Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-06-2016
Ran by [removed] (administrator) on LENNY (19-06-2016 09:55:07)
Running from C:\Users\[removed]\Downloads
[removed]
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\DragonAssistant3\DragonAssistantMaintenance.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\iMController\SystemAgentService.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
() C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.1\ToolbarUpdater.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Lenovo) C:\ProgramData\LenovoTransition\Server\x64\ymc.exe
(PointGrab LTD) C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(PointGrab LTD) C:\Program Files (x86)\Lenovo\Motion Control\PG_Service_Launcher.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(IObit) C:\Program Files (x86)\IObit\Classic Start\SMService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(PointGrab LTD) C:\Program Files (x86)\Lenovo\Motion Control\WebcamSplitterServer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Pokki) C:\Users\Kerrie\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(IObit) C:\Program Files (x86)\IObit\Classic Start\ClassicStart.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IObit) C:\Program Files (x86)\IObit\Classic Start\StartMenu_Hook.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IObit) C:\Program Files (x86)\IObit\Classic Start\InstallServices.exe
(Pokki) C:\Users\Kerrie\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(Pokki) C:\Users\Kerrie\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe
(Pokki) C:\Users\Kerrie\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.526.11220.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\NetworkUXBroker.exe
(Microsoft Corporation) C:\Windows\System32\AtBroker.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\WINDOWS\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-08-02] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13656792 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353432 2013-09-26] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [59923440 2014-10-23] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-10-23] (Lenovo(beijing) Limited)
HKLM\...\Run: [GiveasyouLive] => C:\Program Files\GiveasyouLive\GiveAsYouLiveServer.exe [810848 2011-06-17] (Everyclick Ltd)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-17] (Apple Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3934720 2016-06-16] (Synaptics Incorporated)
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6570256 2016-06-09] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [1941064 2016-05-24] ()
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [395656 2013-10-01] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [153992 2013-10-01] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2720144 2015-08-09] (Dominik Reichl)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5893920 2015-11-12] (IObit)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-05-18] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\...\Run: [HP Photosmart 7510 series (NET)] => C:\Program Files\HP\HP Photosmart 7510 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-11-30] (Apple Inc.)
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [61200 2015-11-30] (Apple Inc.)
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\...\Run: [AppleIEDAV] => C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1079592 2015-06-26] (Apple Inc.)
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [103696 2015-11-30] (Apple Inc.)
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [51656320 2016-04-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248176 2015-07-13] (TomTom)
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\...\Run: [Advanced SystemCare 9] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [2022688 2016-04-26] (IObit)
AppInit_DLLs: C:\PROGRA~2\LENOVO~2\LENOVO~1\bin\SPVC64~1.DLL => No File
ShellIconOverlayIdentifiers: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Startup: C:\Users\Kerrie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2015-05-17]
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

AutoConfigURL: [S-1-5-21-2310641378-1333773240-3601253655-1001] => hxxp://un-stop.info/wpad.dat?51f512566930a5fdf0c27b1c6824824511621150
Tcpip\Parameters: [DhcpNameServer] [removed] [removed] 192.168.1.1
Tcpip\..\Interfaces\{42d83c6e-2972-4423-896d-a79d2f4d2f1a}: [DhcpNameServer] [removed]
Tcpip\..\Interfaces\{8b99960e-e23b-4904-a2c3-6c6c505966b1}: [NameServer] 194.168.4.100 194.168.8.100 192.168.1.1
Tcpip\..\Interfaces\{8b99960e-e23b-4904-a2c3-6c6c505966b1}: [DhcpNameServer] [removed] [removed] 192.168.1.1
ManualProxies: 0hxxp://un-stop.info/wpad.dat?51f512566930a5fdf0c27b1c6824824511621150

Internet Explorer:
==================
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.co.uk/
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2310641378-1333773240-3601253655-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://home.lenovo.com
SearchScopes: HKU\S-1-5-21-2310641378-1333773240-3601253655-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={DE37A385-75EC-45E7-AD32-B5980DB7E7E1}&mid=dbd1bf63834a47cda1e639f8ba9a5951-251aef0b5bb942b21cf9944a92193a800548e85c&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2015-05-11 12:21:06&v=4.2.9.726&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12] (IObit)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.1.831\AVG Web TuneUp.dll [2016-05-24] (AVG)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Give as you Live (tm) -> {C090DCD2-0339-4C3F-8441-302449B3ED74} -> C:\Program Files\GiveasyouLive\ExplorerPlugIn.dll [2011-06-17] (Everyclick Ltd)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-15] (Oracle Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.1.831\AVG Web TuneUp.dll [2016-05-24] (AVG)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-15] (Oracle Corporation)
DPF: HKLM-x32 {8D9563A9-8D5F-459B-87F2-BA842255CB9A} hxxps://uag.cambsed.net/InternalSite/WhlCompMgr.cab
DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\Kerrie\AppData\Roaming\Mozilla\Firefox\Profiles\iugt7fne.default
FF DefaultSearchEngine: Google
FF Homepage: www.google.co.uk
FF SelectedSearchEngine: Google
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.1\\npsitesafety.dll [No File]
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2013-10-01] (Citrix Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-08] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-08] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-15] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-15] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll [2013-12-13] (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Kerrie\AppData\Roaming\Mozilla\Firefox\Profiles\iugt7fne.default\user.js [2014-12-30]
FF SearchPlugin: C:\Users\Kerrie\AppData\Roaming\Mozilla\Firefox\Profiles\iugt7fne.default\searchplugins\avg-secure-search.xml [2016-05-24]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-05-24]
FF Extension: AVG Web TuneUp - C:\Users\Kerrie\AppData\Roaming\Mozilla\Firefox\Profiles\iugt7fne.default\Extensions\[removed] [2016-05-24]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Kerrie\AppData\Roaming\Mozilla\Firefox\Profiles\iugt7fne.default\Extensions\[removed] [2016-01-01] [not signed]
FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25]

Chrome: 
=======
CHR HomePage: Default -> hxxp://homepage-web.com/?s=lenovo&m=home
CHR StartupUrls: Default -> "hxxps://www.google.co.uk/"
CHR Profile: C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-17]
CHR Extension: (Google Docs) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-17]
CHR Extension: (Google Drive) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-23]
CHR Extension: (Google Cast) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2016-03-24]
CHR Extension: (Google Search) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-13]
CHR Extension: (Google Sheets) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-17]
CHR Extension: (Google Docs Offline) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Skype) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-05-24]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Gmail) - C:\Users\Kerrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-13]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [446240 2016-01-05] (IObit)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [636312 2016-06-09] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5165824 2016-06-09] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1080592 2016-05-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [705528 2016-06-09] (AVG Technologies CZ, s.r.o.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R2 DAMSvc; C:\Program Files (x86)\Nuance\DragonAssistant3\DragonAssistantMaintenance.exe [4260112 2014-04-09] (Nuance Communications, Inc.)
S3 DMService; C:\windows\Downloaded Program Files\DMService.exe [620760 2015-09-18] (Microsoft Corporation)
S2 DptfParticipantProcessorService; C:\windows\system32\DptfParticipantProcessorService.exe [115632 2013-08-02] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-08-02] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-08-02] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-08-02] (Intel Corporation)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [356336 2016-06-16] (Intel Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [882464 2015-11-04] (IObit)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-12] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-12] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)
R2 Leawo_service; C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe [1114608 2014-08-22] ()
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-05-22] (LENOVO INCORPORATED.)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-10-23] (Lenovo(beijing) Limited)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960160 2016-04-22] (IObit)
R2 NitroDriverReadSpool9; C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [230920 2013-12-13] (Nitro PDF Software)
R2 PGService; C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe [167176 2014-02-25] (PointGrab LTD)
R2 PG_Service_Launcher; C:\Program Files (x86)\Lenovo\Motion Control\PG_Service_Launcher.exe [512776 2014-02-25] (PointGrab LTD)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [288472 2013-09-13] (Realtek Semiconductor)
R2 SMService; C:\program files (x86)\iobit\Classic Start\SMService.exe [1056544 2015-11-06] (IObit)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [237736 2016-06-16] (Synaptics Incorporated)
S2 uagqecsvc; C:\Program Files\Microsoft Forefront UAG\Endpoint Components\3.1.0\uagqecsvc.exe [170712 2013-11-15] (Microsoft Corporation)
R2 vToolbarUpdater40.3.1; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.1\ToolbarUpdater.exe [1323080 2016-05-16] (AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [972872 2016-05-24] ()
R2 ymc; C:\ProgramData\LenovoTransition\Server\x64\ymc.exe [34576 2014-10-23] (Lenovo)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162592 2016-02-16] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [307456 2016-05-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-05-02] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [247040 2016-05-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [51968 2016-05-02] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [71936 2016-05-05] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [315840 2015-12-16] (AVG Technologies CZ, s.r.o.)
S3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-08-02] (Intel Corporation)
S3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-08-02] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-08-02] (Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [52200 2016-06-16] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [50664 2016-06-16] (Intel Corporation)
S3 ETDSMBus; C:\Windows\System32\drivers\ETDSMBus.sys [31832 2016-06-16] (ELAN Microelectronic Corp.)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit)
R1 HWiNFO32; C:\windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-03-31] (REALiX(tm))
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [263952 2015-07-14] (Intel Corporation)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-09] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-09] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2015-08-18] ()
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [185896 2016-06-16] (Intel Corporation)
R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3517192 2016-06-16] (Intel Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2015-03-25] (IObit.com)
S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [404184 2016-01-01] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33960 2016-06-16] (Synaptics Incorporated)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [744928 2016-06-16] (Sunplus)
R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2015-03-25] (IObit.com)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-06-19 09:55 - 2016-06-19 09:55 - 00034783 _____ C:\Users\Kerrie\Downloads\FRST.txt
2016-06-19 09:54 - 2016-06-19 09:55 - 00000000 ____D C:\FRST
2016-06-19 09:53 - 2016-06-19 09:54 - 02387456 _____ (Farbar) C:\Users\Kerrie\Downloads\FRST64.exe
2016-06-19 09:52 - 2016-06-19 09:53 - 01737728 _____ (Farbar) C:\Users\Kerrie\Downloads\FRST.exe
2016-06-18 14:07 - 2016-06-18 14:07 - 02888184 _____ (Google) C:\Users\Kerrie\Downloads\chrome_cleanup_tool.exe
2016-06-18 09:34 - 2016-06-18 09:34 - 00003010 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (Kerrie)
2016-06-18 09:32 - 2016-06-18 09:32 - 00000000 ___HD C:\OneDriveTemp
2016-06-18 09:31 - 2016-06-18 23:26 - 00000292 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_Kerrie.job
2016-06-18 09:31 - 2016-06-18 09:31 - 00002482 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Kerrie
2016-06-18 09:31 - 2016-06-18 09:31 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-06-17 18:21 - 2016-06-14 19:33 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-06-17 18:21 - 2016-06-14 19:33 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-16 18:53 - 2016-03-25 14:33 - 00128288 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll
2016-06-16 15:01 - 2016-06-16 15:01 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-06-16 15:01 - 2016-06-16 15:01 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2016-06-16 15:00 - 2016-06-16 15:00 - 00000000 ____D C:\Users\Kerrie\AppData\Roaming\AVG
2016-06-16 14:59 - 2016-06-16 14:59 - 39505488 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 38554280 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 34507296 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 33176928 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 29092864 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 19852800 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 15346152 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 14444872 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 13357536 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 11747568 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 11678720 _____ (Intel Corporation) C:\WINDOWS\system32\ig75icd64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 08680960 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig75icd32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 07927272 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2016-06-16 14:59 - 2016-06-16 14:59 - 06577536 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 05677056 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 05254144 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 05046016 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 04918272 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 04417536 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 04200808 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 04168072 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 03961856 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 02054144 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 01865080 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 01792376 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 01789760 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 01582072 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 01443784 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 01169912 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 01009648 _____ C:\WINDOWS\system32\igfxSDK.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00948208 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00944624 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00744440 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00624128 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00604656 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00519152 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00449520 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00430080 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00407552 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00385536 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00384496 _____ C:\WINDOWS\system32\igfxTray.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00381440 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00379896 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00356336 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00341488 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCComp64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00337392 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00309760 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00300888 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00285848 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00284144 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00257528 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00251376 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00246272 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00231312 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00219632 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00216568 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00215024 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00214512 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00212584 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00199168 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4444.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00194880 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00184320 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00173648 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00172624 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00171536 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00164864 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00157680 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2016-06-16 14:59 - 2016-06-16 14:59 - 00150184 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00150176 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00102912 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00095224 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00094720 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00092160 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00091136 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00086528 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00075776 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00047368 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00045952 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00020480 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00020472 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00018936 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00018936 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00013824 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2016-06-16 14:59 - 2016-06-16 14:59 - 00013824 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2016-06-16 14:58 - 2016-06-16 14:58 - 10719648 _____ C:\WINDOWS\system32\Drivers\Netwfw02.dat
2016-06-16 14:58 - 2016-06-16 14:58 - 05799386 _____ C:\WINDOWS\system32\igdclbif.bin
2016-06-16 14:58 - 2016-06-16 14:58 - 03517192 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwbw02.sys
2016-06-16 14:58 - 2016-06-16 14:58 - 00843068 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2016-06-16 14:58 - 2016-06-16 14:58 - 00264696 _____ C:\WINDOWS\system32\igfxCPL.cpl
2016-06-16 14:58 - 2016-06-16 14:58 - 00004850 _____ C:\WINDOWS\system32\iglhxs64.vp
2016-06-16 14:57 - 2016-06-16 14:57 - 01804688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01011.dll
2016-06-16 14:57 - 2016-06-16 14:57 - 01469952 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorA.sys
2016-06-16 14:57 - 2016-06-16 14:57 - 00052200 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\dptf_cpu.sys
2016-06-16 14:57 - 2016-06-16 14:57 - 00050664 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\dptf_pch.sys
2016-06-16 14:56 - 2016-06-16 14:56 - 01795952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2016-06-16 14:56 - 2016-06-16 14:56 - 00755880 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2016-06-16 14:56 - 2016-06-16 14:56 - 00744928 _____ (Sunplus) C:\WINDOWS\system32\Drivers\SPUVCBv_x64.sys
2016-06-16 14:56 - 2016-06-16 14:56 - 00609280 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2016-06-16 14:56 - 2016-06-16 14:56 - 00411304 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2016-06-16 14:56 - 2016-06-16 14:56 - 00377584 _____ C:\WINDOWS\system32\VCamPPage_x64.dll
2016-06-16 14:56 - 2016-06-16 14:56 - 00319216 _____ C:\WINDOWS\SysWOW64\VCamPPage.dll
2016-06-16 14:56 - 2016-06-16 14:56 - 00260264 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2016-06-16 14:56 - 2016-06-16 14:56 - 00258728 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo34.dll
2016-06-16 14:56 - 2016-06-16 14:56 - 00185896 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys
2016-06-16 14:56 - 2016-06-16 14:56 - 00102712 _____ (Dext5xx) C:\WINDOWS\system32\DextUVCB_x64.ax
2016-06-16 14:56 - 2016-06-16 14:56 - 00099640 _____ (Dext5xx) C:\WINDOWS\SysWOW64\DextUVCB.ax
2016-06-16 14:56 - 2016-06-16 14:56 - 00033960 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel_Aux.sys
2016-06-16 14:56 - 2016-06-16 14:56 - 00033448 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF_Aux.sys
2016-06-16 14:56 - 2016-06-16 14:56 - 00014519 _____ C:\WINDOWS\TWAINSP_Lenovo_EasyCamera.ini
2016-06-16 14:56 - 2016-06-16 14:56 - 00007408 _____ C:\WINDOWS\TWAINSP_Lenovo_EasyCamera.src
2016-06-16 14:55 - 2016-06-16 14:55 - 01730328 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01009.dll
2016-06-16 14:55 - 2016-06-16 14:55 - 00031832 _____ (ELAN Microelectronic Corp.) C:\WINDOWS\system32\Drivers\ETDSMBus.sys
2016-06-16 14:54 - 2016-06-16 14:54 - 00000882 _____ C:\Users\Public\Desktop\AVG.lnk
2016-06-16 14:54 - 2016-06-16 14:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-06-16 14:53 - 2016-06-16 14:56 - 00000000 ____D C:\ProgramData\Avg
2016-06-16 14:53 - 2016-06-16 14:54 - 00000000 ____D C:\Users\Kerrie\AppData\Local\AvgSetupLog
2016-06-16 14:53 - 2016-06-16 14:53 - 03136792 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Kerrie\Downloads\AVG_Protection_Free_698.exe
2016-06-16 14:48 - 2016-06-16 14:48 - 00001452 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2016-06-16 14:48 - 2016-06-16 14:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-06-16 14:47 - 2016-06-19 09:31 - 00002261 _____ C:\Users\Public\Desktop\Advanced SystemCare 9.lnk
2016-06-16 14:47 - 2016-06-16 23:32 - 00000252 _____ C:\WINDOWS\Tasks\ASC9_SkipUac_Kerrie.job
2016-06-16 14:47 - 2016-06-16 15:02 - 00002248 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2016-06-16 14:47 - 2016-06-16 14:47 - 00003364 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler
2016-06-16 14:47 - 2016-06-16 14:47 - 00003300 _____ C:\WINDOWS\System32\Tasks\ASC9_PerformanceMonitor
2016-06-16 14:47 - 2016-06-16 14:47 - 00003212 _____ C:\WINDOWS\System32\Tasks\SmartDefrag_Startup
2016-06-16 14:47 - 2016-06-16 14:47 - 00003208 _____ C:\WINDOWS\System32\Tasks\SmartDefrag_Update
2016-06-16 14:47 - 2016-06-16 14:47 - 00002428 _____ C:\WINDOWS\System32\Tasks\ASC9_SkipUac_Kerrie
2016-06-16 14:47 - 2016-06-16 14:47 - 00001250 _____ C:\Users\Public\Desktop\Smart Defrag 5.lnk
2016-06-16 14:47 - 2016-06-16 14:47 - 00000000 ____D C:\WINDOWS\IObit
2016-06-16 14:47 - 2016-06-16 14:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag
2016-06-16 14:47 - 2016-06-16 14:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2016-06-16 14:47 - 2016-06-16 14:47 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-06-15 14:19 - 2016-05-28 05:57 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-06-15 14:19 - 2016-05-28 05:57 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-06-15 14:19 - 2016-05-28 05:29 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-06-15 14:19 - 2016-05-28 05:29 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-06-15 14:19 - 2016-05-28 05:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-06-15 14:19 - 2016-05-28 05:22 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-06-15 14:19 - 2016-05-28 05:22 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-06-15 14:19 - 2016-05-28 05:19 - 24605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-06-15 14:19 - 2016-05-28 05:18 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-06-15 14:19 - 2016-05-28 05:18 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-06-15 14:19 - 2016-05-28 05:17 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-06-15 14:19 - 2016-05-28 05:15 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-06-15 14:19 - 2016-05-28 05:15 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-06-15 14:19 - 2016-05-28 05:15 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-06-15 14:19 - 2016-05-28 05:14 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-06-15 14:19 - 2016-05-28 05:14 - 00606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-06-15 14:19 - 2016-05-28 05:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-06-15 14:19 - 2016-05-28 05:13 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-06-15 14:19 - 2016-05-28 05:12 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-06-15 14:19 - 2016-05-28 05:11 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-06-15 14:19 - 2016-05-28 05:11 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-06-15 14:19 - 2016-05-28 05:11 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-06-15 14:19 - 2016-05-28 05:08 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-06-15 14:19 - 2016-05-28 05:06 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-06-15 14:19 - 2016-05-28 05:03 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-06-15 14:19 - 2016-05-28 05:00 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-06-15 14:19 - 2016-05-28 04:58 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-06-15 14:18 - 2016-05-28 07:13 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-06-15 14:18 - 2016-05-28 07:13 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-06-15 14:18 - 2016-05-28 07:13 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-06-15 14:18 - 2016-05-28 07:13 - 00290496 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-06-15 14:18 - 2016-05-28 07:13 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-06-15 14:18 - 2016-05-28 07:13 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-06-15 14:18 - 2016-05-28 06:25 - 04268880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2016-06-15 14:18 - 2016-05-28 06:23 - 00388384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-06-15 14:18 - 2016-05-28 06:23 - 00312160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2016-06-15 14:18 - 2016-05-28 06:22 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-06-15 14:18 - 2016-05-28 06:22 - 04387680 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2016-06-15 14:18 - 2016-05-28 06:22 - 00428896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-06-15 14:18 - 2016-05-28 06:22 - 00211296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-06-15 14:18 - 2016-05-28 06:22 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-06-15 14:18 - 2016-05-28 06:20 - 00430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-06-15 14:18 - 2016-05-28 06:18 - 00357216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2016-06-15 14:18 - 2016-05-28 06:16 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-06-15 14:18 - 2016-05-28 06:09 - 00501600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-06-15 14:18 - 2016-05-28 06:09 - 00170848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
2016-06-15 14:18 - 2016-05-28 06:09 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-06-15 14:18 - 2016-05-28 06:08 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-06-15 14:18 - 2016-05-28 06:08 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
2016-06-15 14:18 - 2016-05-28 06:08 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-06-15 14:18 - 2016-05-28 06:07 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-06-15 14:18 - 2016-05-28 06:07 - 02921880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-06-15 14:18 - 2016-05-28 06:07 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-06-15 14:18 - 2016-05-28 06:07 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-06-15 14:18 - 2016-05-28 06:07 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-06-15 14:18 - 2016-05-28 06:07 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-06-15 14:18 - 2016-05-28 06:07 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-06-15 14:18 - 2016-05-28 06:06 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-06-15 14:18 - 2016-05-28 06:06 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-06-15 14:18 - 2016-05-28 06:06 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-06-15 14:18 - 2016-05-28 06:06 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-06-15 14:18 - 2016-05-28 06:06 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-06-15 14:18 - 2016-05-28 06:05 - 04515264 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-06-15 14:18 - 2016-05-28 06:04 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-06-15 14:18 - 2016-05-28 06:04 - 00431296 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2016-06-15 14:18 - 2016-05-28 06:04 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2016-06-15 14:18 - 2016-05-28 06:04 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-06-15 14:18 - 2016-05-28 06:04 - 00111064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2016-06-15 14:18 - 2016-05-28 06:04 - 00097096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2016-06-15 14:18 - 2016-05-28 06:03 - 00131248 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2016-06-15 14:18 - 2016-05-28 05:58 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-06-15 14:18 - 2016-05-28 05:58 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-06-15 14:18 - 2016-05-28 05:57 - 02548944 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-06-15 14:18 - 2016-05-28 05:57 - 02195632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-06-15 14:18 - 2016-05-28 05:57 - 00649792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-06-15 14:18 - 2016-05-28 05:57 - 00636304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-06-15 14:18 - 2016-05-28 05:57 - 00577376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-06-15 14:18 - 2016-05-28 05:57 - 00546456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-06-15 14:18 - 2016-05-28 05:57 - 00521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-06-15 14:18 - 2016-05-28 05:57 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-06-15 14:18 - 2016-05-28 05:35 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2016-06-15 14:18 - 2016-05-28 05:35 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-06-15 14:18 - 2016-05-28 05:35 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys
2016-06-15 14:18 - 2016-05-28 05:31 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
2016-06-15 14:18 - 2016-05-28 05:31 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-06-15 14:18 - 2016-05-28 05:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-06-15 14:18 - 2016-05-28 05:29 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2016-06-15 14:18 - 2016-05-28 05:29 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
2016-06-15 14:18 - 2016-05-28 05:28 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-06-15 14:18 - 2016-05-28 05:28 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-06-15 14:18 - 2016-05-28 05:28 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll
2016-06-15 14:18 - 2016-05-28 05:27 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-06-15 14:18 - 2016-05-28 05:26 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-06-15 14:18 - 2016-05-28 05:26 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-06-15 14:18 - 2016-05-28 05:26 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-06-15 14:18 - 2016-05-28 05:26 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-06-15 14:18 - 2016-05-28 05:26 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-06-15 14:18 - 2016-05-28 05:25 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-06-15 14:18 - 2016-05-28 05:25 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-06-15 14:18 - 2016-05-28 05:24 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-06-15 14:18 - 2016-05-28 05:24 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys
2016-06-15 14:18 - 2016-05-28 05:24 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-06-15 14:18 - 2016-05-28 05:24 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-06-15 14:18 - 2016-05-28 05:24 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-06-15 14:18 - 2016-05-28 05:24 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-06-15 14:18 - 2016-05-28 05:24 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2016-06-15 14:18 - 2016-05-28 05:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll
2016-06-15 14:18 - 2016-05-28 05:23 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-06-15 14:18 - 2016-05-28 05:23 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2016-06-15 14:18 - 2016-05-28 05:22 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-06-15 14:18 - 2016-05-28 05:22 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-06-15 14:18 - 2016-05-28 05:22 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2016-06-15 14:18 - 2016-05-28 05:22 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-06-15 14:18 - 2016-05-28 05:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-06-15 14:18 - 2016-05-28 05:22 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-06-15 14:18 - 2016-05-28 05:22 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2016-06-15 14:18 - 2016-05-28 05:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-06-15 14:18 - 2016-05-28 05:21 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll
2016-06-15 14:18 - 2016-05-28 05:21 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-06-15 14:18 - 2016-05-28 05:21 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-06-15 14:18 - 2016-05-28 05:20 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-06-15 14:18 - 2016-05-28 05:20 - 00511488 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2016-06-15 14:18 - 2016-05-28 05:20 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll
2016-06-15 14:18 - 2016-05-28 05:20 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2016-06-15 14:18 - 2016-05-28 05:20 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll
2016-06-15 14:18 - 2016-05-28 05:20 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2016-06-15 14:18 - 2016-05-28 05:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2016-06-15 14:18 - 2016-05-28 05:19 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-06-15 14:18 - 2016-05-28 05:19 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-06-15 14:18 - 2016-05-28 05:19 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-06-15 14:18 - 2016-05-28 05:19 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2016-06-15 14:18 - 2016-05-28 05:19 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2016-06-15 14:18 - 2016-05-28 05:18 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-06-15 14:18 - 2016-05-28 05:18 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-06-15 14:18 - 2016-05-28 05:18 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2016-06-15 14:18 - 2016-05-28 05:18 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL
2016-06-15 14:18 - 2016-05-28 05:18 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2016-06-15 14:18 - 2016-05-28 05:18 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-06-15 14:18 - 2016-05-28 05:17 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-06-15 14:18 - 2016-05-28 05:17 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2016-06-15 14:18 - 2016-05-28 05:17 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2016-06-15 14:18 - 2016-05-28 05:17 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-06-15 14:18 - 2016-05-28 05:17 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-06-15 14:18 - 2016-05-28 05:17 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-06-15 14:18 - 2016-05-28 05:17 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-06-15 14:18 - 2016-05-28 05:16 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-06-15 14:18 - 2016-05-28 05:16 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-06-15 14:18 - 2016-05-28 05:16 - 00684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-06-15 14:18 - 2016-05-28 05:16 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-06-15 14:18 - 2016-05-28 05:16 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-06-15 14:18 - 2016-05-28 05:16 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-06-15 14:18 - 2016-05-28 05:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll
2016-06-15 14:18 - 2016-05-28 05:16 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2016-06-15 14:18 - 2016-05-28 05:15 - 00794624 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-06-15 14:18 - 2016-05-28 05:15 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2016-06-15 14:18 - 2016-05-28 05:15 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2016-06-15 14:18 - 2016-05-28 05:15 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-06-15 14:18 - 2016-05-28 05:14 - 18674176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-06-15 14:18 - 2016-05-28 05:14 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-06-15 14:18 - 2016-05-28 05:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-06-15 14:18 - 2016-05-28 05:14 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-06-15 14:18 - 2016-05-28 05:14 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-06-15 14:18 - 2016-05-28 05:14 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-06-15 14:18 - 2016-05-28 05:13 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-06-15 14:18 - 2016-05-28 05:13 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-06-15 14:18 - 2016-05-28 05:13 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-06-15 14:18 - 2016-05-28 05:13 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-06-15 14:18 - 2016-05-28 05:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-06-15 14:18 - 2016-05-28 05:13 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2016-06-15 14:18 - 2016-05-28 05:13 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-06-15 14:18 - 2016-05-28 05:12 - 00614400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-06-15 14:18 - 2016-05-28 05:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2016-06-15 14:18 - 2016-05-28 05:11 - 01445888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-06-15 14:18 - 2016-05-28 05:11 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-06-15 14:18 - 2016-05-28 05:11 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-06-15 14:18 - 2016-05-28 05:11 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-06-15 14:18 - 2016-05-28 05:11 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2016-06-15 14:18 - 2016-05-28 05:09 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-06-15 14:18 - 2016-05-28 05:08 - 13385728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-06-15 14:18 - 2016-05-28 05:06 - 12128256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-06-15 14:18 - 2016-05-28 05:06 - 01339904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-06-15 14:18 - 2016-05-28 05:05 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-06-15 14:18 - 2016-05-28 05:05 - 03664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-06-15 14:18 - 2016-05-28 05:05 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-06-15 14:18 - 2016-05-28 05:05 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-06-15 14:18 - 2016-05-28 05:04 - 06973952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-06-15 14:18 - 2016-05-28 05:04 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-06-15 14:18 - 2016-05-28 05:04 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-06-15 14:18 - 2016-05-28 05:03 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-06-15 14:18 - 2016-05-28 05:03 - 02609664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-06-15 14:18 - 2016-05-28 05:03 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll
2016-06-15 14:18 - 2016-05-28 05:03 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2016-06-15 14:18 - 2016-05-28 05:03 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-06-15 14:18 - 2016-05-28 05:02 - 03590144 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-06-15 14:18 - 2016-05-28 05:02 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-06-15 14:18 - 2016-05-28 05:02 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2016-06-15 14:18 - 2016-05-28 05:02 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-06-15 14:18 - 2016-05-28 05:01 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-06-15 14:18 - 2016-05-28 05:01 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-06-15 14:18 - 2016-05-28 05:01 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-06-15 14:18 - 2016-05-28 05:01 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-06-15 14:18 - 2016-05-28 05:00 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-06-15 14:18 - 2016-05-28 05:00 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-06-15 14:18 - 2016-05-28 05:00 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-06-15 14:18 - 2016-05-28 05:00 - 02230272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-06-15 14:18 - 2016-05-28 05:00 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-06-15 14:18 - 2016-05-28 05:00 - 01730560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-06-15 14:18 - 2016-05-28 05:00 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-06-15 14:18 - 2016-05-28 05:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2016-06-15 14:18 - 2016-05-28 05:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-06-15 14:18 - 2016-05-28 04:59 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2016-06-15 14:18 - 2016-05-28 04:58 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-06-15 14:18 - 2016-05-28 04:58 - 04896256 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-06-15 14:18 - 2016-05-28 04:58 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-06-15 14:18 - 2016-05-28 04:58 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-06-15 14:18 - 2016-05-28 04:57 - 02281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-06-15 14:18 - 2016-05-28 04:55 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-06-15 14:18 - 2016-05-28 04:53 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-06-14 21:37 - 2016-06-14 21:38 - 04458496 _____ C:\Users\Kerrie\Downloads\Peaky_Blinders_Season_2_Complete_HDTV_x264-SCENEPeaky_Blinders_Season_2_Complete_HDTV_x2 (1).iso
2016-06-14 21:33 - 2016-06-16 23:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\SrpnFiles
2016-06-14 21:33 - 2016-06-14 21:33 - 00000000 ____D C:\Users\Kerrie\AppData\Roaming\SpringFiles
2016-06-14 21:32 - 2016-06-14 21:32 - 00000000 ____D C:\ProgramData\eab878a7-2875-1
2016-06-14 21:32 - 2016-06-14 21:32 - 00000000 ____D C:\ProgramData\eab878a7-1a01-0
2016-06-14 21:31 - 2016-06-14 21:31 - 04458496 _____ C:\Users\Kerrie\Downloads\Peaky_Blinders_Season_2_Complete_HDTV_x264-SCENEPeaky_Blinders_Season_2_Complete_HDTV_x2.iso
2016-06-06 21:43 - 2016-06-06 21:43 - 00668671 _____ C:\Users\Kerrie\Downloads\TTR single-page leaflet low-res.pdf
2016-06-03 20:14 - 2016-06-03 20:14 - 00002487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-06-03 12:52 - 2016-06-03 12:52 - 00344412 _____ C:\Users\Kerrie\Downloads\MyVodafoneBill_20 Dec 2015.pdf
2016-06-03 12:51 - 2016-06-03 12:51 - 00340598 _____ C:\Users\Kerrie\Downloads\MyVodafoneBill_20 Jan 2016.pdf
2016-06-03 12:51 - 2016-06-03 12:51 - 00333168 _____ C:\Users\Kerrie\Downloads\MyVodafoneBill_20 Feb 2016.pdf
2016-06-03 12:50 - 2016-06-03 12:50 - 00344181 _____ C:\Users\Kerrie\Downloads\MyVodafoneBill_19 Apr 2016.pdf
2016-06-03 12:50 - 2016-06-03 12:50 - 00333413 _____ C:\Users\Kerrie\Downloads\MyVodafoneBill_20 Mar 2016.pdf
2016-06-03 12:48 - 2016-06-03 12:48 - 00326507 _____ C:\Users\Kerrie\Downloads\MyVodafoneBill_2016-05-19 (1).pdf
2016-06-01 16:25 - 2016-06-01 16:25 - 00625345 _____ C:\Users\Kerrie\Downloads\Annual Report to Governors June 2015.pdf
2016-06-01 16:25 - 2016-06-01 16:25 - 00166601 _____ C:\Users\Kerrie\Downloads\Code of Practice for SVC Academy Governors (1).pdf
2016-06-01 16:25 - 2016-06-01 16:25 - 00133690 _____ C:\Users\Kerrie\Downloads\Sawston Village College Governing Body Composition and meeting attendance 2014-15.pdf
2016-06-01 14:45 - 2016-06-01 14:45 - 00458572 _____ C:\Users\Kerrie\Downloads\2015-11-16 SVC FGB minutes [final].pdf
2016-05-31 11:26 - 2016-05-31 13:48 - 00000000 ____D C:\Users\Kerrie\AppData\Local\Deployment
2016-05-31 11:26 - 2016-05-31 11:26 - 00499288 _____ () C:\Users\Kerrie\Downloads\FlixsterSetup.exe
2016-05-31 11:26 - 2016-05-31 11:26 - 00000360 _____ C:\Users\Kerrie\Desktop\Flixster Video.appref-ms
2016-05-31 11:26 - 2016-05-31 11:26 - 00000000 ____D C:\Users\Kerrie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flixster Video
2016-05-31 11:26 - 2016-05-31 11:26 - 00000000 ____D C:\Users\Kerrie\AppData\Local\Flixster
2016-05-30 14:15 - 2016-05-30 14:15 - 00032510 _____ C:\Users\Kerrie\Downloads\List_of_walks_in_Southwark_2014.pdf
2016-05-27 16:59 - 2016-05-27 16:59 - 00326507 _____ C:\Users\Kerrie\Downloads\MyVodafoneBill_2016-05-19.pdf
2016-05-27 16:47 - 2016-05-27 16:47 - 00128792 _____ C:\Users\Kerrie\Downloads\540615349742_5406130007_20160418_bill_1439 (1).pdf
2016-05-26 14:10 - 2016-05-26 14:10 - 00285876 _____ C:\Users\Kerrie\Downloads\tokhai_201605262007448151.pdf
2016-05-26 11:45 - 2016-05-26 11:45 - 00285802 _____ C:\Users\Kerrie\Downloads\tokhai_201605261741481334.pdf
2016-05-25 12:28 - 2016-05-25 12:28 - 00002417 _____ C:\Users\Kerrie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-24 07:36 - 2016-05-31 15:21 - 00000000 ____D C:\WINDOWS\Minidump
2016-05-21 10:13 - 2016-05-21 10:13 - 00025457 _____ C:\Users\Kerrie\Documents\Vietnam visa.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-06-19 09:34 - 2016-05-10 22:29 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-19 09:20 - 2016-04-06 17:04 - 00004150 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E1B816FE-A408-42E9-B540-764B6CE2FF72}
2016-06-19 09:17 - 2014-12-26 19:18 - 00000000 ____D C:\Users\Kerrie\AppData\Local\SweetLabs App Platform
2016-06-18 23:18 - 2014-12-26 20:44 - 00000000 ____D C:\ProgramData\MFAData
2016-06-18 17:19 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-18 17:19 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-06-18 09:36 - 2016-03-13 12:29 - 00885104 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-06-18 09:36 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-06-18 09:35 - 2014-12-30 00:51 - 00002487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-18 09:35 - 2014-12-30 00:51 - 00002475 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-18 09:32 - 2014-12-26 20:12 - 00000000 ___RD C:\Users\Kerrie\OneDrive
2016-06-18 09:31 - 2016-05-10 22:29 - 00000914 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-18 09:31 - 2014-12-26 19:18 - 00000000 __SHD C:\Users\Kerrie\IntelGraphicsProfiles
2016-06-18 09:30 - 2016-02-13 14:14 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-06-18 09:30 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-06-17 18:21 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-06-16 23:32 - 2015-07-23 11:41 - 00000000 ____D C:\Users\Kerrie\Documents\Colin
2016-06-16 23:32 - 2015-07-23 11:40 - 00000000 ____D C:\Users\Kerrie\Documents\Thomas
2016-06-16 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-06-16 15:06 - 2016-03-13 12:19 - 00000000 ____D C:\Users\Kerrie
2016-06-16 15:04 - 2014-12-30 01:12 - 00000000 ____D C:\Program Files (x86)\IObit
2016-06-16 15:00 - 2015-05-26 10:54 - 00000000 ____D C:\Users\Kerrie\AppData\Local\Avg
2016-06-16 15:00 - 2014-12-26 20:46 - 00000000 ____D C:\Program Files (x86)\AVG
2016-06-16 14:59 - 2016-03-13 12:18 - 00095224 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2016-06-16 14:59 - 2016-03-13 12:18 - 00091136 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2016-06-16 14:59 - 2014-12-26 20:46 - 00000000 ___HD C:\$AVG
2016-06-16 14:59 - 2014-12-26 20:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-06-16 14:57 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-06-16 14:56 - 2016-03-13 12:17 - 00033960 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2016-06-16 14:56 - 2014-10-23 08:14 - 00000000 ____D C:\Program Files (x86)\Lenovo EasyCamera
2016-06-16 14:47 - 2016-01-01 13:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2016-06-16 14:47 - 2014-12-30 01:13 - 00000000 ____D C:\Users\Kerrie\AppData\LocalLow\IObit
2016-06-16 14:47 - 2014-12-30 01:13 - 00000000 ____D C:\ProgramData\ProductData
2016-06-16 14:47 - 2014-12-30 01:12 - 00000000 ____D C:\Users\Kerrie\AppData\Roaming\IObit
2016-06-16 12:44 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-06-15 23:10 - 2016-02-13 14:20 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-06-15 21:37 - 2016-02-13 14:11 - 00428616 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-06-15 21:36 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-06-15 21:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-06-15 21:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-06-15 15:02 - 2014-12-28 12:22 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-06-15 14:58 - 2014-12-28 12:22 - 142482544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-06-14 21:32 - 2015-09-22 18:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-06-14 21:32 - 2014-12-30 00:41 - 00001390 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-06-14 21:32 - 2014-12-30 00:41 - 00001378 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-06-08 16:47 - 2015-12-02 00:40 - 00000000 ____D C:\Users\Kerrie\Documents\accounts & receipts
2016-06-08 16:47 - 2015-07-23 11:40 - 00000000 ____D C:\Users\Kerrie\Documents\medical
2016-06-08 10:00 - 2015-09-14 17:12 - 00000000 ____D C:\Users\Kerrie\Documents\CAP
2016-05-28 06:55 - 2016-02-13 14:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-05-26 16:39 - 2016-01-22 00:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-05-26 10:25 - 2015-07-23 11:40 - 00000000 ____D C:\Users\Kerrie\Documents\camclerks
2016-05-24 13:52 - 2015-05-11 12:21 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2016-05-24 13:52 - 2015-05-11 12:21 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2016-05-24 07:37 - 2016-02-13 14:03 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-24 07:37 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-05-24 07:37 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-05-24 07:37 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-05-24 07:35 - 2015-03-31 23:48 - 00000000 ____D C:\Users\Kerrie\AppData\Roaming\Skype
2016-05-23 11:33 - 2014-12-26 19:18 - 00000000 ____D C:\Users\Kerrie\AppData\Local\Packages
2016-05-21 10:13 - 2014-12-29 18:58 - 00000000 ____D C:\Users\Kerrie\AppData\Roaming\Nitro PDF

==================== Files in the root of some directories =======

2015-05-01 10:04 - 2015-05-01 10:04 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-03-13 12:18 - 2016-03-13 12:18 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Kerrie\AppData\Local\Temp\K3GYwEuk91.exe
C:\Users\Kerrie\AppData\Local\Temp\paKTTavOGu.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-06-14 19:16

==================== End of FRST.txt ============================