Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:16-08-2014 03 Ran by [removed] (administrator) on KAREN-PC on 17-08-2014 08:11:53 Running from C:\Users\[removed]\Downloads Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: English (United States) Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Emsisoft GmbH) C:\Program Files\Online Armor\oacat.exe (Emsisoft GmbH) C:\Program Files\Online Armor\oasrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Storage Appliance Corp.) C:\ProgramData\Clickfree\FullImagingBackup\FibUac.exe (Foxit Corporation) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe () C:\ProgramData\Clickfree\FullImagingBackup\FullImagingService.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Emsisoft GmbH) C:\Program Files\Online Armor\oaui.exe (Storage Appliance Corp.) C:\ProgramData\Clickfree\cfagent.exe (Emsisoft GmbH) C:\Program Files\Online Armor\oahlp.exe () C:\Program Files\Ditto\Ditto.exe (Storage Appliance Corp.) C:\ProgramData\Clickfree\FullImagingBackup\FibReminder.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Zhorn Software) C:\Program Files\Stickies\stickies.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Siber Systems) C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Farbar) C:\Users\Karen\Downloads\FRST(1).exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-3499379357-965745774-4099936827-1001\...\Run: [ClickfreeMonitor] => c:\programdata\Clickfree\cfagent.exe [354632 2013-11-28] (Storage Appliance Corp.) HKU\S-1-5-21-3499379357-965745774-4099936827-1001\...\Run: [Ditto] => C:\Program Files\Ditto\Ditto.exe [1433200 2012-11-08] () HKU\S-1-5-21-3499379357-965745774-4099936827-1001\...\Run: [FibReminder] => c:\programdata\Clickfree\FullImagingBackup\FibReminder.exe [3634504 2013-11-28] (Storage Appliance Corp.) HKU\S-1-5-21-3499379357-965745774-4099936827-1001\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-3499379357-965745774-4099936827-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\S-1-5-21-3499379357-965745774-4099936827-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 Startup: C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP Photosmart 6520 series (Copy 1).lnk ShortcutTarget: Monitor Ink Alerts - HP Photosmart 6520 series (Copy 1).lnk -> C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.) Startup: C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP Photosmart 6520 series.lnk ShortcutTarget: Monitor Ink Alerts - HP Photosmart 6520 series.lnk -> C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.) Startup: C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stickies.lnk ShortcutTarget: Stickies.lnk -> C:\Program Files\Stickies\stickies.exe (Zhorn Software) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) GroupPolicyUsers\S-1-5-21-3499379357-965745774-4099936827-1094\User: Group Policy restriction detected <======= ATTENTION GroupPolicyUsers\S-1-5-21-3499379357-965745774-4099936827-1093\User: Group Policy restriction detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.com?fr=hp-avast&type=avastbcl SearchScopes: HKLM - {37629e8f-fa4e-4cef-8ad3-0dbd2eb0dcff} URL = http://search.tb.ask.com/search/GGmain.jhtml?p2=^ASP^xdm002^YYA^us&si=CLK5xMvQlLkCFQ9dQgodz3cAFg&ptb=815B7B60-2C24-4527-8A51-42FB0B5384C0&ind=2013082617&n=77fd33f9&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKLM - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKLM - {acbd5593-e5ee-4c15-b48f-1823ce819dec} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^ZU^xdm458^YY^us&si=CLiTvJPfjLgCFaU5QgodyyUABQ&ptb=C2EB8D21-DBC9-4E2B-AD37-997098EB8D54&ind=2013063017&n=77fce769&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKCU - 0C5BE7CDEBD8478EB78EFB6B2F64CE48 URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutDtDtCzy0DtCyCtAtBtByByDyBzyyByCtN0D0Tzu0SyBtDtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1312760932&ir= SearchScopes: HKCU - {1008B60E-E2C8-4812-8C71-A9937E768851} URL = https://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {37629e8f-fa4e-4cef-8ad3-0dbd2eb0dcff} URL = SearchScopes: HKCU - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKCU - {acbd5593-e5ee-4c15-b48f-1823ce819dec} URL = SearchScopes: HKCU - {EAAF677B-51E4-41EE-AB3C-B2C434150565} URL = https://duckduckgo.com/?q={searchTerms} SearchScopes: HKCU - {F8617D6F-0B6E-4662-A20A-79019EAEF9B1} URL = http://www.youtube.com/results?search_query={searchTerms} BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.) Toolbar: HKCU - &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.) Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File ShellExecuteHooks: OA Shell Helper - {4F07DA45-8170-4859-9B5F-037EF2970034} - C:\Program Files\Online Armor\oaevent.dll [1033968 2013-10-11] (Emsisoft GmbH) ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [113024 2011-07-18] (SuperAdBlocker.com) Tcpip\Parameters: [DhcpNameServer] [removed] [removed] [removed] FireFox: ======== FF ProfilePath: C:\Users\Karen\AppData\Roaming\Mozilla\Firefox\Profiles\pz3xfuyv.default FF SearchEngineOrder.1: Yahoo! (Avast) FF Homepage: about:home FF Keyword.URL: https://search.yahoo.com/yhs/search FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_179.dll () FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1212152.dll (Adobe Systems, Inc.) FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF SearchPlugin: C:\Users\Karen\AppData\Roaming\Mozilla\Firefox\Profiles\pz3xfuyv.default\searchplugins\yahoo-avast.xml FF Extension: ColorfulTabs - C:\Users\Karen\AppData\Roaming\Mozilla\Firefox\Profiles\pz3xfuyv.default\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-08-07] FF Extension: Clear Console - C:\Users\Karen\AppData\Roaming\Mozilla\Firefox\Profiles\pz3xfuyv.default\Extensions\[removed] [2014-08-07] FF Extension: Tube Enhancer Plus - C:\Users\Karen\AppData\Roaming\Mozilla\Firefox\Profiles\pz3xfuyv.default\Extensions\[removed] [2014-08-07] FF Extension: Adblock Plus - C:\Users\Karen\AppData\Roaming\Mozilla\Firefox\Profiles\pz3xfuyv.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-07] FF HKLM\...\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-09] FF HKLM\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files\Siber Systems\AI RoboForm\Firefox FF Extension: RoboForm Toolbar for Firefox - C:\Program Files\Siber Systems\AI RoboForm\Firefox [2013-11-10] FF HKCU\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files\Siber Systems\AI RoboForm\Firefox Chrome: ======= CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-09] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S4 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [116608 2012-07-11] (SUPERAntiSpyware.com) [File not signed] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-09] (AVAST Software) S4 Diskeeper; C:\Program Files\Condusiv Technologies\Diskeeper\DkService.exe [2163064 2012-07-27] (Condusiv Technologies) R2 FibUacService; C:\ProgramData\Clickfree\FullImagingBackup\FibUac.exe [37192 2013-11-28] (Storage Appliance Corp.) R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [241728 2014-03-11] (Foxit Corporation) R2 FullImagingService; C:\programdata\Clickfree\FullImagingBackup\FullImagingService.exe [235848 2013-11-28] () S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [108032 2014-07-25] (Microsoft Corporation) [File not signed] R2 Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [133888 2013-07-30] (Intel Corporation) R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 OAcat; C:\Program Files\Online Armor\OAcat.exe [584864 2013-10-11] (Emsisoft GmbH) R2 SvcOnlineArmor; C:\Program Files\Online Armor\oasrv.exe [4457688 2013-10-11] (Emsisoft GmbH) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-08-09] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-08-09] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-08-09] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-08-09] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-08-09] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-08-15] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-08-09] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-08-09] () R0 DKDFM; C:\Windows\System32\drivers\DKDFM.sys [35120 2012-04-05] (Condusiv Technologies) S3 DKRtWrt; C:\Windows\System32\DRIVERS\DKRtWrt.sys [44496 2012-06-18] (Condusiv Technologies) R0 DKTLFSMF; C:\Windows\System32\drivers\DKTLFSMF.sys [85328 2012-07-09] (Condusiv Technologies) R3 e1express; C:\Windows\System32\DRIVERS\e1e6232.sys [219352 2009-06-05] (Intel Corporation) R0 iaStorA; C:\Windows\System32\drivers\iaStorA.sys [526392 2012-11-19] (Intel Corporation) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [25656 2012-11-19] (Intel Corporation) R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [74456 2014-05-12] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation) S3 NAL; C:\Windows\system32\Drivers\iqvw32.sys [31048 2013-08-12] (Intel Corporation ) R1 OADevice; C:\Windows\system32\drivers\OADriver.sys [210360 2013-10-11] () R1 oahlpXX; C:\Windows\system32\drivers\oahlp32.sys [44984 2013-10-11] () R1 OAmon; C:\Windows\system32\drivers\OAmon.sys [34856 2013-10-11] (Emsisoft) R3 OAnet; C:\Windows\System32\DRIVERS\oanet.sys [31760 2013-10-11] (Emsisoft) S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [14848 2012-08-23] (Microsoft Corporation) [File not signed] R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) S3 STHDA; C:\Windows\System32\DRIVERS\stwrt.sys [444928 1999-12-31] (IDT, Inc.) [File not signed] S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2014-08-16] () ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-17 08:11 - 2014-08-17 08:12 - 00016246 _____ () C:\Users\Karen\Downloads\FRST.txt 2014-08-17 08:11 - 2014-08-17 08:12 - 00000000 ____D () C:\FRST 2014-08-17 08:11 - 2014-08-17 08:11 - 01093632 _____ (Farbar) C:\Users\Karen\Downloads\FRST(1).exe 2014-08-17 08:07 - 2014-08-17 08:07 - 00006479 _____ () C:\Users\Karen\AdwCleaner[S3].txt 2014-08-17 08:02 - 2014-08-17 08:02 - 00844904 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-17 08:02 - 2014-08-17 08:02 - 00001382 _____ () C:\Windows\setupact.log 2014-08-17 08:02 - 2014-08-17 08:02 - 00000306 _____ () C:\Windows\PFRO.log 2014-08-17 08:02 - 2014-08-17 08:02 - 00000000 _____ () C:\Windows\setuperr.log 2014-08-17 07:14 - 2014-08-17 07:14 - 01093632 _____ (Farbar) C:\Users\Karen\Downloads\FRST.exe 2014-08-17 07:13 - 2014-08-17 07:13 - 02101760 _____ (Farbar) C:\Users\Karen\Downloads\FRST64.exe 2014-08-17 07:12 - 2014-08-17 07:12 - 01361671 _____ () C:\Users\Karen\Downloads\adwcleaner_3.307.exe 2014-08-17 07:09 - 2014-08-17 07:09 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-KAREN-PC-Microsoft-Windows-7-Home-Premium-(32-bit).dat 2014-08-17 07:07 - 2014-08-17 07:07 - 00000000 ____D () C:\RegBackup 2014-08-17 07:06 - 2014-08-17 07:06 - 00002181 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk 2014-08-17 07:06 - 2014-08-17 07:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com 2014-08-17 07:06 - 2014-08-17 07:06 - 00000000 ____D () C:\Program Files\Tweaking.com 2014-08-17 07:05 - 2014-08-17 07:05 - 04057608 _____ () C:\Users\Karen\Downloads\tweaking.com_registry_backup_setup.exe 2014-08-17 07:01 - 2014-08-17 07:01 - 00270824 _____ () C:\Users\Karen\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-17 06:58 - 2014-08-17 06:58 - 00170076 _____ () C:\Users\Karen\Documents\cc_20140817_065830.reg 2014-08-17 05:21 - 2014-07-31 23:42 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-08-17 05:00 - 2012-02-11 01:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-08-17 05:00 - 2011-03-11 01:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2014-08-17 05:00 - 2011-03-11 01:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2014-08-17 05:00 - 2011-03-11 01:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2014-08-17 05:00 - 2011-03-11 01:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2014-08-17 05:00 - 2011-03-11 01:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2014-08-17 05:00 - 2011-03-11 01:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2014-08-17 05:00 - 2011-03-11 01:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2014-08-17 05:00 - 2011-03-11 00:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-08-17 05:00 - 2011-02-25 01:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-08-17 03:22 - 2012-07-25 23:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-08-17 03:22 - 2012-07-25 23:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-08-17 03:22 - 2012-07-25 23:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-08-17 03:22 - 2012-07-25 23:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-08-17 03:22 - 2012-07-25 23:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-08-17 03:22 - 2012-07-25 22:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-08-17 03:22 - 2012-07-25 22:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-08-17 03:22 - 2012-06-02 10:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-08-17 03:21 - 2014-06-30 18:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-08-17 03:21 - 2014-06-06 02:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-08-17 03:21 - 2014-03-09 17:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-08-17 03:21 - 2014-03-09 17:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-08-17 03:20 - 2012-03-01 01:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-08-17 03:20 - 2012-03-01 01:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-08-17 03:10 - 2013-05-10 00:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-08-17 03:10 - 2013-05-10 00:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-08-16 20:29 - 2014-08-16 20:29 - 00688992 ____R (Swearware) C:\Users\Karen\Downloads\dds.scr 2014-08-16 20:07 - 2014-08-16 20:07 - 00000000 ____D () C:\Users\Jeff\Documents\My RoboForm Data 2014-08-16 20:02 - 2014-08-16 20:02 - 16658872 _____ (Siber Systems) C:\Users\Jeff\Downloads\RoboForm-Setup(2).exe 2014-08-16 19:59 - 2014-08-16 19:59 - 00270824 _____ () C:\Users\Jeff\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-16 19:59 - 2014-08-16 19:59 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\Intel Corporation 2014-08-16 19:58 - 2014-08-16 19:58 - 00001413 _____ () C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-16 19:58 - 2014-08-16 19:58 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\OnlineArmor 2014-08-16 19:58 - 2014-08-16 19:58 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\AVAST Software 2014-08-16 19:58 - 2014-08-16 19:58 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\Adobe 2014-08-16 19:57 - 2014-08-16 19:57 - 00000902 __RSH () C:\Users\Jeff\ntuser.pol 2014-08-16 19:57 - 2014-08-16 19:57 - 00000020 ___SH () C:\Users\Jeff\ntuser.ini 2014-08-16 19:57 - 2014-08-16 19:57 - 00000000 ____D () C:\Users\Jeff\AppData\Local\VirtualStore 2014-08-16 03:33 - 2013-10-03 21:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-08-16 03:33 - 2013-10-03 21:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-08-16 03:33 - 2013-09-07 22:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-08-16 03:33 - 2013-07-09 00:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-08-16 03:33 - 2013-07-04 07:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-08-16 03:33 - 2013-07-03 00:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2014-08-16 03:33 - 2013-07-02 23:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-08-16 03:33 - 2013-07-02 23:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-08-16 03:33 - 2012-08-22 13:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-08-16 03:33 - 2012-07-04 15:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2014-08-16 03:32 - 2013-10-29 22:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-08-16 03:32 - 2013-02-11 23:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-08-16 03:32 - 2012-11-02 01:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-08-16 03:32 - 2011-06-16 00:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2014-08-16 03:32 - 2011-04-28 22:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-08-16 03:32 - 2011-04-28 22:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-08-16 03:32 - 2011-04-28 22:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-08-16 03:32 - 2011-02-18 01:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2014-08-16 03:31 - 2014-07-29 05:33 - 01265664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-08-16 03:31 - 2014-07-29 05:33 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-08-16 03:31 - 2014-07-29 05:33 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-08-16 03:31 - 2014-07-29 05:32 - 11018240 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-08-16 03:31 - 2014-07-29 05:32 - 06046720 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-08-16 03:31 - 2014-07-29 05:32 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-08-16 03:31 - 2014-07-29 05:32 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-08-16 03:31 - 2014-07-29 05:32 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-08-16 03:31 - 2014-07-29 05:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-08-16 03:31 - 2014-07-29 05:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-08-16 03:31 - 2014-07-29 05:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-08-16 03:31 - 2014-07-29 05:32 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-08-16 03:31 - 2014-07-29 05:32 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-08-16 03:31 - 2014-07-29 05:31 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-08-16 03:31 - 2014-07-29 05:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-08-16 03:31 - 2014-07-29 05:31 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-08-16 03:31 - 2014-07-29 05:30 - 01466368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-08-16 03:31 - 2014-07-29 02:15 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-08-16 03:31 - 2014-07-13 21:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-08-16 03:31 - 2014-06-15 21:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-08-16 03:31 - 2014-06-15 21:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-08-16 03:31 - 2014-06-15 21:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-08-16 03:31 - 2014-03-26 10:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-08-16 03:31 - 2014-03-26 10:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-08-16 03:31 - 2014-03-26 10:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-08-16 03:31 - 2014-03-26 10:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-08-16 03:31 - 2014-03-04 05:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2014-08-16 03:31 - 2014-03-04 05:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-08-16 03:31 - 2014-03-04 05:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-08-16 03:31 - 2014-03-04 05:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-08-16 03:31 - 2014-03-04 05:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-08-16 03:31 - 2014-03-04 05:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-08-16 03:31 - 2014-03-04 05:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-08-16 03:31 - 2014-03-04 05:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-08-16 03:31 - 2014-03-04 05:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-08-16 03:31 - 2014-03-04 05:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-08-16 03:31 - 2014-03-04 05:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-08-16 03:31 - 2013-12-31 19:05 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-08-16 03:31 - 2013-10-18 21:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-08-16 03:31 - 2013-10-11 22:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-08-16 03:31 - 2013-10-11 22:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-08-16 03:31 - 2013-10-11 21:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-08-16 03:31 - 2013-10-11 21:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-08-16 03:31 - 2013-08-27 04:21 - 01077760 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-08-16 03:31 - 2013-08-27 04:21 - 00808448 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-08-16 03:31 - 2013-01-24 00:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-08-16 03:31 - 2012-08-21 16:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2014-08-16 03:31 - 2012-04-27 23:17 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-08-16 03:31 - 2011-12-30 01:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2014-08-16 03:31 - 2011-08-17 00:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2014-08-16 03:31 - 2011-08-17 00:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2014-08-16 03:31 - 2011-03-03 01:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2014-08-16 03:31 - 2011-03-03 01:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2014-08-16 03:31 - 2011-03-03 01:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2014-08-16 03:30 - 2014-02-03 22:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-08-16 03:30 - 2014-02-03 22:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-08-16 03:30 - 2014-02-03 22:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-08-16 03:30 - 2014-02-03 22:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-08-16 03:30 - 2014-01-27 22:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-08-16 03:30 - 2013-12-09 22:02 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-08-16 03:30 - 2013-08-28 21:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-08-16 03:30 - 2013-08-28 21:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-08-16 03:30 - 2013-08-28 21:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-08-16 03:30 - 2013-08-27 20:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-08-16 03:30 - 2013-07-20 06:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-08-16 03:30 - 2013-06-06 00:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2014-08-16 03:30 - 2013-06-06 00:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-08-16 03:30 - 2013-06-06 00:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2014-08-16 03:30 - 2013-06-05 23:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-08-16 03:30 - 2013-06-05 23:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-08-16 03:30 - 2013-05-12 23:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2014-08-16 03:30 - 2013-05-12 23:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2014-08-16 03:30 - 2013-05-09 23:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2014-08-16 03:30 - 2013-04-26 00:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-08-16 03:30 - 2013-03-19 00:48 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-08-16 03:30 - 2013-03-18 23:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2014-08-16 03:30 - 2013-03-18 22:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-08-16 03:30 - 2013-02-15 00:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-08-16 03:30 - 2013-02-15 00:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2014-08-16 03:30 - 2013-02-14 23:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-08-16 03:30 - 2012-10-03 12:42 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2014-08-16 03:30 - 2012-10-03 12:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2014-08-16 03:30 - 2012-10-03 12:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2014-08-16 03:30 - 2012-10-03 12:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2014-08-16 03:30 - 2012-10-03 12:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2014-08-16 03:30 - 2012-10-03 12:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-08-16 03:30 - 2012-10-03 11:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2014-08-16 03:30 - 2011-08-27 00:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-08-16 03:30 - 2011-08-27 00:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2014-08-16 03:30 - 2011-07-08 22:30 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2014-08-16 03:30 - 2011-05-24 06:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2014-08-16 03:30 - 2011-05-03 00:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2014-08-16 03:30 - 2011-04-26 22:17 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-08-16 03:30 - 2011-04-26 22:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-08-16 03:29 - 2014-07-15 22:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-08-16 03:29 - 2014-06-17 21:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-08-16 03:29 - 2014-06-17 20:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-16 03:29 - 2012-07-04 17:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2014-08-16 03:29 - 2012-07-04 17:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2014-08-16 03:29 - 2012-07-04 17:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2014-08-16 03:29 - 2012-06-06 01:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2014-08-16 03:29 - 2012-05-05 03:46 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-08-16 03:29 - 2012-04-17 00:34 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-08-16 03:29 - 2011-11-19 10:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-08-16 03:29 - 2011-10-15 01:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2014-08-16 03:29 - 2011-05-04 00:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-08-16 03:29 - 2011-05-04 00:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-08-16 03:29 - 2011-05-04 00:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-08-16 03:29 - 2011-05-04 00:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-08-16 03:29 - 2011-05-04 00:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2014-08-16 03:29 - 2011-05-04 00:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2014-08-16 03:29 - 2011-05-04 00:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-08-16 03:29 - 2011-05-04 00:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-08-16 03:29 - 2011-05-04 00:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-08-16 03:29 - 2011-02-12 01:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2014-08-16 03:28 - 2014-06-06 05:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-08-16 03:28 - 2014-06-03 05:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-08-16 03:28 - 2014-06-03 05:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-08-16 03:28 - 2014-06-03 05:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-08-16 03:28 - 2014-06-03 05:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-08-16 03:28 - 2014-05-30 02:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-08-16 03:28 - 2014-04-04 22:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-08-16 03:28 - 2014-04-04 22:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-08-16 03:28 - 2014-01-23 22:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-08-16 03:28 - 2013-11-26 07:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-08-16 03:28 - 2013-10-03 21:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-08-16 03:28 - 2013-10-03 21:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-08-16 03:28 - 2013-07-25 04:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-08-16 03:28 - 2012-12-07 08:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-08-16 03:28 - 2012-12-07 08:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-08-16 03:28 - 2012-12-07 06:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-08-16 03:28 - 2012-12-07 06:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-08-16 03:28 - 2011-10-26 00:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2014-08-16 03:28 - 2011-10-26 00:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-08-16 03:28 - 2010-12-23 01:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2014-08-16 03:28 - 2010-12-23 01:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2014-08-16 03:28 - 2010-12-23 01:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2014-08-16 03:27 - 2014-08-06 21:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-16 03:27 - 2014-08-06 21:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-16 03:27 - 2014-05-30 03:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-08-16 03:27 - 2014-05-30 03:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-08-16 03:27 - 2014-05-30 03:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-08-16 03:27 - 2014-05-30 03:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-08-16 03:27 - 2014-05-30 03:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-08-16 03:27 - 2014-05-30 03:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-08-16 03:27 - 2014-05-30 03:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-08-16 03:27 - 2013-10-11 22:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-08-16 03:27 - 2013-10-11 22:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-08-16 03:27 - 2013-10-11 22:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-08-16 03:27 - 2013-10-02 21:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-16 03:27 - 2013-08-04 21:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-08-16 03:27 - 2013-07-25 21:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-08-16 03:27 - 2013-07-04 07:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-08-16 03:27 - 2013-07-04 07:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-08-16 03:27 - 2013-07-04 05:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-08-16 03:27 - 2012-09-25 18:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-08-16 03:27 - 2012-05-01 00:44 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-08-16 03:27 - 2012-04-26 00:45 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-08-16 03:27 - 2012-04-26 00:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2014-08-16 03:27 - 2012-04-26 00:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2014-08-16 03:27 - 2012-03-17 03:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2014-08-16 03:27 - 2011-12-16 03:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2014-08-16 03:27 - 2011-11-17 01:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2014-08-16 03:27 - 2011-06-15 04:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll 2014-08-16 03:27 - 2011-06-15 04:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2014-08-16 03:27 - 2011-06-15 04:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2014-08-16 03:27 - 2011-06-15 04:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2014-08-16 03:27 - 2011-06-15 04:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2014-08-16 03:26 - 2014-04-24 22:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-08-16 03:26 - 2014-03-04 05:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-08-16 03:26 - 2014-01-28 22:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-08-16 03:26 - 2013-10-05 15:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-08-16 03:26 - 2013-08-01 21:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 20:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-08-16 03:26 - 2013-08-01 20:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 20:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 20:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-08-16 03:26 - 2013-08-01 20:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-08-16 03:26 - 2013-07-12 06:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-08-16 03:26 - 2013-07-09 00:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-08-16 03:26 - 2013-07-09 00:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-08-16 03:26 - 2013-06-25 18:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-08-16 03:26 - 2012-11-28 18:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-08-16 03:26 - 2012-11-28 18:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2014-08-16 03:26 - 2012-11-28 18:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2014-08-16 03:26 - 2012-11-22 22:48 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2014-08-16 03:26 - 2012-10-09 13:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2014-08-16 03:26 - 2012-10-09 13:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2014-08-16 03:26 - 2012-05-14 00:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-08-16 03:26 - 2012-01-04 04:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2014-08-16 03:26 - 2011-03-11 01:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2014-08-16 03:26 - 2011-03-11 01:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2014-08-16 03:26 - 2011-02-23 00:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2014-08-16 03:25 - 2011-04-09 01:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-08-16 03:12 - 2014-06-24 21:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-08-16 03:12 - 2013-12-03 22:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-08-16 03:12 - 2013-12-03 22:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-08-16 03:12 - 2013-12-03 22:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-08-16 03:12 - 2013-12-03 22:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-08-16 03:12 - 2013-12-03 22:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-08-16 03:12 - 2013-12-03 21:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-08-16 03:12 - 2013-12-03 21:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-08-16 03:12 - 2013-12-03 21:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-08-16 03:12 - 2013-12-03 21:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-08-16 03:12 - 2013-11-26 21:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-08-16 03:12 - 2013-11-26 21:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-08-16 03:12 - 2013-11-26 21:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-08-16 03:12 - 2013-11-26 21:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-08-16 03:12 - 2013-11-26 21:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-08-16 03:12 - 2013-11-26 21:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-08-16 03:12 - 2013-06-14 23:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-08-16 03:11 - 2014-06-05 10:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-08-16 03:11 - 2014-04-11 22:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-08-16 03:11 - 2014-04-11 22:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-08-16 03:11 - 2014-04-11 22:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-08-16 03:11 - 2014-04-11 22:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-08-16 03:11 - 2014-04-11 22:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-08-16 03:11 - 2014-04-11 22:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-08-16 03:11 - 2013-07-04 08:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-08-16 03:11 - 2013-02-27 00:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-08-16 01:08 - 2014-08-17 06:57 - 00000000 ____D () C:\Windows\Panther 2014-08-16 01:03 - 2014-08-16 01:03 - 00262144 _____ () C:\Windows\system32\config\userdiff 2014-08-16 00:54 - 2014-08-15 21:38 - 00000000 ___HD () C:\$WINDOWS.~Q 2014-08-16 00:52 - 2014-08-16 00:53 - 00000000 ___HD () C:\$INPLACE.~TR 2014-08-15 22:32 - 2014-08-15 22:41 - 00000000 ____D () C:\ProgramData\OnlineArmor 2014-08-15 22:32 - 2014-08-15 22:32 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\OnlineArmor 2014-08-15 22:31 - 2014-08-17 04:49 - 00000000 ____D () C:\Program Files\Online Armor 2014-08-15 22:31 - 2014-08-15 22:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Armor 2014-08-15 22:31 - 2013-10-11 03:41 - 00044984 _____ () C:\Windows\system32\Drivers\oahlp32.sys 2014-08-15 22:31 - 2013-10-11 03:40 - 00210360 _____ () C:\Windows\system32\Drivers\OADriver.sys 2014-08-15 22:31 - 2013-10-11 03:40 - 00034856 _____ (Emsisoft) C:\Windows\system32\Drivers\OAmon.sys 2014-08-15 22:31 - 2013-10-11 03:40 - 00031760 _____ (Emsisoft) C:\Windows\system32\Drivers\OAnet.sys 2014-08-15 22:30 - 2014-08-15 22:30 - 10696960 _____ (Emsisoft GmbH ) C:\Users\Karen\Downloads\OnlineArmorSetup(1).exe 2014-08-15 22:14 - 2014-08-15 22:14 - 30185256 _____ (Emsisoft GmbH ) C:\Users\Karen\Downloads\OnlineArmorSetup.exe 2014-08-15 22:09 - 2014-08-15 22:09 - 04862664 _____ (AVAST Software) C:\Users\Karen\Downloads\avast_free_antivirus_setup_online(1).exe 2014-08-15 22:03 - 2014-08-17 04:39 - 00000452 _____ () C:\Windows\Tasks\DriverUpdate Daily Scan.job 2014-08-15 22:03 - 2014-08-15 22:38 - 00000448 _____ () C:\Windows\Tasks\DriverUpdate Scan.job 2014-08-15 21:53 - 2012-02-17 01:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-08-15 21:53 - 2012-02-17 00:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-08-15 21:51 - 2014-08-15 21:51 - 00001413 _____ () C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-15 21:50 - 2014-08-17 05:17 - 00000632 __RSH () C:\Users\Karen\ntuser.pol 2014-08-15 21:50 - 2014-08-15 21:50 - 00000020 ___SH () C:\Users\Karen\ntuser.ini 2014-08-15 21:43 - 2012-06-02 18:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-08-15 21:43 - 2012-06-02 18:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-08-15 21:43 - 2012-06-02 18:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-08-15 21:43 - 2012-06-02 18:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-08-15 21:43 - 2012-06-02 18:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-08-15 21:43 - 2012-06-02 18:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-08-15 21:43 - 2012-06-02 18:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-08-15 21:43 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-08-15 21:43 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-08-15 21:42 - 2014-08-17 08:07 - 01446950 _____ () C:\Windows\WindowsUpdate.log 2014-08-15 21:30 - 2014-08-15 21:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-08-15 21:30 - 2014-08-15 21:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-08-15 21:16 - 2014-08-15 21:29 - 00000000 ____D () C:\Users\seaside625 2014-08-15 21:16 - 2014-08-15 21:26 - 00000000 ____D () C:\Users\[removed] 2014-08-15 21:16 - 2009-07-14 00:42 - 00000000 ___RD () C:\Users\seaside625\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-15 21:16 - 2009-07-14 00:42 - 00000000 ___RD () C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-15 21:16 - 2009-07-14 00:42 - 00000000 ___RD () C:\Users\[removed]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-15 21:16 - 2009-07-14 00:37 - 00000000 ___RD () C:\Users\seaside625\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-15 21:16 - 2009-07-14 00:37 - 00000000 ___RD () C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-15 21:16 - 2009-07-14 00:37 - 00000000 ___RD () C:\Users\[removed]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-15 21:15 - 2014-08-16 19:57 - 00000000 ____D () C:\Users\Jeff 2014-08-15 21:15 - 2009-07-14 00:42 - 00000000 ___RD () C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-15 21:15 - 2009-07-14 00:37 - 00000000 ___RD () C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-15 21:14 - 2014-08-15 21:14 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2014-08-15 21:14 - 2014-08-15 21:14 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2014-08-15 21:14 - 2014-08-15 21:14 - 00000000 ____D () C:\Windows\system32\URTTEMP 2014-08-15 21:13 - 2014-08-15 21:20 - 00000000 ____D () C:\ProgramData\HP 2014-08-15 21:12 - 2014-08-15 21:12 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2014-08-15 21:12 - 2014-08-15 21:12 - 00000000 ____D () C:\Program Files\CONEXANT 2014-08-15 19:35 - 2014-08-15 19:35 - 00000000 ___SH () C:\DkHyperbootSync 2014-08-15 19:12 - 2014-07-25 09:03 - 00004096 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-08-15 19:12 - 2014-07-25 08:33 - 00051200 ____N (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-08-15 19:12 - 2014-07-25 08:30 - 00061952 ____N (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-08-15 19:12 - 2014-07-25 08:10 - 00108032 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-08-15 19:12 - 2014-07-25 08:08 - 00597504 ____N (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-08-15 19:12 - 2014-07-25 08:06 - 04204032 ____N (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-08-15 19:12 - 2014-07-25 07:59 - 00646144 ____N (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-08-15 19:12 - 2014-07-25 07:43 - 00060416 ____N (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-08-15 19:12 - 2014-07-25 07:07 - 01068032 ____N (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-08-15 13:03 - 2014-08-15 13:03 - 00000000 ____D () C:\Users\Karen\New folder (2) 2014-08-15 03:31 - 2014-08-15 21:28 - 00000000 ____D () C:\Users\Karen\Documents\[removed] 2014-08-15 03:31 - 2014-08-15 03:31 - 00000000 ____D () C:\Users\Karen\Documents\New folder (10) 2014-08-14 22:51 - 2014-08-15 21:21 - 00000000 ____D () C:\Users\TEMP\new song stevie nicks....I am the dealer 2014-08-14 22:46 - 2014-08-15 21:21 - 00000000 ____D () C:\Users\TEMP\cox.net 2014-08-14 08:11 - 2014-08-14 08:12 - 00000000 ____D () C:\Cher 2014-08-12 05:34 - 2014-08-12 05:34 - 00000000 ____D () C:\paul barnum 2014-08-11 18:16 - 2014-08-15 22:51 - 00000000 ____D () C:\VIPRERESCUE 2014-08-11 06:22 - 2014-08-15 21:28 - 00000000 ____D () C:\Users\Karen\Downloads\Pinterest_files 2014-08-11 06:22 - 2014-08-11 06:22 - 00064390 _____ () C:\Users\Karen\Downloads\Pinterest.htm 2014-08-11 05:36 - 2014-08-11 05:36 - 00000000 ____D () C:\Users\Karen\karen 2 2014-08-10 22:23 - 2014-08-10 22:23 - 00065536 _____ () C:\Windows\ocsetup_install_NetFx3.etl 2014-08-10 22:23 - 2014-08-10 22:23 - 00022723 _____ () C:\Windows\ocsetup_cbs_install_NetFx3.txt 2014-08-10 22:23 - 2014-08-10 22:23 - 00000000 ___HT () C:\Windows\ocsetup.lock 2014-08-10 09:11 - 2014-08-10 09:47 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\OpenDNS Updater 2014-08-09 21:52 - 2014-08-15 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader 2014-08-09 21:52 - 2014-08-09 21:52 - 00002058 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk 2014-08-09 21:40 - 2014-08-09 21:40 - 37448528 _____ (Foxit Corporation ) C:\Users\Karen\Downloads\FoxitReader622.0802_enu_Setup.exe 2014-08-09 21:12 - 2014-08-15 22:14 - 00002119 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-08-09 21:12 - 2014-08-15 21:27 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\AVAST Software 2014-08-09 21:12 - 2014-08-15 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast 2014-08-09 21:11 - 2014-08-15 22:14 - 00414520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00779536 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00276432 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-08-09 21:11 - 2014-08-09 21:11 - 00192352 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00071944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-08-09 21:11 - 2014-08-09 21:11 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-08-09 21:09 - 2014-08-15 21:18 - 00000000 ____D () C:\Program Files\AVAST Software 2014-08-09 20:55 - 2014-08-09 20:55 - 04862664 _____ (AVAST Software) C:\Users\Karen\Downloads\avast_free_antivirus_setup_online.exe 2014-08-09 18:57 - 2014-08-15 21:28 - 00000000 ____D () C:\Users\Karen\Downloads\Kits _ Kumihimo _ Prima Bead_files 2014-08-09 18:57 - 2014-08-09 18:57 - 00096554 _____ () C:\Users\Karen\Downloads\Kits _ Kumihimo _ Prima Bead.htm 2014-08-09 16:32 - 2014-08-09 16:32 - 01057672 _____ (Adobe) C:\Users\Karen\Downloads\install_reader11_en_mssa_aaa_aih.exe 2014-08-07 11:27 - 2014-08-15 21:20 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-08-07 11:27 - 2014-08-09 09:56 - 00001053 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-08-07 11:27 - 2014-08-09 09:56 - 00001053 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-08-07 11:25 - 2014-08-07 11:25 - 00244120 _____ () C:\Users\Karen\Downloads\Firefox Setup Stub 31.0.exe 2014-08-07 11:13 - 2014-08-07 11:13 - 00001596 _____ () C:\Users\Karen\Downloads\sg_backup_2014-08-07-1113.spg 2014-08-07 11:11 - 2014-08-07 11:11 - 00659456 _____ (Speed Guide Inc.) C:\Users\Karen\Downloads\TCPOptimizer (1).exe 2014-08-07 10:24 - 1999-12-31 20:00 - 04251648 _____ (IDT, Inc.) C:\Windows\system32\STLang.dll 2014-08-07 10:24 - 1999-12-31 20:00 - 00290898 _____ (IDT, Inc.) C:\Windows\system32\STacSV.exe 2014-08-07 10:23 - 2014-08-15 21:19 - 00000000 ____D () C:\Program Files\IDT 2014-08-07 10:23 - 1999-12-31 20:00 - 01278976 _____ (IDT, Inc.) C:\Windows\system32\stapo.dll 2014-08-07 10:23 - 1999-12-31 20:00 - 00444928 _____ (IDT, Inc.) C:\Windows\system32\Drivers\stwrt.sys 2014-08-07 10:23 - 1999-12-31 20:00 - 00417280 _____ (IDT, Inc.) C:\Windows\system32\stcplx.dll 2014-08-07 10:23 - 1999-12-31 20:00 - 00207360 _____ (IDT, Inc.) C:\Windows\system32\st326224.dll 2014-08-06 16:21 - 2014-08-15 21:20 - 00000000 ____D () C:\ProgramData\SlimWare Utilities, Inc 2014-08-06 16:15 - 2014-08-15 21:21 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers 2014-08-06 16:15 - 2014-08-15 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate 2014-08-06 16:15 - 2014-08-15 21:18 - 00000000 ____D () C:\Program Files\DriverUpdate 2014-08-06 16:13 - 2014-08-06 16:17 - 00945224 _____ (SlimWare Utilities, Inc.) C:\Users\Karen\Downloads\DriverUpdate-setup.exe 2014-08-05 19:10 - 2014-08-15 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-08-05 19:10 - 2014-08-15 21:18 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-08-05 19:10 - 2014-08-05 19:10 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-08-05 19:10 - 2014-08-05 19:10 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-08-05 19:10 - 2014-08-05 19:10 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-08-05 19:10 - 2014-08-05 19:10 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-08-03 09:26 - 2014-08-03 09:26 - 00012798 _____ () C:\Users\Karen\Documents\cc_20140803_092608.reg 2014-07-28 21:23 - 2014-07-28 21:23 - 00000000 ____D () C:\Users\Karen\Documents\Tatyana 2014-07-27 10:52 - 2014-07-27 13:35 - 142038140 _____ () C:\Windows\system32\C 2014-07-27 10:48 - 2014-08-15 21:26 - 00000000 ____D () C:\Users\Jeff\Downloads\RootkitRevealer 2014-07-23 04:45 - 2014-08-15 21:28 - 00000000 ____D () C:\Users\Karen\Downloads\Flirtlocal - Find people, socialize, hookup and chat_files 2014-07-23 04:45 - 2014-07-23 04:45 - 00021804 _____ () C:\Users\Karen\Downloads\Flirtlocal - Find people, socialize, hookup and chat.htm 2014-07-22 11:31 - 2014-08-15 21:26 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\Wise Disk Cleaner 2014-07-20 09:00 - 2014-07-20 09:00 - 00001452 _____ () C:\mwb stopped.txt 2014-07-19 19:39 - 2014-08-13 19:44 - 00102400 ___SH () C:\Users\Karen\Thumbs.db 2014-07-19 19:38 - 2014-08-13 23:47 - 00386048 ___SH () C:\Users\Karen\Documents\Thumbs.db 2014-07-19 19:30 - 2014-08-12 05:26 - 00326656 ___SH () C:\Users\Karen\Downloads\Thumbs.db 2014-07-18 11:10 - 2014-08-15 21:21 - 00000000 ____D () C:\Users\TEMP.Karen-PC ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-17 08:12 - 2014-08-17 08:11 - 00016246 _____ () C:\Users\Karen\Downloads\FRST.txt 2014-08-17 08:12 - 2014-08-17 08:11 - 00000000 ____D () C:\FRST 2014-08-17 08:11 - 2014-08-17 08:11 - 01093632 _____ (Farbar) C:\Users\Karen\Downloads\FRST(1).exe 2014-08-17 08:10 - 2009-07-14 00:34 - 00020496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-08-17 08:10 - 2009-07-14 00:34 - 00020496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-08-17 08:08 - 2013-02-07 11:39 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Ditto 2014-08-17 08:07 - 2014-08-17 08:07 - 00006479 _____ () C:\Users\Karen\AdwCleaner[S3].txt 2014-08-17 08:07 - 2014-08-15 21:42 - 01446950 _____ () C:\Windows\WindowsUpdate.log 2014-08-17 08:07 - 2010-11-20 17:01 - 00796398 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-08-17 08:03 - 2009-07-14 00:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-08-17 08:02 - 2014-08-17 08:02 - 00844904 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-17 08:02 - 2014-08-17 08:02 - 00001382 _____ () C:\Windows\setupact.log 2014-08-17 08:02 - 2014-08-17 08:02 - 00000306 _____ () C:\Windows\PFRO.log 2014-08-17 08:02 - 2014-08-17 08:02 - 00000000 _____ () C:\Windows\setuperr.log 2014-08-17 08:00 - 2013-09-10 17:21 - 00000000 ____D () C:\AdwCleaner 2014-08-17 08:00 - 2013-04-19 17:20 - 00000362 _____ () C:\Windows\Tasks\WpsUpdateTask_Karen.job 2014-08-17 07:44 - 2013-04-13 19:51 - 00000360 _____ () C:\Windows\Tasks\WpsUpdateTask_Jeff.job 2014-08-17 07:38 - 2014-04-13 10:47 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-08-17 07:14 - 2014-08-17 07:14 - 01093632 _____ (Farbar) C:\Users\Karen\Downloads\FRST.exe 2014-08-17 07:13 - 2014-08-17 07:13 - 02101760 _____ (Farbar) C:\Users\Karen\Downloads\FRST64.exe 2014-08-17 07:12 - 2014-08-17 07:12 - 01361671 _____ () C:\Users\Karen\Downloads\adwcleaner_3.307.exe 2014-08-17 07:09 - 2014-08-17 07:09 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-KAREN-PC-Microsoft-Windows-7-Home-Premium-(32-bit).dat 2014-08-17 07:07 - 2014-08-17 07:07 - 00000000 ____D () C:\RegBackup 2014-08-17 07:06 - 2014-08-17 07:06 - 00002181 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk 2014-08-17 07:06 - 2014-08-17 07:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com 2014-08-17 07:06 - 2014-08-17 07:06 - 00000000 ____D () C:\Program Files\Tweaking.com 2014-08-17 07:05 - 2014-08-17 07:05 - 04057608 _____ () C:\Users\Karen\Downloads\tweaking.com_registry_backup_setup.exe 2014-08-17 07:04 - 2014-05-03 22:06 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-08-17 07:01 - 2014-08-17 07:01 - 00270824 _____ () C:\Users\Karen\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-17 06:58 - 2014-08-17 06:58 - 00170076 _____ () C:\Users\Karen\Documents\cc_20140817_065830.reg 2014-08-17 06:57 - 2014-08-16 01:08 - 00000000 ____D () C:\Windows\Panther 2014-08-17 06:57 - 2013-02-23 08:53 - 00000000 ____D () C:\Users\Karen\AppData\Local\CrashDumps 2014-08-17 05:29 - 2013-08-25 11:31 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\stickies 2014-08-17 05:25 - 2013-07-15 23:20 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-17 05:17 - 2014-08-15 21:50 - 00000632 __RSH () C:\Users\Karen\ntuser.pol 2014-08-17 05:07 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-08-17 04:49 - 2014-08-15 22:31 - 00000000 ____D () C:\Program Files\Online Armor 2014-08-17 04:41 - 2011-04-11 22:24 - 00000000 ____D () C:\Program Files\Windows Journal 2014-08-17 04:41 - 2009-07-13 22:37 - 00000000 ____D () C:\Program Files\Common Files\System 2014-08-17 04:40 - 2014-05-02 21:37 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-17 04:40 - 2009-07-14 00:52 - 00000000 ____D () C:\Program Files\Windows Defender 2014-08-17 04:39 - 2014-08-15 22:03 - 00000452 _____ () C:\Windows\Tasks\DriverUpdate Daily Scan.job 2014-08-16 22:27 - 2013-07-05 23:05 - 00013464 _____ () C:\Windows\system32\Drivers\SWDUMon.sys 2014-08-16 20:48 - 2014-04-13 10:47 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-08-16 20:48 - 2014-04-13 10:47 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-08-16 20:29 - 2014-08-16 20:29 - 00688992 ____R (Swearware) C:\Users\Karen\Downloads\dds.scr 2014-08-16 20:12 - 2013-11-10 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm 2014-08-16 20:07 - 2014-08-16 20:07 - 00000000 ____D () C:\Users\Jeff\Documents\My RoboForm Data 2014-08-16 20:02 - 2014-08-16 20:02 - 16658872 _____ (Siber Systems) C:\Users\Jeff\Downloads\RoboForm-Setup(2).exe 2014-08-16 19:59 - 2014-08-16 19:59 - 00270824 _____ () C:\Users\Jeff\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-16 19:59 - 2014-08-16 19:59 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\Intel Corporation 2014-08-16 19:59 - 2014-03-29 21:59 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\Mozilla 2014-08-16 19:58 - 2014-08-16 19:58 - 00001413 _____ () C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-16 19:58 - 2014-08-16 19:58 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\OnlineArmor 2014-08-16 19:58 - 2014-08-16 19:58 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\AVAST Software 2014-08-16 19:58 - 2014-08-16 19:58 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\Adobe 2014-08-16 19:57 - 2014-08-16 19:57 - 00000902 __RSH () C:\Users\Jeff\ntuser.pol 2014-08-16 19:57 - 2014-08-16 19:57 - 00000020 ___SH () C:\Users\Jeff\ntuser.ini 2014-08-16 19:57 - 2014-08-16 19:57 - 00000000 ____D () C:\Users\Jeff\AppData\Local\VirtualStore 2014-08-16 19:57 - 2014-08-15 21:15 - 00000000 ____D () C:\Users\Jeff 2014-08-16 15:59 - 2013-02-03 19:14 - 00000000 ____D () C:\Users\Karen\Documents\My RoboForm Data 2014-08-16 15:01 - 2013-12-01 20:36 - 00000284 _____ () C:\Windows\Tasks\Registry Optimizer_DEFAULT.job 2014-08-16 01:08 - 2013-02-03 20:22 - 00008192 __RSH () C:\BOOTSECT.BAK 2014-08-16 01:08 - 2009-07-14 00:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-08-16 01:08 - 2009-07-14 00:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-08-16 01:03 - 2014-08-16 01:03 - 00262144 _____ () C:\Windows\system32\config\userdiff 2014-08-16 00:53 - 2014-08-16 00:52 - 00000000 ___HD () C:\$INPLACE.~TR 2014-08-15 22:51 - 2014-08-11 18:16 - 00000000 ____D () C:\VIPRERESCUE 2014-08-15 22:41 - 2014-08-15 22:32 - 00000000 ____D () C:\ProgramData\OnlineArmor 2014-08-15 22:38 - 2014-08-15 22:03 - 00000448 _____ () C:\Windows\Tasks\DriverUpdate Scan.job 2014-08-15 22:32 - 2014-08-15 22:32 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\OnlineArmor 2014-08-15 22:31 - 2014-08-15 22:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Armor 2014-08-15 22:30 - 2014-08-15 22:30 - 10696960 _____ (Emsisoft GmbH ) C:\Users\Karen\Downloads\OnlineArmorSetup(1).exe 2014-08-15 22:14 - 2014-08-15 22:14 - 30185256 _____ (Emsisoft GmbH ) C:\Users\Karen\Downloads\OnlineArmorSetup.exe 2014-08-15 22:14 - 2014-08-09 21:12 - 00002119 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-08-15 22:14 - 2014-08-09 21:11 - 00414520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-08-15 22:09 - 2014-08-15 22:09 - 04862664 _____ (AVAST Software) C:\Users\Karen\Downloads\avast_free_antivirus_setup_online(1).exe 2014-08-15 21:58 - 2013-07-20 20:03 - 00009974 _____ () C:\Windows\system32\Drivers\stwrte.log 2014-08-15 21:51 - 2014-08-15 21:51 - 00001413 _____ () C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-15 21:50 - 2014-08-15 21:50 - 00000020 ___SH () C:\Users\Karen\ntuser.ini 2014-08-15 21:49 - 2013-02-03 17:30 - 00000000 ____D () C:\Recovery 2014-08-15 21:49 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\Recovery 2014-08-15 21:48 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\rescache 2014-08-15 21:43 - 2009-07-14 00:52 - 00000000 ____D () C:\Windows\system32\restore 2014-08-15 21:38 - 2014-08-16 00:54 - 00000000 ___HD () C:\$WINDOWS.~Q 2014-08-15 21:38 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\Registration 2014-08-15 21:37 - 2013-10-10 18:32 - 00022020 _____ () C:\Windows\system32\emptyregdb.dat 2014-08-15 21:37 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\LogFiles 2014-08-15 21:35 - 2009-07-13 22:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-08-15 21:34 - 2009-07-13 22:37 - 00000000 __RSD () C:\Windows\Media 2014-08-15 21:30 - 2014-08-15 21:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-08-15 21:30 - 2014-08-15 21:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-08-15 21:30 - 2009-07-13 22:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-15 21:30 - 2009-07-13 22:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-15 21:30 - 2009-07-13 22:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-15 21:30 - 2009-07-13 22:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-15 21:29 - 2014-08-15 21:16 - 00000000 ____D () C:\Users\seaside625 2014-08-15 21:29 - 2014-06-24 02:29 - 00000000 ____D () C:\Users\seaside625\Documents\My RoboForm Data 2014-08-15 21:29 - 2014-06-24 01:22 - 00000000 ____D () C:\Users\seaside625\AppData\Local\Macromedia 2014-08-15 21:29 - 2014-06-24 01:07 - 00000000 ____D () C:\Users\seaside625\AppData\Roaming\OnlineArmor 2014-08-15 21:29 - 2014-06-24 01:07 - 00000000 ____D () C:\Users\seaside625\AppData\Local\Google 2014-08-15 21:29 - 2014-05-10 13:40 - 00000000 ____D () C:\Users\seaside625\AppData\Roaming\Mozilla 2014-08-15 21:29 - 2014-05-10 13:40 - 00000000 ____D () C:\Users\seaside625\AppData\Roaming\Intel Corporation 2014-08-15 21:29 - 2014-05-10 13:40 - 00000000 ____D () C:\Users\seaside625\AppData\Local\Mozilla 2014-08-15 21:29 - 2014-05-10 13:39 - 00000000 ____D () C:\Users\seaside625\AppData\Roaming\Adobe 2014-08-15 21:29 - 2014-05-10 13:38 - 00000000 ____D () C:\Users\seaside625\AppData\Roaming\Macromedia 2014-08-15 21:29 - 2009-07-14 00:46 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-08-15 21:28 - 2014-08-15 03:31 - 00000000 ____D () C:\Users\Karen\Documents\[removed] 2014-08-15 21:28 - 2014-08-11 06:22 - 00000000 ____D () C:\Users\Karen\Downloads\Pinterest_files 2014-08-15 21:28 - 2014-08-09 18:57 - 00000000 ____D () C:\Users\Karen\Downloads\Kits _ Kumihimo _ Prima Bead_files 2014-08-15 21:28 - 2014-07-23 04:45 - 00000000 ____D () C:\Users\Karen\Downloads\Flirtlocal - Find people, socialize, hookup and chat_files 2014-08-15 21:28 - 2014-07-13 02:18 - 00000000 ____D () C:\Users\Karen\Downloads\Watch The Real Housewives of New York City Season 6 _ Heather Thomson Sings!_files 2014-08-15 21:28 - 2014-07-12 18:57 - 00000000 ____D () C:\Users\Karen\Downloads\PubMed Health - Google+_files 2014-08-15 21:28 - 2014-07-09 00:26 - 00000000 ____D () C:\Users\Karen\Downloads\People_files 2014-08-15 21:28 - 2014-07-09 00:22 - 00000000 ____D () C:\Users\Karen\Downloads\Karen Barnum - Google+_files 2014-08-15 21:28 - 2014-07-07 20:53 - 00000000 ____D () C:\Users\Karen\Downloads\www.match.com_files 2014-08-15 21:28 - 2014-07-05 08:12 - 00000000 ____D () C:\Users\Karen\Downloads\Drive storage_files 2014-08-15 21:28 - 2014-07-03 18:06 - 00000000 ____D () C:\Users\Karen\Downloads\Google+, pictures_files 2014-08-15 21:28 - 2014-07-03 18:04 - 00000000 ____D () C:\Users\Karen\Downloads\2014-07-03_files 2014-08-15 21:28 - 2014-06-30 17:47 - 00000000 ____D () C:\Users\Karen\Downloads\test - [removed] - Gmail_files 2014-08-15 21:28 - 2014-06-18 00:28 - 00000000 ____D () C:\Users\Karen\Downloads\store.padutchcandies.com_files 2014-08-15 21:28 - 2014-06-16 06:12 - 00000000 ____D () C:\Users\Karen\Documents\Grandma and chris 2014-08-15 21:28 - 2014-06-08 19:09 - 00000000 ____D () C:\Users\Karen\Downloads\MapQuest - Google+ 14 Blanchard Place, 14 Coes Street,North Providence, RI 02904_files 2014-08-15 21:28 - 2014-05-31 15:55 - 00000000 ____D () C:\Users\Karen\Downloads\Frequently Asked Questions About Online Backup_files 2014-08-15 21:28 - 2014-05-25 23:20 - 00000000 ____D () C:\Users\Karen\Downloads\OurTime.com - The 50+ Single Network_files 2014-08-15 21:28 - 2014-05-21 02:34 - 00000000 ____D () C:\Users\Karen\Downloads\barnumkaren - Yahoo Mail,BonnieAnne and Mom_files 2014-08-15 21:28 - 2014-05-04 17:41 - 00000000 ____D () C:\Users\Karen\Downloads\Cox High Speed Internet WebMail_files 2014-08-15 21:28 - 2014-04-27 12:07 - 00000000 ____D () C:\Users\Karen\New folder 2014-08-15 21:28 - 2014-04-22 22:13 - 00000000 ____D () C:\Users\Karen\roboform 2014-08-15 21:28 - 2014-02-26 11:56 - 00000000 ____D () C:\Users\Karen\Documents\New folder (4) 2014-08-15 21:28 - 2013-10-12 16:54 - 00000000 ____D () C:\Users\Karen\Downloads\Canon Printer Software 2014-08-15 21:28 - 2013-10-10 14:10 - 00000000 ____D () C:\Users\Karen\Documents\Firefox Cache 2014-08-15 21:28 - 2013-09-15 17:13 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\TuneUp Software 2014-08-15 21:28 - 2013-09-11 08:49 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Thunderbird 2014-08-15 21:28 - 2013-09-11 03:25 - 00000000 ____D () C:\Users\Karen\Java Madness_files 2014-08-15 21:28 - 2013-09-10 18:15 - 00000000 ____D () C:\Users\Karen\Documents\Driver Backup 2014-08-15 21:28 - 2013-07-11 22:16 - 00000000 ____D () C:\Users\Karen\Documents\Beads, Beading Supplies and Jewelry Making Tools Beadaholique_files 2014-08-15 21:28 - 2013-07-06 06:07 - 00000000 ____D () C:\Users\Karen\Documents\4-in-1 Beading Tool Tutorial_files 2014-08-15 21:28 - 2013-05-27 18:11 - 00000000 ____D () C:\Users\Karen\Downloads\bonnie winsor 2014-08-15 21:28 - 2013-03-23 02:31 - 00000000 ____D () C:\Users\Karen\Desktop\desk top jim warren photos 2014-08-15 21:28 - 2013-03-22 11:46 - 00000000 ____D () C:\Users\Karen\SyncFolder 2014-08-15 21:28 - 2013-03-12 07:11 - 00000000 ____D () C:\Users\Karen\Downloads\trinkets and things 2014-08-15 21:28 - 2013-03-10 00:53 - 00000000 ____D () C:\Users\Karen\Documents\Dad Info 2014-08-15 21:28 - 2013-03-03 15:39 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Wise Registry Cleaner 2014-08-15 21:28 - 2013-03-03 15:25 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Wise Disk Cleaner 2014-08-15 21:28 - 2013-02-27 10:17 - 00000000 ____D () C:\Users\Karen\Documents\MP Navigator EX 2014-08-15 21:28 - 2013-02-14 08:35 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\SUPERAntiSpyware.com 2014-08-15 21:28 - 2013-02-13 23:19 - 00000000 ____D () C:\Users\Karen\Documents\New Photo Print.el6.Data 2014-08-15 21:28 - 2013-02-05 21:19 - 00000000 ___RD () C:\Users\Karen\Documents\New Briefcase 2014-08-15 21:27 - 2014-08-09 21:12 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\AVAST Software 2014-08-15 21:27 - 2014-06-15 19:01 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\ARecEngine 2014-08-15 21:27 - 2014-02-02 08:07 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView 2014-08-15 21:27 - 2013-12-01 20:36 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Nico Mak Computing 2014-08-15 21:27 - 2013-12-01 20:34 - 00000000 ____D () C:\Users\Karen\AppData\Local\playnowradio.com 2014-08-15 21:27 - 2013-10-31 10:21 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\IrfanView 2014-08-15 21:27 - 2013-10-24 19:04 - 00000000 ____D () C:\Users\Karen\AppData\Local\webkit 2014-08-15 21:27 - 2013-09-11 08:49 - 00000000 ____D () C:\Users\Karen\AppData\Local\Thunderbird 2014-08-15 21:27 - 2013-09-10 03:40 - 00000000 ____D () C:\Users\Karen\AppData\Local\NGMP 2014-08-15 21:27 - 2013-08-06 09:37 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Cribbage 3.5 2014-08-15 21:27 - 2013-07-20 20:46 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2014-08-15 21:27 - 2013-07-20 20:16 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Intel Corporation 2014-08-15 21:27 - 2013-07-20 20:04 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\InstallShield 2014-08-15 21:27 - 2013-07-05 23:05 - 00000000 ____D () C:\Users\Karen\AppData\Local\SlimWare Utilities Inc 2014-08-15 21:27 - 2013-06-22 03:55 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Oracle 2014-08-15 21:27 - 2013-06-21 23:11 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Poker 3.3 2014-08-15 21:27 - 2013-06-21 23:09 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Blackjack 3.0 2014-08-15 21:27 - 2013-06-10 10:35 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\HpUpdate 2014-08-15 21:27 - 2013-05-28 20:21 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Apple Computer 2014-08-15 21:27 - 2013-03-14 08:41 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\PC Utility Kit 2014-08-15 21:27 - 2013-03-03 15:42 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Condusiv_Technologies 2014-08-15 21:27 - 2013-02-27 20:56 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Kingsoft 2014-08-15 21:27 - 2013-02-24 19:03 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Foxit Software 2014-08-15 21:27 - 2013-02-17 18:42 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Notepad++ 2014-08-15 21:27 - 2013-02-06 23:41 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Canon 2014-08-15 21:27 - 2013-02-03 22:10 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Macromedia 2014-08-15 21:27 - 2013-02-03 22:10 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Adobe 2014-08-15 21:27 - 2013-02-03 19:21 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\RoboForm 2014-08-15 21:27 - 2013-02-03 19:05 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\Mozilla 2014-08-15 21:27 - 2013-02-03 19:05 - 00000000 ____D () C:\Users\Karen\AppData\Local\Mozilla 2014-08-15 21:27 - 2013-02-03 18:32 - 00000000 ____D () C:\Users\Karen\AppData\Local\WindowsUpdate 2014-08-15 21:27 - 2013-02-03 17:30 - 00000000 ____D () C:\Users\Karen\AppData\Local\VirtualStore 2014-08-15 21:26 - 2014-08-15 21:16 - 00000000 ____D () C:\Users\[removed] 2014-08-15 21:26 - 2014-07-27 10:48 - 00000000 ____D () C:\Users\Jeff\Downloads\RootkitRevealer 2014-08-15 21:26 - 2014-07-22 11:31 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\Wise Disk Cleaner 2014-08-15 21:26 - 2014-07-05 21:14 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Cribbage 3.5 2014-08-15 21:26 - 2014-06-23 11:40 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\Notepad++ 2014-08-15 21:26 - 2014-06-16 06:39 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\ARecEngine 2014-08-15 21:26 - 2014-06-04 01:18 - 00000000 ____D () C:\Users\[removed]\AppData\Roaming\Mozilla 2014-08-15 21:26 - 2014-06-04 01:18 - 00000000 ____D () C:\Users\[removed]\AppData\Local\Mozilla 2014-08-15 21:26 - 2014-06-04 01:15 - 00000000 ____D () C:\Users\[removed]\Documents\My RoboForm Data 2014-08-15 21:26 - 2014-06-04 01:15 - 00000000 ____D () C:\Users\[removed]\AppData\Roaming\Intel Corporation 2014-08-15 21:26 - 2014-06-04 01:14 - 00000000 ____D () C:\Users\[removed]\AppData\Roaming\Adobe 2014-08-15 21:26 - 2014-06-04 01:13 - 00000000 ____D () C:\Users\[removed]\AppData\Roaming\Macromedia 2014-08-15 21:26 - 2014-05-27 12:53 - 00000000 ____D () C:\Users\Karen\2014-05-27 karen barnum 2014-08-15 21:26 - 2014-05-25 23:14 - 00000000 ____D () C:\Users\Karen\2014-05-25 karen barnum 2014-08-15 21:26 - 2014-05-05 19:55 - 00000000 ____D () C:\Users\Karen\2014-05-05 panda bear 2014-08-15 21:26 - 2014-03-29 21:59 - 00000000 ____D () C:\Users\Jeff\AppData\Local\Mozilla 2014-08-15 21:26 - 2014-03-29 21:50 - 00000000 ____D () C:\Users\Jeff\AppData\Roaming\Macromedia 2014-08-15 21:26 - 2014-03-16 16:47 - 00000000 ____D () C:\Users\Karen\2014-03-16 welsey may mahoney-pick 2014-08-15 21:26 - 2014-02-28 19:04 - 00000000 ____D () C:\Users\Karen\2014-02-28 karen barnum 2014-08-15 21:26 - 2014-02-21 16:30 - 00000000 ____D () C:\Users\Karen\2014-02-21 blue seahorse 2014-08-15 21:26 - 2014-02-02 09:10 - 00000000 ____D () C:\Users\Karen\AppData\Local\Condusiv_Technologies 2014-08-15 21:26 - 2013-12-30 21:32 - 00000000 ____D () C:\Users\Karen\2013-12-30 tiger picture 2014-08-15 21:26 - 2013-12-04 23:48 - 00000000 ____D () C:\Users\Karen\2013-12-04 tiger picture 2014-08-15 21:26 - 2013-12-01 20:56 - 00000000 ____D () C:\Users\Karen\AppData\Local\Foxit Reader 2014-08-15 21:26 - 2013-09-15 17:09 - 00000000 ____D () C:\Users\Karen\AppData\Local\MFAData 2014-08-15 21:26 - 2013-07-09 22:26 - 00000000 ____D () C:\Users\Karen\AppData\Local\Google 2014-08-15 21:26 - 2013-07-04 18:34 - 00000000 ____D () C:\Users\Karen\AppData\Local\Microsoft Games 2014-08-15 21:26 - 2013-06-20 19:40 - 00000000 ____D () C:\Users\Karen\.thumbnails 2014-08-15 21:26 - 2013-06-20 19:37 - 00000000 ____D () C:\Users\Karen\AppData\Local\gegl-0.2 2014-08-15 21:26 - 2013-06-20 19:37 - 00000000 ____D () C:\Users\Karen\.gimp-2.8 2014-08-15 21:26 - 2013-06-10 10:31 - 00000000 ____D () C:\Users\Karen\AppData\Local\HP 2014-08-15 21:26 - 2013-05-28 20:21 - 00000000 ____D () C:\Users\Karen\AppData\Local\Apple Computer 2014-08-15 21:26 - 2013-05-28 20:17 - 00000000 ____D () C:\Users\Karen\AppData\Local\Apple 2014-08-15 21:26 - 2013-03-21 10:00 - 00000000 ____D () C:\Users\Karen\AppData\Local\Broderbund Software 2014-08-15 21:26 - 2013-03-21 09:03 - 00000000 ____D () C:\Users\Karen\AppData\Local\Kingsoft 2014-08-15 21:26 - 2013-03-03 11:17 - 00000000 ____D () C:\Users\Karen\AppData\Local\Apps\2.0 2014-08-15 21:26 - 2013-02-03 22:10 - 00000000 ____D () C:\Users\Karen\AppData\Local\Macromedia 2014-08-15 21:22 - 2014-04-13 10:30 - 00000000 ____D () C:\Windows\system32\Adobe 2014-08-15 21:22 - 2014-02-23 10:42 - 00000000 ____D () C:\Windows\pss 2014-08-15 21:22 - 2013-06-24 12:20 - 00000000 ____D () C:\Windows\Hewlett-Packard 2014-08-15 21:22 - 2013-02-06 23:13 - 00000000 ____D () C:\Windows\system32\STRING 2014-08-15 21:22 - 2013-02-03 21:02 - 00000000 ____D () C:\Windows\system32\Macromed 2014-08-15 21:22 - 2011-04-11 22:24 - 00000000 ____D () C:\Windows\ShellNew 2014-08-15 21:22 - 2009-07-14 00:52 - 00000000 ____D () C:\Windows\twain_32 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\zh-TW 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\zh-CN 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\sv-SE 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\ru-RU 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\pt-PT 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\pt-BR 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\pl-PL 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\nl-NL 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\NDF 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\nb-NO 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\ko-KR 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\ja-JP 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\it-IT 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\hu-HU 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\fr-FR 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\fi-FI 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\el-GR 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\Resources 2014-08-15 21:22 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\Help 2014-08-15 21:21 - 2014-08-14 22:51 - 00000000 ____D () C:\Users\TEMP\new song stevie nicks....I am the dealer 2014-08-15 21:21 - 2014-08-14 22:46 - 00000000 ____D () C:\Users\TEMP\cox.net 2014-08-15 21:21 - 2014-08-06 16:15 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers 2014-08-15 21:21 - 2014-07-18 11:10 - 00000000 ____D () C:\Users\TEMP.Karen-PC 2014-08-15 21:21 - 2014-07-12 16:36 - 00000000 ____D () C:\Users\yahoo.com\AppData\Roaming\Mozilla 2014-08-15 21:21 - 2014-07-12 16:36 - 00000000 ____D () C:\Users\yahoo.com\AppData\Local\Mozilla 2014-08-15 21:21 - 2014-07-12 16:35 - 00000000 ____D () C:\Users\yahoo.com\AppData\Roaming\Intel Corporation 2014-08-15 21:21 - 2014-07-12 16:34 - 00000000 ____D () C:\Users\yahoo.com\AppData\Roaming\OnlineArmor 2014-08-15 21:21 - 2014-07-12 16:34 - 00000000 ____D () C:\Users\yahoo.com\AppData\Roaming\Adobe 2014-08-15 21:21 - 2014-07-12 16:33 - 00000000 ___RD () C:\Users\yahoo.com\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-15 21:21 - 2014-07-12 16:33 - 00000000 ___RD () C:\Users\yahoo.com\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-15 21:21 - 2014-07-12 16:33 - 00000000 ____D () C:\Users\yahoo.com\AppData\Roaming\Macromedia 2014-08-15 21:21 - 2014-07-12 16:33 - 00000000 ____D () C:\Users\yahoo.com 2014-08-15 21:21 - 2014-04-26 07:38 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-15 21:21 - 2014-04-26 07:38 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-15 21:21 - 2014-04-26 07:38 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Macromedia 2014-08-15 21:21 - 2014-04-26 07:38 - 00000000 ____D () C:\Users\TEMP 2014-08-15 21:21 - 2014-02-02 08:11 - 00000000 ____D () C:\Users\Public\Foxit Software 2014-08-15 21:21 - 2013-11-07 03:56 - 00000000 ____D () C:\Users\Administrator\Documents\My RoboForm Data 2014-08-15 21:21 - 2013-11-07 02:51 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Intel Corporation 2014-08-15 21:21 - 2013-11-07 02:34 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Canon 2014-08-15 21:21 - 2013-11-07 02:34 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla 2014-08-15 21:21 - 2013-11-07 02:33 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla 2014-08-15 21:21 - 2013-11-07 02:28 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\AVAST Software 2014-08-15 21:21 - 2013-11-07 02:27 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Macromedia 2014-08-15 21:21 - 2013-11-07 02:27 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe 2014-08-15 21:21 - 2013-11-07 02:27 - 00000000 ____D () C:\Users\Administrator 2014-08-15 21:21 - 2013-08-28 02:26 - 00000000 ____D () C:\Users\[removed]\AppData\Roaming\Macromedia 2014-08-15 21:21 - 2013-08-28 02:26 - 00000000 ____D () C:\Users\[removed] 2014-08-15 21:21 - 2013-07-04 04:18 - 00000000 ____D () C:\Windows\erdnt 2014-08-15 21:21 - 2013-05-06 17:46 - 00000000 ____D () C:\Windows\[removed] 2014-08-15 21:21 - 2011-04-11 22:24 - 00000000 ___RD () C:\Users\Public\Recorded TV 2014-08-15 21:21 - 2009-07-13 22:37 - 00000000 ___RD () C:\Users\Public 2014-08-15 21:20 - 2014-08-15 21:13 - 00000000 ____D () C:\ProgramData\HP 2014-08-15 21:20 - 2014-08-09 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader 2014-08-15 21:20 - 2014-08-09 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast 2014-08-15 21:20 - 2014-08-07 11:27 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-08-15 21:20 - 2014-08-06 16:21 - 00000000 ____D () C:\ProgramData\SlimWare Utilities, Inc 2014-08-15 21:20 - 2014-08-06 16:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate 2014-08-15 21:20 - 2014-08-05 19:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-08-15 21:20 - 2014-06-15 09:50 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-15 21:20 - 2014-05-03 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-08-15 21:20 - 2014-05-03 21:47 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-08-15 21:20 - 2014-05-03 21:46 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2 2014-08-15 21:20 - 2014-04-13 08:59 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-08-15 21:20 - 2014-03-15 21:21 - 00000000 ___HD () C:\ProgramData\CanonIJEGV 2014-08-15 21:20 - 2014-02-23 08:15 - 00000000 ____D () C:\ProgramData\HP Photo Creations 2014-08-15 21:20 - 2014-02-02 09:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Condusiv Technologies 2014-08-15 21:20 - 2014-02-02 09:07 - 00000000 ____D () C:\ProgramData\Condusiv Technologies 2014-08-15 21:20 - 2014-01-12 12:12 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-08-15 21:20 - 2013-12-07 19:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ditto 2014-08-15 21:20 - 2013-11-10 14:30 - 00000000 ____D () C:\Program Files\Siber Systems 2014-08-15 21:20 - 2013-11-07 02:51 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia 2014-08-15 21:20 - 2013-11-03 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy 2014-08-15 21:20 - 2013-11-03 19:51 - 00000000 ____D () C:\Program Files\Speccy 2014-08-15 21:20 - 2013-10-31 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView 2014-08-15 21:20 - 2013-10-21 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-08-15 21:20 - 2013-09-15 17:09 - 00000000 ____D () C:\ProgramData\MFAData 2014-08-15 21:20 - 2013-08-25 11:31 - 00000000 ____D () C:\Program Files\Stickies 2014-08-15 21:20 - 2013-08-25 00:43 - 00000000 ____D () C:\ProgramData\Real 2014-08-15 21:20 - 2013-08-06 09:37 - 00000000 ____D () C:\Program Files\Quick Cribbage 3.5 2014-08-15 21:20 - 2013-07-20 20:46 - 00000000 ____D () C:\Program Files\Unlocker 2014-08-15 21:20 - 2013-07-20 20:06 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-08-15 21:20 - 2013-07-03 00:40 - 00000000 ____D () C:\ProgramData\Hewlett-Packard 2014-08-15 21:20 - 2013-06-27 16:27 - 00000000 ____D () C:\Program Files\New folder 2014-08-15 21:20 - 2013-06-23 07:39 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage 2014-08-15 21:20 - 2013-06-10 10:36 - 00000000 ____D () C:\ProgramData\Visan 2014-08-15 21:20 - 2013-06-10 10:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2014-08-15 21:20 - 2013-05-28 20:18 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-08-15 21:20 - 2013-05-28 20:15 - 00000000 ____D () C:\ProgramData\Apple 2014-08-15 21:20 - 2013-04-13 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingsoft Office 2014-08-15 21:20 - 2013-03-24 11:10 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-08-15 21:20 - 2013-03-21 10:00 - 00000000 ____D () C:\ProgramData\Broderbund Software 2014-08-15 21:20 - 2013-03-21 08:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintMaster Platinum 18.1 2014-08-15 21:20 - 2013-03-21 08:54 - 00000000 ____D () C:\Program Files\Web Publish 2014-08-15 21:20 - 2013-03-21 08:49 - 00000000 ____D () C:\Program Files\PrintMaster Platinum 18.1 2014-08-15 21:20 - 2013-03-20 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon 2014-08-15 21:20 - 2013-03-14 08:41 - 00000000 ____D () C:\ProgramData\PC Utility Kit 2014-08-15 21:20 - 2013-02-24 23:21 - 00000000 ____D () C:\Program Files\Quick Cribbage 3.4 2014-08-15 21:20 - 2013-02-24 22:01 - 00000000 ____D () C:\ProgramData\Kingsoft 2014-08-15 21:20 - 2013-02-18 11:06 - 00000000 ____D () C:\Program Files\Quick Poker 3.3 2014-08-15 21:20 - 2013-02-18 11:05 - 00000000 ____D () C:\Program Files\Quick Blackjack 3.0 2014-08-15 21:20 - 2013-02-17 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ 2014-08-15 21:20 - 2013-02-17 18:42 - 00000000 ____D () C:\Program Files\Notepad++ 2014-08-15 21:20 - 2013-02-17 14:51 - 00000000 ____D () C:\ProgramData\Clickfree 2014-08-15 21:20 - 2013-02-15 10:04 - 00000000 ____D () C:\ProgramData\Sun 2014-08-15 21:20 - 2013-02-15 09:57 - 00000000 ____D () C:\ProgramData\McAfee 2014-08-15 21:20 - 2013-02-14 23:59 - 00000000 ____D () C:\ProgramData\Sophos 2014-08-15 21:20 - 2013-02-14 23:29 - 00000000 ____D () C:\ProgramData\Adobe 2014-08-15 21:20 - 2013-02-07 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Registry Cleaner 2014-08-15 21:20 - 2013-02-07 14:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Disk Cleaner 2014-08-15 21:20 - 2013-02-07 14:24 - 00000000 ____D () C:\Program Files\Wise 2014-08-15 21:20 - 2013-02-07 12:39 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com 2014-08-15 21:20 - 2013-02-07 12:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware 2014-08-15 21:20 - 2013-02-07 12:39 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware 2014-08-15 21:20 - 2013-02-07 00:45 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-08-15 21:20 - 2013-02-06 23:41 - 00000000 ___HD () C:\ProgramData\CanonIJSolutionMenuEX 2014-08-15 21:20 - 2013-02-06 23:15 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-08-15 21:20 - 2013-02-03 19:43 - 00000000 ____D () C:\ProgramData\CheckPoint 2014-08-15 21:20 - 2013-02-03 19:14 - 00000000 ____D () C:\ProgramData\RoboForm 2014-08-15 21:20 - 2013-02-03 19:05 - 00000000 ____D () C:\ProgramData\Mozilla 2014-08-15 21:20 - 2013-02-03 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-08-15 21:20 - 2013-02-03 18:40 - 00000000 ____D () C:\Program Files\Microsoft.NET 2014-08-15 21:19 - 2014-08-07 10:23 - 00000000 ____D () C:\Program Files\IDT 2014-08-15 21:19 - 2014-05-13 20:09 - 00000000 ____D () C:\Program Files\Java 2014-08-15 21:19 - 2014-05-03 22:05 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware 2014-08-15 21:19 - 2014-02-23 08:15 - 00000000 ____D () C:\Program Files\HP Photo Creations 2014-08-15 21:19 - 2013-10-31 10:21 - 00000000 ____D () C:\Program Files\IrfanView 2014-08-15 21:19 - 2013-07-20 20:02 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-08-15 21:19 - 2013-07-20 19:54 - 00000000 ____D () C:\Program Files\Intel 2014-08-15 21:19 - 2013-07-09 22:26 - 00000000 ____D () C:\Program Files\Google 2014-08-15 21:19 - 2013-06-20 19:33 - 00000000 ____D () C:\Program Files\GIMP 2 2014-08-15 21:19 - 2013-06-10 10:33 - 00000000 ____D () C:\Program Files\HP 2014-08-15 21:19 - 2013-02-24 22:00 - 00000000 ____D () C:\Program Files\Kingsoft 2014-08-15 21:19 - 2013-02-03 18:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-15 21:18 - 2014-08-09 21:09 - 00000000 ____D () C:\Program Files\AVAST Software 2014-08-15 21:18 - 2014-08-06 16:15 - 00000000 ____D () C:\Program Files\DriverUpdate 2014-08-15 21:18 - 2014-08-05 19:10 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-08-15 21:18 - 2014-04-13 10:34 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR 2014-08-15 21:18 - 2014-04-13 10:34 - 00000000 ____D () C:\Program Files\Adobe 2014-08-15 21:18 - 2014-04-06 09:52 - 00000000 ____D () C:\Program Files\Foxit Software 2014-08-15 21:18 - 2014-03-23 03:43 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-08-15 21:18 - 2014-02-02 09:07 - 00000000 ____D () C:\Program Files\Condusiv Technologies 2014-08-15 21:18 - 2014-02-02 09:07 - 00000000 ____D () C:\Program Files\Common Files\Diskeeper Corporation 2014-08-15 21:18 - 2013-12-07 19:48 - 00000000 ____D () C:\Program Files\Ditto 2014-08-15 21:18 - 2013-10-21 15:57 - 00000000 ____D () C:\Program Files\CCleaner 2014-08-15 21:18 - 2013-07-20 20:17 - 00000000 ____D () C:\Program Files\Common Files\Intel Corporation 2014-08-15 21:18 - 2013-07-07 17:53 - 00000000 ____D () C:\Program Files\FileKiddo Download Manager 2014-08-15 21:18 - 2013-04-13 19:46 - 00000000 ____D () C:\Program Files\FileHippo.com 2014-08-15 21:18 - 2013-03-21 08:49 - 00000000 ____D () C:\Program Files\Common Files\Broderbund 2014-08-15 21:18 - 2013-03-21 08:47 - 00000000 ____D () C:\Program Files\Common Files\InstallShield 2014-08-15 21:18 - 2013-03-20 21:29 - 00000000 ____D () C:\Program Files\Amazon 2014-08-15 21:18 - 2013-03-10 13:23 - 00000000 ____D () C:\Program Files\Common Files\PX Storage Engine 2014-08-15 21:18 - 2013-02-06 23:16 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-08-15 21:18 - 2013-02-06 23:11 - 00000000 ____D () C:\Program Files\Canon 2014-08-15 21:18 - 2009-07-13 22:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-08-15 21:14 - 2014-08-15 21:14 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2014-08-15 21:14 - 2014-08-15 21:14 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2014-08-15 21:14 - 2014-08-15 21:14 - 00000000 ____D () C:\Windows\system32\URTTEMP 2014-08-15 21:14 - 2009-07-14 00:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-08-15 21:14 - 2009-07-13 22:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-15 21:12 - 2014-08-15 21:12 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2014-08-15 21:12 - 2014-08-15 21:12 - 00000000 ____D () C:\Program Files\CONEXANT 2014-08-15 20:06 - 2013-10-10 17:21 - 00001890 _____ () C:\Windows\diagwrn.xml 2014-08-15 20:06 - 2013-10-10 17:21 - 00001890 _____ () C:\Windows\diagerr.xml 2014-08-15 19:35 - 2014-08-15 19:35 - 00000000 ___SH () C:\DkHyperbootSync 2014-08-15 13:03 - 2014-08-15 13:03 - 00000000 ____D () C:\Users\Karen\New folder (2) 2014-08-15 03:31 - 2014-08-15 03:31 - 00000000 ____D () C:\Users\Karen\Documents\New folder (10) 2014-08-14 08:12 - 2014-08-14 08:11 - 00000000 ____D () C:\Cher 2014-08-13 23:47 - 2014-07-19 19:38 - 00386048 ___SH () C:\Users\Karen\Documents\Thumbs.db 2014-08-13 19:44 - 2014-07-19 19:39 - 00102400 ___SH () C:\Users\Karen\Thumbs.db 2014-08-12 05:34 - 2014-08-12 05:34 - 00000000 ____D () C:\paul barnum 2014-08-12 05:26 - 2014-07-19 19:30 - 00326656 ___SH () C:\Users\Karen\Downloads\Thumbs.db 2014-08-11 06:22 - 2014-08-11 06:22 - 00064390 _____ () C:\Users\Karen\Downloads\Pinterest.htm 2014-08-11 05:36 - 2014-08-11 05:36 - 00000000 ____D () C:\Users\Karen\karen 2 2014-08-10 22:23 - 2014-08-10 22:23 - 00065536 _____ () C:\Windows\ocsetup_install_NetFx3.etl 2014-08-10 22:23 - 2014-08-10 22:23 - 00022723 _____ () C:\Windows\ocsetup_cbs_install_NetFx3.txt 2014-08-10 22:23 - 2014-08-10 22:23 - 00000000 ___HT () C:\Windows\ocsetup.lock 2014-08-10 09:47 - 2014-08-10 09:11 - 00000000 ____D () C:\Users\Karen\AppData\Roaming\OpenDNS Updater 2014-08-09 21:52 - 2014-08-09 21:52 - 00002058 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk 2014-08-09 21:40 - 2014-08-09 21:40 - 37448528 _____ (Foxit Corporation ) C:\Users\Karen\Downloads\FoxitReader622.0802_enu_Setup.exe 2014-08-09 21:11 - 2014-08-09 21:11 - 00779536 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00276432 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-08-09 21:11 - 2014-08-09 21:11 - 00192352 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00071944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-08-09 21:11 - 2014-08-09 21:11 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-08-09 21:11 - 2014-08-09 21:11 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-08-09 20:55 - 2014-08-09 20:55 - 04862664 _____ (AVAST Software) C:\Users\Karen\Downloads\avast_free_antivirus_setup_online.exe 2014-08-09 18:57 - 2014-08-09 18:57 - 00096554 _____ () C:\Users\Karen\Downloads\Kits _ Kumihimo _ Prima Bead.htm 2014-08-09 16:32 - 2014-08-09 16:32 - 01057672 _____ (Adobe) C:\Users\Karen\Downloads\install_reader11_en_mssa_aaa_aih.exe 2014-08-09 09:56 - 2014-08-07 11:27 - 00001053 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-08-09 09:56 - 2014-08-07 11:27 - 00001053 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-08-07 11:25 - 2014-08-07 11:25 - 00244120 _____ () C:\Users\Karen\Downloads\Firefox Setup Stub 31.0.exe 2014-08-07 11:13 - 2014-08-07 11:13 - 00001596 _____ () C:\Users\Karen\Downloads\sg_backup_2014-08-07-1113.spg 2014-08-07 11:11 - 2014-08-07 11:11 - 00659456 _____ (Speed Guide Inc.) C:\Users\Karen\Downloads\TCPOptimizer (1).exe 2014-08-06 21:43 - 2014-08-16 03:27 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-06 21:39 - 2014-08-16 03:27 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-06 19:36 - 2013-12-01 20:36 - 00000292 _____ () C:\Windows\Tasks\Registry Optimizer_UPDATES.job 2014-08-06 16:17 - 2014-08-06 16:13 - 00945224 _____ (SlimWare Utilities, Inc.) C:\Users\Karen\Downloads\DriverUpdate-setup.exe 2014-08-06 16:15 - 2013-07-05 23:05 - 00002457 _____ () C:\Users\Public\Desktop\DriverUpdate.lnk 2014-08-05 19:13 - 2013-09-20 13:37 - 00000000 ____D () C:\ProgramData\Oracle 2014-08-05 19:10 - 2014-08-05 19:10 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-08-05 19:10 - 2014-08-05 19:10 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-08-05 19:10 - 2014-08-05 19:10 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-08-05 19:10 - 2014-08-05 19:10 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-08-03 09:26 - 2014-08-03 09:26 - 00012798 _____ () C:\Users\Karen\Documents\cc_20140803_092608.reg 2014-07-31 23:42 - 2014-08-17 05:21 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-29 05:33 - 2014-08-16 03:31 - 01265664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-29 05:33 - 2014-08-16 03:31 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-29 05:33 - 2014-08-16 03:31 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-07-29 05:32 - 2014-08-16 03:31 - 11018240 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-29 05:32 - 2014-08-16 03:31 - 06046720 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-29 05:32 - 2014-08-16 03:31 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-29 05:32 - 2014-08-16 03:31 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-29 05:32 - 2014-08-16 03:31 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-29 05:32 - 2014-08-16 03:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-29 05:32 - 2014-08-16 03:31 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-29 05:32 - 2014-08-16 03:31 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-29 05:32 - 2014-08-16 03:31 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-07-29 05:32 - 2014-08-16 03:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-29 05:31 - 2014-08-16 03:31 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-29 05:31 - 2014-08-16 03:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-07-29 05:31 - 2014-08-16 03:31 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-07-29 05:30 - 2014-08-16 03:31 - 01466368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-29 02:15 - 2014-08-16 03:31 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-28 21:23 - 2014-07-28 21:23 - 00000000 ____D () C:\Users\Karen\Documents\Tatyana 2014-07-27 13:35 - 2014-07-27 10:52 - 142038140 _____ () C:\Windows\system32\C 2014-07-27 07:58 - 2013-11-03 19:51 - 00000897 _____ () C:\Users\Public\Desktop\Speccy.lnk 2014-07-25 09:03 - 2014-08-15 19:12 - 00004096 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-25 08:33 - 2014-08-15 19:12 - 00051200 ____N (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-25 08:30 - 2014-08-15 19:12 - 00061952 ____N (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-25 08:10 - 2014-08-15 19:12 - 00108032 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-25 08:08 - 2014-08-15 19:12 - 00597504 ____N (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-25 08:06 - 2014-08-15 19:12 - 04204032 ____N (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-25 07:59 - 2014-08-15 19:12 - 00646144 ____N (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-25 07:43 - 2014-08-15 19:12 - 00060416 ____N (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-25 07:07 - 2014-08-15 19:12 - 01068032 ____N (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-23 04:45 - 2014-07-23 04:45 - 00021804 _____ () C:\Users\Karen\Downloads\Flirtlocal - Find people, socialize, hookup and chat.htm 2014-07-20 09:00 - 2014-07-20 09:00 - 00001452 _____ () C:\mwb stopped.txt Some content of TEMP: ==================== C:\Users\Karen\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-17 00:58 ==================== End Of Log ============================