Slumdog Posted August 20, 2015 Posted August 20, 2015 Hi guys, I am using an Acer Aspire V5, instead of my normal laptop and I have run out of patience with it. It is the slowest thing I have ever used, even slower than when I was on dial-up. I am constantly getting messages such as "not responding due to a long running script", "program has stopped working, refresh". And now I am getting a green screen when trying to watch videos. Sometimes it is totally green, other times it has vertical lines running down it. Sometimes there is commentary, sometimes not, sometimes broken commentary. I am clearing browsing history multiple times a day as well as re-starting it. This used to temporarily fix the viewing problem but even that doesn't help anymore. Appreciate any help to get this back to laptop that actually works competently. Quote
ExTS Admin Starbuck Posted August 20, 2015 ExTS Admin Posted August 20, 2015 Hi Slumdog, I am getting a green screen when trying to watch videos. Sometimes it is totally green, other times it has vertical lines running down it. Could be due to a video card problem. The slowness obviously won't though. We can look into that; Note: There are both 32-bit and 64-bit versions of Farbar Recovery Scan Tool available. Please pick the version that matches your operating system's bit type. If you are unsure what you're system bit type is..... click Here for help. For x32 bit systems download Farbar Recovery Scan Tool and save it to your Desktop. For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to your Desktop. Double-click the downloaded icon to run the tool. Vista/Windows 7/8 users right-click and select Run As Administrator http://img.photobucket.com/albums/v708/starbuck50/frsticon_zpsdc3cbdc3.png When the tool opens click Yes to disclaimer. http://img.photobucket.com/albums/v708/starbuck50/frstdis_zps7f598f12.png Make sure that Addition.txt is selected at the bottom Press Scan button. http://img.photobucket.com/albums/v708/starbuck50/newfrst_zpsa63ffa3d.png It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it also makes another log (Addition.txt). Please copy and paste it to your reply also. This may not be malware related, it could just be down to the system needing a good clean. So post the FRST reports here and I can always move the thread if need be. Thanks. Quote Member of:UNITE
Slumdog Posted August 20, 2015 Author Posted August 20, 2015 Thanks Starbuck, I'll have to do it in two posts, it won't all fit. An example of how slow it is, is that when I run MBAM, it used to take less than 15mins, now it takes over an hour. Here's the report anyway........... Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:21-08-2015 Ran by Gary (administrator) on LAPTOP (21-08-2015 00:16:29) Running from C:\Users\Gary\Desktop Loaded Profiles: Gary (Available Profiles: Gary & fbwuser78A8 & fbwuser6386 & fbwuser2355) Platform: Windows 10 Home (X64) Language: English (United Kingdom) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Dritek System INC.) C:\Windows\RfBtnSvc64.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe (Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe (Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe (Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe () C:\Program Files (x86)\Google\Update\Install\{7D1B85A8-3E3C-46C9-8857-8601E7636583}\44.0.2403.157_44.0.2403.155_chrome_updater.exe (Google Inc.) C:\Windows\Temp\CR_DF915.tmp\setup.exe (Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3233976 2015-08-06] (ELAN Microelectronics Corp.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor) HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-15] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373592 2012-09-26] (Alcor Micro Corp.) HKLM-x32\...\Run: [DataCardMonitor] => C:\Program Files (x86)\SWARAJ HSDPA MODEM\drv\DataCardMonitor.exe [345088 2011-03-07] (TODO: <Company name>) HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3780520 2015-07-31] (AVG Technologies CZ, s.r.o.) HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation) HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation) HKU\S-1-5-21-3562101447-2940579550-2573863169-1001\...\Run: [Facebook Update] => C:\Users\Gary\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-01-29] (Facebook Inc.) HKU\S-1-5-21-3562101447-2940579550-2573863169-1001\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-10-02] (Nokia) HKU\S-1-5-21-3562101447-2940579550-2573863169-1001\...\Run: [HP Deskjet 3050A J611 series (NET)] => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk [2013-02-01] ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-3562101447-2940579550-2573863169-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm HKU\S-1-5-21-3562101447-2940579550-2573863169-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-in/?ocid=iehp HKU\S-1-5-21-3562101447-2940579550-2573863169-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:Blank SearchScopes: HKU\.DEFAULT -> DefaultScope {1323751E-0E23-4DC5-9FB9-0214B143E719} URL = SearchScopes: HKU\.DEFAULT -> {1323751E-0E23-4DC5-9FB9-0214B143E719} URL = SearchScopes: HKU\S-1-5-21-3562101447-2940579550-2573863169-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={23BA4904-E323-4C90-9833-BF5860F4A528}&mid=86949c2c76e847d2a1ead5343d3b094e-8ef8b61af5b4fbb7678a476b28e2568301b69fdc&lang=en&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-11-05 01:09:25&v=4.0.0.19&pid=wtu&sg=&sap=dsp&q={searchTerms} Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{bb4e5f2d-a4ec-48ef-8fc9-bb8d119fc41e}: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\wvym9axy.default FF DefaultSearchEngine: Google FF SelectedSearchEngine: Google FF Homepage: about:home FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-10-02] ( ) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.) FF Plugin HKU\S-1-5-21-3562101447-2940579550-2573863169-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Gary\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited) FF SearchPlugin: C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\wvym9axy.default\searchplugins\avg-secure-search.xml [2014-11-05] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2014-11-05] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: No Name - C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\wvym9axy.default\extensions\avg@toolbar [not found] Chrome: ======= CHR Profile: C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-05] CHR Extension: (Facebook for Desktop) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\beigfmnnhaciohpncoecphcmekklgffh [2013-10-05] CHR Extension: (YouTube) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-05] CHR Extension: (Google Search) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-05] CHR Extension: (PartyCloud DJ Mixer) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\defekohaofmambflfpfoojkmfdpcbgko [2013-10-05] CHR Extension: (365Scores) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\gocaejggjgdmkhmbinicknpbhagkblop [2013-10-05] CHR Extension: (Avast Online Security) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-10-05] CHR Extension: (TweetDeck by Twitter) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2013-10-05] CHR Extension: (InstaTwit) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhalcamddihdpdgdjkjbgikgobnbbpif [2013-10-05] CHR Extension: (Until AM Web App) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\kodigjkcpaoeodlnmcnekemakpnmegnk [2013-10-05] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14] CHR Extension: (Party List Dj (playlist music player)) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnbjmlkceipalmoohcalibhlonbbllli [2013-10-05] CHR Extension: (WGT Golf Game) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpedbpkelbhcbkdaglillalioeeekbpb [2013-10-05] CHR Extension: (Chrome Web Store Payments) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-05] CHR Extension: (UserZoom Survey Tool) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\npeidojcmghjibnbnmjloedchcgdkbeo [2015-04-01] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-15] (Advanced Micro Devices, Inc.) [File not signed] R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3633576 2015-07-31] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [335656 2015-07-31] (AVG Technologies CZ, s.r.o.) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation) R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2449552 2012-10-25] (Acer Incorporated) S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation) R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [808856 2015-08-06] (Microsoft Corporation) R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [510976 2015-08-06] (Microsoft Corporation) S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated) S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation) S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-07-10] (Microsoft Corporation) S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation) S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation) S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation) R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658064 2012-10-23] (Acer Incorporated) R2 ETDService; C:\Program Files\Elantech\ETDService.exe [135352 2015-08-06] (ELAN Microelectronics Corp.) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [24888 2015-07-26] (Hewlett-Packard Company) S3 icssvc; C:\Windows\System32\tetheringservice.dll [148992 2015-08-06] (Microsoft Corporation) R3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation) R3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation) S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-11-03] (NTI Corporation) S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [296960 2015-07-10] (Microsoft Corporation) R2 OneSyncSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation) R2 OneSyncSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation) S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [289280 2015-07-10] (Microsoft Corporation) R3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation) R3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation) S3 RetailDemo; C:\Windows\system32\RDXService.dll [988672 2015-08-03] (Microsoft Corporation) R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2013-03-28] (Dritek System INC.) S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-08-06] (Microsoft Corporation) R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2674176 2015-07-10] (Microsoft Corporation) R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049024 2015-07-10] (Microsoft Corporation) S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1203200 2015-08-06] (Microsoft Corporation) S3 UnistoreSvc; C:\Windows\SysWOW64\unistore.dll [925696 2015-08-06] (Microsoft Corporation) R3 UnistoreSvc_Session1; C:\WINDOWS\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation) R3 UnistoreSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation) S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1420288 2015-07-30] (Microsoft Corporation) R3 UserDataSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation) R3 UserDataSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation) S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation) S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation) S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation) S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S5 3ware; C:\Windows\System32\drivers\3ware.sys [107360 2015-07-10] (LSI) R5 ACPI; C:\Windows\System32\drivers\ACPI.sys [565088 2015-08-06] (Microsoft Corporation) R5 acpiex; C:\Windows\System32\Drivers\acpiex.sys [127840 2015-07-10] (Microsoft Corporation) S5 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [1135456 2015-07-10] (PMC-Sierra) S5 agp440; C:\Windows\System32\drivers\agp440.sys [63328 2015-07-10] (Microsoft Corporation) S5 amdsata; C:\Windows\System32\drivers\amdsata.sys [83296 2015-07-10] (Advanced Micro Devices) S5 amdsbs; C:\Windows\System32\drivers\amdsbs.sys [259424 2015-07-10] (AMD Technologies Inc.) S5 amdxata; C:\Windows\System32\drivers\amdxata.sys [26976 2015-07-10] (Advanced Micro Devices) S5 arcsas; C:\Windows\System32\drivers\arcsas.sys [131936 2015-07-10] (PMC-Sierra, Inc.) S5 atapi; C:\Windows\System32\drivers\atapi.sys [28512 2015-07-10] (Microsoft Corporation) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Advanced Micro Devices) S5 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21152 2015-03-27] (AVG Technologies CZ, s.r.o.) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [312752 2015-07-28] (AVG Technologies CZ, s.r.o.) R5 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [253408 2015-05-12] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [259040 2015-06-16] (AVG Technologies CZ, s.r.o.) R5 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.) R5 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [245680 2015-07-28] (AVG Technologies CZ, s.r.o.) R5 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.) R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [296896 2015-07-10] (AVG Technologies CZ, s.r.o.) S5 b06bdrv; C:\Windows\System32\drivers\bxvbda.sys [531296 2015-07-10] (Broadcom Corporation) R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7593176 2015-07-10] (Broadcom Corporation) S3 BMserDiag; C:\Windows\system32\DRIVERS\BMserDiag.sys [118144 2008-10-21] (TCT International Mobile Ltd) S3 BMserNmea; C:\Windows\system32\DRIVERS\BMserNmea.sys [118144 2008-10-21] (TCT International Mobile Ltd) S3 BMserVousb; C:\Windows\system32\DRIVERS\BMserVousb.sys [118144 2008-10-21] (TCT International Mobile Ltd) S3 BMusbmdm; C:\Windows\system32\DRIVERS\BMusbmdm.sys [118144 2008-10-21] (TCT International Mobile Ltd) R5 CLFS; C:\Windows\System32\drivers\CLFS.sys [380768 2015-07-10] (Microsoft Corporation) R5 CNG; C:\Windows\System32\Drivers\cng.sys [601344 2015-08-06] (Microsoft Corporation) R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation) R5 disk; C:\Windows\System32\drivers\disk.sys [101216 2015-07-10] (Microsoft Corporation) S5 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation) R5 EhStorClass; C:\Windows\System32\drivers\EhStorClass.sys [88928 2015-07-10] (Microsoft Corporation) S5 EhStorTcgDrv; C:\Windows\System32\drivers\EhStorTcgDrv.sys [116576 2015-07-10] (Microsoft Corporation) R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation) R5 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [83808 2015-07-10] (Microsoft Corporation) R5 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [368992 2015-07-10] (Microsoft Corporation) U5 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [31072 2015-07-10] (Microsoft Corporation) R5 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [633184 2015-07-10] (Microsoft Corporation) S5 gagp30kx; C:\Windows\System32\drivers\gagp30kx.sys [66912 2015-07-10] (Microsoft Corporation) S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation) R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation) S5 HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [64352 2015-07-10] (Hewlett-Packard Company) S1 HssDRV6; C:\Windows\system32\DRIVERS\hssdrv6.sys [44744 2014-05-17] (AnchorFree Inc.) S5 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [29024 2015-07-10] (Microsoft Corporation) S5 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [673120 2015-07-10] (Intel Corporation) S5 iaStorV; C:\Windows\System32\drivers\iaStorV.sys [412000 2015-07-10] (Intel Corporation) S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox) S5 intelide; C:\Windows\System32\drivers\intelide.sys [19296 2015-07-10] (Microsoft Corporation) S5 intelpep; C:\Windows\System32\drivers\intelpep.sys [43872 2015-07-10] (Microsoft Corporation) S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation) S5 isapnp; C:\Windows\System32\drivers\isapnp.sys [22368 2015-07-10] (Microsoft Corporation) R5 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [131424 2015-07-10] (Microsoft Corporation) R5 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [158560 2015-07-10] (Microsoft Corporation) S5 LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [108896 2015-07-10] (LSI Corporation) S5 LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [104800 2015-07-10] (LSI Corporation) S5 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies) S5 LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [82784 2015-07-10] (LSI Corporation) S5 megasas; C:\Windows\System32\drivers\megasas.sys [59744 2015-07-10] (Avago Technologies) S5 megasr; C:\Windows\System32\drivers\megasr.sys [575840 2015-07-10] (LSI Corporation, Inc.) S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox) R5 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [102752 2015-08-04] (Microsoft Corporation) R5 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [19296 2015-07-10] (Microsoft Corporation) R5 Mup; C:\Windows\System32\Drivers\mup.sys [118624 2015-07-10] (Microsoft Corporation) S5 mvumis; C:\Windows\System32\drivers\mvumis.sys [63840 2015-07-10] (Marvell Semiconductor, Inc.) S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox) R5 NDIS; C:\Windows\System32\drivers\ndis.sys [1168736 2015-08-06] (Microsoft Corporation) S5 nvraid; C:\Windows\System32\drivers\nvraid.sys [150368 2015-07-10] (NVIDIA Corporation) S5 nvstor; C:\Windows\System32\drivers\nvstor.sys [166240 2015-07-10] (NVIDIA Corporation) S5 nv_agp; C:\Windows\System32\drivers\nv_agp.sys [126304 2015-07-10] (Microsoft Corporation) R5 partmgr; C:\Windows\System32\drivers\partmgr.sys [117088 2015-07-10] (Microsoft Corporation) R5 pci; C:\Windows\System32\drivers\pci.sys [325984 2015-08-06] (Microsoft Corporation) S5 pciide; C:\Windows\System32\drivers\pciide.sys [15712 2015-07-10] (Microsoft Corporation) S5 pcmcia; C:\Windows\System32\drivers\pcmcia.sys [118112 2015-07-10] (Microsoft Corporation) R5 pcw; C:\Windows\System32\drivers\pcw.sys [51552 2015-07-10] (Microsoft Corporation) R5 pdc; C:\Windows\System32\drivers\pdc.sys [98144 2015-07-10] (Microsoft Corporation) S5 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58208 2015-07-10] (LSI Corporation) S5 percsas3i; C:\Windows\System32\drivers\percsas3i.sys [58720 2015-07-10] (Avago Technologies) R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-03-28] (Dritek System Inc.) S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA) R5 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [237392 2015-08-06] (Microsoft Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek ) S5 sbp2port; C:\Windows\System32\drivers\sbp2port.sys [109920 2015-07-10] (Microsoft Corporation) S5 SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [44896 2015-07-10] (Silicon Integrated Systems Corp.) S5 SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [81760 2015-07-10] (Silicon Integrated Systems) R5 spaceport; C:\Windows\System32\drivers\spaceport.sys [474464 2015-07-10] (Microsoft Corporation) S5 stexstor; C:\Windows\System32\drivers\stexstor.sys [31072 2015-07-10] (Promise Technology, Inc.) R5 storahci; C:\Windows\System32\drivers\storahci.sys [133984 2015-07-10] (Microsoft Corporation) S5 storflt; C:\Windows\System32\drivers\vmstorfl.sys [45920 2015-07-10] (Microsoft Corporation) S5 stornvme; C:\Windows\System32\drivers\stornvme.sys [78688 2015-07-10] (Microsoft Corporation) R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation) S5 storufs; C:\Windows\System32\drivers\storufs.sys [40288 2015-07-10] (Microsoft Corporation) S5 storvsc; C:\Windows\System32\drivers\storvsc.sys [36192 2015-07-10] (Microsoft Corporation) R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation) S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2014-03-19] (Anchorfree Inc.) R5 Tcpip; C:\Windows\System32\drivers\tcpip.sys [2430816 2015-07-10] (Microsoft Corporation) S5 uagp35; C:\Windows\System32\drivers\uagp35.sys [66400 2015-07-10] (Microsoft Corporation) S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation) S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-08-06] (Microsoft Corporation) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S5 uliagpkx; C:\Windows\System32\drivers\uliagpkx.sys [66912 2015-07-10] (Microsoft Corporation) R5 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [42848 2015-07-10] (Microsoft Corporation) S5 vmbus; C:\Windows\System32\drivers\vmbus.sys [125792 2015-07-10] (Microsoft Corporation) R5 volmgr; C:\Windows\System32\drivers\volmgr.sys [81248 2015-07-10] (Microsoft Corporation) R5 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [370016 2015-07-10] (Microsoft Corporation) R5 volsnap; C:\Windows\System32\drivers\volsnap.sys [378720 2015-07-10] (Microsoft Corporation) S5 vsmraid; C:\Windows\System32\drivers\vsmraid.sys [166752 2015-07-10] (VIA Technologies Inc.,Ltd) S5 VSTXRAID; C:\Windows\System32\drivers\vstxraid.sys [305504 2015-07-10] (VIA Corporation) R5 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [892224 2015-07-10] (Microsoft Corporation) R5 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) R5 WFPLWFS; C:\Windows\System32\drivers\wfplwfs.sys [153440 2015-07-10] (Microsoft Corporation) R5 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation) R5 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation) S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox) S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox) R5 Wof; C:\Windows\System32\Drivers\Wof.sys [200528 2015-08-06] (Microsoft Corporation) S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation) S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation) S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) NETSVC: XblGameSave -> C:\Windows\System32\XblGameSave.dll (Microsoft Corporation) NETSVC: XboxNetApiSvc -> C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation) NETSVC: UserManager -> C:\Windows\System32\usermgr.dll (Microsoft Corporation) NETSVC: XblAuthManager -> C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation) NETSVCx32: UserManager -> C:\Windows\SysWOW64\usermgr.dll ==> No File ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-21 00:16 - 2015-08-21 00:18 - 00030125 _____ C:\Users\Gary\Desktop\FRST.txt 2015-08-21 00:15 - 2015-08-21 00:16 - 00000000 ____D C:\FRST 2015-08-21 00:14 - 2015-08-21 00:15 - 02173952 _____ (Farbar) C:\Users\Gary\Desktop\FRST64.exe 2015-08-21 00:07 - 2015-08-21 00:07 - 00016148 _____ C:\WINDOWS\system32\LAPTOP_Gary_HistoryPrediction.bin 2015-08-16 15:55 - 2015-08-12 09:57 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-08-16 15:55 - 2015-08-12 09:22 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-08-14 16:59 - 2015-08-14 18:09 - 00000000 ____D C:\Program Files\Unity 2015-08-13 23:35 - 2015-08-13 23:35 - 00000000 _____ C:\WINDOWS\setupact.log 2015-08-11 21:05 - 2015-08-03 03:18 - 08613200 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2015-08-11 21:05 - 2015-08-03 02:56 - 06878256 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2015-08-11 21:04 - 2015-08-06 03:36 - 21874176 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-08-11 21:04 - 2015-08-04 04:21 - 16709120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-08-11 21:04 - 2015-08-03 02:24 - 24592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-08-11 21:04 - 2015-08-03 02:12 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-08-11 21:03 - 2015-08-06 03:03 - 18805248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-08-11 21:03 - 2015-08-04 04:10 - 13025792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-08-11 21:03 - 2015-08-03 03:13 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-08-11 21:03 - 2015-08-03 02:50 - 20857848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-08-11 21:03 - 2015-08-03 02:18 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-08-11 21:03 - 2015-08-03 02:01 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-08-11 21:02 - 2015-08-08 08:30 - 08020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-08-11 21:02 - 2015-08-08 07:40 - 00365056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2015-08-11 21:02 - 2015-08-08 07:24 - 02415104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2015-08-11 21:02 - 2015-08-08 07:24 - 01679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2015-08-11 21:02 - 2015-08-08 07:00 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2015-08-11 21:02 - 2015-08-05 05:49 - 00783112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2015-08-11 21:02 - 2015-08-05 05:29 - 00644128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2015-08-11 21:02 - 2015-08-05 05:03 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-08-11 21:02 - 2015-08-05 04:47 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-08-11 21:02 - 2015-08-05 04:47 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-08-11 21:02 - 2015-08-05 04:43 - 01916416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-08-11 21:02 - 2015-08-04 05:08 - 02462648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2015-08-11 21:02 - 2015-08-04 05:06 - 00583128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2015-08-11 21:02 - 2015-08-04 04:50 - 02151208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2015-08-11 21:02 - 2015-08-04 03:59 - 01212416 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2015-08-11 21:02 - 2015-08-04 03:47 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2015-08-11 21:02 - 2015-08-03 03:18 - 01983840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2015-08-11 21:02 - 2015-08-03 02:22 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2015-08-11 21:02 - 2015-08-03 02:22 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2015-08-11 21:02 - 2015-08-03 02:18 - 03780096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2015-08-11 21:02 - 2015-08-03 02:15 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2015-08-11 21:02 - 2015-08-03 02:14 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2015-08-11 21:02 - 2015-08-03 02:14 - 00247808 _____ C:\WINDOWS\system32\facecredentialprovider.dll 2015-08-11 21:02 - 2015-08-03 02:12 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll 2015-08-11 21:02 - 2015-08-03 02:10 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2015-08-11 21:02 - 2015-08-03 02:03 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2015-08-11 21:02 - 2015-08-03 02:02 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2015-08-11 21:01 - 2015-08-08 08:29 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2015-08-11 21:01 - 2015-08-08 08:19 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2015-08-11 21:01 - 2015-08-08 08:01 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2015-08-11 21:01 - 2015-08-08 07:48 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2015-08-11 21:01 - 2015-08-08 07:22 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2015-08-11 21:01 - 2015-08-08 07:15 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2015-08-11 21:01 - 2015-08-06 04:18 - 00290768 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2015-08-11 21:01 - 2015-08-06 04:17 - 00237392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys 2015-08-11 21:01 - 2015-08-06 04:17 - 00200528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2015-08-11 21:01 - 2015-08-06 03:22 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2015-08-11 21:01 - 2015-08-05 05:00 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll 2015-08-11 21:01 - 2015-08-05 04:54 - 01274880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2015-08-11 21:01 - 2015-08-05 04:39 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll 2015-08-11 21:01 - 2015-08-04 05:07 - 00102752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys 2015-08-11 21:01 - 2015-08-04 05:06 - 00243248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2015-08-11 21:01 - 2015-08-04 04:23 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2015-08-11 21:01 - 2015-08-03 03:32 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll 2015-08-11 21:01 - 2015-08-03 03:28 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll 2015-08-11 21:01 - 2015-08-03 03:19 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2015-08-11 21:01 - 2015-08-03 03:19 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2015-08-11 21:01 - 2015-08-03 03:18 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2015-08-11 21:01 - 2015-08-03 03:18 - 00046432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys 2015-08-11 21:01 - 2015-08-03 03:17 - 00516960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2015-08-11 21:01 - 2015-08-03 03:17 - 00052264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys 2015-08-11 21:01 - 2015-08-03 03:12 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2015-08-11 21:01 - 2015-08-03 02:49 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2015-08-11 21:01 - 2015-08-03 02:23 - 02446336 _____ C:\WINDOWS\system32\InputService.dll 2015-08-11 21:01 - 2015-08-03 02:22 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll 2015-08-11 21:01 - 2015-08-03 02:22 - 00293376 _____ C:\WINDOWS\system32\TextInputFramework.dll 2015-08-11 21:01 - 2015-08-03 02:21 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll 2015-08-11 21:01 - 2015-08-03 02:19 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe 2015-08-11 21:01 - 2015-08-03 02:19 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe 2015-08-11 21:01 - 2015-08-03 02:18 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll 2015-08-11 21:01 - 2015-08-03 02:18 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll 2015-08-11 21:01 - 2015-08-03 02:15 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll 2015-08-11 21:01 - 2015-08-03 02:15 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll 2015-08-11 21:01 - 2015-08-03 02:12 - 01890304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2015-08-11 21:01 - 2015-08-03 02:11 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll 2015-08-11 21:01 - 2015-08-03 02:11 - 00200704 _____ C:\WINDOWS\SysWOW64\TextInputFramework.dll 2015-08-11 21:01 - 2015-08-03 02:06 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe 2015-08-11 21:01 - 2015-08-03 02:00 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2015-08-11 21:01 - 2015-08-03 01:59 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll 2015-08-11 21:00 - 2015-08-08 07:21 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll 2015-08-11 21:00 - 2015-08-03 02:31 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2015-08-11 21:00 - 2015-08-03 02:30 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll 2015-08-11 21:00 - 2015-08-03 02:24 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2015-08-11 21:00 - 2015-08-03 02:24 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2015-08-11 21:00 - 2015-08-03 02:24 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll 2015-08-11 21:00 - 2015-08-03 02:23 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2015-08-11 21:00 - 2015-08-03 02:15 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2015-08-11 21:00 - 2015-08-03 02:15 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2015-08-11 21:00 - 2015-08-03 02:15 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2015-08-11 21:00 - 2015-08-03 02:12 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2015-08-11 21:00 - 2015-08-03 02:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll 2015-08-11 21:00 - 2015-08-03 02:02 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll 2015-08-11 19:44 - 2015-08-11 19:44 - 00000000 ____D C:\ProgramData\ATI 2015-08-10 17:25 - 2011-05-30 14:42 - 00240640 _____ C:\WINDOWS\SysWOW64\xvidvfw.dll 2015-08-10 17:25 - 2011-05-23 08:46 - 00645632 _____ C:\WINDOWS\SysWOW64\xvidcore.dll 2015-08-10 17:24 - 2011-05-30 14:42 - 00255488 _____ C:\WINDOWS\system32\xvidvfw.dll 2015-08-10 17:24 - 2011-05-23 08:45 - 00696832 _____ C:\WINDOWS\system32\xvidcore.dll 2015-08-07 13:27 - 2015-08-07 13:27 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2015-08-07 13:19 - 2015-08-07 13:19 - 00000000 ____D C:\Users\Gary\AppData\Local\NetworkTiles 2015-08-06 10:57 - 2015-07-30 04:49 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2015-08-06 10:57 - 2015-07-30 04:44 - 02662400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2015-08-06 10:56 - 2015-07-30 07:21 - 00816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2015-08-06 10:56 - 2015-07-30 07:16 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2015-08-06 10:56 - 2015-07-30 07:05 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2015-08-06 10:56 - 2015-07-30 07:04 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2015-08-06 10:56 - 2015-07-30 05:25 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2015-08-06 10:56 - 2015-07-30 05:24 - 01769056 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2015-08-06 10:56 - 2015-07-30 04:49 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2015-08-06 10:56 - 2015-07-30 04:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2015-08-06 10:56 - 2015-07-30 04:15 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2015-08-06 10:56 - 2015-07-30 04:10 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2015-08-06 10:56 - 2015-07-30 04:06 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2015-08-06 10:56 - 2015-07-30 04:04 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2015-08-06 10:55 - 2015-07-30 07:24 - 01561872 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2015-08-06 10:55 - 2015-07-30 07:23 - 00527952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2015-08-06 10:55 - 2015-07-30 07:17 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2015-08-06 10:55 - 2015-07-30 07:17 - 01025840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2015-08-06 10:55 - 2015-07-30 07:14 - 00333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2015-08-06 10:55 - 2015-07-30 07:09 - 01562968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2015-08-06 10:55 - 2015-07-30 07:06 - 01043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2015-08-06 10:55 - 2015-07-30 07:05 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2015-08-06 10:55 - 2015-07-30 07:03 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2015-08-06 10:55 - 2015-07-30 06:24 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2015-08-06 10:55 - 2015-07-30 05:29 - 00705520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2015-08-06 10:55 - 2015-07-30 05:26 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2015-08-06 10:55 - 2015-07-30 05:26 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2015-08-06 10:55 - 2015-07-30 05:25 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2015-08-06 10:55 - 2015-07-30 05:24 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2015-08-06 10:55 - 2015-07-30 05:24 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2015-08-06 10:55 - 2015-07-30 05:21 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2015-08-06 10:55 - 2015-07-30 05:12 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2015-08-06 10:55 - 2015-07-30 05:12 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2015-08-06 10:55 - 2015-07-30 04:52 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2015-08-06 10:55 - 2015-07-30 04:52 - 00521216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2015-08-06 10:55 - 2015-07-30 04:52 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll 2015-08-06 10:55 - 2015-07-30 04:46 - 00593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2015-08-06 10:55 - 2015-07-30 04:44 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-08-06 10:55 - 2015-07-30 04:44 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2015-08-06 10:55 - 2015-07-30 04:42 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2015-08-06 10:55 - 2015-07-30 04:41 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2015-08-06 10:55 - 2015-07-30 04:40 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2015-08-06 10:55 - 2015-07-30 04:38 - 01420288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll 2015-08-06 10:55 - 2015-07-30 04:34 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2015-08-06 10:55 - 2015-07-30 04:29 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2015-08-06 10:55 - 2015-07-30 04:04 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2015-08-06 10:55 - 2015-07-30 03:58 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2015-08-06 10:54 - 2015-07-30 07:15 - 00632168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2015-08-06 10:54 - 2015-07-30 05:42 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2015-08-06 10:54 - 2015-07-30 05:24 - 00407616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2015-08-06 10:54 - 2015-07-30 05:22 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2015-08-06 10:54 - 2015-07-30 05:22 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2015-08-06 10:54 - 2015-07-30 05:09 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe 2015-08-06 10:54 - 2015-07-30 05:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2015-08-06 10:54 - 2015-07-30 05:08 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2015-08-06 10:54 - 2015-07-30 05:08 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2015-08-06 10:54 - 2015-07-30 04:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2015-08-06 10:54 - 2015-07-30 04:46 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2015-08-06 10:54 - 2015-07-30 04:46 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2015-08-06 10:54 - 2015-07-30 04:45 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll 2015-08-06 10:54 - 2015-07-30 04:45 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys 2015-08-06 10:54 - 2015-07-30 04:44 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll 2015-08-06 10:54 - 2015-07-30 04:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll 2015-08-06 10:54 - 2015-07-30 04:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll 2015-08-06 10:54 - 2015-07-30 04:38 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll 2015-08-06 10:54 - 2015-07-30 04:07 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll 2015-08-06 10:54 - 2015-07-30 04:06 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2015-08-06 10:54 - 2015-07-30 04:06 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll 2015-08-06 10:54 - 2015-07-30 04:06 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll 2015-08-06 10:54 - 2015-07-30 03:59 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2015-08-06 10:53 - 2015-07-30 04:49 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-08-06 10:53 - 2015-07-30 04:44 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys 2015-08-06 10:53 - 2015-07-30 04:10 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-08-06 09:57 - 2015-08-06 10:26 - 00000000 ____D C:\Users\Gary\AppData\Local\MicrosoftEdge 2015-08-06 02:41 - 2015-08-06 02:41 - 00000258 __RSH C:\ProgramData\ntuser.pol 2015-08-06 02:36 - 2015-08-06 02:36 - 00001337 _____ C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Realtek HD Audio Manager.lnk 2015-08-06 02:33 - 2015-08-06 02:33 - 00047288 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\ETDCoInstaller01000.dll 2015-08-06 02:33 - 2015-08-06 02:33 - 00000000 ____D C:\Users\Gary\AppData\Local\Publishers 2015-08-06 02:30 - 2015-08-07 23:02 - 00000000 ____D C:\Users\Gary\AppData\Local\Comms 2015-08-06 02:27 - 2015-08-06 02:27 - 00000000 ____D C:\Users\Gary\AppData\Local\TileDataLayer 2015-08-06 02:26 - 2015-08-06 02:26 - 00000020 ___SH C:\Users\Gary\ntuser.ini 2015-08-06 02:21 - 2015-08-06 02:21 - 00000000 __SHD C:\Recovery 2015-08-06 02:12 - 2015-08-06 02:26 - 00000000 ___DC C:\WINDOWS\Panther 2015-08-06 02:03 - 2015-08-06 02:04 - 00000000 ____D C:\Windows.old 2015-08-06 01:59 - 2015-08-06 01:59 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 07051264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 06488312 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 06305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 05076480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 04760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 04611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 04169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 03362816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 02878000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 02741760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 02224128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 02207744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01591856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01411072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01365072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01334784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2015-08-06 01:59 - 2015-08-06 01:59 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01169408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2015-08-06 01:59 - 2015-08-06 01:59 - 01135312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 01112064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01101792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01085776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2015-08-06 01:59 - 2015-08-06 01:59 - 00991584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2015-08-06 01:59 - 2015-08-06 01:59 - 00966424 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00934752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys 2015-08-06 01:59 - 2015-08-06 01:59 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00916800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00823336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00808856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00762896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00750592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00695136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00607008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00601344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2015-08-06 01:59 - 2015-08-06 01:59 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2015-08-06 01:59 - 2015-08-06 01:59 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00521568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00505344 _____ C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys 2015-08-06 01:59 - 2015-08-06 01:59 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00425824 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll Quote
Slumdog Posted August 20, 2015 Author Posted August 20, 2015 2015-08-06 01:59 - 2015-08-06 01:59 - 00412672 _____ C:\WINDOWS\system32\diagtrack_win.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00403968 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00325984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2015-08-06 01:59 - 2015-08-06 01:59 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00290312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00265480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00242264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00208736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00181088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys 2015-08-06 01:59 - 2015-08-06 01:59 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00061280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2015-08-06 01:59 - 2015-08-06 01:59 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys 2015-08-06 01:59 - 2015-08-06 01:59 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00032768 _____ C:\WINDOWS\system32\LicenseManagerApi.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe 2015-08-06 01:59 - 2015-08-06 01:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe 2015-08-06 01:57 - 2015-08-09 22:48 - 00875126 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-08-06 01:53 - 2015-07-10 11:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2015-08-06 01:49 - 2015-08-06 01:49 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2015-08-06 01:45 - 2015-08-06 01:45 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software 2015-08-06 01:45 - 2015-08-06 01:45 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2015-08-06 01:45 - 2015-08-06 01:45 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software 2015-08-06 01:45 - 2015-08-06 01:45 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2015-08-06 01:44 - 2015-08-06 01:44 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2015-08-06 01:41 - 2015-08-06 01:41 - 00000000 ____D C:\Program Files\Reference Assemblies 2015-08-06 01:41 - 2015-08-06 01:41 - 00000000 ____D C:\Program Files\MSBuild 2015-08-06 01:41 - 2015-08-06 01:41 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2015-08-06 01:41 - 2015-08-06 01:41 - 00000000 ____D C:\Program Files (x86)\MSBuild 2015-08-06 01:39 - 2015-06-17 19:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2015-08-06 01:39 - 2015-06-17 19:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2015-08-06 01:39 - 2015-06-17 19:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2015-08-06 01:39 - 2015-05-29 22:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2015-08-06 01:39 - 2015-05-29 22:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-08-06 01:39 - 2015-05-29 22:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2015-08-06 01:34 - 2015-08-06 01:34 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2015-08-06 01:30 - 2015-08-06 09:42 - 00000000 ____D C:\Users\Gary 2015-08-06 01:30 - 2015-08-06 02:27 - 00000000 ___RD C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-06 01:30 - 2015-08-06 02:03 - 00000000 ____D C:\Users\fbwuser2355 2015-08-06 01:30 - 2015-08-06 02:00 - 00000000 ____D C:\Users\fbwuser78A8 2015-08-06 01:30 - 2015-08-06 02:00 - 00000000 ____D C:\Users\fbwuser6386 2015-08-06 01:30 - 2015-08-06 01:33 - 00000000 ___RD C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-08-06 01:30 - 2015-08-06 01:33 - 00000000 ___RD C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-08-06 01:30 - 2015-08-06 01:33 - 00000000 ___RD C:\Users\fbwuser2355\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-08-06 01:30 - 2015-08-06 01:33 - 00000000 ___RD C:\Users\fbwuser2355\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-08-06 01:30 - 2015-08-06 01:32 - 00000000 ___RD C:\Users\fbwuser78A8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-08-06 01:30 - 2015-08-06 01:32 - 00000000 ___RD C:\Users\fbwuser78A8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-08-06 01:30 - 2015-08-06 01:32 - 00000000 ___RD C:\Users\fbwuser6386\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-08-06 01:30 - 2015-08-06 01:32 - 00000000 ___RD C:\Users\fbwuser6386\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 __RSD C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 __RSD C:\Users\fbwuser78A8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 __RSD C:\Users\fbwuser6386\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 __RSD C:\Users\fbwuser2355\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\fbwuser78A8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\fbwuser6386\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\fbwuser2355\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 ____D C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 ____D C:\Users\fbwuser78A8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 ____D C:\Users\fbwuser6386\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-08-06 01:30 - 2015-07-10 12:04 - 00000000 ____D C:\Users\fbwuser2355\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-08-06 01:22 - 2015-08-06 01:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2015-08-06 01:22 - 2015-08-06 01:22 - 00000000 ____D C:\Program Files\ATI Technologies 2015-08-06 01:21 - 2015-08-06 01:35 - 00000000 ____D C:\ProgramData\Package Cache 2015-08-06 01:21 - 2015-08-06 01:22 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2015-08-06 01:21 - 2015-08-06 01:21 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2015-08-06 01:20 - 2015-08-06 01:20 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2015-08-06 01:20 - 2015-08-06 01:20 - 00000000 ____D C:\WINDOWS\system32\DAX2 2015-08-06 01:20 - 2015-08-06 01:20 - 00000000 ____D C:\Program Files\Realtek 2015-08-06 01:20 - 2015-08-06 01:20 - 00000000 ____D C:\AMD 2015-08-06 01:20 - 2015-08-06 01:20 - 00000000 _____ C:\WINDOWS\ativpsrm.bin 2015-08-06 01:19 - 2015-08-06 01:19 - 00000000 ____D C:\Program Files\AMD 2015-08-06 01:18 - 2015-08-06 02:33 - 00000000 ____D C:\Program Files\Elantech 2015-08-06 01:15 - 2015-08-06 01:16 - 00035763 _____ C:\WINDOWS\system32\NetSetupMig.log 2015-08-04 15:48 - 2015-08-04 17:20 - 00236032 ___SH C:\Users\Gary\Documents\Thumbs.db 2015-08-04 15:38 - 2012-10-17 04:31 - 00741480 _____ (Hewlett-Packard Co.) C:\WINDOWS\system32\HPDiscoPMa011.dll 2015-08-04 15:37 - 2015-08-06 01:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2015-08-04 15:35 - 2015-08-04 15:35 - 00000057 _____ C:\ProgramData\Ament.ini 2015-08-04 15:35 - 2015-08-04 15:35 - 00000000 ____D C:\ProgramData\HP 2015-08-04 15:35 - 2015-08-04 15:35 - 00000000 ____D C:\Program Files\HP 2015-08-04 15:35 - 2015-08-04 15:35 - 00000000 ____D C:\Program Files (x86)\HP 2015-08-04 15:34 - 2015-08-04 15:43 - 00000000 ____D C:\Users\Gary\AppData\Local\HP 2015-08-04 15:31 - 2015-08-04 15:31 - 00000000 ____D C:\Users\Gary\AppData\Local\Hewlett-Packard 2015-08-04 15:24 - 2015-08-04 15:24 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard 2015-07-31 23:31 - 2015-08-06 01:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2015-07-28 11:02 - 2015-07-28 11:02 - 00312752 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsdrivera.sys 2015-07-28 11:01 - 2015-07-28 11:01 - 00245680 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgmfx64.sys ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-21 00:18 - 2013-10-05 17:12 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-21 00:16 - 2013-10-05 17:13 - 00002264 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-08-21 00:10 - 2014-09-20 16:35 - 00004148 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{787B1E05-B88F-4F2E-98FC-5F085F5F3A71} 2015-08-21 00:09 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\sru 2015-08-20 20:17 - 2015-07-10 13:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log 2015-08-20 19:01 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-08-20 18:56 - 2014-01-29 19:51 - 00000938 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3562101447-2940579550-2573863169-1001UA.job 2015-08-20 18:56 - 2014-01-29 19:51 - 00000916 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3562101447-2940579550-2573863169-1001Core.job 2015-08-20 18:51 - 2013-10-05 17:12 - 00000916 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-20 18:47 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-08-20 18:46 - 2015-07-10 10:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2015-08-20 13:21 - 2013-08-27 16:48 - 00000000 ____D C:\ProgramData\MFAData 2015-08-20 12:44 - 2015-07-10 10:05 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM 2015-08-20 09:55 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-08-17 03:55 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\rescache 2015-08-14 15:29 - 2014-09-20 16:24 - 00000000 __RDO C:\Users\Gary\OneDrive 2015-08-12 15:58 - 2015-07-10 13:20 - 00201800 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-08-12 15:57 - 2014-11-03 22:18 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-08-12 15:57 - 2014-11-03 22:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-08-12 15:53 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-12 15:53 - 2015-07-10 12:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-12 15:53 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB 2015-08-12 15:53 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2015-08-12 15:53 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\oobe 2015-08-12 15:53 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\en-GB 2015-08-12 15:53 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-08-12 12:26 - 2014-11-03 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-08-12 12:21 - 2013-10-15 01:01 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-08-12 10:53 - 2013-10-15 01:01 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-08-11 17:18 - 2014-05-01 12:07 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-08-10 17:30 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2015-08-08 16:38 - 2015-07-10 12:06 - 00794088 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-08-08 16:38 - 2015-07-10 12:06 - 00179688 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-08-06 23:53 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\Provisioning 2015-08-06 11:02 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\restore 2015-08-06 10:21 - 2013-08-13 16:29 - 00000000 ____D C:\Users\Gary\AppData\Local\Packages 2015-08-06 09:45 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\appcompat 2015-08-06 02:33 - 2013-02-01 11:42 - 00428216 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\Drivers\ETD.sys 2015-08-06 02:31 - 2015-07-10 12:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2015-08-06 02:31 - 2015-07-10 12:04 - 00000000 ___RD C:\WINDOWS\PrintDialog 2015-08-06 02:31 - 2015-07-10 12:04 - 00000000 ___RD C:\WINDOWS\MiracastView 2015-08-06 02:30 - 2015-07-10 12:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2015-08-06 02:20 - 2014-09-20 15:21 - 00066678 _____ C:\WINDOWS\diagwrn.xml 2015-08-06 02:20 - 2014-09-20 15:21 - 00066678 _____ C:\WINDOWS\diagerr.xml 2015-08-06 02:15 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\Registration 2015-08-06 02:13 - 2014-09-20 15:52 - 00022840 _____ C:\WINDOWS\system32\emptyregdb.dat 2015-08-06 02:12 - 2015-07-10 12:04 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2015-08-06 02:12 - 2014-11-07 01:30 - 00003200 _____ C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3562101447-2940579550-2573863169-1001 2015-08-06 02:12 - 2014-11-06 23:39 - 00003508 _____ C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3562101447-2940579550-2573863169-1001 2015-08-06 02:12 - 2014-11-06 23:39 - 00003456 _____ C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3562101447-2940579550-2573863169-1001 2015-08-06 02:12 - 2014-01-29 19:51 - 00003894 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3562101447-2940579550-2573863169-1001UA 2015-08-06 02:12 - 2014-01-29 19:51 - 00003544 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3562101447-2940579550-2573863169-1001Core 2015-08-06 02:12 - 2013-10-15 09:54 - 00003654 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask 2015-08-06 02:12 - 2013-10-05 17:12 - 00004002 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-08-06 02:12 - 2013-10-05 17:12 - 00003766 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-08-06 02:12 - 2013-08-13 16:46 - 00003708 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3562101447-2940579550-2573863169-1001 2015-08-06 02:12 - 2013-03-28 16:19 - 00003024 _____ C:\WINDOWS\System32\Tasks\Power Management 2015-08-06 02:12 - 2013-02-01 14:40 - 00003448 _____ C:\WINDOWS\System32\Tasks\EgisUpdate 2015-08-06 02:12 - 2013-02-01 14:40 - 00003380 _____ C:\WINDOWS\System32\Tasks\PMMUpdate 2015-08-06 02:12 - 2013-02-01 14:35 - 00004512 _____ C:\WINDOWS\System32\Tasks\ALUAgent 2015-08-06 02:12 - 2013-02-01 14:35 - 00003736 _____ C:\WINDOWS\System32\Tasks\ALU 2015-08-06 02:03 - 2015-07-10 12:04 - 00000000 __RHD C:\Users\Public\Libraries 2015-08-06 02:03 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2015-08-06 02:03 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2015-08-06 02:03 - 2015-07-10 10:05 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2015-08-06 02:03 - 2015-07-10 10:05 - 00000000 ____D C:\WINDOWS\system32\Dism 2015-08-06 01:59 - 2015-06-11 11:21 - 00000000 ____D C:\Program Files\Common Files\AV 2015-08-06 01:57 - 2015-07-10 12:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2015-08-06 01:47 - 2015-07-10 17:25 - 00000000 ____D C:\WINDOWS\en-GB 2015-08-06 01:47 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\Help 2015-08-06 01:47 - 2014-12-21 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-08-06 01:47 - 2014-05-01 12:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-08-06 01:47 - 2014-03-05 07:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia 2015-08-06 01:47 - 2014-01-06 17:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SWARAJ HSDPA MODEM 2015-08-06 01:47 - 2013-10-05 17:25 - 00000000 ____D C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-08-06 01:47 - 2013-10-05 17:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-08-06 01:47 - 2013-02-01 14:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EgisTec 2015-08-06 01:47 - 2013-02-01 14:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2015-08-06 01:45 - 2013-08-22 14:36 - 00000000 ____D C:\Users\Default.migrated 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\th-TH 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\spool 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK 2015-08-06 01:38 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO 2015-08-06 01:38 - 2014-02-04 11:46 - 00000000 ____D C:\WINDOWS\SysWOW64\Hotspot Shield 2015-08-06 01:38 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2015-08-06 01:38 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2015-08-06 01:37 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-08-06 01:37 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2015-08-06 01:37 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2015-08-06 01:37 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2015-08-06 01:37 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\IME 2015-08-06 01:37 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR 2015-08-06 01:37 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\he-IL 2015-08-06 01:37 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\et-EE 2015-08-06 01:35 - 2015-07-21 00:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft 2015-08-06 01:35 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG 2015-08-06 01:35 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA 2015-08-06 01:35 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2015-08-06 01:35 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\InputMethod 2015-08-06 01:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer 2015-08-06 01:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS 2015-08-06 01:35 - 2013-02-01 14:25 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-08-06 01:35 - 2013-02-01 12:04 - 00000000 ____D C:\ProgramData\PRICache 2015-08-06 01:34 - 2015-07-10 12:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-08-06 01:34 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2015-08-06 01:34 - 2013-03-28 15:47 - 00000000 ____D C:\Program Files (x86)\AMD AVT 2015-08-06 01:33 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\Recovery 2015-08-06 01:25 - 2015-07-10 10:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2015-08-06 01:14 - 2015-07-10 10:05 - 00000000 __RHD C:\Users\Default 2015-08-06 00:01 - 2015-07-10 17:49 - 00000000 ___HD C:\$Windows.~BT 2015-08-05 08:57 - 2015-06-24 09:56 - 00000945 _____ C:\Users\Public\Desktop\AVG 2015.lnk ==================== Files in the root of some directories ======= 2014-11-15 12:47 - 2014-11-15 12:47 - 6000640 _____ () C:\Program Files (x86)\GUT41F7.tmp 2015-05-05 16:33 - 2015-05-05 17:43 - 0000115 _____ () C:\Users\Gary\AppData\Roaming\LogFile.txt 2014-11-06 22:01 - 2014-11-06 22:02 - 0000156 _____ () C:\Users\Gary\AppData\Roaming\settings.xml 2015-08-04 15:35 - 2015-08-04 15:35 - 0000057 _____ () C:\ProgramData\Ament.ini 2015-08-06 01:21 - 2015-08-06 01:21 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-08-18 10:17 ==================== End of log ============================ Quote
Slumdog Posted August 20, 2015 Author Posted August 20, 2015 Additional scan result of Farbar Recovery Scan Tool (x64) Version:21-08-2015 Ran by Gary (2015-08-21 00:20:33) Running from C:\Users\Gary\Desktop Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3562101447-2940579550-2573863169-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3562101447-2940579550-2573863169-503 - Limited - Disabled) fbwuser2355 (S-1-5-21-3562101447-2940579550-2573863169-1006 - Limited - Disabled) => C:\Users\fbwuser2355 fbwuser6386 (S-1-5-21-3562101447-2940579550-2573863169-1005 - Limited - Disabled) => C:\Users\fbwuser6386 fbwuser78A8 (S-1-5-21-3562101447-2940579550-2573863169-1004 - Limited - Disabled) => C:\Users\fbwuser78A8 Gary (S-1-5-21-3562101447-2940579550-2573863169-1001 - Administrator - Enabled) => C:\Users\Gary Guest (S-1-5-21-3562101447-2940579550-2573863169-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3562101447-2940579550-2573863169-1012 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0071 - NTI Corporation) Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3011 - Acer Incorporated) Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3011 - Acer Incorporated) Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3015 - Acer Incorporated) AcerCloud (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.01.3125 - Acer Incorporated) AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.00.3204 - Acer Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.172 - Adobe Systems Incorporated) Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 3.7.42.61541 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 3.7.42.61541 - Alcor Micro Corp.) Hidden AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD) AMD Catalyst Install Manager (HKLM\...\{1E654AA2-629D-C426-2561-01AAC1371950}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.) Anvi Browser Repair Tool (HKLM-x32\...\Anvi Browser Repair Tool) (Version: 2.0 - Anvisoft) AVG 2015 (HKLM\...\AVG) (Version: 2015.0.6125 - AVG Technologies) AVG 2015 (Version: 15.0.4392 - AVG Technologies) Hidden AVG 2015 (Version: 15.0.6125 - AVG Technologies) Hidden Backup Manager v4 (x32 Version: 4.0.0.0071 - NTI Corporation) Hidden Broadcom Wireless Utility (HKLM\...\{4CDA59B9-7AD3-4283-9F5C-BC469FF975B6}) (Version: 6.30.59.20 - Broadcom Corporation) clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.01.3112 - Acer Incorporated) clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.01.3109 - Acer Incorporated) clear.fi SDK - Video 2 (x32 Version: 2.1.2128 - CyberLink Corp.) Hidden clear.fi SDK- Movie 2 (x32 Version: 2.1.2112 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden ELAN Touchpad 11.15.0.14_X64 (HKLM\...\Elantech) (Version: 11.15.0.14 - ELAN Microelectronic Corp.) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.157 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden HP Deskjet 3050A J611 series Basic Device Software (HKLM\...\{1B77E249-B8D5-4E5E-8848-693ACEF84E6D}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Support Solutions Framework (HKLM-x32\...\{F6A11738-3EE4-4573-AEA5-6CD5D491C167}) (Version: 12.0.30.81 - Hewlett-Packard Company) Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated) Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.4 - Acer Inc.) Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3006 - Acer Incorporated) Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2005 Tools for Office Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MyWinLocker (Version: 4.0.14.35 - Egis Technology Inc.) Hidden MyWinLocker 4 (x32 Version: 4.0.14.35 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 4.0.14.24 - Egis Technology Inc.) Hidden Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia) Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.48.0 - Nokia) Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3202 - Acer) PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.) SWARAJ HSDPA MODEM (HKLM-x32\...\SWARAJ HSDPA MODEM) (Version: 1.0.0 - SWARAJ HSDPA MODEM) Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation) Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation) Windows Driver Package - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3562101447-2940579550-2573863169-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3562101447-2940579550-2573863169-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Gary\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll No File CustomCLSID: HKU\S-1-5-21-3562101447-2940579550-2573863169-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Gary\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll No File CustomCLSID: HKU\S-1-5-21-3562101447-2940579550-2573863169-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Gary\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll No File ==================== Restore Points ========================= 06-08-2015 12:44:22 Windows Modules Installer 12-08-2015 10:45:24 Windows Update 16-08-2015 10:01:39 Windows Update 20-08-2015 15:36:00 Windows Update 20-08-2015 15:38:47 Windows Update ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {00EEBA9C-F9EF-4272-B793-C830FBADD359} - System32\Tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup => C:\Windows\system32\dstokenclean.exe [2015-07-10] (Microsoft Corporation) Task: {0CCA7916-2916-4F12-BD32-1E3BE31E1269} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join => C:\Windows\System32\dsregcmd.exe [2015-07-10] (Microsoft Corporation) Task: {19865544-CE08-40BE-8B8C-87C47681433D} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sihboot => C:\Windows\System32\sihclient.exe [2015-07-10] (Microsoft Corporation) Task: {2E90265A-C554-43D1-9772-42B272513890} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION Task: {338DCE5E-5D2B-40CB-BE89-A625C41DB940} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3562101447-2940579550-2573863169-1001UA => C:\Users\Gary\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-01-29] (Facebook Inc.) Task: {340CE2D1-E0CA-413C-BCC2-B278C35EB7DF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {38B37DA2-C41A-41C0-BE39-2F60C9CBBBF2} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-08-12] (Microsoft Corporation) Task: {3A4C2A89-D209-4C97-A505-DEF73A9ADE34} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-12] (Egis Technology Inc.) Task: {3F6E048D-6404-433B-8F5F-CFF4D89BF89E} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Rundll32.exe generaltel.dll,RunTelemetryW Task: {41160EA0-208B-4C3E-B4DB-805BBABC6B93} - System32\Tasks\Microsoft\Windows\Feedback\Siuf\DmClient => C:\Windows\system32\dmclient.exe [2015-07-10] (Microsoft Corporation) Task: {41EF7E93-F411-45F7-9865-CAD46D428BC3} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-21] () Task: {44BDA504-DC4F-467E-82C5-5306E5BBC220} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {46933D38-827F-4B5A-88BE-03A7D10BC6AE} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {4983642F-6D1E-48D0-A55C-3882552086EA} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION Task: {4E457542-427E-4ED1-A28C-B5C46F96D9B1} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe Task: {6496F8F8-1799-4B90-9EAD-1B632CF61CCF} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3562101447-2940579550-2573863169-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe Task: {67166ADC-F263-4381-82BC-E8E95572A2F5} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-11-06] () Task: {707FE27F-9776-49AD-B95E-4EEDE711F749} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-05] (Google Inc.) Task: {70E049A8-97BD-4212-880E-A72067944B7C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION Task: {73551810-E5F4-433E-9494-0D00B55C855E} - System32\Tasks\Microsoft\Windows\Maps\MapsToastTask Task: {78B77FA3-9D97-441D-97B6-68CEA40B4F74} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe generaltel.dll,RunTelemetry -maintenance Task: {79B3A80A-F24C-42E1-A733-C139312E075E} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION Task: {8DF84CB3-D8E0-4307-A35B-CA74E21786DB} - System32\Tasks\Microsoft\Windows\Clip\License Validation => C:\Windows\system32\ClipUp.exe [2015-08-06] (Microsoft Corporation) Task: {9339F85C-3935-4B5C-99EA-DB24B3792BE2} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3562101447-2940579550-2573863169-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe Task: {95986F32-3F0A-4D4D-A128-45627783D161} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.) Task: {A17FBF5C-187B-487C-9FC1-B51DD9661CD0} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3562101447-2940579550-2573863169-1001Core => C:\Users\Gary\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-01-29] (Facebook Inc.) Task: {A5B6CD85-1B57-49B9-BA80-5D5D65F02826} - System32\Tasks\Microsoft\Windows\AppID\EDP Policy Manager Task: {C1D4A62B-49A3-46ED-A5C5-8178230105B9} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION Task: {C3156609-D503-4574-8051-15C742FB0E66} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-05] (Google Inc.) Task: {C56AFFD3-06B8-4A16-AF7E-F7A6EB3FAE9E} - System32\Tasks\Microsoft\Windows\TPM\Tpm-HASCertRetr Task: {C5EE2EA2-5312-4D1F-B9D0-41B18DF31B78} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sih => C:\Windows\System32\sihclient.exe [2015-07-10] (Microsoft Corporation) Task: {C6F8419A-3498-4DB3-A113-C1DB9EC0A0BC} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {C7A236B2-12E1-46DC-9501-3B1B0209CC09} - System32\Tasks\Microsoft\Windows\Location\WindowsActionDialog => C:\Windows\System32\WindowsActionDialog.exe [2015-07-10] (Microsoft Corporation) Task: {D937E1D9-8B7C-4A57-9AB0-2FEB1F296BF5} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-10-23] (Acer Incorporated) Task: {F488F9A0-8306-451E-BE2A-A54A85F6FD95} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION Task: {F4BDC64D-E9B0-44C9-916E-3FF0C8476083} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3562101447-2940579550-2573863169-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe Task: {FB4208AF-8679-43BC-AAB0-30521E642AD0} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3562101447-2940579550-2573863169-1001Core.job => C:\Users\Gary\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3562101447-2940579550-2573863169-1001UA.job => C:\Users\Gary\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2015-08-06 01:59 - 2015-08-06 01:59 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll 2015-07-15 21:38 - 2015-07-15 21:38 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll 2015-08-06 01:59 - 2015-08-06 01:59 - 00403968 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll 2015-08-06 10:56 - 2015-07-30 07:05 - 02498808 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2015-08-06 10:56 - 2015-07-30 07:05 - 02498808 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2015-08-11 21:00 - 2015-08-03 02:11 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2015-07-10 12:00 - 2015-07-10 17:28 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-08-11 21:00 - 2015-08-03 02:08 - 01806848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-08-11 21:00 - 2015-08-03 02:09 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2015-07-10 12:00 - 2015-07-10 17:28 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll 2015-07-10 11:59 - 2015-07-10 11:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-08-20 20:19 - 2015-08-20 20:19 - 00981584 _____ () C:\Program Files (x86)\Google\Update\Install\{7D1B85A8-3E3C-46C9-8857-8601E7636583}\44.0.2403.157_44.0.2403.155_chrome_updater.exe 2012-11-03 01:38 - 2012-11-03 01:38 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll 2012-11-03 01:37 - 2012-11-03 01:37 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll 2012-11-03 01:38 - 2012-11-03 01:38 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll 2012-11-03 01:37 - 2012-11-03 01:37 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll 2012-11-03 01:37 - 2012-11-03 01:37 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll 2012-11-03 01:37 - 2012-11-03 01:37 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll 2012-11-03 01:37 - 2012-11-03 01:37 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\Gary\OneDrive:ms-properties ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ahcache.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CoreMessagingRegistrar => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\StateRepository => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TileDataModelSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UserManager => ""="Service" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3562101447-2940579550-2573863169-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Gary\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\internet explorer wallpaper.bmp DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\Run: => "ETDCtrl" HKLM\...\StartupApproved\Run32: => "StartCCC" HKLM\...\StartupApproved\Run32: => "AmIcoSinglun64" HKLM\...\StartupApproved\Run32: => "vProt" HKLM\...\StartupApproved\Run32: => "DataCardMonitor" HKU\S-1-5-21-3562101447-2940579550-2573863169-1001\...\StartupApproved\Run: => "Facebook Update" HKU\S-1-5-21-3562101447-2940579550-2573863169-1001\...\StartupApproved\Run: => "NokiaSuite.exe" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{320C158E-38BE-4A92-88B1-6B51E40B938B}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe FirewallRules: [{98F2AD0A-C2BD-4115-A5A3-816CA0B67A38}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe FirewallRules: [{07474EE9-3F9F-4EC1-AF2A-864AE53AFECD}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe FirewallRules: [{D2E210E7-4337-42AD-9047-474510D55D2F}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe FirewallRules: [{01A7B1AE-4B53-48AF-B51C-B3EB32958E2D}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe FirewallRules: [{224D5368-1CF9-4D11-9DAE-C48AB63AD543}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe FirewallRules: [{3E27856A-0D44-4104-A5F2-A065970AF1A2}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{02838C74-EA40-4EDB-96E3-08BF12529850}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe FirewallRules: [{342ACAAC-8864-446B-A203-EF220D51C251}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\DeviceSetup.exe FirewallRules: [{6F465E74-0F78-46C1-94D2-CA9DF2247730}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe FirewallRules: [{B38A0B00-C988-475B-A29E-444879A68A25}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe FirewallRules: [uDP Query User{3A2F204D-6A6B-47B6-9CAA-2A76C4964413}C:\windows\system32\settingsynchost.exe] => (Allow) C:\windows\system32\settingsynchost.exe FirewallRules: [TCP Query User{850B9565-0A29-4017-80CD-F706DEBF5933}C:\windows\system32\settingsynchost.exe] => (Allow) C:\windows\system32\settingsynchost.exe FirewallRules: [{A0E0928E-7177-40FB-BD3E-94555F8039F3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe FirewallRules: [{3E7F8BAB-87A2-4C52-9402-B365F2C11DC5}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe FirewallRules: [{EAC5AF7E-9432-43FA-9517-CB165D846FA5}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe FirewallRules: [{D8273DA7-D914-430C-A4C2-91CBAC082390}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe FirewallRules: [{AEBAC3ED-8CE0-42A0-8D7C-9A69F3668758}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe FirewallRules: [{68625179-1B43-417F-876C-0DE1CB47F1D7}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe FirewallRules: [{AC80C3C6-DFB9-4E83-A1FD-7DAE7D7C1F59}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe FirewallRules: [{9D6A56BF-B566-4A21-B1E4-2968AD95EB01}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe FirewallRules: [{854EC738-C845-431A-8D27-7B914FFE7EA6}] => (Allow) LPort=1900 FirewallRules: [{5EC9ED81-756B-4A31-8047-59D1B03241C7}] => (Allow) LPort=2869 FirewallRules: [{128FAD33-E6F1-470A-A1B7-87BDD1C8ADA6}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{D94CEA81-E18E-42F6-BCE2-FFBC33E84652}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManager.exe FirewallRules: [{25107854-52CA-4E4B-B363-392D5C4B0119}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe FirewallRules: [{741D057F-0B26-497C-B561-54FD44DB8713}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\FileExplorer.exe FirewallRules: [{E14E714F-4CCC-401A-A8EB-35B60F2E67AF}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe FirewallRules: [{09122D38-C43E-4FDE-9013-F8659893B180}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe FirewallRules: [{7206D0AB-03DD-4C18-A290-503208680590}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe FirewallRules: [{20B6039F-BCFD-4A1F-9AE8-714518C3C626}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe FirewallRules: [{2DF70DF3-201B-4ABE-97BE-9AECB7EE17ED}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\VideoPlayer.exe FirewallRules: [{B19E986A-6513-4843-89DE-F6629D79A761}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe FirewallRules: [{ED662BB7-47B9-4BBA-9151-9BAC48D95A27}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe FirewallRules: [{8CF48060-A3A2-4AEF-981D-2DEAEE4761CE}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe FirewallRules: [{630255A4-4D45-4E59-BE0F-E5B044BA85A5}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe FirewallRules: [{8C8800C0-AF19-447B-A4FA-EBC55DF88F71}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe FirewallRules: [{853125E7-B62A-4C54-8AED-16A484559A7B}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe FirewallRules: [{47946AE9-92AF-4000-B0FB-C83AD3CB76E1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{DE4408F3-8512-4B4A-8E54-A8C6B12B5C27}] => (Allow) C:\Program Files (x86)\nokia\nokia suite\nokiasuite.exe FirewallRules: [{062E1FCA-7187-4D0E-8D6B-53B10901A2F4}] => (Allow) C:\Users\Gary\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe FirewallRules: [TCP Query User{64A4BBA6-8CA5-4CC0-8278-D3278367B260}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe FirewallRules: [uDP Query User{0133483A-A508-4E68-B9AD-28B9F44CDB2D}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe FirewallRules: [{B546892A-1AD1-42B3-A2F7-8A58F41163DD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Description: Class Guid: {4d36e979-e325-11ce-bfc1-08002be10318} Manufacturer: Service: Problem: : Reinstall the drivers for this device. (Code 18) Resolution: The drivers for this device must be reinstalled. Click "Update Driver", which starts the Hardware Update wizard. Alternately, uninstall the driver, and then click "Scan for hardware changes" to reload the drivers. ==================== Event log errors: ========================= Application errors: ================== Error: (08/20/2015 06:51:59 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program ShellExperienceHost.exe version 10.0.10240.16425 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. Process ID: 12c0 Start Time: 01d0db7067ea99f3 Termination Time: 4294967295 Application Path: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Report Id: 225f5829-4764-11e5-bfbf-047d7bdfe0bd Faulting package full name: Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: App Error: (08/20/2015 06:51:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP) Description: Package Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy+App was terminated because it took too long to suspend. Error: (08/20/2015 06:51:41 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program SearchUI.exe version 10.0.10240.16425 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. Process ID: fe8 Start Time: 01d0db706a945fc6 Termination Time: 4294967295 Application Path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Report Id: 0fff0660-4764-11e5-bfbf-047d7bdfe0bd Faulting package full name: Microsoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: CortanaUI Error: (08/20/2015 06:51:18 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP) Description: Package Microsoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy+CortanaUI was terminated because it took too long to suspend. Error: (08/20/2015 03:54:21 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program iexplore.exe version 11.0.10240.16412 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. Process ID: d48 Start Time: 01d0db465938b8b5 Termination Time: 191 Application Path: C:\Program Files\Internet Explorer\iexplore.exe Report Id: 5629bcd3-474b-11e5-bfbe-047d7bdfe0bd Faulting package full name: Faulting package-relative application ID: Error: (08/20/2015 03:39:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol. System Error: Access is denied. . Error: (08/20/2015 03:36:53 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol. System Error: Access is denied. . Error: (08/20/2015 09:55:43 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program iexplore.exe version 11.0.10240.16412 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. Process ID: a8c0 Start Time: 01d0db22eab31a6b Termination Time: 467 Application Path: C:\Program Files\Internet Explorer\iexplore.exe Report Id: 3c3eb0cc-4719-11e5-bfbd-047d7bdfe0bd Faulting package full name: Faulting package-relative application ID: Error: (08/20/2015 09:30:47 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP) Description: Activation of application Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen failed with error: -2147023170 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (08/20/2015 12:46:17 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP) Description: Activation of application Microsoft.Windows.Photos_8wekyb3d8bbwe!App failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information. System errors: ============= Error: (08/21/2015 12:08:26 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY) Description: {784E29F4-5EBE-4279-9948-1E8FE941646D} Error: (08/20/2015 07:49:36 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10. Error: (08/20/2015 07:49:36 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10. Error: (08/20/2015 07:44:10 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10. Error: (08/20/2015 07:44:10 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10. Error: (08/20/2015 07:43:18 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10. Error: (08/20/2015 07:43:18 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10. Error: (08/20/2015 07:09:12 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10. Error: (08/20/2015 07:09:12 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10. Error: (08/20/2015 07:06:10 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10. Microsoft Office: ========================= Error: (08/20/2015 06:51:59 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: ShellExperienceHost.exe10.0.10240.1642512c001d0db7067ea99f34294967295C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe225f5829-4764-11e5-bfbf-047d7bdfe0bdMicrosoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewyApp Error: (08/20/2015 06:51:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP) Description: Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy+App Error: (08/20/2015 06:51:41 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: SearchUI.exe10.0.10240.16425fe801d0db706a945fc64294967295C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe0fff0660-4764-11e5-bfbf-047d7bdfe0bdMicrosoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewyCortanaUI Error: (08/20/2015 06:51:18 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP) Description: Microsoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy+CortanaUI Error: (08/20/2015 03:54:21 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe11.0.10240.16412d4801d0db465938b8b5191C:\Program Files\Internet Explorer\iexplore.exe5629bcd3-474b-11e5-bfbe-047d7bdfe0bd Error: (08/20/2015 03:39:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol. System Error: Access is denied. Error: (08/20/2015 03:36:53 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol. System Error: Access is denied. Error: (08/20/2015 09:55:43 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe11.0.10240.16412a8c001d0db22eab31a6b467C:\Program Files\Internet Explorer\iexplore.exe3c3eb0cc-4719-11e5-bfbd-047d7bdfe0bd Error: (08/20/2015 09:30:47 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP) Description: Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen-2147023170 Error: (08/20/2015 12:46:17 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP) Description: Microsoft.Windows.Photos_8wekyb3d8bbwe!App-2147024865 ==================== Memory info =========================== Processor: AMD C-70 APU with Radeon HD Graphics Percentage of memory in use: 65% Total physical RAM: 1738.26 MB Available physical RAM: 604.5 MB Total Virtual: 3338.26 MB Available Virtual: 1941.25 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:281.84 GB) (Free:227.96 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 298.1 GB) (Disk ID: 06F459C2) Partition: GPT. ==================== End of log ============================ Quote
ExTS Admin Starbuck Posted August 21, 2015 ExTS Admin Posted August 21, 2015 (edited) Hi Slumdog, There's nothing malicious showing in the reports.... But there are some items we need to address. Also, Percentage of memory in use: 65% Total physical RAM: 1738.26 MB 2GB is the bare minimum for running Win10 64bit. Your graphics card is using some of it so as you see you are now down a bit on that. That's why you are using 65% of your Ram. As a rule of thumb.... we recommend that you run double what M$ say is the minimum. My 64bit systems run 4GB Ram. You can check how much Ram your system will take and what type you need, by following the instructions below. Go to http://www.crucial.com/uk/systemscanner/index.aspx 1. First, agree to the terms and conditions. 2. Click the "download the scanner" button, and choose "Save File" when prompted. 3. Save the file to your desktop, or anywhere you prefer. 4. Navigate to this saved CrucialScan.exe file and open. If you get a security warning, click "Run" to allow the download. 5. It will take several moments while your browser is updated with your scan results. When the report comes up it will tell you how much Ram memory is installed, how many modules,how many slots are used, how many are available, how much Ram memory can be installed and what type of memory you can install. Crucial will also give you a price for any recommended Ram upgrades, but you don't have to accept this. You are free to use their scanner and then buy your Ram chips from wherever you want. Let's clean out the orphan entries from the reports. Please download the attached fixlist.txt file (bottom of this post) and save it to the Desktop. NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Re-run FRST/FRST64 (which ever is installed ) and press the Fix button just once and wait. http://img.photobucket.com/albums/v708/starbuck50/frstfix_zps7db0c905.png The tool will make a log on the Desktop (Fixlog.txt). Please post this in your next reply. Thanksfixlist.txt Edited August 21, 2015 by Starbuck Quote Member of:UNITE
Slumdog Posted August 21, 2015 Author Posted August 21, 2015 If Microsoft had informed me of that while downloading Windows 10, that would of been helpful!!! Fix result of Farbar Recovery Scan Tool (x64) Version:21-08-2015Ran by Gary (2015-08-21 21:03:29) Run:1Running from C:\Users\Gary\DesktopLoaded Profiles: Gary (Available Profiles: Gary & fbwuser78A8 & fbwuser6386 & fbwuser2355)Boot Mode: Normal==============================================fixlist content:*****************ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No FileShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No FileShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No FileShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No FileShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No FileShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No FileShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No FileShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No FileShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No FileShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No FileHKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction {1323751E-0E23-4DC5-9FB9-0214B143E719} URL = FF Extension: No Name - C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Prof iles\wvym9axy.default\extensions\avg@toolbar [not found]S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]CustomCLSID: HKU\S-1-5-21-3562101447-2940579550-2573863169-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Gary\AppData\Local\Microsoft\OneDrive\17. 3.5907.0716\amd64\FileSyncShell64.dll No FileCustomCLSID: HKU\S-1-5-21-3562101447-2940579550-2573863169-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Gary\AppData\Local\Microsoft\OneDrive\17. 3.5907.0716\amd64\FileSyncShell64.dll No FileCustomCLSID: HKU\S-1-5-21-3562101447-2940579550-2573863169-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Gary\AppData\Local\Microsoft\OneDrive\17. 3.5907.0716\amd64\FileSyncShell64.dll No FileTask: {2E90265A-C554-43D1-9772-42B272513890} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File No File No File No File No File No File No File No File No File No File No File key removed successfullyHKCR\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2" => key removed successfullyHKCR\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => key not found. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3" => key removed successfullyHKCR\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => key not found. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4" => key removed successfullyHKCR\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5" => key removed successfullyHKCR\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found. "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1" => key removed successfullyHKCR\Wow6432Node\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found. "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2" => key removed successfullyHKCR\Wow6432Node\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => key not found. "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3" => key removed successfullyHKCR\Wow6432Node\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => key not found. "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4" => key removed successfullyHKCR\Wow6432Node\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found. "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5" => key removed successfullyHKCR\Wow6432Node\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found. "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully"HKU\S-1-5-21-3562101447-2940579550-2573863169-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfullyHKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1323751E-0E23-4DC5-9FB9-0214B143E719}" => key removed successfullyHKCR\CLSID\{1323751E-0E23-4DC5-9FB9-0214B143E719} => key not found. C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Prof iles\wvym9axy.default\extensions\avg@toolbar => not found.wfpcapture => service removed successfully"HKU\S-1-5-21-3562101447-2940579550-2573863169-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}" => key removed successfully"HKU\S-1-5-21-3562101447-2940579550-2573863169-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}" => key removed successfully"HKU\S-1-5-21-3562101447-2940579550-2573863169-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2E90265A-C554-43D1-9772-42B272513890}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E90265A-C554-43D1-9772-42B272513890}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{340CE2D1-E0CA-413C-BCC2-B278C35EB7DF}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{340CE2D1-E0CA-413C-BCC2-B278C35EB7DF}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44BDA504-DC4F-467E-82C5-5306E5BBC220}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44BDA504-DC4F-467E-82C5-5306E5BBC220}" => key removed successfullyHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandco ntent => key not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{46933D38-827F-4B5A-88BE-03A7D10BC6AE}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{46933D38-827F-4B5A-88BE-03A7D10BC6AE}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4983642F-6D1E-48D0-A55C-3882552086EA}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4983642F-6D1E-48D0-A55C-3882552086EA}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{70E049A8-97BD-4212-880E-A72067944B7C}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{70E049A8-97BD-4212-880E-A72067944B7C}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{79B3A80A-F24C-42E1-A733-C139312E075E}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{79B3A80A-F24C-42E1-A733-C139312E075E}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C1D4A62B-49A3-46ED-A5C5-8178230105B9}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C1D4A62B-49A3-46ED-A5C5-8178230105B9}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C6F8419A-3498-4DB3-A113-C1DB9EC0A0BC}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6F8419A-3498-4DB3-A113-C1DB9EC0A0BC}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F488F9A0-8306-451E-BE2A-A54A85F6FD95}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F488F9A0-8306-451E-BE2A-A54A85F6FD95}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FB4208AF-8679-43BC-AAB0-30521E642AD0}" => key removed successfully"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FB4208AF-8679-43BC-AAB0-30521E642AD0}" => key removed successfullyHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxcon fig-B => key not found. ========= ipconfig /flushdns =========Windows IP ConfigurationSuccessfully flushed the DNS Resolver Cache.========= End of CMD: =========C:\Windows\System32\Drivers\etc\hosts => moved successfullyHosts restored successfully.EmptyTemp: => 195.4 MB temporary data Removed.The system needed a reboot.. ==== End of Fixlog 21:04:59 ==== Quote
ExTS Admin Starbuck Posted August 21, 2015 ExTS Admin Posted August 21, 2015 If Microsoft had informed me of that while downloading Windows 10, that would of been helpful! But then you may not have installed Win10 ..... and M$ want it on as many systems as possible. What did the crucial scan advise as the max Ram? Like i said earlier, 4GB would be enough.... unless you're a gamer, then the more the better. Has the fix made any difference to the system? Quote Member of:UNITE
Slumdog Posted August 21, 2015 Author Posted August 21, 2015 [ATTACH=CONFIG]1460.vB5-legacyid=2547[/ATTACH]Has the fix made any difference to the system? .................not really, it took about two minutes just to get here, to let me write something! I don't really understand what the crucial scan is telling me, sorry. I attached a screenshot. Quote
Slumdog Posted August 21, 2015 Author Posted August 21, 2015 After having a surf around, yes it has speeded up somewhat. Thanks for that! Quote
ExTS Admin Starbuck Posted August 22, 2015 ExTS Admin Posted August 22, 2015 Hi, Sorry the screen shot is too small to be able to make out everything clearly.... can you take a bigger shot. I tend to use the 'Snipping Tool' instead of a whole screen shot. I don't really understand what the crucial scan is telling me, This is a screenshot of my Crucial scan. http://img.photobucket.com/albums/v708/starbuck50/crucial_zpsgmbzachq.png The 2 main parts I've marked in Red. Left side tells me that I have 2 slots available, but only running 4GB Ram chip in the first slot. This means I can still add another Ram chip without removing the first one.... but I can only add up to another 4GB. It also tells me that my system will handle up to a max of 8GB Ram. Right hand side shows the type of chip I need to buy. .... DDR3 PC3-12800 Unbuffered NON-ECC 1.35V 512Meg x 62 I would just copy/paste this Ram type into an Ebay search to find the Ram chips available. Something in the back of my mind suddenly clicked and I looked into your earlier problem: And now I am getting a green screen when trying to watch videos. Sometimes it is totally green, other times it has vertical lines running down it. Sometimes there is commentary, sometimes not, sometimes broken commentary. A few people seem to have this problem when using M$ Edge as the default browser. ( that's because it's not really finished yet and there's an incompatibility with the graphics drivers) Your Win10 will still have a copy of IE on it.... try using that instead of Edge. Start >> All Apps >> Windows Accessories >> Internet Explorer. If you still get a green screen when using IE... try running IE with accelerated graphics turned off. From IE, click on the Gear Wheel icon (Tools) >> Internet Options >> Advanced Tab >> Accelerated graphics option is at the top. Untick this a, click Apply >> OK and then reboot the system. or try surfing with Firefox or Chrome. Quote Member of:UNITE
Slumdog Posted August 22, 2015 Author Posted August 22, 2015 It says Slots:1 (1 bank of 1) *Not to exceed manufacturer supported memory. 2GB Storage: SATA 3 - 6Gb/s 18% 82% Free (302625320960 Total Storage) And on the right........... 1GB DDR3 PC3-12800 Unbuffered NON-ECC 1.35V CT4126833 DDR3 PC3-12800 • CL=11 • Unbuffered • NON-ECC • DDR3-1600 • 1.35V • upgrade for Acer Aspire V5-121 system. £11.99 inc. VAT* qty add to cart 4GB DDR3 PC3-14900 Unbuffered NON-ECC 1.35V I noticed Edge was installed but I do not use it. I have tried "try running IE with accelerated graphics turned off." It didn't make any difference so I turned it back on. Oh, and this morning, I am only getting a black screen, not even a green screen! If I have Chrome and IE open at he same time, will that also slow things down? Quote
ExTS Admin Starbuck Posted August 22, 2015 ExTS Admin Posted August 22, 2015 It says Slots:1 (1 bank of 1) *Not to exceed manufacturer supported memory. 2GB So it looks like you are stuck with the 2GB of Ram then. Oh, and this morning, I am only getting a black screen, not even a green screen! M$ should push out some new drivers in the Windows Updates... eventually. If I have Chrome and IE open at he same time, will that also slow things down? It may do, depends how many tabs are open on each. Quote Member of:UNITE
Slumdog Posted August 22, 2015 Author Posted August 22, 2015 Is it possible to get rid of Win10 then and go back to previous, or is that a waste of time? Quote
ExTS Admin Starbuck Posted August 22, 2015 ExTS Admin Posted August 22, 2015 If you are having problems that you didn't have before installing Win10..... yes, by all means roll it back to the previously installed version of Windows. I do know a few people that have done this when encountering problems. You can always re-install Win10 at a later date if you so want. ( the upgrade will still be free until next July ) This is the link to a tutorial I posted which will explain exactly how to go back to your old version of Windows. This roll back feature will only work for 30 days since the upgrade. ( some have said that it may in some cases be a little less) So if you are going to do it, don't wait too long. How to Rollback to a previous version of Windows from Windows 10 Quote Member of:UNITE
Slumdog Posted August 22, 2015 Author Posted August 22, 2015 Thanks Starbuck, I'll give that a go. Can I ask a question on this thread about connecting to outside Wi-Fi or shall I start another one? Quote
ExTS Admin Starbuck Posted August 22, 2015 ExTS Admin Posted August 22, 2015 This thread is not tied to the Malware Removal forum rules.... so anyone can reply here. You can ask here and if I can't help I can always split the post away to it's own thread so that you get more replies. Quote Member of:UNITE
ExTS Admin Starbuck Posted August 22, 2015 ExTS Admin Posted August 22, 2015 Have split your question post away to it's own thread. Not a simple solution and it's really not in my field of expertise. If you need the link for the new thread: http://extremetechsupport.com/threads/16959-Laptop-says-Limited-Connection?p=112295#post112295 Quote Member of:UNITE
Slumdog Posted August 22, 2015 Author Posted August 22, 2015 Thanks Starbuck. I have gone back to Win8.1. now, can I run that FRST64 on here now? Quote
ExTS Admin Starbuck Posted August 22, 2015 ExTS Admin Posted August 22, 2015 Yes you can do. It'll work on any 64bit version of windows. Quote Member of:UNITE
Slumdog Posted August 22, 2015 Author Posted August 22, 2015 Thanks again for your help, WIN8 is flying now!!! Quote
ExTS Admin Starbuck Posted August 22, 2015 ExTS Admin Posted August 22, 2015 Glad to hear that. Win10 isn't for every system.... But at least you gave it a try. Quote Member of:UNITE
Slumdog Posted August 22, 2015 Author Posted August 22, 2015 I liked it, but didn't realise it took up so much space! I have told MS my feelings about that!!! Cheers. Quote
Plastic Nev Posted August 23, 2015 Posted August 23, 2015 Hi, having looked at the Crucial scan report, you can take out that single 2GB and fit a 4GB module in its place if you wanted that bit more speed. Nev. Quote Need help with your computer problems? Then why not join Free PC Help. Register here If Free PC Help has helped you then please consider a donation. Click here We are all members helping other members.Please return here where you may be able to help someone else. After all, no one knows everything and you may have the answer that someone needs. --------------------------------------------------------------------I have installed Windows, now how do I install the curtains? :Dhttp://i7.photobucket.com/albums/y282/plasticpig/Nev2.gif
Slumdog Posted August 23, 2015 Author Posted August 23, 2015 Thanks Nev. I wouldn't know where to start with that!!! It seems to be working ok now so I'll just carry on. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.