Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
Ran by [removed] (administrator) on MUHANDAS (12-09-2016 14:28:49)
Running from C:\Users\[removed]\Desktop\El Amen\Programs
[removed]
Platform: Windows 10 Home Version 1607 (X64) Language: Norska, bokmål (Norge)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(F-Secure Corporation) C:\Program Files (x86)\Internetbeveiliging\fshoster32.exe
(F-Secure Corporation) C:\Program Files (x86)\Internetbeveiliging\apps\CCF_Reputation\fsorsp.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Hide My IP) C:\Program Files (x86)\Hide My IP 6\HideMyIpSrv.exe
(F-Secure Corporation) C:\Program Files (x86)\Internetbeveiliging\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(F-Secure Corporation) C:\Program Files (x86)\Internetbeveiliging\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files (x86)\Internetbeveiliging\apps\ComputerSecurity\Common\FSHDLL64.EXE
(F-Secure Corporation) C:\Program Files (x86)\Internetbeveiliging\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(© 2015 Microsoft Corporation) C:\Users\garad\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
() C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
(F-Secure Corporation) C:\Program Files (x86)\Internetbeveiliging\fshoster32.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.23941.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13653208 2013-09-13] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-10] (ELAN Microelectronics Corp.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-07-26] (Apple Inc.)
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2072928 2014-10-31] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960336 2014-11-07] ()
HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [75776 2016-09-01] ()
HKLM-x32\...\Run: [AgentMonitor] => C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [317824 2016-01-18] ()
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] (Atheros Communications)
HKU\S-1-5-21-1642924621-1940899511-797481320-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3907152 2015-10-09] (Tonec Inc.)
HKU\S-1-5-21-1642924621-1940899511-797481320-1001\...\Run: [BingSvc] => C:\Users\garad\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-1642924621-1940899511-797481320-1001\...\Run: [HideMyIP] => "C:\Program Files (x86)\Hide My IP 6\HideMyIP.exe" /startup
ShellIconOverlayIdentifiers: [   IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\garad\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileSyncShell64.dll [2016-08-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\garad\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileSyncShell64.dll [2016-08-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\garad\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileSyncShell64.dll [2016-08-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\garad\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll [2016-08-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\garad\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll [2016-08-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\garad\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll [2016-08-24] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-1642924621-1940899511-797481320-1001] => Proxy is enabled.
Winsock: Catalog9 01 C:\WINDOWS\system32\HMIPCore.dll No File 
Winsock: Catalog9 02 C:\WINDOWS\system32\HMIPCore.dll No File 
Winsock: Catalog9 03 C:\WINDOWS\system32\HMIPCore.dll No File 
Winsock: Catalog9 04 C:\WINDOWS\system32\HMIPCore.dll No File 
Winsock: Catalog9 17 C:\WINDOWS\system32\HMIPCore.dll No File 
Winsock: Catalog9-x64 01 C:\WINDOWS\system32\HMIPCore64.dll [460288 2015-04-26] (Hide My IP)
Winsock: Catalog9-x64 02 C:\WINDOWS\system32\HMIPCore64.dll [460288 2015-04-26] (Hide My IP)
Winsock: Catalog9-x64 03 C:\WINDOWS\system32\HMIPCore64.dll [460288 2015-04-26] (Hide My IP)
Winsock: Catalog9-x64 04 C:\WINDOWS\system32\HMIPCore64.dll [460288 2015-04-26] (Hide My IP)
Winsock: Catalog9-x64 17 C:\WINDOWS\system32\HMIPCore64.dll [460288 2015-04-26] (Hide My IP)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{16d72d04-47cc-43b7-a0b8-796a64e74e5b}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{e7d8262f-0a3f-4dd1-aee2-fa99e13a4267}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1642924621-1940899511-797481320-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
HKU\S-1-5-21-1642924621-1940899511-797481320-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.fanproj.co/
SearchScopes: HKLM -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL = 
SearchScopes: HKU\S-1-5-21-1642924621-1940899511-797481320-1001 -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL = 
SearchScopes: HKU\S-1-5-21-1642924621-1940899511-797481320-1001 -> {AA6F3AA0-85B7-4D03-97AA-7B432265211B} URL = 
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Internetbeveiliging\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https64.dll [2016-08-24] (F-Secure Corporation)
BHO: No Name -> {504C542D-534F-4300-76A7-7A786E7484D7} -> No File
BHO: F-Secure Search -> {690EF1CF-5775-4CB3-A5B8-85A63FD0262B} -> C:\Program Files (x86)\Internetbeveiliging\apps\SafeSearch\IE\FSSafeSearch64.dll [2015-11-19] (F-Secure Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-07-13] (Microsoft Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2016-06-14] (Microsoft Corporation)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2014-11-07] (Wondershare)
BHO-x32: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Internetbeveiliging\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https.dll [2016-08-24] (F-Secure Corporation)
BHO-x32: F-Secure Search -> {690EF1CF-5775-4CB3-A5B8-85A63FD0262B} -> C:\Program Files (x86)\Internetbeveiliging\apps\SafeSearch\IE\FSSafeSearch.dll [2015-11-19] (F-Secure Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-07-13] (Microsoft Corporation)
BHO-x32: No Name -> {FC36B0BD-27F0-4cdd-8AB1-50651EFC3EFD} -> No File
Toolbar: HKLM - F-Secure Search Toolbar - {B242FC32-2B60-48EA-A8E3-2E280EDBC48F} - C:\Program Files (x86)\Internetbeveiliging\apps\SafeSearch\IE\FSSafeSearch64.dll [2015-11-19] (F-Secure Corporation)
Toolbar: HKLM-x32 - F-Secure Search Toolbar - {B242FC32-2B60-48EA-A8E3-2E280EDBC48F} - C:\Program Files (x86)\Internetbeveiliging\apps\SafeSearch\IE\FSSafeSearch.dll [2015-11-19] (F-Secure Corporation)
Toolbar: HKU\S-1-5-21-1642924621-1940899511-797481320-1001 -> No Name - {504C542D-534F-4300-76A7-7A786E7484D7} -  No File
Toolbar: HKU\S-1-5-21-1642924621-1940899511-797481320-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-1642924621-1940899511-797481320-1001 -> No Name - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} -  No File
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2013-04-16] (Belarc, Inc.)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File

FireFox:
========
FF ProfilePath: C:\Users\garad\AppData\Roaming\Mozilla\Firefox\Profiles\m3m76k93.default
FF DefaultSearchEngine: Ziggo Search
FF SearchEngineOrder.3: Bing 
FF SelectedSearchEngine: Ziggo Search
FF Keyword.URL: hxxp://search.f-secure.com/ziggo/search?query=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-29] ()
FF Plugin: @iqiyi.com/npWebPlayer -> D:\IQIYI Video\LStyle\npWebPlayer.dll [No File]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-09-17] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-29] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @iqiyi.com/npWebPlayer -> D:\IQIYI Video\LStyle\npWebPlayer.dll [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-05-27] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer -> C:\WINDOWS\system32\TVUAx\npTVUAx.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-16] (Google Inc.)
FF Plugin-x32: @VideoDownloadConverter_ScriptHelper.com/Plugin -> C:\Program Files (x86)\VideoDownloadConverter\npVDCPlugin.dll [No File]
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-09-17] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [No File]
FF Plugin HKU\S-1-5-21-1642924621-1940899511-797481320-1001: @hola.org/vlc,version=1.8.369 -> C:\Users\garad\AppData\Local\Hola\firefox_hola\app\vlc [No File]
FF Plugin HKU\S-1-5-21-1642924621-1940899511-797481320-1001: @iqiyi.com/npWebPlayer -> D:\IQIYI Video\LStyle\npWebPlayer.dll [No File]
FF Plugin HKU\S-1-5-21-1642924621-1940899511-797481320-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\garad\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-1642924621-1940899511-797481320-1001: Fshare.vn/FshareToolPlugin -> D:\Fshare Tool\npFshareToolPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-1642924621-1940899511-797481320-1001: pokki.com/PokkiDownloadHelper -> C:\Users\garad\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll [No File]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-05-27] (Microsoft Corporation)
FF SearchPlugin: C:\Users\garad\AppData\Roaming\Mozilla\Firefox\Profiles\m3m76k93.default\searchplugins\bing-.xml [2016-04-15]
FF Extension: (Bing Search Engine) - C:\Users\garad\AppData\Roaming\Mozilla\Firefox\Profiles\m3m76k93.default\Extensions\[removed] [2015-06-18] [not signed]
FF Extension: (Bing Search) - C:\Users\garad\AppData\Roaming\Mozilla\Firefox\Profiles\m3m76k93.default\Extensions\[removed] [2016-04-15]
FF Extension: (Firefox Hotfix) - C:\Users\garad\AppData\Roaming\Mozilla\Firefox\Profiles\m3m76k93.default\Extensions\[removed] [2016-09-12]
FF Extension: (Video DownloadHelper) - C:\Users\garad\AppData\Roaming\Mozilla\Firefox\Profiles\m3m76k93.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-08-04]
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25]
FF HKLM\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Internetbeveiliging\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi
FF Extension: (Browsing Protection by F-Secure) - C:\Program Files (x86)\Internetbeveiliging\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi [2016-08-24]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\ProgramData\Wondershare\Video Converter Ultimate\[removed]
FF Extension: (Wondershare Video Converter Ultimate) - C:\ProgramData\Wondershare\Video Converter Ultimate\[removed] [2015-06-04] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Internetbeveiliging\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi
FF HKU\S-1-5-21-1642924621-1940899511-797481320-1001\...\Firefox\Extensions: [[removed]] - D:\Fshare Tool\Addon => not found
FF HKU\S-1-5-21-1642924621-1940899511-797481320-1001\...\Firefox\Extensions: [[removed]] - C:\Users\garad\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
FF HKU\S-1-5-21-1642924621-1940899511-797481320-1001\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2016-01-27]
FF HKU\S-1-5-21-1642924621-1940899511-797481320-1001\...\Firefox\Extensions: [[removed]] - C:\Users\garad\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\garad\AppData\Roaming\IDM\idmmzcc5 [2016-03-07] [not signed]
FF HKU\S-1-5-21-1642924621-1940899511-797481320-1001\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Internetbeveiliging\apps\SafeSearch\\Firefox\main.xpi
FF Extension: (Search by F-Secure) - C:\Program Files (x86)\Internetbeveiliging\apps\SafeSearch\\Firefox\main.xpi [2015-10-05]
FF HKU\S-1-5-21-1642924621-1940899511-797481320-1001\...\SeaMonkey\Extensions: [[removed]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-1642924621-1940899511-797481320-1001\...\SeaMonkey\Extensions: [[removed]] - C:\Users\garad\AppData\Roaming\IDM\idmmzcc5

Chrome: 
=======
CHR HomePage: Profile 2 -> search.ask.com/?gct=hp
CHR DefaultSearchURL: Profile 2 -> hxxp://www.search.ask.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Profile 2 -> search.ask.com
CHR DefaultSuggestURL: Profile 2 -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\garad\AppData\Local\Google\Chrome\User Data\Default
CHR Profile: C:\Users\garad\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Profile: C:\Users\garad\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Cast) - C:\Users\garad\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2016-09-05]
CHR Extension: (WordPress Theme and Plugins Detector) - C:\Users\garad\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jdflfokckhmchfpokjmpcoblghjngjja [2016-09-10]
CHR Extension: (Browsing Protection by F-Secure) - C:\Users\garad\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2016-09-09]
CHR Extension: (IDM Integration Module) - C:\Users\garad\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-09-09]
CHR Extension: (Betalning via Chrome Web Store) - C:\Users\garad\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-03]
CHR Extension: (Chrome Media Router) - C:\Users\garad\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-03]
CHR HKLM\...\Chrome\Extension: [aaaaaejaghnbcjilindpkgmcmdflpgjf] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-02-11]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-02-11]
CHR HKU\S-1-5-21-1642924621-1940899511-797481320-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1642924621-1940899511-797481320-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gkmikccifolokanfakbeadbmgchomeli] - C:\Program Files (x86)\Internetbeveiliging\apps\SafeSearch\Chrome\main.crx [2015-11-04]
CHR HKU\S-1-5-21-1642924621-1940899511-797481320-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [aaaaaejaghnbcjilindpkgmcmdflpgjf] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [acaoakiamfeidcmgooclgeleejkbaecf] - C:\Program Files (x86)\WinToFlash Suggestor\WinToFlashSuggestor.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:/Program Files (x86)/Internetbeveiliging/apps/CCF_Scanning/bin/browser/install/fs_chrome_https/fs_chrome_https.crx [2014-06-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-02-11]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2159320 2016-08-22] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-23] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2015-10-10] (ELAN Microelectronics Corp.)
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [107008 2016-09-01] (Freemake) [File not signed]
R2 fshoster; C:\Program Files (x86)\Internetbeveiliging\fshoster32.exe [186840 2016-03-11] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\Internetbeveiliging\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2015-11-24] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\Internetbeveiliging\apps\CCF_Reputation\fsorsp.exe [60456 2015-06-01] (F-Secure Corporation)
R3 HideMyIpSRV; C:\Program Files (x86)\Hide My IP 6\HideMyIpSRV.exe [4341760 2015-04-26] (Hide My IP) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [227680 2011-08-12] ()
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-12-05] (Dritek System INC.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 Apowersoft_AudioDevice; C:\Windows\system32\drivers\Apowersoft_AudioDevice.sys [31968 2012-10-08] (Wondershare)
R1 Eve; C:\Windows\system32\DRIVERS\eve.sys [41304 2014-04-10] ()
R3 F-Secure Gatekeeper; C:\Program Files (x86)\Internetbeveiliging\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [226512 2016-08-05] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\Internetbeveiliging\apps\ComputerSecurity\HIPS\drivers\fshs.sys [106696 2016-07-06] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [73928 2016-07-06] ()
R3 fsni; C:\Program Files (x86)\Internetbeveiliging\apps\CCF_Scanning\bin\fsni64.sys [110784 2016-08-24] (F-Secure Corporation)
S1 fsvista; C:\Program Files (x86)\Internetbeveiliging\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [12840 2015-10-08] ()
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-12-05] (Dritek System Inc.)
R3 stdriver; C:\Windows\system32\DRIVERS\stdriverx64.sys [34512 2016-06-16] ()
S3 taphss6; C:\Windows\System32\drivers\taphss6.sys [42088 2015-11-13] (Anchorfree Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R3 WsAudio_Device; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2014-10-24] (Wondershare)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-12 14:28 - 2016-09-12 14:28 - 00000000 ____D C:\FRST
2016-09-12 11:06 - 2016-09-12 12:17 - 00000000 ____D C:\Users\garad\Desktop\all websites pages
2016-09-12 11:03 - 2016-09-12 11:03 - 01637149 _____ C:\Users\garad\Downloads\fanprojproductionshomeofhindiafsomali.wordpress.2016-09-12 (1).xml
2016-09-11 01:14 - 2016-09-11 01:14 - 00003299 _____ C:\WINDOWS\system32\adorage-protocol.txt
2016-09-11 01:09 - 2016-09-11 01:09 - 00000000 ____D C:\Users\garad\Documents\CyberLink
2016-09-11 00:05 - 2016-09-11 00:04 - 06662856 _____ (Tim Kosse) C:\Users\garad\Downloads\FileZilla_3.21.0_win64-setup.exe
2016-09-11 00:03 - 2016-09-11 00:03 - 00000000 ____D C:\Users\garad\AppData\Roaming\CyberLink
2016-09-11 00:03 - 2016-09-11 00:03 - 00000000 ____D C:\Users\garad\AppData\Local\CyberLink
2016-09-10 23:41 - 2016-09-11 01:19 - 00000000 ____D C:\Users\garad\AppData\LocalLow\BitTorrent
2016-09-10 20:46 - 2016-09-10 20:46 - 00000000 ____D C:\Users\garad\AppData\Roaming\proDAD
2016-09-10 20:46 - 2016-09-10 20:46 - 00000000 ____D C:\ProgramData\proDAD
2016-09-10 20:46 - 2016-09-10 20:46 - 00000000 ____D C:\Program Files\proDAD
2016-09-10 20:46 - 2015-08-21 11:55 - 00607256 _____ (proDAD GmbH) C:\WINDOWS\system32\prodad-codec.dll
2016-09-10 20:46 - 2015-08-21 11:55 - 00376344 _____ (proDAD GmbH) C:\WINDOWS\system32\proDAD-PA-Support.dll
2016-09-10 20:44 - 2016-09-10 20:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewBlue
2016-09-10 20:44 - 2016-09-10 20:46 - 00000000 ____D C:\Program Files\NewBlue
2016-09-10 20:44 - 2016-09-10 20:45 - 00000000 ____D C:\Program Files (x86)\NewBlue
2016-09-10 20:44 - 2016-09-10 20:44 - 00000000 ____D C:\Program Files\Common Files\NewBlue
2016-09-10 20:43 - 2016-09-11 01:18 - 00000000 ____D C:\Program Files (x86)\CyberLink
2016-09-10 20:43 - 2016-09-10 20:47 - 00000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
2016-09-10 20:40 - 2016-09-11 01:17 - 00000000 ____D C:\Program Files\CyberLink
2016-09-10 20:39 - 2016-09-11 01:18 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2016-09-10 20:39 - 2016-09-11 00:03 - 00000000 ____D C:\ProgramData\CyberLink
2016-09-10 20:39 - 2016-09-10 20:47 - 00000000 ____D C:\ProgramData\install_clap
2016-09-10 20:32 - 2016-09-10 20:32 - 00000000 ____D C:\Users\garad\Downloads\Aimersoft.DRM.Media.Converter.1.4.7
2016-09-10 20:15 - 2016-09-11 01:18 - 00000000 ____D C:\Users\garad\Downloads\CyberLink PowerDirector Ultimate 14.0.2820.0 ACTIVATED
2016-09-10 17:43 - 2016-09-11 15:36 - 00000000 ____D C:\Users\garad\Desktop\GF X LOVE YOU
2016-09-08 12:17 - 2016-09-08 12:17 - 00816183 _____ C:\Users\garad\Desktop\dbref.pdf
2016-09-06 18:06 - 2016-09-06 18:06 - 00000000 ____D C:\Users\garad\Desktop\WPMUDev_Plugins_Pack_Update_June_2016
2016-09-06 17:42 - 2016-09-06 17:42 - 04441767 _____ C:\Users\garad\Downloads\fanprojproductionshomeofhindiafsomali.wordpress.2016-09-06.xml
2016-09-02 23:42 - 2016-09-02 23:42 - 00000000 ____D C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence
2016-09-01 20:43 - 2016-09-02 01:12 - 12295422 _____ C:\Users\garad\Desktop\tijaabo.wve
2016-09-01 15:16 - 2016-08-27 06:58 - 03893376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-09-01 15:16 - 2016-08-27 06:58 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-09-01 15:16 - 2016-08-27 06:38 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-09-01 15:16 - 2016-08-27 06:38 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-09-01 15:16 - 2016-08-27 06:37 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2016-09-01 15:16 - 2016-08-20 07:52 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-09-01 15:16 - 2016-08-20 07:50 - 00987992 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-09-01 15:16 - 2016-08-20 07:47 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-09-01 15:16 - 2016-08-20 07:46 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-09-01 15:16 - 2016-08-20 07:29 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-09-01 15:16 - 2016-08-20 07:29 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-09-01 15:16 - 2016-08-20 07:22 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-09-01 15:16 - 2016-08-20 07:21 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2016-09-01 15:16 - 2016-08-20 07:21 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-09-01 15:16 - 2016-08-20 07:15 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-09-01 15:16 - 2016-08-20 07:13 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-09-01 15:16 - 2016-08-20 07:08 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-09-01 15:16 - 2016-08-20 07:07 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-09-01 15:16 - 2016-08-20 07:07 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-09-01 15:16 - 2016-08-20 07:06 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-09-01 15:16 - 2016-08-20 07:04 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-01 15:16 - 2016-08-20 07:01 - 04612096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-09-01 15:16 - 2016-08-20 07:01 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-09-01 15:16 - 2016-08-20 06:52 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-09-01 15:16 - 2016-08-20 06:51 - 06044672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-09-01 15:15 - 2016-08-27 07:12 - 04130944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-09-01 15:15 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-09-01 15:15 - 2016-08-27 06:39 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2016-09-01 15:15 - 2016-08-27 06:25 - 00804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-09-01 15:15 - 2016-08-20 08:05 - 01377008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-09-01 15:15 - 2016-08-20 08:04 - 07814488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-09-01 15:15 - 2016-08-20 08:03 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-09-01 15:15 - 2016-08-20 07:52 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-09-01 15:15 - 2016-08-20 07:52 - 02190688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-09-01 15:15 - 2016-08-20 07:52 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-09-01 15:15 - 2016-08-20 07:52 - 01279328 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-09-01 15:15 - 2016-08-20 07:52 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-09-01 15:15 - 2016-08-20 07:52 - 00658776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-09-01 15:15 - 2016-08-20 07:52 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2016-09-01 15:15 - 2016-08-20 07:51 - 00681312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2016-09-01 15:15 - 2016-08-20 07:50 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-09-01 15:15 - 2016-08-20 07:50 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-09-01 15:15 - 2016-08-20 07:50 - 01099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-09-01 15:15 - 2016-08-20 07:50 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2016-09-01 15:15 - 2016-08-20 07:50 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-09-01 15:15 - 2016-08-20 07:50 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2016-09-01 15:15 - 2016-08-20 07:47 - 22218808 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-09-01 15:15 - 2016-08-20 07:47 - 01453992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-09-01 15:15 - 2016-08-20 07:43 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-09-01 15:15 - 2016-08-20 07:34 - 01430200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-09-01 15:15 - 2016-08-20 07:34 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-09-01 15:15 - 2016-08-20 07:33 - 05722312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-09-01 15:15 - 2016-08-20 07:33 - 00852824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-09-01 15:15 - 2016-08-20 07:32 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-09-01 15:15 - 2016-08-20 07:32 - 00846552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-09-01 15:15 - 2016-08-20 07:29 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-09-01 15:15 - 2016-08-20 07:25 - 01264912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-09-01 15:15 - 2016-08-20 07:22 - 22571008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-09-01 15:15 - 2016-08-20 07:21 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
2016-09-01 15:15 - 2016-08-20 07:21 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-09-01 15:15 - 2016-08-20 07:21 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
2016-09-01 15:15 - 2016-08-20 07:20 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-09-01 15:15 - 2016-08-20 07:20 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-09-01 15:15 - 2016-08-20 07:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
2016-09-01 15:15 - 2016-08-20 07:19 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-09-01 15:15 - 2016-08-20 07:18 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-09-01 15:15 - 2016-08-20 07:18 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-09-01 15:15 - 2016-08-20 07:18 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-09-01 15:15 - 2016-08-20 07:17 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2016-09-01 15:15 - 2016-08-20 07:16 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2016-09-01 15:15 - 2016-08-20 07:16 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2016-09-01 15:15 - 2016-08-20 07:15 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-09-01 15:15 - 2016-08-20 07:15 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-09-01 15:15 - 2016-08-20 07:15 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-09-01 15:15 - 2016-08-20 07:14 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
2016-09-01 15:15 - 2016-08-20 07:14 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-09-01 15:15 - 2016-08-20 07:14 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2016-09-01 15:15 - 2016-08-20 07:14 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-09-01 15:15 - 2016-08-20 07:14 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
2016-09-01 15:15 - 2016-08-20 07:14 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
2016-09-01 15:15 - 2016-08-20 07:13 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-09-01 15:15 - 2016-08-20 07:13 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-09-01 15:15 - 2016-08-20 07:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-09-01 15:15 - 2016-08-20 07:12 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-09-01 15:15 - 2016-08-20 07:12 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-09-01 15:15 - 2016-08-20 07:12 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-09-01 15:15 - 2016-08-20 07:12 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-09-01 15:15 - 2016-08-20 07:11 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-09-01 15:15 - 2016-08-20 07:11 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-01 15:15 - 2016-08-20 07:11 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-09-01 15:15 - 2016-08-20 07:10 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-09-01 15:15 - 2016-08-20 07:09 - 09128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-09-01 15:15 - 2016-08-20 07:09 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-09-01 15:15 - 2016-08-20 07:09 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-09-01 15:15 - 2016-08-20 07:08 - 01906176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2016-09-01 15:15 - 2016-08-20 07:08 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2016-09-01 15:15 - 2016-08-20 07:08 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-09-01 15:15 - 2016-08-20 07:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2016-09-01 15:15 - 2016-08-20 07:07 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-09-01 15:15 - 2016-08-20 07:07 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-09-01 15:15 - 2016-08-20 07:07 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2016-09-01 15:15 - 2016-08-20 07:07 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2016-09-01 15:15 - 2016-08-20 07:07 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2016-09-01 15:15 - 2016-08-20 07:06 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-09-01 15:15 - 2016-08-20 07:06 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
2016-09-01 15:15 - 2016-08-20 07:04 - 23682560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-09-01 15:15 - 2016-08-20 07:04 - 03245056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-09-01 15:15 - 2016-08-20 07:04 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-09-01 15:15 - 2016-08-20 07:04 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
2016-09-01 15:15 - 2016-08-20 07:03 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2016-09-01 15:15 - 2016-08-20 07:03 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-09-01 15:15 - 2016-08-20 07:03 - 02846208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-09-01 15:15 - 2016-08-20 07:02 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-01 15:15 - 2016-08-20 07:01 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-01 15:15 - 2016-08-20 07:00 - 19423232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-09-01 15:15 - 2016-08-20 07:00 - 08124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-09-01 15:15 - 2016-08-20 07:00 - 01316352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-09-01 15:15 - 2016-08-20 07:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2016-09-01 15:15 - 2016-08-20 06:59 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2016-09-01 15:15 - 2016-08-20 06:59 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-09-01 15:15 - 2016-08-20 06:59 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-09-01 15:15 - 2016-08-20 06:59 - 01106944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2016-09-01 15:15 - 2016-08-20 06:59 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-09-01 15:15 - 2016-08-20 06:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2016-09-01 15:15 - 2016-08-20 06:58 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-01 15:15 - 2016-08-20 06:58 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
2016-09-01 15:15 - 2016-08-20 06:57 - 02680832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-09-01 15:15 - 2016-08-20 06:57 - 02264064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-09-01 15:15 - 2016-08-20 06:57 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-09-01 15:15 - 2016-08-20 06:56 - 02711040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-09-01 15:15 - 2016-08-20 06:56 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-09-01 15:15 - 2016-08-20 06:56 - 02289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-09-01 15:15 - 2016-08-20 06:56 - 02143232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-09-01 15:15 - 2016-08-20 06:56 - 01006080 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2016-09-01 15:15 - 2016-08-20 06:56 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-09-01 15:15 - 2016-08-20 06:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
2016-09-01 15:15 - 2016-08-20 06:55 - 19418624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-09-01 15:15 - 2016-08-20 06:55 - 00726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-09-01 15:15 - 2016-08-20 06:54 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2016-09-01 15:15 - 2016-08-20 06:53 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-09-01 15:15 - 2016-08-20 06:51 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-09-01 15:15 - 2016-08-20 06:50 - 01875456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-09-01 15:14 - 2016-08-27 14:45 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2016-09-01 15:14 - 2016-08-27 11:37 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-09-01 15:14 - 2016-08-27 06:44 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
2016-09-01 15:14 - 2016-08-27 06:43 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
2016-09-01 15:14 - 2016-08-20 08:26 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-09-01 15:14 - 2016-08-20 08:13 - 00590952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-09-01 15:14 - 2016-08-20 08:06 - 01046976 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-09-01 15:14 - 2016-08-20 08:06 - 00885832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-09-01 15:14 - 2016-08-20 08:06 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-09-01 15:14 - 2016-08-20 08:04 - 01349120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-09-01 15:14 - 2016-08-20 08:04 - 01163696 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-09-01 15:14 - 2016-08-20 08:03 - 02257248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-09-01 15:14 - 2016-08-20 07:50 - 00942424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-09-01 15:14 - 2016-08-20 07:50 - 00807776 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-09-01 15:14 - 2016-08-20 07:42 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-09-01 15:14 - 2016-08-20 07:34 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2016-09-01 15:14 - 2016-08-20 07:21 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-09-01 15:14 - 2016-08-20 07:21 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-09-01 15:14 - 2016-08-20 07:20 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-09-01 15:14 - 2016-08-20 07:20 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-09-01 15:14 - 2016-08-20 07:19 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-09-01 15:14 - 2016-08-20 07:17 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-09-01 15:14 - 2016-08-20 07:17 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-09-01 15:14 - 2016-08-20 07:16 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-09-01 15:14 - 2016-08-20 07:14 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-09-01 15:14 - 2016-08-20 07:13 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-09-01 15:14 - 2016-08-20 07:12 - 01014784 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-09-01 15:14 - 2016-08-20 07:12 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-09-01 15:14 - 2016-08-20 07:11 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-09-01 15:14 - 2016-08-20 07:10 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-09-01 15:14 - 2016-08-20 07:10 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-09-01 15:14 - 2016-08-20 07:09 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-09-01 15:14 - 2016-08-20 07:08 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2016-09-01 15:14 - 2016-08-20 07:05 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2016-09-01 15:14 - 2016-08-20 07:05 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-09-01 15:14 - 2016-08-20 07:04 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-09-01 15:14 - 2016-08-20 07:04 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-09-01 15:14 - 2016-08-20 07:03 - 00944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-09-01 15:14 - 2016-08-20 06:59 - 07624192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-09-01 15:14 - 2016-08-20 06:57 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2016-09-01 15:14 - 2016-08-20 06:56 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-09-01 15:14 - 2016-08-20 06:53 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-09-01 15:14 - 2016-08-20 06:53 - 03299328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-09-01 15:14 - 2016-08-20 06:51 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-09-01 15:14 - 2016-08-20 06:49 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-09-01 15:14 - 2016-08-20 06:46 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-09-01 15:14 - 2016-08-19 03:33 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2016-09-01 01:28 - 2016-09-01 01:28 - 00000000 ____D C:\Users\garad\Desktop\themeforest-5489609-newspaper-v7.3
2016-08-31 14:20 - 2016-09-09 03:34 - 00002912 _____ C:\WINDOWS\SysWOW64\HideMyIpSRVOff.ini
2016-08-31 14:20 - 2016-09-02 16:22 - 00000000 ____D C:\Program Files (x86)\Hide My IP 6
2016-08-31 14:20 - 2016-08-31 14:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hide My IP 6
2016-08-30 12:27 - 2016-08-30 12:28 - 06852662 _____ C:\Users\garad\Downloads\onesignal-free-web-push-notifications.zip
2016-08-30 12:25 - 2016-08-30 12:25 - 08400490 _____ C:\Users\garad\Downloads\types.2.2.1.zip
2016-08-30 11:42 - 2016-08-30 11:42 - 00000000 ____D C:\Users\garad\Downloads\CSScriptNpp.Updater
2016-08-30 10:54 - 2016-08-30 10:54 - 05631944 _____ C:\Users\garad\Downloads\hindiafsomali-fanprojproductionsampentertainment.wordpress.2016-08-30.xml
2016-08-29 23:36 - 2016-08-29 23:36 - 00001203 _____ C:\Users\Public\Desktop\WavePad Sound Editor.lnk
2016-08-29 23:35 - 2016-08-29 23:36 - 00001215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk
2016-08-29 23:35 - 2016-08-29 23:35 - 00001323 _____ C:\Users\Public\Desktop\NCH Software.lnk
2016-08-29 23:33 - 2016-08-29 23:35 - 00000000 ____D C:\Program Files (x86)\NCH Software
2016-08-29 23:24 - 2016-08-29 23:29 - 00000000 ____D C:\Users\garad\Downloads\NCH.WavePad.Sound.Editor.Masters.Edition.v5.90.incl.Keygen-LAXiTY - [ATOM]
2016-08-29 20:29 - 2016-08-29 20:29 - 00001253 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2016-08-29 20:29 - 2016-08-29 20:29 - 00000000 ____D C:\ProgramData\TechSmith
2016-08-29 20:29 - 2016-08-29 20:29 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2016-08-29 20:29 - 2016-08-29 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2016-08-29 20:29 - 2016-08-29 20:29 - 00000000 ____D C:\Program Files (x86)\TechSmith
2016-08-29 20:21 - 2016-08-29 20:23 - 261150051 ____R C:\Users\garad\Downloads\TechSmith Camtasia Studio 8.6.0 Build 2079 + Key [SadeemPC].zip
2016-08-29 19:43 - 2016-09-09 03:34 - 00002912 _____ C:\WINDOWS\system32\HideMyIpSRVOff.ini
2016-08-29 19:43 - 2015-04-26 14:39 - 00460288 _____ (Hide My IP) C:\WINDOWS\system32\HMIPCore64.dll
2016-08-29 19:43 - 2015-04-26 14:38 - 00353280 _____ (Hide My IP) C:\WINDOWS\SysWOW64\HMIPCore.dll
2016-08-27 21:23 - 2016-09-12 00:03 - 00000638 _____ C:\WINDOWS\Tasks\Scheduled scanning task.job
2016-08-27 21:21 - 2016-09-10 18:34 - 00000000 ____D C:\WINDOWS\Minidump
2016-08-25 16:05 - 2016-08-25 16:05 - 00015499 _____ C:\Users\garad\Downloads\privacypolicy (1).htm
2016-08-24 02:58 - 2016-08-24 02:58 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-08-24 02:55 - 2016-08-24 02:55 - 00000000 ____D C:\ProgramData\USOShared
2016-08-24 02:55 - 2016-08-24 02:51 - 00000000 ___DC C:\WINDOWS\Panther
2016-08-24 02:54 - 2016-08-24 12:46 - 00000000 ____D C:\Users\garad\AppData\Local\ConnectedDevicesPlatform
2016-08-24 02:54 - 2016-08-24 02:54 - 00000020 ___SH C:\Users\garad\ntuser.ini
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\Start-meny
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\Skrivere
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\Programdata
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\Mine dokumenter
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\Maler
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\Lokale innstillinger
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\Documents\Mine bilder
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\Documents\Min musikk
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\Documents\Intern video
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmer
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\AppData\Local\Programdata
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\AppData\Local\Logg
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default\AndrMask
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default User\Documents\Mine bilder
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default User\Documents\Min musikk
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default User\Documents\Intern video
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programmer
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Programdata
2016-08-24 02:51 - 2016-08-24 02:51 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Logg
2016-08-24 02:49 - 2016-08-24 02:49 - 17187328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 13867520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 13433856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 13080576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 12345344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 12174336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2016-08-24 02:49 - 2016-08-24 02:49 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2016-08-24 02:49 - 2016-08-24 02:49 - 05622600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 03116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 02745224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 02422784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 02251432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-08-24 02:49 - 2016-08-24 02:49 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-08-24 02:49 - 2016-08-24 02:49 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01780736 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01694200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01595904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01557296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01469120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01066096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01062400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 01052672 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00955008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00587968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00509784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00450400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00381760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00361096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00321280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00224096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00151224 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00077664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2016-08-24 02:49 - 2016-08-24 02:49 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2016-08-24 02:49 - 2016-08-24 02:49 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2016-08-24 02:49 - 2016-08-24 02:49 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2016-08-24 02:49 - 2016-08-24 02:49 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2016-08-24 02:49 - 2016-08-24 02:49 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2016-08-24 02:47 - 2016-08-24 02:50 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2016-08-24 02:47 - 2016-08-24 02:50 - 00011433 _____ C:\WINDOWS\diagerr.xml
2016-08-24 02:45 - 2016-08-24 02:45 - 01708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2016-08-24 02:45 - 2016-08-24 02:45 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-08-24 02:45 - 2016-08-24 02:45 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-08-24 02:45 - 2016-08-24 02:45 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-08-24 02:45 - 2016-08-24 02:45 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-08-24 02:45 - 2016-08-24 02:45 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-08-24 02:45 - 2016-08-24 02:45 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-08-24 02:45 - 2016-08-24 02:45 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-08-24 02:45 - 2016-08-24 02:45 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2016-08-24 02:45 - 2016-08-24 02:45 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2016-08-24 02:45 - 2016-08-24 02:45 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2016-08-24 02:43 - 2016-08-27 21:29 - 00331890 _____ C:\WINDOWS\system32\perfh01D.dat
2016-08-24 02:43 - 2016-08-27 21:29 - 00048338 _____ C:\WINDOWS\system32\perfc01D.dat
2016-08-24 02:43 - 2016-08-24 02:42 - 00300836 _____ C:\WINDOWS\system32\perfi01D.dat
2016-08-24 02:43 - 2016-08-24 02:42 - 00039174 _____ C:\WINDOWS\system32\perfd01D.dat
2016-08-24 02:43 - 2016-07-15 20:29 - 06346752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons001d.dll
2016-08-24 02:43 - 2016-07-15 20:29 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2016-08-24 02:43 - 2016-07-15 20:29 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2016-08-24 02:43 - 2016-07-15 20:27 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData001d.dll
2016-08-24 02:43 - 2016-07-15 20:14 - 06354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2016-08-24 02:43 - 2016-07-15 19:45 - 06346752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons001d.dll
2016-08-24 02:43 - 2016-07-15 19:45 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2016-08-24 02:43 - 2016-07-15 19:42 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData001d.dll
2016-08-24 02:43 - 2016-07-15 19:29 - 05489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2016-08-24 02:42 - 2016-08-24 02:42 - 00000000 ____D C:\WINDOWS\SysWOW64\sv
2016-08-24 02:42 - 2016-08-24 02:42 - 00000000 ____D C:\WINDOWS\system32\sv
2016-08-24 02:33 - 2016-09-12 00:03 - 00003456 _____ C:\WINDOWS\System32\Tasks\Scheduled scanning task
2016-08-24 02:33 - 2016-09-09 03:33 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-08-24 02:33 - 2016-08-24 02:34 - 00003766 _____ C:\WINDOWS\System32\Tasks\ALUAgent
2016-08-24 02:33 - 2016-08-24 02:34 - 00003436 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-08-24 02:33 - 2016-08-24 02:34 - 00003376 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1642924621-1940899511-797481320-1001UA
2016-08-24 02:33 - 2016-08-24 02:34 - 00003302 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{58F4F7E9-F2D2-415D-9B6F-17153BF8FA42}
2016-08-24 02:33 - 2016-08-24 02:34 - 00003134 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1642924621-1940899511-797481320-1001Core
2016-08-24 02:33 - 2016-08-24 02:34 - 00003082 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-08-24 02:33 - 2016-08-24 02:34 - 00002876 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1642924621-1940899511-797481320-500
2016-08-24 02:33 - 2016-08-24 02:34 - 00002642 _____ C:\WINDOWS\System32\Tasks\Apple Diagnostics
2016-08-24 02:33 - 2016-08-24 02:34 - 00002550 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2016-08-24 02:33 - 2016-08-24 02:34 - 00002356 _____ C:\WINDOWS\System32\Tasks\{E35FB2C1-F88D-4D1F-BECB-2F973E30F1CE}
2016-08-24 02:33 - 2016-08-24 02:34 - 00002334 _____ C:\WINDOWS\System32\Tasks\{EB917B35-0332-4B84-9C34-511C024ED5B5}
2016-08-24 02:33 - 2016-08-24 02:34 - 00002330 _____ C:\WINDOWS\System32\Tasks\{57547FEA-A055-4257-96BF-291D52D2C08A}
2016-08-24 02:33 - 2016-08-24 02:34 - 00002264 _____ C:\WINDOWS\System32\Tasks\{80CB5B89-3CF1-49C2-9212-8941E5904E55}
2016-08-24 02:33 - 2016-08-24 02:34 - 00002258 _____ C:\WINDOWS\System32\Tasks\{98824370-28A6-471B-A545-CBC0A423E271}
2016-08-24 02:33 - 2016-08-24 02:34 - 00002242 _____ C:\WINDOWS\System32\Tasks\{FD5834EA-2C52-482E-823F-951FA8A4B50C}
2016-08-24 02:33 - 2016-08-24 02:34 - 00002236 _____ C:\WINDOWS\System32\Tasks\{1A28292F-5794-4762-8A96-86CC288199B1}
2016-08-24 02:33 - 2016-08-24 02:33 - 00003386 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-08-24 02:33 - 2016-08-24 02:33 - 00003306 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1470046836
2016-08-24 02:33 - 2016-08-24 02:33 - 00003254 _____ C:\WINDOWS\System32\Tasks\LaunchApp
2016-08-24 02:33 - 2016-08-24 02:33 - 00003212 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-08-24 02:33 - 2016-08-24 02:33 - 00002938 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1642924621-1940899511-797481320-1001
2016-08-24 02:33 - 2016-08-24 02:33 - 00002854 _____ C:\WINDOWS\System32\Tasks\ALU
2016-08-24 02:33 - 2016-08-24 02:33 - 00002764 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MUHANDAS-muhandas
2016-08-24 02:33 - 2016-08-24 02:33 - 00002704 _____ C:\WINDOWS\System32\Tasks\{101ED498-3DF9-24D2-6243-0F879C9E26B7}
2016-08-24 02:33 - 2016-08-24 02:33 - 00002670 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration
2016-08-24 02:33 - 2016-08-24 02:33 - 00002280 _____ C:\WINDOWS\System32\Tasks\Power Management
2016-08-24 02:33 - 2016-08-24 02:33 - 00002270 _____ C:\WINDOWS\System32\Tasks\{518A0AF5-195A-431D-B76A-6E7B70D9B967}
2016-08-24 02:33 - 2016-08-24 02:33 - 00002108 _____ C:\WINDOWS\System32\Tasks\{2E54553B-A981-4430-9CFF-52DB7517A694}
2016-08-24 02:33 - 2016-08-24 02:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2016-08-24 02:33 - 2016-08-24 02:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\TweakBit
2016-08-24 02:33 - 2016-08-24 02:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\F-Secure
2016-08-24 02:33 - 2016-08-24 02:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2016-08-24 02:33 - 2016-08-24 02:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\Aktiviteter i loggboken
2016-08-24 02:32 - 2016-08-24 02:32 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-08-24 02:29 - 2016-08-24 02:42 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-08-24 02:29 - 2016-08-24 02:29 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-08-24 02:29 - 2016-08-24 02:29 - 00000000 ____D C:\Program Files\MSBuild
2016-08-24 02:29 - 2016-08-24 02:29 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-08-24 02:29 - 2016-08-24 02:29 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-08-24 02:28 - 2016-08-24 02:28 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2016-08-24 02:28 - 2016-05-25 15:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-08-24 02:28 - 2016-05-25 15:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-08-24 02:28 - 2016-05-25 15:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-08-24 02:28 - 2016-05-25 12:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-08-24 02:28 - 2016-05-25 12:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-08-24 02:28 - 2016-05-25 12:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-08-24 02:19 - 2016-08-24 02:19 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-08-24 02:19 - 2016-08-24 02:19 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2016-08-24 02:19 - 2016-08-24 02:19 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-08-24 02:19 - 2016-08-24 02:19 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2016-08-24 02:19 - 2016-08-24 02:19 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-08-24 02:10 - 2016-08-24 02:22 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-08-24 02:06 - 2016-09-09 11:14 - 00000000 ____D C:\Users\garad
2016-08-24 02:06 - 2016-09-09 04:31 - 00000000 ____D C:\Users\Gjest
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\Start-meny
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\Skrivere
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\Programdata
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\Mine dokumenter
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\Maler
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\Lokale innstillinger
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\Documents\Mine bilder
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\Documents\Min musikk
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\Documents\Intern video
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\AppData\Roaming\Microsoft\Windows\Start Menu\Programmer
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\AppData\Local\Programdata
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\AppData\Local\Logg
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\Gjest\AndrMask
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\Start-meny
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\Skrivere
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\Programdata
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\Mine dokumenter
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\Maler
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\Lokale innstillinger
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\Documents\Mine bilder
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\Documents\Min musikk
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\Documents\Intern video
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programmer
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\AppData\Local\Programdata
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\AppData\Local\Logg
2016-08-24 02:06 - 2016-08-24 02:06 - 00000000 _SHDL C:\Users\garad\AndrMask
2016-08-24 02:02 - 2016-08-24 02:11 - 00000000 ____D C:\Program Files\Intel
2016-08-24 02:02 - 2016-08-24 02:02 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-08-24 02:02 - 2016-08-24 02:02 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-08-24 02:02 - 2016-08-24 02:02 - 00000000 ____D C:\Program Files\Realtek
2016-08-24 02:02 - 2016-08-24 02:02 - 00000000 ____D C:\Program Files\Elantech
2016-08-24 02:02 - 2016-05-03 23:30 - 00081416 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2016-08-24 02:02 - 2016-05-03 23:30 - 00077832 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2016-08-24 02:01 - 2016-08-24 02:01 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-08-24 02:01 - 2016-08-24 02:01 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-08-24 02:00 - 2016-07-16 13:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-08-24 01:57 - 2016-09-12 14:14 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-08-24 01:57 - 2016-09-02 01:20 - 05065848 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-08-24 01:57 - 2016-08-24 01:57 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-08-24 01:01 - 2016-08-24 01:01 - 00015499 _____ C:\Users\garad\Downloads\privacypolicy.htm
2016-08-23 23:56 - 2016-08-23 23:56 - 00000000 ___HD C:\$Windows.~WS
2016-08-23 23:55 - 2016-08-23 23:55 - 18309328 _____ (Microsoft Corporation) C:\Users\garad\Desktop\MediaCreationTool.exe
2016-08-23 13:02 - 2016-08-24 00:30 - 00000000 __RHD C:\ESD
2016-08-16 18:47 - 2016-08-16 18:47 - 00002352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-16 18:47 - 2016-08-16 18:47 - 00002340 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-08-16 18:46 - 2016-08-24 01:01 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-16 18:46 - 2016-08-23 19:01 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-16 18:13 - 2016-08-16 18:13 - 00000000 ____D C:\Users\garad\AppData\Local\gtk-2.0
2016-08-16 18:10 - 2016-08-16 18:10 - 00000000 ____D C:\Users\garad\AppData\Roaming\Participatory Culture Foundation
2016-08-16 18:09 - 2016-08-16 18:30 - 00000000 ____D C:\Program Files (x86)\Participatory Culture Foundation

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-12 14:29 - 2015-06-18 15:41 - 00000000 ____D C:\Users\garad\AppData\Roaming\FileZilla
2016-09-12 12:04 - 2015-06-18 14:58 - 00000000 ____D C:\Users\garad\AppData\Local\CrashDumps
2016-09-12 10:58 - 2016-03-06 00:28 - 00000000 ____D C:\Users\garad\Desktop\hosting cayaartooy.com
2016-09-12 10:46 - 2016-07-21 02:12 - 00002391 _____ C:\Users\garad\Desktop\bari.txt
2016-09-12 06:38 - 2015-06-18 15:41 - 00000000 ____D C:\Users\garad\AppData\Roaming\DMCache
2016-09-12 00:36 - 2016-05-25 21:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-09-11 16:11 - 2016-08-01 12:20 - 00000000 ____D C:\Program Files (x86)\Opera
2016-09-11 11:46 - 2015-06-18 15:48 - 00630272 ___SH C:\Users\garad\Downloads\Thumbs.db
2016-09-11 11:45 - 2015-01-27 17:38 - 00000000 ____D C:\Users\garad\AppData\Local\Adobe
2016-09-11 11:18 - 2014-02-18 20:57 - 05355008 ___SH C:\Users\garad\Desktop\Thumbs.db
2016-09-11 01:19 - 2016-06-26 23:54 - 00000000 ____D C:\Users\garad\AppData\Roaming\BitTorrent
2016-09-11 01:18 - 2012-12-05 11:19 - 00000000 ____D C:\ProgramData\Temp
2016-09-11 01:17 - 2012-12-05 10:58 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-09-11 00:07 - 2015-06-02 10:48 - 00001939 _____ C:\Users\garad\Desktop\FileZilla Client.lnk
2016-09-11 00:06 - 2015-06-18 15:42 - 00000000 ____D C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2016-09-11 00:06 - 2015-05-05 14:13 - 00000000 ____D C:\Program Files\FileZilla FTP Client
2016-09-10 18:26 - 2016-03-11 13:41 - 00000000 ____D C:\Users\garad\Desktop\inta freemake
2016-09-10 15:50 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
2016-09-10 13:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-09-10 13:31 - 2015-06-18 14:58 - 00000000 ____D C:\Users\garad\AppData\Local\ElevatedDiagnostics
2016-09-09 20:18 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-09-09 11:21 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-09 04:31 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2016-09-09 04:30 - 2016-03-10 16:36 - 00000000 ____D C:\Users\garad\AppData\Roaming\idoo
2016-09-09 04:30 - 2016-02-07 12:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-09-09 04:30 - 2015-10-12 23:51 - 00000000 ____D C:\Users\garad\AppData\Roaming\Notepad++
2016-09-09 04:30 - 2015-06-01 10:24 - 00000000 ____D C:\Program Files (x86)\Internetbeveiliging
2016-09-09 04:14 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\registration
2016-09-09 04:13 - 2016-04-15 18:17 - 00000000 ____D C:\Users\garad\Desktop\El Amen
2016-09-09 04:13 - 2016-03-10 16:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\idoo
2016-09-09 04:13 - 2015-06-18 15:42 - 00000000 ____D C:\Users\garad\AppData\Roaming\Skype
2016-09-09 04:13 - 2014-01-18 16:02 - 00000000 ____D C:\ProgramData\Skype
2016-09-09 00:31 - 2015-06-18 15:43 - 00000000 ____D C:\Users\garad\Documents\Outlook-filer
2016-09-03 11:57 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-09-03 10:08 - 2015-06-18 23:15 - 00000000 ___RD C:\Program Files (x86)\TypingMaster
2016-09-02 22:41 - 2016-03-04 21:06 - 00001405 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2016-09-02 22:41 - 2016-03-04 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2016-09-02 01:24 - 2015-09-10 07:43 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-09-02 01:19 - 2016-07-16 08:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2016-09-02 01:16 - 2016-07-17 00:16 - 00000000 ____D C:\WINDOWS\OCR
2016-09-02 01:16 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
2016-09-02 01:16 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-09-02 01:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-09-02 01:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-09-02 01:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-09-02 01:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-09-02 01:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
2016-09-02 01:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-09-02 01:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-09-02 01:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning
2016-09-01 15:05 - 2016-07-16 13:42 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2016-09-01 15:04 - 2016-07-16 13:43 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-09-01 15:04 - 2016-07-16 13:43 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-09-01 15:04 - 2016-07-16 13:43 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2016-09-01 15:04 - 2016-07-16 13:43 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2016-09-01 15:04 - 2016-07-16 13:43 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-09-01 15:04 - 2016-07-16 13:43 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-09-01 15:04 - 2016-07-16 13:43 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-09-01 15:04 - 2016-07-16 13:42 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-09-01 15:04 - 2016-07-16 13:42 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-09-01 15:04 - 2016-07-16 13:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-09-01 15:04 - 2016-07-16 13:42 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-09-01 15:04 - 2016-07-16 13:42 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-09-01 15:04 - 2016-07-16 13:42 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2016-09-01 15:04 - 2016-07-16 13:42 - 00079544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2016-09-01 15:04 - 2016-07-16 13:42 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-09-01 15:04 - 2016-07-16 13:42 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-09-01 15:04 - 2016-07-16 13:42 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-09-01 13:38 - 2016-02-07 16:01 - 00000000 ____D C:\Users\garad\Desktop\Waxa Quseeyo Fanproj.eu
2016-08-30 17:03 - 2015-12-31 13:19 - 00000000 ____D C:\Users\garad\Desktop\New Project
2016-08-30 11:39 - 2016-03-10 15:39 - 00000000 ____D C:\Users\garad\Desktop\Dhamaan
2016-08-30 00:11 - 2016-03-06 17:57 - 00000000 ____D C:\Users\garad\AppData\Roaming\IDM
2016-08-29 23:36 - 2015-12-08 13:57 - 00000000 ____D C:\Users\garad\AppData\Roaming\NCH Software
2016-08-29 21:01 - 2015-07-13 18:31 - 00000000 ____D C:\Users\garad\AppData\Local\TechSmith
2016-08-27 21:29 - 2016-07-17 00:15 - 00439096 _____ C:\WINDOWS\system32\perfh014.dat
2016-08-27 21:29 - 2016-07-17 00:15 - 00069746 _____ C:\WINDOWS\system32\perfc014.dat
2016-08-27 21:29 - 2015-09-24 17:25 - 01761018 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-08-26 07:43 - 2016-07-16 13:49 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-08-26 07:43 - 2016-07-16 13:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-08-24 16:33 - 2014-01-18 15:41 - 00000000 ____D C:\Users\garad\AppData\Local\Packages
2016-08-24 12:48 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\appcompat
2016-08-24 03:00 - 2015-09-24 17:44 - 00002413 _____ C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-24 03:00 - 2015-06-18 16:07 - 00000000 ___RD C:\Users\garad\OneDrive
2016-08-24 02:55 - 2016-07-16 13:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-08-24 02:55 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate
2016-08-24 02:54 - 2014-12-06 20:08 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-08-24 02:51 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows NT
2016-08-24 02:50 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-08-24 02:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-08-24 02:46 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2016-08-24 02:42 - 2016-07-17 00:15 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2016-08-24 02:42 - 2016-07-17 00:15 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2016-08-24 02:42 - 2016-07-17 00:15 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2016-08-24 02:42 - 2016-07-17 00:15 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2016-08-24 02:42 - 2016-07-17 00:15 - 00000000 ____D C:\WINDOWS\system32\winrm
2016-08-24 02:42 - 2016-07-17 00:15 - 00000000 ____D C:\WINDOWS\system32\WCN
2016-08-24 02:42 - 2016-07-17 00:15 - 00000000 ____D C:\WINDOWS\system32\slmgr
2016-08-24 02:42 - 2016-07-17 00:15 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ___RD C:\Program Files\Windows Defender
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Com
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\IME
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\System
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-08-24 02:42 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-08-24 02:42 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-08-24 02:42 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-08-24 02:42 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\servicing
2016-08-24 02:33 - 2014-12-06 20:06 - 00022992 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-08-24 02:32 - 2016-07-16 13:47 - 00000000 __RHD C:\Users\Public\Libraries
2016-08-24 02:22 - 2016-08-05 12:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internetbeveiliging
2016-08-24 02:22 - 2016-08-05 12:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-08-24 02:22 - 2016-07-21 22:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2016-08-24 02:22 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Help
2016-08-24 02:22 - 2016-07-08 01:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2016-08-24 02:22 - 2016-06-05 11:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Otohits Network
2016-08-24 02:22 - 2016-05-04 17:34 - 00000000 ____D C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kodi
2016-08-24 02:22 - 2016-03-06 17:57 - 00000000 ____D C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-08-24 02:22 - 2016-03-06 17:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-08-24 02:22 - 2016-01-11 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Athan
2016-08-24 02:22 - 2015-11-25 15:41 - 00000000 ____D C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Teleport Pro
2016-08-24 02:22 - 2015-11-08 20:04 - 00000000 ____D C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iTunes Data Recovery
2016-08-24 02:22 - 2015-10-30 20:11 - 00000000 ____D C:\WINDOWS\ShellNew
2016-08-24 02:22 - 2015-10-12 23:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-08-24 02:22 - 2015-06-26 12:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISO to USB
2016-08-24 02:22 - 2015-06-21 16:49 - 00000000 ____D C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-08-24 02:22 - 2015-06-21 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-08-24 02:22 - 2015-06-18 23:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TypingMaster
2016-08-24 02:22 - 2015-06-18 15:42 - 00000000 ____D C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
2016-08-24 02:22 - 2015-05-08 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Gaming SDK 1.4
2016-08-24 02:22 - 2015-05-08 18:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2016-08-24 02:22 - 2015-04-22 09:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-08-24 02:22 - 2015-01-27 17:49 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-08-24 02:22 - 2015-01-18 17:12 - 00000000 ____D C:\WINDOWS\SysWOW64\TVUAx
2016-08-24 02:22 - 2012-11-02 21:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell
2016-08-24 02:21 - 2016-07-16 08:04 - 00008192 _____ C:\WINDOWS\system32\config\ELAM
2016-08-24 02:19 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-08-24 02:19 - 2015-10-30 08:28 - 00000000 ____D C:\Users\Default.migrated
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\spool
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2016-08-24 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\IME
2016-08-24 02:13 - 2016-01-11 14:05 - 00000000 ____D C:\WINDOWS\SysWOW64\athan
2016-08-24 02:13 - 2015-11-22 00:00 - 00000000 ____D C:\WINDOWS\SysWOW64\Hotspot Shield
2016-08-24 02:13 - 2014-01-27 14:01 - 00000000 ____D C:\WINDOWS\SysWOW64\SearchProtect
2016-08-24 02:13 - 2014-01-20 14:59 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-08-24 02:13 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2016-08-24 02:13 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2016-08-24 02:12 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-08-24 02:12 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\InputMethod
2016-08-24 02:12 - 2014-10-29 21:33 - 00000000 ____D C:\WINDOWS\system32\AutoUpdateLicense
2016-08-24 02:11 - 2016-08-01 16:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VTech
2016-08-24 02:11 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-08-24 02:11 - 2016-02-07 13:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VSO
2016-08-24 02:11 - 2015-06-04 16:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2016-08-24 02:11 - 2014-03-19 16:34 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-08-24 02:11 - 2012-11-02 20:48 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-08-24 02:09 - 2016-03-04 21:06 - 00000000 ____D C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2016-08-24 02:09 - 2015-06-18 15:42 - 00000000 ____D C:\Users\garad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer
2016-08-24 02:07 - 2015-06-18 16:09 - 00000000 ____D C:\Users\Gjest\AppData\Local\Packages
2016-08-24 02:05 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-08-24 02:03 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-08-24 02:03 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-08-24 01:03 - 2014-04-29 18:58 - 00000942 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1642924621-1940899511-797481320-1001UA.job
2016-08-24 00:38 - 2016-04-21 19:38 - 00000290 _____ C:\WINDOWS\Tasks\{101ED498-3DF9-24D2-6243-0F879C9E26B7}.job
2016-08-24 00:26 - 2016-07-29 12:31 - 00000868 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-08-23 19:03 - 2014-04-29 18:58 - 00000920 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1642924621-1940899511-797481320-1001Core.job
2016-08-23 13:14 - 2015-06-18 14:58 - 00000000 ____D C:\Users\garad\AppData\Local\F-Secure
2016-08-21 02:21 - 2016-08-01 12:46 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-08-16 18:47 - 2015-12-16 17:24 - 00000000 ____D C:\Program Files (x86)\Google
2016-08-16 18:47 - 2014-01-18 15:57 - 00000000 ____D C:\Users\garad\AppData\Local\Google
2016-08-16 18:22 - 2015-12-13 17:22 - 00000000 ____D C:\Users\garad\Desktop\horyaalada.eu

==================== Files in the root of some directories =======

2015-12-18 13:54 - 2015-12-17 01:54 - 0000040 ____H () C:\Program Files (x86)\4cd3a8bb.tmp
2015-10-02 18:00 - 2015-11-07 13:46 - 0000132 _____ () C:\Users\garad\AppData\Roaming\Adobe IllExport Filter CS5 Prefs
2015-10-25 16:26 - 2016-03-14 18:15 - 0000132 _____ () C:\Users\garad\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-06-18 15:35 - 2015-01-08 20:50 - 0001042 _____ () C:\Users\garad\AppData\Roaming\coreavc.ini
2016-06-07 21:44 - 2016-06-12 10:37 - 0000905 _____ () C:\Users\garad\AppData\Roaming\trace_FilterInstaller.1.txt
2016-06-07 21:44 - 2016-06-07 21:44 - 0001167 _____ () C:\Users\garad\AppData\Roaming\trace_FilterInstaller.2.txt
2016-06-07 21:44 - 2016-06-16 15:38 - 0001167 _____ () C:\Users\garad\AppData\Roaming\trace_FilterInstaller.txt
2016-06-07 21:44 - 2016-06-16 15:38 - 0000000 _____ () C:\Users\garad\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2015-12-08 17:16 - 2015-12-08 17:17 - 0240103 _____ () C:\Users\garad\AppData\Roaming\VideoPad.dmp
2015-10-10 18:45 - 2016-03-25 16:23 - 0001499 _____ () C:\Users\garad\AppData\Local\Adobe Save for Web 12.0 Prefs
2016-07-06 15:55 - 2016-07-12 03:06 - 0001456 _____ () C:\Users\garad\AppData\Local\Adobe Save for Web 13.0 Prefs
2015-10-20 23:24 - 2015-10-20 23:24 - 0000073 _____ () C:\Users\garad\AppData\Local\package.nw.new
2015-06-18 14:58 - 2015-05-05 16:29 - 0000600 _____ () C:\Users\garad\AppData\Local\PUTTY.RND
2015-11-07 01:28 - 2015-11-07 01:28 - 0007601 _____ () C:\Users\garad\AppData\Local\Resmon.ResmonCfg
2015-06-18 14:58 - 2015-05-25 14:32 - 0000003 _____ () C:\Users\garad\AppData\Local\updater.log
2015-06-18 14:58 - 2015-05-25 14:32 - 0000424 _____ () C:\Users\garad\AppData\Local\UserProducts.xml
2016-08-24 02:02 - 2016-08-24 02:02 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-06-29 16:30 - 2015-06-29 16:30 - 0004872 _____ () C:\ProgramData\vczcspay.tpu

Files to move or delete:
====================
C:\Windows\Tasks\{101ED498-3DF9-24D2-6243-0F879C9E26B7}.job


Some files in TEMP:
====================
C:\Users\garad\AppData\Local\Temp\uninstall.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-09-09 12:30

==================== End of FRST.txt ============================