Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-06-2017 01
Ran by [removed] (administrator) on DESKTOP-K802GD4 (17-06-2017 15:02:13)
Running from C:\Users\[removed]\Downloads
[removed]
Platform: Windows 10 Pro Version 1607 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Windows\System32\nvwmi64.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidMonitorSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apache Software Foundation) C:\Program Files\Harris\flexnetls-x64_windows-2016.03.0\server\prunsrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvwmi64.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Emurasoft, Inc.) C:\Users\sampr\AppData\Local\Programs\EmEditor\emedtray.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Siber Systems Inc.) C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome-nm-host.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(© 2013 Microsoft Corporation) C:\Users\sampr\AppData\Local\Microsoft\DefaultSetup\DefaultSetup.exe
(© 2015 Microsoft Corporation) C:\Users\sampr\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.524.10020.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17042.14211.0_x64__8wekyb3d8bbwe\Video.UI.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1705.1301.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.8269.57641.0_x64__8wekyb3d8bbwe\onenoteim.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-27] (Microsoft Corporation)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [754984 2016-05-18] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8530176 2015-09-30] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407232 2015-09-30] (Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [732592 2015-08-19] (Waves Audio Ltd.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1795912 2015-07-23] (NVIDIA Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-03-22] (Apple Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3487032 2017-06-12] (Dropbox, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1223680 2017-02-28] (Cisco Systems, Inc.)
HKU\S-1-5-21-3656457744-1074379417-2173692989-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27742168 2017-06-07] (Skype Technologies S.A.)
HKU\S-1-5-21-3656457744-1074379417-2173692989-1001\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110376 2017-06-01] (Siber Systems)
HKU\S-1-5-21-3656457744-1074379417-2173692989-1001\...\Run: [BingSvc] => C:\Users\sampr\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-3656457744-1074379417-2173692989-1001\...\RunOnce: [!DefaultSetup] => C:\Users\sampr\AppData\Local\Microsoft\DefaultSetup\DefaultSetup.exe [2969984 2017-06-16] (© 2013 Microsoft Corporation)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
Startup: C:\Users\sampr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EmEditor.lnk [2017-04-19]
ShortcutTarget: EmEditor.lnk -> C:\Users\sampr\AppData\Local\Programs\EmEditor\emedtray.exe (Emurasoft, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 172.21.3.103 172.21.3.1 192.168.1.1
Tcpip\..\Interfaces\{39fcc862-1120-4663-94d1-bb2b7b3233ac}: [DhcpNameServer] 172.21.3.103 172.21.3.1 192.168.1.1
Tcpip\..\Interfaces\{7906a2f5-ebb8-4108-80b3-8395d13b2b23}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9d964f73-c9ca-40f2-8684-39e544ffb36d}: [DhcpNameServer] 172.21.3.103 172.21.3.1 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-3656457744-1074379417-2173692989-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/es-xl/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-06-16] (Microsoft Corporation)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2017-06-01] (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-04-20] (Oracle Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-06-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-20] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-06-16] (Microsoft Corporation)
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2017-06-01] (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-04-20] (Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-06-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-20] (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2017-06-01] (Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2017-06-01] (Siber Systems Inc.)
Toolbar: HKU\S-1-5-21-3656457744-1074379417-2173692989-1001 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2017-06-01] (Siber Systems Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-16] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-06-16] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-16] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-06-16] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-16] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-06-16] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-16] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-06-16] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: n4gde4sz.default
FF ProfilePath: C:\Users\sampr\AppData\Roaming\Zotero\Zotero\Profiles\n4gde4sz.default [2017-06-16]
FF Extension: (Zotero LibreOffice Integration) - C:\Program Files (x86)\Zotero Standalone\extensions\[removed] [2017-05-09] [not signed]
FF Extension: (Zotero Word for Windows Integration) - C:\Program Files (x86)\Zotero Standalone\extensions\[removed] [2017-05-09] [not signed]
FF ProfilePath: C:\Users\sampr\AppData\Roaming\Mozilla\Firefox\Profiles\9f9q9jq5.default-1490041943030 [2017-06-17]
FF Homepage: Mozilla\Firefox\Profiles\9f9q9jq5.default-1490041943030 -> hxxp://google.com/
FF Extension: (LastPass: Free Password Manager) - C:\Users\sampr\AppData\Roaming\Mozilla\Firefox\Profiles\9f9q9jq5.default-1490041943030\Extensions\[removed] [2017-06-02]
FF Extension: (Zotero) - C:\Users\sampr\AppData\Roaming\Mozilla\Firefox\Profiles\9f9q9jq5.default-1490041943030\Extensions\[removed] [2017-06-16]
FF Extension: (Video DownloadHelper) - C:\Users\sampr\AppData\Roaming\Mozilla\Firefox\Profiles\9f9q9jq5.default-1490041943030\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-05-12]
FF HKU\S-1-5-21-3656457744-1074379417-2173692989-1001\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi
FF Extension: (RoboForm Toolbar) - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi [2017-06-01]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_127.dll [2017-03-24] ()
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-20] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-06-16] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_127.dll [2017-03-24] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-28] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-05-28] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3656457744-1074379417-2173692989-1001: @citrixonline.com/appdetectorplugin -> C:\Users\sampr\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2017-03-23] (Citrix Online)
FF Plugin HKU\S-1-5-21-3656457744-1074379417-2173692989-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\sampr\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2017-04-24] (Zoom Video Communications, Inc.)

Chrome: 
=======
CHR DefaultSearchKeyword: Default -> lp
CHR Profile: C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default [2017-06-17]
CHR Extension: (Google Slides) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-03-20]
CHR Extension: (100kFactory Revolution-Importer & Fulfillment) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\albicaepcollniofocmmbhilcahablkl [2017-06-01]
CHR Extension: (Google Docs) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-20]
CHR Extension: (Google Drive) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-20]
CHR Extension: (YouTube) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-20]
CHR Extension: (Adobe Acrobat) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-04-09]
CHR Extension: (Zotero Connector) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekhagklcjbdpajgpjgmbionohlpdbjgc [2017-06-01]
CHR Extension: (Local Explorer - File Manager on web browser) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\eokekhgpaakbkfkmjjcbffibkencdfkl [2017-05-04]
CHR Extension: (Google Sheets) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-03-20]
CHR Extension: (Google Docs Offline) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-20]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-06-16]
CHR Extension: (100kFactory Revolution-FB Interest Explorer) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmhgmknahhjgpfaclpnnpailahbpjbng [2017-04-13]
CHR Extension: (Bitly 
 Unleash the power of the link) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\iabeihobmhlgpkcgjiloemdbofjbdcic [2017-04-13]
CHR Extension: (Screencastify - Screen Video Recorder) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmeijimgabbpbgpdklnllpncmdofkcpn [2017-06-16]
CHR Extension: (Chrome Web Store Payments) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-20]
CHR Extension: (Gmail) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-20]
CHR Extension: (Chrome Media Router) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-13]
CHR Extension: (RoboForm Password Manager) - C:\Users\sampr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2017-05-19]
CHR HKLM\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2017-03-20]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2017-03-20]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ApHidMonitorService; C:\Program Files\DellTPad\HidMonitorSvc.exe [104744 2016-05-18] (Alps Electric Co., Ltd.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-03-17] (Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4122816 2017-06-10] (Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-21] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-21] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [48944 2017-06-12] (Dropbox, Inc.)
R2 FNLS-idl_lmgrd; C:\Program Files\Harris\flexnetls-x64_windows-2016.03.0\server\prunsrv.exe [110360 2016-11-10] (Apache Software Foundation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373760 2016-10-25] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [4174264 2017-03-14] (NVIDIA Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [307456 2015-09-30] (Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10884848 2017-05-23] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-27] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-27] (Microsoft Corporation)
S2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [22864 2016-10-27] (OSR Open Systems Resources, Inc.)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d65x64.sys [547840 2015-09-12] (Intel Corporation)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [341256 2016-03-18] (Intel Corporation)
R3 IntcAzAudAddService; C:\Windows\system32\drivers\RTDVHD64.sys [2594048 2015-09-30] (Realtek Semiconductor Corp.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [188312 2017-06-16] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [113592 2017-06-16] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [44960 2017-06-16] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [252832 2017-06-16] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [93600 2017-06-17] (Malwarebytes)
R1 MpKsla7abe078; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{73F4F727-6D6A-4B97-AB60-4EE89367D458}\MpKsla7abe078.sys [44928 2017-06-17] (Microsoft Corporation)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3485696 2016-07-16] (Intel Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_72f356f138a86324\nvlddmkm.sys [14190520 2017-03-14] (NVIDIA Corporation)
R3 ST_Accel; C:\Windows\system32\DRIVERS\ST_Accel.sys [146512 2015-07-02] (STMicroelectronics)
S3 vpnva; C:\Windows\System32\drivers\vpnva64-6.sys [52592 2016-10-06] (Cisco Systems, Inc.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 wdm_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (MBB)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-17 15:02 - 2017-06-17 15:02 - 00029981 _____ C:\Users\sampr\Downloads\FRST.txt
2017-06-17 15:02 - 2017-06-17 15:02 - 00000000 ____D C:\FRST
2017-06-17 15:01 - 2017-06-17 15:01 - 02438656 _____ (Farbar) C:\Users\sampr\Downloads\FRST64.exe
2017-06-17 14:49 - 2017-06-17 14:49 - 00085384 _____ C:\Users\sampr\Downloads\TrendPressrBasic(2).zip
2017-06-17 14:44 - 2017-06-17 14:52 - 00000000 ____D C:\Users\sampr\Downloads\fanm
2017-06-17 04:44 - 2017-06-17 04:44 - 00181872 _____ C:\Users\sampr\Downloads\PSchlesinger_Invoice_Memo_2017MAY21.pdf
2017-06-17 02:18 - 2017-06-17 02:18 - 06004804 _____ C:\Users\sampr\Downloads\Facebook+Live+Authority.pdf
2017-06-17 01:25 - 2017-06-17 01:25 - 04043419 _____ C:\Users\sampr\Downloads\112415_module12_EN.pdf
2017-06-17 01:24 - 2017-06-17 01:25 - 06674084 _____ C:\Users\sampr\Downloads\112415_module11_EN.pdf
2017-06-17 01:24 - 2017-06-17 01:24 - 03604106 _____ C:\Users\sampr\Downloads\112415_module10_EN.pdf
2017-06-17 01:23 - 2017-06-17 01:23 - 05543700 _____ C:\Users\sampr\Downloads\112415_module9_EN.pdf
2017-06-17 01:22 - 2017-06-17 01:23 - 09612024 _____ C:\Users\sampr\Downloads\112415_module8_EN.pdf
2017-06-17 01:22 - 2017-06-17 01:22 - 06132915 _____ C:\Users\sampr\Downloads\112415_module6_EN.pdf
2017-06-17 01:22 - 2017-06-17 01:22 - 04774551 _____ C:\Users\sampr\Downloads\112415_module7_EN.pdf
2017-06-17 01:21 - 2017-06-17 01:22 - 05270222 _____ C:\Users\sampr\Downloads\112415_module5_EN.pdf
2017-06-17 01:20 - 2017-06-17 01:26 - 11534946 _____ C:\Users\sampr\Downloads\112415_module4_EN.pdf
2017-06-17 01:20 - 2017-06-17 01:20 - 05115603 _____ C:\Users\sampr\Downloads\112415_module3_EN.pdf
2017-06-17 01:20 - 2017-06-17 01:20 - 04118881 _____ C:\Users\sampr\Downloads\112415_module2_EN.pdf
2017-06-17 01:19 - 2017-06-17 01:19 - 07777257 _____ C:\Users\sampr\Downloads\UN-REDD LEARNING JOURNAL 1_07.pdf
2017-06-17 01:18 - 2017-06-17 01:22 - 44736370 _____ C:\Users\sampr\Downloads\Introductory presentations for each Academy topic_English.zip
2017-06-17 01:18 - 2017-06-17 01:19 - 10000274 _____ C:\Users\sampr\Downloads\Safeguards session supporting materials.zip
2017-06-17 01:18 - 2017-06-17 01:18 - 02065044 _____ C:\Users\sampr\Downloads\REDD+ Academy Facilitator's Notes (369467).pdf
2017-06-17 01:17 - 2017-06-17 01:36 - 40683114 _____ C:\Users\sampr\Downloads\112315_LJ_EN complete.pdf.part
2017-06-17 01:13 - 2017-06-17 01:14 - 449959013 _____ C:\Users\sampr\Downloads\Webinar_ Assessing carbon emissions from forest degradation.mp4
2017-06-17 01:08 - 2017-06-17 01:09 - 516159279 _____ C:\Users\sampr\Downloads\Webinar_ Community Based Monitoring for REDD+ MRV.mp4
2017-06-17 01:07 - 2017-06-17 01:08 - 406907613 _____ C:\Users\sampr\Downloads\Webinar_ Activity data and remote sensing tools for REDD+ MRV.mp4
2017-06-16 18:37 - 2017-06-16 18:37 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-06-16 18:18 - 2017-06-16 18:18 - 00000000 ____D C:\searchplugins
2017-06-16 18:18 - 2017-06-16 18:18 - 00000000 ____D C:\extensions
2017-06-16 18:13 - 2017-06-16 18:13 - 00000000 ___HD C:\OneDriveTemp
2017-06-16 18:13 - 2017-06-16 18:13 - 00000000 ____D C:\Users\sampr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TouchPad
2017-06-16 16:25 - 2017-06-16 16:43 - 00138760 _____ C:\Users\sampr\Documents\vimi.xlsx
2017-06-15 23:27 - 2017-06-15 23:27 - 00628562 _____ C:\Users\sampr\Downloads\R-intro.pdf
2017-06-15 19:23 - 2017-06-15 19:23 - 02371349 _____ C:\Users\sampr\Downloads\Moringa Presentation (General) screen.pdf
2017-06-15 19:22 - 2017-06-15 19:23 - 07884288 _____ C:\Users\sampr\Downloads\Moringa Presentation (General).ppt
2017-06-15 00:44 - 2017-06-15 00:44 - 00716466 _____ C:\Users\sampr\Downloads\winFriends.pdf
2017-06-14 22:52 - 2017-06-14 22:52 - 00779623 _____ C:\Users\sampr\Downloads\r_intro_sera_2012_4up.pdf
2017-06-14 22:44 - 2017-06-14 22:44 - 00080491 _____ C:\Users\sampr\Downloads\larget_handouts03-1.pdf
2017-06-14 22:42 - 2017-06-14 22:42 - 00102482 _____ C:\Users\sampr\Downloads\larget_handouts02-4.pdf
2017-06-14 22:41 - 2017-06-14 22:41 - 00112557 _____ C:\Users\sampr\Downloads\larget_handouts02-1.pdf
2017-06-14 22:38 - 2017-06-14 22:38 - 00072773 _____ C:\Users\sampr\Downloads\data-R.pdf
2017-06-14 22:38 - 2017-06-14 22:38 - 00070966 _____ C:\Users\sampr\Downloads\basics-R.pdf
2017-06-14 22:30 - 2017-06-14 22:30 - 00122165 _____ C:\Users\sampr\Downloads\larget_handouts07-2b.pdf
2017-06-14 22:28 - 2017-06-14 22:28 - 00091573 _____ C:\Users\sampr\Downloads\larget_handouts06-2.pdf
2017-06-14 22:16 - 2017-06-14 22:16 - 00953598 _____ C:\Users\sampr\Downloads\Bates_1406.5823.pdf
2017-06-14 18:55 - 2017-06-14 18:55 - 01192392 _____ C:\Windows\isRS-000.tmp
2017-06-14 07:10 - 2017-06-14 07:10 - 00372581 _____ C:\Users\sampr\Downloads\rew013.pdf
2017-06-13 20:25 - 2017-06-14 01:31 - 00000000 ____D C:\Users\sampr\Downloads\R1_26166_ST7_F470
2017-06-13 20:09 - 2017-06-13 20:12 - 56952304 _____ C:\Users\sampr\Downloads\R1_26166_ST7_F470.zip
2017-06-13 18:26 - 2017-06-13 21:20 - 00000000 ____D C:\Users\sampr\Downloads\reconsulta
2017-06-13 18:13 - 2017-06-13 18:13 - 00023825 _____ C:\Users\sampr\Downloads\reconsulta.zip
2017-06-13 15:16 - 2017-06-13 15:16 - 04804199 _____ C:\Users\sampr\Downloads\ROAM+2014-030.pdf
2017-06-13 12:56 - 2017-06-13 12:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-06-13 12:46 - 2017-06-13 12:46 - 00000000 ___SD C:\Windows\UpdateAssistantV2
2017-06-13 12:41 - 2017-06-13 12:41 - 00014629 _____ C:\Users\sampr\Downloads\Es_catie_manglares.xlsx
2017-06-13 12:26 - 2017-06-03 04:50 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-06-13 12:26 - 2017-06-03 04:50 - 00192856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2017-06-13 12:26 - 2017-06-03 04:16 - 00279904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2017-06-13 12:26 - 2017-06-03 04:14 - 01564512 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-06-13 12:26 - 2017-06-03 04:14 - 01214816 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-06-13 12:26 - 2017-06-03 04:14 - 00629088 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-06-13 12:26 - 2017-06-03 04:14 - 00544096 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-06-13 12:26 - 2017-06-03 04:14 - 00379232 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-13 12:26 - 2017-06-03 04:14 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2017-06-13 12:26 - 2017-06-03 04:14 - 00334176 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-06-13 12:26 - 2017-06-03 04:14 - 00233824 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-06-13 12:26 - 2017-06-03 04:14 - 00136032 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-06-13 12:26 - 2017-06-03 04:14 - 00136024 _____ (Microsoft Corporation) C:\Windows\system32\ImplatSetup.dll
2017-06-13 12:26 - 2017-06-03 04:14 - 00096608 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-06-13 12:26 - 2017-06-03 04:14 - 00034648 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2017-06-13 12:26 - 2017-06-03 04:11 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-06-13 12:26 - 2017-06-03 04:11 - 00128864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2017-06-13 12:26 - 2017-06-03 04:09 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-06-13 12:26 - 2017-06-03 04:08 - 07783256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-13 12:26 - 2017-06-03 04:06 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2017-06-13 12:26 - 2017-06-03 04:01 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2017-06-13 12:26 - 2017-06-03 03:59 - 01181024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-06-13 12:26 - 2017-06-03 03:59 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-06-13 12:26 - 2017-06-03 03:59 - 00118112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-13 12:26 - 2017-06-03 03:58 - 00340832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-06-13 12:26 - 2017-06-03 03:55 - 00780640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2017-06-13 12:26 - 2017-06-03 03:54 - 00187232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2017-06-13 12:26 - 2017-06-03 03:53 - 00404824 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-06-13 12:26 - 2017-06-03 03:52 - 01021784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2017-06-13 12:26 - 2017-06-03 03:52 - 00607072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2017-06-13 12:26 - 2017-06-03 03:52 - 00111968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2017-06-13 12:26 - 2017-06-03 03:51 - 02187104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-06-13 12:26 - 2017-06-03 03:51 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-06-13 12:26 - 2017-06-03 03:50 - 00857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2017-06-13 12:26 - 2017-06-03 03:50 - 00381792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2017-06-13 12:26 - 2017-06-03 03:49 - 20967840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-06-13 12:26 - 2017-06-03 03:49 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-06-13 12:26 - 2017-06-03 03:49 - 00509280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-06-13 12:26 - 2017-06-03 03:48 - 01112416 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2017-06-13 12:26 - 2017-06-03 03:48 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-06-13 12:26 - 2017-06-03 03:48 - 00989024 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-06-13 12:26 - 2017-06-03 03:48 - 00857952 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2017-06-13 12:26 - 2017-06-03 03:48 - 00148832 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2017-06-13 12:26 - 2017-06-03 03:45 - 22220864 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-13 12:26 - 2017-06-03 03:44 - 01600624 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-06-13 12:26 - 2017-06-03 03:44 - 01412640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-06-13 12:26 - 2017-06-03 03:44 - 00545944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-06-13 12:26 - 2017-06-03 03:40 - 01566552 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-06-13 12:26 - 2017-06-03 03:40 - 00628552 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-06-13 12:26 - 2017-06-03 03:39 - 05686272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-06-13 12:26 - 2017-06-03 03:39 - 02532192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-06-13 12:26 - 2017-06-03 03:39 - 00455520 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2017-06-13 12:26 - 2017-06-03 03:33 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-06-13 12:26 - 2017-06-03 03:32 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-06-13 12:26 - 2017-06-03 03:31 - 00224256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll
2017-06-13 12:26 - 2017-06-03 03:31 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-06-13 12:26 - 2017-06-03 03:28 - 00285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-06-13 12:26 - 2017-06-03 03:28 - 00232448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edputil.dll
2017-06-13 12:26 - 2017-06-03 03:26 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-06-13 12:26 - 2017-06-03 03:26 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBrokerUI.dll
2017-06-13 12:26 - 2017-06-03 03:23 - 00306688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-06-13 12:26 - 2017-06-03 03:22 - 07217152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-06-13 12:26 - 2017-06-03 03:22 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2017-06-13 12:26 - 2017-06-03 03:22 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2017-06-13 12:26 - 2017-06-03 03:22 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
2017-06-13 12:26 - 2017-06-03 03:20 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-06-13 12:26 - 2017-06-03 03:19 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2017-06-13 12:26 - 2017-06-03 03:18 - 22569984 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-06-13 12:26 - 2017-06-03 03:16 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2017-06-13 12:26 - 2017-06-03 03:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-06-13 12:26 - 2017-06-03 03:16 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-06-13 12:26 - 2017-06-03 03:15 - 19414016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-06-13 12:26 - 2017-06-03 03:15 - 18364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-06-13 12:26 - 2017-06-03 03:15 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-06-13 12:26 - 2017-06-03 03:15 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2017-06-13 12:26 - 2017-06-03 03:15 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-06-13 12:26 - 2017-06-03 03:14 - 00238592 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-06-13 12:26 - 2017-06-03 03:14 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-06-13 12:26 - 2017-06-03 03:14 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-06-13 12:26 - 2017-06-03 03:14 - 00045056 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-13 12:26 - 2017-06-03 03:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdProxy.dll
2017-06-13 12:26 - 2017-06-03 03:11 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2017-06-13 12:26 - 2017-06-03 03:10 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2017-06-13 12:26 - 2017-06-03 03:10 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\edputil.dll
2017-06-13 12:26 - 2017-06-03 03:10 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\AuthBrokerUI.dll
2017-06-13 12:26 - 2017-06-03 03:09 - 00489472 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2017-06-13 12:26 - 2017-06-03 03:09 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2017-06-13 12:26 - 2017-06-03 03:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2017-06-13 12:26 - 2017-06-03 03:08 - 12187648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-06-13 12:26 - 2017-06-03 03:08 - 02643968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-06-13 12:26 - 2017-06-03 03:08 - 01221120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2017-06-13 12:26 - 2017-06-03 03:08 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-06-13 12:26 - 2017-06-03 03:08 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2017-06-13 12:26 - 2017-06-03 03:08 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-06-13 12:26 - 2017-06-03 03:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-06-13 12:26 - 2017-06-03 03:07 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-06-13 12:26 - 2017-06-03 03:07 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\HNetCfgClient.dll
2017-06-13 12:26 - 2017-06-03 03:06 - 03664384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-06-13 12:26 - 2017-06-03 03:06 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2017-06-13 12:26 - 2017-06-03 03:05 - 01883648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2017-06-13 12:26 - 2017-06-03 03:05 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hnetcfg.dll
2017-06-13 12:26 - 2017-06-03 03:04 - 06042624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-06-13 12:26 - 2017-06-03 03:04 - 02006528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-06-13 12:26 - 2017-06-03 03:04 - 00773120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-06-13 12:26 - 2017-06-03 03:03 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-06-13 12:26 - 2017-06-03 03:03 - 00932864 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-06-13 12:26 - 2017-06-03 03:02 - 02997760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-06-13 12:26 - 2017-06-03 03:01 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2017-06-13 12:26 - 2017-06-03 03:00 - 23677440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-06-13 12:26 - 2017-06-03 02:58 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2017-06-13 12:26 - 2017-06-03 02:56 - 13091840 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-06-13 12:26 - 2017-06-03 02:54 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2017-06-13 12:26 - 2017-06-03 02:53 - 08125440 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-06-13 12:26 - 2017-06-03 02:52 - 03403264 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-06-13 12:26 - 2017-06-03 02:52 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2017-06-13 12:26 - 2017-06-03 02:52 - 00975872 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-13 12:26 - 2017-06-03 02:52 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2017-06-13 12:26 - 2017-06-03 02:51 - 01418240 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2017-06-13 12:26 - 2017-06-03 02:51 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2017-06-13 12:26 - 2017-06-03 02:50 - 04744704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-06-13 12:26 - 2017-06-03 02:50 - 02538496 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-06-13 12:26 - 2017-06-03 02:49 - 03615744 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-06-13 12:26 - 2017-06-03 02:49 - 02691072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2017-06-13 12:26 - 2017-06-03 02:49 - 02475520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-13 12:26 - 2017-06-03 02:49 - 02318848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-06-13 12:26 - 2017-06-03 02:49 - 01845248 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-13 12:26 - 2017-06-03 02:49 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-06-13 12:26 - 2017-06-03 02:49 - 00903680 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-06-13 12:26 - 2017-06-03 02:49 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\hnetcfg.dll
2017-06-13 12:26 - 2017-06-03 02:48 - 01490432 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-06-13 12:26 - 2017-06-03 02:48 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-13 12:26 - 2017-06-03 02:48 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-13 12:26 - 2017-06-03 02:48 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2017-06-13 12:26 - 2017-06-03 02:46 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-06-13 12:26 - 2017-06-03 02:40 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-06-13 12:26 - 2017-06-03 00:08 - 00080078 _____ C:\Windows\system32\normidna.nls
2017-06-13 12:26 - 2017-05-24 23:56 - 00038752 _____ (Microsoft Corporation) C:\Windows\system32\OOBEUpdater.exe
2017-06-13 12:26 - 2017-03-04 00:22 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2017-06-13 12:26 - 2017-03-04 00:19 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-06-13 12:26 - 2017-03-04 00:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2017-06-13 12:26 - 2017-03-04 00:16 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2017-06-13 12:26 - 2016-09-06 22:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentActivation.dll
2017-06-13 06:08 - 2017-06-13 06:09 - 00782085 _____ C:\Users\sampr\Downloads\article.zip
2017-06-13 03:49 - 2017-06-13 03:49 - 00448009 _____ C:\Users\sampr\Downloads\EOproc_Sentinel 1 on Demand.pdf
2017-06-12 12:22 - 2017-06-12 12:57 - 00132329 _____ C:\Users\sampr\Documents\Why the model does not work for us.pptx
2017-06-12 05:55 - 2017-06-12 05:55 - 00048944 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2017-06-12 05:52 - 2017-06-12 05:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2017-06-12 05:52 - 2017-06-12 05:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2017-06-12 05:52 - 2017-06-12 05:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2017-06-11 10:17 - 2017-06-11 10:17 - 142506603 _____ C:\Users\sampr\Downloads\Coche a Control Remoto Casero - (Muy Fácil de Hacer).mp4
2017-06-08 14:44 - 2017-06-08 14:44 - 00014511 _____ C:\Users\sampr\Downloads\Book1.xlsx
2017-06-08 07:02 - 2017-06-08 07:02 - 00338333 _____ C:\Users\sampr\Documents\eCognition Licensing Rehost Request Formps.pdf
2017-06-08 06:18 - 2017-06-08 07:03 - 00003859 _____ C:\Users\sampr\Documents\paypalcancels.txt
2017-06-07 13:37 - 2017-06-07 13:37 - 00008254 _____ C:\Users\sampr\Documents\kenneth.xlsx
2017-06-06 22:15 - 2017-06-06 22:48 - 00000000 ____D C:\Users\sampr\AppData\Local\ElevatedDiagnostics
2017-06-06 09:25 - 2017-06-06 09:25 - 03276030 _____ C:\Users\sampr\Downloads\Salazar_et_al_hess-2017-278.pdf
2017-06-06 01:00 - 2017-06-16 16:43 - 00520486 _____ C:\Users\sampr\Downloads\healthfitnessdomains.xlsx
2017-06-05 21:47 - 2017-06-16 12:57 - 00000000 ____D C:\Users\sampr\Downloads\osa_images
2017-06-05 21:36 - 2017-06-05 21:36 - 00000000 ____D C:\Users\sampr\Documents\Any Video Converter
2017-06-05 21:34 - 2017-06-05 21:36 - 00000000 ____D C:\Users\sampr\AppData\Roaming\Anvsoft
2017-06-05 21:34 - 2017-06-05 21:34 - 00001285 _____ C:\Users\sampr\Desktop\Any Video Converter.lnk
2017-06-05 21:34 - 2017-06-05 21:34 - 00000000 ____D C:\Program Files (x86)\Anvsoft
2017-06-05 21:29 - 2017-06-05 21:33 - 51471752 _____ C:\Users\sampr\Downloads\avc-free.exe
2017-06-05 20:48 - 2017-06-05 20:48 - 00128960 _____ C:\Users\sampr\Downloads\The Fat Diminisher System37.html
2017-06-05 20:48 - 2017-06-05 20:48 - 00000000 ____D C:\Users\sampr\Downloads\The Fat Diminisher System37_files
2017-06-05 20:39 - 2017-06-05 20:39 - 00047543 _____ C:\Users\sampr\Downloads\One Time Offer - Fat Diminisher System.html
2017-06-05 20:39 - 2017-06-05 20:39 - 00000000 ____D C:\Users\sampr\Downloads\One Time Offer - Fat Diminisher System_files
2017-06-05 20:33 - 2017-06-05 20:33 - 00031821 _____ C:\Users\sampr\Downloads\Wesley Virgin Inner Circle.html
2017-06-05 20:33 - 2017-06-05 20:33 - 00000000 ____D C:\Users\sampr\Downloads\Wesley Virgin Inner Circle_files
2017-06-05 17:56 - 2017-06-05 17:56 - 05622624 _____ C:\Users\sampr\Downloads\Cobertura_MC.zip
2017-06-05 14:44 - 2017-06-05 14:44 - 00000000 ____D C:\Users\sampr\Downloads\Protocolo Metodológico Fase I y II Guatemala_MAPA NACIONAL DE USO_COBERTURA_CARBONO, 2012
2017-06-05 14:40 - 2017-06-05 14:44 - 18626501 _____ C:\Users\sampr\Downloads\Protocolo Metodológico Fase I y II Guatemala_MAPA NACIONAL DE USO_COBERTURA_CARBONO, 2012.rar
2017-06-05 13:20 - 2017-06-05 13:20 - 01324972 _____ C:\Users\sampr\Downloads\eCognition5.0 ReferenceBook.pdf
2017-06-05 11:04 - 2017-06-05 11:04 - 00409859 _____ C:\Users\sampr\Downloads\Svalbard-2-Pager_proof2.pdf
2017-06-05 11:04 - 2017-06-05 11:04 - 00409859 _____ C:\Users\sampr\Downloads\Svalbard-2-Pager_proof2 (1).pdf
2017-06-05 09:36 - 2017-06-05 09:36 - 00210190 _____ C:\Users\sampr\Downloads\Metadatos_RapidEye El Salvador.rar
2017-06-05 09:36 - 2017-06-05 09:36 - 00011793 _____ C:\Users\sampr\Downloads\Clases_Mapa_SV.XLSX
2017-06-05 09:01 - 2017-06-05 09:01 - 02265391 _____ C:\Users\sampr\Downloads\Definiens Developer 7.pdf
2017-06-05 08:52 - 2017-06-05 08:52 - 01939782 _____ C:\Users\sampr\Downloads\sensors-12-05623.pdf
2017-06-05 08:51 - 2017-06-05 08:51 - 00397744 _____ C:\Users\sampr\Downloads\4de687000ff1070f2285df9c823281c04464.pdf
2017-06-05 08:38 - 2017-06-05 08:38 - 03520704 _____ C:\Users\sampr\Downloads\US20150023550.pdf
2017-06-05 08:26 - 2017-06-05 08:27 - 08751550 _____ C:\Users\sampr\Downloads\remotesensing-08-00719-v2.pdf
2017-06-05 08:17 - 2017-06-05 08:18 - 06625424 _____ C:\Users\sampr\Downloads\remotesensing-07-00153.pdf
2017-06-05 07:59 - 2017-06-05 07:59 - 04935737 _____ C:\Users\sampr\Downloads\remotesensing-08-00125 (1).pdf
2017-06-05 01:53 - 2017-06-05 01:53 - 00508016 _____ C:\Users\sampr\Downloads\cpu032.pdf
2017-06-04 23:59 - 2017-06-05 00:00 - 00000000 ____D C:\My Web Sites
2017-06-04 23:58 - 2017-06-04 23:58 - 00000886 _____ C:\Users\sampr\Desktop\HTTrack Website Copier.lnk
2017-06-04 23:58 - 2017-06-04 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2017-06-04 23:58 - 2017-06-04 23:58 - 00000000 ____D C:\Program Files\WinHTTrack
2017-06-04 23:57 - 2017-06-04 23:58 - 04513224 _____ (HTTrack ) C:\Users\sampr\Downloads\httrack_x64-3.49.2.exe
2017-06-04 23:28 - 2017-06-04 23:54 - 01530526 _____ C:\Users\sampr\Downloads\checklists.pdf.crdownload
2017-06-04 13:04 - 2017-06-04 23:28 - 00000000 ____D C:\Users\sampr\Downloads\saff
2017-06-04 12:55 - 2017-06-04 12:55 - 00277551 _____ C:\Users\sampr\Downloads\creditReport_1496602281392 (1).pdf
2017-06-04 12:53 - 2017-06-04 12:53 - 00277551 _____ C:\Users\sampr\Downloads\creditReport_1496602281392.pdf
2017-06-04 12:22 - 2017-06-04 12:22 - 00000027 _____ C:\Users\sampr\Documents\paypalCredit.txt
2017-06-04 12:08 - 2017-06-04 12:08 - 00271702 _____ C:\Users\sampr\Downloads\PayPalCreditTerms.pdf
2017-06-04 07:52 - 2017-06-04 07:52 - 00511627 _____ C:\Users\sampr\Downloads\FacturaTIGO_6_4_2017.pdf
2017-06-04 07:51 - 2017-06-04 07:51 - 00005478 _____ C:\Users\sampr\Downloads\ocomprobantepagobco_tigo_6-4-2017.pdf
2017-06-03 17:23 - 2017-06-03 17:24 - 01282836 _____ C:\Windows\Minidump\060317-14359-01.dmp
2017-06-02 22:35 - 2017-06-02 22:35 - 00435617 _____ C:\Users\sampr\Downloads\cap4-geoest_indicadora.pdf
2017-06-02 21:19 - 2017-06-02 21:19 - 00489286 _____ C:\Users\sampr\Downloads\Artigo 09 6_EAGRI_474.pdf
2017-06-02 13:59 - 2017-06-02 13:59 - 06287960 _____ C:\Users\sampr\Downloads\Hrsy-Forest-Background-Sanbrntn.pdf
2017-06-01 10:41 - 2017-06-01 10:59 - 00000000 ____D C:\Users\sampr\Downloads\trif_data_geoportaltrifinio
2017-06-01 10:23 - 2017-06-01 10:23 - 14229617 _____ C:\Users\sampr\Downloads\13101360.pdf
2017-06-01 10:21 - 2017-06-01 10:21 - 03452515 _____ C:\Users\sampr\Downloads\13101363.pdf
2017-06-01 08:39 - 2017-06-01 08:39 - 00001963 _____ C:\Users\sampr\Downloads\unlock_search_result.kml
2017-06-01 08:35 - 2017-06-01 08:35 - 10075017 _____ C:\Users\sampr\Downloads\a130643.pdf
2017-06-01 08:24 - 2017-06-01 08:27 - 46225693 _____ C:\Users\sampr\Downloads\quattroshapes_gazetteer_gn_then_gp_locality.zip
2017-06-01 08:23 - 2017-06-01 08:24 - 32603575 _____ C:\Users\sampr\Downloads\quattroshapes_gazetteer_gn_then_gp_with_content.zip
2017-06-01 08:06 - 2017-06-01 08:06 - 00073152 _____ C:\Users\sampr\Downloads\_lookup_tables_20141021.zip
2017-06-01 08:06 - 2017-06-01 08:06 - 00032487 _____ C:\Users\sampr\Downloads\_pre_positioned_country_files_format_20140919.pdf
2017-05-31 20:12 - 2017-05-31 20:12 - 04025392 _____ C:\Users\sampr\Downloads\tese_8162_Dissertação (versão 1) - Marcelo Araújo de Souza.pdf
2017-05-31 20:06 - 2017-05-31 20:06 - 00005701 _____ C:\Users\sampr\Downloads\ocomprobantepagobco_5-31-2017.pdf
2017-05-31 18:23 - 2017-05-31 18:24 - 02219798 _____ C:\Users\sampr\Downloads\training_methods_asprs_2016_francois_smith.pdf
2017-05-31 16:19 - 2017-05-31 16:19 - 00504260 _____ C:\Users\sampr\Downloads\Post-Webinar+MMO+Guide.pdf
2017-05-31 10:25 - 2017-05-31 10:25 - 01492525 _____ C:\Users\sampr\Downloads\Facebook Fanpage Magic.pdf
2017-05-31 10:22 - 2017-06-17 14:49 - 00000000 ____D C:\Users\sampr\Downloads\fanp
2017-05-31 08:15 - 2017-05-31 08:15 - 00021262 _____ C:\Users\sampr\Documents\affiliateprograms.xlsx
2017-05-31 07:51 - 2017-05-31 07:51 - 04950176 _____ C:\Users\sampr\Downloads\agency.mp4
2017-05-31 07:49 - 2017-05-31 07:49 - 18046871 _____ C:\Users\sampr\Downloads\listbuilder.mp4
2017-05-31 07:47 - 2017-05-31 07:47 - 38010797 _____ C:\Users\sampr\Downloads\Pro Version Tutorial (2).mp4
2017-05-31 07:46 - 2017-05-31 07:46 - 43405431 _____ C:\Users\sampr\Downloads\replies.mp4
2017-05-31 07:43 - 2017-05-31 07:44 - 42463563 _____ C:\Users\sampr\Downloads\comments.mp4
2017-05-31 07:42 - 2017-05-31 07:43 - 31482718 _____ C:\Users\sampr\Downloads\video.mp4
2017-05-31 07:41 - 2017-05-31 07:41 - 10075609 _____ C:\Users\sampr\Downloads\feeds.mp4
2017-05-31 07:40 - 2017-05-31 07:40 - 12775227 _____ C:\Users\sampr\Downloads\pages.mp4
2017-05-31 07:39 - 2017-05-31 07:39 - 07151926 _____ C:\Users\sampr\Downloads\creatingcampaign.mp4
2017-05-31 07:38 - 2017-05-31 07:38 - 08641566 _____ C:\Users\sampr\Downloads\appsetup.mp4
2017-05-30 11:54 - 2017-05-30 11:57 - 19430352 _____ C:\Users\sampr\Downloads\demo2 (1).mp4
2017-05-30 06:04 - 2017-05-30 06:06 - 19430352 _____ C:\Users\sampr\Downloads\demo2.mp4
2017-05-30 04:52 - 2017-06-13 05:19 - 00001396 _____ C:\Users\sampr\Documents\search_promoters.txt
2017-05-30 04:01 - 2017-05-30 04:01 - 01642125 _____ C:\Users\sampr\Downloads\2011_BSA_Piracy_Study Standard (2).pdf
2017-05-30 04:00 - 2017-05-30 04:00 - 01642125 _____ C:\Users\sampr\Downloads\2011_BSA_Piracy_Study Standard (1).pdf
2017-05-30 03:56 - 2017-05-30 03:56 - 01642125 _____ C:\Users\sampr\Downloads\2011_BSA_Piracy_Study Standard.pdf
2017-05-30 03:45 - 2017-05-30 03:46 - 00167126 _____ C:\Users\sampr\Downloads\Germany_Case_Study.pdf
2017-05-28 14:51 - 2017-05-28 14:51 - 00123972 _____ C:\Users\sampr\Downloads\fw7ps.pdf
2017-05-28 11:16 - 2017-05-28 11:16 - 00075213 _____ C:\Users\sampr\Downloads\BoardingPass (2).pdf
2017-05-28 11:16 - 2017-05-28 11:16 - 00075213 _____ C:\Users\sampr\Downloads\BoardingPass (1).pdf
2017-05-26 08:10 - 2017-05-26 08:12 - 56490788 _____ C:\Users\sampr\Downloads\Facebook Groups for Cash.mp4
2017-05-26 08:06 - 2017-05-26 08:06 - 29052839 _____ C:\Users\sampr\Downloads\How I made $753.18 from ONE video.mp4
2017-05-26 00:05 - 2017-05-26 00:05 - 01392822 _____ C:\Users\sampr\Downloads\Rapid+Traffic+Secrets.pdf
2017-05-25 21:01 - 2017-05-25 21:01 - 01243533 _____ C:\Users\sampr\Downloads\PassiveProfitsMasterclassGuide-1.pdf
2017-05-25 20:30 - 2017-05-25 20:30 - 00007698 _____ C:\Users\sampr\Downloads\ideone_lZJKH4.java
2017-05-25 20:30 - 2017-05-25 20:30 - 00007698 _____ C:\Users\sampr\Downloads\ideone_lZJKH4 (1).java
2017-05-25 19:59 - 2017-05-25 20:33 - 00000000 ____D C:\Users\sampr\Downloads\rf
2017-05-25 19:56 - 2017-05-25 19:57 - 00868501 _____ C:\Users\sampr\Downloads\rsbiodiv-randomforestclassification-534bc2f23e6c.zip
2017-05-24 18:16 - 2017-05-24 18:16 - 01427198 _____ C:\Users\sampr\Downloads\Rstatistics.zip
2017-05-24 18:15 - 2017-05-24 18:15 - 00062857 _____ C:\Users\sampr\Downloads\Regression Models in R.html
2017-05-24 18:15 - 2017-05-24 18:15 - 00000000 ____D C:\Users\sampr\Downloads\Regression Models in R_files
2017-05-24 18:04 - 2017-05-24 18:04 - 03701472 _____ C:\Users\sampr\Downloads\reg_2.pdf
2017-05-24 15:43 - 2017-05-24 15:43 - 00048770 _____ C:\Users\sampr\Downloads\0648_001.pdf
2017-05-24 15:43 - 2017-05-24 15:43 - 00048770 _____ C:\Users\sampr\Downloads\0648_001 (1).pdf
2017-05-23 09:12 - 2017-05-23 09:12 - 04339712 _____ C:\Users\sampr\Downloads\multreg (1).xls
2017-05-23 00:09 - 2017-05-23 15:58 - 04514304 _____ C:\Users\sampr\Downloads\multreg.xls
2017-05-22 14:48 - 2017-05-22 14:48 - 00181872 _____ C:\Users\sampr\Downloads\PSchlesinger_Invoice_Memo_2017MAY21-signed.pdf
2017-05-22 05:58 - 2017-05-22 05:58 - 00000457 _____ C:\Users\sampr\Downloads\jaaasp_2016_transactions.csv
2017-05-21 18:22 - 2017-05-21 18:23 - 00000015 _____ C:\Users\sampr\Desktop\passw.txt
2017-05-20 06:57 - 2017-05-20 06:57 - 03980634 _____ C:\Users\sampr\Downloads\R Cookbook.pdf
2017-05-20 06:52 - 2017-05-20 06:52 - 08917978 _____ C:\Users\sampr\Downloads\R Graphics Cookbook.pdf
2017-05-19 15:37 - 2017-05-19 15:37 - 00079507 _____ C:\Users\sampr\Downloads\BoardingPass.pdf
2017-05-18 18:35 - 2017-05-18 18:35 - 02608185 _____ C:\Users\sampr\Downloads\Eat, Drink And Shrink eBook by Danette May.pdf
2017-05-18 18:30 - 2017-05-18 18:33 - 02858255 _____ C:\Users\sampr\Downloads\Bruce Krahn's Book Lean Belly Breakthrough.pdf
2017-05-18 11:10 - 2017-05-18 11:10 - 00000000 ____D C:\Users\sampr\Documents\Mikogo

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-17 15:00 - 2017-03-20 11:58 - 00000000 ____D C:\Users\sampr\AppData\Roaming\Skype
2017-06-17 14:35 - 2017-03-20 11:47 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-06-17 14:21 - 2017-03-28 12:55 - 00093600 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-06-17 09:57 - 2017-03-20 18:21 - 00004168 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{948E6489-C0DC-4171-9F0B-16BB218BA9EE}
2017-06-17 05:30 - 2016-07-16 05:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-17 05:30 - 2016-07-16 05:47 - 00000000 ____D C:\Windows\AppReadiness
2017-06-17 02:43 - 2017-03-20 13:05 - 00000000 ____D C:\Users\sampr\AppData\LocalLow\Mozilla
2017-06-16 18:37 - 2016-07-16 05:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-06-16 18:37 - 2016-07-16 05:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-06-16 18:36 - 2017-03-20 18:00 - 00000000 ____D C:\Program Files\Microsoft Office
2017-06-16 18:28 - 2017-03-29 06:59 - 00000000 ____D C:\Users\sampr\AppData\Local\CrashDumps
2017-06-16 18:18 - 2017-03-20 13:43 - 00000000 ____D C:\ProgramData\Skype
2017-06-16 18:14 - 2017-03-20 13:43 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-06-16 18:14 - 2017-03-20 11:53 - 00000000 ____D C:\Users\sampr
2017-06-16 18:13 - 2017-04-18 09:27 - 00188312 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-06-16 18:13 - 2017-04-18 09:27 - 00113592 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-06-16 18:13 - 2017-03-28 13:10 - 00252832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-06-16 18:13 - 2017-03-28 12:55 - 00044960 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-06-16 18:13 - 2017-03-20 12:23 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-06-16 18:13 - 2017-03-20 12:23 - 00000000 __SHD C:\Users\sampr\IntelGraphicsProfiles
2017-06-16 18:13 - 2017-03-20 11:56 - 00000000 ___RD C:\Users\sampr\OneDrive
2017-06-16 10:13 - 2017-03-21 10:47 - 00000000 ____D C:\Users\sampr\.matplotlib
2017-06-15 14:36 - 2017-03-20 18:18 - 00002281 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-06-15 14:36 - 2017-03-20 18:18 - 00002269 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-06-15 12:07 - 2016-07-16 05:47 - 00000000 ____D C:\Windows\rescache
2017-06-14 18:55 - 2017-04-18 09:27 - 00001921 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-06-14 18:55 - 2017-04-18 09:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-06-14 06:39 - 2017-03-20 11:54 - 02014462 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-13 13:36 - 2017-03-20 11:58 - 00003290 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-06-13 13:36 - 2017-03-20 11:56 - 00002376 _____ C:\Users\sampr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-06-13 12:57 - 2017-03-21 05:00 - 00000000 ____D C:\Users\sampr\AppData\Local\Dropbox
2017-06-13 12:57 - 2017-03-21 05:00 - 00000000 ____D C:\Program Files (x86)\Dropbox
2017-06-13 12:50 - 2017-03-20 11:54 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-13 12:49 - 2016-07-16 05:45 - 00000000 ____D C:\Windows\INF
2017-06-13 12:47 - 2017-03-23 17:21 - 00000690 _____ C:\Windows\Tasks\G2MUploadTask-S-1-5-21-3656457744-1074379417-2173692989-1001.job
2017-06-13 12:47 - 2017-03-23 17:21 - 00000594 _____ C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3656457744-1074379417-2173692989-1001.job
2017-06-13 12:47 - 2017-03-20 12:18 - 00000000 ____D C:\ProgramData\NVIDIA
2017-06-13 12:47 - 2017-03-20 11:47 - 00413768 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-13 12:47 - 2017-03-20 11:47 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-13 12:46 - 2016-07-16 05:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-06-13 12:46 - 2016-07-16 05:47 - 00000000 ____D C:\Windows\system32\appraiser
2017-06-13 12:46 - 2016-07-16 05:47 - 00000000 ____D C:\Windows\ShellExperiences
2017-06-13 12:46 - 2016-07-16 00:04 - 00524288 _____ C:\Windows\system32\config\BBI
2017-06-13 12:38 - 2017-03-21 14:10 - 00000000 ____D C:\Windows\system32\MRT
2017-06-13 12:33 - 2017-03-21 14:10 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-06-13 12:33 - 2016-07-16 05:36 - 00000000 ____D C:\Windows\CbsTemp
2017-06-13 07:51 - 2017-03-23 17:21 - 00003860 _____ C:\Windows\System32\Tasks\G2MUploadTask-S-1-5-21-3656457744-1074379417-2173692989-1001
2017-06-13 07:51 - 2017-03-23 17:21 - 00003764 _____ C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-3656457744-1074379417-2173692989-1001
2017-06-12 16:06 - 2017-03-20 11:54 - 00000000 ____D C:\Users\sampr\AppData\Local\Packages
2017-06-12 16:04 - 2016-07-16 05:47 - 00000000 ____D C:\Windows\system32\NDF
2017-06-08 10:14 - 2017-03-28 13:22 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-06-08 07:21 - 2017-03-28 13:22 - 00001049 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-06-08 07:21 - 2017-03-28 13:22 - 00001037 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-06-07 08:13 - 2017-04-01 23:30 - 00000000 ____D C:\Users\sampr\AppData\Local\lazarus
2017-06-06 22:17 - 2017-03-20 13:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-06-06 22:17 - 2017-03-20 13:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-06-05 12:10 - 2017-03-31 09:39 - 00006126 _____ C:\Users\sampr\AppData\Roaming\gdalidrisi.ini
2017-06-04 23:42 - 2017-04-02 19:54 - 00000000 ____D C:\Users\sampr\AppData\Roaming\vlc
2017-06-04 18:20 - 2017-03-20 19:16 - 00000000 ____D C:\Users\sampr\AppData\Roaming\RoboForm
2017-06-03 17:23 - 2017-04-14 09:04 - 1730135768 _____ C:\Windows\MEMORY.DMP
2017-06-03 17:23 - 2017-04-14 09:04 - 00000000 ____D C:\Windows\Minidump
2017-06-03 00:36 - 2016-07-16 05:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-03 00:36 - 2016-07-16 05:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-01 18:01 - 2017-03-20 19:28 - 00004208 _____ C:\Windows\System32\Tasks\Open URL by RoboForm
2017-06-01 18:01 - 2017-03-20 19:28 - 00003692 _____ C:\Windows\System32\Tasks\Run RoboForm TaskBar Icon
2017-06-01 18:01 - 2017-03-20 19:17 - 00000000 ____D C:\Users\sampr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RoboForm
2017-06-01 13:28 - 2017-04-14 09:13 - 00000000 ____D C:\Users\sampr\AppData\Local\Mikogo-video
2017-06-01 13:12 - 2017-04-14 10:34 - 00000131 _____ C:\Users\sampr\Desktop\Mikogo.url
2017-05-31 01:54 - 2017-03-21 11:56 - 00565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-05-25 11:58 - 2017-04-18 09:27 - 00077376 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-05-19 02:14 - 2017-03-21 11:23 - 00000000 ____D C:\Users\sampr\AppData\Local\ESRI

==================== Files in the root of some directories =======

2017-03-31 09:39 - 2017-06-05 12:10 - 0006126 _____ () C:\Users\sampr\AppData\Roaming\gdalidrisi.ini
2017-05-02 00:21 - 2017-05-02 00:21 - 0011659 _____ () C:\Users\sampr\AppData\Local\recently-used.xbel
2017-03-30 23:53 - 2017-05-14 18:41 - 0038912 _____ () C:\Users\sampr\AppData\Local\WebpageIcons.db

Some files in TEMP:
====================
2017-06-16 18:28 - 2017-06-16 18:28 - 1118360 _____ (© 2015 Microsoft Corporation) C:\Users\sampr\AppData\Local\Temp\BSvcProcessor.exe
2017-06-16 18:28 - 2017-06-16 18:28 - 0170128 _____ (© 2015 Microsoft Corporation) C:\Users\sampr\AppData\Local\Temp\BSvcUpdater.exe
2017-06-16 18:14 - 2017-06-16 18:17 - 58684896 _____ (Skype Technologies S.A.) C:\Users\sampr\AppData\Local\Temp\SkypeSetup.exe
2017-03-20 13:39 - 2017-03-20 13:40 - 14456872 _____ (Microsoft Corporation) C:\Users\sampr\AppData\Local\Temp\vc_redist.x86.exe
2017-04-23 18:04 - 2017-04-23 18:06 - 30533688 _____ () C:\Users\sampr\AppData\Local\Temp\vlc-2.2.4-win32.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-06-14 13:46

==================== End of FRST.txt ============================