Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:10-01-2015 01
Ran by [removed] (administrator) on MAGGIE (12-01-2016 00:33:37)
Running from C:\Users\[removed]\Downloads
[removed]
Platform: Windows 10 Home Version 1511 (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\Program Files (x86)\AdVPN\AdVpnService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\loggingserver.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\stephen\Downloads\FRST64(2).exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MouseDriver] => C:\windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2757424 2015-11-12] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508104 2015-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2292912 2015-09-17] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3874216 2015-12-16] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2814864 2015-12-18] ()
HKLM-x32\...\Run: [WinCalendar V4] => C:\Program Files (x86)\WinCalendar V4\WinCalendarV4_SysTray.exe [81944 2015-04-01] (Sapro Systems)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKLM-x32\...\Run: [AdVPN] => C:\Program Files (x86)\AdVPN\AdVPN.exe [714752 2015-11-26] (Alto Cloud Media Ltd.)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguix.exe [1139112 2015-12-08] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [522784 2015-11-17] (Autodesk Inc.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\...\Run: [NvLedServiceHost] => C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe [87160 2015-11-12] ()
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28917376 2015-05-14] (Skype Technologies S.A.)
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\...\Run: [AdobeBridge] => C:\Program Files (x86)\Adobe\Adobe Bridge CS4\Bridge.exe [13145448 2008-08-28] (Adobe Systems, Inc.)
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.)
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8590760 2015-12-08] (Piriform Ltd)
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\...\Run: [Akamai NetSession Interface] => C:\Users\stephen\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\...\Policies\Explorer: [] 
HKU\S-1-5-21-3488279127-63086370-3813774398-1004\...\Run: [Akamai NetSession Interface] => C:\Users\maggi_000\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3488279127-63086370-3813774398-1004\...\Run: [Jenkat Games Arcade App] => C:\Users\maggi_000\AppData\Roaming\JGArcadeApp\Jenkat Games Arcade App\JGAA.exe [4486144 2014-07-02] ()
HKU\S-1-5-21-3488279127-63086370-3813774398-1004\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3488279127-63086370-3813774398-1004\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.)
HKU\S-1-5-21-3488279127-63086370-3813774398-1004\...\Run: [NvLedServiceHost] => C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe [87160 2015-11-12] ()
HKU\S-1-5-21-3488279127-63086370-3813774398-1004\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28917376 2015-05-14] (Skype Technologies S.A.)
HKU\S-1-5-21-3488279127-63086370-3813774398-1004\...\RunOnce: [Uninstall C:\Users\maggi_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\maggi_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"
HKU\S-1-5-21-3488279127-63086370-3813774398-1004\...\Policies\Explorer: [] 
HKU\S-1-5-21-3488279127-63086370-3813774398-1004\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [805888 2015-10-30] (Microsoft Corporation)
HKU\S-1-5-21-3488279127-63086370-3813774398-1005\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3488279127-63086370-3813774398-1005\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.)
HKU\S-1-5-21-3488279127-63086370-3813774398-1005\...\Run: [NvLedServiceHost] => C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe [87160 2015-11-12] ()
HKU\S-1-5-21-3488279127-63086370-3813774398-1005\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28917376 2015-05-14] (Skype Technologies S.A.)
HKU\S-1-5-21-3488279127-63086370-3813774398-1005\...\Policies\Explorer: [] 
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
Startup: C:\Users\stephen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2016-01-06]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] [removed] [removed]
Tcpip\..\Interfaces\{9aaae056-d5ce-4a6d-8bc3-858c059e961a}: [DhcpNameServer] [removed] [removed]

Internet Explorer:
==================
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-3488279127-63086370-3813774398-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-gb/?pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-3488279127-63086370-3813774398-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130930514681475481&GUID=AC016D07-2E2E-4FDB-8DB2-86DD170E472E
HKU\S-1-5-21-3488279127-63086370-3813774398-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130930514680028148&GUID=AC016D07-2E2E-4FDB-8DB2-86DD170E472E
SearchScopes: HKLM -> {CB7EA2A8-C0FB-4CF7-96AF-EA19779A4793} URL = hxxp://uk.yhs4.search.yahoo.com/yhs/search?hspart=appattach&hsimp=yhs-appattach&type=493&p={searchTerms}
SearchScopes: HKLM-x32 -> {CB7EA2A8-C0FB-4CF7-96AF-EA19779A4793} URL = hxxp://uk.yhs4.search.yahoo.com/yhs/search?hspart=appattach&hsimp=yhs-appattach&type=493&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3488279127-63086370-3813774398-1001 -> DefaultScope {C2415D81-242C-4BA6-B59A-8EDB5E7B07F7} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-3488279127-63086370-3813774398-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={B5865D80-2A55-4462-A797-214820891782}&mid=ad3dc6166b4547d2a160c18a3d8e079d-c5f949612484ff03e1b1875070de097a99d7176f&lang=en&ds=AVG&coid=avgtbavg&cmpid=1215avz&pr=fr&d=2015-05-02 13:56:25&v=4.2.3.128&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3488279127-63086370-3813774398-1001 -> {C2415D81-242C-4BA6-B59A-8EDB5E7B07F7} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-3488279127-63086370-3813774398-1004 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-3488279127-63086370-3813774398-1004 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-3488279127-63086370-3813774398-1004 -> {CB7EA2A8-C0FB-4CF7-96AF-EA19779A4793} URL = hxxp://uk.yhs4.search.yahoo.com/yhs/search?hspart=appattach&hsimp=yhs-appattach&type=493&p={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-12-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-22] (Oracle Corporation)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll [2015-12-18] (AVG)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-12-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-22] (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-22] (Oracle Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll [2015-12-18] (AVG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-22] (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\stephen\AppData\Roaming\Mozilla\Firefox\Profiles\iqn7ummx.default-1449965770414
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-29] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-22] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-09-17] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-29] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.4\\npsitesafety.dll [No File]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-22] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-02-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-12] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-12] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-09-17] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3488279127-63086370-3813774398-1001: sony.com/MediaGoDetector -> C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll [2015-11-20] (Sony Network Entertainment International LLC)
FF SearchPlugin: C:\Users\stephen\AppData\Roaming\Mozilla\Firefox\Profiles\iqn7ummx.default-1449965770414\searchplugins\YourSearchResults.xml [2016-01-11]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-12-18]
FF Extension: Block site - C:\Users\stephen\AppData\Roaming\Mozilla\Firefox\Profiles\iqn7ummx.default-1449965770414\extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2016-01-11]
FF Extension: AVG Web TuneUp - C:\Users\stephen\AppData\Roaming\Mozilla\Firefox\Profiles\iqn7ummx.default-1449965770414\Extensions\[removed] [2015-12-16]
FF HKU\S-1-5-21-3488279127-63086370-3813774398-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] [not signed]
FF HKU\S-1-5-21-3488279127-63086370-3813774398-1004\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF HKU\S-1-5-21-3488279127-63086370-3813774398-1005\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\95ECF10835EB15F3A3C6F510A9817D6295EC [2015-11-26] <==== ATTENTION

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ihenkjeihefokohmemphikjnjbmegdik] - "C:\Program Files (x86)\Sony\Media Go\MediaGoDetector.crx" <not found>

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1139744 2015-11-17] (Autodesk Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AdVPN Service; C:\Program Files (x86)\AdVPN\AdVpnService.exe [35328 2015-11-26] () [File not signed]
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016448 2015-11-25] (Adobe Systems, Incorporated)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [31160 2015-02-05] (Autodesk, Inc.)
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [627544 2015-12-16] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3902984 2015-12-16] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1049000 2015-12-08] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [583936 2015-12-16] (AVG Technologies CZ, s.r.o.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2802360 2015-11-24] (Microsoft Corporation)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [249328 2015-06-24] (DTS, Inc)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-12] (NVIDIA Corporation)
S4 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-12] (NVIDIA Corporation)
S4 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8133424 2015-11-12] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5915440 2015-11-12] (NVIDIA Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4377000 2015-12-11] (AVG Technologies CZ, s.r.o.)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [48552 2015-12-11] (AVG Technologies CZ, s.r.o.)
R2 UxTuneUp; C:\WINDOWS\SysWOW64\uxtuneup.dll [42408 2015-12-11] (AVG Technologies CZ, s.r.o.)
R2 vToolbarUpdater40.2.4; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe [1923984 2015-12-18] (AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [1164688 2015-12-18] ()

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [23152 2015-09-09] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2015-12-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [298416 2015-08-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [398256 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [258480 2015-12-04] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [315840 2015-12-16] (AVG Technologies CZ, s.r.o.)
R3 ElcMouLFlt; C:\Windows\System32\drivers\ElcMouLFlt.sys [28648 2015-12-04] (ELECOM)
R3 ElcMouUFlt; C:\Windows\System32\drivers\ElcMouUFlt.sys [27624 2015-12-04] (ELECOM)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-01-11] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [28416 2008-04-16] (Research In Motion Limited)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [31144 2015-11-23] (TuneUp Software)
R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-12 00:33 - 2016-01-12 00:33 - 02370560 _____ (Farbar) C:\Users\stephen\Downloads\FRST64(2).exe
2016-01-12 00:11 - 2016-01-12 00:11 - 02370560 _____ (Farbar) C:\Users\stephen\Downloads\FRST64(1).exe
2016-01-12 00:08 - 2016-01-12 00:09 - 00058014 _____ C:\Users\stephen\Documents\cc_20160112_000856.reg
2016-01-11 23:41 - 2016-01-12 00:33 - 00029070 _____ C:\Users\stephen\Downloads\FRST.txt
2016-01-11 23:41 - 2016-01-11 23:41 - 00065117 _____ C:\Users\stephen\Downloads\Addition.txt
2016-01-11 23:40 - 2016-01-12 00:33 - 00000000 ____D C:\FRST
2016-01-11 23:40 - 2016-01-11 23:40 - 02370560 _____ (Farbar) C:\Users\stephen\Downloads\FRST64.exe
2016-01-11 15:41 - 2016-01-11 15:41 - 00291534 _____ C:\Users\stephen\Documents\cc_20160111_154141.reg
2016-01-11 15:40 - 2016-01-11 15:40 - 06805440 _____ (Piriform Ltd) C:\Users\stephen\Downloads\ccsetup513.exe
2016-01-11 15:40 - 2016-01-11 15:40 - 00000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-01-11 15:37 - 2016-01-11 15:37 - 00001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-11 15:37 - 2016-01-11 15:37 - 00001223 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-01-11 15:37 - 2016-01-11 15:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-11 13:53 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2016-01-11 13:52 - 2016-01-11 14:12 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-01-11 13:52 - 2016-01-11 13:55 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-01-11 13:52 - 2016-01-11 13:52 - 00001467 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-01-11 13:52 - 2016-01-11 13:52 - 00001455 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2016-01-11 13:52 - 2016-01-11 13:52 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2016-01-11 13:52 - 2016-01-11 13:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-01-11 13:52 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2016-01-11 13:51 - 2016-01-11 13:51 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\stephen\Downloads\spybot-2.4.exe
2016-01-11 13:25 - 2016-01-11 13:25 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2016-01-11 13:25 - 2016-01-11 13:25 - 00000000 _____ C:\autoexec.bat
2016-01-11 13:24 - 2016-01-11 13:25 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\stephen\Downloads\SpyHunter-Installer(1).exe
2016-01-09 11:32 - 2016-01-09 11:32 - 00668602 _____ C:\Users\maggi_000\Downloads\Important information about charges_07012016.pdf
2016-01-08 20:15 - 2016-01-08 20:15 - 01592131 _____ C:\Users\maggi_000\Downloads\interim-ll2u-leaflet-july-2015-v1a.pdf
2016-01-08 18:35 - 2016-01-08 18:35 - 00235046 _____ C:\Users\maggi_000\Downloads\bef30f_316d48295b844ad8b4980721cfe3b9a5(2).pdf
2016-01-08 18:34 - 2016-01-08 18:34 - 00235046 _____ C:\Users\maggi_000\Downloads\bef30f_316d48295b844ad8b4980721cfe3b9a5(1).pdf
2016-01-08 08:47 - 2016-01-08 08:47 - 00046069 _____ C:\Users\maggi_000\Downloads\Invoice-24191791.pdf
2016-01-07 20:17 - 2016-01-07 20:17 - 00242118 _____ C:\Users\maggi_000\Downloads\Order-24191791-Docs-080130.pdf
2016-01-07 20:17 - 2016-01-07 20:17 - 00010982 _____ C:\Users\maggi_000\Downloads\footwear-declaration.pdf
2016-01-07 19:55 - 2016-01-07 19:55 - 00309039 _____ C:\Users\maggi_000\Downloads\20150731_ReturnForm.pdf
2016-01-07 19:33 - 2016-01-11 15:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-07 07:16 - 2016-01-07 07:16 - 00055367 _____ C:\Users\maggi_000\Downloads\Your account is still overdrawn_04012016.pdf
2016-01-07 07:16 - 2016-01-07 07:16 - 00054156 _____ C:\Users\maggi_000\Downloads\Information about your overdraft charges_06012016.pdf
2016-01-07 00:33 - 2016-01-07 00:33 - 00000744 _____ C:\Users\stephen\Desktop\College 2016 - Shortcut.lnk
2016-01-06 21:54 - 2016-01-06 22:03 - 00001178 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-01-06 21:54 - 2016-01-06 21:55 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-06 21:54 - 2016-01-06 21:54 - 22908888 _____ (Malwarebytes ) C:\Users\stephen\Downloads\mbam-setup-2.2.0.1024(1).exe
2016-01-06 21:54 - 2016-01-06 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-01-06 21:54 - 2016-01-06 21:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-01-06 21:54 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-01-06 21:54 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-01-06 21:54 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-01-06 21:53 - 2016-01-06 21:53 - 22908888 _____ (Malwarebytes ) C:\Users\stephen\Downloads\mbam-setup-2.2.0.1024.exe
2016-01-06 21:53 - 2016-01-06 21:53 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\stephen\Downloads\SpyHunter-Installer.exe
2016-01-06 21:42 - 2016-01-06 21:42 - 03399774 _____ C:\Users\stephen\Downloads\03 Track 3(1).wma
2016-01-06 21:42 - 2016-01-06 21:42 - 02975478 _____ C:\Users\stephen\Downloads\07 Track 7(1).wma
2016-01-06 21:41 - 2016-01-06 21:41 - 04720470 _____ C:\Users\stephen\Downloads\08 Track 8(1).wma
2016-01-06 21:41 - 2016-01-06 21:41 - 02975478 _____ C:\Users\stephen\Downloads\07 Track 7.wma
2016-01-06 21:40 - 2016-01-06 21:41 - 03399774 _____ C:\Users\stephen\Downloads\03 Track 3.wma
2016-01-06 20:51 - 2016-01-06 20:51 - 05587535 _____ C:\Users\stephen\Downloads\Building_Adapta.pdf
2016-01-06 18:45 - 2016-01-06 18:45 - 04720470 _____ C:\Users\stephen\Downloads\08 Track 8.wma
2016-01-06 18:27 - 2016-01-06 18:27 - 00037954 _____ C:\Users\stephen\Downloads\excell tutorial(1).htm
2016-01-06 12:42 - 2016-01-06 22:03 - 00002649 _____ C:\Users\stephen\Desktop\Microsoft Office Project 2007.lnk
2016-01-06 01:28 - 2016-01-06 01:40 - 00000000 ____D C:\Users\stephen\AppData\LocalLow\uTorrent
2016-01-05 23:09 - 2016-01-05 23:09 - 00280841 _____ C:\Users\stephen\Downloads\CT_Ind_-_Com_Tutorial_LO1-_2015_B(1).pdf
2016-01-05 17:32 - 2016-01-05 17:32 - 00006548 _____ C:\Users\maggi_000\Downloads\Payslip for Tax Week_40, Tax Year_2015-2016.pdf
2016-01-05 17:32 - 2016-01-05 17:32 - 00006548 _____ C:\Users\maggi_000\Downloads\Payslip for Tax Week_40, Tax Year_2015-2016(1).pdf
2016-01-04 13:00 - 2016-01-04 13:00 - 00496846 _____ C:\Users\maggi_000\Downloads\S430-0415-web.pdf
2016-01-04 11:19 - 2016-01-04 11:19 - 01693393 _____ C:\Users\maggi_000\Downloads\The_Next_Piece_2015.pdf
2016-01-04 11:18 - 2016-01-04 11:18 - 01036107 _____ C:\Users\maggi_000\Downloads\What_piece_next_poster..pdf
2016-01-03 10:44 - 2016-01-03 10:44 - 00109494 _____ C:\Users\maggi_000\Downloads\TSB-VISA-DEBIT-T-and-Cs.pdf
2016-01-03 04:52 - 2016-01-03 04:52 - 02026520 _____ (BitTorrent Inc.) C:\Users\stephen\Downloads\uTorrent.exe
2016-01-02 10:53 - 2016-01-02 10:53 - 00235046 _____ C:\Users\maggi_000\Downloads\bef30f_316d48295b844ad8b4980721cfe3b9a5.pdf
2016-01-01 11:20 - 2016-01-11 13:40 - 00002543 _____ C:\Users\maggi_000\Desktop\Kindle.lnk
2016-01-01 11:20 - 2016-01-01 14:42 - 00000000 ____D C:\Users\maggi_000\Documents\My Kindle Content
2016-01-01 11:20 - 2016-01-01 11:20 - 00000000 ____D C:\Users\maggi_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2016-01-01 11:20 - 2016-01-01 11:20 - 00000000 ____D C:\Users\maggi_000\AppData\Local\Amazon
2015-12-31 08:24 - 2015-12-31 08:24 - 00055874 _____ C:\Users\maggi_000\Downloads\Information about your overdraft charges_30122015.pdf
2015-12-29 14:54 - 2015-12-29 14:54 - 00313224 _____ C:\Users\maggi_000\Downloads\SCoDCon16 Invite V1.pdf
2015-12-27 23:33 - 2087-05-20 11:08 - 03407872 _____ C:\Users\stephen\Desktop\SPOT0000.avi
2015-12-27 12:22 - 2015-12-27 12:22 - 00838493 _____ C:\Users\maggi_000\Downloads\Calendar 1(1).pdf
2015-12-27 12:21 - 2015-12-27 12:21 - 00838493 _____ C:\Users\maggi_000\Downloads\Calendar 1.pdf
2015-12-27 12:21 - 2015-12-27 12:21 - 00054524 _____ C:\Users\maggi_000\Downloads\Street A-Z.pdf
2015-12-26 12:36 - 2015-12-26 12:36 - 00958641 _____ C:\Users\maggi_000\Downloads\Royal-Mail-UK-and-international-parcel-and-letter-prices-30-March-2015.pdf
2015-12-26 12:17 - 2015-12-26 12:17 - 00179804 _____ C:\Users\maggi_000\Downloads\20151127_ReturnForm.pdf
2015-12-25 12:54 - 2015-12-25 12:54 - 00076244 _____ C:\Users\maggi_000\Downloads\voucher_262038954.pdf
2015-12-25 12:50 - 2015-12-25 12:50 - 00110021 _____ C:\Users\maggi_000\Downloads\Groupon-75CA5F54AD.pdf
2015-12-25 12:50 - 2015-12-25 12:50 - 00110021 _____ C:\Users\maggi_000\Downloads\Groupon-75CA5F54AD(1).pdf
2015-12-22 03:11 - 2015-12-22 03:11 - 00000000 ____D C:\Users\stephen\AppData\Roaming\NBS
2015-12-21 18:27 - 2015-12-21 18:32 - 136685138 _____ C:\Users\stephen\Downloads\NBSCreate_1_5_3_08_12_15.zip
2015-12-21 17:58 - 2015-12-21 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NBS
2015-12-21 17:58 - 2015-12-21 17:58 - 00000000 ____D C:\Program Files (x86)\NBS
2015-12-21 17:57 - 2015-12-21 17:57 - 00000000 ____D C:\Users\stephen\Desktop\nbsCreate_1_5_3_08_12_15
2015-12-21 15:21 - 2015-12-21 15:21 - 07493736 _____ C:\Users\stephen\Downloads\eml(2)
2015-12-21 15:20 - 2015-12-21 15:20 - 07493736 _____ C:\Users\stephen\Downloads\eml(1)
2015-12-21 15:12 - 2015-12-21 15:12 - 00000000 ____D C:\Users\stephen\Documents\Autodesk Application Manager
2015-12-21 15:11 - 2015-12-21 15:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap 2016
2015-12-21 15:10 - 2015-12-21 15:10 - 00000133 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
2015-12-21 15:05 - 2015-12-21 15:05 - 16873592 _____ C:\Users\stephen\Downloads\AutoCAD_2016_English_Win_64bit_r1_wi_en-us_Setup.exe
2015-12-21 15:05 - 2015-12-21 15:05 - 00338296 _____ (Autodesk Inc.) C:\Users\stephen\Downloads\AutoCAD_2016_English_Win_64bit_r1_wi_en-us_Setup_webinstall.exe
2015-12-21 12:01 - 2015-12-21 12:01 - 00608096 _____ C:\Users\maggi_000\Downloads\Is_Scotland_Fair_Enough(1).pdf
2015-12-21 11:49 - 2015-12-21 11:49 - 01045966 _____ C:\Users\maggi_000\Downloads\Health_and_Homelessness_Report_2015_final_(3).pdf
2015-12-21 11:49 - 2015-12-21 11:49 - 01045966 _____ C:\Users\maggi_000\Downloads\Health_and_Homelessness_Report_2015_final_(2).pdf
2015-12-21 11:43 - 2015-12-21 11:44 - 06803438 _____ C:\Users\maggi_000\Downloads\Argyll & Bute HSCP Strategic Plan Consultation - Main Report.pdf
2015-12-20 18:43 - 2015-12-20 18:43 - 00135939 _____ C:\Users\maggi_000\Downloads\GHN Staffing Structure Nov 2015.pdf
2015-12-20 18:09 - 2015-12-20 18:09 - 01045966 _____ C:\Users\maggi_000\Downloads\Health and Homelessness Report 2015 (final).pdf
2015-12-20 16:23 - 2016-01-06 22:03 - 00001978 _____ C:\Users\stephen\Desktop\Install Now Autodesk® AutoCAD® 2015.lnk
2015-12-20 16:22 - 2015-12-20 16:22 - 14934512 _____ C:\Users\stephen\Downloads\AutoCAD_2015_English_Win_32_64bit_Trial_wi_en-us_Setup.exe
2015-12-20 16:22 - 2015-12-20 16:22 - 00338320 _____ (Autodesk Inc.) C:\Users\stephen\Downloads\AutoCAD_2015_English_Win_32_64bit_Trial_wi_en-us_Setup_webinstall.exe
2015-12-20 16:20 - 2015-12-20 16:20 - 00338296 _____ (Autodesk Inc.) C:\Users\stephen\Downloads\AutoCAD_2014_English_Win_32_64bit_wi_en-us_Setup_webinstall(1).exe
2015-12-20 16:17 - 2015-12-21 15:06 - 00000000 ____D C:\Users\stephen\AppData\Local\Akamai
2015-12-20 16:16 - 2015-12-20 16:21 - 10934800 _____ C:\Users\stephen\Downloads\AutoCAD_2014_English_Win_32_64bit_wi_en-us_Setup.exe
2015-12-20 16:16 - 2015-12-20 16:16 - 00338296 _____ (Autodesk Inc.) C:\Users\stephen\Downloads\AutoCAD_2014_English_Win_32_64bit_wi_en-us_Setup_webinstall.exe
2015-12-20 14:44 - 2015-12-20 14:44 - 00084446 _____ C:\Users\maggi_000\Downloads\Annex 1 - List of eligible Commonwealth Foundation member countries.pdf
2015-12-20 14:23 - 2015-12-20 14:24 - 03743168 _____ C:\Users\maggi_000\Downloads\Draft 23.pdf
2015-12-20 11:22 - 2015-12-20 11:22 - 01045966 _____ C:\Users\maggi_000\Downloads\Conference Report GHN 2015 FINAL.pdf
2015-12-20 10:57 - 2015-12-20 10:57 - 01045966 _____ C:\Users\maggi_000\Downloads\Health_and_Homelessness_Report_2015_final_(1).pdf
2015-12-20 10:45 - 2015-12-20 10:45 - 01045966 _____ C:\Users\maggi_000\Downloads\Health_and_Homelessness_Report_2015_final_.pdf
2015-12-20 00:19 - 2015-12-20 00:40 - 102691212 _____ (Aslain ) C:\Users\stephen\Downloads\Aslains_XVM_WoT_Modpack_Installer_v.9.13.07.exe
2015-12-19 21:02 - 2015-12-19 21:02 - 00037954 _____ C:\Users\stephen\Downloads\excell tutorial.htm
2015-12-19 15:57 - 2016-01-06 12:47 - 00561682 _____ C:\Users\stephen\Desktop\CT_Ind_-_Com_Tutorial_LO1-_2015_B.pdf
2015-12-19 15:56 - 2015-12-19 15:56 - 00280841 _____ C:\Users\stephen\Downloads\CT_Ind_-_Com_Tutorial_LO1-_2015_B.pdf
2015-12-19 14:06 - 2015-12-19 14:07 - 02641949 _____ C:\Users\maggi_000\Downloads\Argyll & Bute Strategic Plan Consultation - Complete Report (small).pdf
2015-12-18 11:18 - 2015-12-18 11:18 - 00749652 _____ C:\Users\maggi_000\Downloads\Health and Homelessness Report 2015 (3).pdf
2015-12-18 11:18 - 2015-12-18 11:18 - 00749652 _____ C:\Users\maggi_000\Downloads\Health and Homelessness Report 2015 (3)(1).pdf
2015-12-18 10:50 - 2015-12-07 04:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-18 10:50 - 2015-12-07 04:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-18 10:50 - 2015-12-07 04:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2015-12-18 10:50 - 2015-12-07 04:48 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-12-18 10:50 - 2015-12-07 04:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2015-12-18 10:50 - 2015-12-07 04:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-12-18 10:50 - 2015-12-07 04:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-12-18 10:50 - 2015-12-07 04:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-12-18 10:50 - 2015-12-07 04:47 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-18 10:50 - 2015-12-07 04:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-18 10:50 - 2015-12-07 04:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-18 10:50 - 2015-12-07 04:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-18 10:50 - 2015-12-07 04:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-18 10:50 - 2015-12-07 04:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-18 10:50 - 2015-12-07 04:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-18 10:50 - 2015-12-07 04:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2015-12-18 10:50 - 2015-12-07 04:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-18 10:50 - 2015-12-07 04:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2015-12-18 10:50 - 2015-12-07 04:07 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-18 10:50 - 2015-12-07 04:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2015-12-18 10:50 - 2015-12-07 04:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-18 10:50 - 2015-12-07 04:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2015-12-18 10:50 - 2015-12-07 04:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-18 10:50 - 2015-12-07 04:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-18 10:50 - 2015-12-07 04:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-18 10:50 - 2015-12-07 04:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-18 10:50 - 2015-12-07 04:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-18 10:50 - 2015-12-07 04:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-18 10:50 - 2015-12-07 04:03 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-18 10:50 - 2015-12-07 04:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-18 10:50 - 2015-12-07 04:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-18 10:50 - 2015-12-07 04:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-18 10:50 - 2015-12-07 04:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2015-12-18 10:50 - 2015-12-07 04:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2015-12-18 10:50 - 2015-12-07 04:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-18 10:50 - 2015-12-07 04:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-18 10:50 - 2015-12-07 04:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-18 10:50 - 2015-12-07 03:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-18 10:50 - 2015-12-07 03:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-18 10:50 - 2015-12-07 03:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-18 10:50 - 2015-12-07 03:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-18 10:50 - 2015-12-07 03:58 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-18 10:50 - 2015-12-07 03:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-18 10:50 - 2015-12-07 03:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-18 10:50 - 2015-12-07 03:57 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-12-18 10:50 - 2015-12-07 03:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2015-12-18 10:50 - 2015-12-07 03:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-18 10:50 - 2015-12-07 03:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-18 10:50 - 2015-12-07 03:55 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-18 10:50 - 2015-12-07 03:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-18 10:50 - 2015-12-07 03:54 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-18 10:50 - 2015-12-07 03:54 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2015-12-18 10:50 - 2015-12-07 03:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-18 10:50 - 2015-12-07 03:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-18 10:50 - 2015-12-07 03:51 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-18 10:50 - 2015-12-07 03:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-12-18 10:50 - 2015-12-07 03:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-18 10:50 - 2015-12-07 03:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2015-12-18 10:50 - 2015-12-07 03:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-18 10:50 - 2015-12-07 03:47 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-12-18 10:50 - 2015-12-07 03:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-18 10:50 - 2015-12-07 03:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-18 10:50 - 2015-12-07 03:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-18 10:50 - 2015-12-07 03:44 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-12-18 10:50 - 2015-12-07 03:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-18 10:50 - 2015-12-07 03:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-18 10:50 - 2015-12-07 03:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-18 10:50 - 2015-12-07 03:40 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-18 10:50 - 2015-12-07 03:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-18 10:50 - 2015-12-07 03:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-18 10:50 - 2015-12-07 03:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-12-18 10:50 - 2015-12-07 03:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2015-12-18 10:50 - 2015-12-07 03:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-12-18 10:50 - 2015-12-07 03:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2015-12-16 19:49 - 2015-12-16 19:49 - 00000000 ___RD C:\Users\stephen\Downloads\DeviceDoctor.RAROpener_mkdtfchztkfbm!App
2015-12-16 19:47 - 2015-12-16 19:47 - 04503034 _____ C:\Users\stephen\Downloads\Fwd__Re__HND_Building_Surveying_Year_2_Graded_Unit.zip
2015-12-16 19:46 - 2015-12-21 15:21 - 07493736 _____ C:\Users\stephen\Desktop\Re_ HND Building Surveying Year 2 Graded Unit.eml
2015-12-16 19:42 - 2015-12-16 19:42 - 07493736 _____ C:\Users\stephen\Downloads\eml
2015-12-16 11:52 - 2015-12-16 11:52 - 00000000 ____D C:\ProgramData\AVG Security Toolbar
2015-12-16 11:52 - 2015-12-16 11:52 - 00000000 ____D C:\ProgramData\AVG Secure Search
2015-12-16 11:52 - 2015-12-16 11:52 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2015-12-16 01:14 - 2015-12-16 01:14 - 00315840 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgwfpa.sys
2015-12-15 15:11 - 2015-12-15 15:11 - 00240704 _____ C:\Users\stephen\Downloads\H72G 35.pdf
2015-12-15 14:27 - 2015-12-15 14:27 - 00000000 ____D C:\Users\Default\AppData\Roaming\AVG
2015-12-15 14:27 - 2015-12-15 14:27 - 00000000 ____D C:\Users\Default\AppData\Local\AVG
2015-12-15 14:27 - 2015-12-15 14:27 - 00000000 ____D C:\Users\Default User\AppData\Roaming\AVG
2015-12-15 14:27 - 2015-12-15 14:27 - 00000000 ____D C:\Users\Default User\AppData\Local\AVG
2015-12-15 14:27 - 2015-12-11 15:33 - 00048552 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\uxtuneup.dll
2015-12-15 14:27 - 2015-12-11 15:33 - 00042408 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\SysWOW64\uxtuneup.dll
2015-12-14 18:25 - 2015-10-28 23:32 - 00093035 _____ C:\Users\stephen\Desktop\Workmanship.pdf
2015-12-14 18:09 - 2015-12-14 18:09 - 01249424 _____ C:\Users\stephen\Downloads\Concrete slab LO2(a).pdf
2015-12-13 14:44 - 2015-12-13 14:44 - 00112671 _____ C:\Users\maggi_000\Downloads\Groupon-1BB7D3D198.pdf
2015-12-13 14:44 - 2015-12-13 14:44 - 00112671 _____ C:\Users\maggi_000\Downloads\Groupon-1BB7D3D198(1).pdf
2015-12-13 13:01 - 2015-12-13 13:01 - 00610183 _____ C:\Users\maggi_000\Downloads\LoanAgreement-25794909.pdf
2015-12-13 11:27 - 2015-12-13 11:27 - 00854427 _____ C:\Users\maggi_000\Downloads\Interior-Lighting-Design-Ideas-HG-November.pdf
2015-12-13 11:27 - 2015-12-13 11:27 - 00854427 _____ C:\Users\maggi_000\Downloads\Interior-Lighting-Design-Ideas-HG-November(1).pdf
2015-12-13 00:16 - 2015-12-13 00:16 - 00000000 ____D C:\Users\stephen\Desktop\Old Firefox Data

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-12 00:08 - 2015-10-30 06:28 - 00000000 ____D C:\Windows
2016-01-12 00:07 - 2015-10-05 21:26 - 00000916 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-12 00:01 - 2015-11-26 19:23 - 00000000 ____D C:\ProgramData\Microsoft Help
2016-01-12 00:01 - 2015-11-26 19:23 - 00000000 ____D C:\Program Files\Microsoft Office
2016-01-12 00:01 - 2015-10-30 07:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-01-12 00:01 - 2014-09-10 16:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-01-12 00:01 - 2014-09-10 16:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2016-01-11 23:41 - 2014-06-07 14:06 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-01-11 23:36 - 2015-10-05 21:26 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-11 23:20 - 2015-02-21 14:00 - 00000000 ____D C:\Users\stephen\AppData\Roaming\TS3Client
2016-01-11 21:29 - 2014-06-15 10:28 - 00000000 __RDO C:\Users\maggi_000\OneDrive
2016-01-11 20:32 - 2014-06-10 16:43 - 00004150 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B1A324D8-A069-4CDA-8F5D-86DAF40AA30B}
2016-01-11 19:17 - 2014-06-15 10:50 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{AF793571-E11C-48A3-B5C9-1D59E4B08831}
2016-01-11 16:07 - 2015-05-22 18:59 - 00000000 ____D C:\ProgramData\WinCalendarV4
2016-01-11 15:54 - 2015-10-30 07:21 - 00000000 ____D C:\WINDOWS\INF
2016-01-11 15:54 - 2015-08-11 11:25 - 00879220 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-11 15:48 - 2015-12-10 04:03 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-11 15:48 - 2015-12-10 03:56 - 00000000 ____D C:\ProgramData\NVIDIA
2016-01-11 15:47 - 2015-10-30 06:28 - 01048576 ___SH C:\WINDOWS\system32\config\BBI
2016-01-11 15:45 - 2015-10-30 07:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-11 15:44 - 2015-12-06 16:32 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2016-01-11 15:42 - 2014-06-07 11:05 - 00000000 ____D C:\Users\stephen\AppData\Local\Packages
2016-01-11 14:25 - 2015-12-10 03:57 - 00000000 ____D C:\Users\cmcga_000
2016-01-11 13:53 - 2015-06-25 07:36 - 00000000 ____D C:\Program Files\Common Files\AV
2016-01-11 13:25 - 2015-12-10 03:57 - 00000000 ____D C:\Users\stephen
2016-01-11 13:25 - 2014-09-05 20:51 - 00000000 ____D C:\ProgramData\MFAData
2016-01-11 02:00 - 2014-07-19 10:51 - 00000000 ____D C:\Users\stephen\AppData\Local\Adobe
2016-01-10 02:40 - 2015-03-23 22:26 - 00000000 ____D C:\Users\stephen\AppData\Roaming\vlc
2016-01-09 22:39 - 2015-10-30 07:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-08 18:33 - 2014-09-14 11:10 - 00186016 _____ C:\Users\maggi_000\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-08 11:17 - 2014-09-05 20:53 - 00000000 ___HD C:\$AVG
2016-01-08 11:17 - 2014-09-05 20:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-01-07 19:08 - 2014-06-16 08:13 - 00000551 _____ C:\Users\maggi_000\Desktop\our nos.txt
2016-01-07 18:50 - 2015-10-30 06:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-01-07 00:03 - 2014-10-06 09:00 - 00000000 ____D C:\Users\cmcga_000\AppData\Local\Avg
2016-01-07 00:03 - 2014-09-25 06:56 - 00000000 ____D C:\Users\maggi_000\AppData\Local\Avg
2016-01-06 22:03 - 2015-12-10 04:00 - 00001552 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-01-06 22:03 - 2015-12-08 02:54 - 00002135 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
2016-01-06 22:03 - 2015-10-05 21:26 - 00002240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-01-06 22:03 - 2015-10-05 11:31 - 00001136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk
2016-01-06 22:03 - 2015-09-29 18:26 - 00001205 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CS4.lnk
2016-01-06 22:03 - 2015-09-29 18:25 - 00001524 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Drive CS4.lnk
2016-01-06 22:03 - 2015-09-29 18:25 - 00001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS4.lnk
2016-01-06 22:03 - 2015-09-29 18:22 - 00001491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS4.lnk
2016-01-06 22:03 - 2015-09-29 18:22 - 00001363 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS4.lnk
2016-01-06 22:03 - 2015-08-11 17:41 - 00002533 _____ C:\Users\stephen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-01-06 22:03 - 2015-07-20 18:09 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-06 22:03 - 2015-05-27 13:33 - 00001127 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-01-06 22:03 - 2015-05-02 16:00 - 00000992 _____ C:\Users\stephen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2016-01-06 22:03 - 2015-04-16 17:14 - 00000690 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\leafDrums 2.lnk
2016-01-06 22:03 - 2014-09-10 16:56 - 00002619 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Open Office Document.lnk
2016-01-06 22:03 - 2014-09-10 16:56 - 00002609 _____ C:\ProgramData\Microsoft\Windows\Start Menu\New Office Document.lnk
2016-01-06 22:03 - 2014-07-28 11:48 - 00001062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk
2016-01-06 22:03 - 2014-07-22 09:45 - 00002302 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2016-01-06 22:03 - 2014-07-19 10:53 - 00001305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-01-06 22:02 - 2015-10-30 07:24 - 00000000 ____D C:\WINDOWS\PLA
2016-01-06 21:46 - 2015-12-10 03:55 - 00000000 ___DC C:\WINDOWS\Panther
2016-01-06 17:06 - 2015-12-10 03:57 - 00000000 ____D C:\Users\maggi_000
2016-01-06 10:15 - 2015-10-30 07:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-06 10:05 - 2015-12-08 02:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-01-05 19:23 - 2014-09-15 12:11 - 00186016 _____ C:\Users\stephen\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-05 06:26 - 2015-12-10 03:55 - 03184824 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-05 06:24 - 2015-10-30 18:08 - 00000000 ____D C:\WINDOWS\ShellNew
2016-01-03 01:40 - 2015-10-30 07:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-01-03 01:40 - 2015-10-30 07:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-02 05:41 - 2014-12-03 20:59 - 00000482 _____ C:\WINDOWS\Tasks\SDMsgUpdate (TE).job
2016-01-01 11:31 - 2014-06-15 10:26 - 00000000 ____D C:\Users\maggi_000\AppData\Roaming\Adobe
2015-12-30 03:19 - 2014-07-05 10:05 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-12-30 03:19 - 2014-06-28 08:39 - 00000000 ____D C:\Users\stephen\AppData\Roaming\Autodesk
2015-12-30 03:19 - 2014-06-28 08:39 - 00000000 ____D C:\ProgramData\Autodesk
2015-12-30 03:18 - 2015-02-01 02:09 - 00000000 ____D C:\Users\stephen\AppData\Local\Microsoft Help
2015-12-29 05:41 - 2014-06-07 14:06 - 00003816 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-21 15:12 - 2014-06-28 08:47 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared
2015-12-21 15:12 - 2014-06-28 08:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-12-21 15:12 - 2014-06-05 10:43 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-21 15:10 - 2014-06-28 08:47 - 00000000 ____D C:\Users\Public\Documents\Autodesk
2015-12-21 15:08 - 2015-02-26 23:01 - 00000000 ____D C:\Program Files\Autodesk
2015-12-21 15:05 - 2015-02-26 22:58 - 00000000 ____D C:\Autodesk
2015-12-19 04:43 - 2015-10-30 07:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-19 04:43 - 2015-10-30 07:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-19 04:43 - 2015-10-30 07:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2015-12-18 12:05 - 2015-05-02 12:56 - 00000000 ____D C:\Users\maggi_000\AppData\Local\AVG Web TuneUp
2015-12-18 12:04 - 2015-05-02 12:56 - 00000000 ____D C:\Program Files\AVG Web TuneUp
2015-12-18 12:04 - 2015-05-02 12:56 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2015-12-16 11:54 - 2015-12-08 14:44 - 00000000 ____D C:\Users\stephen\Desktop\Office 2007 Project
2015-12-16 08:46 - 2015-08-11 20:18 - 00002468 _____ C:\Users\maggi_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-16 08:29 - 2015-10-30 07:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-12-16 08:29 - 2015-02-01 02:03 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-12-13 04:22 - 2015-10-30 07:24 - 00000000 ____D C:\WINDOWS\rescache

==================== Files in the root of some directories =======

2015-11-09 12:48 - 2015-11-09 12:48 - 0219654 _____ () C:\Users\stephen\AppData\Local\ars.cache
2015-11-09 12:48 - 2015-11-09 12:48 - 0516250 _____ () C:\Users\stephen\AppData\Local\census.cache
2015-11-09 12:41 - 2015-11-09 12:41 - 0000036 _____ () C:\Users\stephen\AppData\Local\housecall.guid.cache
2014-06-08 11:28 - 2015-09-08 23:02 - 0007601 _____ () C:\Users\stephen\AppData\Local\Resmon.ResmonCfg
2015-11-09 12:46 - 2015-11-09 12:46 - 0000010 _____ () C:\Users\stephen\AppData\Local\sponge.last.runtime.cache
2015-12-10 03:56 - 2015-12-10 03:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-06-28 08:42 - 2014-06-28 08:42 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2015-12-21 15:10 - 2015-12-21 15:10 - 0000133 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

Some files in TEMP:
====================
C:\Users\stephen\AppData\Local\Temp\AcDeltree.exe
C:\Users\stephen\AppData\Local\Temp\avguirn_0895611346.exe
C:\Users\stephen\AppData\Local\Temp\ose00000.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-01-04 11:42

==================== End of FRST.txt ============================