 - 001325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-03 10:12 - 2017-07-27 21:26 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-03 10:12 - 2017-07-27 21:24 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:12 - 2017-07-27 21:14 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-03 10:12 - 2017-07-27 21:12 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-03 10:12 - 2017-07-27 21:06 - 001833984 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-03 10:10 - 2017-07-27 22:24 - 000119904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-03 10:10 - 2017-07-27 22:22 - 000923048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000192264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000104432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-03 10:10 - 2017-07-27 22:12 - 021353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-03 10:10 - 2017-07-27 21:29 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-03 10:10 - 2017-07-27 21:24 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:24 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-08-03 10:10 - 2017-07-27 21:21 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-03 10:10 - 2017-07-27 21:19 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:10 - 2017-07-27 21:15 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-03 10:10 - 2017-07-27 21:08 - 000600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-03 10:09 - 2017-07-27 22:12 - 000323936 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-03 10:09 - 2017-07-27 21:25 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-03 10:09 - 2017-07-27 21:24 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-03 10:09 - 2017-07-27 21:23 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-03 10:09 - 2017-07-27 21:22 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-03 10:09 - 2017-07-27 21:21 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-03 10:09 - 2017-07-27 21:17 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-03 10:09 - 2017-07-27 21:16 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-03 10:09 - 2017-07-27 21:14 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-03 10:09 - 2017-07-27 21:13 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-03 10:09 - 2017-07-27 21:12 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-03 10:09 - 2017-07-27 21:06 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-03 10:09 - 2017-07-27 21:05 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-03 10:08 - 2017-07-27 22:30 - 001068720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-03 10:08 - 2017-07-27 22:14 - 000318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-03 10:08 - 2017-07-27 22:10 - 001114528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-03 10:08 - 2017-07-27 21:31 - 003995136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:29 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-03 10:08 - 2017-07-27 21:23 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-03 10:08 - 2017-07-27 21:22 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-03 10:08 - 2017-07-27 21:21 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-03 10:08 - 2017-07-27 21:20 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001298432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-03 10:08 - 2017-07-27 21:18 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-03 10:08 - 2017-07-27 21:15 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-03 10:08 - 2017-07-27 21:10 - 001706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-03 10:07 - 2017-07-27 22:16 - 000961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-03 10:07 - 2017-07-27 22:13 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:07 - 2017-07-27 22:13 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-03 10:07 - 2017-07-27 22:12 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-03 10:07 - 2017-07-27 21:30 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-08-03 10:07 - 2017-07-27 21:26 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-03 10:07 - 2017-07-27 21:22 - 000778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-03 10:07 - 2017-07-27 21:20 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-03 10:07 - 2017-07-27 21:19 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-03 10:07 - 2017-07-27 21:18 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-03 10:07 - 2017-07-27 21:15 - 003204608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 002444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-03 10:07 - 2017-07-27 21:11 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-03 10:07 - 2017-07-27 21:10 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-03 10:07 - 2017-07-27 21:09 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-03 10:07 - 2017-07-27 21:09 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-03 10:07 - 2017-07-27 21:06 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-03 10:06 - 2017-07-27 21:23 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 003867040 _____ C:\WINDOWS\system32\PortChanger.exe
2017-08-02 02:45 - 2012-09-25 00:52 - 002398112 _____ (Hewlett Packard) C:\WINDOWS\system32\hppldcoi.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 000151968 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\Dot4.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000049056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4usb.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000019872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4Scan.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 009891328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2017-08-02 02:29 - 2017-08-02 02:29 - 004332032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtCRU64.exe
2017-08-02 02:29 - 2017-08-02 02:29 - 000420832 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsUer.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 000084480 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll
2017-08-02 02:20 - 2017-08-02 02:20 - 000831685 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2017-08-02 02:16 - 2017-08-02 02:16 - 005799386 _____ C:\WINDOWS\system32\igdclbif.bin
2017-08-02 02:16 - 2017-08-02 02:16 - 000225280 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2017-08-02 02:15 - 2017-08-02 02:16 - 003972096 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 019861504 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 005688832 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 004368896 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000388608 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000318464 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000266232 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2017-08-02 02:14 - 2017-08-02 02:15 - 029101560 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 004934144 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 002393160 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 001858632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000439288 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000416256 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2017-08-02 02:13 - 2017-08-02 02:14 - 015488920 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll
2017-08-02 02:13 - 2017-08-02 02:13 - 013483192 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 013655032 _____ (Intel Corporation) C:\WINDOWS\system32\ig8icd64.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 010329088 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig8icd32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 005262848 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 002142208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 001009664 _____ C:\WINDOWS\system32\igfxSDK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000950784 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000947200 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000756224 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000705024 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000641530 _____ C:\WINDOWS\system32\FilmModeDetection.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000449536 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000403671 _____ C:\WINDOWS\system32\ImageStabilization.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000398848 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000390144 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000384512 _____ C:\WINDOWS\system32\igfxTray.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000375173 _____ C:\WINDOWS\system32\ColorImageEnhancement.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000356352 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000337408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000273408 _____ C:\WINDOWS\system32\igfxCPL.cpl
2017-08-02 02:11 - 2017-08-02 02:11 - 000254976 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000251392 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000219648 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000215040 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000214528 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000111616 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000103416 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000100864 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000095232 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000084992 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000055240 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000052736 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\Gfxv4_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\DPTopologyApp.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\Gfxv2_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\DPTopologyAppv2_0.exe.config
2017-08-02 02:10 - 2017-08-02 02:11 - 000220160 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4624.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 006696824 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 005137296 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 002813952 _____ C:\WINDOWS\system32\iglhxa64.cpa
2017-08-02 02:10 - 2017-08-02 02:10 - 001816712 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001814056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001590784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001178624 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000511260 _____ C:\WINDOWS\system32\cp_resources.bin
2017-08-02 02:10 - 2017-08-02 02:10 - 000431104 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000284160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000242152 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000223240 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000205344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000193016 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000183968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000182944 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000181832 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000173568 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160264 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160256 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000157696 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040343 _____ C:\WINDOWS\system32\iglhxo64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040316 _____ C:\WINDOWS\system32\iglhxc64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039658 _____ C:\WINDOWS\system32\iglhxg64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2017-08-02 02:09 - 2017-08-02 02:10 - 039864472 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2017-08-02 02:08 - 2017-08-02 02:09 - 038903384 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2017-08-02 02:07 - 2017-08-02 02:08 - 033479864 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004270672 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004240208 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 000312296 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll
2017-08-02 02:06 - 2017-08-02 02:07 - 016457272 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2017-08-02 02:05 - 2017-08-02 02:06 - 034823448 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 013070648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000297152 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000005412 _____ C:\WINDOWS\system32\iglhxs64lp.vp
2017-08-02 02:04 - 2017-08-02 02:05 - 007407080 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64lp.sys
2017-08-02 02:00 - 2017-08-02 02:00 - 000877424 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000866640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000737960 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll
2017-08-02 01:59 - 2017-08-02 02:00 - 001016928 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003410832 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003122656 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 001435136 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000984912 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000868176 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000691680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000526280 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000467152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000381408 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000258856 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2017-08-02 01:57 - 2017-08-02 01:59 - 072520704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2017-08-02 01:57 - 2017-08-02 01:57 - 012951320 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2017-08-02 01:56 - 2017-08-02 01:56 - 003516984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003509200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003205120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 002210784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 001347136 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000532376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000387312 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000192976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000166200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000088344 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000023688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2017-08-02 01:55 - 2017-08-02 01:55 - 005874144 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2017-08-02 01:55 - 2017-08-02 01:55 - 003677152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2017-08-02 01:55 - 2017-08-02 01:55 - 000122312 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2017-07-18 16:18 - 2017-07-18 16:19 - 000000000 ____D C:\Users\eddie\OpenVPN
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 01:03 - 2017-04-11 16:55 - 000000000 ___RD C:\Users\eddie\OneDrive
2017-08-16 01:01 - 2017-04-11 20:03 - 000000000 __SHD C:\Users\eddie\IntelGraphicsProfiles
2017-08-14 02:25 - 2017-04-11 20:15 - 000000000 __RDX C:\Users\eddie\OneDrive\Documents\Extra
2017-08-14 01:23 - 2017-04-11 20:16 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 00:25 - 2017-03-18 13:57 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2017-08-14 00:24 - 2017-04-11 16:51 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-14 00:24 - 2017-03-18 13:57 - 000430848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-08-14 00:20 - 2017-04-13 18:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-08-08 23:44 - 2017-06-26 14:45 - 000000779 _____ C:\Users\eddie\Desktop\SSF2.lnk
2017-07-18 13:30 - 2017-06-26 15:39 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-08-13 23:57
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-08-2017
Ran by eddie (16-08-2017 15:27:57)
Running from C:\Users\eddie\Desktop
Windows 10 Pro Version 1703 (X64) (2017-08-14 07:23:51)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2896426177-3843145535-1853849027-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2896426177-3843145535-1853849027-503 - Limited - Disabled)
eddie (S-1-5-21-2896426177-3843145535-1853849027-1001 - Administrator - Enabled) => C:\Users\eddie
Guest (S-1-5-21-2896426177-3843145535-1853849027-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: COMODO Antivirus (Enabled - Up to date) {0C515E80-E355-69BD-3445-A511E5C186FD}
AS: COMODO Advanced Protection (Enabled - Up to date) {B730BF64-C56F-6633-0EF5-9E639E46CC40}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: COMODO Firewall (Enabled) {346ADFA5-A93A-68E5-1F1A-0C241B12C186}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Advanced SystemCare 10 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 10.5.0 - IObit)
Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 7.1.5.0 - Auslogics Labs Pty Ltd)
CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform)
Classic Shell (HKLM\...\{CABCE573-0A86-42FA-A52A-C7EA61D5BE08}) (Version: 4.3.1 - IvoSoft)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 58.0.3029.113 - Comodo)
COMODO Internet Security Premium (HKLM\...\{8E048D96-59B5-4BD8-A5D0-8FFCFC161A5A}) (Version: 10.0.1.6258 - COMODO Security Solutions Inc.) Hidden
COMODO Internet Security Premium (HKLM\...\COMODO Internet Security) (Version: 10.0.1.6258 - COMODO Security Solutions Inc.)
COMODO Secure Shopping (HKLM-x32\...\{D15DF9B0-3A98-4BEF-B7D5-FC3AEA421657}) (Version: 1.1.99.0 - COMODO) Hidden
COMODO Secure Shopping (HKLM-x32\...\Comodo Secure_Shopping_list_uninstall) (Version: 1.1.421657.99 - Comodo)
DriverUpdate (HKLM\...\{C2A1552C-0027-4E26-9E81-78CD02DEB71F}) (Version: 4.1.2 - Slimware Utilities Holdings, Inc.) Hidden
DriverUpdate (HKLM\...\DriverUpdate) (Version: 4.1.2 - Slimware Utilities Holdings, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.101 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Internet Security Essentials (HKLM-x32\...\ComodoIse) (Version: 1.2.422025.92 - Comodo)
Java 8 Update 144 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Microsoft OneDrive (HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\OneDriveSetup.exe) (Version: 17.3.6963.0807 - Microsoft Corporation)
Mozilla Firefox 56.0 (x64 en-US) (HKLM\...\Mozilla Firefox 56.0 (x64 en-US)) (Version: 56.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0 - Mozilla)
OpenVPN 2.4.3-I602 (HKLM\...\OpenVPN) (Version: 2.4.3-I602 - OpenVPN Technologies, Inc.)
pCloud Drive (HKLM-x32\...\{5824F8F8-E59E-42CB-98FA-B1F329A58BB9}) (Version: 3.5.7 - pCloud AG) Hidden
pCloud Drive (HKLM-x32\...\{d8e9b125-0436-4a92-94b8-0097dbf23a3d}) (Version: 3.5.7.0 - pCloud AG)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.31235 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.13.1223.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8216 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.9 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.9 - VS Revo Group, Ltd.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.6 - Synaptics Incorporated)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
Windows Desktop Gadgets (HKLM\...\Windows Desktop Gadgets_is1) (Version: 2.0 - hxxp://gadgetsrevived.com)
WinRAR 5.50 beta 6 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.6 - win.rar GmbH)
Wise Force Deleter 1.4.6 (HKLM-x32\...\Wise Force Deleter_is1) (Version: 1.4.6 - WiseCleaner.com, Inc.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ pCloudINPROGRESS] -> {D8BFAFBD-B670-4252-9C17-9CF1C64C2BAF} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [ pCloudINSYNC] -> {8D0C0582-552A-4A6B-9455-DA63E1F329C0} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [ pCloudNOSYNC] -> {3858ED1B-8F1C-42ED-A8A9-FDBF591E3C6B} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs6] -> {AB8F5A1D-F87B-4E34-9D77-65D2615BEB3A} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-09] (/n software, Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs6] -> {AB8F5A1D-F87B-4E34-9D77-65D2615BEB3A} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-09] (/n software, Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit)
ContextMenuHandlers1: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers1: [ContextMenuExtension] -> {a0b73fac-351f-3948-9d8a-1dad9d870193} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit)
ContextMenuHandlers2: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers2: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers3: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit)
ContextMenuHandlers4: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers4: [ContextMenuExtension] -> {a0b73fac-351f-3948-9d8a-1dad9d870193} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-08-02] (Intel Corporation)
ContextMenuHandlers6: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2016-12-15] (VS Revo Group)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\system32\StartMenuHelper64.dll [2017-08-13] (IvoSoft)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-02] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0B959917-3528-44FA-A618-DD66F24691D5} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {2529B177-0509-4702-BA49-FF1D8C59A7DC} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {50515B46-7D9D-4A7F-803A-045867D0AD30} - System32\Tasks\ASC10_SkipUac_eddie => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [2017-08-07] (IObit)
Task: {7B0F3311-DDDF-4F52-9C4B-7310D1F63587} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {7BB95E82-52B7-432E-AD5F-CEEA54A2B32F} - System32\Tasks\Auslogics\Disk Defrag\Start Disk Defrag On eddie Logon => C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe [2017-07-27] (Auslogics)
Task: {8E812564-8E75-4BF8-A3F2-4AF73053B39F} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {90E61B0B-4158-42F4-84A3-FA8401A03CEC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-14] (Google Inc.)
Task: {9123AC40-7DC0-4EF3-847D-C25074057FFC} - System32\Tasks\DriverUpdate Scan => C:\Program Files\DriverUpdate\DriverUpdate.exe [2017-07-31] (SlimWare Utilities, Inc.)
Task: {9686D31E-04B5-4290-B6BA-28F14BC714DE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {9E7F93F7-887A-4FF5-A842-0D33D45729AC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-14] (Google Inc.)
Task: {A24BA1E2-81E7-4CDC-9AE1-FA20784F9388} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2896426177-3843145535-1853849027-1001
Task: {B09219E1-52F8-4B5B-A864-94C93E4E341D} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2017-07-11] (COMODO)
Task: {B73AF37E-9221-4E5F-8FD2-470DE8020F2A} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {D781C52C-6FC0-4FDA-8180-0F8BEFE6681C} - System32\Tasks\CCleanerClean => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {D955C4AD-0427-4EB9-BF2B-D0B59756D047} - System32\Tasks\Auslogics\Disk Defrag\Scheduled Defragmentation => rundll32.exe TaskSchedulerHelper.dll,RunTask "DiskDefrag.exe" "/UseTray /Scheduler"
Task: {EE84B776-442E-4FC1-A069-80F265E7B26E} - System32\Tasks\ASC10_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [2017-07-24] (IObit)
Task: {F55CA907-44A0-4B1D-BA8B-7DB45D5E9FCE} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {FB279480-44E8-4B72-867F-D7C566531A1E} - System32\Tasks\ASC10_AutoCare => C:\Program Files (x86)\IObit\Advanced SystemCare\AutoCare.exe [2017-05-23] (IObit)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerClean.job => C:\Program Files\CCleaner\CCleaner.exe
Task: C:\WINDOWS\Tasks\DriverUpdate Scan.job => C:\Program Files\DriverUpdate\DriverUpdate.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\eddie\Desktop\PC Help Forum.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=illdlgkhakmollnophmajedfblhpijak
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Chrome Remote Desktop.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\File System for OneDrive.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=jbfdfcehgafdbfpniaimfbfomafoadgo
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Hangouts.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=knipolnnllmklapflnccelgolnpehhpl
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\System.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=ocjnemjmlhjkeilmaidemofakmpclcbi
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Wake Up!.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=lbbcfplbfbmimpnlammmeaheakhcogke
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\WeatherBug.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=njkkjobcechefaoknodniidfjapgfoco
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gmail.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=pjkljhegncpnkpknbcohdijeoejaedia
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Web Store.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=ahfgeienlihckogmohjhadlkjgocpleb
==================== Loaded Modules (Whitelisted) ==============
2017-08-16 00:27 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-07-11 12:42 - 2017-07-11 12:42 - 000156352 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdwrhlp.dll
2017-07-11 12:40 - 2017-07-11 12:40 - 000107200 _____ () C:\Program Files\COMODO\COMODO Internet Security\cavwpps.dll
2017-07-11 12:41 - 2017-07-11 12:41 - 000244928 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdcomps.dll
2016-03-16 11:25 - 2016-03-16 11:25 - 000073912 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2017-03-18 13:58 - 2017-03-18 13:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000384512 _____ () C:\WINDOWS\system32\igfxTray.exe
2017-03-18 13:59 - 2017-03-18 19:31 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-07-14 06:26 - 2017-07-14 06:26 - 000638592 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe
2017-08-14 14:41 - 2017-08-11 00:40 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.101\libglesv2.dll
2017-08-14 14:41 - 2017-08-11 00:40 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.101\libegl.dll
2017-08-14 02:16 - 2017-08-14 02:16 - 000054488 _____ () C:\Program Files\CCleaner\branding.dll
2017-08-03 10:12 - 2017-07-27 22:18 - 004125088 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll
2017-03-18 13:59 - 2017-03-18 19:31 - 002487712 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentManagementSDK.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\str => ""="service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2017-08-15 01:30 - 2017-08-15 16:41 - 000001359 _____ C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 keystone.mwbsys.com
0.0.0.0 telemetry.malwarebytes.com
91.209.196.83 download.comodo.com
91.209.196.83 www.download.comodo.com
127.0.0.1 idb.iobit.com
127.0.0.1 asc55.iobit.com
127.0.0.1 is360.iobit.com
127.0.0.1 www.asc55.iobit.com
127.0.0.1 asc.iobit.com
127.0.0.1 pf.iobit.com
127.0.0.1 98.129.229.186
0.0.0.0 keystone.mwbsys.com
0.0.0.0 telemetry.malwarebytes.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.254.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is disabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\...\StartupApproved\Run: => "SecurityHealth"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{FCFE65AB-2442-4A73-B8FF-8B12810382E6}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{42BC09F9-68F9-49B5-86A6-54FA904E5B9D}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{6818C011-599B-437F-BFEA-0DFD8D69923F}C:\program files (x86)\pcloud drive\pcloud.exe] => (Allow) C:\program files (x86)\pcloud drive\pcloud.exe
FirewallRules: [UDP Query User{71C348A0-5C57-4F71-B870-DB5012115947}C:\program files (x86)\pcloud drive\pcloud.exe] => (Allow) C:\program files (x86)\pcloud drive\pcloud.exe
FirewallRules: [{F8B36C69-0C6C-4ECD-891A-B1C1CEAAD1EB}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{CEFED888-4883-47A5-850E-E0DCA6383D80}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe
==================== Restore Points =========================
14-08-2017 02:50:40 Installed Classic Shell
15-08-2017 00:32:17 System Checkpoint
15-08-2017 03:35:37 System Checkpoint
16-08-2017 02:22:18 System Checkpoint
==================== Faulty Device Manager Devices =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/16/2017 12:28:38 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.
Context: Windows Application, SystemIndex Catalog
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
Error: (08/16/2017 12:28:26 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: The search service has detected corrupted data files in the index {id=3800}. The service will attempt to automatically correct this problem by rebuilding the index.
Context: Windows Application, SystemIndex Catalog
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
System errors:
=============
Error: (08/16/2017 12:17:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Software Protection service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (08/16/2017 12:17:35 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Software Protection service to connect.
CodeIntegrity:
===================================
Date: 2017-08-16 14:58:00.750
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 14:58:00.718
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 13:58:06.430
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 13:58:06.361
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 12:58:03.287
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 12:58:03.266
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 12:51:31.062
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 12:51:31.040
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 12:22:31.349
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\cssguard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-08-16 12:19:22.223
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU N3700 @ 1.60GHz
Percentage of memory in use: 81%
Total physical RAM: 3938.3 MB
Available physical RAM: 732.46 MB
Total Virtual: 6494.65 MB
Available Virtual: 1125.83 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:447.82 GB) (Free:389.05 GB) NTFS
Drive d: (Recovery Warranty) (Fixed) (Total:4.88 GB) (Free:1.52 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (UNTITLED) (Removable) (Total:119.08 GB) (Free:95.78 GB) exFAT
Drive p: (pCloud Drive) (Removable) (Total:500 GB) (Free:461.93 GB) exFAT
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: F3CF06FA)
Partition: GPT.
========================================================
Disk: 1 (Size: 119.1 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-08-2017
Ran by eddie (administrator) on WIN10XP-1703PRO (16-08-2017 15:21:37)
Running from C:\Users\eddie\Desktop
Loaded Profiles: eddie (Available Profiles: eddie)
Platform: Windows 10 Pro Version 1703 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(SlimWare Utilities Holdings, Inc.) C:\Program Files\SlimWare Utilities\Services\SlimWare.Services.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(COMODO) C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Comodo) C:\Program Files (x86)\COMODO\Dragon\dragon_updater.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(pCloud AG) C:\Program Files (x86)\pCloud Drive\pCloud.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(SlimWare Utilities, Inc.) C:\Program Files\DriverUpdate\DriverUpdate.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Suo10_SmartRAM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe
(SlimWare Utilities Holdings, Inc.) C:\Program Files\SlimWare Utilities\Services\SlimWare.Session.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9231328 2017-08-02] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2017-08-13] (IvoSoft)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1489088 2017-07-11] (COMODO)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [3632848 2017-07-05] (COMODO)
HKLM-x32\...\Run: [vdcss] => C:\Program Files (x86)\COMODO\COMODO Secure Shopping\vdcss.exe [7690936 2017-06-30] (COMODO)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [pCloud] => C:\Program Files (x86)\pCloud Drive\pCloud.exe [3885832 2017-06-16] (pCloud AG)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [OpenVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] ()
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCEnhancer] => E:\CCEnhancer\CCEnhancer-4.4.1.exe [282112 2017-03-06] (SingularLabs)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [GoogleChromeAutoLaunch_E3F5740D1C7070D0CABB3741A4F94C0C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1301848 2017-08-11] (Google Inc.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [DriverUpdate] => C:\Program Files\DriverUpdate\DriverUpdate.exe [40742232 2017-07-31] (SlimWare Utilities, Inc.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [Advanced SystemCare 10] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3924256 2017-05-17] (IObit)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [SmartRAM] => C:\Program Files (x86)\IObit\Advanced SystemCare\Suo10_SmartRAM.exe [560416 2017-07-26] (IObit)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
SSODL: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\system32\cbfsMntNtf6.dll (/n software, Inc.)
SSODL-x32: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll (/n software, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{27427e43-89c9-4d14-b85e-f8cbc9b59dfe}: [DhcpNameServer] 192.168.254.254
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2896426177-3843145535-1853849027-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files (x86)\COMODO\COMODO Secure Shopping\cssbho64.dll [2017-06-30] (COMODO)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-14] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-14] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2017-08-13] (IvoSoft)
BHO-x32: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files (x86)\COMODO\COMODO Secure Shopping\cssbho32.dll [2017-06-30] (COMODO)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
BHO-x32: IObit Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2016-08-03] (IObit)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2017-08-13] (IvoSoft)
BHO-x32: IObit Ads Removal -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Adblock\Adblock.dll [2016-06-23] (IObit)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
FireFox:
========
FF DefaultProfile: oomuvn3h.default
FF ProfilePath: C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default [2017-08-16]
FF user.js: detected! => C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default\user.js [2017-08-15]
FF Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi [2017-07-03]
FF Extension: (Activity Stream) - C:\Program Files\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Click-to-Play staged rollout) - C:\Program Files\Mozilla Firefox\browser\features\clicktoplay-rollout@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Follow-on Search Telemetry) - C:\Program Files\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi [2017-08-10] [not signed]
FF Extension: (Photon onboarding) - C:\Program Files\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Shield Recipe Client) - C:\Program Files\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi [2017-08-10] [not signed]
FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-14] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://getchrome.eu/home/
CHR StartupUrls: Default -> "hxxp://getchrome.eu/home"
CHR DefaultSearchKeyword: Default -> wiki
CHR Profile: C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default [2017-08-16]
CHR Extension: (ProxFlow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2017-08-14]
CHR Extension: (Google Slides) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-14]
CHR Extension: (Security Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abbpkdnljicgejmkndbncgpeamlcjhom [2017-08-14]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2017-08-16]
CHR Extension: (GameShark) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\acmchkofncmmkabbadlofeffhchdmkop [2017-08-14]
CHR Extension: (Movie4K) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\adkbpinkibeobfkgfoolfpnldifjdedp [2017-08-14]
CHR Extension: (CB Channels) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afdeaaklpenijgadfgaljjnknlbaphae [2017-08-14]
CHR Extension: (Microsoft Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afiaggegejgnhhkfjpbbplaigaeijppc [2017-08-14]
CHR Extension: (Microsoft Virtual Agent) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahhncecjhnalimedngnkpfacimkmlafh [2017-08-14]
CHR Extension: (My Win10 PC) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akhdcannjobjjbbfabajjchleaccalng [2017-08-14]
CHR Extension: (HD for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2017-08-14]
CHR Extension: (LR EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akkmbnlaijgepeeldfglekgfajoiklph [2017-08-14]
CHR Extension: (ToonGet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\almbnkdlegibjhcgfbflpemghhdmalmf [2017-08-14]
CHR Extension: (Google Docs) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-14]
CHR Extension: (Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-14]
CHR Extension: (ARChon4Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbooacojifhcpicigmefgdhaiihjhnmd [2017-08-14]
CHR Extension: (Open with Google Drive™ Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdkpinfdldjdngmgfbifbdbgaoampkan [2017-08-14]
CHR Extension: (Super Nintendo Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\beogeghicacplhninfdmhiianhjimccp [2017-08-14]
CHR Extension: (Bitmoji) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfgdeiadkckfbkeigkoncpdieiiefpig [2017-08-14]
CHR Extension: (Google Groups) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfmbadcfdhiklafcdohpfphhhakmiakk [2017-08-14]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2017-08-14]
CHR Extension: (Mingle 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjeepgflngbnlkmfikinngokbcijkean [2017-08-14]
CHR Extension: (Amazon Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjjmjgafamolafiboomflecccipeddim [2017-08-14]
CHR Extension: (Win10 ISO) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjlhajlpdpmfebiokogbjhdgmkehgcbe [2017-08-14]
CHR Extension: (OpenDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmeclafhfpefpfndaigmiojllfgmbcm [2017-08-14]
CHR Extension: (YouTube) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-14]
CHR Extension: (1M AppStore) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bminhbeeccgdnghnabbhiafpndlbkedn [2017-08-14]
CHR Extension: (Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cagpfhohgbclhfgfggnbgfhnjehoknpk [2017-08-14]
CHR Extension: (History 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cahejgbbfgmlmjgdjlibphdjeldhagkp [2017-08-14]
CHR Extension: (Amazon) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\camkdhjofheljkflfmfgbnajgjnhlopf [2017-08-14]
CHR Extension: (Update) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbkkihljhphdkjhiabaomgfninkfihhe [2017-08-14]
CHR Extension: (Toons Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdibbihehmddkghfgiblbflocphmmooc [2017-08-14]
CHR Extension: (Snoopy vs. The Red Baron) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfalonhgbljhcmcajnbdebedcjdoblnl [2017-08-14]
CHR Extension: (Adblock Plus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-08-14]
CHR Extension: (Pushbullet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-08-14]
CHR Extension: (OneNote Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciniambnphakdoflgeamacamhfllbkmo [2017-08-14]
CHR Extension: (Monopoly Empire game | Play Kids Games Online | Hasbro) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjdhdhilfeoikokoiakkgnckknaekled [2017-08-14]
CHR Extension: (YT2MP3) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjhmdjffbkdmddmdmmbabiaclojaomeg [2017-08-14]
CHR Extension: (TechSupportGuy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckffimcpiheacclckfmmdcbhbmfmfikd [2017-08-14]
CHR Extension: (TWC Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckifgoknanfhclklbfjlpblncjpdfmfj [2017-08-14]
CHR Extension: (Microsoft Flow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clldiedkmkolghagmnpmnoljbhijiboi [2017-08-14]
CHR Extension: (HP ENVY) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clpdjjcfniihldhfchnjbiladapnbahi [2017-08-14]
CHR Extension: (MAFYT Settings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmelobemnghobnlpdfmmbejdoaleajcf [2017-08-14]
CHR Extension: (SSF2 Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnlencpcagccinnhoijdgmobkmfhalcc [2017-08-14]
CHR Extension: (Harakirimail extension) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coaagmonnnldglbilekplfnphpdencce [2017-08-14]
CHR Extension: (ComputerHelpForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbhjgghkoimcbpnbgjikmpgffkgajfk [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\damfhmjfmeiigloagjpelmocjoeobdno [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dccnabnbnagheglhfmgdcjlcjbeibaje [2017-08-14]
CHR Extension: (Chase Online ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcofdmelmmjneoonenbhpagpbpiojkhf [2017-08-14]
CHR Extension: (Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\deceagebecbceejblnlcjooeohmmeldh [2017-08-14]
CHR Extension: (3DS Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfkhponeglmiiobiihilahinlckifjjh [2017-08-14]
CHR Extension: (Fus.Fall Legacy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgmdnngojpofdigdidplfaebnjohmfng [2017-08-14]
CHR Extension: (Tampermonkey) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-08-14]
CHR Extension: (Janifer Boston) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhpkkleekhaceehoigfcnaaidjoleflh [2017-08-14]
CHR Extension: (Glitch Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djahbfbhacphllgemcekmdnlilahhmge [2017-08-14]
CHR Extension: (Nintendo Chat) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djeppnpeahmgfaohhidhjpipjkahimfe [2017-08-14]
CHR Extension: (Google+) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2017-08-14]
CHR Extension: (NORAD Tracks Santa) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmkoneajelflpbfjpchjaiglipefmnki [2017-08-14]
CHR Extension: (Frontier DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnabfpdnbkmdmcoillihefhnjjknnona [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dolkddbfbhledadcdepacaljbglglcoe [2017-08-14]
CHR Extension: (Sumo Paint) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpgjihldbpodlmnjolekemlfbcajnmod [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ebgecmolaheocnobalndebpehpimdghi [2017-08-14]
CHR Extension: (Inbox) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\edmijkelpnflahpdblkkobimcplcgmgj [2017-08-14]
CHR Extension: (Amazon Shop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eecahhmlcjafclfkjodjjgllpmcmkgko [2017-08-14]
CHR Extension: (Novelty, OH Weather Forecast and Cond...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eenemnbihadgbcjemdnobckofmiihfnk [2017-08-14]
CHR Extension: (Shortcut to Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\efcdnfkhiiafogbhcainplbbgemgaaen [2017-08-14]
CHR Extension: (YouTubeDownloader) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eieafdgibiahkjdgdccmldmjidglnbjj [2017-08-14]
CHR Extension: (Google Fourms) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejiggjokppepehmfdngjefbhjeheknmp [2017-08-14]
CHR Extension: (Cast Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejliejcnhkkaaipdgkeiihbefhjeoemp [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejppoecfdibjchmpdcphbanegdjebcgo [2017-08-14]
CHR Extension: (HelpSupport Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekimmgolelbekdhafemjekjhkempbkfd [2017-08-14]
CHR Extension: (Comodo AdBlocker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhcnbjoomhmifmfeggoalmplblcmcin [2017-08-14]
CHR Extension: (Chrome Goodies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\emmdmeocdlghmhbfjaldhjahnfbkbpck [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\enffghkdjcgkndjodbaelocgmcbmbhpp [2017-08-14]
CHR Extension: (Filter by WOT) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eomhfalemadkajmgmppkoenihlljdjoj [2017-08-14]
CHR Extension: (Update Windows 10) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\epejeipipakmkmdfnkpghcjfmeigpggo [2017-08-14]
CHR Extension: (G SSH2 SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabhojopefodnkcighibfcnamgmplloh [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fajdleioencnfbnmiienoibkoimkooli [2017-08-14]
CHR Extension: (Old EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fanigphfdfepmnelohpfhcpecoekibml [2017-08-14]
CHR Extension: (DiskImager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdfeicageglnlelmohmkojdjccgkdmcb [2017-08-14]
CHR Extension: (FREE App Creator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdhglomjccccgggpeabmiadbpmofeedc [2017-08-14]
CHR Extension: (Motorola) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fekllafapcbanabhhooobibaanmndalm [2017-08-14]
CHR Extension: (Google Sheets) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-14]
CHR Extension: (Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdhgdfhcclnmednjibbajgcpcpppknl [2017-08-14]
CHR Extension: (FB Game Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijlioglnahpdajepoinkodlegkolkam [2017-08-14]
CHR Extension: (Villionaire) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fimebapbdliodpciaalpoijonhdfhhkd [2017-08-14]
CHR Extension: (Word Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2017-08-14]
CHR Extension: (G SSH SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fipamjmedinmfclljanbjhhbdkfinpkc [2017-08-14]
CHR Extension: (Nintendo ThemeShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkhaiaahhhomnfnnjhmnkkhloogihnfa [2017-08-14]
CHR Extension: (EMails) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fknmbhaaehfdjpmooilcabjgooldjdoo [2017-08-14]
CHR Extension: (Google Voice ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fldbfpjncfkebegiobhnjanbokdlbnij [2017-08-14]
CHR Extension: (Rufus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljfobnflghnobgffmkpjddbdehgmfol [2017-08-14]
CHR Extension: (Who's on first?) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljmpldncihcmabdfjkgonhijjkpbgkl [2017-08-14]
CHR Extension: (Norton DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\focoenonfjfpphaadindagmhlijgklak [2017-08-14]
CHR Extension: (Nintendo CS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpdddhjdalfonhmejlkcfhjcckhealoc [2017-08-14]
CHR Extension: (Chrome Remote Desktop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-08-14]
CHR Extension: (SPdate) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmnahlpnikhhgldfmeajheocdileadd [2017-08-14]
CHR Extension: (Super Mario) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdljahompmnjdcmnlcfeobicdpepefbf [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegmdadojdijhnemaeolhalohelcagod [2017-08-14]
CHR Extension: (Network Test) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\geklcdelofkoldghehnhggalmoahklbi [2017-08-14]
CHR Extension: (Homebrew Browser) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjnhndecndnepbjpmaloifckdmgcac [2017-08-14]
CHR Extension: (About GPG Services) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaoeklfaibbbipibbalclmnllojibkh [2017-08-14]
CHR Extension: (Google Docs Offline) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-14]
CHR Extension: (Click&Clean) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2017-08-14]
CHR Extension: (Anyfile Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghlichmdnegmcpafgmmlpkegmcndlndi [2017-08-14]
CHR Extension: (Outlook People) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\giafdibgibbipnlecfckidkecmpkedho [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjaejhlejagppekogippmigjbkdjmcdk [2017-08-14]
CHR Extension: (Open PayPal) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glghgmejmmepalcnengjekjfmfbailbl [2017-08-14]
CHR Extension: (Google Wallet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhhiiglleiipdnodkaabbbbjhepnbcb [2017-08-14]
CHR Extension: (Save to Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2017-08-14]
CHR Extension: (Bookmark Manager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2017-08-14]
CHR Extension: (UnRAR and RAR Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\goeclnlkhfoejbhdebemhjljlmcbhfkp [2017-08-14]
CHR Extension: (Drive Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpgjomejfimnbmobcocilppikhncegaj [2017-08-14]
CHR Extension: (Win10 Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpjminmgekffdgiancflhaojkgjcdgmc [2017-08-14]
CHR Extension: (Microsoft Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplepoifohkaepkncehnpljceeljlabi [2017-08-14]
CHR Extension: (WC Forums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbiinloenjigabpbdlogbimfgbopcfce [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfbcjnjfeolgeoddhcdjpogocmpkmncp [2017-08-14]
CHR Extension: (GSSH.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmckcabobcmbdlimkenccopfnpokmie [2017-08-14]
CHR Extension: (GV Phone) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmpoeaghekodfplkofpeabpnipphcjh [2017-08-14]
CHR Extension: (Outlook Tasks) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkaimcgnicopmhblimdmfjahhifkfcoi [2017-08-14]
CHR Extension: (Dead Skin) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnjjcekgbjlpiegjcdmmpojndajlndok [2017-08-14]
CHR Extension: (RomsEShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hohhmomfljojjeaaehdcocalfpejjccc [2017-08-14]
CHR Extension: (USPS Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\idammebdkcmcjhminehllfamifenkhbn [2017-08-14]
CHR Extension: (Android Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbnciaeojfhgeihkflgcgajopfjeohg [2017-08-14]
CHR Extension: (Get Human) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifcelejocgjieghblljgkemmnlejjlep [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igabecodgkgfkdhglpojbnbobbnaajai [2017-08-14]
CHR Extension: (SEGA Bandonware) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igelfoafbodelegelfonpkanedmogdpm [2017-08-14]
CHR Extension: (OMG! Chrome!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igpknfbadalohcopbkaepbgblomnbdma [2017-08-14]
CHR Extension: (Frontier Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihjgglhacdljfhmlinhcagchbkcgdhio [2017-08-14]
CHR Extension: (Zip, UnZip App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiaianhgacnhnnhejddkghikgnhgpeaa [2017-08-14]
CHR Extension: (Bible Questions Answered) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiipijolbcononkgjpepkplcchmajanm [2017-08-14]
CHR Extension: (Apps Launcher) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijmgkhchjindcjamnckoiahagecjnkdc [2017-08-14]
CHR Extension: (Office Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikhblhjgapcilfennndodceemdoomngn [2017-08-14]
CHR Extension: (Excel Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2017-08-14]
CHR Extension: (PC Help Forum) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\illdlgkhakmollnophmajedfblhpijak [2017-08-14]
CHR Extension: (COSwallpapers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\inpceamnbdnjkljfebkpdgfnnfckopap [2017-08-14]
CHR Extension: (HTML5 Flash Warning Fix for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipdkokhdeppifjgcmhbfgmjmdllfpkln [2017-08-14]
CHR Extension: (File System for OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdfcehgafdbfpniaimfbfomafoadgo [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbjamgmfdlbplimhkomcjjlemjaddogn [2017-08-14]
CHR Extension: (PCTechForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jecdgjmkjbcagbkoifleegbplpnaobfa [2017-08-14]
CHR Extension: (Microsoft Update Catalog) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhgndoofkbbhhfcoldgjcakejekefcd [2017-08-14]
CHR Extension: (SSF2 Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgplhfbmmkajpgnpldoaafagambccjje [2017-08-14]
CHR Extension: (BibleGateway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjmdfkmnphhfgilhfofaiffmhjlnopan [2017-08-14]
CHR Extension: (SM Trial Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljcdndcgbkbjonffogpnljganhabgmj [2017-08-14]
CHR Extension: (Save to Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfikkaogpplgnfjmbjdpalkhclendgd [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jomemcnjdjkjipodmcpfjhioloioplfh [2017-08-14]
CHR Extension: (CDFF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kahonebhcmapeomaemhjakphnpffhhhf [2017-08-14]
CHR Extension: (My Sway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcnmjbpdljgcffbninlkelpbfmbbbohp [2017-08-14]
CHR Extension: (North Pole Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdggiihhdpfglclmfghofjbiagonaplo [2017-08-14]
CHR Extension: (Chrome Web Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfknblmmckdmlklbncfodpomfoejlbgm [2017-08-14]
CHR Extension: (Range Extender Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgaimanaoiiecgbljbpjhkdicaogkinf [2017-08-14]
CHR Extension: (4Shared) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khdleokphdcnmagagajnchlcmacfphan [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khomnbdfmhfppiemgglncdlbbnppffdo [2017-08-14]
CHR Extension: (Pure Flix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiiijkmmlfiofadnffcomgcmdlppddhd [2017-08-14]
CHR Extension: (Novelty, OH Weather Conditions & Fore...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkphahjiaiaahfhcbedhbgfpodbojbje [2017-08-14]
CHR Extension: (MyAptoideBU) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpdcjojlnaceggdkglndamdmaonfnpi [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2017-08-14]
CHR Extension: (GSSH2.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\laekopehhnfklajodmbbhdfhmkfbnblc [2017-08-14]
CHR Extension: (Wake Up!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbbcfplbfbmimpnlammmeaheakhcogke [2017-08-14]
CHR Extension: (AnimeDub Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbdcckpbjegpnhhdejaipegkabkofhla [2017-08-14]
CHR Extension: (Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lddagfjihimnacaabfnfagjcokfmnekc [2017-08-14]
CHR Extension: (Aptoide) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhhjndfejaoaiaaokjmhoiedppdmknki [2017-08-14]
CHR Extension: (AnimeDub) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhnnmimodonfbnmpgmcjahlblaenkgle [2017-08-14]
CHR Extension: (Files2Zip) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhoadfgjeimckjlphkdebfmhbpeniljo [2017-08-14]
CHR Extension: (USPS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\liocengmpmiiejdoebmlifecbmcpfigg [2017-08-14]
CHR Extension: (Wikipedia Search) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lipakennkogpodadpikgipnogamhklmk [2017-08-14]
CHR Extension: (MSN Games - Free Online Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkbgddpallgbhlldcnnjomnodmohpklf [2017-08-14]
CHR Extension: (IHeart Christmas) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lndoiaoagbajoadpgmfgckfckmchepmj [2017-08-14]
CHR Extension: (Google Maps) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2017-08-14]
CHR Extension: (SSB) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lockfglcfjlaagpghflagedkkgojipke [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\locmdgkcjcjacipaokcoochhjhpklbih [2017-08-14]
CHR Extension: (B1 File Extracter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbgobeedadfbponkgffobhpmokjmlhol [2017-08-14]
CHR Extension: (Documents Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbhgihpdipbgifogehncdehebkpehoap [2017-08-14]
CHR Extension: (GoogleDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbogpnkehmjcidggfooapenefhckeehd [2017-08-14]
CHR Extension: (PowerPoint Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2017-08-14]
CHR Extension: (Messenger (Unofficial)) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdapmeleikeppmfgadilffngabfpibok [2017-08-14]
CHR Extension: (GoogleFuchsia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mejnaonfdocegokbjldkeafifpnfnpan [2017-08-14]
CHR Extension: (CN Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mekgfnmophledbpkmikhnfkimoahjohn [2017-08-14]
CHR Extension: (CraigTechShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfbfebnljjciechbmlehdcmnmdhacgmi [2017-08-14]
CHR Extension: (COMODO DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfnnnpncpeeecbbdepenkkgpjoenkbbo [2017-08-14]
CHR Extension: (T-Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhpgceapcpooallmggianccbakegnhnb [2017-08-14]
CHR Extension: (V.FreeMovies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkopchcfcbchhnbpldmdjfbdhgkcpgkn [2017-08-14]
CHR Extension: (CB Central) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlieflpkidahjkojakjlpnlnchobihbl [2017-08-14]
CHR Extension: (ZIP Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmfcakoljjhncfphlflcedhgogfhpbcd [2017-08-14]
CHR Extension: (GC Options) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmmanlicckcagdkabbemhccfpmgojncl [2017-08-14]
CHR Extension: (My Google Account) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnepgpaicadoimgdlajhkgokfenaadkh [2017-08-14]
CHR Extension: (PogoTM) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmklochmlghbgebbmkldomoihjbgfie [2017-08-14]
CHR Extension: (Nintendo Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mogfngbfndeeecglaejajbioegpimija [2017-08-14]
CHR Extension: (What's on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbeopbccnmkgdlbpicobflenbjceoaka [2017-08-14]
CHR Extension: (Chrome OS Features) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbjdhanphhipjfkmicljakgnbaicfojk [2017-08-14]
CHR Extension: (Ws on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncjendjahmgpgjdeenknmdoecofmfdod [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2017-08-14]
CHR Extension: (Reload It) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nconjighkgcoppohfilfinlimdfmjafg [2017-08-14]
CHR Extension: (Games4Summer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndphblldagopagiodebolhdjohgindbm [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2017-08-14]
CHR Extension: (UNetbootin - Homepage and Downloads) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhanbcbjhjcgpccibphcicainkkinool [2017-08-14]
CHR Extension: (SupportSpace) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nigmaeimafjgjfodjfhnancnahfeindg [2017-08-14]
CHR Extension: (FedEx Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikgcnimkfeopobooaahjpbdkdfhchao [2017-08-14]
CHR Extension: (SEGA Online Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nilhogoffgcdfgmejcjpidfaiefpccpl [2017-08-14]
CHR Extension: (WeatherBug) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\njkkjobcechefaoknodniidfjapgfoco [2017-08-14]
CHR Extension: (Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nklbmhejmcjofglijalidajdlihahnpd [2017-08-14]
CHR Extension: (Archive Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknadlalodfadgegkigkmbhofcmkhfnc [2017-08-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-14]
CHR Extension: (Win10 Pro keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnelnnlfcdhjfbfglandknndlonidojg [2017-08-14]
CHR Extension: (Toonova) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobhijfkaffjbkocimaaembibggenkdc [2017-08-14]
CHR Extension: (Frontier) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nofcknkefjengmgmlnmdmgbmlakhhnok [2017-08-14]
CHR Extension: (SM63.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\noijjjifnenaafboiipobhiflmiaimof [2017-08-14]
CHR Extension: (Chrome OS EOL) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\npmnpehbihaieehmoaifdkdlcgndmpjn [2017-08-14]
CHR Extension: (System) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocjnemjmlhjkeilmaidemofakmpclcbi [2017-08-14]
CHR Extension: (COMODO GeekBuddy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oebmcdnandbcnfmpjecmmhcoogfneelj [2017-08-14]
CHR Extension: (Google Santa Tracker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehagbcimlpafjbdijnjmaboblcfdnoh [2017-08-14]
CHR Extension: (PDF Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oemmndcbldboiebfnladdacbdfmadadm [2017-08-14]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2017-08-15]
CHR Extension: (App Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogffnakkboiaoifjbhjbahamkdojaemm [2017-08-14]
CHR Extension: (EPForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oimkklcnelpdlkkbjjablakandmmddio [2017-08-14]
CHR Extension: (Fullscreen Anything) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\olcfgpmjldkkjdclidhcbonieibfhhdh [2017-08-14]
CHR Extension: (SM 63) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oldjcgpcnneleakkepogfghcehnjcngf [2017-08-14]
CHR Extension: (YouTube™ Flash-HTML5) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\omimccinlhlkpjaeaocglgmkbelejlhj [2017-08-14]
CHR Extension: (Christian Date) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ompnolbokepechjidcgpaddaaeoocajn [2017-08-14]
CHR Extension: (Consumer AV Providers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ongfjpmgcneinonelpaljjdaigppnneo [2017-08-14]
CHR Extension: (Putlocker ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookjcnljofpnadeabapgadihfhngblfe [2017-08-14]
CHR Extension: (Nintendo RomShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pahokmgpomeaakdfnahejklhcifhaige [2017-08-14]
CHR Extension: (Microsoft Office Home) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\palennhedgekbnbmokheidadmghcncgl [2017-08-14]
CHR Extension: (I Heart Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcbnpgdibikphcelmkjldlfjjepjipl [2017-08-14]
CHR Extension: (Click&Clean App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-08-14]
CHR Extension: (Shortcuts for Google™ Products) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdlecffodcfabchelafoljcdphfpkpcl [2017-08-14]
CHR Extension: (Date Countdown) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfbpikfaigmikdjkghbkbapjhfoglipj [2017-08-14]
CHR Extension: (Data Saver) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmgfdlgomnbgkofeojodiodmgpgmkac [2017-08-14]
CHR Extension: (Outlook.com) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\phfegmcgballapgnbppeeidckejebknn [2017-08-14]
CHR Extension: (Super Smash Bros For NDS !!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pifamkpimegbfnakceigajiljjodcfla [2017-08-14]
CHR Extension: (Gmail) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-14]
CHR Extension: (Chrome Media Router) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-14]
CHR Extension: (OMG! Ubuntu!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmoodaljflkhbojjaiibgnlindbhebme [2017-08-14]
CHR Extension: (EBay) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppaellakmlibbcfkgkmbkkllnhcmghca [2017-08-14]
CHR Extension: (Google Contacts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppbiamkfhlcpgijakdgbbffikmkkofnl [2017-08-14]
CHR Extension: (Apps On Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppmdjabijijblhfhnbgcpnoamkibcclm [2017-08-14]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdvancedSystemCareService10; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [462624 2017-03-21] (IObit)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [10501104 2017-07-11] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2017-07-11] (COMODO)
R2 csssrv; C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe [3210936 2017-06-30] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2273432 2017-08-08] (Comodo)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [356352 2017-08-02] (Intel Corporation)
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-07-05] (COMODO)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324576 2017-08-02] (Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-04-11] (Microsoft Corporation)
R2 SlimWareServices; C:\Program Files\SlimWare Utilities\Services\SlimWare.Services.exe [79704 2017-07-31] (SlimWare Utilities Holdings, Inc.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269912 2017-01-17] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-19] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-09-09] (/n software, Inc.)
R1 cmdcss; C:\WINDOWS\system32\drivers\cmdcss.sys [126056 2017-03-31] (COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [40936 2017-06-02] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [831992 2017-06-02] (COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [50776 2017-06-02] (COMODO)
S3 dot4; C:\WINDOWS\System32\drivers\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [72584 2017-01-12] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [67976 2017-01-12] (Intel Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77376 2017-06-27] ()
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7407080 2017-08-02] (Intel Corporation)
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [132880 2017-06-07] (COMODO)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [62208 2017-03-29] (COMODO)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [188352 2017-08-16] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [101784 2017-08-16] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [45472 2017-08-16] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-16] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93600 2017-08-16] (Malwarebytes)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [947712 2017-02-15] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [420832 2017-08-02] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [6804480 2017-05-03] (Realtek Semiconductor Corporation )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [60504 2017-01-17] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [64088 2017-01-17] (Synaptics Incorporated)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2015-10-15] (Intel Corporation)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [18624 2016-09-09] (/n software, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30392 2017-04-25] (HP)
S3 WiseUnlock; C:\WINDOWS\WiseUnlock64.sys [33864 2017-08-15] (WiseCleaner.com)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 15:21 - 2017-08-16 15:24 - 000054927 _____ C:\Users\eddie\Desktop\FRST.txt
2017-08-16 15:21 - 2017-08-16 15:21 - 000000000 ____D C:\FRST
2017-08-16 15:18 - 2017-08-16 15:19 - 002395648 _____ (Farbar) C:\Users\eddie\Desktop\FRST64.exe
2017-08-16 12:40 - 2017-08-16 12:40 - 009791816 _____ (Piriform Ltd) C:\Users\eddie\Downloads\ccsetup533.exe
2017-08-16 01:03 - 2017-08-16 01:03 - 000000000 ___HD C:\OneDriveTemp
2017-08-16 01:01 - 2017-08-16 01:01 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-08-16 00:53 - 2017-08-16 00:53 - 000003656 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default\AppData\Roaming\IObit
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default User\AppData\Roaming\IObit
2017-08-16 00:29 - 2017-08-16 00:29 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-08-16 00:28 - 2017-08-16 13:45 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-08-16 00:28 - 2017-08-16 01:01 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-08-16 00:27 - 2017-08-16 01:01 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-08-16 00:27 - 2017-08-16 00:27 - 000001927 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-16 00:27 - 2017-06-27 12:06 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-08-16 00:25 - 2017-08-16 01:01 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-16 00:24 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-15 23:54 - 2017-06-19 22:05 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2017-08-15 23:54 - 2017-03-18 13:58 - 000587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2017-08-15 23:54 - 2017-03-18 13:58 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxinit.dll
2017-08-15 18:07 - 2017-08-15 18:13 - 000000000 ____D C:\Users\eddie\AppData\Local\PackageStaging
2017-08-15 12:57 - 2017-08-15 12:59 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000033864 _____ (WiseCleaner.com) C:\WINDOWS\WiseUnlock64.sys
2017-08-15 12:57 - 2017-08-15 12:57 - 000001287 _____ C:\Users\Public\Desktop\Wise Force Deleter.lnk
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\Program Files (x86)\Wise
2017-08-15 03:39 - 2017-08-15 03:39 - 000000000 ____D C:\WINDOWS\System32\Tasks\Games
2017-08-15 03:29 - 2017-08-15 03:29 - 000000000 ____D C:\WINDOWS\System32\Tasks\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000001357 _____ C:\Users\eddie\Desktop\Auslogics Disk Defrag.lnk
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\Program Files (x86)\Auslogics
2017-08-15 03:21 - 2017-08-15 03:21 - 000000000 ___HD C:\VTRoot
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ____D C:\Program Files (x86)\Realtek
2017-08-15 02:25 - 2017-02-15 21:50 - 000947712 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2017-08-15 02:25 - 2017-02-15 21:50 - 000082536 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2017-08-15 02:23 - 2017-08-15 02:23 - 000000000 ____D C:\ProgramData\SlimWare Utilities Inc
2017-08-15 01:46 - 2017-08-15 01:46 - 005373952 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2017-08-15 01:17 - 2017-08-15 01:30 - 000000000 ____D C:\Users\eddie\AppData\Local\CrashDumps
2017-08-15 00:48 - 2017-08-15 00:48 - 000001796 _____ C:\Users\eddie\Desktop\Virtual Kiosk.lnk
2017-08-15 00:31 - 2017-08-15 00:31 - 000002374 _____ C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-08-14 22:18 - 2017-08-15 01:37 - 000003474 _____ C:\WINDOWS\System32\Tasks\ASC10_AutoCare
2017-08-14 22:09 - 2017-08-14 22:09 - 000000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2017-08-14 22:01 - 2017-08-14 22:01 - 000002908 _____ C:\WINDOWS\System32\Tasks\ASC10_SkipUac_eddie
2017-08-14 22:01 - 2017-08-14 22:01 - 000000000 ____D C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
2017-08-14 22:00 - 2017-08-14 22:01 - 000002249 _____ C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
2017-08-14 22:00 - 2017-08-14 22:00 - 000003114 _____ C:\WINDOWS\System32\Tasks\ASC10_PerformanceMonitor
2017-08-14 22:00 - 2017-08-14 22:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2017-08-14 21:54 - 2017-08-16 15:20 - 000062144 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2017-08-14 21:40 - 2017-08-14 21:40 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2017-08-14 21:40 - 2017-08-14 21:40 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2017-08-14 21:38 - 2017-08-14 21:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Comodo
2017-08-14 21:27 - 2017-08-16 15:21 - 001336640 _____ C:\WINDOWS\system32\Drivers\sfi.dat
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\Program Files\COMODO
2017-08-14 21:26 - 2017-06-30 07:08 - 000332472 _____ (COMODO) C:\WINDOWS\system32\cmdkbdcss64.dll
2017-08-14 21:26 - 2017-06-30 07:08 - 000263352 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdkbdcss32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000432104 _____ (COMODO) C:\WINDOWS\system32\cssguard64.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000338560 _____ (COMODO) C:\WINDOWS\SysWOW64\cssguard32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000048728 _____ (COMODO) C:\WINDOWS\system32\csscsr64.dll
2017-08-14 21:26 - 2017-03-31 23:15 - 000126056 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdcss.sys
2017-08-14 21:25 - 2017-08-14 21:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Comodo
2017-08-14 21:21 - 2017-08-14 21:35 - 000000480 _____ C:\WINDOWS\Tasks\DriverUpdate Scan.job
2017-08-14 21:21 - 2017-08-14 21:21 - 000003258 _____ C:\WINDOWS\System32\Tasks\DriverUpdate Scan
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Shared Space
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Comodo Downloader
2017-08-14 21:20 - 2017-08-15 16:19 - 000000000 ____D C:\Program Files\DriverUpdate
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\Users\eddie\AppData\Local\SlimWare Utilities Inc
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\Program Files\SlimWare Utilities
2017-08-14 21:19 - 2017-08-15 01:44 - 000000000 ____D C:\ProgramData\COMODO
2017-08-14 21:19 - 2017-08-15 00:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-08-14 21:19 - 2017-08-14 21:47 - 000000000 ____D C:\Program Files (x86)\COMODO
2017-08-14 21:19 - 2017-07-05 00:30 - 000256040 _____ (COMODO) C:\WINDOWS\system32\iseguard64.dll
2017-08-14 21:19 - 2017-07-05 00:29 - 000205536 _____ (COMODO) C:\WINDOWS\SysWOW64\iseguard32.dll
2017-08-14 21:19 - 2017-03-29 14:49 - 000062208 _____ (COMODO) C:\WINDOWS\system32\Drivers\isedrv.sys
2017-08-14 17:10 - 2017-08-14 17:11 - 000002676 _____ C:\Users\eddie\Desktop\PC Help Forum.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001006 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-14 16:12 - 2017-08-14 16:12 - 000000859 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Explorer.lnk
2017-08-14 14:46 - 2017-08-14 15:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
2017-08-14 14:41 - 2017-08-14 14:41 - 000002357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-14 14:41 - 2017-08-14 14:41 - 000002345 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-14 14:40 - 2017-08-14 14:40 - 000003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-08-14 14:40 - 2017-08-14 14:40 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-08-14 14:28 - 2017-08-14 14:28 - 000000000 ____D C:\WINDOWS\Panther
2017-08-14 14:15 - 2017-08-14 14:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-14 14:15 - 2017-08-14 14:15 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Sun
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-08-14 14:15 - 2017-08-14 14:14 - 000110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2017-08-14 14:14 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\ProgramData\Oracle
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\Program Files\Java
2017-08-14 04:00 - 2017-08-14 04:00 - 000041800 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2017-08-14 03:49 - 2017-08-14 03:49 - 000000000 ____D C:\Users\eddie\AppData\Local\PeerDistRepub
2017-08-14 02:55 - 2017-08-14 02:55 - 069640192 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000491520 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000065536 _____ C:\WINDOWS\system32\config\SAM.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2017-08-14 02:53 - 2017-08-16 02:56 - 000000000 ____D C:\Users\eddie\AppData\Local\ClassicShell
2017-08-14 02:53 - 2017-08-16 02:33 - 000000000 ____D C:\ProgramData\ClassicShell
2017-08-14 02:53 - 2017-08-14 02:53 - 000000000 ____D C:\Users\eddie\AppData\Roaming\ClassicShell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\Program Files\Classic Shell
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\BDLogging
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
2017-08-14 02:26 - 2017-08-14 02:26 - 000565416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-08-14 02:18 - 2017-08-14 04:54 - 000002956 _____ C:\WINDOWS\System32\Tasks\CCleanerClean
2017-08-14 02:18 - 2017-08-14 04:54 - 000000258 _____ C:\WINDOWS\Tasks\CCleanerClean.job
2017-08-14 02:05 - 2017-08-16 12:42 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-14 02:05 - 2017-08-16 12:39 - 000000000 ____D C:\Program Files\CCleaner
2017-08-14 02:05 - 2017-08-14 02:05 - 000002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-08-14 02:05 - 2017-08-14 02:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-14 01:52 - 2017-08-14 01:52 - 000001129 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Users\eddie\AppData\Local\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Program Files\VS Revo Group
2017-08-14 01:52 - 2016-12-21 14:52 - 000040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2017-08-14 01:46 - 2017-08-14 01:46 - 000000000 ____D C:\Users\eddie\AppData\Local\MicrosoftEdge
2017-08-14 01:45 - 2017-08-14 21:59 - 000000000 ____D C:\ProgramData\IObit
2017-08-14 01:45 - 2017-08-14 04:53 - 000000000 ____D C:\Program Files (x86)\IObit
2017-08-14 01:45 - 2017-08-14 02:45 - 000000000 ____D C:\ProgramData\ProductData
2017-08-14 01:45 - 2017-08-14 02:33 - 000000000 ____D C:\Users\eddie\AppData\Roaming\IObit
2017-08-14 01:45 - 2017-08-14 01:45 - 000000000 ____D C:\ProgramData\{EAAB5A83-3809-4B0E-83A6-E4B0DBF2157E}
2017-08-14 01:37 - 2017-08-14 01:37 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\3C64355F.sys
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\TAP-Windows
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2017-08-14 01:23 - 2017-08-14 01:23 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\Users\eddie\AppData\Roaming\WinRAR
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 01:22 - 2017-08-14 01:23 - 000000000 ____D C:\Program Files\WinRAR
2017-08-14 01:16 - 2017-08-14 01:16 - 000000634 _____ C:\Users\eddie\OneDrive\Documents\MagicActions-Options.json
2017-08-14 01:02 - 2017-08-14 04:57 - 000000000 ____D C:\Users\eddie\AppData\Local\pCloud
2017-08-14 00:56 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Google
2017-08-14 00:56 - 2017-08-14 00:56 - 000000000 ____D C:\WINDOWS\InfusedApps
2017-08-14 00:54 - 2017-08-14 00:54 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-08-14 00:54 - 2017-08-13 23:58 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-08-14 00:52 - 2017-08-14 00:52 - 000000000 ____D C:\Program Files\Synaptics
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\Program Files (x86)\HP
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\WINDOWS\Setup
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\Users\eddie\AppData\Local\DBG
2017-08-14 00:49 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Google
2017-08-14 00:49 - 2017-08-14 14:40 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-14 00:48 - 2017-08-14 00:49 - 000000000 ____D C:\Users\eddie\AppData\Local\Deployment
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Macromedia
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Local\Apps\2.0
2017-08-14 00:46 - 2017-08-16 12:16 - 000004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{FA13B12A-B6F1-4CA4-9E37-D55E2EE30D0B}
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\OCR
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\MSBuild
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pCloud
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\Program Files (x86)\pCloud Drive
2017-08-14 00:43 - 2016-09-09 16:33 - 000018848 _____ (/n software, Inc.) C:\WINDOWS\system32\elevtmsg.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000235424 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000196000 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000134560 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:31 - 000170400 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:23 - 000460992 _____ (/n software, Inc.) C:\WINDOWS\system32\Drivers\cbfs6.sys
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\DigitalLocker
2017-08-14 00:37 - 2017-07-31 08:15 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-08-14 00:37 - 2017-07-31 08:15 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-14 00:32 - 2017-08-14 00:55 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-08-14 00:32 - 2017-08-14 00:27 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2017-08-14 00:32 - 2017-08-14 00:27 - 000015940 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2017-08-14 00:32 - 2017-08-14 00:27 - 000004096 _____ C:\WINDOWS\system32\config\VSMIDK
2017-08-14 00:32 - 2017-08-14 00:27 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2017-08-14 00:32 - 2017-08-14 00:27 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2017-08-14 00:32 - 2017-08-14 00:27 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2017-08-14 00:32 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-14 00:31 - 2017-08-16 00:55 - 000000000 ___RD C:\Program Files (x86)
2017-08-14 00:31 - 2017-08-15 01:44 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2017-08-14 00:31 - 2017-08-14 14:36 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-08-14 00:31 - 2017-08-14 03:25 - 000000000 ____D C:\WINDOWS\appcompat
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files (x86)\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\migwiz
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\Provisioning
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\SystemApps
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\dsc
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\IME
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\Help
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 __RSD C:\WINDOWS\Media
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\AppV
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\ias
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\DDFs
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\Registration
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\L2Schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Web
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Vss
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\tracing
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\TAPI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SystemResources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\winevt
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\System
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SKB
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SchCache
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Resources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\RemotePackages
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\PLA
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Performance
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\ModemLogs
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Globalization
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Cursors
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Branding
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\bcastdvr
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\addins
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Common Files\Services
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:27 - 000000219 _____ C:\WINDOWS\system.ini
2017-08-14 00:31 - 2017-08-14 00:27 - 000000092 _____ C:\WINDOWS\win.ini
2017-08-14 00:31 - 2017-08-14 00:20 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-08-14 00:31 - 2017-08-14 00:19 - 000000000 __RHD C:\Users\Public\Libraries
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\spool
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\CSC
2017-08-14 00:31 - 2017-08-14 00:10 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOPrivate
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\PrintDialog
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\MiracastView
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-14 00:31 - 2017-08-14 00:05 - 000000000 ____D C:\WINDOWS\HoloShell
2017-08-14 00:30 - 2017-08-14 00:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Skype
2017-08-14 00:28 - 2017-08-15 23:08 - 000000000 ____D C:\WINDOWS\INF
2017-08-14 00:27 - 2017-08-14 00:27 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-08-14 00:26 - 2017-08-14 00:26 - 000000000 ____D C:\Users\eddie\AppData\Local\Comms
2017-08-14 00:25 - 2017-08-14 13:58 - 000908880 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-14 00:25 - 2017-08-14 00:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Publishers
2017-08-14 00:24 - 2017-08-15 18:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Packages
2017-08-14 00:24 - 2017-08-14 04:56 - 000000000 ____D C:\Users\eddie\AppData\Local\ConnectedDevicesPlatform
2017-08-14 00:24 - 2017-08-14 00:24 - 000000020 ___SH C:\Users\eddie\ntuser.ini
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Synaptics
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Adobe
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\VirtualStore
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\TileDataLayer
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\ProgramData\Synaptics
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\Default User
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\All Users
2017-08-14 00:21 - 2017-08-16 01:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-14 00:20 - 2017-08-14 00:20 - 000026274 _____ C:\Users\eddie\OneDrive\Documents\Removed Apps.html
2017-08-14 00:18 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-14 00:15 - 2017-08-15 22:52 - 000000000 ____D C:\Users\eddie
2017-08-14 00:12 - 2017-08-16 00:58 - 082051072 _____ C:\WINDOWS\system32\config\SYSTEM
2017-08-14 00:12 - 2017-08-16 00:58 - 071827456 _____ C:\WINDOWS\system32\config\SOFTWARE
2017-08-14 00:12 - 2017-08-16 00:58 - 009175040 _____ C:\WINDOWS\system32\config\BBI
2017-08-14 00:12 - 2017-08-16 00:58 - 001572864 _____ C:\WINDOWS\system32\config\DEFAULT
2017-08-14 00:12 - 2017-08-16 00:58 - 000057344 _____ C:\WINDOWS\system32\config\SECURITY
2017-08-14 00:12 - 2017-08-14 00:54 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2017-08-14 00:12 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\servicing
2017-08-14 00:12 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\SMI
2017-08-14 00:12 - 2017-08-14 00:23 - 000000000 ___HD C:\$Windows.~BT
2017-08-14 00:12 - 2017-08-14 00:22 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-08-14 00:09 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOShared
2017-08-14 00:04 - 2017-08-14 00:04 - 000021910 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2017-08-14 00:04 - 2017-08-14 00:04 - 000002065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2017-08-14 00:04 - 2017-08-14 00:04 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\ProgramData\SRS Labs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\Program Files\Realtek
2017-08-14 00:04 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____D C:\Program Files\Intel
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2017-08-14 00:02 - 2017-03-18 13:56 - 002233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-08-13 23:58 - 2017-08-16 15:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-13 22:50 - 2017-08-14 00:57 - 000000000 ___HD C:\$SysReset
2017-08-13 08:49 - 2017-08-13 08:49 - 000291128 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper64.dll
2017-08-13 08:49 - 2017-08-13 08:49 - 000248120 _____ (IvoSoft) C:\WINDOWS\SysWOW64\StartMenuHelper32.dll
2017-08-13 01:40 - 2017-08-15 00:06 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\Mozilla
2017-08-12 23:19 - 2017-08-15 02:24 - 000000000 ___HD C:\SWSetup
2017-08-12 22:31 - 2017-08-14 00:19 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Restore Explorer
2017-08-09 02:19 - 2017-08-14 01:45 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\IObit
2017-08-08 22:10 - 2017-07-31 19:36 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-08-08 22:10 - 2017-07-31 19:34 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-08-08 22:10 - 2017-07-31 19:20 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-08-08 22:10 - 2017-07-31 19:18 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-08-08 22:10 - 2017-07-31 19:18 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-08-08 22:10 - 2017-07-31 19:13 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-08-08 22:10 - 2017-07-31 19:07 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-08 22:10 - 2017-07-31 19:06 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-08-08 22:10 - 2017-07-31 19:03 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-08-08 22:10 - 2017-07-31 18:30 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-08 22:09 - 2017-07-31 19:39 - 008319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-08 22:09 - 2017-07-31 19:38 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:38 - 000382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-08 22:09 - 2017-07-31 19:36 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:36 - 000119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-08 22:09 - 2017-07-31 19:35 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:35 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:34 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:33 - 000473240 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:32 - 002444704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-08 22:09 - 2017-07-31 19:32 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:32 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-08 22:09 - 2017-07-31 19:31 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 002645680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000723680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000410160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000315288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000143736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000082336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-08 22:09 - 2017-07-31 19:26 - 000204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 19:17 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 19:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 19:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-08-08 22:09 - 2017-07-31 19:10 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 19:09 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-08-08 22:09 - 2017-07-31 19:08 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:57 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-08 22:09 - 2017-07-31 18:45 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-08 22:09 - 2017-07-31 18:44 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 18:44 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2017-08-08 22:09 - 2017-07-31 18:44 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-08 22:09 - 2017-07-31 18:42 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 017366528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-08 22:09 - 2017-07-31 18:39 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-08 22:09 - 2017-07-31 18:36 - 023681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-08 22:09 - 2017-07-31 18:35 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-08-08 22:09 - 2017-07-31 18:34 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 007336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 012786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 001396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 008209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 002055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-08 22:09 - 2017-07-31 18:30 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-08-08 22:09 - 2017-07-31 18:26 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-08 22:09 - 2017-07-31 18:25 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-08 16:27 - 2017-08-08 16:28 - 000000000 ___HD C:\7e1b197988dcf5ad4a9391ddfe6621
2017-08-03 10:27 - 2017-07-27 22:20 - 000279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-03 10:27 - 2017-07-27 21:36 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll
2017-08-03 10:27 - 2017-07-27 21:26 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:21 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:20 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-08-03 10:27 - 2017-07-27 21:08 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-03 10:26 - 2017-07-27 21:40 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-08-03 10:26 - 2017-07-27 21:36 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2017-08-03 10:26 - 2017-07-27 21:33 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-08-03 10:26 - 2017-07-27 21:27 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-03 10:26 - 2017-07-27 21:20 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IpNatHlpClient.dll
2017-08-03 10:26 - 2017-07-27 21:19 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2017-08-03 10:26 - 2017-07-27 21:18 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2017-08-03 10:26 - 2017-07-27 21:13 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2017-08-03 10:26 - 2017-07-27 21:12 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-08-03 10:26 - 2017-07-27 21:10 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-08-03 10:26 - 2017-07-27 21:08 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-08-03 10:26 - 2017-07-27 21:02 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2017-08-03 10:25 - 2017-07-27 22:23 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-03 10:25 - 2017-07-27 22:15 - 000554400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-03 10:25 - 2017-07-27 22:07 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2017-08-03 10:25 - 2017-07-27 21:47 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-08-03 10:25 - 2017-07-27 21:37 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-08-03 10:25 - 2017-07-27 21:35 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2017-08-03 10:25 - 2017-07-27 21:33 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-08-03 10:25 - 2017-07-27 21:19 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:25 - 2017-07-27 21:16 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-08-03 10:25 - 2017-07-27 21:15 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:25 - 2017-07-27 21:13 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-08-03 10:25 - 2017-07-27 21:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll
2017-08-03 10:25 - 2017-07-27 21:09 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-08-03 10:24 - 2017-07-27 21:40 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-08-03 10:24 - 2017-07-27 21:38 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-08-03 10:24 - 2017-07-27 21:35 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-08-03 10:24 - 2017-07-27 21:33 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-08-03 10:24 - 2017-07-27 21:17 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-08-03 10:24 - 2017-07-27 21:15 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-08-03 10:24 - 2017-07-27 21:14 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-08-03 10:24 - 2017-07-27 21:13 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-08-03 10:24 - 2017-07-27 21:12 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-08-03 10:24 - 2017-07-27 21:11 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-08-03 10:24 - 2017-07-27 21:07 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-08-03 10:24 - 2017-07-27 21:05 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-08-03 10:23 - 2017-07-27 21:36 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-08-03 10:22 - 2017-07-27 21:24 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-03 10:21 - 2017-07-27 21:21 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-03 10:20 - 2017-07-27 22:10 - 002679200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-03 10:20 - 2017-07-27 21:19 - 000942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-03 10:20 - 2017-07-27 21:19 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-03 10:20 - 2017-07-27 21:16 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-03 10:18 - 2017-07-27 22:09 - 000529992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-03 10:17 - 2017-07-27 22:25 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-03 10:17 - 2017-07-27 21:25 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-03 10:17 - 2017-07-27 21:19 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 002604248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-03 10:16 - 2017-07-27 22:09 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-08-03 10:16 - 2017-07-27 21:21 - 008333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-03 10:16 - 2017-07-27 21:13 - 004535296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-03 10:16 - 2017-07-27 21:12 - 002939392 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000455584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000116280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-03 10:14 - 2017-07-27 22:17 - 000660680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-03 10:14 - 2017-07-27 22:09 - 000527976 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-03 10:14 - 2017-07-27 21:48 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2017-08-03 10:14 - 2017-07-27 21:22 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-03 10:14 - 2017-07-27 21:19 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-03 10:14 - 2017-07-27 21:18 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-03 10:14 - 2017-07-27 21:07 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-03 10:13 - 2017-07-27 22:24 - 002327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-03 10:13 - 2017-07-27 22:13 - 001033544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-03 10:13 - 2017-07-27 21:21 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-03 10:13 - 2017-07-27 21:19 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-03 10:13 - 2017-07-27 21:07 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-03 10:12 - 2017-07-27 22:23 - 002969888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-03 10:12 - 2017-07-27 22:16 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-03 10:12 - 2017-07-27 22:15 - 005302968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-03 10:12 - 2017-07-27 22:14 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-03 10:12 - 2017-07-27 22:12 - 001325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-03 10:12 - 2017-07-27 21:26 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-03 10:12 - 2017-07-27 21:24 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:12 - 2017-07-27 21:14 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-03 10:12 - 2017-07-27 21:12 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-03 10:12 - 2017-07-27 21:06 - 001833984 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-03 10:10 - 2017-07-27 22:24 - 000119904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-03 10:10 - 2017-07-27 22:22 - 000923048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000192264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000104432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-03 10:10 - 2017-07-27 22:12 - 021353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-03 10:10 - 2017-07-27 21:29 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-03 10:10 - 2017-07-27 21:24 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:24 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-08-03 10:10 - 2017-07-27 21:21 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-03 10:10 - 2017-07-27 21:19 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:10 - 2017-07-27 21:15 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-03 10:10 - 2017-07-27 21:08 - 000600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-03 10:09 - 2017-07-27 22:12 - 000323936 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-03 10:09 - 2017-07-27 21:25 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-03 10:09 - 2017-07-27 21:24 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-03 10:09 - 2017-07-27 21:23 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-03 10:09 - 2017-07-27 21:22 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-03 10:09 - 2017-07-27 21:21 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-03 10:09 - 2017-07-27 21:17 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-03 10:09 - 2017-07-27 21:16 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-03 10:09 - 2017-07-27 21:14 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-03 10:09 - 2017-07-27 21:13 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-03 10:09 - 2017-07-27 21:12 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-03 10:09 - 2017-07-27 21:06 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-03 10:09 - 2017-07-27 21:05 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-03 10:08 - 2017-07-27 22:30 - 001068720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-03 10:08 - 2017-07-27 22:14 - 000318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-03 10:08 - 2017-07-27 22:10 - 001114528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-03 10:08 - 2017-07-27 21:31 - 003995136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:29 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-03 10:08 - 2017-07-27 21:23 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-03 10:08 - 2017-07-27 21:22 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-03 10:08 - 2017-07-27 21:21 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-03 10:08 - 2017-07-27 21:20 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001298432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-03 10:08 - 2017-07-27 21:18 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-03 10:08 - 2017-07-27 21:15 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-03 10:08 - 2017-07-27 21:10 - 001706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-03 10:07 - 2017-07-27 22:16 - 000961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-03 10:07 - 2017-07-27 22:13 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:07 - 2017-07-27 22:13 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-03 10:07 - 2017-07-27 22:12 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-03 10:07 - 2017-07-27 21:30 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-08-03 10:07 - 2017-07-27 21:26 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-03 10:07 - 2017-07-27 21:22 - 000778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-03 10:07 - 2017-07-27 21:20 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-03 10:07 - 2017-07-27 21:19 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-03 10:07 - 2017-07-27 21:18 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-03 10:07 - 2017-07-27 21:15 - 003204608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 002444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-03 10:07 - 2017-07-27 21:11 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-03 10:07 - 2017-07-27 21:10 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-03 10:07 - 2017-07-27 21:09 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-03 10:07 - 2017-07-27 21:09 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-03 10:07 - 2017-07-27 21:06 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-03 10:06 - 2017-07-27 21:23 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 003867040 _____ C:\WINDOWS\system32\PortChanger.exe
2017-08-02 02:45 - 2012-09-25 00:52 - 002398112 _____ (Hewlett Packard) C:\WINDOWS\system32\hppldcoi.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 000151968 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\Dot4.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000049056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4usb.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000019872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4Scan.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 009891328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2017-08-02 02:29 - 2017-08-02 02:29 - 004332032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtCRU64.exe
2017-08-02 02:29 - 2017-08-02 02:29 - 000420832 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsUer.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 000084480 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll
2017-08-02 02:20 - 2017-08-02 02:20 - 000831685 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2017-08-02 02:16 - 2017-08-02 02:16 - 005799386 _____ C:\WINDOWS\system32\igdclbif.bin
2017-08-02 02:16 - 2017-08-02 02:16 - 000225280 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2017-08-02 02:15 - 2017-08-02 02:16 - 003972096 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 019861504 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 005688832 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 004368896 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000388608 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000318464 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000266232 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2017-08-02 02:14 - 2017-08-02 02:15 - 029101560 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 004934144 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 002393160 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 001858632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000439288 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000416256 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2017-08-02 02:13 - 2017-08-02 02:14 - 015488920 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll
2017-08-02 02:13 - 2017-08-02 02:13 - 013483192 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 013655032 _____ (Intel Corporation) C:\WINDOWS\system32\ig8icd64.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 010329088 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig8icd32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 005262848 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 002142208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 001009664 _____ C:\WINDOWS\system32\igfxSDK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000950784 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000947200 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000756224 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000705024 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000641530 _____ C:\WINDOWS\system32\FilmModeDetection.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000449536 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000403671 _____ C:\WINDOWS\system32\ImageStabilization.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000398848 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000390144 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000384512 _____ C:\WINDOWS\system32\igfxTray.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000375173 _____ C:\WINDOWS\system32\ColorImageEnhancement.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000356352 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000337408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000273408 _____ C:\WINDOWS\system32\igfxCPL.cpl
2017-08-02 02:11 - 2017-08-02 02:11 - 000254976 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000251392 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000219648 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000215040 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000214528 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000111616 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000103416 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000100864 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000095232 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000084992 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000055240 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000052736 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\Gfxv4_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\DPTopologyApp.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\Gfxv2_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\DPTopologyAppv2_0.exe.config
2017-08-02 02:10 - 2017-08-02 02:11 - 000220160 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4624.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 006696824 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 005137296 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 002813952 _____ C:\WINDOWS\system32\iglhxa64.cpa
2017-08-02 02:10 - 2017-08-02 02:10 - 001816712 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001814056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001590784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001178624 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000511260 _____ C:\WINDOWS\system32\cp_resources.bin
2017-08-02 02:10 - 2017-08-02 02:10 - 000431104 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000284160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000242152 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000223240 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000205344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000193016 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000183968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000182944 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000181832 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000173568 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160264 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160256 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000157696 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040343 _____ C:\WINDOWS\system32\iglhxo64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040316 _____ C:\WINDOWS\system32\iglhxc64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039658 _____ C:\WINDOWS\system32\iglhxg64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2017-08-02 02:09 - 2017-08-02 02:10 - 039864472 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2017-08-02 02:08 - 2017-08-02 02:09 - 038903384 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2017-08-02 02:07 - 2017-08-02 02:08 - 033479864 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004270672 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004240208 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 000312296 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll
2017-08-02 02:06 - 2017-08-02 02:07 - 016457272 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2017-08-02 02:05 - 2017-08-02 02:06 - 034823448 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 013070648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000297152 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000005412 _____ C:\WINDOWS\system32\iglhxs64lp.vp
2017-08-02 02:04 - 2017-08-02 02:05 - 007407080 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64lp.sys
2017-08-02 02:00 - 2017-08-02 02:00 - 000877424 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000866640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000737960 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll
2017-08-02 01:59 - 2017-08-02 02:00 - 001016928 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003410832 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003122656 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 001435136 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000984912 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000868176 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000691680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000526280 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000467152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000381408 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000258856 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2017-08-02 01:57 - 2017-08-02 01:59 - 072520704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2017-08-02 01:57 - 2017-08-02 01:57 - 012951320 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2017-08-02 01:56 - 2017-08-02 01:56 - 003516984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003509200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003205120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 002210784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 001347136 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000532376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000387312 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000192976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000166200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000088344 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000023688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2017-08-02 01:55 - 2017-08-02 01:55 - 005874144 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2017-08-02 01:55 - 2017-08-02 01:55 - 003677152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2017-08-02 01:55 - 2017-08-02 01:55 - 000122312 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2017-07-18 16:18 - 2017-07-18 16:19 - 000000000 ____D C:\Users\eddie\OpenVPN
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 01:03 - 2017-04-11 16:55 - 000000000 ___RD C:\Users\eddie\OneDrive
2017-08-16 01:01 - 2017-04-11 20:03 - 000000000 __SHD C:\Users\eddie\IntelGraphicsProfiles
2017-08-14 02:25 - 2017-04-11 20:15 - 000000000 __RDX C:\Users\eddie\OneDrive\Documents\Extra
2017-08-14 01:23 - 2017-04-11 20:16 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 00:25 - 2017-03-18 13:57 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2017-08-14 00:24 - 2017-04-11 16:51 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-14 00:24 - 2017-03-18 13:57 - 000430848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-08-14 00:20 - 2017-04-13 18:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-08-08 23:44 - 2017-06-26 14:45 - 000000779 _____ C:\Users\eddie\Desktop\SSF2.lnk
2017-07-18 13:30 - 2017-06-26 15:39 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-08-13 23:57
==================== End of FRST.txt ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-08-2017
Ran by eddie (administrator) on WIN10XP-1703PRO (16-08-2017 15:21:37)
Running from C:\Users\eddie\Desktop
Loaded Profiles: eddie (Available Profiles: eddie)
Platform: Windows 10 Pro Version 1703 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(SlimWare Utilities Holdings, Inc.) C:\Program Files\SlimWare Utilities\Services\SlimWare.Services.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(COMODO) C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Comodo) C:\Program Files (x86)\COMODO\Dragon\dragon_updater.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(pCloud AG) C:\Program Files (x86)\pCloud Drive\pCloud.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(SlimWare Utilities, Inc.) C:\Program Files\DriverUpdate\DriverUpdate.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Suo10_SmartRAM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe
(SlimWare Utilities Holdings, Inc.) C:\Program Files\SlimWare Utilities\Services\SlimWare.Session.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9231328 2017-08-02] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2017-08-13] (IvoSoft)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1489088 2017-07-11] (COMODO)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [3632848 2017-07-05] (COMODO)
HKLM-x32\...\Run: [vdcss] => C:\Program Files (x86)\COMODO\COMODO Secure Shopping\vdcss.exe [7690936 2017-06-30] (COMODO)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [pCloud] => C:\Program Files (x86)\pCloud Drive\pCloud.exe [3885832 2017-06-16] (pCloud AG)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [OpenVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] ()
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCEnhancer] => E:\CCEnhancer\CCEnhancer-4.4.1.exe [282112 2017-03-06] (SingularLabs)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [GoogleChromeAutoLaunch_E3F5740D1C7070D0CABB3741A4F94C0C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1301848 2017-08-11] (Google Inc.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [DriverUpdate] => C:\Program Files\DriverUpdate\DriverUpdate.exe [40742232 2017-07-31] (SlimWare Utilities, Inc.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [Advanced SystemCare 10] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3924256 2017-05-17] (IObit)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [SmartRAM] => C:\Program Files (x86)\IObit\Advanced SystemCare\Suo10_SmartRAM.exe [560416 2017-07-26] (IObit)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
SSODL: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\system32\cbfsMntNtf6.dll (/n software, Inc.)
SSODL-x32: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll (/n software, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{27427e43-89c9-4d14-b85e-f8cbc9b59dfe}: [DhcpNameServer] 192.168.254.254
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2896426177-3843145535-1853849027-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files (x86)\COMODO\COMODO Secure Shopping\cssbho64.dll [2017-06-30] (COMODO)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-14] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-14] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2017-08-13] (IvoSoft)
BHO-x32: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files (x86)\COMODO\COMODO Secure Shopping\cssbho32.dll [2017-06-30] (COMODO)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
BHO-x32: IObit Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2016-08-03] (IObit)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2017-08-13] (IvoSoft)
BHO-x32: IObit Ads Removal -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Adblock\Adblock.dll [2016-06-23] (IObit)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
FireFox:
========
FF DefaultProfile: oomuvn3h.default
FF ProfilePath: C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default [2017-08-16]
FF user.js: detected! => C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default\user.js [2017-08-15]
FF Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi [2017-07-03]
FF Extension: (Activity Stream) - C:\Program Files\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Click-to-Play staged rollout) - C:\Program Files\Mozilla Firefox\browser\features\clicktoplay-rollout@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Follow-on Search Telemetry) - C:\Program Files\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi [2017-08-10] [not signed]
FF Extension: (Photon onboarding) - C:\Program Files\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Shield Recipe Client) - C:\Program Files\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi [2017-08-10] [not signed]
FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-14] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://getchrome.eu/home/
CHR StartupUrls: Default -> "hxxp://getchrome.eu/home"
CHR DefaultSearchKeyword: Default -> wiki
CHR Profile: C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default [2017-08-16]
CHR Extension: (ProxFlow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2017-08-14]
CHR Extension: (Google Slides) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-14]
CHR Extension: (Security Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abbpkdnljicgejmkndbncgpeamlcjhom [2017-08-14]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2017-08-16]
CHR Extension: (GameShark) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\acmchkofncmmkabbadlofeffhchdmkop [2017-08-14]
CHR Extension: (Movie4K) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\adkbpinkibeobfkgfoolfpnldifjdedp [2017-08-14]
CHR Extension: (CB Channels) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afdeaaklpenijgadfgaljjnknlbaphae [2017-08-14]
CHR Extension: (Microsoft Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afiaggegejgnhhkfjpbbplaigaeijppc [2017-08-14]
CHR Extension: (Microsoft Virtual Agent) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahhncecjhnalimedngnkpfacimkmlafh [2017-08-14]
CHR Extension: (My Win10 PC) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akhdcannjobjjbbfabajjchleaccalng [2017-08-14]
CHR Extension: (HD for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2017-08-14]
CHR Extension: (LR EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akkmbnlaijgepeeldfglekgfajoiklph [2017-08-14]
CHR Extension: (ToonGet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\almbnkdlegibjhcgfbflpemghhdmalmf [2017-08-14]
CHR Extension: (Google Docs) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-14]
CHR Extension: (Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-14]
CHR Extension: (ARChon4Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbooacojifhcpicigmefgdhaiihjhnmd [2017-08-14]
CHR Extension: (Open with Google Drive™ Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdkpinfdldjdngmgfbifbdbgaoampkan [2017-08-14]
CHR Extension: (Super Nintendo Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\beogeghicacplhninfdmhiianhjimccp [2017-08-14]
CHR Extension: (Bitmoji) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfgdeiadkckfbkeigkoncpdieiiefpig [2017-08-14]
CHR Extension: (Google Groups) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfmbadcfdhiklafcdohpfphhhakmiakk [2017-08-14]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2017-08-14]
CHR Extension: (Mingle 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjeepgflngbnlkmfikinngokbcijkean [2017-08-14]
CHR Extension: (Amazon Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjjmjgafamolafiboomflecccipeddim [2017-08-14]
CHR Extension: (Win10 ISO) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjlhajlpdpmfebiokogbjhdgmkehgcbe [2017-08-14]
CHR Extension: (OpenDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmeclafhfpefpfndaigmiojllfgmbcm [2017-08-14]
CHR Extension: (YouTube) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-14]
CHR Extension: (1M AppStore) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bminhbeeccgdnghnabbhiafpndlbkedn [2017-08-14]
CHR Extension: (Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cagpfhohgbclhfgfggnbgfhnjehoknpk [2017-08-14]
CHR Extension: (History 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cahejgbbfgmlmjgdjlibphdjeldhagkp [2017-08-14]
CHR Extension: (Amazon) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\camkdhjofheljkflfmfgbnajgjnhlopf [2017-08-14]
CHR Extension: (Update) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbkkihljhphdkjhiabaomgfninkfihhe [2017-08-14]
CHR Extension: (Toons Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdibbihehmddkghfgiblbflocphmmooc [2017-08-14]
CHR Extension: (Snoopy vs. The Red Baron) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfalonhgbljhcmcajnbdebedcjdoblnl [2017-08-14]
CHR Extension: (Adblock Plus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-08-14]
CHR Extension: (Pushbullet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-08-14]
CHR Extension: (OneNote Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciniambnphakdoflgeamacamhfllbkmo [2017-08-14]
CHR Extension: (Monopoly Empire game | Play Kids Games Online | Hasbro) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjdhdhilfeoikokoiakkgnckknaekled [2017-08-14]
CHR Extension: (YT2MP3) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjhmdjffbkdmddmdmmbabiaclojaomeg [2017-08-14]
CHR Extension: (TechSupportGuy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckffimcpiheacclckfmmdcbhbmfmfikd [2017-08-14]
CHR Extension: (TWC Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckifgoknanfhclklbfjlpblncjpdfmfj [2017-08-14]
CHR Extension: (Microsoft Flow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clldiedkmkolghagmnpmnoljbhijiboi [2017-08-14]
CHR Extension: (HP ENVY) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clpdjjcfniihldhfchnjbiladapnbahi [2017-08-14]
CHR Extension: (MAFYT Settings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmelobemnghobnlpdfmmbejdoaleajcf [2017-08-14]
CHR Extension: (SSF2 Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnlencpcagccinnhoijdgmobkmfhalcc [2017-08-14]
CHR Extension: (Harakirimail extension) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coaagmonnnldglbilekplfnphpdencce [2017-08-14]
CHR Extension: (ComputerHelpForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbhjgghkoimcbpnbgjikmpgffkgajfk [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\damfhmjfmeiigloagjpelmocjoeobdno [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dccnabnbnagheglhfmgdcjlcjbeibaje [2017-08-14]
CHR Extension: (Chase Online ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcofdmelmmjneoonenbhpagpbpiojkhf [2017-08-14]
CHR Extension: (Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\deceagebecbceejblnlcjooeohmmeldh [2017-08-14]
CHR Extension: (3DS Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfkhponeglmiiobiihilahinlckifjjh [2017-08-14]
CHR Extension: (Fus.Fall Legacy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgmdnngojpofdigdidplfaebnjohmfng [2017-08-14]
CHR Extension: (Tampermonkey) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-08-14]
CHR Extension: (Janifer Boston) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhpkkleekhaceehoigfcnaaidjoleflh [2017-08-14]
CHR Extension: (Glitch Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djahbfbhacphllgemcekmdnlilahhmge [2017-08-14]
CHR Extension: (Nintendo Chat) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djeppnpeahmgfaohhidhjpipjkahimfe [2017-08-14]
CHR Extension: (Google+) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2017-08-14]
CHR Extension: (NORAD Tracks Santa) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmkoneajelflpbfjpchjaiglipefmnki [2017-08-14]
CHR Extension: (Frontier DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnabfpdnbkmdmcoillihefhnjjknnona [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dolkddbfbhledadcdepacaljbglglcoe [2017-08-14]
CHR Extension: (Sumo Paint) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpgjihldbpodlmnjolekemlfbcajnmod [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ebgecmolaheocnobalndebpehpimdghi [2017-08-14]
CHR Extension: (Inbox) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\edmijkelpnflahpdblkkobimcplcgmgj [2017-08-14]
CHR Extension: (Amazon Shop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eecahhmlcjafclfkjodjjgllpmcmkgko [2017-08-14]
CHR Extension: (Novelty, OH Weather Forecast and Cond...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eenemnbihadgbcjemdnobckofmiihfnk [2017-08-14]
CHR Extension: (Shortcut to Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\efcdnfkhiiafogbhcainplbbgemgaaen [2017-08-14]
CHR Extension: (YouTubeDownloader) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eieafdgibiahkjdgdccmldmjidglnbjj [2017-08-14]
CHR Extension: (Google Fourms) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejiggjokppepehmfdngjefbhjeheknmp [2017-08-14]
CHR Extension: (Cast Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejliejcnhkkaaipdgkeiihbefhjeoemp [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejppoecfdibjchmpdcphbanegdjebcgo [2017-08-14]
CHR Extension: (HelpSupport Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekimmgolelbekdhafemjekjhkempbkfd [2017-08-14]
CHR Extension: (Comodo AdBlocker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhcnbjoomhmifmfeggoalmplblcmcin [2017-08-14]
CHR Extension: (Chrome Goodies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\emmdmeocdlghmhbfjaldhjahnfbkbpck [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\enffghkdjcgkndjodbaelocgmcbmbhpp [2017-08-14]
CHR Extension: (Filter by WOT) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eomhfalemadkajmgmppkoenihlljdjoj [2017-08-14]
CHR Extension: (Update Windows 10) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\epejeipipakmkmdfnkpghcjfmeigpggo [2017-08-14]
CHR Extension: (G SSH2 SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabhojopefodnkcighibfcnamgmplloh [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fajdleioencnfbnmiienoibkoimkooli [2017-08-14]
CHR Extension: (Old EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fanigphfdfepmnelohpfhcpecoekibml [2017-08-14]
CHR Extension: (DiskImager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdfeicageglnlelmohmkojdjccgkdmcb [2017-08-14]
CHR Extension: (FREE App Creator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdhglomjccccgggpeabmiadbpmofeedc [2017-08-14]
CHR Extension: (Motorola) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fekllafapcbanabhhooobibaanmndalm [2017-08-14]
CHR Extension: (Google Sheets) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-14]
CHR Extension: (Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdhgdfhcclnmednjibbajgcpcpppknl [2017-08-14]
CHR Extension: (FB Game Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijlioglnahpdajepoinkodlegkolkam [2017-08-14]
CHR Extension: (Villionaire) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fimebapbdliodpciaalpoijonhdfhhkd [2017-08-14]
CHR Extension: (Word Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2017-08-14]
CHR Extension: (G SSH SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fipamjmedinmfclljanbjhhbdkfinpkc [2017-08-14]
CHR Extension: (Nintendo ThemeShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkhaiaahhhomnfnnjhmnkkhloogihnfa [2017-08-14]
CHR Extension: (EMails) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fknmbhaaehfdjpmooilcabjgooldjdoo [2017-08-14]
CHR Extension: (Google Voice ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fldbfpjncfkebegiobhnjanbokdlbnij [2017-08-14]
CHR Extension: (Rufus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljfobnflghnobgffmkpjddbdehgmfol [2017-08-14]
CHR Extension: (Who's on first?) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljmpldncihcmabdfjkgonhijjkpbgkl [2017-08-14]
CHR Extension: (Norton DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\focoenonfjfpphaadindagmhlijgklak [2017-08-14]
CHR Extension: (Nintendo CS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpdddhjdalfonhmejlkcfhjcckhealoc [2017-08-14]
CHR Extension: (Chrome Remote Desktop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-08-14]
CHR Extension: (SPdate) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmnahlpnikhhgldfmeajheocdileadd [2017-08-14]
CHR Extension: (Super Mario) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdljahompmnjdcmnlcfeobicdpepefbf [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegmdadojdijhnemaeolhalohelcagod [2017-08-14]
CHR Extension: (Network Test) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\geklcdelofkoldghehnhggalmoahklbi [2017-08-14]
CHR Extension: (Homebrew Browser) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjnhndecndnepbjpmaloifckdmgcac [2017-08-14]
CHR Extension: (About GPG Services) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaoeklfaibbbipibbalclmnllojibkh [2017-08-14]
CHR Extension: (Google Docs Offline) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-14]
CHR Extension: (Click&Clean) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2017-08-14]
CHR Extension: (Anyfile Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghlichmdnegmcpafgmmlpkegmcndlndi [2017-08-14]
CHR Extension: (Outlook People) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\giafdibgibbipnlecfckidkecmpkedho [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjaejhlejagppekogippmigjbkdjmcdk [2017-08-14]
CHR Extension: (Open PayPal) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glghgmejmmepalcnengjekjfmfbailbl [2017-08-14]
CHR Extension: (Google Wallet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhhiiglleiipdnodkaabbbbjhepnbcb [2017-08-14]
CHR Extension: (Save to Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2017-08-14]
CHR Extension: (Bookmark Manager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2017-08-14]
CHR Extension: (UnRAR and RAR Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\goeclnlkhfoejbhdebemhjljlmcbhfkp [2017-08-14]
CHR Extension: (Drive Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpgjomejfimnbmobcocilppikhncegaj [2017-08-14]
CHR Extension: (Win10 Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpjminmgekffdgiancflhaojkgjcdgmc [2017-08-14]
CHR Extension: (Microsoft Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplepoifohkaepkncehnpljceeljlabi [2017-08-14]
CHR Extension: (WC Forums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbiinloenjigabpbdlogbimfgbopcfce [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfbcjnjfeolgeoddhcdjpogocmpkmncp [2017-08-14]
CHR Extension: (GSSH.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmckcabobcmbdlimkenccopfnpokmie [2017-08-14]
CHR Extension: (GV Phone) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmpoeaghekodfplkofpeabpnipphcjh [2017-08-14]
CHR Extension: (Outlook Tasks) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkaimcgnicopmhblimdmfjahhifkfcoi [2017-08-14]
CHR Extension: (Dead Skin) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnjjcekgbjlpiegjcdmmpojndajlndok [2017-08-14]
CHR Extension: (RomsEShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hohhmomfljojjeaaehdcocalfpejjccc [2017-08-14]
CHR Extension: (USPS Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\idammebdkcmcjhminehllfamifenkhbn [2017-08-14]
CHR Extension: (Android Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbnciaeojfhgeihkflgcgajopfjeohg [2017-08-14]
CHR Extension: (Get Human) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifcelejocgjieghblljgkemmnlejjlep [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igabecodgkgfkdhglpojbnbobbnaajai [2017-08-14]
CHR Extension: (SEGA Bandonware) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igelfoafbodelegelfonpkanedmogdpm [2017-08-14]
CHR Extension: (OMG! Chrome!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igpknfbadalohcopbkaepbgblomnbdma [2017-08-14]
CHR Extension: (Frontier Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihjgglhacdljfhmlinhcagchbkcgdhio [2017-08-14]
CHR Extension: (Zip, UnZip App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiaianhgacnhnnhejddkghikgnhgpeaa [2017-08-14]
CHR Extension: (Bible Questions Answered) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiipijolbcononkgjpepkplcchmajanm [2017-08-14]
CHR Extension: (Apps Launcher) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijmgkhchjindcjamnckoiahagecjnkdc [2017-08-14]
CHR Extension: (Office Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikhblhjgapcilfennndodceemdoomngn [2017-08-14]
CHR Extension: (Excel Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2017-08-14]
CHR Extension: (PC Help Forum) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\illdlgkhakmollnophmajedfblhpijak [2017-08-14]
CHR Extension: (COSwallpapers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\inpceamnbdnjkljfebkpdgfnnfckopap [2017-08-14]
CHR Extension: (HTML5 Flash Warning Fix for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipdkokhdeppifjgcmhbfgmjmdllfpkln [2017-08-14]
CHR Extension: (File System for OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdfcehgafdbfpniaimfbfomafoadgo [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbjamgmfdlbplimhkomcjjlemjaddogn [2017-08-14]
CHR Extension: (PCTechForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jecdgjmkjbcagbkoifleegbplpnaobfa [2017-08-14]
CHR Extension: (Microsoft Update Catalog) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhgndoofkbbhhfcoldgjcakejekefcd [2017-08-14]
CHR Extension: (SSF2 Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgplhfbmmkajpgnpldoaafagambccjje [2017-08-14]
CHR Extension: (BibleGateway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjmdfkmnphhfgilhfofaiffmhjlnopan [2017-08-14]
CHR Extension: (SM Trial Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljcdndcgbkbjonffogpnljganhabgmj [2017-08-14]
CHR Extension: (Save to Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfikkaogpplgnfjmbjdpalkhclendgd [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jomemcnjdjkjipodmcpfjhioloioplfh [2017-08-14]
CHR Extension: (CDFF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kahonebhcmapeomaemhjakphnpffhhhf [2017-08-14]
CHR Extension: (My Sway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcnmjbpdljgcffbninlkelpbfmbbbohp [2017-08-14]
CHR Extension: (North Pole Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdggiihhdpfglclmfghofjbiagonaplo [2017-08-14]
CHR Extension: (Chrome Web Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfknblmmckdmlklbncfodpomfoejlbgm [2017-08-14]
CHR Extension: (Range Extender Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgaimanaoiiecgbljbpjhkdicaogkinf [2017-08-14]
CHR Extension: (4Shared) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khdleokphdcnmagagajnchlcmacfphan [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khomnbdfmhfppiemgglncdlbbnppffdo [2017-08-14]
CHR Extension: (Pure Flix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiiijkmmlfiofadnffcomgcmdlppddhd [2017-08-14]
CHR Extension: (Novelty, OH Weather Conditions & Fore...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkphahjiaiaahfhcbedhbgfpodbojbje [2017-08-14]
CHR Extension: (MyAptoideBU) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpdcjojlnaceggdkglndamdmaonfnpi [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2017-08-14]
CHR Extension: (GSSH2.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\laekopehhnfklajodmbbhdfhmkfbnblc [2017-08-14]
CHR Extension: (Wake Up!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbbcfplbfbmimpnlammmeaheakhcogke [2017-08-14]
CHR Extension: (AnimeDub Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbdcckpbjegpnhhdejaipegkabkofhla [2017-08-14]
CHR Extension: (Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lddagfjihimnacaabfnfagjcokfmnekc [2017-08-14]
CHR Extension: (Aptoide) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhhjndfejaoaiaaokjmhoiedppdmknki [2017-08-14]
CHR Extension: (AnimeDub) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhnnmimodonfbnmpgmcjahlblaenkgle [2017-08-14]
CHR Extension: (Files2Zip) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhoadfgjeimckjlphkdebfmhbpeniljo [2017-08-14]
CHR Extension: (USPS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\liocengmpmiiejdoebmlifecbmcpfigg [2017-08-14]
CHR Extension: (Wikipedia Search) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lipakennkogpodadpikgipnogamhklmk [2017-08-14]
CHR Extension: (MSN Games - Free Online Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkbgddpallgbhlldcnnjomnodmohpklf [2017-08-14]
CHR Extension: (IHeart Christmas) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lndoiaoagbajoadpgmfgckfckmchepmj [2017-08-14]
CHR Extension: (Google Maps) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2017-08-14]
CHR Extension: (SSB) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lockfglcfjlaagpghflagedkkgojipke [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\locmdgkcjcjacipaokcoochhjhpklbih [2017-08-14]
CHR Extension: (B1 File Extracter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbgobeedadfbponkgffobhpmokjmlhol [2017-08-14]
CHR Extension: (Documents Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbhgihpdipbgifogehncdehebkpehoap [2017-08-14]
CHR Extension: (GoogleDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbogpnkehmjcidggfooapenefhckeehd [2017-08-14]
CHR Extension: (PowerPoint Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2017-08-14]
CHR Extension: (Messenger (Unofficial)) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdapmeleikeppmfgadilffngabfpibok [2017-08-14]
CHR Extension: (GoogleFuchsia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mejnaonfdocegokbjldkeafifpnfnpan [2017-08-14]
CHR Extension: (CN Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mekgfnmophledbpkmikhnfkimoahjohn [2017-08-14]
CHR Extension: (CraigTechShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfbfebnljjciechbmlehdcmnmdhacgmi [2017-08-14]
CHR Extension: (COMODO DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfnnnpncpeeecbbdepenkkgpjoenkbbo [2017-08-14]
CHR Extension: (T-Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhpgceapcpooallmggianccbakegnhnb [2017-08-14]
CHR Extension: (V.FreeMovies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkopchcfcbchhnbpldmdjfbdhgkcpgkn [2017-08-14]
CHR Extension: (CB Central) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlieflpkidahjkojakjlpnlnchobihbl [2017-08-14]
CHR Extension: (ZIP Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmfcakoljjhncfphlflcedhgogfhpbcd [2017-08-14]
CHR Extension: (GC Options) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmmanlicckcagdkabbemhccfpmgojncl [2017-08-14]
CHR Extension: (My Google Account) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnepgpaicadoimgdlajhkgokfenaadkh [2017-08-14]
CHR Extension: (PogoTM) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmklochmlghbgebbmkldomoihjbgfie [2017-08-14]
CHR Extension: (Nintendo Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mogfngbfndeeecglaejajbioegpimija [2017-08-14]
CHR Extension: (What's on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbeopbccnmkgdlbpicobflenbjceoaka [2017-08-14]
CHR Extension: (Chrome OS Features) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbjdhanphhipjfkmicljakgnbaicfojk [2017-08-14]
CHR Extension: (Ws on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncjendjahmgpgjdeenknmdoecofmfdod [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2017-08-14]
CHR Extension: (Reload It) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nconjighkgcoppohfilfinlimdfmjafg [2017-08-14]
CHR Extension: (Games4Summer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndphblldagopagiodebolhdjohgindbm [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2017-08-14]
CHR Extension: (UNetbootin - Homepage and Downloads) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhanbcbjhjcgpccibphcicainkkinool [2017-08-14]
CHR Extension: (SupportSpace) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nigmaeimafjgjfodjfhnancnahfeindg [2017-08-14]
CHR Extension: (FedEx Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikgcnimkfeopobooaahjpbdkdfhchao [2017-08-14]
CHR Extension: (SEGA Online Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nilhogoffgcdfgmejcjpidfaiefpccpl [2017-08-14]
CHR Extension: (WeatherBug) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\njkkjobcechefaoknodniidfjapgfoco [2017-08-14]
CHR Extension: (Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nklbmhejmcjofglijalidajdlihahnpd [2017-08-14]
CHR Extension: (Archive Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknadlalodfadgegkigkmbhofcmkhfnc [2017-08-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-14]
CHR Extension: (Win10 Pro keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnelnnlfcdhjfbfglandknndlonidojg [2017-08-14]
CHR Extension: (Toonova) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobhijfkaffjbkocimaaembibggenkdc [2017-08-14]
CHR Extension: (Frontier) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nofcknkefjengmgmlnmdmgbmlakhhnok [2017-08-14]
CHR Extension: (SM63.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\noijjjifnenaafboiipobhiflmiaimof [2017-08-14]
CHR Extension: (Chrome OS EOL) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\npmnpehbihaieehmoaifdkdlcgndmpjn [2017-08-14]
CHR Extension: (System) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocjnemjmlhjkeilmaidemofakmpclcbi [2017-08-14]
CHR Extension: (COMODO GeekBuddy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oebmcdnandbcnfmpjecmmhcoogfneelj [2017-08-14]
CHR Extension: (Google Santa Tracker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehagbcimlpafjbdijnjmaboblcfdnoh [2017-08-14]
CHR Extension: (PDF Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oemmndcbldboiebfnladdacbdfmadadm [2017-08-14]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2017-08-15]
CHR Extension: (App Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogffnakkboiaoifjbhjbahamkdojaemm [2017-08-14]
CHR Extension: (EPForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oimkklcnelpdlkkbjjablakandmmddio [2017-08-14]
CHR Extension: (Fullscreen Anything) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\olcfgpmjldkkjdclidhcbonieibfhhdh [2017-08-14]
CHR Extension: (SM 63) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oldjcgpcnneleakkepogfghcehnjcngf [2017-08-14]
CHR Extension: (YouTube™ Flash-HTML5) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\omimccinlhlkpjaeaocglgmkbelejlhj [2017-08-14]
CHR Extension: (Christian Date) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ompnolbokepechjidcgpaddaaeoocajn [2017-08-14]
CHR Extension: (Consumer AV Providers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ongfjpmgcneinonelpaljjdaigppnneo [2017-08-14]
CHR Extension: (Putlocker ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookjcnljofpnadeabapgadihfhngblfe [2017-08-14]
CHR Extension: (Nintendo RomShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pahokmgpomeaakdfnahejklhcifhaige [2017-08-14]
CHR Extension: (Microsoft Office Home) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\palennhedgekbnbmokheidadmghcncgl [2017-08-14]
CHR Extension: (I Heart Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcbnpgdibikphcelmkjldlfjjepjipl [2017-08-14]
CHR Extension: (Click&Clean App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-08-14]
CHR Extension: (Shortcuts for Google™ Products) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdlecffodcfabchelafoljcdphfpkpcl [2017-08-14]
CHR Extension: (Date Countdown) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfbpikfaigmikdjkghbkbapjhfoglipj [2017-08-14]
CHR Extension: (Data Saver) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmgfdlgomnbgkofeojodiodmgpgmkac [2017-08-14]
CHR Extension: (Outlook.com) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\phfegmcgballapgnbppeeidckejebknn [2017-08-14]
CHR Extension: (Super Smash Bros For NDS !!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pifamkpimegbfnakceigajiljjodcfla [2017-08-14]
CHR Extension: (Gmail) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-14]
CHR Extension: (Chrome Media Router) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-14]
CHR Extension: (OMG! Ubuntu!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmoodaljflkhbojjaiibgnlindbhebme [2017-08-14]
CHR Extension: (EBay) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppaellakmlibbcfkgkmbkkllnhcmghca [2017-08-14]
CHR Extension: (Google Contacts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppbiamkfhlcpgijakdgbbffikmkkofnl [2017-08-14]
CHR Extension: (Apps On Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppmdjabijijblhfhnbgcpnoamkibcclm [2017-08-14]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdvancedSystemCareService10; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [462624 2017-03-21] (IObit)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [10501104 2017-07-11] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2017-07-11] (COMODO)
R2 csssrv; C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe [3210936 2017-06-30] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2273432 2017-08-08] (Comodo)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [356352 2017-08-02] (Intel Corporation)
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-07-05] (COMODO)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324576 2017-08-02] (Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-04-11] (Microsoft Corporation)
R2 SlimWareServices; C:\Program Files\SlimWare Utilities\Services\SlimWare.Services.exe [79704 2017-07-31] (SlimWare Utilities Holdings, Inc.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269912 2017-01-17] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-19] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-09-09] (/n software, Inc.)
R1 cmdcss; C:\WINDOWS\system32\drivers\cmdcss.sys [126056 2017-03-31] (COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [40936 2017-06-02] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [831992 2017-06-02] (COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [50776 2017-06-02] (COMODO)
S3 dot4; C:\WINDOWS\System32\drivers\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [72584 2017-01-12] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [67976 2017-01-12] (Intel Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77376 2017-06-27] ()
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7407080 2017-08-02] (Intel Corporation)
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [132880 2017-06-07] (COMODO)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [62208 2017-03-29] (COMODO)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [188352 2017-08-16] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [101784 2017-08-16] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [45472 2017-08-16] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-16] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93600 2017-08-16] (Malwarebytes)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [947712 2017-02-15] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [420832 2017-08-02] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [6804480 2017-05-03] (Realtek Semiconductor Corporation )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [60504 2017-01-17] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [64088 2017-01-17] (Synaptics Incorporated)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2015-10-15] (Intel Corporation)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [18624 2016-09-09] (/n software, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30392 2017-04-25] (HP)
S3 WiseUnlock; C:\WINDOWS\WiseUnlock64.sys [33864 2017-08-15] (WiseCleaner.com)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 15:21 - 2017-08-16 15:24 - 000054927 _____ C:\Users\eddie\Desktop\FRST.txt
2017-08-16 15:21 - 2017-08-16 15:21 - 000000000 ____D C:\FRST
2017-08-16 15:18 - 2017-08-16 15:19 - 002395648 _____ (Farbar) C:\Users\eddie\Desktop\FRST64.exe
2017-08-16 12:40 - 2017-08-16 12:40 - 009791816 _____ (Piriform Ltd) C:\Users\eddie\Downloads\ccsetup533.exe
2017-08-16 01:03 - 2017-08-16 01:03 - 000000000 ___HD C:\OneDriveTemp
2017-08-16 01:01 - 2017-08-16 01:01 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-08-16 00:53 - 2017-08-16 00:53 - 000003656 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default\AppData\Roaming\IObit
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default User\AppData\Roaming\IObit
2017-08-16 00:29 - 2017-08-16 00:29 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-08-16 00:28 - 2017-08-16 13:45 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-08-16 00:28 - 2017-08-16 01:01 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-08-16 00:27 - 2017-08-16 01:01 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-08-16 00:27 - 2017-08-16 00:27 - 000001927 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-16 00:27 - 2017-06-27 12:06 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-08-16 00:25 - 2017-08-16 01:01 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-16 00:24 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-15 23:54 - 2017-06-19 22:05 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2017-08-15 23:54 - 2017-03-18 13:58 - 000587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2017-08-15 23:54 - 2017-03-18 13:58 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxinit.dll
2017-08-15 18:07 - 2017-08-15 18:13 - 000000000 ____D C:\Users\eddie\AppData\Local\PackageStaging
2017-08-15 12:57 - 2017-08-15 12:59 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000033864 _____ (WiseCleaner.com) C:\WINDOWS\WiseUnlock64.sys
2017-08-15 12:57 - 2017-08-15 12:57 - 000001287 _____ C:\Users\Public\Desktop\Wise Force Deleter.lnk
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\Program Files (x86)\Wise
2017-08-15 03:39 - 2017-08-15 03:39 - 000000000 ____D C:\WINDOWS\System32\Tasks\Games
2017-08-15 03:29 - 2017-08-15 03:29 - 000000000 ____D C:\WINDOWS\System32\Tasks\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000001357 _____ C:\Users\eddie\Desktop\Auslogics Disk Defrag.lnk
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\Program Files (x86)\Auslogics
2017-08-15 03:21 - 2017-08-15 03:21 - 000000000 ___HD C:\VTRoot
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ____D C:\Program Files (x86)\Realtek
2017-08-15 02:25 - 2017-02-15 21:50 - 000947712 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2017-08-15 02:25 - 2017-02-15 21:50 - 000082536 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2017-08-15 02:23 - 2017-08-15 02:23 - 000000000 ____D C:\ProgramData\SlimWare Utilities Inc
2017-08-15 01:46 - 2017-08-15 01:46 - 005373952 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2017-08-15 01:17 - 2017-08-15 01:30 - 000000000 ____D C:\Users\eddie\AppData\Local\CrashDumps
2017-08-15 00:48 - 2017-08-15 00:48 - 000001796 _____ C:\Users\eddie\Desktop\Virtual Kiosk.lnk
2017-08-15 00:31 - 2017-08-15 00:31 - 000002374 _____ C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-08-14 22:18 - 2017-08-15 01:37 - 000003474 _____ C:\WINDOWS\System32\Tasks\ASC10_AutoCare
2017-08-14 22:09 - 2017-08-14 22:09 - 000000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2017-08-14 22:01 - 2017-08-14 22:01 - 000002908 _____ C:\WINDOWS\System32\Tasks\ASC10_SkipUac_eddie
2017-08-14 22:01 - 2017-08-14 22:01 - 000000000 ____D C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
2017-08-14 22:00 - 2017-08-14 22:01 - 000002249 _____ C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
2017-08-14 22:00 - 2017-08-14 22:00 - 000003114 _____ C:\WINDOWS\System32\Tasks\ASC10_PerformanceMonitor
2017-08-14 22:00 - 2017-08-14 22:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2017-08-14 21:54 - 2017-08-16 15:20 - 000062144 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2017-08-14 21:40 - 2017-08-14 21:40 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2017-08-14 21:40 - 2017-08-14 21:40 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2017-08-14 21:38 - 2017-08-14 21:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Comodo
2017-08-14 21:27 - 2017-08-16 15:21 - 001336640 _____ C:\WINDOWS\system32\Drivers\sfi.dat
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\Program Files\COMODO
2017-08-14 21:26 - 2017-06-30 07:08 - 000332472 _____ (COMODO) C:\WINDOWS\system32\cmdkbdcss64.dll
2017-08-14 21:26 - 2017-06-30 07:08 - 000263352 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdkbdcss32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000432104 _____ (COMODO) C:\WINDOWS\system32\cssguard64.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000338560 _____ (COMODO) C:\WINDOWS\SysWOW64\cssguard32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000048728 _____ (COMODO) C:\WINDOWS\system32\csscsr64.dll
2017-08-14 21:26 - 2017-03-31 23:15 - 000126056 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdcss.sys
2017-08-14 21:25 - 2017-08-14 21:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Comodo
2017-08-14 21:21 - 2017-08-14 21:35 - 000000480 _____ C:\WINDOWS\Tasks\DriverUpdate Scan.job
2017-08-14 21:21 - 2017-08-14 21:21 - 000003258 _____ C:\WINDOWS\System32\Tasks\DriverUpdate Scan
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Shared Space
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Comodo Downloader
2017-08-14 21:20 - 2017-08-15 16:19 - 000000000 ____D C:\Program Files\DriverUpdate
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\Users\eddie\AppData\Local\SlimWare Utilities Inc
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate
2017-08-14 21:20 - 2017-08-14 21:20 - 000000000 ____D C:\Program Files\SlimWare Utilities
2017-08-14 21:19 - 2017-08-15 01:44 - 000000000 ____D C:\ProgramData\COMODO
2017-08-14 21:19 - 2017-08-15 00:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-08-14 21:19 - 2017-08-14 21:47 - 000000000 ____D C:\Program Files (x86)\COMODO
2017-08-14 21:19 - 2017-07-05 00:30 - 000256040 _____ (COMODO) C:\WINDOWS\system32\iseguard64.dll
2017-08-14 21:19 - 2017-07-05 00:29 - 000205536 _____ (COMODO) C:\WINDOWS\SysWOW64\iseguard32.dll
2017-08-14 21:19 - 2017-03-29 14:49 - 000062208 _____ (COMODO) C:\WINDOWS\system32\Drivers\isedrv.sys
2017-08-14 17:10 - 2017-08-14 17:11 - 000002676 _____ C:\Users\eddie\Desktop\PC Help Forum.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001006 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-14 16:12 - 2017-08-14 16:12 - 000000859 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Explorer.lnk
2017-08-14 14:46 - 2017-08-14 15:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
2017-08-14 14:41 - 2017-08-14 14:41 - 000002357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-14 14:41 - 2017-08-14 14:41 - 000002345 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-14 14:40 - 2017-08-14 14:40 - 000003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-08-14 14:40 - 2017-08-14 14:40 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-08-14 14:28 - 2017-08-14 14:28 - 000000000 ____D C:\WINDOWS\Panther
2017-08-14 14:15 - 2017-08-14 14:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-14 14:15 - 2017-08-14 14:15 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Sun
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-08-14 14:15 - 2017-08-14 14:14 - 000110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2017-08-14 14:14 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\ProgramData\Oracle
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\Program Files\Java
2017-08-14 04:00 - 2017-08-14 04:00 - 000041800 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2017-08-14 03:49 - 2017-08-14 03:49 - 000000000 ____D C:\Users\eddie\AppData\Local\PeerDistRepub
2017-08-14 02:55 - 2017-08-14 02:55 - 069640192 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000491520 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000065536 _____ C:\WINDOWS\system32\config\SAM.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2017-08-14 02:53 - 2017-08-16 02:56 - 000000000 ____D C:\Users\eddie\AppData\Local\ClassicShell
2017-08-14 02:53 - 2017-08-16 02:33 - 000000000 ____D C:\ProgramData\ClassicShell
2017-08-14 02:53 - 2017-08-14 02:53 - 000000000 ____D C:\Users\eddie\AppData\Roaming\ClassicShell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\Program Files\Classic Shell
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\BDLogging
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
2017-08-14 02:26 - 2017-08-14 02:26 - 000565416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-08-14 02:18 - 2017-08-14 04:54 - 000002956 _____ C:\WINDOWS\System32\Tasks\CCleanerClean
2017-08-14 02:18 - 2017-08-14 04:54 - 000000258 _____ C:\WINDOWS\Tasks\CCleanerClean.job
2017-08-14 02:05 - 2017-08-16 12:42 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-14 02:05 - 2017-08-16 12:39 - 000000000 ____D C:\Program Files\CCleaner
2017-08-14 02:05 - 2017-08-14 02:05 - 000002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-08-14 02:05 - 2017-08-14 02:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-14 01:52 - 2017-08-14 01:52 - 000001129 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Users\eddie\AppData\Local\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Program Files\VS Revo Group
2017-08-14 01:52 - 2016-12-21 14:52 - 000040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2017-08-14 01:46 - 2017-08-14 01:46 - 000000000 ____D C:\Users\eddie\AppData\Local\MicrosoftEdge
2017-08-14 01:45 - 2017-08-14 21:59 - 000000000 ____D C:\ProgramData\IObit
2017-08-14 01:45 - 2017-08-14 04:53 - 000000000 ____D C:\Program Files (x86)\IObit
2017-08-14 01:45 - 2017-08-14 02:45 - 000000000 ____D C:\ProgramData\ProductData
2017-08-14 01:45 - 2017-08-14 02:33 - 000000000 ____D C:\Users\eddie\AppData\Roaming\IObit
2017-08-14 01:45 - 2017-08-14 01:45 - 000000000 ____D C:\ProgramData\{EAAB5A83-3809-4B0E-83A6-E4B0DBF2157E}
2017-08-14 01:37 - 2017-08-14 01:37 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\3C64355F.sys
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\TAP-Windows
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2017-08-14 01:23 - 2017-08-14 01:23 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\Users\eddie\AppData\Roaming\WinRAR
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 01:22 - 2017-08-14 01:23 - 000000000 ____D C:\Program Files\WinRAR
2017-08-14 01:16 - 2017-08-14 01:16 - 000000634 _____ C:\Users\eddie\OneDrive\Documents\MagicActions-Options.json
2017-08-14 01:02 - 2017-08-14 04:57 - 000000000 ____D C:\Users\eddie\AppData\Local\pCloud
2017-08-14 00:56 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Google
2017-08-14 00:56 - 2017-08-14 00:56 - 000000000 ____D C:\WINDOWS\InfusedApps
2017-08-14 00:54 - 2017-08-14 00:54 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-08-14 00:54 - 2017-08-13 23:58 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-08-14 00:52 - 2017-08-14 00:52 - 000000000 ____D C:\Program Files\Synaptics
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\Program Files (x86)\HP
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\WINDOWS\Setup
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\Users\eddie\AppData\Local\DBG
2017-08-14 00:49 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Google
2017-08-14 00:49 - 2017-08-14 14:40 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-14 00:48 - 2017-08-14 00:49 - 000000000 ____D C:\Users\eddie\AppData\Local\Deployment
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Macromedia
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Local\Apps\2.0
2017-08-14 00:46 - 2017-08-16 12:16 - 000004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{FA13B12A-B6F1-4CA4-9E37-D55E2EE30D0B}
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\OCR
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\MSBuild
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pCloud
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\Program Files (x86)\pCloud Drive
2017-08-14 00:43 - 2016-09-09 16:33 - 000018848 _____ (/n software, Inc.) C:\WINDOWS\system32\elevtmsg.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000235424 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000196000 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000134560 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:31 - 000170400 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:23 - 000460992 _____ (/n software, Inc.) C:\WINDOWS\system32\Drivers\cbfs6.sys
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\DigitalLocker
2017-08-14 00:37 - 2017-07-31 08:15 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-08-14 00:37 - 2017-07-31 08:15 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-14 00:32 - 2017-08-14 00:55 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-08-14 00:32 - 2017-08-14 00:27 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2017-08-14 00:32 - 2017-08-14 00:27 - 000015940 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2017-08-14 00:32 - 2017-08-14 00:27 - 000004096 _____ C:\WINDOWS\system32\config\VSMIDK
2017-08-14 00:32 - 2017-08-14 00:27 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2017-08-14 00:32 - 2017-08-14 00:27 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2017-08-14 00:32 - 2017-08-14 00:27 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2017-08-14 00:32 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-14 00:31 - 2017-08-16 00:55 - 000000000 ___RD C:\Program Files (x86)
2017-08-14 00:31 - 2017-08-15 01:44 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2017-08-14 00:31 - 2017-08-14 14:36 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-08-14 00:31 - 2017-08-14 03:25 - 000000000 ____D C:\WINDOWS\appcompat
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files (x86)\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\migwiz
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\Provisioning
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\SystemApps
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\dsc
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\IME
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\Help
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 __RSD C:\WINDOWS\Media
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\AppV
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\ias
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\DDFs
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\Registration
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\L2Schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Web
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Vss
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\tracing
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\TAPI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SystemResources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\winevt
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\System
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SKB
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SchCache
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Resources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\RemotePackages
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\PLA
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Performance
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\ModemLogs
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Globalization
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Cursors
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Branding
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\bcastdvr
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\addins
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Common Files\Services
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:27 - 000000219 _____ C:\WINDOWS\system.ini
2017-08-14 00:31 - 2017-08-14 00:27 - 000000092 _____ C:\WINDOWS\win.ini
2017-08-14 00:31 - 2017-08-14 00:20 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-08-14 00:31 - 2017-08-14 00:19 - 000000000 __RHD C:\Users\Public\Libraries
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\spool
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\CSC
2017-08-14 00:31 - 2017-08-14 00:10 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOPrivate
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\PrintDialog
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\MiracastView
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-14 00:31 - 2017-08-14 00:05 - 000000000 ____D C:\WINDOWS\HoloShell
2017-08-14 00:30 - 2017-08-14 00:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Skype
2017-08-14 00:28 - 2017-08-15 23:08 - 000000000 ____D C:\WINDOWS\INF
2017-08-14 00:27 - 2017-08-14 00:27 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-08-14 00:26 - 2017-08-14 00:26 - 000000000 ____D C:\Users\eddie\AppData\Local\Comms
2017-08-14 00:25 - 2017-08-14 13:58 - 000908880 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-14 00:25 - 2017-08-14 00:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Publishers
2017-08-14 00:24 - 2017-08-15 18:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Packages
2017-08-14 00:24 - 2017-08-14 04:56 - 000000000 ____D C:\Users\eddie\AppData\Local\ConnectedDevicesPlatform
2017-08-14 00:24 - 2017-08-14 00:24 - 000000020 ___SH C:\Users\eddie\ntuser.ini
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Synaptics
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Adobe
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\VirtualStore
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\TileDataLayer
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\ProgramData\Synaptics
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\Default User
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\All Users
2017-08-14 00:21 - 2017-08-16 01:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-14 00:20 - 2017-08-14 00:20 - 000026274 _____ C:\Users\eddie\OneDrive\Documents\Removed Apps.html
2017-08-14 00:18 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-14 00:15 - 2017-08-15 22:52 - 000000000 ____D C:\Users\eddie
2017-08-14 00:12 - 2017-08-16 00:58 - 082051072 _____ C:\WINDOWS\system32\config\SYSTEM
2017-08-14 00:12 - 2017-08-16 00:58 - 071827456 _____ C:\WINDOWS\system32\config\SOFTWARE
2017-08-14 00:12 - 2017-08-16 00:58 - 009175040 _____ C:\WINDOWS\system32\config\BBI
2017-08-14 00:12 - 2017-08-16 00:58 - 001572864 _____ C:\WINDOWS\system32\config\DEFAULT
2017-08-14 00:12 - 2017-08-16 00:58 - 000057344 _____ C:\WINDOWS\system32\config\SECURITY
2017-08-14 00:12 - 2017-08-14 00:54 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2017-08-14 00:12 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\servicing
2017-08-14 00:12 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\SMI
2017-08-14 00:12 - 2017-08-14 00:23 - 000000000 ___HD C:\$Windows.~BT
2017-08-14 00:12 - 2017-08-14 00:22 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-08-14 00:09 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOShared
2017-08-14 00:04 - 2017-08-14 00:04 - 000021910 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2017-08-14 00:04 - 2017-08-14 00:04 - 000002065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2017-08-14 00:04 - 2017-08-14 00:04 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\ProgramData\SRS Labs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\Program Files\Realtek
2017-08-14 00:04 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____D C:\Program Files\Intel
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2017-08-14 00:02 - 2017-03-18 13:56 - 002233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-08-13 23:58 - 2017-08-16 15:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-13 22:50 - 2017-08-14 00:57 - 000000000 ___HD C:\$SysReset
2017-08-13 08:49 - 2017-08-13 08:49 - 000291128 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper64.dll
2017-08-13 08:49 - 2017-08-13 08:49 - 000248120 _____ (IvoSoft) C:\WINDOWS\SysWOW64\StartMenuHelper32.dll
2017-08-13 01:40 - 2017-08-15 00:06 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\Mozilla
2017-08-12 23:19 - 2017-08-15 02:24 - 000000000 ___HD C:\SWSetup
2017-08-12 22:31 - 2017-08-14 00:19 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Restore Explorer
2017-08-09 02:19 - 2017-08-14 01:45 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\IObit
2017-08-08 22:10 - 2017-07-31 19:36 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-08-08 22:10 - 2017-07-31 19:34 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-08-08 22:10 - 2017-07-31 19:20 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-08-08 22:10 - 2017-07-31 19:18 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-08-08 22:10 - 2017-07-31 19:18 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-08-08 22:10 - 2017-07-31 19:13 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-08-08 22:10 - 2017-07-31 19:07 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-08 22:10 - 2017-07-31 19:06 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-08-08 22:10 - 2017-07-31 19:03 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-08-08 22:10 - 2017-07-31 18:30 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-08 22:09 - 2017-07-31 19:39 - 008319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-08 22:09 - 2017-07-31 19:38 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:38 - 000382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-08 22:09 - 2017-07-31 19:36 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:36 - 000119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-08 22:09 - 2017-07-31 19:35 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:35 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:34 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:33 - 000473240 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:32 - 002444704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-08 22:09 - 2017-07-31 19:32 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:32 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-08 22:09 - 2017-07-31 19:31 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 002645680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000723680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000410160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000315288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000143736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000082336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-08 22:09 - 2017-07-31 19:26 - 000204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 19:17 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 19:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 19:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-08-08 22:09 - 2017-07-31 19:10 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 19:09 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-08-08 22:09 - 2017-07-31 19:08 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:57 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-08 22:09 - 2017-07-31 18:45 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-08 22:09 - 2017-07-31 18:44 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 18:44 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2017-08-08 22:09 - 2017-07-31 18:44 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-08 22:09 - 2017-07-31 18:42 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 017366528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-08 22:09 - 2017-07-31 18:39 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-08 22:09 - 2017-07-31 18:36 - 023681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-08 22:09 - 2017-07-31 18:35 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-08-08 22:09 - 2017-07-31 18:34 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 007336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 012786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 001396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 008209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 002055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-08 22:09 - 2017-07-31 18:30 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-08-08 22:09 - 2017-07-31 18:26 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-08 22:09 - 2017-07-31 18:25 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-08 16:27 - 2017-08-08 16:28 - 000000000 ___HD C:\7e1b197988dcf5ad4a9391ddfe6621
2017-08-03 10:27 - 2017-07-27 22:20 - 000279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-03 10:27 - 2017-07-27 21:36 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll
2017-08-03 10:27 - 2017-07-27 21:26 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:21 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:20 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-08-03 10:27 - 2017-07-27 21:08 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-03 10:26 - 2017-07-27 21:40 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-08-03 10:26 - 2017-07-27 21:36 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2017-08-03 10:26 - 2017-07-27 21:33 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-08-03 10:26 - 2017-07-27 21:27 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-03 10:26 - 2017-07-27 21:20 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IpNatHlpClient.dll
2017-08-03 10:26 - 2017-07-27 21:19 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2017-08-03 10:26 - 2017-07-27 21:18 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2017-08-03 10:26 - 2017-07-27 21:13 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2017-08-03 10:26 - 2017-07-27 21:12 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-08-03 10:26 - 2017-07-27 21:10 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-08-03 10:26 - 2017-07-27 21:08 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-08-03 10:26 - 2017-07-27 21:02 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2017-08-03 10:25 - 2017-07-27 22:23 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-03 10:25 - 2017-07-27 22:15 - 000554400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-03 10:25 - 2017-07-27 22:07 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2017-08-03 10:25 - 2017-07-27 21:47 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-08-03 10:25 - 2017-07-27 21:37 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-08-03 10:25 - 2017-07-27 21:35 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2017-08-03 10:25 - 2017-07-27 21:33 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-08-03 10:25 - 2017-07-27 21:19 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:25 - 2017-07-27 21:16 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-08-03 10:25 - 2017-07-27 21:15 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:25 - 2017-07-27 21:13 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-08-03 10:25 - 2017-07-27 21:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll
2017-08-03 10:25 - 2017-07-27 21:09 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-08-03 10:24 - 2017-07-27 21:40 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-08-03 10:24 - 2017-07-27 21:38 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-08-03 10:24 - 2017-07-27 21:35 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-08-03 10:24 - 2017-07-27 21:33 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-08-03 10:24 - 2017-07-27 21:17 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-08-03 10:24 - 2017-07-27 21:15 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-08-03 10:24 - 2017-07-27 21:14 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-08-03 10:24 - 2017-07-27 21:13 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-08-03 10:24 - 2017-07-27 21:12 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-08-03 10:24 - 2017-07-27 21:11 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-08-03 10:24 - 2017-07-27 21:07 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-08-03 10:24 - 2017-07-27 21:05 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-08-03 10:23 - 2017-07-27 21:36 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-08-03 10:22 - 2017-07-27 21:24 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-03 10:21 - 2017-07-27 21:21 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-03 10:20 - 2017-07-27 22:10 - 002679200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-03 10:20 - 2017-07-27 21:19 - 000942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-03 10:20 - 2017-07-27 21:19 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-03 10:20 - 2017-07-27 21:16 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-03 10:18 - 2017-07-27 22:09 - 000529992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-03 10:17 - 2017-07-27 22:25 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-03 10:17 - 2017-07-27 21:25 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-03 10:17 - 2017-07-27 21:19 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 002604248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-03 10:16 - 2017-07-27 22:09 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-08-03 10:16 - 2017-07-27 21:21 - 008333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-03 10:16 - 2017-07-27 21:13 - 004535296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-03 10:16 - 2017-07-27 21:12 - 002939392 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000455584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000116280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-03 10:14 - 2017-07-27 22:17 - 000660680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-03 10:14 - 2017-07-27 22:09 - 000527976 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-03 10:14 - 2017-07-27 21:48 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2017-08-03 10:14 - 2017-07-27 21:22 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-03 10:14 - 2017-07-27 21:19 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-03 10:14 - 2017-07-27 21:18 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-03 10:14 - 2017-07-27 21:07 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-03 10:13 - 2017-07-27 22:24 - 002327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-03 10:13 - 2017-07-27 22:13 - 001033544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-03 10:13 - 2017-07-27 21:21 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-03 10:13 - 2017-07-27 21:19 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-03 10:13 - 2017-07-27 21:07 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-03 10:12 - 2017-07-27 22:23 - 002969888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-03 10:12 - 2017-07-27 22:16 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-03 10:12 - 2017-07-27 22:15 - 005302968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-03 10:12 - 2017-07-27 22:14 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-03 10:12 - 2017-07-27 22:12 - 001325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-03 10:12 - 2017-07-27 21:26 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-03 10:12 - 2017-07-27 21:24 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:12 - 2017-07-27 21:14 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-03 10:12 - 2017-07-27 21:12 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-03 10:12 - 2017-07-27 21:06 - 001833984 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-03 10:10 - 2017-07-27 22:24 - 000119904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-03 10:10 - 2017-07-27 22:22 - 000923048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000192264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000104432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-03 10:10 - 2017-07-27 22:12 - 021353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-03 10:10 - 2017-07-27 21:29 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-03 10:10 - 2017-07-27 21:24 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:24 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-08-03 10:10 - 2017-07-27 21:21 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-03 10:10 - 2017-07-27 21:19 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:10 - 2017-07-27 21:15 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-03 10:10 - 2017-07-27 21:08 - 000600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-03 10:09 - 2017-07-27 22:12 - 000323936 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-03 10:09 - 2017-07-27 21:25 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-03 10:09 - 2017-07-27 21:24 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-03 10:09 - 2017-07-27 21:23 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-03 10:09 - 2017-07-27 21:22 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-03 10:09 - 2017-07-27 21:21 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-03 10:09 - 2017-07-27 21:17 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-03 10:09 - 2017-07-27 21:16 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-03 10:09 - 2017-07-27 21:14 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-03 10:09 - 2017-07-27 21:13 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-03 10:09 - 2017-07-27 21:12 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-03 10:09 - 2017-07-27 21:06 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-03 10:09 - 2017-07-27 21:05 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-03 10:08 - 2017-07-27 22:30 - 001068720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-03 10:08 - 2017-07-27 22:14 - 000318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-03 10:08 - 2017-07-27 22:10 - 001114528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-03 10:08 - 2017-07-27 21:31 - 003995136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:29 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-03 10:08 - 2017-07-27 21:23 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-03 10:08 - 2017-07-27 21:22 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-03 10:08 - 2017-07-27 21:21 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-03 10:08 - 2017-07-27 21:20 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001298432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-03 10:08 - 2017-07-27 21:18 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-03 10:08 - 2017-07-27 21:15 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-03 10:08 - 2017-07-27 21:10 - 001706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-03 10:07 - 2017-07-27 22:16 - 000961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-03 10:07 - 2017-07-27 22:13 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:07 - 2017-07-27 22:13 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-03 10:07 - 2017-07-27 22:12 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-03 10:07 - 2017-07-27 21:30 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-08-03 10:07 - 2017-07-27 21:26 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-03 10:07 - 2017-07-27 21:22 - 000778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-03 10:07 - 2017-07-27 21:20 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-03 10:07 - 2017-07-27 21:19 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-03 10:07 - 2017-07-27 21:18 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-03 10:07 - 2017-07-27 21:15 - 003204608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 002444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-03 10:07 - 2017-07-27 21:11 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-03 10:07 - 2017-07-27 21:10 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-03 10:07 - 2017-07-27 21:09 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-03 10:07 - 2017-07-27 21:09 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-03 10:07 - 2017-07-27 21:06 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-03 10:06 - 2017-07-27 21:23 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 003867040 _____ C:\WINDOWS\system32\PortChanger.exe
2017-08-02 02:45 - 2012-09-25 00:52 - 002398112 _____ (Hewlett Packard) C:\WINDOWS\system32\hppldcoi.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 000151968 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\Dot4.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000049056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4usb.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000019872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4Scan.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 009891328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2017-08-02 02:29 - 2017-08-02 02:29 - 004332032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtCRU64.exe
2017-08-02 02:29 - 2017-08-02 02:29 - 000420832 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsUer.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 000084480 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll
2017-08-02 02:20 - 2017-08-02 02:20 - 000831685 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2017-08-02 02:16 - 2017-08-02 02:16 - 005799386 _____ C:\WINDOWS\system32\igdclbif.bin
2017-08-02 02:16 - 2017-08-02 02:16 - 000225280 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2017-08-02 02:15 - 2017-08-02 02:16 - 003972096 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 019861504 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 005688832 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 004368896 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000388608 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000318464 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000266232 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2017-08-02 02:14 - 2017-08-02 02:15 - 029101560 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 004934144 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 002393160 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 001858632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000439288 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000416256 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2017-08-02 02:13 - 2017-08-02 02:14 - 015488920 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll
2017-08-02 02:13 - 2017-08-02 02:13 - 013483192 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 013655032 _____ (Intel Corporation) C:\WINDOWS\system32\ig8icd64.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 010329088 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig8icd32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 005262848 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 002142208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 001009664 _____ C:\WINDOWS\system32\igfxSDK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000950784 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000947200 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000756224 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000705024 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000641530 _____ C:\WINDOWS\system32\FilmModeDetection.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000449536 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000403671 _____ C:\WINDOWS\system32\ImageStabilization.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000398848 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000390144 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000384512 _____ C:\WINDOWS\system32\igfxTray.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000375173 _____ C:\WINDOWS\system32\ColorImageEnhancement.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000356352 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000337408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000273408 _____ C:\WINDOWS\system32\igfxCPL.cpl
2017-08-02 02:11 - 2017-08-02 02:11 - 000254976 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000251392 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000219648 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000215040 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000214528 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000111616 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000103416 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000100864 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000095232 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000084992 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000055240 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000052736 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\Gfxv4_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\DPTopologyApp.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\Gfxv2_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\DPTopologyAppv2_0.exe.config
2017-08-02 02:10 - 2017-08-02 02:11 - 000220160 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4624.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 006696824 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 005137296 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 002813952 _____ C:\WINDOWS\system32\iglhxa64.cpa
2017-08-02 02:10 - 2017-08-02 02:10 - 001816712 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001814056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001590784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001178624 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000511260 _____ C:\WINDOWS\system32\cp_resources.bin
2017-08-02 02:10 - 2017-08-02 02:10 - 000431104 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000284160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000242152 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000223240 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000205344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000193016 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000183968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000182944 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000181832 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000173568 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160264 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160256 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000157696 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040343 _____ C:\WINDOWS\system32\iglhxo64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040316 _____ C:\WINDOWS\system32\iglhxc64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039658 _____ C:\WINDOWS\system32\iglhxg64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2017-08-02 02:09 - 2017-08-02 02:10 - 039864472 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2017-08-02 02:08 - 2017-08-02 02:09 - 038903384 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2017-08-02 02:07 - 2017-08-02 02:08 - 033479864 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004270672 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004240208 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 000312296 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll
2017-08-02 02:06 - 2017-08-02 02:07 - 016457272 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2017-08-02 02:05 - 2017-08-02 02:06 - 034823448 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 013070648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000297152 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000005412 _____ C:\WINDOWS\system32\iglhxs64lp.vp
2017-08-02 02:04 - 2017-08-02 02:05 - 007407080 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64lp.sys
2017-08-02 02:00 - 2017-08-02 02:00 - 000877424 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000866640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000737960 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll
2017-08-02 01:59 - 2017-08-02 02:00 - 001016928 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003410832 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003122656 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 001435136 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000984912 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000868176 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000691680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000526280 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000467152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000381408 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000258856 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2017-08-02 01:57 - 2017-08-02 01:59 - 072520704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2017-08-02 01:57 - 2017-08-02 01:57 - 012951320 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2017-08-02 01:56 - 2017-08-02 01:56 - 003516984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003509200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003205120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 002210784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 001347136 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000532376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000387312 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000192976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000166200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000088344 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000023688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2017-08-02 01:55 - 2017-08-02 01:55 - 005874144 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2017-08-02 01:55 - 2017-08-02 01:55 - 003677152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2017-08-02 01:55 - 2017-08-02 01:55 - 000122312 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2017-07-18 16:18 - 2017-07-18 16:19 - 000000000 ____D C:\Users\eddie\OpenVPN
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 01:03 - 2017-04-11 16:55 - 000000000 ___RD C:\Users\eddie\OneDrive
2017-08-16 01:01 - 2017-04-11 20:03 - 000000000 __SHD C:\Users\eddie\IntelGraphicsProfiles
2017-08-14 02:25 - 2017-04-11 20:15 - 000000000 __RDX C:\Users\eddie\OneDrive\Documents\Extra
2017-08-14 01:23 - 2017-04-11 20:16 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 00:25 - 2017-03-18 13:57 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2017-08-14 00:24 - 2017-04-11 16:51 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-14 00:24 - 2017-03-18 13:57 - 000430848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-08-14 00:20 - 2017-04-13 18:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-08-08 23:44 - 2017-06-26 14:45 - 000000779 _____ C:\Users\eddie\Desktop\SSF2.lnk
2017-07-18 13:30 - 2017-06-26 15:39 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-08-13 23:57
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-08-2017
Ran by eddie (16-08-2017 15:27:57)
Running from C:\Users\eddie\Desktop
Windows 10 Pro Version 1703 (X64) (2017-08-14 07:23:51)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2896426177-3843145535-1853849027-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2896426177-3843145535-1853849027-503 - Limited - Disabled)
eddie (S-1-5-21-2896426177-3843145535-1853849027-1001 - Administrator - Enabled) => C:\Users\eddie
Guest (S-1-5-21-2896426177-3843145535-1853849027-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: COMODO Antivirus (Enabled - Up to date) {0C515E80-E355-69BD-3445-A511E5C186FD}
AS: COMODO Advanced Protection (Enabled - Up to date) {B730BF64-C56F-6633-0EF5-9E639E46CC40}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: COMODO Firewall (Enabled) {346ADFA5-A93A-68E5-1F1A-0C241B12C186}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Advanced SystemCare 10 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 10.5.0 - IObit)
Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 7.1.5.0 - Auslogics Labs Pty Ltd)
CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform)
Classic Shell (HKLM\...\{CABCE573-0A86-42FA-A52A-C7EA61D5BE08}) (Version: 4.3.1 - IvoSoft)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 58.0.3029.113 - Comodo)
COMODO Internet Security Premium (HKLM\...\{8E048D96-59B5-4BD8-A5D0-8FFCFC161A5A}) (Version: 10.0.1.6258 - COMODO Security Solutions Inc.) Hidden
COMODO Internet Security Premium (HKLM\...\COMODO Internet Security) (Version: 10.0.1.6258 - COMODO Security Solutions Inc.)
COMODO Secure Shopping (HKLM-x32\...\{D15DF9B0-3A98-4BEF-B7D5-FC3AEA421657}) (Version: 1.1.99.0 - COMODO) Hidden
COMODO Secure Shopping (HKLM-x32\...\Comodo Secure_Shopping_list_uninstall) (Version: 1.1.421657.99 - Comodo)
DriverUpdate (HKLM\...\{C2A1552C-0027-4E26-9E81-78CD02DEB71F}) (Version: 4.1.2 - Slimware Utilities Holdings, Inc.) Hidden
DriverUpdate (HKLM\...\DriverUpdate) (Version: 4.1.2 - Slimware Utilities Holdings, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.101 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Internet Security Essentials (HKLM-x32\...\ComodoIse) (Version: 1.2.422025.92 - Comodo)
Java 8 Update 144 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Microsoft OneDrive (HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\OneDriveSetup.exe) (Version: 17.3.6963.0807 - Microsoft Corporation)
Mozilla Firefox 56.0 (x64 en-US) (HKLM\...\Mozilla Firefox 56.0 (x64 en-US)) (Version: 56.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0 - Mozilla)
OpenVPN 2.4.3-I602 (HKLM\...\OpenVPN) (Version: 2.4.3-I602 - OpenVPN Technologies, Inc.)
pCloud Drive (HKLM-x32\...\{5824F8F8-E59E-42CB-98FA-B1F329A58BB9}) (Version: 3.5.7 - pCloud AG) Hidden
pCloud Drive (HKLM-x32\...\{d8e9b125-0436-4a92-94b8-0097dbf23a3d}) (Version: 3.5.7.0 - pCloud AG)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.31235 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.13.1223.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8216 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.9 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.9 - VS Revo Group, Ltd.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.6 - Synaptics Incorporated)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
Windows Desktop Gadgets (HKLM\...\Windows Desktop Gadgets_is1) (Version: 2.0 - hxxp://gadgetsrevived.com)
WinRAR 5.50 beta 6 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.6 - win.rar GmbH)
Wise Force Deleter 1.4.6 (HKLM-x32\...\Wise Force Deleter_is1) (Version: 1.4.6 - WiseCleaner.com, Inc.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ pCloudINPROGRESS] -> {D8BFAFBD-B670-4252-9C17-9CF1C64C2BAF} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [ pCloudINSYNC] -> {8D0C0582-552A-4A6B-9455-DA63E1F329C0} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [ pCloudNOSYNC] -> {3858ED1B-8F1C-42ED-A8A9-FDBF591E3C6B} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs6] -> {AB8F5A1D-F87B-4E34-9D77-65D2615BEB3A} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-09] (/n software, Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs6] -> {AB8F5A1D-F87B-4E34-9D77-65D2615BEB3A} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-09] (/n software, Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit)
ContextMenuHandlers1: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers1: [ContextMenuExtension] -> {a0b73fac-351f-3948-9d8a-1dad9d870193} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit)
ContextMenuHandlers2: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers2: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers3: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit)
ContextMenuHandlers4: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers4: [ContextMenuExtension] -> {a0b73fac-351f-3948-9d8a-1dad9d870193} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-08-02] (Intel Corporation)
ContextMenuHandlers6: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2016-12-15] (VS Revo Group)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\system32\StartMenuHelper64.dll [2017-08-13] (IvoSoft)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-02] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0B959917-3528-44FA-A618-DD66F24691D5} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {2529B177-0509-4702-BA49-FF1D8C59A7DC} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {50515B46-7D9D-4A7F-803A-045867D0AD30} - System32\Tasks\ASC10_SkipUac_eddie => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [2017-08-07] (IObit)
Task: {7B0F3311-DDDF-4F52-9C4B-7310D1F63587} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {7BB95E82-52B7-432E-AD5F-CEEA54A2B32F} - System32\Tasks\Auslogics\Disk Defrag\Start Disk Defrag On eddie Logon => C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe [2017-07-27] (Auslogics)
Task: {8E812564-8E75-4BF8-A3F2-4AF73053B39F} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {90E61B0B-4158-42F4-84A3-FA8401A03CEC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-14] (Google Inc.)
Task: {9123AC40-7DC0-4EF3-847D-C25074057FFC} - System32\Tasks\DriverUpdate Scan => C:\Program Files\DriverUpdate\DriverUpdate.exe [2017-07-31] (SlimWare Utilities, Inc.)
Task: {9686D31E-04B5-4290-B6BA-28F14BC714DE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {9E7F93F7-887A-4FF5-A842-0D33D45729AC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-14] (Google Inc.)
Task: {A24BA1E2-81E7-4CDC-9AE1-FA20784F9388} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2896426177-3843145535-1853849027-1001
Task: {B09219E1-52F8-4B5B-A864-94C93E4E341D} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2017-07-11] (COMODO)
Task: {B73AF37E-9221-4E5F-8FD2-470DE8020F2A} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {D781C52C-6FC0-4FDA-8180-0F8BEFE6681C} - System32\Tasks\CCleanerClean => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {D955C4AD-0427-4EB9-BF2B-D0B59756D047} - System32\Tasks\Auslogics\Disk Defrag\Scheduled Defragmentation => rundll32.exe TaskSchedulerHelper.dll,RunTask "DiskDefrag.exe" "/UseTray /Scheduler"
Task: {EE84B776-442E-4FC1-A069-80F265E7B26E} - System32\Tasks\ASC10_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [2017-07-24] (IObit)
Task: {F55CA907-44A0-4B1D-BA8B-7DB45D5E9FCE} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {FB279480-44E8-4B72-867F-D7C566531A1E} - System32\Tasks\ASC10_AutoCare => C:\Program Files (x86)\IObit\Advanced SystemCare\AutoCare.exe [2017-05-23] (IObit)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerClean.job => C:\Program Files\CCleaner\CCleaner.exe
Task: C:\WINDOWS\Tasks\DriverUpdate Scan.job => C:\Program Files\DriverUpdate\DriverUpdate.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\eddie\Desktop\PC Help Forum.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=illdlgkhakmollnophmajedfblhpijak
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Chrome Remote Desktop.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\File System for OneDrive.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=jbfdfcehgafdbfpniaimfbfomafoadgo
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Hangouts.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=knipolnnllmklapflnccelgolnpehhpl
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\System.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=ocjnemjmlhjkeilmaidemofakmpclcbi
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Wake Up!.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=lbbcfplbfbmimpnlammmeaheakhcogke
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\WeatherBug.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=njkkjobcechefaoknodniidfjapgfoco
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gmail.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=pjkljhegncpnkpknbcohdijeoejaedia
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Web Store.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=ahfgeienlihckogmohjhadlkjgocpleb
==================== Loaded Modules (Whitelisted) ==============
2017-08-16 00:27 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-07-11 12:42 - 2017-07-11 12:42 - 000156352 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdwrhlp.dll
2017-07-11 12:40 - 2017-07-11 12:40 - 000107200 _____ () C:\Program Files\COMODO\COMODO Internet Security\cavwpps.dll
2017-07-11 12:41 - 2017-07-11 12:41 - 000244928 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdcomps.dll
2016-03-16 11:25 - 2016-03-16 11:25 - 000073912 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2017-03-18 13:58 - 2017-03-18 13:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000384512 _____ () C:\WINDOWS\system32\igfxTray.exe
2017-03-18 13:59 - 2017-03-18 19:31 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-07-14 06:26 - 2017-07-14 06:26 - 000638592 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe
2017-08-14 14:41 - 2017-08-11 00:40 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.101\libglesv2.dll
2017-08-14 14:41 - 2017-08-11 00:40 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.101\libegl.dll
2017-08-14 02:16 - 2017-08-14 02:16 - 000054488 _____ () C:\Program Files\CCleaner\branding.dll
2017-08-03 10:12 - 2017-07-27 22:18 - 004125088 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll
2017-03-18 13:59 - 2017-03-18 19:31 - 002487712 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentManagementSDK.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\str => ""="service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2017-08-15 01:30 - 2017-08-15 16:41 - 000001359 _____ C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 keystone.mwbsys.com
0.0.0.0 telemetry.malwarebytes.com
91.209.196.83 download.comodo.com
91.209.196.83 www.download.comodo.com
127.0.0.1 idb.iobit.com
127.0.0.1 asc55.iobit.com
127.0.0.1 is360.iobit.com
127.0.0.1 www.asc55.iobit.com
127.0.0.1 asc.iobit.com
127.0.0.1 pf.iobit.com
127.0.0.1 98.129.229.186
0.0.0.0 keystone.mwbsys.com
0.0.0.0 telemetry.malwarebytes.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.254.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is disabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\...\StartupApproved\Run: => "SecurityHealth"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{FCFE65AB-2442-4A73-B8FF-8B12810382E6}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{42BC09F9-68F9-49B5-86A6-54FA904E5B9D}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{6818C011-599B-437F-BFEA-0DFD8D69923F}C:\program files (x86)\pcloud drive\pcloud.exe] => (Allow) C:\program files (x86)\pcloud drive\pcloud.exe
FirewallRules: [UDP Query User{71C348A0-5C57-4F71-B870-DB5012115947}C:\program files (x86)\pcloud drive\pcloud.exe] => (Allow) C:\program files (x86)\pcloud drive\pcloud.exe
FirewallRules: [{F8B36C69-0C6C-4ECD-891A-B1C1CEAAD1EB}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{CEFED888-4883-47A5-850E-E0DCA6383D80}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe
==================== Restore Points =========================
14-08-2017 02:50:40 Installed Classic Shell
15-08-2017 00:32:17 System Checkpoint
15-08-2017 03:35:37 System Checkpoint
16-08-2017 02:22:18 System Checkpoint
==================== Faulty Device Manager Devices =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/16/2017 12:28:38 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.
Context: Windows Application, SystemIndex Catalog
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
Error: (08/16/2017 12:28:26 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: The search service has detected corrupted data files in the index {id=3800}. The service will attempt to automatically correct this problem by rebuilding the index.
Context: Windows Application, SystemIndex Catalog
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
System errors:
=============
Error: (08/16/2017 12:17:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Software Protection service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (08/16/2017 12:17:35 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Software Protection service to connect.
CodeIntegrity:
===================================
Date: 2017-08-16 14:58:00.750
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 14:58:00.718
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 13:58:06.430
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 13:58:06.361
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 12:58:03.287
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 12:58:03.266
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 12:51:31.062
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 12:51:31.040
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 12:22:31.349
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\cssguard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-08-16 12:19:22.223
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU N3700 @ 1.60GHz
Percentage of memory in use: 81%
Total physical RAM: 3938.3 MB
Available physical RAM: 732.46 MB
Total Virtual: 6494.65 MB
Available Virtual: 1125.83 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:447.82 GB) (Free:389.05 GB) NTFS
Drive d: (Recovery Warranty) (Fixed) (Total:4.88 GB) (Free:1.52 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (UNTITLED) (Removable) (Total:119.08 GB) (Free:95.78 GB) exFAT
Drive p: (pCloud Drive) (Removable) (Total:500 GB) (Free:461.93 GB) exFAT
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: F3CF06FA)
Partition: GPT.
========================================================
Disk: 1 (Size: 119.1 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt ============================
Please download Junkware Removal Tool and save it on your desktop.
Please download a copy of AdwCleaner from HERE, it is important to download it to your desktop.
Once downloaded to the desktop AdwCleaner will create an icon
Should you receive any security warnings or your User Account Control warning appears whilst you are using this application you can safely allow AdwCleaner to continue.
Before running AdwCleaner please ensure all other programs and browsers are closed, then double left click the icon to open it.
AdwCleaner will open, click the scan button to start searching.
The scan may take some time to complete, and when it has any malware found will be automatically selected for quarantining. Click the "Cleaning" button.
After a few seconds a message should tell you your computer will now reboot. Allow the reboot.
When the computer restarts a log file will be displayed, but if its closed for any reason before copying the contents, you will find a copy of the file if you navigate to C:\AdwCleaner[s#].txt
Please Copy and Paste the contents of the log file with your next reply.
- Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
- Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
- The tool will open and start scanning your system.
- Please be patient as this can take a while to complete depending on your system's specifications.
- On completion, a log is saved to your desktop and will automatically open.
- Please post the JRT log.
Please download a copy of AdwCleaner from HERE, it is important to download it to your desktop.
Once downloaded to the desktop AdwCleaner will create an icon
Should you receive any security warnings or your User Account Control warning appears whilst you are using this application you can safely allow AdwCleaner to continue.
Before running AdwCleaner please ensure all other programs and browsers are closed, then double left click the icon to open it.
AdwCleaner will open, click the scan button to start searching.
The scan may take some time to complete, and when it has any malware found will be automatically selected for quarantining. Click the "Cleaning" button.
After a few seconds a message should tell you your computer will now reboot. Allow the reboot.
When the computer restarts a log file will be displayed, but if its closed for any reason before copying the contents, you will find a copy of the file if you navigate to C:\AdwCleaner[s#].txt
Please Copy and Paste the contents of the log file with your next reply.
Here's the results.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Pro x64
Ran by eddie (Administrator) on Wed 08/16/2017 at 21:15:11.22
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 9
Failed to delete: C:\Program Files\driverupdate (Folder)
Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\ProgramData\slimware utilities inc (Folder)
Successfully deleted: C:\ProgramData\Start Menu\Programs\driverupdate (Folder)
Successfully deleted: C:\Users\eddie\AppData\Local\slimware utilities inc (Folder)
Successfully deleted: C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default\user.js (File)
Successfully deleted: C:\users\Public\Documents\downloaded installers (Folder)
Successfully deleted: C:\WINDOWS\system32\Tasks\DriverUpdate Scan (Task)
Successfully deleted: C:\WINDOWS\Tasks\DriverUpdate Scan.job (Task)
Registry: 5
Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_E3F5740D1C7070D0CABB3741A4F94C0C (Registry Value)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DD257A3-5028-41AE-A1E7-A12F76A08893} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DD257A3-5028-41AE-A1E7-A12F76A08893} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} (Registry Key)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 08/16/2017 at 21:25:50.77
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# AdwCleaner 7.0.1.0 - Logfile created on Thu Aug 17 04:34:07 2017
# Updated on 2017/05/08 by Malwarebytes
# Database: 07-31-2017.1
# Running on Windows 10 Pro (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
PUP.Optional.Legacy, AdvancedSystemCareService10
***** [ Folders ] *****
PUP.Optional.AdvancedSystemCare, C:\ProgramData\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\ProgramData\Application Data\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\All Users\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\Default\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\Default User\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\eddie\AppData\LocalLow\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\eddie\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.Legacy, C:\ProgramData\IObit\ASCDownloader
PUP.Optional.Legacy, C:\ProgramData\Application Data\IObit\ASCDownloader
PUP.Optional.Legacy, C:\Users\All Users\IObit\ASCDownloader
PUP.Optional.Legacy, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
PUP.Optional.DriverUpdate, C:\Program Files\DriverUpdate
PUP.Optional.AuslogicsDriverUpdater, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
PUP.Optional.AuslogicsDriverUpdater, C:\ProgramData\Auslogics
PUP.Optional.AuslogicsDriverUpdater, C:\ProgramData\Application Data\Auslogics
PUP.Optional.AuslogicsDriverUpdater, C:\Program Files (x86)\Auslogics
PUP.Optional.AuslogicsDriverUpdater, C:\Windows\SysNative\Tasks\Auslogics
PUP.Optional.AuslogicsDriverUpdater, C:\Users\All Users\Auslogics
PUP.Adware.Heuristic, C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
PUP.Adware.Heuristic, C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
PUP.Adware.Heuristic, C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
PUP.Adware.Heuristic, C:\ProgramData\{EAAB5A83-3809-4B0E-83A6-E4B0DBF2157E}
PUP.Adware.Heuristic, C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
***** [ Files ] *****
PUP.Optional.Legacy, C:\Users\All Users\Desktop\Advanced SystemCare 10.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
PUP.Optional.AuslogicsDiskDefrag, C:\Users\eddie\Desktop\Auslogics Disk Defrag.lnk
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
PUP.Optional.Legacy, ASC10_PerformanceMonitor
PUP.Adware.Heuristic, ASC10_SkipUac_eddie
***** [ Registry ] *****
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\IOBIT\ASC
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.ascplugin.protect
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {F8B36C69-0C6C-4ECD-891A-B1C1CEAAD1EB}
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {CEFED888-4883-47A5-850E-E0DCA6383D80}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\SlimWare Utilities Inc
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\SlimWare Utilities Inc
PUP.Optional.Legacy, [Key] - HKCU\Software\SlimWare Utilities Inc
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\Microsoft\Windows\CurrentVersion\Run | Advanced SystemCare 10
PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run | Advanced SystemCare 10
PUP.Optional.Legacy, [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run | Advanced SystemCare 10
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL
PUP.Optional.TenorShare, [Key] - HKLM\SOFTWARE\WISECLEANER
PUP.Optional.DriverUpdate, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DriverUpdate
PUP.Optional.AuslogicsDriverUpdater, [Key] - HKLM\SOFTWARE\Auslogics
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries.
*************************
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Pro x64
Ran by eddie (Administrator) on Wed 08/16/2017 at 21:15:11.22
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 9
Failed to delete: C:\Program Files\driverupdate (Folder)
Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\ProgramData\slimware utilities inc (Folder)
Successfully deleted: C:\ProgramData\Start Menu\Programs\driverupdate (Folder)
Successfully deleted: C:\Users\eddie\AppData\Local\slimware utilities inc (Folder)
Successfully deleted: C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default\user.js (File)
Successfully deleted: C:\users\Public\Documents\downloaded installers (Folder)
Successfully deleted: C:\WINDOWS\system32\Tasks\DriverUpdate Scan (Task)
Successfully deleted: C:\WINDOWS\Tasks\DriverUpdate Scan.job (Task)
Registry: 5
Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_E3F5740D1C7070D0CABB3741A4F94C0C (Registry Value)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DD257A3-5028-41AE-A1E7-A12F76A08893} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DD257A3-5028-41AE-A1E7-A12F76A08893} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} (Registry Key)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 08/16/2017 at 21:25:50.77
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# AdwCleaner 7.0.1.0 - Logfile created on Thu Aug 17 04:34:07 2017
# Updated on 2017/05/08 by Malwarebytes
# Database: 07-31-2017.1
# Running on Windows 10 Pro (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
PUP.Optional.Legacy, AdvancedSystemCareService10
***** [ Folders ] *****
PUP.Optional.AdvancedSystemCare, C:\ProgramData\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\ProgramData\Application Data\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\All Users\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\Default\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\Default User\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\eddie\AppData\LocalLow\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\eddie\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.Legacy, C:\ProgramData\IObit\ASCDownloader
PUP.Optional.Legacy, C:\ProgramData\Application Data\IObit\ASCDownloader
PUP.Optional.Legacy, C:\Users\All Users\IObit\ASCDownloader
PUP.Optional.Legacy, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
PUP.Optional.DriverUpdate, C:\Program Files\DriverUpdate
PUP.Optional.AuslogicsDriverUpdater, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
PUP.Optional.AuslogicsDriverUpdater, C:\ProgramData\Auslogics
PUP.Optional.AuslogicsDriverUpdater, C:\ProgramData\Application Data\Auslogics
PUP.Optional.AuslogicsDriverUpdater, C:\Program Files (x86)\Auslogics
PUP.Optional.AuslogicsDriverUpdater, C:\Windows\SysNative\Tasks\Auslogics
PUP.Optional.AuslogicsDriverUpdater, C:\Users\All Users\Auslogics
PUP.Adware.Heuristic, C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
PUP.Adware.Heuristic, C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
PUP.Adware.Heuristic, C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
PUP.Adware.Heuristic, C:\ProgramData\{EAAB5A83-3809-4B0E-83A6-E4B0DBF2157E}
PUP.Adware.Heuristic, C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
***** [ Files ] *****
PUP.Optional.Legacy, C:\Users\All Users\Desktop\Advanced SystemCare 10.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
PUP.Optional.AuslogicsDiskDefrag, C:\Users\eddie\Desktop\Auslogics Disk Defrag.lnk
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
PUP.Optional.Legacy, ASC10_PerformanceMonitor
PUP.Adware.Heuristic, ASC10_SkipUac_eddie
***** [ Registry ] *****
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\IOBIT\ASC
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.ascplugin.protect
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {F8B36C69-0C6C-4ECD-891A-B1C1CEAAD1EB}
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {CEFED888-4883-47A5-850E-E0DCA6383D80}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\SlimWare Utilities Inc
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\SlimWare Utilities Inc
PUP.Optional.Legacy, [Key] - HKCU\Software\SlimWare Utilities Inc
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\Microsoft\Windows\CurrentVersion\Run | Advanced SystemCare 10
PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run | Advanced SystemCare 10
PUP.Optional.Legacy, [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run | Advanced SystemCare 10
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL
PUP.Optional.TenorShare, [Key] - HKLM\SOFTWARE\WISECLEANER
PUP.Optional.DriverUpdate, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DriverUpdate
PUP.Optional.AuslogicsDriverUpdater, [Key] - HKLM\SOFTWARE\Auslogics
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries.
*************************
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########
Is this it?
# AdwCleaner 7.0.1.0 - Logfile created on Thu Aug 17 04:35:51 2017
# Updated on 2017/05/08 by Malwarebytes
# Running on Windows 10 Pro (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
Deleted: AdvancedSystemCareService10
***** [ Folders ] *****
Deleted: C:\ProgramData\IObit\ASCDownloader
Deleted: C:\ProgramData\Application Data\IObit\ASCDownloader
Deleted: C:\Users\All Users\IObit\ASCDownloader
Deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
Deleted: C:\Program Files\DriverUpdate
Deleted: C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
Deleted: C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
Deleted: C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
Deleted: C:\ProgramData\{EAAB5A83-3809-4B0E-83A6-E4B0DBF2157E}
Deleted: C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
***** [ Files ] *****
Deleted: C:\Users\All Users\Desktop\Advanced SystemCare 10.lnk
Deleted: C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
Deleted: ASC10_PerformanceMonitor
Deleted: ASC10_SkipUac_eddie
***** [ Registry ] *****
Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{F8B36C69-0C6C-4ECD-891A-B1C1CEAAD1EB}
Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{CEFED888-4883-47A5-850E-E0DCA6383D80}
Deleted: [Key] - HKLM\SOFTWARE\SlimWare Utilities Inc
Deleted: [Key] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\SlimWare Utilities Inc
Deleted: [Key] - HKCU\Software\SlimWare Utilities Inc
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}
Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Deleted: [Value] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\Microsoft\Windows\CurrentVersion\Run|Advanced SystemCare 10
Deleted: [Value] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Advanced SystemCare 10
Deleted: [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Advanced SystemCare 10
Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL
Deleted: [Key] - HKLM\SOFTWARE\WISECLEANER
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DriverUpdate
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries deleted.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries deleted.
*************************
::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0
*************************
C:/AdwCleaner/AdwCleaner[S0].txt - [6042 B] - [2017/8/17 4:34:7]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########
# AdwCleaner 7.0.1.0 - Logfile created on Thu Aug 17 04:35:51 2017
# Updated on 2017/05/08 by Malwarebytes
# Running on Windows 10 Pro (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
Deleted: AdvancedSystemCareService10
***** [ Folders ] *****
Deleted: C:\ProgramData\IObit\ASCDownloader
Deleted: C:\ProgramData\Application Data\IObit\ASCDownloader
Deleted: C:\Users\All Users\IObit\ASCDownloader
Deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
Deleted: C:\Program Files\DriverUpdate
Deleted: C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
Deleted: C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
Deleted: C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
Deleted: C:\ProgramData\{EAAB5A83-3809-4B0E-83A6-E4B0DBF2157E}
Deleted: C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
***** [ Files ] *****
Deleted: C:\Users\All Users\Desktop\Advanced SystemCare 10.lnk
Deleted: C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
Deleted: ASC10_PerformanceMonitor
Deleted: ASC10_SkipUac_eddie
***** [ Registry ] *****
Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{F8B36C69-0C6C-4ECD-891A-B1C1CEAAD1EB}
Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{CEFED888-4883-47A5-850E-E0DCA6383D80}
Deleted: [Key] - HKLM\SOFTWARE\SlimWare Utilities Inc
Deleted: [Key] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\SlimWare Utilities Inc
Deleted: [Key] - HKCU\Software\SlimWare Utilities Inc
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}
Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Deleted: [Value] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\Microsoft\Windows\CurrentVersion\Run|Advanced SystemCare 10
Deleted: [Value] - HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Advanced SystemCare 10
Deleted: [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Advanced SystemCare 10
Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL
Deleted: [Key] - HKLM\SOFTWARE\WISECLEANER
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DriverUpdate
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries deleted.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries deleted.
*************************
::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0
*************************
C:/AdwCleaner/AdwCleaner[S0].txt - [6042 B] - [2017/8/17 4:34:7]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########
We recommend doing the following:
Please download Geek Uninstaller or use Revo Uninstaller and uninstall the following programs:
IOBit has since been flagged as PUP due to them stealing MBAM's databases a long time ago and we do not approve of such devious practices. Slimware installs adware along with their products. CCleaner is a better and free alternative.
After doing so please provide us with fresh FRST logs (Addition.txt and FRST.txt). Please Copy and Paste, do not upload
Please download Geek Uninstaller or use Revo Uninstaller and uninstall the following programs:
IOBit has since been flagged as PUP due to them stealing MBAM's databases a long time ago and we do not approve of such devious practices. Slimware installs adware along with their products. CCleaner is a better and free alternative.
After doing so please provide us with fresh FRST logs (Addition.txt and FRST.txt). Please Copy and Paste, do not upload
FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-08-2017
Ran by eddie (administrator) on WIN10XP-1703PRO (16-08-2017 22:26:41)
Running from C:\Users\eddie\Desktop
Loaded Profiles: eddie (Available Profiles: eddie)
Platform: Windows 10 Pro Version 1703 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(COMODO) C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(Comodo) C:\Program Files (x86)\COMODO\Dragon\dragon_updater.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(pCloud AG) C:\Program Files (x86)\pCloud Drive\pCloud.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9231328 2017-08-02] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2017-08-13] (IvoSoft)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1489088 2017-07-11] (COMODO)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [3632848 2017-07-05] (COMODO)
HKLM-x32\...\Run: [vdcss] => C:\Program Files (x86)\COMODO\COMODO Secure Shopping\vdcss.exe [7690936 2017-06-30] (COMODO)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [pCloud] => C:\Program Files (x86)\pCloud Drive\pCloud.exe [3885832 2017-06-16] (pCloud AG)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [OpenVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] ()
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCEnhancer] => E:\CCEnhancer\CCEnhancer-4.4.1.exe [282112 2017-03-06] (SingularLabs)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [GoogleChromeAutoLaunch_E3F5740D1C7070D0CABB3741A4F94C0C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1301848 2017-08-11] (Google Inc.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
SSODL: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\system32\cbfsMntNtf6.dll (/n software, Inc.)
SSODL-x32: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll (/n software, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{27427e43-89c9-4d14-b85e-f8cbc9b59dfe}: [DhcpNameServer] 192.168.254.254
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2896426177-3843145535-1853849027-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files (x86)\COMODO\COMODO Secure Shopping\cssbho64.dll [2017-06-30] (COMODO)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-14] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-14] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2017-08-13] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2017-08-13] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
FireFox:
========
FF DefaultProfile: oomuvn3h.default
FF ProfilePath: C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default [2017-08-16]
FF Extension: (Activity Stream) - C:\Program Files\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Click-to-Play staged rollout) - C:\Program Files\Mozilla Firefox\browser\features\clicktoplay-rollout@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Follow-on Search Telemetry) - C:\Program Files\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi [2017-08-10] [not signed]
FF Extension: (Photon onboarding) - C:\Program Files\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Shield Recipe Client) - C:\Program Files\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi [2017-08-10] [not signed]
FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-14] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-2896426177-3843145535-1853849027-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\eddie\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2012-05-11] (Unity Technologies ApS)
Chrome:
=======
CHR HomePage: Default -> hxxp://getchrome.eu/home/
CHR StartupUrls: Default -> "hxxp://getchrome.eu/home"
CHR DefaultSearchKeyword: Default -> wiki
CHR Profile: C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default [2017-08-16]
CHR Extension: (ProxFlow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2017-08-14]
CHR Extension: (Google Slides) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-14]
CHR Extension: (Security Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abbpkdnljicgejmkndbncgpeamlcjhom [2017-08-14]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2017-08-16]
CHR Extension: (GameShark) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\acmchkofncmmkabbadlofeffhchdmkop [2017-08-14]
CHR Extension: (Movie4K) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\adkbpinkibeobfkgfoolfpnldifjdedp [2017-08-14]
CHR Extension: (CB Channels) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afdeaaklpenijgadfgaljjnknlbaphae [2017-08-14]
CHR Extension: (Microsoft Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afiaggegejgnhhkfjpbbplaigaeijppc [2017-08-14]
CHR Extension: (Microsoft Virtual Agent) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahhncecjhnalimedngnkpfacimkmlafh [2017-08-14]
CHR Extension: (My Win10 PC) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akhdcannjobjjbbfabajjchleaccalng [2017-08-14]
CHR Extension: (HD for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2017-08-14]
CHR Extension: (LR EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akkmbnlaijgepeeldfglekgfajoiklph [2017-08-14]
CHR Extension: (ToonGet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\almbnkdlegibjhcgfbflpemghhdmalmf [2017-08-14]
CHR Extension: (Google Docs) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-14]
CHR Extension: (Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-14]
CHR Extension: (ARChon4Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbooacojifhcpicigmefgdhaiihjhnmd [2017-08-14]
CHR Extension: (Open with Google Drive™ Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdkpinfdldjdngmgfbifbdbgaoampkan [2017-08-14]
CHR Extension: (Super Nintendo Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\beogeghicacplhninfdmhiianhjimccp [2017-08-14]
CHR Extension: (Bitmoji) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfgdeiadkckfbkeigkoncpdieiiefpig [2017-08-14]
CHR Extension: (Google Groups) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfmbadcfdhiklafcdohpfphhhakmiakk [2017-08-14]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2017-08-14]
CHR Extension: (Mingle 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjeepgflngbnlkmfikinngokbcijkean [2017-08-14]
CHR Extension: (Amazon Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjjmjgafamolafiboomflecccipeddim [2017-08-14]
CHR Extension: (Win10 ISO) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjlhajlpdpmfebiokogbjhdgmkehgcbe [2017-08-14]
CHR Extension: (OpenDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmeclafhfpefpfndaigmiojllfgmbcm [2017-08-14]
CHR Extension: (YouTube) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-14]
CHR Extension: (1M AppStore) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bminhbeeccgdnghnabbhiafpndlbkedn [2017-08-14]
CHR Extension: (Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cagpfhohgbclhfgfggnbgfhnjehoknpk [2017-08-14]
CHR Extension: (History 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cahejgbbfgmlmjgdjlibphdjeldhagkp [2017-08-14]
CHR Extension: (Amazon) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\camkdhjofheljkflfmfgbnajgjnhlopf [2017-08-14]
CHR Extension: (Update) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbkkihljhphdkjhiabaomgfninkfihhe [2017-08-14]
CHR Extension: (Toons Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdibbihehmddkghfgiblbflocphmmooc [2017-08-14]
CHR Extension: (Snoopy vs. The Red Baron) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfalonhgbljhcmcajnbdebedcjdoblnl [2017-08-14]
CHR Extension: (Adblock Plus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-08-14]
CHR Extension: (Pushbullet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-08-14]
CHR Extension: (OneNote Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciniambnphakdoflgeamacamhfllbkmo [2017-08-14]
CHR Extension: (Monopoly Empire game | Play Kids Games Online | Hasbro) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjdhdhilfeoikokoiakkgnckknaekled [2017-08-14]
CHR Extension: (YT2MP3) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjhmdjffbkdmddmdmmbabiaclojaomeg [2017-08-14]
CHR Extension: (TechSupportGuy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckffimcpiheacclckfmmdcbhbmfmfikd [2017-08-14]
CHR Extension: (TWC Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckifgoknanfhclklbfjlpblncjpdfmfj [2017-08-14]
CHR Extension: (Microsoft Flow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clldiedkmkolghagmnpmnoljbhijiboi [2017-08-14]
CHR Extension: (HP ENVY) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clpdjjcfniihldhfchnjbiladapnbahi [2017-08-14]
CHR Extension: (MAFYT Settings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmelobemnghobnlpdfmmbejdoaleajcf [2017-08-14]
CHR Extension: (SSF2 Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnlencpcagccinnhoijdgmobkmfhalcc [2017-08-14]
CHR Extension: (Harakirimail extension) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coaagmonnnldglbilekplfnphpdencce [2017-08-14]
CHR Extension: (ComputerHelpForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbhjgghkoimcbpnbgjikmpgffkgajfk [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\damfhmjfmeiigloagjpelmocjoeobdno [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dccnabnbnagheglhfmgdcjlcjbeibaje [2017-08-14]
CHR Extension: (Chase Online ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcofdmelmmjneoonenbhpagpbpiojkhf [2017-08-14]
CHR Extension: (Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\deceagebecbceejblnlcjooeohmmeldh [2017-08-14]
CHR Extension: (3DS Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfkhponeglmiiobiihilahinlckifjjh [2017-08-14]
CHR Extension: (Fus.Fall Legacy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgmdnngojpofdigdidplfaebnjohmfng [2017-08-14]
CHR Extension: (Tampermonkey) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-08-14]
CHR Extension: (Janifer Boston) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhpkkleekhaceehoigfcnaaidjoleflh [2017-08-14]
CHR Extension: (Glitch Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djahbfbhacphllgemcekmdnlilahhmge [2017-08-14]
CHR Extension: (Nintendo Chat) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djeppnpeahmgfaohhidhjpipjkahimfe [2017-08-14]
CHR Extension: (Google+) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2017-08-14]
CHR Extension: (NORAD Tracks Santa) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmkoneajelflpbfjpchjaiglipefmnki [2017-08-14]
CHR Extension: (Frontier DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnabfpdnbkmdmcoillihefhnjjknnona [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dolkddbfbhledadcdepacaljbglglcoe [2017-08-14]
CHR Extension: (Sumo Paint) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpgjihldbpodlmnjolekemlfbcajnmod [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ebgecmolaheocnobalndebpehpimdghi [2017-08-14]
CHR Extension: (Inbox) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\edmijkelpnflahpdblkkobimcplcgmgj [2017-08-14]
CHR Extension: (Amazon Shop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eecahhmlcjafclfkjodjjgllpmcmkgko [2017-08-14]
CHR Extension: (Novelty, OH Weather Forecast and Cond...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eenemnbihadgbcjemdnobckofmiihfnk [2017-08-14]
CHR Extension: (Shortcut to Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\efcdnfkhiiafogbhcainplbbgemgaaen [2017-08-14]
CHR Extension: (YouTubeDownloader) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eieafdgibiahkjdgdccmldmjidglnbjj [2017-08-14]
CHR Extension: (Google Fourms) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejiggjokppepehmfdngjefbhjeheknmp [2017-08-14]
CHR Extension: (Cast Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejliejcnhkkaaipdgkeiihbefhjeoemp [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejppoecfdibjchmpdcphbanegdjebcgo [2017-08-14]
CHR Extension: (HelpSupport Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekimmgolelbekdhafemjekjhkempbkfd [2017-08-14]
CHR Extension: (Comodo AdBlocker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhcnbjoomhmifmfeggoalmplblcmcin [2017-08-14]
CHR Extension: (Chrome Goodies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\emmdmeocdlghmhbfjaldhjahnfbkbpck [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\enffghkdjcgkndjodbaelocgmcbmbhpp [2017-08-14]
CHR Extension: (Filter by WOT) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eomhfalemadkajmgmppkoenihlljdjoj [2017-08-14]
CHR Extension: (Update Windows 10) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\epejeipipakmkmdfnkpghcjfmeigpggo [2017-08-14]
CHR Extension: (G SSH2 SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabhojopefodnkcighibfcnamgmplloh [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fajdleioencnfbnmiienoibkoimkooli [2017-08-14]
CHR Extension: (Old EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fanigphfdfepmnelohpfhcpecoekibml [2017-08-14]
CHR Extension: (DiskImager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdfeicageglnlelmohmkojdjccgkdmcb [2017-08-14]
CHR Extension: (FREE App Creator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdhglomjccccgggpeabmiadbpmofeedc [2017-08-14]
CHR Extension: (Motorola) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fekllafapcbanabhhooobibaanmndalm [2017-08-14]
CHR Extension: (Google Sheets) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-14]
CHR Extension: (Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdhgdfhcclnmednjibbajgcpcpppknl [2017-08-14]
CHR Extension: (FB Game Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijlioglnahpdajepoinkodlegkolkam [2017-08-14]
CHR Extension: (Villionaire) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fimebapbdliodpciaalpoijonhdfhhkd [2017-08-14]
CHR Extension: (Word Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2017-08-14]
CHR Extension: (G SSH SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fipamjmedinmfclljanbjhhbdkfinpkc [2017-08-14]
CHR Extension: (Nintendo ThemeShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkhaiaahhhomnfnnjhmnkkhloogihnfa [2017-08-14]
CHR Extension: (EMails) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fknmbhaaehfdjpmooilcabjgooldjdoo [2017-08-14]
CHR Extension: (Google Voice ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fldbfpjncfkebegiobhnjanbokdlbnij [2017-08-14]
CHR Extension: (Rufus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljfobnflghnobgffmkpjddbdehgmfol [2017-08-14]
CHR Extension: (Who's on first?) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljmpldncihcmabdfjkgonhijjkpbgkl [2017-08-14]
CHR Extension: (Norton DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\focoenonfjfpphaadindagmhlijgklak [2017-08-14]
CHR Extension: (Nintendo CS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpdddhjdalfonhmejlkcfhjcckhealoc [2017-08-14]
CHR Extension: (Chrome Remote Desktop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-08-14]
CHR Extension: (SPdate) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmnahlpnikhhgldfmeajheocdileadd [2017-08-14]
CHR Extension: (Super Mario) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdljahompmnjdcmnlcfeobicdpepefbf [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegmdadojdijhnemaeolhalohelcagod [2017-08-14]
CHR Extension: (Network Test) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\geklcdelofkoldghehnhggalmoahklbi [2017-08-14]
CHR Extension: (Homebrew Browser) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjnhndecndnepbjpmaloifckdmgcac [2017-08-14]
CHR Extension: (About GPG Services) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaoeklfaibbbipibbalclmnllojibkh [2017-08-14]
CHR Extension: (Google Docs Offline) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-14]
CHR Extension: (Click&Clean) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2017-08-14]
CHR Extension: (Anyfile Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghlichmdnegmcpafgmmlpkegmcndlndi [2017-08-14]
CHR Extension: (Outlook People) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\giafdibgibbipnlecfckidkecmpkedho [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjaejhlejagppekogippmigjbkdjmcdk [2017-08-14]
CHR Extension: (Open PayPal) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glghgmejmmepalcnengjekjfmfbailbl [2017-08-14]
CHR Extension: (Google Wallet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhhiiglleiipdnodkaabbbbjhepnbcb [2017-08-14]
CHR Extension: (Save to Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2017-08-14]
CHR Extension: (Bookmark Manager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2017-08-14]
CHR Extension: (UnRAR and RAR Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\goeclnlkhfoejbhdebemhjljlmcbhfkp [2017-08-14]
CHR Extension: (Drive Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpgjomejfimnbmobcocilppikhncegaj [2017-08-14]
CHR Extension: (Win10 Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpjminmgekffdgiancflhaojkgjcdgmc [2017-08-14]
CHR Extension: (Microsoft Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplepoifohkaepkncehnpljceeljlabi [2017-08-14]
CHR Extension: (WC Forums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbiinloenjigabpbdlogbimfgbopcfce [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfbcjnjfeolgeoddhcdjpogocmpkmncp [2017-08-14]
CHR Extension: (GSSH.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmckcabobcmbdlimkenccopfnpokmie [2017-08-14]
CHR Extension: (GV Phone) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmpoeaghekodfplkofpeabpnipphcjh [2017-08-14]
CHR Extension: (Outlook Tasks) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkaimcgnicopmhblimdmfjahhifkfcoi [2017-08-14]
CHR Extension: (Dead Skin) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnjjcekgbjlpiegjcdmmpojndajlndok [2017-08-14]
CHR Extension: (RomsEShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hohhmomfljojjeaaehdcocalfpejjccc [2017-08-14]
CHR Extension: (USPS Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\idammebdkcmcjhminehllfamifenkhbn [2017-08-14]
CHR Extension: (Android Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbnciaeojfhgeihkflgcgajopfjeohg [2017-08-14]
CHR Extension: (Get Human) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifcelejocgjieghblljgkemmnlejjlep [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igabecodgkgfkdhglpojbnbobbnaajai [2017-08-14]
CHR Extension: (SEGA Bandonware) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igelfoafbodelegelfonpkanedmogdpm [2017-08-14]
CHR Extension: (OMG! Chrome!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igpknfbadalohcopbkaepbgblomnbdma [2017-08-14]
CHR Extension: (Frontier Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihjgglhacdljfhmlinhcagchbkcgdhio [2017-08-14]
CHR Extension: (Zip, UnZip App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiaianhgacnhnnhejddkghikgnhgpeaa [2017-08-14]
CHR Extension: (Bible Questions Answered) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiipijolbcononkgjpepkplcchmajanm [2017-08-14]
CHR Extension: (Apps Launcher) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijmgkhchjindcjamnckoiahagecjnkdc [2017-08-14]
CHR Extension: (Office Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikhblhjgapcilfennndodceemdoomngn [2017-08-14]
CHR Extension: (Excel Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2017-08-14]
CHR Extension: (PC Help Forum) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\illdlgkhakmollnophmajedfblhpijak [2017-08-14]
CHR Extension: (COSwallpapers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\inpceamnbdnjkljfebkpdgfnnfckopap [2017-08-14]
CHR Extension: (HTML5 Flash Warning Fix for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipdkokhdeppifjgcmhbfgmjmdllfpkln [2017-08-14]
CHR Extension: (File System for OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdfcehgafdbfpniaimfbfomafoadgo [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbjamgmfdlbplimhkomcjjlemjaddogn [2017-08-14]
CHR Extension: (PCTechForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jecdgjmkjbcagbkoifleegbplpnaobfa [2017-08-14]
CHR Extension: (Microsoft Update Catalog) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhgndoofkbbhhfcoldgjcakejekefcd [2017-08-14]
CHR Extension: (SSF2 Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgplhfbmmkajpgnpldoaafagambccjje [2017-08-14]
CHR Extension: (BibleGateway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjmdfkmnphhfgilhfofaiffmhjlnopan [2017-08-14]
CHR Extension: (SM Trial Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljcdndcgbkbjonffogpnljganhabgmj [2017-08-14]
CHR Extension: (Save to Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfikkaogpplgnfjmbjdpalkhclendgd [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jomemcnjdjkjipodmcpfjhioloioplfh [2017-08-14]
CHR Extension: (CDFF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kahonebhcmapeomaemhjakphnpffhhhf [2017-08-14]
CHR Extension: (My Sway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcnmjbpdljgcffbninlkelpbfmbbbohp [2017-08-14]
CHR Extension: (North Pole Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdggiihhdpfglclmfghofjbiagonaplo [2017-08-14]
CHR Extension: (Chrome Web Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfknblmmckdmlklbncfodpomfoejlbgm [2017-08-14]
CHR Extension: (Range Extender Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgaimanaoiiecgbljbpjhkdicaogkinf [2017-08-14]
CHR Extension: (4Shared) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khdleokphdcnmagagajnchlcmacfphan [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khomnbdfmhfppiemgglncdlbbnppffdo [2017-08-14]
CHR Extension: (Pure Flix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiiijkmmlfiofadnffcomgcmdlppddhd [2017-08-14]
CHR Extension: (Novelty, OH Weather Conditions & Fore...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkphahjiaiaahfhcbedhbgfpodbojbje [2017-08-14]
CHR Extension: (MyAptoideBU) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpdcjojlnaceggdkglndamdmaonfnpi [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2017-08-14]
CHR Extension: (GSSH2.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\laekopehhnfklajodmbbhdfhmkfbnblc [2017-08-14]
CHR Extension: (Wake Up!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbbcfplbfbmimpnlammmeaheakhcogke [2017-08-14]
CHR Extension: (AnimeDub Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbdcckpbjegpnhhdejaipegkabkofhla [2017-08-14]
CHR Extension: (Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lddagfjihimnacaabfnfagjcokfmnekc [2017-08-14]
CHR Extension: (Aptoide) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhhjndfejaoaiaaokjmhoiedppdmknki [2017-08-14]
CHR Extension: (AnimeDub) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhnnmimodonfbnmpgmcjahlblaenkgle [2017-08-14]
CHR Extension: (Files2Zip) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhoadfgjeimckjlphkdebfmhbpeniljo [2017-08-14]
CHR Extension: (USPS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\liocengmpmiiejdoebmlifecbmcpfigg [2017-08-14]
CHR Extension: (Wikipedia Search) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lipakennkogpodadpikgipnogamhklmk [2017-08-14]
CHR Extension: (MSN Games - Free Online Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkbgddpallgbhlldcnnjomnodmohpklf [2017-08-14]
CHR Extension: (IHeart Christmas) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lndoiaoagbajoadpgmfgckfckmchepmj [2017-08-14]
CHR Extension: (Google Maps) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2017-08-14]
CHR Extension: (SSB) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lockfglcfjlaagpghflagedkkgojipke [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\locmdgkcjcjacipaokcoochhjhpklbih [2017-08-14]
CHR Extension: (B1 File Extracter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbgobeedadfbponkgffobhpmokjmlhol [2017-08-14]
CHR Extension: (Documents Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbhgihpdipbgifogehncdehebkpehoap [2017-08-14]
CHR Extension: (GoogleDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbogpnkehmjcidggfooapenefhckeehd [2017-08-14]
CHR Extension: (PowerPoint Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2017-08-14]
CHR Extension: (Messenger (Unofficial)) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdapmeleikeppmfgadilffngabfpibok [2017-08-14]
CHR Extension: (GoogleFuchsia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mejnaonfdocegokbjldkeafifpnfnpan [2017-08-14]
CHR Extension: (CN Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mekgfnmophledbpkmikhnfkimoahjohn [2017-08-14]
CHR Extension: (CraigTechShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfbfebnljjciechbmlehdcmnmdhacgmi [2017-08-14]
CHR Extension: (COMODO DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfnnnpncpeeecbbdepenkkgpjoenkbbo [2017-08-14]
CHR Extension: (T-Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhpgceapcpooallmggianccbakegnhnb [2017-08-14]
CHR Extension: (V.FreeMovies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkopchcfcbchhnbpldmdjfbdhgkcpgkn [2017-08-14]
CHR Extension: (CB Central) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlieflpkidahjkojakjlpnlnchobihbl [2017-08-14]
CHR Extension: (ZIP Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmfcakoljjhncfphlflcedhgogfhpbcd [2017-08-14]
CHR Extension: (GC Options) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmmanlicckcagdkabbemhccfpmgojncl [2017-08-14]
CHR Extension: (My Google Account) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnepgpaicadoimgdlajhkgokfenaadkh [2017-08-14]
CHR Extension: (PogoTM) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmklochmlghbgebbmkldomoihjbgfie [2017-08-14]
CHR Extension: (Nintendo Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mogfngbfndeeecglaejajbioegpimija [2017-08-14]
CHR Extension: (What's on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbeopbccnmkgdlbpicobflenbjceoaka [2017-08-14]
CHR Extension: (Chrome OS Features) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbjdhanphhipjfkmicljakgnbaicfojk [2017-08-14]
CHR Extension: (Ws on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncjendjahmgpgjdeenknmdoecofmfdod [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2017-08-14]
CHR Extension: (Reload It) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nconjighkgcoppohfilfinlimdfmjafg [2017-08-14]
CHR Extension: (Games4Summer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndphblldagopagiodebolhdjohgindbm [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2017-08-14]
CHR Extension: (UNetbootin - Homepage and Downloads) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhanbcbjhjcgpccibphcicainkkinool [2017-08-14]
CHR Extension: (SupportSpace) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nigmaeimafjgjfodjfhnancnahfeindg [2017-08-14]
CHR Extension: (FedEx Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikgcnimkfeopobooaahjpbdkdfhchao [2017-08-14]
CHR Extension: (SEGA Online Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nilhogoffgcdfgmejcjpidfaiefpccpl [2017-08-14]
CHR Extension: (WeatherBug) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\njkkjobcechefaoknodniidfjapgfoco [2017-08-14]
CHR Extension: (Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nklbmhejmcjofglijalidajdlihahnpd [2017-08-14]
CHR Extension: (Archive Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknadlalodfadgegkigkmbhofcmkhfnc [2017-08-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-14]
CHR Extension: (Win10 Pro keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnelnnlfcdhjfbfglandknndlonidojg [2017-08-14]
CHR Extension: (Toonova) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobhijfkaffjbkocimaaembibggenkdc [2017-08-14]
CHR Extension: (Frontier) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nofcknkefjengmgmlnmdmgbmlakhhnok [2017-08-14]
CHR Extension: (SM63.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\noijjjifnenaafboiipobhiflmiaimof [2017-08-14]
CHR Extension: (Chrome OS EOL) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\npmnpehbihaieehmoaifdkdlcgndmpjn [2017-08-14]
CHR Extension: (System) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocjnemjmlhjkeilmaidemofakmpclcbi [2017-08-14]
CHR Extension: (COMODO GeekBuddy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oebmcdnandbcnfmpjecmmhcoogfneelj [2017-08-14]
CHR Extension: (Google Santa Tracker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehagbcimlpafjbdijnjmaboblcfdnoh [2017-08-14]
CHR Extension: (PDF Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oemmndcbldboiebfnladdacbdfmadadm [2017-08-14]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2017-08-15]
CHR Extension: (App Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogffnakkboiaoifjbhjbahamkdojaemm [2017-08-14]
CHR Extension: (EPForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oimkklcnelpdlkkbjjablakandmmddio [2017-08-14]
CHR Extension: (Fullscreen Anything) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\olcfgpmjldkkjdclidhcbonieibfhhdh [2017-08-14]
CHR Extension: (SM 63) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oldjcgpcnneleakkepogfghcehnjcngf [2017-08-14]
CHR Extension: (YouTube™ Flash-HTML5) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\omimccinlhlkpjaeaocglgmkbelejlhj [2017-08-14]
CHR Extension: (Christian Date) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ompnolbokepechjidcgpaddaaeoocajn [2017-08-14]
CHR Extension: (Consumer AV Providers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ongfjpmgcneinonelpaljjdaigppnneo [2017-08-14]
CHR Extension: (Putlocker ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookjcnljofpnadeabapgadihfhngblfe [2017-08-14]
CHR Extension: (Nintendo RomShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pahokmgpomeaakdfnahejklhcifhaige [2017-08-14]
CHR Extension: (Microsoft Office Home) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\palennhedgekbnbmokheidadmghcncgl [2017-08-14]
CHR Extension: (I Heart Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcbnpgdibikphcelmkjldlfjjepjipl [2017-08-14]
CHR Extension: (Click&Clean App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-08-14]
CHR Extension: (Shortcuts for Google™ Products) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdlecffodcfabchelafoljcdphfpkpcl [2017-08-14]
CHR Extension: (Date Countdown) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfbpikfaigmikdjkghbkbapjhfoglipj [2017-08-14]
CHR Extension: (Data Saver) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmgfdlgomnbgkofeojodiodmgpgmkac [2017-08-14]
CHR Extension: (Outlook.com) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\phfegmcgballapgnbppeeidckejebknn [2017-08-14]
CHR Extension: (Super Smash Bros For NDS !!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pifamkpimegbfnakceigajiljjodcfla [2017-08-14]
CHR Extension: (Gmail) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-14]
CHR Extension: (Chrome Media Router) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-14]
CHR Extension: (OMG! Ubuntu!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmoodaljflkhbojjaiibgnlindbhebme [2017-08-14]
CHR Extension: (EBay) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppaellakmlibbcfkgkmbkkllnhcmghca [2017-08-14]
CHR Extension: (Google Contacts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppbiamkfhlcpgijakdgbbffikmkkofnl [2017-08-14]
CHR Extension: (Apps On Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppmdjabijijblhfhnbgcpnoamkibcclm [2017-08-14]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [10501104 2017-07-11] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2017-07-11] (COMODO)
R2 csssrv; C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe [3210936 2017-06-30] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2273432 2017-08-08] (Comodo)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [356352 2017-08-02] (Intel Corporation)
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-07-05] (COMODO)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324576 2017-08-02] (Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-04-11] (Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269912 2017-01-17] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-19] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-09-09] (/n software, Inc.)
R1 cmdcss; C:\WINDOWS\system32\drivers\cmdcss.sys [126056 2017-03-31] (COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [40936 2017-06-02] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [831992 2017-06-02] (COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [50776 2017-06-02] (COMODO)
S3 dot4; C:\WINDOWS\System32\drivers\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [72584 2017-01-12] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [67976 2017-01-12] (Intel Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77376 2017-06-27] ()
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7407080 2017-08-02] (Intel Corporation)
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [132880 2017-06-07] (COMODO)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [62208 2017-03-29] (COMODO)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [188352 2017-08-16] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [101784 2017-08-16] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [45472 2017-08-16] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-16] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93600 2017-08-16] (Malwarebytes)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [947712 2017-02-15] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [420832 2017-08-02] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [6804480 2017-05-03] (Realtek Semiconductor Corporation )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [60504 2017-01-17] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [64088 2017-01-17] (Synaptics Incorporated)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2015-10-15] (Intel Corporation)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [18624 2016-09-09] (/n software, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30392 2017-04-25] (HP)
S3 WiseUnlock; C:\WINDOWS\WiseUnlock64.sys [33864 2017-08-15] (WiseCleaner.com)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 22:26 - 2017-08-16 22:28 - 000052421 _____ C:\Users\eddie\Desktop\FRST.txt
2017-08-16 22:26 - 2017-08-16 22:26 - 000000000 ____D C:\FRST
2017-08-16 22:24 - 2017-08-16 22:24 - 002395648 _____ (Farbar) C:\Users\eddie\Desktop\FRST64.exe
2017-08-16 22:21 - 2017-08-16 22:21 - 000000000 ___HD C:\OneDriveTemp
2017-08-16 22:19 - 2017-08-16 22:19 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-08-16 21:53 - 2017-08-16 21:53 - 000000000 ____D C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
2017-08-16 21:28 - 2017-08-16 21:53 - 000000000 ____D C:\ProgramData\ProductData
2017-08-16 21:27 - 2017-08-16 21:35 - 000000000 ____D C:\AdwCleaner
2017-08-16 21:08 - 2017-08-16 21:08 - 000003656 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-08-16 20:40 - 2017-08-16 20:40 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2017-08-16 20:40 - 2017-08-16 20:40 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxinit.dll
2017-08-16 20:40 - 2017-08-16 20:40 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraUXThemePatcher
2017-08-16 20:40 - 2017-08-16 20:40 - 000000000 ____D C:\Program Files (x86)\UltraUXThemePatcher
2017-08-16 20:40 - 2017-06-19 22:05 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll.backup
2017-08-16 20:40 - 2017-03-18 13:58 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxinit.dll.backup
2017-08-16 20:39 - 2017-08-16 20:39 - 000587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2017-08-16 20:39 - 2017-03-18 13:58 - 000587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll.backup
2017-08-16 18:43 - 2017-08-16 18:43 - 000000000 ____D C:\Users\eddie\AppData\Local\Unity
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default\AppData\Roaming\IObit
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default User\AppData\Roaming\IObit
2017-08-16 00:29 - 2017-08-16 00:29 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-08-16 00:28 - 2017-08-16 22:19 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-08-16 00:28 - 2017-08-16 22:19 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-08-16 00:27 - 2017-08-16 22:19 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-08-16 00:27 - 2017-08-16 00:27 - 000001927 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-16 00:27 - 2017-06-27 12:06 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-08-16 00:25 - 2017-08-16 22:19 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-16 00:24 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-15 18:07 - 2017-08-15 18:13 - 000000000 ____D C:\Users\eddie\AppData\Local\PackageStaging
2017-08-15 12:57 - 2017-08-15 12:59 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000033864 _____ (WiseCleaner.com) C:\WINDOWS\WiseUnlock64.sys
2017-08-15 12:57 - 2017-08-15 12:57 - 000001287 _____ C:\Users\Public\Desktop\Wise Force Deleter.lnk
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\Program Files (x86)\Wise
2017-08-15 03:39 - 2017-08-15 03:39 - 000000000 ____D C:\WINDOWS\System32\Tasks\Games
2017-08-15 03:29 - 2017-08-15 03:29 - 000000000 ____D C:\WINDOWS\System32\Tasks\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000001357 _____ C:\Users\eddie\Desktop\Auslogics Disk Defrag.lnk
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\Program Files (x86)\Auslogics
2017-08-15 03:21 - 2017-08-15 03:21 - 000000000 ___HD C:\VTRoot
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ____D C:\Program Files (x86)\Realtek
2017-08-15 02:25 - 2017-02-15 21:50 - 000947712 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2017-08-15 02:25 - 2017-02-15 21:50 - 000082536 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2017-08-15 01:46 - 2017-08-15 01:46 - 005373952 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2017-08-15 01:17 - 2017-08-15 01:30 - 000000000 ____D C:\Users\eddie\AppData\Local\CrashDumps
2017-08-15 00:48 - 2017-08-15 00:48 - 000001796 _____ C:\Users\eddie\Desktop\Virtual Kiosk.lnk
2017-08-15 00:31 - 2017-08-15 00:31 - 000002374 _____ C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-08-14 21:54 - 2017-08-16 22:25 - 000063760 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2017-08-14 21:40 - 2017-08-14 21:40 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2017-08-14 21:40 - 2017-08-14 21:40 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2017-08-14 21:38 - 2017-08-14 21:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Comodo
2017-08-14 21:27 - 2017-08-16 22:28 - 001413201 _____ C:\WINDOWS\system32\Drivers\sfi.dat
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\Program Files\COMODO
2017-08-14 21:26 - 2017-06-30 07:08 - 000332472 _____ (COMODO) C:\WINDOWS\system32\cmdkbdcss64.dll
2017-08-14 21:26 - 2017-06-30 07:08 - 000263352 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdkbdcss32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000432104 _____ (COMODO) C:\WINDOWS\system32\cssguard64.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000338560 _____ (COMODO) C:\WINDOWS\SysWOW64\cssguard32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000048728 _____ (COMODO) C:\WINDOWS\system32\csscsr64.dll
2017-08-14 21:26 - 2017-03-31 23:15 - 000126056 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdcss.sys
2017-08-14 21:25 - 2017-08-14 21:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Comodo
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Shared Space
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Comodo Downloader
2017-08-14 21:19 - 2017-08-15 01:44 - 000000000 ____D C:\ProgramData\COMODO
2017-08-14 21:19 - 2017-08-15 00:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-08-14 21:19 - 2017-08-14 21:47 - 000000000 ____D C:\Program Files (x86)\COMODO
2017-08-14 21:19 - 2017-07-05 00:30 - 000256040 _____ (COMODO) C:\WINDOWS\system32\iseguard64.dll
2017-08-14 21:19 - 2017-07-05 00:29 - 000205536 _____ (COMODO) C:\WINDOWS\SysWOW64\iseguard32.dll
2017-08-14 21:19 - 2017-03-29 14:49 - 000062208 _____ (COMODO) C:\WINDOWS\system32\Drivers\isedrv.sys
2017-08-14 17:10 - 2017-08-14 17:11 - 000002676 _____ C:\Users\eddie\Desktop\PC Help Forum.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001006 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-14 16:12 - 2017-08-14 16:12 - 000000859 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Explorer.lnk
2017-08-14 14:46 - 2017-08-14 15:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
2017-08-14 14:41 - 2017-08-14 14:41 - 000002357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-14 14:41 - 2017-08-14 14:41 - 000002345 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-14 14:40 - 2017-08-14 14:40 - 000003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-08-14 14:40 - 2017-08-14 14:40 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-08-14 14:28 - 2017-08-14 14:28 - 000000000 ____D C:\WINDOWS\Panther
2017-08-14 14:15 - 2017-08-14 14:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-14 14:15 - 2017-08-14 14:15 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Sun
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-08-14 14:15 - 2017-08-14 14:14 - 000110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2017-08-14 14:14 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\ProgramData\Oracle
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\Program Files\Java
2017-08-14 04:00 - 2017-08-14 04:00 - 000041800 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2017-08-14 03:49 - 2017-08-14 03:49 - 000000000 ____D C:\Users\eddie\AppData\Local\PeerDistRepub
2017-08-14 02:55 - 2017-08-14 02:55 - 069640192 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000491520 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000065536 _____ C:\WINDOWS\system32\config\SAM.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2017-08-14 02:53 - 2017-08-16 22:16 - 000000000 ____D C:\Users\eddie\AppData\Local\ClassicShell
2017-08-14 02:53 - 2017-08-16 02:33 - 000000000 ____D C:\ProgramData\ClassicShell
2017-08-14 02:53 - 2017-08-14 02:53 - 000000000 ____D C:\Users\eddie\AppData\Roaming\ClassicShell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\Program Files\Classic Shell
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\BDLogging
2017-08-14 02:26 - 2017-08-14 02:26 - 000565416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-08-14 02:18 - 2017-08-14 04:54 - 000002956 _____ C:\WINDOWS\System32\Tasks\CCleanerClean
2017-08-14 02:18 - 2017-08-14 04:54 - 000000258 _____ C:\WINDOWS\Tasks\CCleanerClean.job
2017-08-14 02:05 - 2017-08-16 12:42 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-14 02:05 - 2017-08-16 12:39 - 000000000 ____D C:\Program Files\CCleaner
2017-08-14 02:05 - 2017-08-14 02:05 - 000002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-08-14 02:05 - 2017-08-14 02:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-14 01:52 - 2017-08-14 01:52 - 000001129 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Users\eddie\AppData\Local\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Program Files\VS Revo Group
2017-08-14 01:52 - 2016-12-21 14:52 - 000040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2017-08-14 01:46 - 2017-08-14 01:46 - 000000000 ____D C:\Users\eddie\AppData\Local\MicrosoftEdge
2017-08-14 01:45 - 2017-08-16 22:07 - 000000000 ____D C:\Users\eddie\AppData\Roaming\IObit
2017-08-14 01:45 - 2017-08-16 22:07 - 000000000 ____D C:\ProgramData\IObit
2017-08-14 01:45 - 2017-08-14 04:53 - 000000000 ____D C:\Program Files (x86)\IObit
2017-08-14 01:37 - 2017-08-14 01:37 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\3C64355F.sys
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\TAP-Windows
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2017-08-14 01:23 - 2017-08-14 01:23 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\Users\eddie\AppData\Roaming\WinRAR
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 01:22 - 2017-08-14 01:23 - 000000000 ____D C:\Program Files\WinRAR
2017-08-14 01:16 - 2017-08-14 01:16 - 000000634 _____ C:\Users\eddie\OneDrive\Documents\MagicActions-Options.json
2017-08-14 01:02 - 2017-08-14 04:57 - 000000000 ____D C:\Users\eddie\AppData\Local\pCloud
2017-08-14 00:56 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Google
2017-08-14 00:56 - 2017-08-14 00:56 - 000000000 ____D C:\WINDOWS\InfusedApps
2017-08-14 00:54 - 2017-08-14 00:54 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-08-14 00:54 - 2017-08-13 23:58 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-08-14 00:52 - 2017-08-14 00:52 - 000000000 ____D C:\Program Files\Synaptics
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\Program Files (x86)\HP
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\WINDOWS\Setup
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\Users\eddie\AppData\Local\DBG
2017-08-14 00:49 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Google
2017-08-14 00:49 - 2017-08-14 14:40 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-14 00:48 - 2017-08-14 00:49 - 000000000 ____D C:\Users\eddie\AppData\Local\Deployment
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Macromedia
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Local\Apps\2.0
2017-08-14 00:46 - 2017-08-16 19:02 - 000004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{FA13B12A-B6F1-4CA4-9E37-D55E2EE30D0B}
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\OCR
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\MSBuild
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pCloud
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\Program Files (x86)\pCloud Drive
2017-08-14 00:43 - 2016-09-09 16:33 - 000018848 _____ (/n software, Inc.) C:\WINDOWS\system32\elevtmsg.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000235424 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000196000 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000134560 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:31 - 000170400 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:23 - 000460992 _____ (/n software, Inc.) C:\WINDOWS\system32\Drivers\cbfs6.sys
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\DigitalLocker
2017-08-14 00:37 - 2017-07-31 08:15 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-08-14 00:37 - 2017-07-31 08:15 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-14 00:32 - 2017-08-14 00:55 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-08-14 00:32 - 2017-08-14 00:27 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2017-08-14 00:32 - 2017-08-14 00:27 - 000015940 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2017-08-14 00:32 - 2017-08-14 00:27 - 000004096 _____ C:\WINDOWS\system32\config\VSMIDK
2017-08-14 00:32 - 2017-08-14 00:27 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2017-08-14 00:32 - 2017-08-14 00:27 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2017-08-14 00:32 - 2017-08-14 00:27 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2017-08-14 00:32 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2017-08-14 00:31 - 2017-08-16 20:49 - 000000000 ___RD C:\Program Files (x86)
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-14 00:31 - 2017-08-15 01:44 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2017-08-14 00:31 - 2017-08-14 14:36 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-08-14 00:31 - 2017-08-14 03:25 - 000000000 ____D C:\WINDOWS\appcompat
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files (x86)\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\migwiz
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\Provisioning
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\SystemApps
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\dsc
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\IME
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\Help
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 __RSD C:\WINDOWS\Media
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\AppV
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\ias
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\DDFs
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\Registration
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\L2Schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Web
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Vss
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\tracing
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\TAPI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SystemResources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\winevt
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\System
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SKB
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SchCache
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Resources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\RemotePackages
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\PLA
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Performance
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\ModemLogs
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Globalization
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Cursors
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Branding
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\bcastdvr
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\addins
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Common Files\Services
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:27 - 000000219 _____ C:\WINDOWS\system.ini
2017-08-14 00:31 - 2017-08-14 00:27 - 000000092 _____ C:\WINDOWS\win.ini
2017-08-14 00:31 - 2017-08-14 00:20 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-08-14 00:31 - 2017-08-14 00:19 - 000000000 __RHD C:\Users\Public\Libraries
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\spool
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\CSC
2017-08-14 00:31 - 2017-08-14 00:10 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOPrivate
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\PrintDialog
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\MiracastView
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-14 00:31 - 2017-08-14 00:05 - 000000000 ____D C:\WINDOWS\HoloShell
2017-08-14 00:30 - 2017-08-14 00:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Skype
2017-08-14 00:28 - 2017-08-15 23:08 - 000000000 ____D C:\WINDOWS\INF
2017-08-14 00:27 - 2017-08-14 00:27 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-08-14 00:26 - 2017-08-14 00:26 - 000000000 ____D C:\Users\eddie\AppData\Local\Comms
2017-08-14 00:25 - 2017-08-14 13:58 - 000908880 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-14 00:25 - 2017-08-14 00:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Publishers
2017-08-14 00:24 - 2017-08-15 18:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Packages
2017-08-14 00:24 - 2017-08-14 04:56 - 000000000 ____D C:\Users\eddie\AppData\Local\ConnectedDevicesPlatform
2017-08-14 00:24 - 2017-08-14 00:24 - 000000020 ___SH C:\Users\eddie\ntuser.ini
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Synaptics
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Adobe
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\VirtualStore
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\TileDataLayer
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\ProgramData\Synaptics
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\Default User
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\All Users
2017-08-14 00:21 - 2017-08-16 22:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-14 00:20 - 2017-08-14 00:20 - 000026274 _____ C:\Users\eddie\OneDrive\Documents\Removed Apps.html
2017-08-14 00:18 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-14 00:15 - 2017-08-16 18:54 - 000000000 ____D C:\Users\eddie
2017-08-14 00:12 - 2017-08-16 22:18 - 082051072 _____ C:\WINDOWS\system32\config\SYSTEM
2017-08-14 00:12 - 2017-08-16 22:18 - 071827456 _____ C:\WINDOWS\system32\config\SOFTWARE
2017-08-14 00:12 - 2017-08-16 22:18 - 009175040 _____ C:\WINDOWS\system32\config\BBI
2017-08-14 00:12 - 2017-08-16 22:18 - 001572864 _____ C:\WINDOWS\system32\config\DEFAULT
2017-08-14 00:12 - 2017-08-16 22:18 - 000057344 _____ C:\WINDOWS\system32\config\SECURITY
2017-08-14 00:12 - 2017-08-14 00:54 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2017-08-14 00:12 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\servicing
2017-08-14 00:12 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\SMI
2017-08-14 00:12 - 2017-08-14 00:23 - 000000000 ___HD C:\$Windows.~BT
2017-08-14 00:12 - 2017-08-14 00:22 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-08-14 00:09 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOShared
2017-08-14 00:04 - 2017-08-14 00:04 - 000021910 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2017-08-14 00:04 - 2017-08-14 00:04 - 000002065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2017-08-14 00:04 - 2017-08-14 00:04 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\ProgramData\SRS Labs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\Program Files\Realtek
2017-08-14 00:04 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____D C:\Program Files\Intel
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2017-08-14 00:02 - 2017-03-18 13:56 - 002233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-08-13 23:58 - 2017-08-16 18:16 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-13 22:50 - 2017-08-14 00:57 - 000000000 ___HD C:\$SysReset
2017-08-13 08:49 - 2017-08-13 08:49 - 000291128 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper64.dll
2017-08-13 08:49 - 2017-08-13 08:49 - 000248120 _____ (IvoSoft) C:\WINDOWS\SysWOW64\StartMenuHelper32.dll
2017-08-13 01:40 - 2017-08-15 00:06 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\Mozilla
2017-08-12 23:19 - 2017-08-15 02:24 - 000000000 ___HD C:\SWSetup
2017-08-12 22:31 - 2017-08-14 00:19 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Restore Explorer
2017-08-09 02:19 - 2017-08-14 01:45 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\IObit
2017-08-08 22:10 - 2017-07-31 19:36 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-08-08 22:10 - 2017-07-31 19:34 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-08-08 22:10 - 2017-07-31 19:20 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-08-08 22:10 - 2017-07-31 19:18 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-08-08 22:10 - 2017-07-31 19:18 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-08-08 22:10 - 2017-07-31 19:13 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-08-08 22:10 - 2017-07-31 19:07 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-08 22:10 - 2017-07-31 19:06 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-08-08 22:10 - 2017-07-31 19:03 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-08-08 22:10 - 2017-07-31 18:30 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-08 22:09 - 2017-07-31 19:39 - 008319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-08 22:09 - 2017-07-31 19:38 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:38 - 000382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-08 22:09 - 2017-07-31 19:36 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:36 - 000119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-08 22:09 - 2017-07-31 19:35 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:35 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:34 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:33 - 000473240 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:32 - 002444704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-08 22:09 - 2017-07-31 19:32 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:32 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-08 22:09 - 2017-07-31 19:31 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 002645680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000723680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000410160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000315288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000143736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000082336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-08 22:09 - 2017-07-31 19:26 - 000204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 19:17 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 19:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 19:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-08-08 22:09 - 2017-07-31 19:10 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 19:09 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-08-08 22:09 - 2017-07-31 19:08 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:57 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-08 22:09 - 2017-07-31 18:45 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-08 22:09 - 2017-07-31 18:44 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 18:44 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2017-08-08 22:09 - 2017-07-31 18:44 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-08 22:09 - 2017-07-31 18:42 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 017366528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-08 22:09 - 2017-07-31 18:39 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-08 22:09 - 2017-07-31 18:36 - 023681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-08 22:09 - 2017-07-31 18:35 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-08-08 22:09 - 2017-07-31 18:34 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 007336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 012786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 001396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 008209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 002055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-08 22:09 - 2017-07-31 18:30 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-08-08 22:09 - 2017-07-31 18:26 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-08 22:09 - 2017-07-31 18:25 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-08 16:27 - 2017-08-08 16:28 - 000000000 ___HD C:\7e1b197988dcf5ad4a9391ddfe6621
2017-08-03 10:27 - 2017-07-27 22:20 - 000279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-03 10:27 - 2017-07-27 21:36 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll
2017-08-03 10:27 - 2017-07-27 21:26 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:21 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:20 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-08-03 10:27 - 2017-07-27 21:08 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-03 10:26 - 2017-07-27 21:40 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-08-03 10:26 - 2017-07-27 21:36 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2017-08-03 10:26 - 2017-07-27 21:33 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-08-03 10:26 - 2017-07-27 21:27 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-03 10:26 - 2017-07-27 21:20 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IpNatHlpClient.dll
2017-08-03 10:26 - 2017-07-27 21:19 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2017-08-03 10:26 - 2017-07-27 21:18 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2017-08-03 10:26 - 2017-07-27 21:13 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2017-08-03 10:26 - 2017-07-27 21:12 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-08-03 10:26 - 2017-07-27 21:10 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-08-03 10:26 - 2017-07-27 21:08 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-08-03 10:26 - 2017-07-27 21:02 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2017-08-03 10:25 - 2017-07-27 22:23 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-03 10:25 - 2017-07-27 22:15 - 000554400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-03 10:25 - 2017-07-27 22:07 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2017-08-03 10:25 - 2017-07-27 21:47 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-08-03 10:25 - 2017-07-27 21:37 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-08-03 10:25 - 2017-07-27 21:35 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2017-08-03 10:25 - 2017-07-27 21:33 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-08-03 10:25 - 2017-07-27 21:19 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:25 - 2017-07-27 21:16 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-08-03 10:25 - 2017-07-27 21:15 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:25 - 2017-07-27 21:13 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-08-03 10:25 - 2017-07-27 21:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll
2017-08-03 10:25 - 2017-07-27 21:09 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-08-03 10:24 - 2017-07-27 21:40 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-08-03 10:24 - 2017-07-27 21:38 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-08-03 10:24 - 2017-07-27 21:35 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-08-03 10:24 - 2017-07-27 21:33 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-08-03 10:24 - 2017-07-27 21:17 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-08-03 10:24 - 2017-07-27 21:15 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-08-03 10:24 - 2017-07-27 21:14 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-08-03 10:24 - 2017-07-27 21:13 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-08-03 10:24 - 2017-07-27 21:12 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-08-03 10:24 - 2017-07-27 21:11 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-08-03 10:24 - 2017-07-27 21:07 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-08-03 10:24 - 2017-07-27 21:05 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-08-03 10:23 - 2017-07-27 21:36 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-08-03 10:22 - 2017-07-27 21:24 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-03 10:21 - 2017-07-27 21:21 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-03 10:20 - 2017-07-27 22:10 - 002679200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-03 10:20 - 2017-07-27 21:19 - 000942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-03 10:20 - 2017-07-27 21:19 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-03 10:20 - 2017-07-27 21:16 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-03 10:18 - 2017-07-27 22:09 - 000529992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-03 10:17 - 2017-07-27 22:25 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-03 10:17 - 2017-07-27 21:25 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-03 10:17 - 2017-07-27 21:19 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 002604248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-03 10:16 - 2017-07-27 22:09 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-08-03 10:16 - 2017-07-27 21:21 - 008333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-03 10:16 - 2017-07-27 21:13 - 004535296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-03 10:16 - 2017-07-27 21:12 - 002939392 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000455584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000116280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-03 10:14 - 2017-07-27 22:17 - 000660680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-03 10:14 - 2017-07-27 22:09 - 000527976 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-03 10:14 - 2017-07-27 21:48 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2017-08-03 10:14 - 2017-07-27 21:22 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-03 10:14 - 2017-07-27 21:19 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-03 10:14 - 2017-07-27 21:18 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-03 10:14 - 2017-07-27 21:07 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-03 10:13 - 2017-07-27 22:24 - 002327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-03 10:13 - 2017-07-27 22:13 - 001033544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-03 10:13 - 2017-07-27 21:21 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-03 10:13 - 2017-07-27 21:19 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-03 10:13 - 2017-07-27 21:07 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-03 10:12 - 2017-07-27 22:23 - 002969888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-03 10:12 - 2017-07-27 22:16 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-03 10:12 - 2017-07-27 22:15 - 005302968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-03 10:12 - 2017-07-27 22:14 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-03 10:12 - 2017-07-27 22:12 - 001325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-03 10:12 - 2017-07-27 21:26 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-03 10:12 - 2017-07-27 21:24 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:12 - 2017-07-27 21:14 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-03 10:12 - 2017-07-27 21:12 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-03 10:12 - 2017-07-27 21:06 - 001833984 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-03 10:10 - 2017-07-27 22:24 - 000119904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-03 10:10 - 2017-07-27 22:22 - 000923048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000192264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000104432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-03 10:10 - 2017-07-27 22:12 - 021353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-03 10:10 - 2017-07-27 21:29 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-03 10:10 - 2017-07-27 21:24 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:24 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-08-03 10:10 - 2017-07-27 21:21 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-03 10:10 - 2017-07-27 21:19 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:10 - 2017-07-27 21:15 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-03 10:10 - 2017-07-27 21:08 - 000600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-03 10:09 - 2017-07-27 22:12 - 000323936 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-03 10:09 - 2017-07-27 21:25 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-03 10:09 - 2017-07-27 21:24 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-03 10:09 - 2017-07-27 21:23 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-03 10:09 - 2017-07-27 21:22 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-03 10:09 - 2017-07-27 21:21 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-03 10:09 - 2017-07-27 21:17 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-03 10:09 - 2017-07-27 21:16 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-03 10:09 - 2017-07-27 21:14 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-03 10:09 - 2017-07-27 21:13 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-03 10:09 - 2017-07-27 21:12 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-03 10:09 - 2017-07-27 21:06 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-03 10:09 - 2017-07-27 21:05 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-03 10:08 - 2017-07-27 22:30 - 001068720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-03 10:08 - 2017-07-27 22:14 - 000318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-03 10:08 - 2017-07-27 22:10 - 001114528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-03 10:08 - 2017-07-27 21:31 - 003995136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:29 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-03 10:08 - 2017-07-27 21:23 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-03 10:08 - 2017-07-27 21:22 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-03 10:08 - 2017-07-27 21:21 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-03 10:08 - 2017-07-27 21:20 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001298432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-03 10:08 - 2017-07-27 21:18 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-03 10:08 - 2017-07-27 21:15 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-03 10:08 - 2017-07-27 21:10 - 001706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-03 10:07 - 2017-07-27 22:16 - 000961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-03 10:07 - 2017-07-27 22:13 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:07 - 2017-07-27 22:13 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-03 10:07 - 2017-07-27 22:12 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-03 10:07 - 2017-07-27 21:30 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-08-03 10:07 - 2017-07-27 21:26 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-03 10:07 - 2017-07-27 21:22 - 000778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-03 10:07 - 2017-07-27 21:20 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-03 10:07 - 2017-07-27 21:19 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-03 10:07 - 2017-07-27 21:18 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-03 10:07 - 2017-07-27 21:15 - 003204608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 002444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-03 10:07 - 2017-07-27 21:11 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-03 10:07 - 2017-07-27 21:10 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-03 10:07 - 2017-07-27 21:09 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-03 10:07 - 2017-07-27 21:09 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-03 10:07 - 2017-07-27 21:06 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-03 10:06 - 2017-07-27 21:23 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 003867040 _____ C:\WINDOWS\system32\PortChanger.exe
2017-08-02 02:45 - 2012-09-25 00:52 - 002398112 _____ (Hewlett Packard) C:\WINDOWS\system32\hppldcoi.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 000151968 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\Dot4.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000049056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4usb.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000019872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4Scan.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 009891328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2017-08-02 02:29 - 2017-08-02 02:29 - 004332032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtCRU64.exe
2017-08-02 02:29 - 2017-08-02 02:29 - 000420832 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsUer.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 000084480 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll
2017-08-02 02:20 - 2017-08-02 02:20 - 000831685 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2017-08-02 02:16 - 2017-08-02 02:16 - 005799386 _____ C:\WINDOWS\system32\igdclbif.bin
2017-08-02 02:16 - 2017-08-02 02:16 - 000225280 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2017-08-02 02:15 - 2017-08-02 02:16 - 003972096 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 019861504 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 005688832 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 004368896 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000388608 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000318464 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000266232 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2017-08-02 02:14 - 2017-08-02 02:15 - 029101560 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 004934144 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 002393160 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 001858632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000439288 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000416256 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2017-08-02 02:13 - 2017-08-02 02:14 - 015488920 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll
2017-08-02 02:13 - 2017-08-02 02:13 - 013483192 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 013655032 _____ (Intel Corporation) C:\WINDOWS\system32\ig8icd64.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 010329088 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig8icd32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 005262848 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 002142208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 001009664 _____ C:\WINDOWS\system32\igfxSDK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000950784 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000947200 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000756224 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000705024 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000641530 _____ C:\WINDOWS\system32\FilmModeDetection.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000449536 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000403671 _____ C:\WINDOWS\system32\ImageStabilization.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000398848 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000390144 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000384512 _____ C:\WINDOWS\system32\igfxTray.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000375173 _____ C:\WINDOWS\system32\ColorImageEnhancement.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000356352 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000337408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000273408 _____ C:\WINDOWS\system32\igfxCPL.cpl
2017-08-02 02:11 - 2017-08-02 02:11 - 000254976 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000251392 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000219648 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000215040 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000214528 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000111616 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000103416 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000100864 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000095232 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000084992 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000055240 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000052736 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\Gfxv4_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\DPTopologyApp.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\Gfxv2_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\DPTopologyAppv2_0.exe.config
2017-08-02 02:10 - 2017-08-02 02:11 - 000220160 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4624.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 006696824 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 005137296 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 002813952 _____ C:\WINDOWS\system32\iglhxa64.cpa
2017-08-02 02:10 - 2017-08-02 02:10 - 001816712 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001814056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001590784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001178624 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000511260 _____ C:\WINDOWS\system32\cp_resources.bin
2017-08-02 02:10 - 2017-08-02 02:10 - 000431104 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000284160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000242152 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000223240 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000205344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000193016 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000183968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000182944 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000181832 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000173568 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160264 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160256 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000157696 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040343 _____ C:\WINDOWS\system32\iglhxo64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040316 _____ C:\WINDOWS\system32\iglhxc64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039658 _____ C:\WINDOWS\system32\iglhxg64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2017-08-02 02:09 - 2017-08-02 02:10 - 039864472 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2017-08-02 02:08 - 2017-08-02 02:09 - 038903384 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2017-08-02 02:07 - 2017-08-02 02:08 - 033479864 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004270672 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004240208 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 000312296 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll
2017-08-02 02:06 - 2017-08-02 02:07 - 016457272 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2017-08-02 02:05 - 2017-08-02 02:06 - 034823448 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 013070648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000297152 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000005412 _____ C:\WINDOWS\system32\iglhxs64lp.vp
2017-08-02 02:04 - 2017-08-02 02:05 - 007407080 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64lp.sys
2017-08-02 02:00 - 2017-08-02 02:00 - 000877424 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000866640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000737960 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll
2017-08-02 01:59 - 2017-08-02 02:00 - 001016928 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003410832 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003122656 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 001435136 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000984912 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000868176 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000691680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000526280 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000467152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000381408 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000258856 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2017-08-02 01:57 - 2017-08-02 01:59 - 072520704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2017-08-02 01:57 - 2017-08-02 01:57 - 012951320 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2017-08-02 01:56 - 2017-08-02 01:56 - 003516984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003509200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003205120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 002210784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 001347136 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000532376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000387312 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000192976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000166200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000088344 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000023688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2017-08-02 01:55 - 2017-08-02 01:55 - 005874144 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2017-08-02 01:55 - 2017-08-02 01:55 - 003677152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2017-08-02 01:55 - 2017-08-02 01:55 - 000122312 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2017-07-18 16:18 - 2017-07-18 16:19 - 000000000 ____D C:\Users\eddie\OpenVPN
2017-07-17 10:30 - 2017-07-17 10:30 - 000863744 _____ (Farbar) C:\WINDOWS\mod_frst.exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 22:21 - 2017-04-11 16:55 - 000000000 ___RD C:\Users\eddie\OneDrive
2017-08-16 22:20 - 2017-04-11 20:03 - 000000000 __SHD C:\Users\eddie\IntelGraphicsProfiles
2017-08-14 02:25 - 2017-04-11 20:15 - 000000000 __RDX C:\Users\eddie\OneDrive\Documents\Extra
2017-08-14 01:23 - 2017-04-11 20:16 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 00:25 - 2017-03-18 13:57 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2017-08-14 00:24 - 2017-04-11 16:51 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-14 00:24 - 2017-03-18 13:57 - 000430848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-08-14 00:20 - 2017-04-13 18:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-08-08 23:44 - 2017-06-26 14:45 - 000000779 _____ C:\Users\eddie\Desktop\SSF2.lnk
2017-07-18 13:30 - 2017-06-26 15:39 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-08-13 23:57
==================== End of FRST.txt ============================
Addition
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-08-2017
Ran by eddie (16-08-2017 22:29:49)
Running from C:\Users\eddie\Desktop
Windows 10 Pro Version 1703 (X64) (2017-08-14 07:23:51)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2896426177-3843145535-1853849027-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2896426177-3843145535-1853849027-503 - Limited - Disabled)
eddie (S-1-5-21-2896426177-3843145535-1853849027-1001 - Administrator - Enabled) => C:\Users\eddie
Guest (S-1-5-21-2896426177-3843145535-1853849027-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: COMODO Antivirus (Enabled - Up to date) {0C515E80-E355-69BD-3445-A511E5C186FD}
AS: COMODO Advanced Protection (Enabled - Up to date) {B730BF64-C56F-6633-0EF5-9E639E46CC40}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: COMODO Firewall (Enabled) {346ADFA5-A93A-68E5-1F1A-0C241B12C186}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform)
Classic Shell (HKLM\...\{CABCE573-0A86-42FA-A52A-C7EA61D5BE08}) (Version: 4.3.1 - IvoSoft)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 58.0.3029.113 - Comodo)
COMODO Internet Security Premium (HKLM\...\{8E048D96-59B5-4BD8-A5D0-8FFCFC161A5A}) (Version: 10.0.1.6258 - COMODO Security Solutions Inc.) Hidden
COMODO Internet Security Premium (HKLM\...\COMODO Internet Security) (Version: 10.0.1.6258 - COMODO Security Solutions Inc.)
COMODO Secure Shopping (HKLM-x32\...\{D15DF9B0-3A98-4BEF-B7D5-FC3AEA421657}) (Version: 1.1.99.0 - COMODO) Hidden
COMODO Secure Shopping (HKLM-x32\...\Comodo Secure_Shopping_list_uninstall) (Version: 1.1.421657.99 - Comodo)
DriverUpdate (HKLM\...\{C2A1552C-0027-4E26-9E81-78CD02DEB71F}) (Version: 4.1.2 - Slimware Utilities Holdings, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.101 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Internet Security Essentials (HKLM-x32\...\ComodoIse) (Version: 1.2.422025.92 - Comodo)
Java 8 Update 144 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Microsoft OneDrive (HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\OneDriveSetup.exe) (Version: 17.3.6963.0807 - Microsoft Corporation)
Mozilla Firefox 56.0 (x64 en-US) (HKLM\...\Mozilla Firefox 56.0 (x64 en-US)) (Version: 56.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0 - Mozilla)
OpenVPN 2.4.3-I602 (HKLM\...\OpenVPN) (Version: 2.4.3-I602 - OpenVPN Technologies, Inc.)
pCloud Drive (HKLM-x32\...\{5824F8F8-E59E-42CB-98FA-B1F329A58BB9}) (Version: 3.5.7 - pCloud AG) Hidden
pCloud Drive (HKLM-x32\...\{d8e9b125-0436-4a92-94b8-0097dbf23a3d}) (Version: 3.5.7.0 - pCloud AG)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.31235 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.13.1223.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8216 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.9 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.9 - VS Revo Group, Ltd.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.6 - Synaptics Incorporated)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
UltraUXThemePatcher (HKLM-x32\...\UltraUXThemePatcher) (Version: 3.2.0.0 - Manuel Hoefs (Zottel))
Unity Web Player (HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Windows Desktop Gadgets (HKLM\...\Windows Desktop Gadgets_is1) (Version: 2.0 - hxxp://gadgetsrevived.com)
WinRAR 5.50 beta 6 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.6 - win.rar GmbH)
Wise Force Deleter 1.4.6 (HKLM-x32\...\Wise Force Deleter_is1) (Version: 1.4.6 - WiseCleaner.com, Inc.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ pCloudINPROGRESS] -> {D8BFAFBD-B670-4252-9C17-9CF1C64C2BAF} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [ pCloudINSYNC] -> {8D0C0582-552A-4A6B-9455-DA63E1F329C0} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [ pCloudNOSYNC] -> {3858ED1B-8F1C-42ED-A8A9-FDBF591E3C6B} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs6] -> {AB8F5A1D-F87B-4E34-9D77-65D2615BEB3A} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-09] (/n software, Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs6] -> {AB8F5A1D-F87B-4E34-9D77-65D2615BEB3A} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-09] (/n software, Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> No File
ContextMenuHandlers1: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers1: [ContextMenuExtension] -> {a0b73fac-351f-3948-9d8a-1dad9d870193} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> No File
ContextMenuHandlers2: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers2: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers3: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> No File
ContextMenuHandlers4: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers4: [ContextMenuExtension] -> {a0b73fac-351f-3948-9d8a-1dad9d870193} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-08-02] (Intel Corporation)
ContextMenuHandlers6: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2016-12-15] (VS Revo Group)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\system32\StartMenuHelper64.dll [2017-08-13] (IvoSoft)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-02] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0B959917-3528-44FA-A618-DD66F24691D5} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {2529B177-0509-4702-BA49-FF1D8C59A7DC} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {7B0F3311-DDDF-4F52-9C4B-7310D1F63587} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {7BB95E82-52B7-432E-AD5F-CEEA54A2B32F} - System32\Tasks\Auslogics\Disk Defrag\Start Disk Defrag On eddie Logon => C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe [2017-07-27] (Auslogics)
Task: {8E812564-8E75-4BF8-A3F2-4AF73053B39F} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {90E61B0B-4158-42F4-84A3-FA8401A03CEC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-14] (Google Inc.)
Task: {9686D31E-04B5-4290-B6BA-28F14BC714DE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {9E7F93F7-887A-4FF5-A842-0D33D45729AC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-14] (Google Inc.)
Task: {A24BA1E2-81E7-4CDC-9AE1-FA20784F9388} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2896426177-3843145535-1853849027-1001
Task: {B09219E1-52F8-4B5B-A864-94C93E4E341D} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2017-07-11] (COMODO)
Task: {B73AF37E-9221-4E5F-8FD2-470DE8020F2A} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {D781C52C-6FC0-4FDA-8180-0F8BEFE6681C} - System32\Tasks\CCleanerClean => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {D955C4AD-0427-4EB9-BF2B-D0B59756D047} - System32\Tasks\Auslogics\Disk Defrag\Scheduled Defragmentation => rundll32.exe TaskSchedulerHelper.dll,RunTask "DiskDefrag.exe" "/UseTray /Scheduler"
Task: {E8DAA569-AFB7-40EF-9C40-71FFAD4BA1DD} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerClean.job => C:\Program Files\CCleaner\CCleaner.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\eddie\Desktop\PC Help Forum.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=illdlgkhakmollnophmajedfblhpijak
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Chrome Remote Desktop.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\File System for OneDrive.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=jbfdfcehgafdbfpniaimfbfomafoadgo
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Hangouts.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=knipolnnllmklapflnccelgolnpehhpl
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\System.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=ocjnemjmlhjkeilmaidemofakmpclcbi
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Wake Up!.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=lbbcfplbfbmimpnlammmeaheakhcogke
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\WeatherBug.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=njkkjobcechefaoknodniidfjapgfoco
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gmail.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=pjkljhegncpnkpknbcohdijeoejaedia
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Web Store.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=ahfgeienlihckogmohjhadlkjgocpleb
==================== Loaded Modules (Whitelisted) ==============
2017-07-11 12:42 - 2017-07-11 12:42 - 000156352 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdwrhlp.dll
2017-07-11 12:40 - 2017-07-11 12:40 - 000107200 _____ () C:\Program Files\COMODO\COMODO Internet Security\cavwpps.dll
2017-07-11 12:41 - 2017-07-11 12:41 - 000244928 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdcomps.dll
2017-08-16 00:27 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2016-03-16 11:25 - 2016-03-16 11:25 - 000073912 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2017-03-18 13:58 - 2017-03-18 13:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000384512 _____ () C:\WINDOWS\system32\igfxTray.exe
2017-03-18 13:59 - 2017-03-18 19:31 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-07-14 06:26 - 2017-07-14 06:26 - 000638592 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe
2017-08-14 14:41 - 2017-08-11 00:40 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.101\libglesv2.dll
2017-08-14 14:41 - 2017-08-11 00:40 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.101\libegl.dll
2017-08-14 02:16 - 2017-08-14 02:16 - 000054488 _____ () C:\Program Files\CCleaner\branding.dll
2017-06-16 11:33 - 2017-06-16 11:33 - 001763328 _____ () C:\Program Files (x86)\pCloud Drive\pSyncLib.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\str => ""="service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2017-08-15 01:30 - 2017-08-15 16:41 - 000001359 _____ C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 keystone.mwbsys.com
0.0.0.0 telemetry.malwarebytes.com
91.209.196.83 download.comodo.com
91.209.196.83 www.download.comodo.com
127.0.0.1 idb.iobit.com
127.0.0.1 asc55.iobit.com
127.0.0.1 is360.iobit.com
127.0.0.1 www.asc55.iobit.com
127.0.0.1 asc.iobit.com
127.0.0.1 pf.iobit.com
127.0.0.1 98.129.229.186
0.0.0.0 keystone.mwbsys.com
0.0.0.0 telemetry.malwarebytes.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.254.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is disabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\...\StartupApproved\Run: => "SecurityHealth"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{FCFE65AB-2442-4A73-B8FF-8B12810382E6}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{42BC09F9-68F9-49B5-86A6-54FA904E5B9D}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{6818C011-599B-437F-BFEA-0DFD8D69923F}C:\program files (x86)\pcloud drive\pcloud.exe] => (Allow) C:\program files (x86)\pcloud drive\pcloud.exe
FirewallRules: [UDP Query User{71C348A0-5C57-4F71-B870-DB5012115947}C:\program files (x86)\pcloud drive\pcloud.exe] => (Allow) C:\program files (x86)\pcloud drive\pcloud.exe
==================== Restore Points =========================
14-08-2017 02:50:40 Installed Classic Shell
15-08-2017 00:32:17 System Checkpoint
15-08-2017 03:35:37 System Checkpoint
16-08-2017 02:22:18 System Checkpoint
16-08-2017 21:15:17 JRT Pre-Junkware Removal
==================== Faulty Device Manager Devices =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/16/2017 10:27:21 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.
Context: Windows Application, SystemIndex Catalog
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
Error: (08/16/2017 10:27:14 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: The search service has detected corrupted data files in the index {id=3800}. The service will attempt to automatically correct this problem by rebuilding the index.
Context: Windows Application, SystemIndex Catalog
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
System errors:
=============
Error: (08/16/2017 10:24:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Windows Defender Antivirus Service service failed to start due to the following error:
Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
CodeIntegrity:
===================================
Date: 2017-08-16 22:29:44.395
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 22:29:44.376
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 22:29:44.006
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 22:29:43.929
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 22:24:16.063
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 22:24:04.618
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\cssguard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-08-16 22:19:40.220
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 22:19:39.919
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 22:19:37.165
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 22:19:36.737
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU N3700 @ 1.60GHz
Percentage of memory in use: 79%
Total physical RAM: 3938.3 MB
Available physical RAM: 809.9 MB
Total Virtual: 5346.3 MB
Available Virtual: 1732.47 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:447.82 GB) (Free:389.78 GB) NTFS
Drive d: (Recovery Warranty) (Fixed) (Total:4.88 GB) (Free:1.52 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (UNTITLED) (Removable) (Total:119.08 GB) (Free:95.78 GB) exFAT
Drive p: (pCloud Drive) (Removable) (Total:500 GB) (Free:461.81 GB) exFAT
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: F3CF06FA)
Partition: GPT.
========================================================
Disk: 1 (Size: 119.1 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-08-2017
Ran by eddie (administrator) on WIN10XP-1703PRO (16-08-2017 22:26:41)
Running from C:\Users\eddie\Desktop
Loaded Profiles: eddie (Available Profiles: eddie)
Platform: Windows 10 Pro Version 1703 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(COMODO) C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(Comodo) C:\Program Files (x86)\COMODO\Dragon\dragon_updater.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(pCloud AG) C:\Program Files (x86)\pCloud Drive\pCloud.exe
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9231328 2017-08-02] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2017-08-13] (IvoSoft)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1489088 2017-07-11] (COMODO)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [3632848 2017-07-05] (COMODO)
HKLM-x32\...\Run: [vdcss] => C:\Program Files (x86)\COMODO\COMODO Secure Shopping\vdcss.exe [7690936 2017-06-30] (COMODO)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [pCloud] => C:\Program Files (x86)\pCloud Drive\pCloud.exe [3885832 2017-06-16] (pCloud AG)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [OpenVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] ()
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCEnhancer] => E:\CCEnhancer\CCEnhancer-4.4.1.exe [282112 2017-03-06] (SingularLabs)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [GoogleChromeAutoLaunch_E3F5740D1C7070D0CABB3741A4F94C0C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1301848 2017-08-11] (Google Inc.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
SSODL: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\system32\cbfsMntNtf6.dll (/n software, Inc.)
SSODL-x32: EldosMountNotificator-cbfs6 - {401B8063-779B-4532-BEF0-41FCEE79B79C} - C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll (/n software, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{27427e43-89c9-4d14-b85e-f8cbc9b59dfe}: [DhcpNameServer] 192.168.254.254
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2896426177-3843145535-1853849027-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files (x86)\COMODO\COMODO Secure Shopping\cssbho64.dll [2017-06-30] (COMODO)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-14] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-14] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2017-08-13] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2017-08-13] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft)
FireFox:
========
FF DefaultProfile: oomuvn3h.default
FF ProfilePath: C:\Users\eddie\AppData\Roaming\Mozilla\Firefox\Profiles\oomuvn3h.default [2017-08-16]
FF Extension: (Activity Stream) - C:\Program Files\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Click-to-Play staged rollout) - C:\Program Files\Mozilla Firefox\browser\features\clicktoplay-rollout@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Follow-on Search Telemetry) - C:\Program Files\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi [2017-08-10] [not signed]
FF Extension: (Photon onboarding) - C:\Program Files\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi [2017-08-10] [not signed]
FF Extension: (Shield Recipe Client) - C:\Program Files\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi [2017-08-10] [not signed]
FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-14] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-2896426177-3843145535-1853849027-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\eddie\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2012-05-11] (Unity Technologies ApS)
Chrome:
=======
CHR HomePage: Default -> hxxp://getchrome.eu/home/
CHR StartupUrls: Default -> "hxxp://getchrome.eu/home"
CHR DefaultSearchKeyword: Default -> wiki
CHR Profile: C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default [2017-08-16]
CHR Extension: (ProxFlow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2017-08-14]
CHR Extension: (Google Slides) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-14]
CHR Extension: (Security Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abbpkdnljicgejmkndbncgpeamlcjhom [2017-08-14]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2017-08-16]
CHR Extension: (GameShark) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\acmchkofncmmkabbadlofeffhchdmkop [2017-08-14]
CHR Extension: (Movie4K) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\adkbpinkibeobfkgfoolfpnldifjdedp [2017-08-14]
CHR Extension: (CB Channels) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afdeaaklpenijgadfgaljjnknlbaphae [2017-08-14]
CHR Extension: (Microsoft Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\afiaggegejgnhhkfjpbbplaigaeijppc [2017-08-14]
CHR Extension: (Microsoft Virtual Agent) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahhncecjhnalimedngnkpfacimkmlafh [2017-08-14]
CHR Extension: (My Win10 PC) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akhdcannjobjjbbfabajjchleaccalng [2017-08-14]
CHR Extension: (HD for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2017-08-14]
CHR Extension: (LR EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akkmbnlaijgepeeldfglekgfajoiklph [2017-08-14]
CHR Extension: (ToonGet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\almbnkdlegibjhcgfbflpemghhdmalmf [2017-08-14]
CHR Extension: (Google Docs) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-14]
CHR Extension: (Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-14]
CHR Extension: (ARChon4Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbooacojifhcpicigmefgdhaiihjhnmd [2017-08-14]
CHR Extension: (Open with Google Drive™ Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdkpinfdldjdngmgfbifbdbgaoampkan [2017-08-14]
CHR Extension: (Super Nintendo Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\beogeghicacplhninfdmhiianhjimccp [2017-08-14]
CHR Extension: (Bitmoji) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfgdeiadkckfbkeigkoncpdieiiefpig [2017-08-14]
CHR Extension: (Google Groups) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfmbadcfdhiklafcdohpfphhhakmiakk [2017-08-14]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2017-08-14]
CHR Extension: (Mingle 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjeepgflngbnlkmfikinngokbcijkean [2017-08-14]
CHR Extension: (Amazon Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjjmjgafamolafiboomflecccipeddim [2017-08-14]
CHR Extension: (Win10 ISO) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjlhajlpdpmfebiokogbjhdgmkehgcbe [2017-08-14]
CHR Extension: (OpenDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmeclafhfpefpfndaigmiojllfgmbcm [2017-08-14]
CHR Extension: (YouTube) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-14]
CHR Extension: (1M AppStore) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bminhbeeccgdnghnabbhiafpndlbkedn [2017-08-14]
CHR Extension: (Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cagpfhohgbclhfgfggnbgfhnjehoknpk [2017-08-14]
CHR Extension: (History 2) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cahejgbbfgmlmjgdjlibphdjeldhagkp [2017-08-14]
CHR Extension: (Amazon) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\camkdhjofheljkflfmfgbnajgjnhlopf [2017-08-14]
CHR Extension: (Update) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbkkihljhphdkjhiabaomgfninkfihhe [2017-08-14]
CHR Extension: (Toons Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdibbihehmddkghfgiblbflocphmmooc [2017-08-14]
CHR Extension: (Snoopy vs. The Red Baron) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfalonhgbljhcmcajnbdebedcjdoblnl [2017-08-14]
CHR Extension: (Adblock Plus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-08-14]
CHR Extension: (Pushbullet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-08-14]
CHR Extension: (OneNote Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciniambnphakdoflgeamacamhfllbkmo [2017-08-14]
CHR Extension: (Monopoly Empire game | Play Kids Games Online | Hasbro) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjdhdhilfeoikokoiakkgnckknaekled [2017-08-14]
CHR Extension: (YT2MP3) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjhmdjffbkdmddmdmmbabiaclojaomeg [2017-08-14]
CHR Extension: (TechSupportGuy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckffimcpiheacclckfmmdcbhbmfmfikd [2017-08-14]
CHR Extension: (TWC Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckifgoknanfhclklbfjlpblncjpdfmfj [2017-08-14]
CHR Extension: (Microsoft Flow) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clldiedkmkolghagmnpmnoljbhijiboi [2017-08-14]
CHR Extension: (HP ENVY) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\clpdjjcfniihldhfchnjbiladapnbahi [2017-08-14]
CHR Extension: (MAFYT Settings) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmelobemnghobnlpdfmmbejdoaleajcf [2017-08-14]
CHR Extension: (SSF2 Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnlencpcagccinnhoijdgmobkmfhalcc [2017-08-14]
CHR Extension: (Harakirimail extension) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coaagmonnnldglbilekplfnphpdencce [2017-08-14]
CHR Extension: (ComputerHelpForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbhjgghkoimcbpnbgjikmpgffkgajfk [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\damfhmjfmeiigloagjpelmocjoeobdno [2017-08-14]
CHR Extension: (MSN) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dccnabnbnagheglhfmgdcjlcjbeibaje [2017-08-14]
CHR Extension: (Chase Online ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcofdmelmmjneoonenbhpagpbpiojkhf [2017-08-14]
CHR Extension: (Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\deceagebecbceejblnlcjooeohmmeldh [2017-08-14]
CHR Extension: (3DS Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfkhponeglmiiobiihilahinlckifjjh [2017-08-14]
CHR Extension: (Fus.Fall Legacy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgmdnngojpofdigdidplfaebnjohmfng [2017-08-14]
CHR Extension: (Tampermonkey) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-08-14]
CHR Extension: (Janifer Boston) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhpkkleekhaceehoigfcnaaidjoleflh [2017-08-14]
CHR Extension: (Glitch Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djahbfbhacphllgemcekmdnlilahhmge [2017-08-14]
CHR Extension: (Nintendo Chat) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djeppnpeahmgfaohhidhjpipjkahimfe [2017-08-14]
CHR Extension: (Google+) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2017-08-14]
CHR Extension: (NORAD Tracks Santa) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmkoneajelflpbfjpchjaiglipefmnki [2017-08-14]
CHR Extension: (Frontier DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnabfpdnbkmdmcoillihefhnjjknnona [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dolkddbfbhledadcdepacaljbglglcoe [2017-08-14]
CHR Extension: (Sumo Paint) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpgjihldbpodlmnjolekemlfbcajnmod [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ebgecmolaheocnobalndebpehpimdghi [2017-08-14]
CHR Extension: (Inbox) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\edmijkelpnflahpdblkkobimcplcgmgj [2017-08-14]
CHR Extension: (Amazon Shop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eecahhmlcjafclfkjodjjgllpmcmkgko [2017-08-14]
CHR Extension: (Novelty, OH Weather Forecast and Cond...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eenemnbihadgbcjemdnobckofmiihfnk [2017-08-14]
CHR Extension: (Shortcut to Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\efcdnfkhiiafogbhcainplbbgemgaaen [2017-08-14]
CHR Extension: (YouTubeDownloader) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eieafdgibiahkjdgdccmldmjidglnbjj [2017-08-14]
CHR Extension: (Google Fourms) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejiggjokppepehmfdngjefbhjeheknmp [2017-08-14]
CHR Extension: (Cast Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejliejcnhkkaaipdgkeiihbefhjeoemp [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejppoecfdibjchmpdcphbanegdjebcgo [2017-08-14]
CHR Extension: (HelpSupport Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekimmgolelbekdhafemjekjhkempbkfd [2017-08-14]
CHR Extension: (Comodo AdBlocker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhcnbjoomhmifmfeggoalmplblcmcin [2017-08-14]
CHR Extension: (Chrome Goodies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\emmdmeocdlghmhbfjaldhjahnfbkbpck [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\enffghkdjcgkndjodbaelocgmcbmbhpp [2017-08-14]
CHR Extension: (Filter by WOT) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eomhfalemadkajmgmppkoenihlljdjoj [2017-08-14]
CHR Extension: (Update Windows 10) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\epejeipipakmkmdfnkpghcjfmeigpggo [2017-08-14]
CHR Extension: (G SSH2 SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabhojopefodnkcighibfcnamgmplloh [2017-08-14]
CHR Extension: (Skype) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fajdleioencnfbnmiienoibkoimkooli [2017-08-14]
CHR Extension: (Old EShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fanigphfdfepmnelohpfhcpecoekibml [2017-08-14]
CHR Extension: (DiskImager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdfeicageglnlelmohmkojdjccgkdmcb [2017-08-14]
CHR Extension: (FREE App Creator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdhglomjccccgggpeabmiadbpmofeedc [2017-08-14]
CHR Extension: (Motorola) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fekllafapcbanabhhooobibaanmndalm [2017-08-14]
CHR Extension: (Google Sheets) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-14]
CHR Extension: (Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdhgdfhcclnmednjibbajgcpcpppknl [2017-08-14]
CHR Extension: (FB Game Center) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijlioglnahpdajepoinkodlegkolkam [2017-08-14]
CHR Extension: (Villionaire) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fimebapbdliodpciaalpoijonhdfhhkd [2017-08-14]
CHR Extension: (Word Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2017-08-14]
CHR Extension: (G SSH SWF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fipamjmedinmfclljanbjhhbdkfinpkc [2017-08-14]
CHR Extension: (Nintendo ThemeShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkhaiaahhhomnfnnjhmnkkhloogihnfa [2017-08-14]
CHR Extension: (EMails) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fknmbhaaehfdjpmooilcabjgooldjdoo [2017-08-14]
CHR Extension: (Google Voice ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fldbfpjncfkebegiobhnjanbokdlbnij [2017-08-14]
CHR Extension: (Rufus) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljfobnflghnobgffmkpjddbdehgmfol [2017-08-14]
CHR Extension: (Who's on first?) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fljmpldncihcmabdfjkgonhijjkpbgkl [2017-08-14]
CHR Extension: (Norton DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\focoenonfjfpphaadindagmhlijgklak [2017-08-14]
CHR Extension: (Nintendo CS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpdddhjdalfonhmejlkcfhjcckhealoc [2017-08-14]
CHR Extension: (Chrome Remote Desktop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-08-14]
CHR Extension: (SPdate) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmnahlpnikhhgldfmeajheocdileadd [2017-08-14]
CHR Extension: (Super Mario) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdljahompmnjdcmnlcfeobicdpepefbf [2017-08-14]
CHR Extension: (Outlook Calendar) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegmdadojdijhnemaeolhalohelcagod [2017-08-14]
CHR Extension: (Network Test) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\geklcdelofkoldghehnhggalmoahklbi [2017-08-14]
CHR Extension: (Homebrew Browser) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjnhndecndnepbjpmaloifckdmgcac [2017-08-14]
CHR Extension: (About GPG Services) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaoeklfaibbbipibbalclmnllojibkh [2017-08-14]
CHR Extension: (Google Docs Offline) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-14]
CHR Extension: (Click&Clean) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2017-08-14]
CHR Extension: (Anyfile Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghlichmdnegmcpafgmmlpkegmcndlndi [2017-08-14]
CHR Extension: (Outlook People) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\giafdibgibbipnlecfckidkecmpkedho [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjaejhlejagppekogippmigjbkdjmcdk [2017-08-14]
CHR Extension: (Open PayPal) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glghgmejmmepalcnengjekjfmfbailbl [2017-08-14]
CHR Extension: (Google Wallet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhhiiglleiipdnodkaabbbbjhepnbcb [2017-08-14]
CHR Extension: (Save to Google Drive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2017-08-14]
CHR Extension: (Bookmark Manager) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2017-08-14]
CHR Extension: (UnRAR and RAR Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\goeclnlkhfoejbhdebemhjljlmcbhfkp [2017-08-14]
CHR Extension: (Drive Notepad) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpgjomejfimnbmobcocilppikhncegaj [2017-08-14]
CHR Extension: (Win10 Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpjminmgekffdgiancflhaojkgjcdgmc [2017-08-14]
CHR Extension: (Microsoft Assistance) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplepoifohkaepkncehnpljceeljlabi [2017-08-14]
CHR Extension: (WC Forums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbiinloenjigabpbdlogbimfgbopcfce [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfbcjnjfeolgeoddhcdjpogocmpkmncp [2017-08-14]
CHR Extension: (GSSH.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmckcabobcmbdlimkenccopfnpokmie [2017-08-14]
CHR Extension: (GV Phone) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmpoeaghekodfplkofpeabpnipphcjh [2017-08-14]
CHR Extension: (Outlook Tasks) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkaimcgnicopmhblimdmfjahhifkfcoi [2017-08-14]
CHR Extension: (Dead Skin) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnjjcekgbjlpiegjcdmmpojndajlndok [2017-08-14]
CHR Extension: (RomsEShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hohhmomfljojjeaaehdcocalfpejjccc [2017-08-14]
CHR Extension: (USPS Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\idammebdkcmcjhminehllfamifenkhbn [2017-08-14]
CHR Extension: (Android Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbnciaeojfhgeihkflgcgajopfjeohg [2017-08-14]
CHR Extension: (Get Human) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifcelejocgjieghblljgkemmnlejjlep [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igabecodgkgfkdhglpojbnbobbnaajai [2017-08-14]
CHR Extension: (SEGA Bandonware) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igelfoafbodelegelfonpkanedmogdpm [2017-08-14]
CHR Extension: (OMG! Chrome!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\igpknfbadalohcopbkaepbgblomnbdma [2017-08-14]
CHR Extension: (Frontier Internet) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihjgglhacdljfhmlinhcagchbkcgdhio [2017-08-14]
CHR Extension: (Zip, UnZip App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiaianhgacnhnnhejddkghikgnhgpeaa [2017-08-14]
CHR Extension: (Bible Questions Answered) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iiipijolbcononkgjpepkplcchmajanm [2017-08-14]
CHR Extension: (Apps Launcher) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijmgkhchjindcjamnckoiahagecjnkdc [2017-08-14]
CHR Extension: (Office Support) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikhblhjgapcilfennndodceemdoomngn [2017-08-14]
CHR Extension: (Excel Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2017-08-14]
CHR Extension: (PC Help Forum) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\illdlgkhakmollnophmajedfblhpijak [2017-08-14]
CHR Extension: (COSwallpapers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\inpceamnbdnjkljfebkpdgfnnfckopap [2017-08-14]
CHR Extension: (HTML5 Flash Warning Fix for YouTube™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipdkokhdeppifjgcmhbfgmjmdllfpkln [2017-08-14]
CHR Extension: (File System for OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdfcehgafdbfpniaimfbfomafoadgo [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbjamgmfdlbplimhkomcjjlemjaddogn [2017-08-14]
CHR Extension: (PCTechForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jecdgjmkjbcagbkoifleegbplpnaobfa [2017-08-14]
CHR Extension: (Microsoft Update Catalog) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhgndoofkbbhhfcoldgjcakejekefcd [2017-08-14]
CHR Extension: (SSF2 Game) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgplhfbmmkajpgnpldoaafagambccjje [2017-08-14]
CHR Extension: (BibleGateway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjmdfkmnphhfgilhfofaiffmhjlnopan [2017-08-14]
CHR Extension: (SM Trial Keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljcdndcgbkbjonffogpnljganhabgmj [2017-08-14]
CHR Extension: (Save to Facebook) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfikkaogpplgnfjmbjdpalkhclendgd [2017-08-14]
CHR Extension: (Holy Bible) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jomemcnjdjkjipodmcpfjhioloioplfh [2017-08-14]
CHR Extension: (CDFF) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kahonebhcmapeomaemhjakphnpffhhhf [2017-08-14]
CHR Extension: (My Sway) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcnmjbpdljgcffbninlkelpbfmbbbohp [2017-08-14]
CHR Extension: (North Pole Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdggiihhdpfglclmfghofjbiagonaplo [2017-08-14]
CHR Extension: (Chrome Web Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfknblmmckdmlklbncfodpomfoejlbgm [2017-08-14]
CHR Extension: (Range Extender Setup) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgaimanaoiiecgbljbpjhkdicaogkinf [2017-08-14]
CHR Extension: (4Shared) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khdleokphdcnmagagajnchlcmacfphan [2017-08-14]
CHR Extension: (CB Help) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\khomnbdfmhfppiemgglncdlbbnppffdo [2017-08-14]
CHR Extension: (Pure Flix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiiijkmmlfiofadnffcomgcmdlppddhd [2017-08-14]
CHR Extension: (Novelty, OH Weather Conditions & Fore...) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkphahjiaiaahfhcbedhbgfpodbojbje [2017-08-14]
CHR Extension: (MyAptoideBU) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpdcjojlnaceggdkglndamdmaonfnpi [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2017-08-14]
CHR Extension: (Google Play) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2017-08-14]
CHR Extension: (GSSH2.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\laekopehhnfklajodmbbhdfhmkfbnblc [2017-08-14]
CHR Extension: (Wake Up!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbbcfplbfbmimpnlammmeaheakhcogke [2017-08-14]
CHR Extension: (AnimeDub Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbdcckpbjegpnhhdejaipegkabkofhla [2017-08-14]
CHR Extension: (Twitter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lddagfjihimnacaabfnfagjcokfmnekc [2017-08-14]
CHR Extension: (Aptoide) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhhjndfejaoaiaaokjmhoiedppdmknki [2017-08-14]
CHR Extension: (AnimeDub) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhnnmimodonfbnmpgmcjahlblaenkgle [2017-08-14]
CHR Extension: (Files2Zip) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhoadfgjeimckjlphkdebfmhbpeniljo [2017-08-14]
CHR Extension: (USPS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\liocengmpmiiejdoebmlifecbmcpfigg [2017-08-14]
CHR Extension: (Wikipedia Search) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lipakennkogpodadpikgipnogamhklmk [2017-08-14]
CHR Extension: (MSN Games - Free Online Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkbgddpallgbhlldcnnjomnodmohpklf [2017-08-14]
CHR Extension: (IHeart Christmas) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lndoiaoagbajoadpgmfgckfckmchepmj [2017-08-14]
CHR Extension: (Google Maps) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2017-08-14]
CHR Extension: (SSB) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lockfglcfjlaagpghflagedkkgojipke [2017-08-14]
CHR Extension: (Office Upgrade) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\locmdgkcjcjacipaokcoochhjhpklbih [2017-08-14]
CHR Extension: (B1 File Extracter) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbgobeedadfbponkgffobhpmokjmlhol [2017-08-14]
CHR Extension: (Documents Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbhgihpdipbgifogehncdehebkpehoap [2017-08-14]
CHR Extension: (GoogleDNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbogpnkehmjcidggfooapenefhckeehd [2017-08-14]
CHR Extension: (PowerPoint Online) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2017-08-14]
CHR Extension: (Messenger (Unofficial)) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdapmeleikeppmfgadilffngabfpibok [2017-08-14]
CHR Extension: (GoogleFuchsia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mejnaonfdocegokbjldkeafifpnfnpan [2017-08-14]
CHR Extension: (CN Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mekgfnmophledbpkmikhnfkimoahjohn [2017-08-14]
CHR Extension: (CraigTechShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfbfebnljjciechbmlehdcmnmdhacgmi [2017-08-14]
CHR Extension: (COMODO DNS) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfnnnpncpeeecbbdepenkkgpjoenkbbo [2017-08-14]
CHR Extension: (T-Mobile) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhpgceapcpooallmggianccbakegnhnb [2017-08-14]
CHR Extension: (V.FreeMovies) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkopchcfcbchhnbpldmdjfbdhgkcpgkn [2017-08-14]
CHR Extension: (CB Central) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlieflpkidahjkojakjlpnlnchobihbl [2017-08-14]
CHR Extension: (ZIP Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmfcakoljjhncfphlflcedhgogfhpbcd [2017-08-14]
CHR Extension: (GC Options) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmmanlicckcagdkabbemhccfpmgojncl [2017-08-14]
CHR Extension: (My Google Account) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnepgpaicadoimgdlajhkgokfenaadkh [2017-08-14]
CHR Extension: (PogoTM) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmklochmlghbgebbmkldomoihjbgfie [2017-08-14]
CHR Extension: (Nintendo Pedia) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mogfngbfndeeecglaejajbioegpimija [2017-08-14]
CHR Extension: (What's on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbeopbccnmkgdlbpicobflenbjceoaka [2017-08-14]
CHR Extension: (Chrome OS Features) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbjdhanphhipjfkmicljakgnbaicfojk [2017-08-14]
CHR Extension: (Ws on Netflix) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncjendjahmgpgjdeenknmdoecofmfdod [2017-08-14]
CHR Extension: (Google Hangouts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2017-08-14]
CHR Extension: (Reload It) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nconjighkgcoppohfilfinlimdfmjafg [2017-08-14]
CHR Extension: (Games4Summer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndphblldagopagiodebolhdjohgindbm [2017-08-14]
CHR Extension: (OneDrive) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2017-08-14]
CHR Extension: (UNetbootin - Homepage and Downloads) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhanbcbjhjcgpccibphcicainkkinool [2017-08-14]
CHR Extension: (SupportSpace) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nigmaeimafjgjfodjfhnancnahfeindg [2017-08-14]
CHR Extension: (FedEx Tracking) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikgcnimkfeopobooaahjpbdkdfhchao [2017-08-14]
CHR Extension: (SEGA Online Emulator) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nilhogoffgcdfgmejcjpidfaiefpccpl [2017-08-14]
CHR Extension: (WeatherBug) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\njkkjobcechefaoknodniidfjapgfoco [2017-08-14]
CHR Extension: (Games) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nklbmhejmcjofglijalidajdlihahnpd [2017-08-14]
CHR Extension: (Archive Extractor) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknadlalodfadgegkigkmbhofcmkhfnc [2017-08-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-14]
CHR Extension: (Win10 Pro keys) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnelnnlfcdhjfbfglandknndlonidojg [2017-08-14]
CHR Extension: (Toonova) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobhijfkaffjbkocimaaembibggenkdc [2017-08-14]
CHR Extension: (Frontier) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nofcknkefjengmgmlnmdmgbmlakhhnok [2017-08-14]
CHR Extension: (SM63.swf) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\noijjjifnenaafboiipobhiflmiaimof [2017-08-14]
CHR Extension: (Chrome OS EOL) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\npmnpehbihaieehmoaifdkdlcgndmpjn [2017-08-14]
CHR Extension: (System) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocjnemjmlhjkeilmaidemofakmpclcbi [2017-08-14]
CHR Extension: (COMODO GeekBuddy) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oebmcdnandbcnfmpjecmmhcoogfneelj [2017-08-14]
CHR Extension: (Google Santa Tracker) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehagbcimlpafjbdijnjmaboblcfdnoh [2017-08-14]
CHR Extension: (PDF Viewer) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oemmndcbldboiebfnladdacbdfmadadm [2017-08-14]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2017-08-15]
CHR Extension: (App Store) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogffnakkboiaoifjbhjbahamkdojaemm [2017-08-14]
CHR Extension: (EPForums) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oimkklcnelpdlkkbjjablakandmmddio [2017-08-14]
CHR Extension: (Fullscreen Anything) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\olcfgpmjldkkjdclidhcbonieibfhhdh [2017-08-14]
CHR Extension: (SM 63) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\oldjcgpcnneleakkepogfghcehnjcngf [2017-08-14]
CHR Extension: (YouTube™ Flash-HTML5) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\omimccinlhlkpjaeaocglgmkbelejlhj [2017-08-14]
CHR Extension: (Christian Date) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ompnolbokepechjidcgpaddaaeoocajn [2017-08-14]
CHR Extension: (Consumer AV Providers) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ongfjpmgcneinonelpaljjdaigppnneo [2017-08-14]
CHR Extension: (Putlocker ) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookjcnljofpnadeabapgadihfhngblfe [2017-08-14]
CHR Extension: (Nintendo RomShop) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pahokmgpomeaakdfnahejklhcifhaige [2017-08-14]
CHR Extension: (Microsoft Office Home) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\palennhedgekbnbmokheidadmghcncgl [2017-08-14]
CHR Extension: (I Heart Radio) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcbnpgdibikphcelmkjldlfjjepjipl [2017-08-14]
CHR Extension: (Click&Clean App) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-08-14]
CHR Extension: (Shortcuts for Google™ Products) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdlecffodcfabchelafoljcdphfpkpcl [2017-08-14]
CHR Extension: (Date Countdown) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfbpikfaigmikdjkghbkbapjhfoglipj [2017-08-14]
CHR Extension: (Data Saver) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmgfdlgomnbgkofeojodiodmgpgmkac [2017-08-14]
CHR Extension: (Outlook.com) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge [2017-08-14]
CHR Extension: (Bing) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\phfegmcgballapgnbppeeidckejebknn [2017-08-14]
CHR Extension: (Super Smash Bros For NDS !!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pifamkpimegbfnakceigajiljjodcfla [2017-08-14]
CHR Extension: (Gmail) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-14]
CHR Extension: (Chrome Media Router) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-14]
CHR Extension: (OMG! Ubuntu!) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmoodaljflkhbojjaiibgnlindbhebme [2017-08-14]
CHR Extension: (EBay) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppaellakmlibbcfkgkmbkkllnhcmghca [2017-08-14]
CHR Extension: (Google Contacts) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppbiamkfhlcpgijakdgbbffikmkkofnl [2017-08-14]
CHR Extension: (Apps On Chrome) - C:\Users\eddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppmdjabijijblhfhnbgcpnoamkibcclm [2017-08-14]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [10501104 2017-07-11] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2017-07-11] (COMODO)
R2 csssrv; C:\Program Files (x86)\COMODO\COMODO Secure Shopping\csssrv64.exe [3210936 2017-06-30] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2273432 2017-08-08] (Comodo)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [356352 2017-08-02] (Intel Corporation)
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-07-05] (COMODO)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (The OpenVPN Project)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324576 2017-08-02] (Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-04-11] (Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269912 2017-01-17] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-19] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-09-09] (/n software, Inc.)
R1 cmdcss; C:\WINDOWS\system32\drivers\cmdcss.sys [126056 2017-03-31] (COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [40936 2017-06-02] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [831992 2017-06-02] (COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [50776 2017-06-02] (COMODO)
S3 dot4; C:\WINDOWS\System32\drivers\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [72584 2017-01-12] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [67976 2017-01-12] (Intel Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77376 2017-06-27] ()
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7407080 2017-08-02] (Intel Corporation)
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [132880 2017-06-07] (COMODO)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [62208 2017-03-29] (COMODO)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [188352 2017-08-16] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [101784 2017-08-16] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [45472 2017-08-16] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-16] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93600 2017-08-16] (Malwarebytes)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [947712 2017-02-15] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [420832 2017-08-02] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [6804480 2017-05-03] (Realtek Semiconductor Corporation )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [60504 2017-01-17] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [64088 2017-01-17] (Synaptics Incorporated)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2015-10-15] (Intel Corporation)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [18624 2016-09-09] (/n software, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30392 2017-04-25] (HP)
S3 WiseUnlock; C:\WINDOWS\WiseUnlock64.sys [33864 2017-08-15] (WiseCleaner.com)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 22:26 - 2017-08-16 22:28 - 000052421 _____ C:\Users\eddie\Desktop\FRST.txt
2017-08-16 22:26 - 2017-08-16 22:26 - 000000000 ____D C:\FRST
2017-08-16 22:24 - 2017-08-16 22:24 - 002395648 _____ (Farbar) C:\Users\eddie\Desktop\FRST64.exe
2017-08-16 22:21 - 2017-08-16 22:21 - 000000000 ___HD C:\OneDriveTemp
2017-08-16 22:19 - 2017-08-16 22:19 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-08-16 21:53 - 2017-08-16 21:53 - 000000000 ____D C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
2017-08-16 21:28 - 2017-08-16 21:53 - 000000000 ____D C:\ProgramData\ProductData
2017-08-16 21:27 - 2017-08-16 21:35 - 000000000 ____D C:\AdwCleaner
2017-08-16 21:08 - 2017-08-16 21:08 - 000003656 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-08-16 20:40 - 2017-08-16 20:40 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2017-08-16 20:40 - 2017-08-16 20:40 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxinit.dll
2017-08-16 20:40 - 2017-08-16 20:40 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraUXThemePatcher
2017-08-16 20:40 - 2017-08-16 20:40 - 000000000 ____D C:\Program Files (x86)\UltraUXThemePatcher
2017-08-16 20:40 - 2017-06-19 22:05 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll.backup
2017-08-16 20:40 - 2017-03-18 13:58 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxinit.dll.backup
2017-08-16 20:39 - 2017-08-16 20:39 - 000587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2017-08-16 20:39 - 2017-03-18 13:58 - 000587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll.backup
2017-08-16 18:43 - 2017-08-16 18:43 - 000000000 ____D C:\Users\eddie\AppData\Local\Unity
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default\AppData\Roaming\IObit
2017-08-16 00:37 - 2017-08-16 00:37 - 000000000 ____D C:\Users\Default User\AppData\Roaming\IObit
2017-08-16 00:29 - 2017-08-16 00:29 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-08-16 00:28 - 2017-08-16 22:19 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-08-16 00:28 - 2017-08-16 22:19 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-08-16 00:27 - 2017-08-16 22:19 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-08-16 00:27 - 2017-08-16 00:27 - 000001927 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-16 00:27 - 2017-08-16 00:27 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-16 00:27 - 2017-06-27 12:06 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-08-16 00:25 - 2017-08-16 22:19 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-16 00:24 - 2017-08-16 00:27 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-15 18:07 - 2017-08-15 18:13 - 000000000 ____D C:\Users\eddie\AppData\Local\PackageStaging
2017-08-15 12:57 - 2017-08-15 12:59 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000033864 _____ (WiseCleaner.com) C:\WINDOWS\WiseUnlock64.sys
2017-08-15 12:57 - 2017-08-15 12:57 - 000001287 _____ C:\Users\Public\Desktop\Wise Force Deleter.lnk
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Force Deleter
2017-08-15 12:57 - 2017-08-15 12:57 - 000000000 ____D C:\Program Files (x86)\Wise
2017-08-15 03:39 - 2017-08-15 03:39 - 000000000 ____D C:\WINDOWS\System32\Tasks\Games
2017-08-15 03:29 - 2017-08-15 03:29 - 000000000 ____D C:\WINDOWS\System32\Tasks\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000001357 _____ C:\Users\eddie\Desktop\Auslogics Disk Defrag.lnk
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\ProgramData\Auslogics
2017-08-15 03:24 - 2017-08-15 03:24 - 000000000 ____D C:\Program Files (x86)\Auslogics
2017-08-15 03:21 - 2017-08-15 03:21 - 000000000 ___HD C:\VTRoot
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-15 02:25 - 2017-08-15 02:25 - 000000000 ____D C:\Program Files (x86)\Realtek
2017-08-15 02:25 - 2017-02-15 21:50 - 000947712 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2017-08-15 02:25 - 2017-02-15 21:50 - 000082536 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2017-08-15 01:46 - 2017-08-15 01:46 - 005373952 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2017-08-15 01:17 - 2017-08-15 01:30 - 000000000 ____D C:\Users\eddie\AppData\Local\CrashDumps
2017-08-15 00:48 - 2017-08-15 00:48 - 000001796 _____ C:\Users\eddie\Desktop\Virtual Kiosk.lnk
2017-08-15 00:31 - 2017-08-15 00:31 - 000002374 _____ C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-08-14 21:54 - 2017-08-16 22:25 - 000063760 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2017-08-14 21:40 - 2017-08-14 21:40 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2017-08-14 21:40 - 2017-08-14 21:40 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2017-08-14 21:38 - 2017-08-14 21:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Comodo
2017-08-14 21:27 - 2017-08-16 22:28 - 001413201 _____ C:\WINDOWS\system32\Drivers\sfi.dat
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2017-08-14 21:27 - 2017-08-14 21:27 - 000000000 ____D C:\Program Files\COMODO
2017-08-14 21:26 - 2017-06-30 07:08 - 000332472 _____ (COMODO) C:\WINDOWS\system32\cmdkbdcss64.dll
2017-08-14 21:26 - 2017-06-30 07:08 - 000263352 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdkbdcss32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000432104 _____ (COMODO) C:\WINDOWS\system32\cssguard64.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000338560 _____ (COMODO) C:\WINDOWS\SysWOW64\cssguard32.dll
2017-08-14 21:26 - 2017-06-30 07:07 - 000048728 _____ (COMODO) C:\WINDOWS\system32\csscsr64.dll
2017-08-14 21:26 - 2017-03-31 23:15 - 000126056 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdcss.sys
2017-08-14 21:25 - 2017-08-14 21:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Comodo
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Shared Space
2017-08-14 21:21 - 2017-08-14 21:21 - 000000000 ____D C:\ProgramData\Comodo Downloader
2017-08-14 21:19 - 2017-08-15 01:44 - 000000000 ____D C:\ProgramData\COMODO
2017-08-14 21:19 - 2017-08-15 00:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-08-14 21:19 - 2017-08-14 21:47 - 000000000 ____D C:\Program Files (x86)\COMODO
2017-08-14 21:19 - 2017-07-05 00:30 - 000256040 _____ (COMODO) C:\WINDOWS\system32\iseguard64.dll
2017-08-14 21:19 - 2017-07-05 00:29 - 000205536 _____ (COMODO) C:\WINDOWS\SysWOW64\iseguard32.dll
2017-08-14 21:19 - 2017-03-29 14:49 - 000062208 _____ (COMODO) C:\WINDOWS\system32\Drivers\isedrv.sys
2017-08-14 17:10 - 2017-08-14 17:11 - 000002676 _____ C:\Users\eddie\Desktop\PC Help Forum.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000001006 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Mozilla
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-08-14 16:41 - 2017-08-14 16:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-14 16:12 - 2017-08-14 16:12 - 000000859 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Explorer.lnk
2017-08-14 14:46 - 2017-08-14 15:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
2017-08-14 14:41 - 2017-08-14 14:41 - 000002357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-14 14:41 - 2017-08-14 14:41 - 000002345 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-14 14:40 - 2017-08-14 14:40 - 000003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-08-14 14:40 - 2017-08-14 14:40 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-08-14 14:28 - 2017-08-14 14:28 - 000000000 ____D C:\WINDOWS\Panther
2017-08-14 14:15 - 2017-08-14 14:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-14 14:15 - 2017-08-14 14:15 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Sun
2017-08-14 14:15 - 2017-08-14 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-08-14 14:15 - 2017-08-14 14:14 - 000110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2017-08-14 14:14 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\ProgramData\Oracle
2017-08-14 14:13 - 2017-08-14 14:13 - 000000000 ____D C:\Program Files\Java
2017-08-14 04:00 - 2017-08-14 04:00 - 000041800 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2017-08-14 03:49 - 2017-08-14 03:49 - 000000000 ____D C:\Users\eddie\AppData\Local\PeerDistRepub
2017-08-14 02:55 - 2017-08-14 02:55 - 069640192 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000491520 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000065536 _____ C:\WINDOWS\system32\config\SAM.iobit
2017-08-14 02:55 - 2017-08-14 02:55 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2017-08-14 02:53 - 2017-08-16 22:16 - 000000000 ____D C:\Users\eddie\AppData\Local\ClassicShell
2017-08-14 02:53 - 2017-08-16 02:33 - 000000000 ____D C:\ProgramData\ClassicShell
2017-08-14 02:53 - 2017-08-14 02:53 - 000000000 ____D C:\Users\eddie\AppData\Roaming\ClassicShell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2017-08-14 02:52 - 2017-08-14 02:52 - 000000000 ____D C:\Program Files\Classic Shell
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2017-08-14 02:33 - 2017-08-14 02:33 - 000000000 ____D C:\ProgramData\BDLogging
2017-08-14 02:26 - 2017-08-14 02:26 - 000565416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-08-14 02:18 - 2017-08-14 04:54 - 000002956 _____ C:\WINDOWS\System32\Tasks\CCleanerClean
2017-08-14 02:18 - 2017-08-14 04:54 - 000000258 _____ C:\WINDOWS\Tasks\CCleanerClean.job
2017-08-14 02:05 - 2017-08-16 12:42 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-14 02:05 - 2017-08-16 12:39 - 000000000 ____D C:\Program Files\CCleaner
2017-08-14 02:05 - 2017-08-14 02:05 - 000002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-08-14 02:05 - 2017-08-14 02:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-14 01:52 - 2017-08-14 01:52 - 000001129 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Users\eddie\AppData\Local\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\VS Revo Group
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-08-14 01:52 - 2017-08-14 01:52 - 000000000 ____D C:\Program Files\VS Revo Group
2017-08-14 01:52 - 2016-12-21 14:52 - 000040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2017-08-14 01:46 - 2017-08-14 01:46 - 000000000 ____D C:\Users\eddie\AppData\Local\MicrosoftEdge
2017-08-14 01:45 - 2017-08-16 22:07 - 000000000 ____D C:\Users\eddie\AppData\Roaming\IObit
2017-08-14 01:45 - 2017-08-16 22:07 - 000000000 ____D C:\ProgramData\IObit
2017-08-14 01:45 - 2017-08-14 04:53 - 000000000 ____D C:\Program Files (x86)\IObit
2017-08-14 01:37 - 2017-08-14 01:37 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\3C64355F.sys
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\TAP-Windows
2017-08-14 01:29 - 2017-08-14 01:30 - 000000000 ____D C:\Program Files\OpenVPN
2017-08-14 01:29 - 2017-08-14 01:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2017-08-14 01:23 - 2017-08-14 01:23 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\Users\eddie\AppData\Roaming\WinRAR
2017-08-14 01:23 - 2017-08-14 01:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 01:22 - 2017-08-14 01:23 - 000000000 ____D C:\Program Files\WinRAR
2017-08-14 01:16 - 2017-08-14 01:16 - 000000634 _____ C:\Users\eddie\OneDrive\Documents\MagicActions-Options.json
2017-08-14 01:02 - 2017-08-14 04:57 - 000000000 ____D C:\Users\eddie\AppData\Local\pCloud
2017-08-14 00:56 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Google
2017-08-14 00:56 - 2017-08-14 00:56 - 000000000 ____D C:\WINDOWS\InfusedApps
2017-08-14 00:54 - 2017-08-14 00:54 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-08-14 00:54 - 2017-08-13 23:58 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-08-14 00:52 - 2017-08-14 00:52 - 000000000 ____D C:\Program Files\Synaptics
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2017-08-14 00:51 - 2017-08-14 00:51 - 000000000 ____D C:\Program Files (x86)\HP
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\WINDOWS\Setup
2017-08-14 00:50 - 2017-08-14 00:50 - 000000000 ____D C:\Users\eddie\AppData\Local\DBG
2017-08-14 00:49 - 2017-08-14 14:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Google
2017-08-14 00:49 - 2017-08-14 14:40 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-14 00:48 - 2017-08-14 00:49 - 000000000 ____D C:\Users\eddie\AppData\Local\Deployment
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Macromedia
2017-08-14 00:48 - 2017-08-14 00:48 - 000000000 ____D C:\Users\eddie\AppData\Local\Apps\2.0
2017-08-14 00:46 - 2017-08-16 19:02 - 000004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{FA13B12A-B6F1-4CA4-9E37-D55E2EE30D0B}
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\OCR
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files\MSBuild
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-08-14 00:44 - 2017-08-14 00:44 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pCloud
2017-08-14 00:43 - 2017-08-14 00:43 - 000000000 ____D C:\Program Files (x86)\pCloud Drive
2017-08-14 00:43 - 2016-09-09 16:33 - 000018848 _____ (/n software, Inc.) C:\WINDOWS\system32\elevtmsg.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000235424 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000196000 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:32 - 000134560 _____ (/n software, Inc.) C:\WINDOWS\system32\cbfsNetRdr6.dll
2017-08-14 00:43 - 2016-09-09 16:31 - 000170400 _____ (/n software, Inc.) C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll
2017-08-14 00:43 - 2016-09-09 16:23 - 000460992 _____ (/n software, Inc.) C:\WINDOWS\system32\Drivers\cbfs6.sys
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\winrm
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\WCN
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\slmgr
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\0409
2017-08-14 00:42 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\DigitalLocker
2017-08-14 00:37 - 2017-07-31 08:15 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-08-14 00:37 - 2017-07-31 08:15 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-14 00:32 - 2017-08-14 00:55 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-08-14 00:32 - 2017-08-14 00:27 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2017-08-14 00:32 - 2017-08-14 00:27 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2017-08-14 00:32 - 2017-08-14 00:27 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2017-08-14 00:32 - 2017-08-14 00:27 - 000015940 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2017-08-14 00:32 - 2017-08-14 00:27 - 000004096 _____ C:\WINDOWS\system32\config\VSMIDK
2017-08-14 00:32 - 2017-08-14 00:27 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2017-08-14 00:32 - 2017-08-14 00:27 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2017-08-14 00:32 - 2017-08-14 00:27 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2017-08-14 00:32 - 2017-08-14 00:27 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2017-08-14 00:32 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2017-08-14 00:31 - 2017-08-16 20:49 - 000000000 ___RD C:\Program Files (x86)
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-14 00:31 - 2017-08-16 12:31 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-14 00:31 - 2017-08-15 01:44 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2017-08-14 00:31 - 2017-08-14 14:36 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-08-14 00:31 - 2017-08-14 03:25 - 000000000 ____D C:\WINDOWS\appcompat
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 03:16 - 000000000 ____D C:\Program Files (x86)\Windows Sidebar
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\migwiz
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\Provisioning
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-08-14 00:31 - 2017-08-14 00:49 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-08-14 00:31 - 2017-08-14 00:44 - 000000000 ____D C:\WINDOWS\SystemApps
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\dsc
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\setup
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\system32\Com
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\IME
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\Help
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-14 00:31 - 2017-08-14 00:42 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 __RSD C:\WINDOWS\Media
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\Nui
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___SD C:\WINDOWS\system32\AppV
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\icsxml
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\ias
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\downlevel
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\DDFs
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\Registration
2017-08-14 00:31 - 2017-08-14 00:32 - 000000000 ____D C:\WINDOWS\L2Schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Web
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Vss
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\tracing
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\TAPI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SystemResources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\winevt
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ras
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\IME
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\System
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SKB
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\schemas
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\SchCache
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Resources
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\RemotePackages
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\PLA
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Performance
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\ModemLogs
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\InputMethod
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Globalization
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Cursors
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\Branding
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\bcastdvr
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\addins
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Security
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files\Common Files\Services
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows NT
2017-08-14 00:31 - 2017-08-14 00:31 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2017-08-14 00:31 - 2017-08-14 00:27 - 000000219 _____ C:\WINDOWS\system.ini
2017-08-14 00:31 - 2017-08-14 00:27 - 000000092 _____ C:\WINDOWS\win.ini
2017-08-14 00:31 - 2017-08-14 00:20 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-08-14 00:31 - 2017-08-14 00:19 - 000000000 __RHD C:\Users\Public\Libraries
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\spool
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2017-08-14 00:31 - 2017-08-14 00:16 - 000000000 ____D C:\WINDOWS\CSC
2017-08-14 00:31 - 2017-08-14 00:10 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOPrivate
2017-08-14 00:31 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\PrintDialog
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\MiracastView
2017-08-14 00:31 - 2017-08-14 00:06 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-14 00:31 - 2017-08-14 00:05 - 000000000 ____D C:\WINDOWS\HoloShell
2017-08-14 00:30 - 2017-08-14 00:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Skype
2017-08-14 00:28 - 2017-08-15 23:08 - 000000000 ____D C:\WINDOWS\INF
2017-08-14 00:27 - 2017-08-14 00:27 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-08-14 00:26 - 2017-08-14 00:26 - 000000000 ____D C:\Users\eddie\AppData\Local\Comms
2017-08-14 00:25 - 2017-08-14 13:58 - 000908880 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-14 00:25 - 2017-08-14 00:25 - 000000000 ____D C:\Users\eddie\AppData\Local\Publishers
2017-08-14 00:24 - 2017-08-15 18:41 - 000000000 ____D C:\Users\eddie\AppData\Local\Packages
2017-08-14 00:24 - 2017-08-14 04:56 - 000000000 ____D C:\Users\eddie\AppData\Local\ConnectedDevicesPlatform
2017-08-14 00:24 - 2017-08-14 00:24 - 000000020 ___SH C:\Users\eddie\ntuser.ini
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Synaptics
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Adobe
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\VirtualStore
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\Users\eddie\AppData\Local\TileDataLayer
2017-08-14 00:24 - 2017-08-14 00:24 - 000000000 ____D C:\ProgramData\Synaptics
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\Default User
2017-08-14 00:23 - 2017-08-14 00:23 - 000000000 _SHDL C:\Users\All Users
2017-08-14 00:21 - 2017-08-16 22:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-14 00:20 - 2017-08-14 00:20 - 000026274 _____ C:\Users\eddie\OneDrive\Documents\Removed Apps.html
2017-08-14 00:18 - 2017-08-14 14:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-14 00:15 - 2017-08-16 18:54 - 000000000 ____D C:\Users\eddie
2017-08-14 00:12 - 2017-08-16 22:18 - 082051072 _____ C:\WINDOWS\system32\config\SYSTEM
2017-08-14 00:12 - 2017-08-16 22:18 - 071827456 _____ C:\WINDOWS\system32\config\SOFTWARE
2017-08-14 00:12 - 2017-08-16 22:18 - 009175040 _____ C:\WINDOWS\system32\config\BBI
2017-08-14 00:12 - 2017-08-16 22:18 - 001572864 _____ C:\WINDOWS\system32\config\DEFAULT
2017-08-14 00:12 - 2017-08-16 22:18 - 000057344 _____ C:\WINDOWS\system32\config\SECURITY
2017-08-14 00:12 - 2017-08-14 00:54 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2017-08-14 00:12 - 2017-08-14 00:42 - 000000000 ____D C:\WINDOWS\servicing
2017-08-14 00:12 - 2017-08-14 00:31 - 000000000 ____D C:\WINDOWS\system32\SMI
2017-08-14 00:12 - 2017-08-14 00:23 - 000000000 ___HD C:\$Windows.~BT
2017-08-14 00:12 - 2017-08-14 00:22 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-08-14 00:09 - 2017-08-14 00:09 - 000000000 ____D C:\ProgramData\USOShared
2017-08-14 00:04 - 2017-08-14 00:04 - 000021910 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2017-08-14 00:04 - 2017-08-14 00:04 - 000002065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2017-08-14 00:04 - 2017-08-14 00:04 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\ProgramData\SRS Labs
2017-08-14 00:04 - 2017-08-14 00:04 - 000000000 ____D C:\Program Files\Realtek
2017-08-14 00:04 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 ____D C:\Program Files\Intel
2017-08-14 00:03 - 2017-08-14 00:03 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2017-08-14 00:02 - 2017-03-18 13:56 - 002233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-08-13 23:58 - 2017-08-16 18:16 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-13 22:50 - 2017-08-14 00:57 - 000000000 ___HD C:\$SysReset
2017-08-13 08:49 - 2017-08-13 08:49 - 000291128 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper64.dll
2017-08-13 08:49 - 2017-08-13 08:49 - 000248120 _____ (IvoSoft) C:\WINDOWS\SysWOW64\StartMenuHelper32.dll
2017-08-13 01:40 - 2017-08-15 00:06 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\Mozilla
2017-08-12 23:19 - 2017-08-15 02:24 - 000000000 ___HD C:\SWSetup
2017-08-12 22:31 - 2017-08-14 00:19 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Restore Explorer
2017-08-09 02:19 - 2017-08-14 01:45 - 000000000 ____D C:\Users\eddie\AppData\LocalLow\IObit
2017-08-08 22:10 - 2017-07-31 19:36 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-08-08 22:10 - 2017-07-31 19:34 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-08-08 22:10 - 2017-07-31 19:20 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-08-08 22:10 - 2017-07-31 19:18 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-08-08 22:10 - 2017-07-31 19:18 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-08-08 22:10 - 2017-07-31 19:13 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-08-08 22:10 - 2017-07-31 19:07 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-08 22:10 - 2017-07-31 19:06 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-08-08 22:10 - 2017-07-31 19:03 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-08-08 22:10 - 2017-07-31 18:30 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-08 22:10 - 2017-07-31 15:45 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-08 22:09 - 2017-07-31 19:39 - 008319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-08 22:09 - 2017-07-31 19:38 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:38 - 000382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-08 22:09 - 2017-07-31 19:36 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:36 - 000119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-08 22:09 - 2017-07-31 19:35 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:35 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:34 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:34 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:33 - 000473240 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-08 22:09 - 2017-07-31 19:32 - 002444704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-08 22:09 - 2017-07-31 19:32 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-08 22:09 - 2017-07-31 19:32 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-08 22:09 - 2017-07-31 19:31 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 002645680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-08 22:09 - 2017-07-31 19:31 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000723680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000410160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-08 22:09 - 2017-07-31 19:30 - 000315288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000143736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-08 22:09 - 2017-07-31 19:30 - 000082336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-08 22:09 - 2017-07-31 19:26 - 000204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-08-08 22:09 - 2017-07-31 19:20 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 19:17 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 19:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 19:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 19:13 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-08 22:09 - 2017-07-31 19:12 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-08-08 22:09 - 2017-07-31 19:10 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 19:09 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-08-08 22:09 - 2017-07-31 19:08 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-08 22:09 - 2017-07-31 19:07 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-08-08 22:09 - 2017-07-31 19:04 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:57 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-08 22:09 - 2017-07-31 18:45 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-08 22:09 - 2017-07-31 18:45 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-08 22:09 - 2017-07-31 18:44 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-08 22:09 - 2017-07-31 18:44 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2017-08-08 22:09 - 2017-07-31 18:44 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-08 22:09 - 2017-07-31 18:42 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-08 22:09 - 2017-07-31 18:41 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 017366528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-08 22:09 - 2017-07-31 18:40 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-08 22:09 - 2017-07-31 18:39 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-08 22:09 - 2017-07-31 18:38 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-08 22:09 - 2017-07-31 18:37 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-08 22:09 - 2017-07-31 18:36 - 023681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-08 22:09 - 2017-07-31 18:35 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-08-08 22:09 - 2017-07-31 18:34 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-08 22:09 - 2017-07-31 18:33 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 007336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-08 22:09 - 2017-07-31 18:32 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 012786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-08 22:09 - 2017-07-31 18:31 - 001396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 008209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 002055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-08 22:09 - 2017-07-31 18:30 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-08 22:09 - 2017-07-31 18:30 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-08 22:09 - 2017-07-31 18:28 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-08-08 22:09 - 2017-07-31 18:27 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-08-08 22:09 - 2017-07-31 18:26 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-08 22:09 - 2017-07-31 18:25 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-08-08 22:09 - 2017-07-31 18:25 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-08 22:09 - 2017-07-31 15:45 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-08 16:27 - 2017-08-08 16:28 - 000000000 ___HD C:\7e1b197988dcf5ad4a9391ddfe6621
2017-08-03 10:27 - 2017-07-27 22:20 - 000279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-03 10:27 - 2017-07-27 21:36 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll
2017-08-03 10:27 - 2017-07-27 21:26 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:21 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2017-08-03 10:27 - 2017-07-27 21:20 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-08-03 10:27 - 2017-07-27 21:08 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-03 10:26 - 2017-07-27 21:40 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-08-03 10:26 - 2017-07-27 21:36 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2017-08-03 10:26 - 2017-07-27 21:33 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-08-03 10:26 - 2017-07-27 21:27 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-03 10:26 - 2017-07-27 21:20 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IpNatHlpClient.dll
2017-08-03 10:26 - 2017-07-27 21:19 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2017-08-03 10:26 - 2017-07-27 21:18 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-08-03 10:26 - 2017-07-27 21:16 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-08-03 10:26 - 2017-07-27 21:14 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2017-08-03 10:26 - 2017-07-27 21:13 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2017-08-03 10:26 - 2017-07-27 21:12 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-08-03 10:26 - 2017-07-27 21:10 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-08-03 10:26 - 2017-07-27 21:08 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-08-03 10:26 - 2017-07-27 21:02 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2017-08-03 10:25 - 2017-07-27 22:23 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-03 10:25 - 2017-07-27 22:15 - 000554400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-03 10:25 - 2017-07-27 22:07 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-08-03 10:25 - 2017-07-27 21:48 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2017-08-03 10:25 - 2017-07-27 21:47 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-08-03 10:25 - 2017-07-27 21:37 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-08-03 10:25 - 2017-07-27 21:36 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-08-03 10:25 - 2017-07-27 21:35 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2017-08-03 10:25 - 2017-07-27 21:33 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-08-03 10:25 - 2017-07-27 21:19 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:25 - 2017-07-27 21:16 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-08-03 10:25 - 2017-07-27 21:15 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:25 - 2017-07-27 21:13 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-08-03 10:25 - 2017-07-27 21:12 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-08-03 10:25 - 2017-07-27 21:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-08-03 10:25 - 2017-07-27 21:10 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll
2017-08-03 10:25 - 2017-07-27 21:09 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-08-03 10:25 - 2017-07-27 21:05 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-08-03 10:24 - 2017-07-27 21:40 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-08-03 10:24 - 2017-07-27 21:38 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-08-03 10:24 - 2017-07-27 21:36 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-08-03 10:24 - 2017-07-27 21:35 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-08-03 10:24 - 2017-07-27 21:33 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-08-03 10:24 - 2017-07-27 21:17 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-08-03 10:24 - 2017-07-27 21:15 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-08-03 10:24 - 2017-07-27 21:14 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-08-03 10:24 - 2017-07-27 21:13 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-08-03 10:24 - 2017-07-27 21:12 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-08-03 10:24 - 2017-07-27 21:11 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-08-03 10:24 - 2017-07-27 21:08 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-08-03 10:24 - 2017-07-27 21:07 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-08-03 10:24 - 2017-07-27 21:05 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-08-03 10:24 - 2017-07-27 21:02 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-08-03 10:23 - 2017-07-27 21:36 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-08-03 10:22 - 2017-07-27 21:24 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-03 10:21 - 2017-07-27 21:21 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-03 10:20 - 2017-07-27 22:10 - 002679200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-03 10:20 - 2017-07-27 21:19 - 000942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-03 10:20 - 2017-07-27 21:19 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-03 10:20 - 2017-07-27 21:16 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-03 10:18 - 2017-07-27 22:09 - 000529992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-03 10:17 - 2017-07-27 22:25 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-03 10:17 - 2017-07-27 21:25 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-03 10:17 - 2017-07-27 21:19 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-03 10:16 - 2017-07-27 22:13 - 002604248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-03 10:16 - 2017-07-27 22:09 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-08-03 10:16 - 2017-07-27 21:21 - 008333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-03 10:16 - 2017-07-27 21:13 - 004535296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-03 10:16 - 2017-07-27 21:12 - 002939392 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000455584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-03 10:14 - 2017-07-27 22:24 - 000116280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-03 10:14 - 2017-07-27 22:17 - 000660680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-03 10:14 - 2017-07-27 22:09 - 000527976 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-03 10:14 - 2017-07-27 21:48 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2017-08-03 10:14 - 2017-07-27 21:22 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-03 10:14 - 2017-07-27 21:19 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-03 10:14 - 2017-07-27 21:18 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-03 10:14 - 2017-07-27 21:07 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-03 10:13 - 2017-07-27 22:24 - 002327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-03 10:13 - 2017-07-27 22:13 - 001033544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-03 10:13 - 2017-07-27 21:21 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-03 10:13 - 2017-07-27 21:19 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-03 10:13 - 2017-07-27 21:07 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-03 10:13 - 2017-07-27 21:07 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-03 10:12 - 2017-07-27 22:23 - 002969888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-03 10:12 - 2017-07-27 22:16 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-03 10:12 - 2017-07-27 22:15 - 005302968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-03 10:12 - 2017-07-27 22:14 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-03 10:12 - 2017-07-27 22:12 - 001325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-03 10:12 - 2017-07-27 21:26 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-03 10:12 - 2017-07-27 21:24 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-03 10:12 - 2017-07-27 21:14 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-03 10:12 - 2017-07-27 21:12 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-03 10:12 - 2017-07-27 21:06 - 001833984 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-03 10:10 - 2017-07-27 22:24 - 000119904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-03 10:10 - 2017-07-27 22:22 - 000923048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000192264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-03 10:10 - 2017-07-27 22:13 - 000104432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-03 10:10 - 2017-07-27 22:12 - 021353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-03 10:10 - 2017-07-27 21:29 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-03 10:10 - 2017-07-27 21:26 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-03 10:10 - 2017-07-27 21:24 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-08-03 10:10 - 2017-07-27 21:24 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-08-03 10:10 - 2017-07-27 21:21 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-03 10:10 - 2017-07-27 21:19 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-03 10:10 - 2017-07-27 21:15 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-03 10:10 - 2017-07-27 21:08 - 000600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-03 10:09 - 2017-07-27 22:12 - 000323936 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-03 10:09 - 2017-07-27 21:25 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-03 10:09 - 2017-07-27 21:24 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-03 10:09 - 2017-07-27 21:23 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-03 10:09 - 2017-07-27 21:22 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-03 10:09 - 2017-07-27 21:21 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-03 10:09 - 2017-07-27 21:19 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-03 10:09 - 2017-07-27 21:17 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-03 10:09 - 2017-07-27 21:16 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-03 10:09 - 2017-07-27 21:14 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-03 10:09 - 2017-07-27 21:13 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-03 10:09 - 2017-07-27 21:12 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-03 10:09 - 2017-07-27 21:06 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-03 10:09 - 2017-07-27 21:05 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-03 10:08 - 2017-07-27 22:30 - 001068720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-03 10:08 - 2017-07-27 22:14 - 000318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-03 10:08 - 2017-07-27 22:10 - 001114528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-03 10:08 - 2017-07-27 21:31 - 003995136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:29 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2017-08-03 10:08 - 2017-07-27 21:25 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-03 10:08 - 2017-07-27 21:23 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-03 10:08 - 2017-07-27 21:22 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-03 10:08 - 2017-07-27 21:22 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-03 10:08 - 2017-07-27 21:21 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-03 10:08 - 2017-07-27 21:20 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001298432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-03 10:08 - 2017-07-27 21:18 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-03 10:08 - 2017-07-27 21:18 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-03 10:08 - 2017-07-27 21:17 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-03 10:08 - 2017-07-27 21:15 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-03 10:08 - 2017-07-27 21:10 - 001706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-03 10:07 - 2017-07-27 22:16 - 000961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-03 10:07 - 2017-07-27 22:15 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-03 10:07 - 2017-07-27 22:13 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-03 10:07 - 2017-07-27 22:13 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-03 10:07 - 2017-07-27 22:12 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-03 10:07 - 2017-07-27 21:30 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-08-03 10:07 - 2017-07-27 21:26 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-03 10:07 - 2017-07-27 21:22 - 000778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-03 10:07 - 2017-07-27 21:20 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-03 10:07 - 2017-07-27 21:19 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-03 10:07 - 2017-07-27 21:18 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-03 10:07 - 2017-07-27 21:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-03 10:07 - 2017-07-27 21:15 - 003204608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-03 10:07 - 2017-07-27 21:13 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-03 10:07 - 2017-07-27 21:12 - 002444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-03 10:07 - 2017-07-27 21:11 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-03 10:07 - 2017-07-27 21:10 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-03 10:07 - 2017-07-27 21:09 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-03 10:07 - 2017-07-27 21:09 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-03 10:07 - 2017-07-27 21:06 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-03 10:07 - 2017-07-27 21:05 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-03 10:07 - 2017-07-27 21:05 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-03 10:06 - 2017-07-27 21:23 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 003867040 _____ C:\WINDOWS\system32\PortChanger.exe
2017-08-02 02:45 - 2012-09-25 00:52 - 002398112 _____ (Hewlett Packard) C:\WINDOWS\system32\hppldcoi.dll
2017-08-02 02:45 - 2012-09-25 00:52 - 000151968 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\Dot4.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000049056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4usb.sys
2017-08-02 02:45 - 2012-09-25 00:52 - 000019872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4Scan.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 009891328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2017-08-02 02:29 - 2017-08-02 02:29 - 004332032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtCRU64.exe
2017-08-02 02:29 - 2017-08-02 02:29 - 000420832 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsUer.sys
2017-08-02 02:29 - 2017-08-02 02:29 - 000084480 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll
2017-08-02 02:20 - 2017-08-02 02:20 - 000831685 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2017-08-02 02:16 - 2017-08-02 02:16 - 005799386 _____ C:\WINDOWS\system32\igdclbif.bin
2017-08-02 02:16 - 2017-08-02 02:16 - 000225280 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2017-08-02 02:15 - 2017-08-02 02:16 - 003972096 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 019861504 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 005688832 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 004368896 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000388608 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000318464 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2017-08-02 02:15 - 2017-08-02 02:15 - 000266232 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2017-08-02 02:14 - 2017-08-02 02:15 - 029101560 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 004934144 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 002393160 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 001858632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000439288 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000416256 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000103936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2017-08-02 02:14 - 2017-08-02 02:14 - 000099840 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2017-08-02 02:13 - 2017-08-02 02:14 - 015488920 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll
2017-08-02 02:13 - 2017-08-02 02:13 - 013483192 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 013655032 _____ (Intel Corporation) C:\WINDOWS\system32\ig8icd64.dll
2017-08-02 02:12 - 2017-08-02 02:12 - 010329088 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig8icd32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 005262848 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 002142208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 001009664 _____ C:\WINDOWS\system32\igfxSDK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000950784 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000947200 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000756224 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000705024 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000641530 _____ C:\WINDOWS\system32\FilmModeDetection.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000449536 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000403671 _____ C:\WINDOWS\system32\ImageStabilization.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000398848 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000390144 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000384512 _____ C:\WINDOWS\system32\igfxTray.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000375173 _____ C:\WINDOWS\system32\ColorImageEnhancement.wmv
2017-08-02 02:11 - 2017-08-02 02:11 - 000356352 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000337408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000273408 _____ C:\WINDOWS\system32\igfxCPL.cpl
2017-08-02 02:11 - 2017-08-02 02:11 - 000254976 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000251392 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000219648 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000215040 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000214528 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2017-08-02 02:11 - 2017-08-02 02:11 - 000111616 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000103416 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000100864 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000095232 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000084992 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000055240 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000052736 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000029184 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000027648 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000022528 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\Gfxv4_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000935 _____ C:\WINDOWS\system32\DPTopologyApp.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\Gfxv2_0.exe.config
2017-08-02 02:11 - 2017-08-02 02:11 - 000000895 _____ C:\WINDOWS\system32\DPTopologyAppv2_0.exe.config
2017-08-02 02:10 - 2017-08-02 02:11 - 000220160 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4624.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 006696824 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 005137296 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 002813952 _____ C:\WINDOWS\system32\iglhxa64.cpa
2017-08-02 02:10 - 2017-08-02 02:10 - 001816712 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001814056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001590784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 001178624 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000511260 _____ C:\WINDOWS\system32\cp_resources.bin
2017-08-02 02:10 - 2017-08-02 02:10 - 000431104 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000284160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000242152 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000223240 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000205344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000193016 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000183968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000182944 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000181832 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000173568 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160264 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000160256 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2017-08-02 02:10 - 2017-08-02 02:10 - 000157696 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2017-08-02 02:10 - 2017-08-02 02:10 - 000041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040343 _____ C:\WINDOWS\system32\iglhxo64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000040316 _____ C:\WINDOWS\system32\iglhxc64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000039658 _____ C:\WINDOWS\system32\iglhxg64.vp
2017-08-02 02:10 - 2017-08-02 02:10 - 000001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2017-08-02 02:09 - 2017-08-02 02:10 - 039864472 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2017-08-02 02:08 - 2017-08-02 02:09 - 038903384 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2017-08-02 02:07 - 2017-08-02 02:08 - 033479864 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004270672 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 004240208 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll
2017-08-02 02:07 - 2017-08-02 02:07 - 000312296 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll
2017-08-02 02:06 - 2017-08-02 02:07 - 016457272 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2017-08-02 02:05 - 2017-08-02 02:06 - 034823448 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 013070648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000297152 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll
2017-08-02 02:05 - 2017-08-02 02:05 - 000005412 _____ C:\WINDOWS\system32\iglhxs64lp.vp
2017-08-02 02:04 - 2017-08-02 02:05 - 007407080 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64lp.sys
2017-08-02 02:00 - 2017-08-02 02:00 - 000877424 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000866640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2017-08-02 02:00 - 2017-08-02 02:00 - 000737960 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll
2017-08-02 01:59 - 2017-08-02 02:00 - 001016928 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003410832 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 003122656 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 001435136 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000984912 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000868176 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000691680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000526280 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000467152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000381408 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2017-08-02 01:59 - 2017-08-02 01:59 - 000258856 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2017-08-02 01:57 - 2017-08-02 01:59 - 072520704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2017-08-02 01:57 - 2017-08-02 01:57 - 012951320 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2017-08-02 01:56 - 2017-08-02 01:56 - 003516984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003509200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 003205120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 002210784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 001347136 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000532376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000387312 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000192976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000166200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000088344 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2017-08-02 01:56 - 2017-08-02 01:56 - 000023688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2017-08-02 01:55 - 2017-08-02 01:55 - 005874144 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2017-08-02 01:55 - 2017-08-02 01:55 - 003677152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2017-08-02 01:55 - 2017-08-02 01:55 - 000122312 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2017-07-18 16:18 - 2017-07-18 16:19 - 000000000 ____D C:\Users\eddie\OpenVPN
2017-07-17 10:30 - 2017-07-17 10:30 - 000863744 _____ (Farbar) C:\WINDOWS\mod_frst.exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-16 22:21 - 2017-04-11 16:55 - 000000000 ___RD C:\Users\eddie\OneDrive
2017-08-16 22:20 - 2017-04-11 20:03 - 000000000 __SHD C:\Users\eddie\IntelGraphicsProfiles
2017-08-14 02:25 - 2017-04-11 20:15 - 000000000 __RDX C:\Users\eddie\OneDrive\Documents\Extra
2017-08-14 01:23 - 2017-04-11 20:16 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-14 00:25 - 2017-03-18 13:57 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2017-08-14 00:24 - 2017-04-11 16:51 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-14 00:24 - 2017-03-18 13:57 - 000430848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-08-14 00:20 - 2017-04-13 18:30 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-08-08 23:44 - 2017-06-26 14:45 - 000000779 _____ C:\Users\eddie\Desktop\SSF2.lnk
2017-07-18 13:30 - 2017-06-26 15:39 - 000000000 ____D C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-08-13 23:57
==================== End of FRST.txt ============================
Addition
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-08-2017
Ran by eddie (16-08-2017 22:29:49)
Running from C:\Users\eddie\Desktop
Windows 10 Pro Version 1703 (X64) (2017-08-14 07:23:51)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2896426177-3843145535-1853849027-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2896426177-3843145535-1853849027-503 - Limited - Disabled)
eddie (S-1-5-21-2896426177-3843145535-1853849027-1001 - Administrator - Enabled) => C:\Users\eddie
Guest (S-1-5-21-2896426177-3843145535-1853849027-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: COMODO Antivirus (Enabled - Up to date) {0C515E80-E355-69BD-3445-A511E5C186FD}
AS: COMODO Advanced Protection (Enabled - Up to date) {B730BF64-C56F-6633-0EF5-9E639E46CC40}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: COMODO Firewall (Enabled) {346ADFA5-A93A-68E5-1F1A-0C241B12C186}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform)
Classic Shell (HKLM\...\{CABCE573-0A86-42FA-A52A-C7EA61D5BE08}) (Version: 4.3.1 - IvoSoft)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 58.0.3029.113 - Comodo)
COMODO Internet Security Premium (HKLM\...\{8E048D96-59B5-4BD8-A5D0-8FFCFC161A5A}) (Version: 10.0.1.6258 - COMODO Security Solutions Inc.) Hidden
COMODO Internet Security Premium (HKLM\...\COMODO Internet Security) (Version: 10.0.1.6258 - COMODO Security Solutions Inc.)
COMODO Secure Shopping (HKLM-x32\...\{D15DF9B0-3A98-4BEF-B7D5-FC3AEA421657}) (Version: 1.1.99.0 - COMODO) Hidden
COMODO Secure Shopping (HKLM-x32\...\Comodo Secure_Shopping_list_uninstall) (Version: 1.1.421657.99 - Comodo)
DriverUpdate (HKLM\...\{C2A1552C-0027-4E26-9E81-78CD02DEB71F}) (Version: 4.1.2 - Slimware Utilities Holdings, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.101 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Internet Security Essentials (HKLM-x32\...\ComodoIse) (Version: 1.2.422025.92 - Comodo)
Java 8 Update 144 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Microsoft OneDrive (HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\OneDriveSetup.exe) (Version: 17.3.6963.0807 - Microsoft Corporation)
Mozilla Firefox 56.0 (x64 en-US) (HKLM\...\Mozilla Firefox 56.0 (x64 en-US)) (Version: 56.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0 - Mozilla)
OpenVPN 2.4.3-I602 (HKLM\...\OpenVPN) (Version: 2.4.3-I602 - OpenVPN Technologies, Inc.)
pCloud Drive (HKLM-x32\...\{5824F8F8-E59E-42CB-98FA-B1F329A58BB9}) (Version: 3.5.7 - pCloud AG) Hidden
pCloud Drive (HKLM-x32\...\{d8e9b125-0436-4a92-94b8-0097dbf23a3d}) (Version: 3.5.7.0 - pCloud AG)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.31235 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.13.1223.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8216 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.9 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.9 - VS Revo Group, Ltd.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.6 - Synaptics Incorporated)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
UltraUXThemePatcher (HKLM-x32\...\UltraUXThemePatcher) (Version: 3.2.0.0 - Manuel Hoefs (Zottel))
Unity Web Player (HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Windows Desktop Gadgets (HKLM\...\Windows Desktop Gadgets_is1) (Version: 2.0 - hxxp://gadgetsrevived.com)
WinRAR 5.50 beta 6 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.6 - win.rar GmbH)
Wise Force Deleter 1.4.6 (HKLM-x32\...\Wise Force Deleter_is1) (Version: 1.4.6 - WiseCleaner.com, Inc.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ pCloudINPROGRESS] -> {D8BFAFBD-B670-4252-9C17-9CF1C64C2BAF} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [ pCloudINSYNC] -> {8D0C0582-552A-4A6B-9455-DA63E1F329C0} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [ pCloudNOSYNC] -> {3858ED1B-8F1C-42ED-A8A9-FDBF591E3C6B} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2016-11-17] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs6] -> {AB8F5A1D-F87B-4E34-9D77-65D2615BEB3A} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-09] (/n software, Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs6] -> {AB8F5A1D-F87B-4E34-9D77-65D2615BEB3A} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-09] (/n software, Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft)
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> No File
ContextMenuHandlers1: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers1: [ContextMenuExtension] -> {a0b73fac-351f-3948-9d8a-1dad9d870193} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> No File
ContextMenuHandlers2: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers2: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers3: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> No File
ContextMenuHandlers4: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} => C:\Program Files (x86)\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll [2017-07-27] (Auslogics)
ContextMenuHandlers4: [ContextMenuExtension] -> {a0b73fac-351f-3948-9d8a-1dad9d870193} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-08-02] (Intel Corporation)
ContextMenuHandlers6: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2017-07-11] (COMODO)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2016-12-15] (VS Revo Group)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\system32\StartMenuHelper64.dll [2017-08-13] (IvoSoft)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-02] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-02] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0B959917-3528-44FA-A618-DD66F24691D5} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {2529B177-0509-4702-BA49-FF1D8C59A7DC} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {7B0F3311-DDDF-4F52-9C4B-7310D1F63587} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {7BB95E82-52B7-432E-AD5F-CEEA54A2B32F} - System32\Tasks\Auslogics\Disk Defrag\Start Disk Defrag On eddie Logon => C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe [2017-07-27] (Auslogics)
Task: {8E812564-8E75-4BF8-A3F2-4AF73053B39F} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {90E61B0B-4158-42F4-84A3-FA8401A03CEC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-14] (Google Inc.)
Task: {9686D31E-04B5-4290-B6BA-28F14BC714DE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {9E7F93F7-887A-4FF5-A842-0D33D45729AC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-14] (Google Inc.)
Task: {A24BA1E2-81E7-4CDC-9AE1-FA20784F9388} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2896426177-3843145535-1853849027-1001
Task: {B09219E1-52F8-4B5B-A864-94C93E4E341D} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2017-07-11] (COMODO)
Task: {B73AF37E-9221-4E5F-8FD2-470DE8020F2A} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-07-11] (COMODO)
Task: {D781C52C-6FC0-4FDA-8180-0F8BEFE6681C} - System32\Tasks\CCleanerClean => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {D955C4AD-0427-4EB9-BF2B-D0B59756D047} - System32\Tasks\Auslogics\Disk Defrag\Scheduled Defragmentation => rundll32.exe TaskSchedulerHelper.dll,RunTask "DiskDefrag.exe" "/UseTray /Scheduler"
Task: {E8DAA569-AFB7-40EF-9C40-71FFAD4BA1DD} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerClean.job => C:\Program Files\CCleaner\CCleaner.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\eddie\Desktop\PC Help Forum.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=illdlgkhakmollnophmajedfblhpijak
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Chrome Remote Desktop.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\File System for OneDrive.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=jbfdfcehgafdbfpniaimfbfomafoadgo
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Hangouts.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=knipolnnllmklapflnccelgolnpehhpl
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\System.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=ocjnemjmlhjkeilmaidemofakmpclcbi
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Wake Up!.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=lbbcfplbfbmimpnlammmeaheakhcogke
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\WeatherBug.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=njkkjobcechefaoknodniidfjapgfoco
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gmail.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=pjkljhegncpnkpknbcohdijeoejaedia
ShortcutWithArgument: C:\Users\eddie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Web Store.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=ahfgeienlihckogmohjhadlkjgocpleb
==================== Loaded Modules (Whitelisted) ==============
2017-07-11 12:42 - 2017-07-11 12:42 - 000156352 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdwrhlp.dll
2017-07-11 12:40 - 2017-07-11 12:40 - 000107200 _____ () C:\Program Files\COMODO\COMODO Internet Security\cavwpps.dll
2017-07-11 12:41 - 2017-07-11 12:41 - 000244928 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdcomps.dll
2017-08-16 00:27 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2016-03-16 11:25 - 2016-03-16 11:25 - 000073912 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2017-03-18 13:58 - 2017-03-18 13:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-08-02 02:11 - 2017-08-02 02:11 - 000384512 _____ () C:\WINDOWS\system32\igfxTray.exe
2017-03-18 13:59 - 2017-03-18 19:31 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-07-14 06:26 - 2017-07-14 06:26 - 000638592 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe
2017-08-14 14:41 - 2017-08-11 00:40 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.101\libglesv2.dll
2017-08-14 14:41 - 2017-08-11 00:40 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.101\libegl.dll
2017-08-14 02:16 - 2017-08-14 02:16 - 000054488 _____ () C:\Program Files\CCleaner\branding.dll
2017-06-16 11:33 - 2017-06-16 11:33 - 001763328 _____ () C:\Program Files (x86)\pCloud Drive\pSyncLib.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\str => ""="service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2017-08-15 01:30 - 2017-08-15 16:41 - 000001359 _____ C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 keystone.mwbsys.com
0.0.0.0 telemetry.malwarebytes.com
91.209.196.83 download.comodo.com
91.209.196.83 www.download.comodo.com
127.0.0.1 idb.iobit.com
127.0.0.1 asc55.iobit.com
127.0.0.1 is360.iobit.com
127.0.0.1 www.asc55.iobit.com
127.0.0.1 asc.iobit.com
127.0.0.1 pf.iobit.com
127.0.0.1 98.129.229.186
0.0.0.0 keystone.mwbsys.com
0.0.0.0 telemetry.malwarebytes.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2896426177-3843145535-1853849027-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.254.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is disabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\...\StartupApproved\Run: => "SecurityHealth"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{FCFE65AB-2442-4A73-B8FF-8B12810382E6}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{42BC09F9-68F9-49B5-86A6-54FA904E5B9D}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{6818C011-599B-437F-BFEA-0DFD8D69923F}C:\program files (x86)\pcloud drive\pcloud.exe] => (Allow) C:\program files (x86)\pcloud drive\pcloud.exe
FirewallRules: [UDP Query User{71C348A0-5C57-4F71-B870-DB5012115947}C:\program files (x86)\pcloud drive\pcloud.exe] => (Allow) C:\program files (x86)\pcloud drive\pcloud.exe
==================== Restore Points =========================
14-08-2017 02:50:40 Installed Classic Shell
15-08-2017 00:32:17 System Checkpoint
15-08-2017 03:35:37 System Checkpoint
16-08-2017 02:22:18 System Checkpoint
16-08-2017 21:15:17 JRT Pre-Junkware Removal
==================== Faulty Device Manager Devices =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/16/2017 10:27:21 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.
Context: Windows Application, SystemIndex Catalog
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
Error: (08/16/2017 10:27:14 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: The search service has detected corrupted data files in the index {id=3800}. The service will attempt to automatically correct this problem by rebuilding the index.
Context: Windows Application, SystemIndex Catalog
Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
System errors:
=============
Error: (08/16/2017 10:24:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Windows Defender Antivirus Service service failed to start due to the following error:
Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
CodeIntegrity:
===================================
Date: 2017-08-16 22:29:44.395
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 22:29:44.376
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 22:29:44.006
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 22:29:43.929
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 22:24:16.063
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 22:24:04.618
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\cssguard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-08-16 22:19:40.220
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 22:19:39.919
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-16 22:19:37.165
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2017-08-16 22:19:36.737
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU N3700 @ 1.60GHz
Percentage of memory in use: 79%
Total physical RAM: 3938.3 MB
Available physical RAM: 809.9 MB
Total Virtual: 5346.3 MB
Available Virtual: 1732.47 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:447.82 GB) (Free:389.78 GB) NTFS
Drive d: (Recovery Warranty) (Fixed) (Total:4.88 GB) (Free:1.52 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (UNTITLED) (Removable) (Total:119.08 GB) (Free:95.78 GB) exFAT
Drive p: (pCloud Drive) (Removable) (Total:500 GB) (Free:461.81 GB) exFAT
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: F3CF06FA)
Partition: GPT.
========================================================
Disk: 1 (Size: 119.1 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt ============================
ZHP Diag Scan
Download ZHP Diag to your desktop.
1. Right Click Run as Admin.
2. Click the Options button.
Click on Check All
Then Click Validate
Then click close.
2. Click the Scanner button.
When complete please push the report button.
A notepad will open... copy and paste the report in your next reply.
Also you have a crap ton of extensions. Do you use all of them?
Download ZHP Diag to your desktop.
1. Right Click Run as Admin.
2. Click the Options button.
Click on Check All
Then Click Validate
Then click close.
2. Click the Scanner button.
When complete please push the report button.
A notepad will open... copy and paste the report in your next reply.
Also you have a crap ton of extensions. Do you use all of them?
- Status