mikehende Posted January 19, 2016 Posted January 19, 2016 Hey Pete or anyone else, my work machine is acting up again and can use your help please. Problem is only on the net wish some sites having scripting errors and Firefox slowing down. I am realizing that for a while now, every time I run JRT is is showing "a bad module has been found". Also this time around whenever I try to run ADWCleaner it will stop and show an error message soon after it starts scanning, please see all logs: Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 1/19/2016 Scan Time: 5:49 AM Logfile: mbam log.txt Administrator: Yes Version: 2.2.0.1024 Malware Database: v2016.01.19.03 Rootkit Database: v2016.01.09.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x86 File System: NTFS User: user Scan Type: Threat Scan Result: Completed Objects Scanned: 301776 Time Elapsed: 16 min, 12 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end) Quote
mikehende Posted January 19, 2016 Author Posted January 19, 2016 SUPERAntiSpyware Scan Log http://www.superantispyware.com Generated 01/19/2016 at 06:30 AM Application Version : 6.0.1210 Database Version : 12340 Scan type : Complete Scan Total Scan Time : 00:23:25 Operating System Information Windows 7 Home Premium 32-bit, Service Pack 1 (Build 6.01.7601) UAC On - Limited User Memory items scanned : 666 Memory threats detected : 0 Registry items scanned : 18857 Registry threats detected : 0 File items scanned : 14958 File threats detected : 732 Adware.Tracking Cookie .scorecardresearch.com\UID [ C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .scorecardresearch.com\UIDR [ C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] .scorecardresearch.com\CP3 [ C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ] cdn2.dashbida.com [ C:\USERS\USER\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\[HASHTAG]#SHAREDOBJECTS[/HASHTAG]\BQ967532 ] secure.insightexpressai.com [ C:\USERS\USER\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\[HASHTAG]#SHAREDOBJECTS[/HASHTAG]\BQ967532 ] vox-static.liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\[HASHTAG]#SHAREDOBJECTS[/HASHTAG]\BQ967532 ] .abmr.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .33across.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mookie1.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .jetlore.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .jetlore.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .iasds01.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adgrx.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adgrx.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adgrx.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adgrx.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adgrx.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adgrx.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adgrx.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adgrx.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adtechus.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .altitude-arena.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .weborama.fr [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .googleadservices.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .altitude-arena.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tribalfusion.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .atdmt.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .at.atwola.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] cx2.ic-live.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] p7.ic-live.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] s.opendsp.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] t.tellapart.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] tag.crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] match.rundsp.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .btrll.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adform.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .imrworldwide.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .casalemedia.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .connexity.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .a.scorecardresearch.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .a.scorecardresearch.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .a.scorecardresearch.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .scorecardresearch.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .a.scorecardresearch.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .questionmarket.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .iasds01.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .aexp.demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ford.demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .samsungelectronicsamericainc.demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .twc.demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dotomi.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .eqads.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .questionmarket.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mathtag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .amgdgt.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .imrworldwide.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .intentiq.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .intentiq.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .intentiq.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .intentiq.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adtechjp.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adtechus.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .kontera.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .amgdgt.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liveperson.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liveperson.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .swid.switchads.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .nanigans.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .nanigans.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ru4.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ads.stickyadstv.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mookie1.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .phluidmedia.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] mediaservices-d.openxenterprise.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ox-d.ebayus.servedbyopenx.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .domdex.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .domdex.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adlegend.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .swid.switchads.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .gwallet.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .reson8.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .reson8.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .runadtag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] match.rundsp.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .semasio.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ads.mediade.sk [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .reson8.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] bs.serving-sys.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .krxd.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .smaato.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] api.placed.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adsrvr.org [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adsrvr.org [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .insightexpressai.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tekblue.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tekblue.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tekblue.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tapad.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tapad.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adsymptotic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .amgdgt.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .scanscout.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .videohub.tv [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .scorecardresearch.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .scorecardresearch.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .scanscout.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .videohub.tv [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .scanscout.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .videohub.tv [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .scanscout.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .videohub.tv [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .admaym.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .servesharp.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .servesharp.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adfarm1.adition.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .contextweb.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .vizu.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .vizu.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ru4.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .zedo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adrta.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adrta.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .luckyorange.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .luckyorange.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tellapart.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dpclk.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dpclk.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adblade.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .eyeviewads.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adtechus.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adsby.bidtheatre.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .eyeviewads.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adblade.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adblade.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .go.sonobi.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .go.sonobi.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .go.sonobi.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .flite.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .c.appier.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crwdcntrl.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crwdcntrl.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crwdcntrl.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crwdcntrl.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dashbida.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .krxd.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rhythmxchange.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sitescout.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] pixel.sitescout.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tubemogul.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tubemogul.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .chango.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] cstatic.weborama.fr [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .afy11.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adadvisor.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rfihub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .media6degrees.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .amazon-adsystem.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .amazon-adsystem.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .altitude-arena.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adaptv.advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adap.tv [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adaptv.advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .altitude-arena.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adotube.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .owneriq.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .aexp.demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dmtry.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pro-market.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adnxs.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .areyouahuman.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .owneriq.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .acuityplatform.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] engine.adzerk.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rfihub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] exchange.bdex.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] exchange.bdex.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .bidr.io [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .bluekai.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .bluekai.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .scanscout.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .addthis.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .s.thebrighttag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] s.thebrighttag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .s.thebrighttag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .s.thebrighttag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .bidswitch.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] pix.btrll.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] pix.btrll.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] pix.btrll.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .clickagy.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ipredictive.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .basebanner.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rlcdn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .yieldoptimizer.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .yieldoptimizer.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .collective-media.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .media6degrees.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .wtp101.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .vindicosuite.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adaptv.advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .fastclick.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ipredictive.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .vindicosuite.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .wtp101.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sp1.convertro.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sp1.convertro.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sp1.convertro.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sp1.convertro.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sp1.convertro.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sp1.convertro.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sp1.convertro.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sp1.convertro.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .convertro.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sp1.convertro.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .kau.li [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .spotxchange.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .apxlv.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .cogocast.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .addthis.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pippio.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rlcdn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .at.atwola.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dpm.demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] tap-t.rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] tap.rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .angsrvr.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sxp.smartclip.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .addthis.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dyntrk.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .criteo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .262855726.log.optimizely.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .305025425.log.optimizely.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .owneriq.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .eyereturn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rfihub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .everesttech.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .netmng.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] com-samsung.netmng.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ssng.netmng.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .univide.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] m.exactag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .univide.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .extend.tv [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .bs.serving-sys.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .turn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .admaym.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .flashtalking.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ford.demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rfihub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .gravity4.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .everesttech.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .owneriq.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adhigh.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .genieessp.jp [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .genieesspv.jp [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .gssprt.jp [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .href.asia [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .cogocast.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .spotxchange.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .kau.li [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .openx.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ib.mookie1.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ib.mookie1.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ic-live.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .metrigo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ic-live.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ic-live.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adnxs.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .doubleclick.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .metrigo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mookie1.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rlcdn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .intentiq.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .geo-um.btrll.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .geo-um.btrll.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .geo-um.btrll.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .geo-um.btrll.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .jumptap.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .jivox.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .jivox.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lkqd.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lkqd.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] www.wtp101.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .addthis.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .liverail.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .eyeota.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dellinc.tt.omtrdc.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dellinc.tt.omtrdc.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mookie1.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adingo.jp [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adap.tv [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .metanetwork.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mathtag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mathtag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .cardlytics.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mxptint.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .nexac.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .nexac.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .nexac.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .nexac.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .nexac.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .nexac.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .netseer.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dsply.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .opendsp.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .optimatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .owneriq.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .spotxchange.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .spotxchange.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .contextweb.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .openx.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .univide.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .univide.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .smartadserver.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] de.tynt.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .fastclick.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ads.nexage.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] nym1.ib.adnxs.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .angsrvr.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sxp.smartclip.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tidaltv.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ads.pubmatic.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .wtp101.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] tap2-cdn.rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .provenpixel.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pippio.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .gwallet.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .gwallet.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .gwallet.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .turn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rlcdn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .gssprt.jp [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .owneriq.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .pixel.rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .turn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adbrn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adaptv.advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rlcdn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .revsci.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rfihub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .turn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .samba.tv [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .samsungelectronicsamericainc.demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sekindo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adnxs.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .media6degrees.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .owneriq.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .skimresources.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .skimresources.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .skimresources.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .cogocast.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rfihub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .owneriq.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .addthis.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sitescout.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sitescout.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sundaysky.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .contextweb.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .reson8.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .securedvisit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .securedvisit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mediaplex.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mookie1.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mookie1.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .wtp101.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .wtp101.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .taboola.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .taboola.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .owneriq.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tidaltv.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] dmp.truoptik.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] dmp.truoptik.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] dmp.truoptik.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .genieessp.jp [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .genieesspv.jp [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .gssprt.jp [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .href.asia [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .owneriq.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .lijit.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .teads.tv [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .ih.adscale.de [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .254a.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adbrn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .bidswitch.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .wtp101.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ad.360yield.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ads.creative-serving.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ads.p161.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tag.clrstm.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tremorhub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .twc.demdex.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .agkn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .erne.co [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rfihub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .serving-sys.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rfihub.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dsply.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .exelator.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .criteo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .legolas-media.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .legolas-media.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .addthis.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adform.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .audienceiq.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .bilinmedia.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .criteo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .localresponse.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .phluidmedia.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .relestar.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rtbidder.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .scanscout.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .simpli.fi [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .turn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .tynt.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .univide.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .videohub.tv [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .visiblemeasures.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ads.stickyadstv.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ads.stickyadstv.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ads.stickyadstv.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ads.stickyadstv.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .crsspxl.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .addthis.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .altitude-arena.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ad.360yield.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ad.360yield.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mookie1.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .search.spotxchange.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .spotxchange.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adaptv.advertising.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] nym1.ib.adnxs.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adscale.de [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .agkn.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .angsrvr.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mathtag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sxp.smartclip.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .adnxs.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mathtag.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .addthis.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .dmtracker.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sekindo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sekindo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .sekindo.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .videoamp.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .addthis.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .viglink.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .admaym.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .rubiconproject.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .virool.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .gumgum.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .media6degrees.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .w55c.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .gradientx.net [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .mookie1.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .yume.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] .yashi.com [ C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XT2FSYGY.DEFAULT\COOKIES.SQLITE ] ============ End of Log ============ Quote
mikehende Posted January 19, 2016 Author Posted January 19, 2016 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.3 (03.23.2014:1) OS: Windows 7 Home Premium x86 Ran by user on Tue 01/19/2016 at 6:47:15.00 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ FireFox Successfully deleted the following from C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\xt2fsygy.default\prefs.js user_pref("extensions.toolbar.mindspark._b7Members_.BUTTON_STRUCTURE", "[{\"b\":224531912,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224531913,\"c\":\"mindspark.enterse user_pref("extensions.toolbar.mindspark._b7Members_.lssState", "{\"previousLocales\":[\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLoca user_pref("extensions.toolbar.mindspark._b7Members_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._b7Members_.\"],\"filesToDelete\":[\"C:\\\\User ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Tue 01/19/2016 at 6:49:00.17 Computer was rebooted End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Quote
mikehende Posted January 19, 2016 Author Posted January 19, 2016 Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:18-01-2016 Ran by user (administrator) on USER-PC (19-01-2016 06:55:46) Running from C:\Users\user\Desktop Loaded Profiles: user (Available Profiles: user) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: English (United States) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Logitech Inc.) C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe () C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe (Greenshot) C:\Program Files\Greenshot\Greenshot.exe (SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe (SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (EventGhost Project) C:\Program Files\EventGhost\EventGhost.exe (MagicISO, Inc.) C:\Program Files\MagicDisc\MagicDisc.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [LWS] => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-12] (Logitech Inc.) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM\...\Run: [bCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [495616 2014-05-12] (Greenshot) HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976832 2009-12-17] (SEIKO EPSON CORPORATION) HKLM\...\Run: [FUFAXSTM] => C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION) HKLM\...\Run: [Platinum] => C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe [1078784 2015-05-04] (Trend Micro Inc.) HKLM\...\Run: [PwmConsole.exe] => C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe [2047216 2015-06-29] (Trend Micro Inc.) HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [165976 2014-07-20] (Trend Micro Inc.) HKLM\...\Run: [braina] => "C:\Program Files\Braina\Braina.exe" -tray HKU\S-1-5-21-3001920249-2789374724-3985487498-1000\...\Run: [WorkForce 840(Network)] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGMA.EXE [201216 2010-01-12] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-3001920249-2789374724-3985487498-1000\...\Run: [sUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6819232 2015-12-01] (SUPERAntiSpyware) HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-04-22] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-11-04] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-11-04] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-11-04] (Google) Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EventGhost.lnk [2015-03-13] ShortcutTarget: EventGhost.lnk -> C:\Program Files\EventGhost\EventGhost.exe (EventGhost Project) Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk [2014-10-29] ShortcutTarget: MagicDisc.lnk -> C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.) Hosts: Hosts file not detected in the default directory Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{989F70D2-DED8-43A2-8774-471050C14E37}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3001920249-2789374724-3985487498-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Trend Micro Password Manager BHO -> {3F019D1C-7EAA-4F25-A765-FBA635BD0AFF} -> C:\Program Files\Trend Micro\TMIDS\PwmIEBHO32.dll [2015-06-29] (Trend Micro Inc.) BHO: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation) BHO: TmIEPlugInBHO Class -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1255\2.0.1039\TmopIEPlg.dll [2014-06-30] (Trend Micro Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation) BHO: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\TmBpIe32.dll [2015-08-16] (Trend Micro Inc.) Toolbar: HKLM - Trend Micro Password Manager ToolBar - {9B4B91FC-EC4D-4018-9575-96FA5A3C03C5} - C:\Program Files\Trend Micro\TMIDS\PwmIEBHO32.dll [2015-06-29] (Trend Micro Inc.) Toolbar: HKLM - Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\TmBpIe32.dll [2015-08-16] (Trend Micro Inc.) Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1255\2.0.1039\TmopIEPlg.dll [2014-06-30] (Trend Micro Inc.) Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.) Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll [2014-07-20] (Trend Micro Inc.) FireFox: ======== FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xt2fsygy.default FF SelectedSearchEngine: Search Provided by Yahoo FF Homepage: hxxps://www.malwarebytes.org/restorebrowser//index.jhtml?ptb=414964E7-A6A7-4124-A1EC-F48BA0948948&n=7829e35f&p2=^BNH^xdm004^YYA^us&si=245051_TG-G-US-GHS-Main FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-14] () FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-03] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-03] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-26] (Adobe Systems Inc.) FF Extension: YesScript - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xt2fsygy.default\extensions\yesscript@userstyles.org.xpi [2015-10-26] FF HKLM\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\firefoxextension FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1035\9.1.1035\firefoxextension [2015-11-11] FF HKLM\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2015-11-11] FF HKLM\...\Firefox\Extensions: [{8197dd50-b252-4b08-a1be-1277f22357bb}] - C:\Program Files\Trend Micro\TMIDS\PwmFirefoxExt FF Extension: Trend Micro Password Manager Firefox Extension - C:\Program Files\Trend Micro\TMIDS\PwmFirefoxExt [2015-08-13] [not signed] FF HKLM\...\Firefox\Extensions: [{BBB77B49-9FF4-4d5c-8FE2-92B1D6CD696C}] - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension FF Extension: Trend Micro Osprey Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension [2015-11-11] Chrome: ======= CHR HomePage: Default -> hxxps://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_frg01_15_52¶m1=1¶m2=f%3D1%26b%3DChrome%26cc%3Dus%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtByEzztCzz0F0Dzzzy0BzzyB0F0DtN0D0Tzu0StCyEyDtCtN1L2XzutAtFtCyCtFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StC0D0F0D0FyE0EtAtGtA0A0A0FtG0FtDyB0FtGtAyDzytDtGtDzytC0FtCyDzztDyC0Bzy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0B0CtD0A0CtDtBtGtC0C0D0FtGyE0E0F0CtG0A0FtByEtGzz0A0DtC0A0CtCyEtDyC0F0B2QtN0A0LzutB%26cr%3D1954173900%26a%3Dwncy_frg01_15_52%26os_ver%3D6.1%26os%3DWindows%2B7%2BHome%2BPremium CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-03] CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-13] CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-13] CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-13] CHR Extension: (Google Docs Offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-03] CHR Extension: (SEO & Website Analysis) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlngmmdolgbdnnimbmblfhhndibdipaf [2016-01-13] CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-13] CHR Extension: (Trend Micro Toolbar) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohhcpmplhhiiaoiddkfboafbhiknefdf [2016-01-13] CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-03] CHR HKLM\...\Chrome\Extension: [ohhcpmplhhiiaoiddkfboafbhiknefdf] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [olmajmomenlhgihenlbjcfbopoghpckg] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [142648 2014-07-22] (SUPERAntiSpyware.com) S4 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed] S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S4 Platinum Host Service; C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe [963584 2015-05-04] (Trend Micro Inc.) S4 PwmSvc; C:\Program Files\Trend Micro\TMIDS\PwmSvc.exe [273544 2015-06-29] (Trend Micro Inc.) R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [6887696 2015-11-30] (TeamViewer GmbH) S4 WatAdminSvc; C:\Windows\system32\Wat\WatAdminSvc.exe [1343400 2014-04-21] () [File not signed] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation) S4 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X] ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [213264 2015-12-17] (Broadcom Corporation.) S3 btwampfl; C:\Windows\System32\DRIVERS\btwampfl.sys [527616 2015-12-17] (Broadcom Corporation.) R3 e1kexpress; C:\Windows\System32\DRIVERS\e1k6032.sys [164864 2009-07-13] (Intel Corporation) S3 kbfilter; C:\Windows\System32\DRIVERS\kbfilter.sys [61728 2015-01-29] (Trend Micro Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes) S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2016-01-19] (Malwarebytes) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation) R3 mcdbus; C:\Windows\System32\DRIVERS\mcdbus.sys [116736 2009-02-24] (MagicISO, Inc.) [File not signed] R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-13] (Ralink Technology Corp.) R2 NPF; C:\Windows\System32\drivers\npf.sys [35088 2010-06-25] (CACE Technologies, Inc.) R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) S3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [40104 2015-07-09] (RapidSolution Software AG) R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [108032 2015-07-20] (Trend Micro Inc.) R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [303744 2015-07-20] (Trend Micro Inc.) R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC32.sys [40736 2013-07-01] (Trend Micro Inc.) S3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [90936 2014-05-29] (Trend Micro Inc.) R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [88992 2015-07-20] (Trend Micro Inc.) S3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [306232 2014-04-07] (Trend Micro Inc.) R2 tmusa; C:\Windows\System32\DRIVERS\tmusa.sys [86840 2014-06-30] (Trend Micro Inc.) S3 eapihdrv; \??\C:\Users\user\AppData\Local\Temp\ehdrv.sys [X] S3 NUMARK_NC06; System32\Drivers\nc06_usb.sys [X] S3 NUMARK_NC06_MIDI; system32\drivers\nc06midi.sys [X] S3 NUMARK_NC06_WDM; system32\drivers\nc06_wdm.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-01-19 06:55 - 2016-01-19 06:56 - 00016702 _____ C:\Users\user\Desktop\FRST.txt 2016-01-19 06:55 - 2016-01-19 06:55 - 01721856 _____ (Farbar) C:\Users\user\Desktop\FRST.exe 2016-01-19 06:49 - 2016-01-19 06:49 - 00001331 _____ C:\Users\user\Desktop\JRT.txt 2016-01-18 15:01 - 2016-01-18 15:02 - 00000000 ____D C:\Program Files\SUPERAntiSpyware 2016-01-18 15:00 - 2016-01-18 15:01 - 00001965 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk 2016-01-18 15:00 - 2016-01-18 15:00 - 00000000 ____D C:\Users\user\AppData\Roaming\SUPERAntiSpyware.com 2016-01-18 15:00 - 2016-01-18 15:00 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2016-01-15 11:38 - 2016-01-15 11:38 - 06285430 _____ C:\Users\user\Downloads\poweredge-840_Owner's Manual_en-us.pdf 2016-01-15 11:32 - 2016-01-15 11:32 - 00101748 _____ C:\Users\user\Downloads\What_Is_a_Server.pdf 2016-01-14 11:41 - 2016-01-14 11:41 - 00880309 _____ C:\Users\user\Downloads\840_specs.pdf 2016-01-13 15:09 - 2016-01-13 15:13 - 00000000 ____D C:\Users\user\Desktop\Music Services 2016-01-13 06:32 - 2015-12-23 17:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-01-13 06:32 - 2015-12-12 13:02 - 20367360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-01-13 06:32 - 2015-12-12 12:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-01-13 06:32 - 2015-12-12 12:49 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-01-13 06:32 - 2015-12-12 12:37 - 00496640 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-01-13 06:32 - 2015-12-12 12:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-01-13 06:32 - 2015-12-12 12:37 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-01-13 06:32 - 2015-12-12 12:36 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-01-13 06:32 - 2015-12-12 12:36 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-01-13 06:32 - 2015-12-12 12:33 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-01-13 06:32 - 2015-12-12 12:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-01-13 06:32 - 2015-12-12 12:30 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-01-13 06:32 - 2015-12-12 12:28 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-01-13 06:32 - 2015-12-12 12:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-01-13 06:32 - 2015-12-12 12:27 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-01-13 06:32 - 2015-12-12 12:27 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-01-13 06:32 - 2015-12-12 12:27 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-01-13 06:32 - 2015-12-12 12:22 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-01-13 06:32 - 2015-12-12 12:19 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-01-13 06:32 - 2015-12-12 12:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-01-13 06:32 - 2015-12-12 12:12 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-01-13 06:32 - 2015-12-12 12:10 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-01-13 06:32 - 2015-12-12 12:10 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-01-13 06:32 - 2015-12-12 12:09 - 04610560 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-01-13 06:32 - 2015-12-12 12:08 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-01-13 06:32 - 2015-12-12 12:02 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-01-13 06:32 - 2015-12-12 12:00 - 12856320 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-01-13 06:32 - 2015-12-12 12:00 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-01-13 06:32 - 2015-12-12 12:00 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-01-13 06:32 - 2015-12-12 12:00 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-01-13 06:32 - 2015-12-12 12:00 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-01-13 06:32 - 2015-12-12 11:41 - 02011136 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-01-13 06:32 - 2015-12-12 11:38 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-01-13 06:32 - 2015-12-12 11:36 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-01-13 06:32 - 2015-12-08 16:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-01-13 06:31 - 2015-12-30 13:47 - 03993536 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2016-01-13 06:31 - 2015-12-30 13:47 - 03938240 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-01-13 06:31 - 2015-12-30 13:47 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-01-13 06:31 - 2015-12-30 13:47 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-01-13 06:31 - 2015-12-30 13:44 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-01-13 06:31 - 2015-12-30 13:41 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-01-13 06:31 - 2015-12-30 13:41 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-01-13 06:31 - 2015-12-30 13:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-01-13 06:31 - 2015-12-30 13:41 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-01-13 06:31 - 2015-12-30 13:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-01-13 06:31 - 2015-12-30 13:40 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-01-13 06:31 - 2015-12-30 13:40 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-01-13 06:31 - 2015-12-30 13:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-01-13 06:31 - 2015-12-30 13:39 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-01-13 06:31 - 2015-12-30 13:39 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-01-13 06:31 - 2015-12-30 13:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-01-13 06:31 - 2015-12-30 13:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-01-13 06:31 - 2015-12-30 13:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-01-13 06:31 - 2015-12-30 13:38 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-01-13 06:31 - 2015-12-30 13:38 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-01-13 06:31 - 2015-12-30 13:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-01-13 06:31 - 2015-12-30 13:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-01-13 06:31 - 2015-12-30 13:37 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-01-13 06:31 - 2015-12-30 12:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-01-13 06:31 - 2015-12-30 12:38 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-01-13 06:31 - 2015-12-30 12:32 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-01-13 06:31 - 2015-12-30 12:32 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-01-13 06:31 - 2015-12-30 12:32 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-01-13 06:31 - 2015-12-30 12:30 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-01-13 06:31 - 2015-12-30 12:30 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-01-13 06:31 - 2015-12-30 12:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-01-13 06:31 - 2015-12-30 12:30 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-01-13 06:31 - 2015-12-08 16:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2016-01-13 06:31 - 2015-12-08 16:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2016-01-13 06:31 - 2015-12-08 16:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL 2016-01-13 06:31 - 2015-12-08 16:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL 2016-01-13 06:31 - 2015-12-08 16:54 - 01202688 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll 2016-01-13 06:31 - 2015-12-08 16:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2016-01-13 06:31 - 2015-12-08 16:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL 2016-01-13 06:31 - 2015-12-08 16:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2016-01-13 06:31 - 2015-12-08 16:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2016-01-13 06:31 - 2015-12-08 16:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL 2016-01-13 06:31 - 2015-12-08 16:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2016-01-13 06:31 - 2015-12-08 16:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL 2016-01-13 06:31 - 2015-12-08 16:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL 2016-01-13 06:31 - 2015-12-08 16:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2016-01-13 06:31 - 2015-12-08 16:53 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL 2016-01-13 06:31 - 2015-12-08 16:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL 2016-01-13 06:31 - 2015-12-08 16:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL 2016-01-13 06:31 - 2015-12-08 16:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL 2016-01-13 06:31 - 2015-12-08 16:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL 2016-01-13 06:31 - 2015-12-08 16:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2016-01-13 06:31 - 2015-12-08 16:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL 2016-01-13 06:31 - 2015-12-08 16:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL 2016-01-13 06:31 - 2015-12-08 16:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll 2016-01-13 06:31 - 2015-12-08 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2016-01-13 06:31 - 2015-12-08 16:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2016-01-13 06:31 - 2015-12-08 16:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll 2016-01-13 06:31 - 2015-12-08 16:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2016-01-13 06:31 - 2015-12-08 16:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2016-01-13 06:31 - 2015-12-08 16:11 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2016-01-13 06:31 - 2015-12-08 16:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys 2016-01-13 06:31 - 2015-12-08 16:00 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-01-13 06:31 - 2015-11-13 17:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2016-01-13 06:31 - 2015-11-13 17:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2016-01-13 06:31 - 2015-11-13 17:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe 2016-01-11 11:13 - 2016-01-19 05:49 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-01-11 11:13 - 2016-01-11 11:14 - 00001064 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2016-01-11 11:13 - 2016-01-11 11:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-01-11 11:13 - 2016-01-11 11:14 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware 2016-01-11 11:13 - 2015-10-05 09:50 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-01-11 11:13 - 2015-10-05 09:50 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-01-11 11:13 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-01-07 14:25 - 2016-01-07 14:25 - 03205136 _____ (Chris P.C. srl ) C:\Users\user\Downloads\setup_chrispc_ytd_downloader_mp3_converter_2_00.exe 2016-01-07 08:29 - 2016-01-16 07:08 - 00000000 ____D C:\Users\user\Desktop\SEO training 2016-01-05 12:39 - 2016-01-05 12:39 - 00000165 ____H C:\Users\user\Desktop\~$Copy of Edited_FO63AD6E1A81__Keyword_and_Competitor_Research_Report.xlsx 2016-01-03 08:37 - 2016-01-15 08:29 - 00000000 ____D C:\Users\user\Desktop\fiverr 2015-12-22 12:39 - 2016-01-19 06:33 - 00000000 ____D C:\Users\user\AppData\Local\CrashDumps 2015-12-22 12:39 - 2015-12-22 14:06 - 00000000 ____D C:\Users\user\AppData\Roaming\FileZilla 2015-12-22 12:39 - 2015-12-22 12:39 - 00001950 _____ C:\Users\Public\Desktop\FileZilla Client.lnk 2015-12-22 12:39 - 2015-12-22 12:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2015-12-22 12:38 - 2015-12-22 12:39 - 00000000 ____D C:\Program Files\FileZilla FTP Client 2015-12-22 12:38 - 2015-12-22 12:38 - 06293872 _____ (Tim Kosse) C:\Users\user\Downloads\FileZilla_3.14.1_win32-setup.exe ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-01-19 06:55 - 2015-11-30 15:29 - 00000000 ____D C:\FRST 2016-01-19 06:46 - 2014-08-19 13:16 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-01-19 06:45 - 2009-07-13 23:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-01-19 06:45 - 2009-07-13 23:34 - 00010128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-01-19 06:45 - 2009-07-13 23:34 - 00010128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-01-19 06:43 - 2014-12-15 19:53 - 00000000 ____D C:\Screenshots 2016-01-19 06:38 - 2015-11-25 13:24 - 00000000 ____D C:\AdwCleaner 2016-01-19 06:03 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\inf 2016-01-19 06:03 - 2009-07-13 21:37 - 00000000 ____D C:\Windows 2016-01-19 05:59 - 2014-04-21 14:48 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-01-18 15:19 - 2009-07-13 23:52 - 00000000 ____D C:\Windows\Offline Web Pages 2016-01-18 15:01 - 2014-08-08 11:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware 2016-01-18 14:59 - 2015-11-25 13:14 - 24456096 _____ (SUPERAntiSpyware) C:\Users\user\Downloads\SUPERAntiSpyware.exe 2016-01-18 14:57 - 2014-04-21 14:22 - 00730320 _____ C:\Windows\system32\PerfStringBackup.INI 2016-01-18 11:27 - 2014-07-22 15:52 - 00000000 ____D C:\Users\user\Desktop\Speakers 2016-01-18 10:13 - 2015-04-22 05:44 - 00000000 ____D C:\Users\user\Desktop\Bible 2016-01-17 20:02 - 2014-12-14 09:06 - 00000000 ____D C:\Users\user\Desktop\cl ads 2016-01-16 11:28 - 2014-08-28 06:10 - 00000000 ____D C:\Users\user\Desktop\New CL ADS 2016-01-15 17:46 - 2014-10-14 07:02 - 00000000 ____D C:\Users\user\AppData\Roaming\MediaMonkey 2016-01-15 15:25 - 2015-12-17 08:40 - 00000000 ____D C:\Users\user\Desktop\CDI Computers 2016-01-15 15:02 - 2015-12-04 16:08 - 00000000 ____D C:\Ronald 2016-01-15 15:02 - 2014-05-09 11:51 - 00000000 ____D C:\Program Files\MP3Gain 2016-01-15 08:48 - 2015-01-27 14:08 - 00000000 ____D C:\Test 2016-01-14 09:13 - 2014-09-15 14:37 - 00000000 ____D C:\Users\user\Desktop\Test 2016-01-14 08:38 - 2015-03-10 12:52 - 00000000 ____D C:\Windows\Minidump 2016-01-14 06:33 - 2014-11-04 09:52 - 00000000 ____D C:\Users\user\AppData\Local\Adobe 2016-01-14 06:33 - 2014-04-21 14:48 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2016-01-14 06:33 - 2014-04-21 14:48 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2016-01-14 05:51 - 2014-08-19 13:17 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-01-13 17:47 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\rescache 2016-01-13 11:20 - 2009-07-13 23:33 - 00428192 _____ C:\Windows\system32\FNTCACHE.DAT 2016-01-13 08:24 - 2014-08-19 13:16 - 00000000 ____D C:\Users\user\AppData\Local\Google 2016-01-08 05:44 - 2014-04-21 14:27 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2016-01-07 14:25 - 2015-03-18 11:04 - 00001175 _____ C:\Users\user\Desktop\ChrisPC YTD Downloader MP3 Converter.lnk 2016-01-07 14:25 - 2015-03-18 11:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ChrisPC YTD Downloader MP3 Converter 2016-01-07 14:25 - 2015-03-18 11:04 - 00000000 ____D C:\Program Files\FFMPEG Addon 2016-01-07 14:25 - 2015-03-18 11:04 - 00000000 ____D C:\Program Files\ChrisPC YTD Downloader MP3 Converter 2016-01-07 05:50 - 2015-11-06 19:04 - 00000000 ____D C:\Program Files\Mozilla Firefox 2015-12-21 18:59 - 2014-12-15 19:51 - 00000000 ____D C:\Users\user\AppData\Local\Greenshot ==================== Files in the root of some directories ======= 2015-06-04 18:27 - 2015-06-04 18:27 - 0000127 _____ () C:\Users\user\AppData\Roaming\bibstats 2014-05-20 16:23 - 2014-05-20 16:23 - 0003584 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-05-06 16:38 - 2014-05-06 16:38 - 0000036 _____ () C:\Users\user\AppData\Local\housecall.guid.cache 2015-05-20 06:20 - 2015-09-25 06:41 - 0000010 _____ () C:\Users\user\AppData\Local\sponge.last.runtime.cache Some files in TEMP: ==================== C:\Users\user\AppData\Local\Temp\Quarantine.exe C:\Users\user\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-01-11 07:37 ==================== End of FRST.txt ============================ Quote
starbuck Posted January 20, 2016 Posted January 20, 2016 Hi Mike, Sorry I was away yesterday... just back now. Can you post the addition.txt from FRST please, there's some additional things I need to look at. Thanks Quote
mikehende Posted January 20, 2016 Author Posted January 20, 2016 No worries at all Pete, always glad whenever I can get the help :), sorry for my oversight on not posting the Addition log: Additional scan result of Farbar Recovery Scan Tool (x86) Version:18-01-2016 Ran by user (2016-01-19 06:56:32) Running from C:\Users\user\Desktop Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2014-04-21 19:19:45) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3001920249-2789374724-3985487498-500 - Administrator - Disabled) Guest (S-1-5-21-3001920249-2789374724-3985487498-501 - Limited - Disabled) user (S-1-5-21-3001920249-2789374724-3985487498-1000 - Administrator - Enabled) => C:\Users\user ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Trend Micro Maximum Security (Enabled - Out of date) {8242D66F-41BD-4049-C2E6-E578E73B62A0} AS: Trend Micro Maximum Security (Enabled - Out of date) {3923378B-6787-4FC7-F856-DE0A9CBC281D} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 95742 (HKLM\...\{d1e17d14-cabc-4f6f-9f46-c7ecf813645e}.sdb) (Version: - ) Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.245 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated) Adobe Reader XI (11.0.13) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.13 - Adobe Systems Incorporated) AlbumPlayer V6.0 beta 8 (HKLM\...\AlbumPlayer_is1) (Version: - Floresara) Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASIO4ALL (HKLM\...\ASIO4ALL) (Version: 2.12 - Michael Tippach) Audacity 2.0.6 (HKLM\...\Audacity_is1) (Version: 2.0.6 - Audacity Team) Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.) BPM Counter 1.6.0.0 (HKLM\...\BPM Counter_is1) (Version: 1.6.0.0 - AbyssMedia.com) Briz MP3 Splitter (HKLM\...\Briz MP3 Splitter_is1) (Version: - ) CameraHelperMsi (Version: 13.51.815.0 - Logitech) Hidden CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5844 - CDBurnerXP) ChrisPC YTD Downloader MP3 Converter 2.00 (HKLM\...\{6006089C-9ABC-4F18-ABCD-123456789801}_is1) (Version: - Chris P.C. srl) Dell System Detect (HKU\S-1-5-21-3001920249-2789374724-3985487498-1000\...\73f463568823ebbe) (Version: 6.3.0.6 - Dell) DJ Intro version 1.2.3 (HKLM\...\{36625871-9D4B-4046-A837-677974F51CAC}_is1) (Version: 1.2.3 - Serato Audio Research) Epson Event Manager (HKLM\...\{089EC7B5-6480-4478-ACF0-DEFD4047343C}) (Version: 2.40.0004 - SEIKO EPSON CORPORATION) Epson FAX Utility (HKLM\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.10.00 - SEIKO EPSON CORPORATION) Epson PC-FAX Driver (HKLM\...\EPSON PC-FAX Driver 2) (Version: - ) EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EPSON WorkForce 840 Series Printer Uninstall (HKLM\...\EPSON WorkForce 840 Series) (Version: - SEIKO EPSON Corporation) EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION) EpsonNet Setup 3.3 (HKLM\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.3b - SEIKO EPSON CORPORATION) erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - ) E-Touch Jukebox (HKLM\...\E-Touch Jukebox) (Version: - ) E-Touch Jukebox V9 (HKLM\...\E-Touch Jukebox V9) (Version: - ) EventGhost 0.4.1.r1700 (HKLM\...\EventGhost_is1) (Version: 0.4.1.r1700 - EventGhost Project) FFMPEG Addon (HKLM\...\{111124AF-1ED4-44EF-B674-111111985342}_is1) (Version: 1.00 - FFMPEG) FileZilla Client 3.14.1 (HKLM\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse) GoldWave v5.70 (HKLM\...\GoldWave v5.70) (Version: 5.70 - GoldWave Inc.) Google Chrome (HKLM\...\Google Chrome) (Version: 47.0.2526.111 - Google Inc.) Google Drive (HKLM\...\{1C3D2F92-D25E-4D98-B810-3F3B0857BF26}) (Version: 1.26.0707.2863 - Google, Inc.) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.29.1 - Google Inc.) Hidden Greenshot 1.1.9.13 (HKLM\...\Greenshot_is1) (Version: 1.1.9.13 - Greenshot) HP Softpaq SP45813 (HKLM\...\SP45813) (Version: - ) ImgBurn (HKLM\...\ImgBurn) (Version: 2.4.4.0 - LIGHTNING UK!) Intel® Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2413 - Intel Corporation) Intel® Management Engine Interface (HKLM\...\HECI) (Version: - Intel Corporation) IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.37 - Irfan Skiljan) Logitech Webcam Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.) Magic ISO Maker v5.5 (build 0281) (HKLM\...\Magic ISO Maker v5.5 (build 0281)) (Version: - ) MagicDisc 2.7.106 (HKLM\...\MagicDisc 2.7.106) (Version: - ) Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) MediaMonkey 4.1 (HKLM\...\MediaMonkey_is1) (Version: 4.1 - Ventis Media Inc.) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Mozilla Firefox 43.0.4 (x86 en-US) (HKLM\...\Mozilla Firefox 43.0.4 (x86 en-US)) (Version: 43.0.4 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla) MP3 Splitter 5.5.1.a (HKLM\...\F87A61F2-76B1-4D8B-BBE5-C23086BF8E95_is1) (Version: - Accmeware Corporation) Mp3tag v2.65a (HKLM\...\Mp3tag) (Version: v2.65a - Florian Heidenreich) MPC-HC 1.7.8 (HKLM\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.8 - MPC-HC Team) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) OpenOffice 4.1.1 (HKLM\...\{9395F41D-0F80-432E-9A59-B8E477E7E163}) (Version: 4.11.9775 - Apache Software Foundation) OtsAV DJ Trial 1.90.044 (HKLM\...\OtsAV DJ Trial) (Version: - ) PowerLine Utility (HKLM\...\{A0384ECE-2017-4EA8-86C7-513ACB936BDF}) (Version: 1.1.830 - TP-LINK) QuickTime 7 (HKLM\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform) Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Skype™ 7.4 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.) Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform) SQLite ODBC Driver (remove only) (HKLM\...\SQLite ODBC Driver) (Version: - ) Stamp ID3 Tag Editor (HKLM\...\Stamp) (Version: 2.39 - NCH Software) SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1210 - SUPERAntiSpyware.com) Tag&Rename 3.8.6 (HKLM\...\Tag&Rename_is1) (Version: 3.8.6 - Softpointer Inc) TeamViewer 11 (HKLM\...\TeamViewer) (Version: 11.0.52465 - TeamViewer) TeleTech WB ISA (HKLM\...\TeleTech ISA) (Version: 1.2.2.0 - TeleTech) Trend Micro DirectPass (Version: 1.9.0.1094 - Trend Micro Inc.) Hidden Trend Micro Maximum Security (HKLM\...\{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}) (Version: 8.0 - Trend Micro Inc.) Trend Micro Password Manager (HKLM\...\{3075404F-5657-4f31-A064-FEF98661BDD4}) (Version: 1.9.1189 - Trend Micro Inc.) Trend Micro Titanium (Version: 8.0 - Trend Micro Inc.) Hidden VCRT for DirectPass x86 (Version: 1.0.0.1000 - Trend Micro, Inc.) Hidden VidCoder 1.5.31 (x86) (HKLM\...\VidCoder_is1) (Version: 1.5.31 - RandomEngy) VirtualDJ (HKLM\...\VirtualDJ) (Version: - ) WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) WinRAR 5.10 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH) Yahoo! Software Update (HKLM\...\Yahoo! Software Update) (Version: - ) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {3A76AEF8-22FE-46F0-80BB-C1D37E5E7931} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {6AEF0C98-2CB4-4B67-8C70-4C977C7355CC} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc Task: {74ACBA14-C5DF-4DA7-9BA9-0A879D844E7A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated) Task: {854B572C-F8D7-4D76-8753-CD9E1C8A90DA} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {93AF4437-BB52-46F0-979A-AF35A95F3B4E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {96EEC2D1-88A0-4324-8291-0F79E4AF8F60} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-21] () Task: {A2F352EE-0ABF-422D-8B97-4EDDE3E8E228} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-14] (Adobe Systems Incorporated) Task: {AA8E9F39-E8BB-40C8-A385-D9408552627A} - System32\Tasks\Trend Micro Inspect of Platinum => C:\Program Files\Trend Micro\Titanium\plugin\Pt\Inspect\Inspect.exe [2015-05-04] (Trend Micro Inc.) Task: {D622195C-D680-4FEA-9C56-59660C7C9E94} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2012-09-12 23:38 - 2012-09-12 23:38 - 02144104 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtCore4.dll 2012-09-12 23:38 - 2012-09-12 23:38 - 07955304 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtGui4.dll 2012-09-12 23:38 - 2012-09-12 23:38 - 00341352 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtXml4.dll 2012-09-12 23:38 - 2012-09-12 23:38 - 00028008 _____ () C:\Program Files\Logitech\LWS\Webcam Software\imageformats\QGif4.dll 2012-09-12 23:38 - 2012-09-12 23:38 - 00127336 _____ () C:\Program Files\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll 2012-09-12 23:38 - 2012-09-12 23:38 - 00264040 _____ () C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe 2012-09-12 23:39 - 2012-09-12 23:39 - 00336232 _____ () C:\Program Files\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll 2009-07-13 16:03 - 2009-07-13 20:15 - 00364544 _____ () C:\Windows\system32\msjetoledb40.dll 2015-06-08 04:48 - 2015-05-04 01:23 - 00040960 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_date_time-vc110-mt-1_52.dll 2015-06-08 04:48 - 2015-05-04 01:23 - 00016896 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_system-vc110-mt-1_52.dll 2015-03-13 14:45 - 2010-03-20 14:32 - 00027648 _____ () C:\Program Files\EventGhost\lib26\_multiprocessing.pyd 2015-03-13 14:45 - 2012-02-07 16:09 - 00110080 _____ () C:\Program Files\EventGhost\lib26\pywintypes26.dll 2015-03-13 14:45 - 2012-02-07 16:13 - 00358912 _____ () C:\Program Files\EventGhost\lib26\pythoncom26.dll 2015-03-13 14:45 - 2012-02-07 16:11 - 00098816 _____ () C:\Program Files\EventGhost\lib26\win32api.pyd 2015-03-13 14:45 - 2010-03-20 14:30 - 00093184 _____ () C:\Program Files\EventGhost\lib26\_ctypes.pyd 2015-03-13 14:45 - 2015-03-04 16:54 - 00980480 _____ () C:\Program Files\EventGhost\lib26\wx._core_.pyd 2015-03-13 14:45 - 2015-03-04 16:54 - 00745984 _____ () C:\Program Files\EventGhost\lib26\wx._gdi_.pyd 2015-03-13 14:45 - 2015-03-04 16:54 - 00670208 _____ () C:\Program Files\EventGhost\lib26\wx._windows_.pyd 2015-03-13 14:45 - 2015-03-04 16:54 - 00965632 _____ () C:\Program Files\EventGhost\lib26\wx._controls_.pyd 2015-03-13 14:45 - 2015-03-04 16:54 - 00675328 _____ () C:\Program Files\EventGhost\lib26\wx._misc_.pyd 2015-03-13 14:45 - 2010-03-20 14:28 - 00584192 _____ () C:\Program Files\EventGhost\lib26\unicodedata.pyd 2015-03-13 14:45 - 2015-03-04 16:54 - 00324096 _____ () C:\Program Files\EventGhost\lib26\_imaging.pyd 2015-03-13 14:45 - 2010-03-20 14:32 - 00010240 _____ () C:\Program Files\EventGhost\lib26\select.pyd 2015-03-13 14:45 - 2010-03-20 14:27 - 00043008 _____ () C:\Program Files\EventGhost\lib26\_socket.pyd 2015-03-13 14:45 - 2010-03-20 14:29 - 00805888 _____ () C:\Program Files\EventGhost\lib26\_ssl.pyd 2015-03-13 14:45 - 2013-08-09 10:03 - 00068608 _____ () C:\Program Files\EventGhost\lib26\site-packages\cFunctions.pyd 2015-03-13 14:45 - 2015-03-04 16:54 - 00324096 _____ () C:\Program Files\EventGhost\lib26\PIL._imaging.pyd 2015-03-13 14:45 - 2010-03-20 14:29 - 00125952 _____ () C:\Program Files\EventGhost\lib26\_elementtree.pyd 2015-03-13 14:45 - 2010-03-20 14:31 - 00127488 _____ () C:\Program Files\EventGhost\lib26\pyexpat.pyd 2015-03-13 14:45 - 2012-02-07 16:11 - 00167424 _____ () C:\Program Files\EventGhost\lib26\win32gui.pyd 2015-03-13 14:45 - 2012-02-07 16:10 - 00035840 _____ () C:\Program Files\EventGhost\lib26\win32process.pyd 2015-03-13 14:45 - 2010-03-20 14:31 - 00357376 _____ () C:\Program Files\EventGhost\lib26\_hashlib.pyd 2015-03-13 14:45 - 2012-02-07 16:11 - 00015872 _____ () C:\Program Files\EventGhost\lib26\win32trace.pyd 2015-03-13 14:45 - 2012-02-07 16:10 - 00111616 _____ () C:\Program Files\EventGhost\lib26\win32file.pyd 2015-03-13 14:45 - 2014-06-08 07:30 - 00082432 _____ () C:\Program Files\EventGhost\plugins\System\VistaVolEvents.pyd 2015-03-13 14:45 - 2015-03-04 16:54 - 00031232 _____ () C:\Program Files\EventGhost\lib26\Crypto.Cipher.AES.pyd 2010-01-30 01:41 - 2010-01-30 01:41 - 04254560 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-03-24 20:17 - 2010-03-24 20:17 - 08794464 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2015-10-16 05:08 - 2015-10-16 05:08 - 00039384 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-3001920249-2789374724-3985487498-1000\...\dell.com -> dell.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3001920249-2789374724-3985487498-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\user\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1) Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\Services: !SASCORE => 2 MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3 MSCONFIG\Services: AllShare Framework DMS => 2 MSCONFIG\Services: Amsp => 2 MSCONFIG\Services: Bonjour Service => 2 MSCONFIG\Services: EpsonBidirectionalService => 2 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: MBAMScheduler => 2 MSCONFIG\Services: MBAMService => 2 MSCONFIG\Services: MozillaMaintenance => 3 MSCONFIG\Services: Platinum Host Service => 2 MSCONFIG\Services: PwmSvc => 2 MSCONFIG\Services: Samsung Link Service => 2 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: ss_conn_service => 2 MSCONFIG\Services: TeamViewer => 2 MSCONFIG\Services: WatAdminSvc => 3 ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{50704A75-5DDC-41C8-8FBF-A1B73505C8C2}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe FirewallRules: [{A3A4192C-EC64-46F6-8D7D-5B46F62B8C9F}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe FirewallRules: [{07A91A10-1E51-4CF4-B9DA-F4B4C9A569EA}] => (Allow) LPort=8743 FirewallRules: [{0F6461EE-BA85-4080-BCF7-28B3BEAEC358}] => (Allow) LPort=8643 FirewallRules: [{0737F8E4-10BF-4B2B-A3C8-E7545FE9A852}] => (Allow) LPort=7676 FirewallRules: [{C26BFD84-5A25-4D48-AB49-07D9F9A4F059}] => (Allow) LPort=7679 FirewallRules: [{D5631584-494E-4B4C-9416-0F0907B78443}] => (Allow) LPort=24234 FirewallRules: [{6A0A39BD-1D7E-4716-B610-63CE26CE9921}] => (Allow) LPort=7900 FirewallRules: [{31462502-825E-4D71-AB02-1436AE6F38C0}] => (Allow) LPort=1900 FirewallRules: [TCP Query User{8C5C027E-E235-4C62-85E3-8D2D184359AB}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe FirewallRules: [uDP Query User{F8C6F293-C57B-498B-9015-7673B2F1FC40}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe FirewallRules: [{D445D6AB-C8A0-4FC6-A477-129378851BA3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe FirewallRules: [{174AA37C-CCE3-4165-9E3B-F7E89964DFA1}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [TCP Query User{5492C147-4FFA-494A-9AC1-BEE6021096D0}C:\program files\mediamonkey\mediamonkey.exe] => (Allow) C:\program files\mediamonkey\mediamonkey.exe FirewallRules: [uDP Query User{05264AA1-8BDC-483C-B70E-80B88EE3CB09}C:\program files\mediamonkey\mediamonkey.exe] => (Allow) C:\program files\mediamonkey\mediamonkey.exe FirewallRules: [{35969657-AD42-40A9-93EF-72930B43B25C}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe FirewallRules: [{FA5028F2-9904-4E8A-81EB-86CC6A4F488C}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe FirewallRules: [{C984E19F-685B-44F2-A1AD-53D33A0D7A93}] => (Allow) C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe FirewallRules: [{24D87BE9-5BFE-4071-B582-F087EF8E0067}] => (Allow) C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe FirewallRules: [TCP Query User{F3A4FF84-69ED-4A6A-A5E5-3A13A6E863F5}C:\program files\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files\epson software\event manager\eeventmanager.exe FirewallRules: [uDP Query User{D14EB69C-6060-4D4B-8F96-DE5A18A39ED8}C:\program files\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files\epson software\event manager\eeventmanager.exe FirewallRules: [{85F0FF84-E354-4498-82CF-E8FE707B1B5D}] => (Allow) LPort=3689 FirewallRules: [{D89B57B9-9E87-4E2E-B8FB-2B61BE17823A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{DDC5DC52-472E-4360-8324-86CD5F9B0A9F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{10F5F564-228F-4A04-ADB4-E6F572591C8A}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{669DE6F8-C6AF-43A9-8678-316184DF8BE3}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{065FD040-0716-4C89-B1AA-FA4A336DB904}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer.exe FirewallRules: [{CA84A4FF-1616-4BE1-AAA5-593AE1D008C8}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer.exe FirewallRules: [{561BE0DF-C883-493F-A000-09ECCF5CE5C0}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe FirewallRules: [{E7114D5C-50C9-463C-991E-A86031E44C91}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe FirewallRules: [TCP Query User{149DF7A2-2FDA-46CD-9881-57232719AE45}C:\program files\mediamonkey\mediamonkey.exe] => (Allow) C:\program files\mediamonkey\mediamonkey.exe FirewallRules: [uDP Query User{035772D8-D1FD-4D69-B0A4-DC449709637B}C:\program files\mediamonkey\mediamonkey.exe] => (Allow) C:\program files\mediamonkey\mediamonkey.exe FirewallRules: [TCP Query User{F2AE6655-E18D-4205-94C2-310A4A1ABFE2}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe FirewallRules: [uDP Query User{DC10DCCB-8F3B-4933-A93D-9CC96D94FEA6}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe FirewallRules: [{1BE871FA-ED3B-4917-9583-9A4B2481E8F5}] => (Allow) C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe FirewallRules: [{32CB4758-DD75-4736-ACF5-6CBAF5B8279D}] => (Allow) C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe FirewallRules: [{09C937CC-6CBB-4189-84DF-91FDF7A61FAB}] => (Allow) LPort=3689 FirewallRules: [{672E68A2-2B37-44FC-BD41-94D18CB17436}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{20C0DA68-0A2B-428F-B284-C35FCBE58685}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{35D8441D-242E-4599-B182-396682B9DB66}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{B45941F2-EC53-4022-80A5-14B04CA65799}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{BB4C246C-D233-4CF9-8465-75C6C9AF5F8E}] => (Allow) C:\Program Files\Braina\Braina.exe FirewallRules: [{03F22547-AF7D-4AFA-AF66-B119325EDAF9}] => (Allow) C:\Program Files\Braina\Braina.exe FirewallRules: [{BCCCBC21-BB11-4044-B868-F29862C9F025}] => (Allow) C:\Program Files\Braina\Braina.exe FirewallRules: [{763C4BCD-75EF-41E0-B2DA-C504F001FDCF}] => (Allow) C:\Program Files\Braina\bhp.exe FirewallRules: [{12DF6AE9-80BC-4F97-94D0-EADCB93DA432}] => (Allow) C:\Program Files\Braina\bhp.exe FirewallRules: [{349FDBE6-BB08-4B5E-82C3-AFB91BC2B28E}] => (Allow) C:\Program Files\Braina\bhp.exe FirewallRules: [{EB2B13D6-AFB9-427C-92F4-2D0B52B579C7}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe FirewallRules: [{F9A7D9E6-C359-4341-AEE8-02EB6A30B017}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe FirewallRules: [{E40DA7CD-5A00-483F-A54F-9D53BD4CBC0D}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe FirewallRules: [{0C4CFC63-45B8-4235-89D7-C15B1FB503A9}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe FirewallRules: [{957AFEB0-3ECA-4644-BA8D-7E1A58D0D2B5}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= 25-12-2015 00:00:13 Scheduled Checkpoint 01-01-2016 11:42:59 Scheduled Checkpoint 08-01-2016 15:14:35 Scheduled Checkpoint 13-01-2016 11:11:27 Windows Update ==================== Faulty Device Manager Devices ============= Name: PS/2 Compatible Mouse Description: PS/2 Compatible Mouse Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Standard PS/2 Keyboard Description: Standard PS/2 Keyboard Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: (Standard keyboards) Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== System errors: ============= ==================== Memory info =========================== Processor: Intel® Core2 Duo CPU E8400 @ 3.00GHz Percentage of memory in use: 58% Total physical RAM: 1977.25 MB Available physical RAM: 811.57 MB Total Virtual: 3954.49 MB Available Virtual: 2747.39 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.76 GB) (Free:89.56 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive f: (2G-3) (Removable) (Total:1.91 GB) (Free:1.7 GB) FAT ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 07F2837E) Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 1.9 GB) (Disk ID: C3072E18) Partition 1: (Active) - (Size=1.9 GB) - (Type=06) ==================== End of Addition.txt ============================ Quote
starbuck Posted January 20, 2016 Posted January 20, 2016 Hi Mike, There's nothing in the FRST reports that stands out as a cause, but there is some general cleaning we can do.. Let's look at some obvious things: Problem is only on the net wish some sites having scripting errors and Firefox slowing down. Have you tried resetting Firefox? To Reset Firefox At the top of the Firefox window, click the Help menu and select Troubleshooting Information Click the Reset Firefox… button in the upper-right corner of the Troubleshooting Information page. To continue, click Reset Firefox in the confirmation window that opens. Firefox will close and be reset. When it's done, a window will list the information that was imported. Click Finish and Firefox will open. Note: After the reset is finished, your old Firefox profile information will be placed on your desktop in a folder named "Old Firefox Data." If the reset didn't fix your problem you can restore some of the information not saved by copying files to the new profile that was created. If you don't need this folder any longer, you should delete it as it contains sensitive information. The reset feature works by creating a new profile folder for you while saving your most important data. Firefox will try to keep the following data: Bookmarks Browsing history Passwords Cookies Web form auto-fill information Personal dictionary every time I run JRT is is showing "a bad module has been found". Have you seen how far out of date JRT is?? Junkware Removal Tool (JRT) by Thisisu Version: 6.1.3 (03.23.2014:1) The latest version is: 8.0.1 Try removing the old version and getting an up to date copy. Junkware Removal Tool whenever I try to run ADWCleaner it will stop and show an error message soon after it starts scanning, What is the error message? AV: Trend Micro Maximum Security (Enabled - Out of date) {8242D66F-41BD-4049-C2E6-E578E73B62A0} AS: Trend Micro Maximum Security (Enabled - Out of date) {3923378B-6787-4FC7-F856-DE0A9CBC281D} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} Why are your AV definitions out of date? also.... Version 10 is the current version. Windows Defender will conflict with Trend Micro and shouldn't be enabled. Click Start >> Control Panel >> Windows Defender or launch from the system tray icon. Click on Tools & Settings >> Options. Under Real-time protection options, uncheck the "Real-time protection" check box. In the left pane, click on Administrator. Uncheck the Use this program box. Click on the Save button. After taking care of these things...... Please download the attached fixlist.txt file (bottom of this post) and save it to the Desktop. NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Re-run FRST/FRST64 (which ever is installed ) and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt). Please post this in your next reply. Start with this and then we can look elsewhere. Thanksfixlist.txt Quote
mikehende Posted January 21, 2016 Author Posted January 21, 2016 Hi Pete, seems I was making a mistake all this time. I had initially loaded all AV tools on a flash drive and was using those tools on any machine I would work on and that is why they are outdated, I had thought that it would be ok to use those tools since their definitions would be updated anyway. From now on prior to working on any machines I will install all new downloads from the net. No more error messages for either JRT or ADWCleaner since I now used the latest versions from the net. I have been having problems for a while now with Trend Micro not loading at startup and that is why it's definitions are out of date. I should have paid attention to that but as they say "a mechanic never has a good car", I will from now on tackle things as soon as they come up and will look into why TrendMicro is not autostarting. Here is the fixlog: Fix result of Farbar Recovery Scan Tool (x86) Version:18-01-2016 Ran by user (2016-01-21 06:27:41) Run:2 Running from C:\Users\user\Desktop Loaded Profiles: user (Available Profiles: user) Boot Mode: Normal ============================================== fixlist content: ***************** SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3001920249-2789374724-3985487498-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = S4 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X] S3 eapihdrv; \??\C:\Users\user\AppData\Local\Temp\ehdrv.sys [X] S3 NUMARK_NC06; System32\Drivers\nc06_usb.sys [X] S3 NUMARK_NC06_MIDI; system32\drivers\nc06midi.sys [X] S3 NUMARK_NC06_WDM; system32\drivers\nc06_wdm.sys [X] CMD: ipconfig /flushdns Hosts: EmptyTemp: ***************** HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found. HKU\S-1-5-21-3001920249-2789374724-3985487498-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully. Amsp => service removed successfully. eapihdrv => service removed successfully. NUMARK_NC06 => service removed successfully. NUMARK_NC06_MIDI => service removed successfully. NUMARK_NC06_WDM => service removed successfully. ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= End of CMD: ========= Hosts restored successfully. EmptyTemp: => 751.1 MB temporary data Removed. The system needed a reboot. ==== End of Fixlog 06:28:39 ==== Quote
starbuck Posted January 21, 2016 Posted January 21, 2016 Hi Mike, I had thought that it would be ok to use those tools since their definitions would be updated anyway. Not all of the tools we use have an update feature. That is why we don't recommend that any tools are kept on the system after cleaning. I will from now on tackle things as soon as they come up and will look into why TrendMicro is not autostarting The orphan file we removed with FRST: S4 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X] Is related to Trend Micro. so are these 2 entries in MsConfig: MSCONFIG\Services: Platinum Host Service => 2 MSCONFIG\Services: PwmSvc => 2 It's not really any wonder that Trend Micro was having problems. I suggest that you re-enable the 2 files in MsConfig, then remove Trend Micro. If you really want Trend Micro, then reinstall a fresh copy. I personally don't recommend these full suites..... the built in Firewalls are not always that smooth on the system. You are better off with just an AV and the Windows Firewall. 5 Reasons Why the Windows Firewall is One of the Best Firewalls Is the system running ok now? Quote
mikehende Posted January 21, 2016 Author Posted January 21, 2016 Thanks for the info, for the most part it's running ok but I still experienced some erratic behavior a short while ago, issue is always with the browser only. I had suspected virus activity as have been learning Digital Marketing for some weeks now and been all over the place in my studies so I had thought I had picked up something somewhere. We have had a multi license package from TM which is why I still use it but when this expires I am going back to Nod32. I guess now I will do the disable MS services thing as last time. Quote
starbuck Posted January 21, 2016 Posted January 21, 2016 I guess now I will do the disable MS services thing as last time Not sure exactly what you mean Mike. Quote
mikehende Posted January 21, 2016 Author Posted January 21, 2016 These instructions from a few months back when i had the same issues: Step 2 Let's try a clean boot and see if you still get any glitches... Hold down the Windows key on your keyboard and press the R key. With the Run dialogue window open, type in msconfig and click the OK button. You should now be looking at the System Configuration window. Click on the Services tab. On the Services tab, youll notice a long list of services available on your PC First, check the box labeled Hide All Microsoft Services. <<<<<<<<<<< Important Next, click the Disable All button By performing these two steps, you have effectively turned off all services from third-party software developers. All Microsoft services remain intact and will be ready to load when you reboot Windows. Finally, click the OK button and reboot the system When you reboot, you may get messages that certain hardware and software are not unavailable. This is normal. Just be sure to hide all Microsoft services before you use the Disable All button. Otherwise, you may encounter boot up errors when you reboot your PC. Remember, running Windows like this is just temporary. To restore Windows to a normal start up functionality: Start the System Configuration Utility again (MSCONFIG) On the "General" tab: Click to select "Normal Startup" Click "OK" Choose the "Exit with Restart" option to restart your computer. Quote
starbuck Posted January 21, 2016 Posted January 21, 2016 I see now Mike, Those instructions are for a 'Clean Boot'. To just re-enable the Trend Micro lines, you won't need to hide the MS services. You are only adding a tick to those lines. That said, Hiding the MS services or not won't cause any problems.... so up to you.. Quote
mikehende Posted January 21, 2016 Author Posted January 21, 2016 Ohh, alright, will follow your previous instructions then. Quote
mikehende Posted January 22, 2016 Author Posted January 22, 2016 I took your your advice and got rid of TM but before going back to Eset, I wish to try out Vipre since it's the no.1 rate AV software so I took the one month free trial. Just for my knowledge Pete, can you tell me what the difference was this time why you did not recommend clean boot as you did last time even though I had the same issues please? Quote
starbuck Posted January 22, 2016 Posted January 22, 2016 Hi Mike, Just for my knowledge Pete, can you tell me what the difference was this time why you did not recommend clean boot as you did last time even though I had the same issues please? We seem to be at cross purposes here. You said originally: I will from now on tackle things as soon as they come up and will look into why TrendMicro is not autostarting So I pointed out that you should re-enable the 2 files that had been disabled in MsConfig ( which you would need to do so that the uninstall was complete) : I suggest that you re-enable the 2 files in MsConfig, then remove Trend Micro. All that you needed to do was to re-enable the 2 files again. There was no need to follow the Clean Boot instructions..... these are 2 different actions. Quote
mikehende Posted January 22, 2016 Author Posted January 22, 2016 I had done that earlier this morning and had uninstalled TM but pc is still not right, I am backing up everything to do an OS reinstall. BTW, I kept seeing "Pckeeper" appearing every now and then but it never shows in the Programs and Features, wondering if that has anything to do with this? Quote
starbuck Posted January 22, 2016 Posted January 22, 2016 BTW, I kept seeing "Pckeeper" appearing every now and then but it never shows in the Programs and Features, wondering if that has anything to do with this? PcKeeper isn't showing in any of the reports, but we can get FRST to search for it. Please re-run FRST again, but this time type the following in the edit box after Search: PCKeeper Click the Search File(s) button It will make a log (Search.txt)- please post this report in your next reply Quote
mikehende Posted January 22, 2016 Author Posted January 22, 2016 Well, I'm not surprised it didn't find it since as mentioned it's not listed and and also because none of my scans were able to pick it up: Farbar Recovery Scan Tool (x86) Version:18-01-2016 Ran by user (2016-01-22 16:54:02) Running from C:\Users\user\Desktop Boot Mode: Normal ================== Search Files: "PCKeeper" ============= ====== End of Search ====== Quote
starbuck Posted January 22, 2016 Posted January 22, 2016 Hi Mike, Obviously we can only remove or deal with what we can see. Maybe the reinstall is the best option this time. Sorry I couldn't be of more help. Quote
mikehende Posted January 22, 2016 Author Posted January 22, 2016 No worries at all pete, always totally grateful for your help. To be hones, this pc has taken a beating in the past year so I think it's time to give it a refresher and also now I will have finally backed up everything properly so all in all a good thing. Quote
mikehende Posted January 25, 2016 Author Posted January 25, 2016 Well Pete, yesterday I reloaded the OS and just a short while ago PC Keeper opened up again in another window as it was doing. While running FRST again doing a search for it Vipre blocked a threat and this opened up in my browser. I also have the FRST files, help please? Quote
mikehende Posted January 25, 2016 Author Posted January 25, 2016 Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-01-2016 Ran by mike (administrator) on MIKE-PC (25-01-2016 14:46:27) Running from C:\Users\mike\Desktop Loaded Profiles: mike (Available Profiles: mike) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: English (United States) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (ThreatTrack Security Inc.) C:\Program Files\VIPRE\SBAMSvc.exe (ThreatTrack Security Inc.) C:\Program Files\VIPRE\WebProxy.exe (ThreatTrack Security Inc.) C:\Program Files\VIPRE\SBAMTray.exe (ThreatTrack Security Inc.) C:\Program Files\VIPRE\SBPIMSvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE (Greenshot) C:\Program Files\Greenshot\Greenshot.exe (FileZilla Project) C:\Program Files\FileZilla FTP Client\filezilla.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [bCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM\...\Run: [sBAMTray] => C:\Program Files\VIPRE\SBAMTray.exe [3000800 2015-09-29] (ThreatTrack Security Inc.) HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [528384 2015-11-10] (Greenshot) HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2016-01-24] (Microsoft Corporation) Startup: C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Auto Activate Office 2010 VL.lnk [2016-01-25] ShortcutTarget: Auto Activate Office 2010 VL.lnk -> C:\Windows\actofvl\aaovl.exe () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3D3A6E98-514F-42CB-83D8-60B582665F65}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation) BHO: VIPRE Search Guard Helper -> {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} -> C:\Program Files\VIPRE\VSG.dll [2015-09-29] () BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation) Toolbar: HKLM - VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - C:\Program Files\VIPRE\VSG.dll [2015-09-29] () Handler: vipresg - {47BE2E5B-703B-444F-ABD3-05717D2191C6} - C:\Program Files\VIPRE\VSG.dll [2015-09-29] () FireFox: ======== FF ProfilePath: C:\Users\mike\AppData\Roaming\Mozilla\Firefox\Profiles\refag05k.default FF Homepage: hxxps://us-mg6.mail.yahoo.com/neo/launch?.rand=6h1jri8ou1fde about:preferences FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2016-01-24] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2016-01-24] (Google Inc.) Chrome: ======= CHR Profile: C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-24] CHR Extension: (Google Docs) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-24] CHR Extension: (Google Drive) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-24] CHR Extension: (YouTube) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-24] CHR Extension: (Google Search) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-24] CHR Extension: (Google Sheets) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-24] CHR Extension: (Google Docs Offline) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-24] CHR Extension: (Chrome Web Store Payments) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-24] CHR Extension: (Gmail) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-24] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 SBAMSvc; C:\Program Files\VIPRE\SBAMSvc.exe [4337696 2015-09-29] (ThreatTrack Security Inc.) R2 SBPIMSvc; C:\Program Files\VIPRE\SBPIMSvc.exe [212448 2015-09-29] (ThreatTrack Security Inc.) R3 WebProxy; C:\Program Files\VIPRE\WebProxy.exe [4405216 2015-09-29] (ThreatTrack Security Inc.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 gfiark; C:\Windows\System32\drivers\gfiark.sys [43176 2015-08-27] (ThreatTrack Security) S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [24040 2013-09-04] (ThreatTrack Security) R3 netr28u; C:\Windows\System32\DRIVERS\Dnetr28u.sys [827904 2009-11-14] (Ralink Technology Corp.) R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [71912 2015-09-29] (ThreatTrack Security Inc.) R3 sbwtis; C:\Windows\System32\DRIVERS\sbwtis.sys [83224 2015-09-29] (ThreatTrack Security) R2 WebExaminer; C:\Windows\system32\Drivers\WebExaminer.sys [29760 2015-09-29] (ThreatTrack Security Inc.) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-01-25 14:46 - 2016-01-25 14:48 - 00007668 _____ C:\Users\mike\Desktop\FRST.txt 2016-01-25 14:45 - 2016-01-25 14:46 - 00000000 ____D C:\FRST 2016-01-25 14:45 - 2016-01-25 14:45 - 01721856 _____ (Farbar) C:\Users\mike\Downloads\FRST(1).exe 2016-01-25 14:44 - 2016-01-25 14:44 - 01721856 _____ (Farbar) C:\Users\mike\Desktop\FRST.exe 2016-01-25 13:30 - 2016-01-25 13:53 - 00000000 ____D C:\Users\mike\AppData\Roaming\FileZilla 2016-01-25 13:30 - 2016-01-25 13:30 - 00307200 _____ (Secure By Design Inc.) C:\Users\mike\Downloads\Ninite FileZilla Installer.exe 2016-01-25 13:30 - 2016-01-25 13:30 - 00001165 _____ C:\Users\Public\Desktop\FileZilla.lnk 2016-01-25 13:30 - 2016-01-25 13:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2016-01-25 13:30 - 2016-01-25 13:30 - 00000000 ____D C:\Program Files\FileZilla FTP Client 2016-01-25 13:03 - 2016-01-25 13:03 - 00111984 _____ C:\Users\mike\AppData\Local\GDIPFONTCACHEV1.DAT 2016-01-25 13:03 - 2016-01-25 13:03 - 00000000 ____D C:\Users\mike\AppData\Roaming\Greenshot 2016-01-25 13:03 - 2016-01-25 13:03 - 00000000 ____D C:\Users\mike\AppData\Local\Greenshot 2016-01-25 13:02 - 2016-01-25 13:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greenshot 2016-01-25 13:02 - 2016-01-25 13:02 - 00000000 ____D C:\Program Files\Greenshot 2016-01-25 13:01 - 2016-01-25 13:01 - 01374661 _____ (Greenshot ) C:\Users\mike\Downloads\Greenshot-INSTALLER-1.2.8.12-RELEASE.exe 2016-01-25 11:05 - 2016-01-25 11:13 - 00000000 ____D C:\Mike ALBUMS 2016-01-25 11:05 - 2016-01-25 11:05 - 00000000 ____D C:\goldwave 2016-01-25 10:49 - 2016-01-25 10:50 - 00000000 ____D C:\Cruzer files 2016-01-25 10:49 - 2016-01-25 10:49 - 00000000 ____D C:\AlbumPlayerData 2016-01-25 09:47 - 2016-01-25 09:47 - 23719992 _____ C:\Users\mike\Downloads\template_40857_ar2AXx1E1i08Wgm9wWAX.zip 2016-01-25 09:29 - 2016-01-25 10:49 - 00000000 ____D C:\WD External 2016-01-25 09:14 - 2016-01-25 09:48 - 00000000 ____D C:\Users\mike\Desktop\Wordpress 2016-01-25 08:43 - 2016-01-25 09:29 - 00000000 ____D C:\touchscreen mp3 2016-01-25 08:40 - 2016-01-25 08:43 - 00000000 ____D C:\Ronald 2016-01-25 08:11 - 2016-01-25 08:40 - 00000000 ____D C:\R&B 2016-01-25 07:18 - 2016-01-25 07:18 - 00000000 ____D C:\Users\mike\AppData\Local\IsolatedStorage 2016-01-25 07:18 - 2016-01-25 07:18 - 00000000 _____ C:\Windows\system32\SBRC.dat 2016-01-25 07:17 - 2015-08-27 06:31 - 00043176 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiark.sys 2016-01-25 07:17 - 2013-09-04 13:57 - 00024040 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiutil.sys 2016-01-25 07:13 - 2016-01-25 14:46 - 00000000 ____D C:\ProgramData\VIPRE 2016-01-25 07:13 - 2016-01-25 07:13 - 00003264 _____ C:\Windows\system32\WebProxyOff.ini 2016-01-25 07:13 - 2016-01-25 07:13 - 00001861 _____ C:\Users\Public\Desktop\VIPRE.lnk 2016-01-25 07:13 - 2016-01-25 07:13 - 00000000 ____D C:\Windows\system32\Drivers\VDD 2016-01-25 07:13 - 2016-01-25 07:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIPRE 2016-01-25 07:13 - 2016-01-25 07:13 - 00000000 ____D C:\ProgramData\Downloaded Installations 2016-01-25 07:13 - 2015-09-29 13:10 - 00029760 _____ (ThreatTrack Security Inc.) C:\Windows\system32\Drivers\WebExaminer.sys 2016-01-25 07:12 - 2016-01-25 07:18 - 00000000 ____D C:\Users\mike\AppData\Roaming\VIPRE 2016-01-25 07:12 - 2016-01-25 07:17 - 00000000 ____D C:\Program Files\VIPRE 2016-01-25 07:12 - 2016-01-25 07:12 - 06556128 _____ (ThreatTrack Security, Inc) C:\Users\mike\Downloads\setup-vipre-antivirus-en-us-trial.exe 2016-01-25 07:12 - 2016-01-25 07:12 - 00000000 ____D C:\Users\mike\AppData\Local\VIPRE 2016-01-25 06:59 - 2016-01-25 06:59 - 00000000 ____D C:\Users\mike\Desktop\Bible 2016-01-25 06:58 - 2016-01-25 06:58 - 03676669 _____ C:\Users\mike\Downloads\Bible.zip 2016-01-25 06:55 - 2016-01-25 14:36 - 00000000 ____D C:\Users\mike\Desktop\Amerisales 2016-01-25 06:54 - 2016-01-25 06:54 - 00000000 ____D C:\Users\mike\Desktop\New CL ADS 2016-01-25 06:54 - 2016-01-25 06:54 - 00000000 ____D C:\Users\mike\Desktop\cl ads 2016-01-25 06:51 - 2016-01-25 06:51 - 00000000 ____D C:\Users\mike\Desktop\Test 2016-01-25 06:51 - 2016-01-25 06:51 - 00000000 ____D C:\Users\mike\Desktop\Speakers 2016-01-25 06:45 - 2016-01-25 06:45 - 03263219 _____ C:\Users\mike\Desktop\SEO training.zip 2016-01-25 06:20 - 2016-01-25 06:20 - 00000000 ____D C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\mini-KMS Auto Activation Tool 2016-01-25 06:16 - 2016-01-25 14:48 - 00000000 ____D C:\ProgramData\TEMP 2016-01-25 06:16 - 2016-01-25 14:46 - 00000000 _RSHD C:\Windows\actofvl 2016-01-25 06:16 - 2016-01-25 06:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Office Tab 2016-01-25 06:16 - 2016-01-25 06:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Menu for Office 2010 2016-01-25 06:16 - 2016-01-25 06:16 - 00000000 ____D C:\Program Files\Detong 2016-01-25 06:16 - 2016-01-25 06:16 - 00000000 ____D C:\Program Files\Classic Menu for Office 2010 2016-01-25 06:13 - 2016-01-25 06:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint 2016-01-25 06:13 - 2016-01-25 06:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-01-25 06:11 - 2016-01-25 06:11 - 00000000 ____D C:\Windows\PCHEALTH 2016-01-25 06:11 - 2016-01-25 06:11 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services 2016-01-25 06:11 - 2016-01-25 06:11 - 00000000 ____D C:\Program Files\Microsoft Sync Framework 2016-01-25 06:11 - 2016-01-25 06:11 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2016-01-25 06:11 - 2016-01-25 06:11 - 00000000 ____D C:\Program Files\Common Files\DESIGNER 2016-01-25 06:10 - 2016-01-25 06:10 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8 2016-01-25 06:09 - 2016-01-25 06:09 - 00000000 ____D C:\Program Files\Microsoft Analysis Services 2016-01-25 06:08 - 2016-01-25 06:11 - 00000000 ____D C:\Program Files\Microsoft Office 2016-01-25 06:08 - 2016-01-25 06:08 - 00000000 __RHD C:\MSOCache 2016-01-25 06:08 - 2016-01-25 06:08 - 00000000 ____D C:\Users\mike\AppData\Local\Microsoft Help 2016-01-24 21:00 - 2013-10-01 19:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2016-01-24 21:00 - 2013-10-01 19:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2016-01-24 21:00 - 2013-10-01 19:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2016-01-24 21:00 - 2013-10-01 19:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2016-01-24 21:00 - 2013-10-01 19:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2016-01-24 21:00 - 2013-10-01 18:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2016-01-24 21:00 - 2013-10-01 18:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2016-01-24 21:00 - 2013-10-01 18:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2016-01-24 21:00 - 2013-10-01 18:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2016-01-24 21:00 - 2013-10-01 17:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2016-01-24 21:00 - 2013-10-01 17:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2016-01-24 21:00 - 2013-10-01 15:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2016-01-24 21:00 - 2012-08-23 09:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2016-01-24 21:00 - 2012-08-23 09:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2016-01-24 21:00 - 2012-08-23 08:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2016-01-24 21:00 - 2012-08-23 06:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2016-01-24 21:00 - 2012-08-23 05:08 - 02739712 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2016-01-24 20:58 - 2015-12-08 16:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2016-01-24 20:58 - 2015-11-10 13:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2016-01-24 20:58 - 2015-11-10 13:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2016-01-24 20:58 - 2015-11-10 13:39 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2016-01-24 20:58 - 2015-08-05 12:40 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2016-01-24 20:58 - 2015-08-05 11:58 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2016-01-24 20:58 - 2015-07-30 12:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2016-01-24 20:58 - 2015-02-03 21:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2016-01-24 20:58 - 2015-02-02 22:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2016-01-24 20:57 - 2015-12-16 13:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2016-01-24 20:57 - 2015-12-16 13:43 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll 2016-01-24 20:57 - 2015-12-16 13:43 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL 2016-01-24 20:57 - 2015-12-16 13:43 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL 2016-01-24 20:57 - 2015-12-16 09:38 - 00419928 _____ C:\Windows\system32\locale.nls 2016-01-24 19:12 - 2016-01-24 19:12 - 00000000 ____D C:\Users\mike\AppData\Roaming\Adobe 2016-01-24 19:07 - 2016-01-24 19:12 - 00000000 ___SD C:\Windows\system32\GWX 2016-01-24 16:43 - 2012-07-25 22:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2016-01-24 16:43 - 2012-07-25 22:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2016-01-24 16:43 - 2012-07-25 22:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2016-01-24 16:43 - 2012-07-25 22:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2016-01-24 16:43 - 2012-07-25 22:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2016-01-24 16:43 - 2012-07-25 21:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2016-01-24 16:43 - 2012-07-25 21:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2016-01-24 16:43 - 2012-06-02 09:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2016-01-24 16:41 - 2014-06-30 17:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2016-01-24 16:41 - 2014-06-06 01:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2016-01-24 16:41 - 2014-03-09 16:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2016-01-24 16:41 - 2014-03-09 16:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2016-01-24 16:40 - 2012-03-01 00:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2016-01-24 16:40 - 2012-03-01 00:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 19607040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 12829696 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-01-24 16:06 - 2016-01-24 16:06 - 02278912 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-01-24 16:06 - 2016-01-24 16:06 - 01950720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 01309696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-01-24 16:06 - 2016-01-24 16:06 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-01-24 16:06 - 2016-01-24 16:06 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2016-01-24 16:06 - 2016-01-24 16:06 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00342728 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-01-24 16:06 - 2016-01-24 16:06 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2016-01-24 16:06 - 2016-01-24 16:06 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2016-01-24 16:06 - 2016-01-24 16:06 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-01-24 16:06 - 2016-01-24 16:06 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-01-24 16:06 - 2016-01-24 16:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2016-01-24 16:06 - 2016-01-24 16:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2016-01-24 16:06 - 2016-01-24 16:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2016-01-24 16:06 - 2016-01-24 16:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2016-01-24 16:06 - 2016-01-24 16:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2016-01-24 16:06 - 2016-01-24 16:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2016-01-24 16:06 - 2016-01-24 16:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-01-24 16:05 - 2016-01-24 16:05 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2016-01-24 16:05 - 2016-01-24 16:05 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2016-01-24 16:03 - 2016-01-24 16:03 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2016-01-24 16:03 - 2016-01-24 16:03 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2016-01-24 16:02 - 2016-01-24 16:02 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2016-01-24 15:52 - 2015-11-20 13:34 - 02956800 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2016-01-24 15:52 - 2015-11-20 13:34 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2016-01-24 15:52 - 2015-11-20 13:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2016-01-24 15:52 - 2015-11-20 13:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2016-01-24 15:52 - 2015-11-20 13:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2016-01-24 15:52 - 2015-11-20 13:34 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2016-01-24 15:52 - 2015-11-20 13:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2016-01-24 15:52 - 2015-11-20 13:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2016-01-24 15:52 - 2015-11-20 13:33 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2016-01-24 15:52 - 2015-11-20 13:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2016-01-24 15:52 - 2015-11-20 13:33 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2016-01-24 15:52 - 2015-10-29 12:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2016-01-24 15:52 - 2015-10-29 12:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2016-01-24 15:52 - 2015-10-29 12:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2016-01-24 15:52 - 2015-10-29 12:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2016-01-24 15:52 - 2015-01-08 21:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2016-01-24 15:52 - 2015-01-08 21:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2016-01-24 15:52 - 2015-01-08 21:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2016-01-24 15:52 - 2013-10-29 21:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2016-01-24 15:52 - 2012-10-03 11:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2016-01-24 15:52 - 2012-10-03 11:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2016-01-24 15:52 - 2012-10-03 11:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2016-01-24 15:52 - 2012-10-03 10:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2016-01-24 15:52 - 2011-10-15 00:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2016-01-24 15:51 - 2015-07-22 12:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2016-01-24 15:51 - 2015-07-22 12:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2016-01-24 15:51 - 2015-07-22 11:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2016-01-24 15:51 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2016-01-24 15:51 - 2015-07-15 12:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2016-01-24 15:51 - 2015-07-15 12:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2016-01-24 15:51 - 2015-07-15 12:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll 2016-01-24 15:51 - 2015-05-25 13:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2016-01-24 15:51 - 2015-05-25 13:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2016-01-24 15:51 - 2015-05-25 13:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2016-01-24 15:51 - 2015-05-25 13:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2016-01-24 15:51 - 2015-05-25 13:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2016-01-24 15:51 - 2015-05-25 13:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2016-01-24 15:51 - 2014-03-04 04:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2016-01-24 15:51 - 2014-03-04 04:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2016-01-24 15:51 - 2014-03-04 04:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2016-01-24 15:51 - 2014-03-04 04:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2016-01-24 15:51 - 2014-03-04 04:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2016-01-24 15:51 - 2014-03-04 04:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2016-01-24 15:51 - 2014-03-04 04:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2016-01-24 15:50 - 2015-12-30 13:47 - 03993536 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2016-01-24 15:50 - 2015-12-30 13:47 - 03938240 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-01-24 15:50 - 2015-12-30 13:47 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-01-24 15:50 - 2015-12-30 13:47 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-01-24 15:50 - 2015-12-30 13:44 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-01-24 15:50 - 2015-12-30 13:41 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-01-24 15:50 - 2015-12-30 13:41 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-01-24 15:50 - 2015-12-30 13:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-01-24 15:50 - 2015-12-30 13:41 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-01-24 15:50 - 2015-12-30 13:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-01-24 15:50 - 2015-12-30 13:40 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-01-24 15:50 - 2015-12-30 13:40 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-01-24 15:50 - 2015-12-30 13:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-01-24 15:50 - 2015-12-30 13:39 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-01-24 15:50 - 2015-12-30 13:39 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-01-24 15:50 - 2015-12-30 13:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-01-24 15:50 - 2015-12-30 13:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-01-24 15:50 - 2015-12-30 13:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-01-24 15:50 - 2015-12-30 13:38 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-01-24 15:50 - 2015-12-30 13:38 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-01-24 15:50 - 2015-12-30 13:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-01-24 15:50 - 2015-12-30 13:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-01-24 15:50 - 2015-12-30 13:37 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-01-24 15:50 - 2015-12-30 12:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-01-24 15:50 - 2015-12-30 12:38 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-01-24 15:50 - 2015-12-30 12:32 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-01-24 15:50 - 2015-12-30 12:32 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-01-24 15:50 - 2015-12-30 12:32 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-01-24 15:50 - 2015-12-30 12:30 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-01-24 15:50 - 2015-12-30 12:30 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-01-24 15:50 - 2015-12-30 12:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-01-24 15:50 - 2015-12-30 12:30 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-01-24 15:50 - 2015-11-05 14:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-01-24 15:50 - 2015-10-13 11:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2016-01-24 15:50 - 2015-10-13 11:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2016-01-24 15:50 - 2015-10-12 23:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2016-01-24 15:50 - 2015-09-23 08:09 - 00371920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2016-01-24 15:50 - 2015-09-23 08:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2016-01-24 15:50 - 2015-09-01 21:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2016-01-24 15:50 - 2015-09-01 21:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2016-01-24 15:50 - 2015-09-01 21:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2016-01-24 15:50 - 2015-09-01 21:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2016-01-24 15:50 - 2015-09-01 20:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2016-01-24 15:50 - 2015-07-09 12:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe 2016-01-24 15:50 - 2015-07-09 12:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe 2016-01-24 15:50 - 2015-07-04 12:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2016-01-24 15:50 - 2015-01-28 22:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2016-01-24 15:50 - 2014-09-04 00:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2016-01-24 15:50 - 2013-10-03 20:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2016-01-24 15:50 - 2013-10-03 20:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2016-01-24 15:50 - 2013-07-02 22:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2016-01-24 15:50 - 2013-07-02 22:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2016-01-24 15:50 - 2013-05-12 22:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2016-01-24 15:50 - 2013-05-12 22:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2016-01-24 15:50 - 2013-05-09 22:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2016-01-24 15:50 - 2013-01-23 23:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2016-01-24 15:50 - 2012-08-21 15:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2016-01-24 15:50 - 2011-08-26 23:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2016-01-24 15:50 - 2011-05-24 05:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2016-01-24 15:49 - 2015-12-08 16:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-01-24 15:49 - 2015-11-11 13:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2016-01-24 15:49 - 2015-11-11 13:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll 2016-01-24 15:49 - 2015-11-03 13:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll 2016-01-24 15:49 - 2015-08-27 12:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2016-01-24 15:49 - 2015-08-27 12:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2016-01-24 15:49 - 2015-08-27 12:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2016-01-24 15:49 - 2015-08-27 12:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2016-01-24 15:49 - 2015-08-05 12:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2016-01-24 15:49 - 2015-07-01 15:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2016-01-24 15:49 - 2015-07-01 15:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2016-01-24 15:49 - 2015-06-15 16:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2016-01-24 15:49 - 2015-06-15 16:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2016-01-24 15:49 - 2015-06-15 16:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2016-01-24 15:49 - 2015-06-15 16:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2016-01-24 15:49 - 2015-04-17 21:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-01-24 15:49 - 2014-11-10 21:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2016-01-24 15:49 - 2014-08-11 20:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2016-01-24 15:49 - 2014-06-15 20:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-01-24 15:49 - 2014-06-15 20:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-01-24 15:49 - 2014-06-15 20:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2016-01-24 15:49 - 2014-02-03 21:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2016-01-24 15:49 - 2014-02-03 21:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2016-01-24 15:49 - 2014-02-03 21:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2016-01-24 15:49 - 2014-02-03 21:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2016-01-24 15:49 - 2014-01-27 21:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2016-01-24 15:49 - 2013-10-18 20:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2016-01-24 15:49 - 2013-10-11 21:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2016-01-24 15:49 - 2013-10-11 21:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2016-01-24 15:49 - 2013-10-11 20:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2016-01-24 15:49 - 2013-10-11 20:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2016-01-24 15:49 - 2013-08-27 19:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2016-01-24 15:49 - 2013-03-18 22:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2016-01-24 15:49 - 2013-02-11 22:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2016-01-24 15:49 - 2012-11-02 00:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2016-01-24 15:49 - 2012-07-04 14:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2016-01-24 15:49 - 2011-12-30 00:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2016-01-24 15:49 - 2011-08-16 23:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2016-01-24 15:49 - 2011-08-16 23:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2016-01-24 15:49 - 2011-06-15 23:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2016-01-24 15:49 - 2011-04-28 21:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2016-01-24 15:49 - 2011-04-28 21:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2016-01-24 15:49 - 2011-04-28 21:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2016-01-24 15:49 - 2011-03-03 00:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2016-01-24 15:49 - 2011-03-03 00:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2016-01-24 15:49 - 2011-03-03 00:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2016-01-24 15:49 - 2011-02-18 00:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2016-01-24 15:49 - 2010-12-23 00:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2016-01-24 15:49 - 2010-12-23 00:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2016-01-24 15:49 - 2010-12-23 00:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2016-01-24 15:48 - 2015-08-06 12:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2016-01-24 15:48 - 2015-08-06 12:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2016-01-24 15:48 - 2015-07-09 12:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2016-01-24 15:48 - 2015-07-09 12:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2016-01-24 15:48 - 2015-04-27 14:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2016-01-24 15:48 - 2015-04-27 14:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2016-01-24 15:48 - 2015-04-27 14:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2016-01-24 15:48 - 2015-04-27 14:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2016-01-24 15:48 - 2015-04-10 22:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys 2016-01-24 15:48 - 2015-03-03 23:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2016-01-24 15:48 - 2015-03-03 23:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2016-01-24 15:48 - 2015-01-16 21:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2016-01-24 15:48 - 2014-06-17 20:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2016-01-24 15:48 - 2014-01-23 21:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2016-01-24 15:48 - 2013-04-25 23:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2016-01-24 15:48 - 2012-07-04 16:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2016-01-24 15:48 - 2012-07-04 16:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2016-01-24 15:48 - 2012-07-04 16:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2016-01-24 15:48 - 2012-06-06 00:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2016-01-24 15:48 - 2011-05-03 23:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2016-01-24 15:48 - 2011-05-03 23:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2016-01-24 15:48 - 2011-05-03 23:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2016-01-24 15:48 - 2011-05-03 23:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2016-01-24 15:48 - 2011-05-03 23:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2016-01-24 15:48 - 2011-05-03 23:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2016-01-24 15:48 - 2011-05-03 23:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2016-01-24 15:48 - 2011-05-03 23:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2016-01-24 15:48 - 2011-05-03 23:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2016-01-24 15:48 - 2011-05-02 23:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2016-01-24 15:48 - 2011-02-12 00:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2016-01-24 15:36 - 2015-11-03 13:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2016-01-24 15:36 - 2015-04-12 22:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2016-01-24 15:36 - 2014-08-01 06:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2016-01-24 15:36 - 2014-06-18 17:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2016-01-24 15:36 - 2014-06-18 17:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2016-01-24 15:36 - 2014-06-18 17:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2016-01-24 15:36 - 2014-04-04 21:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2016-01-24 15:36 - 2014-04-04 21:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2016-01-24 15:36 - 2013-11-26 06:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2016-01-24 15:36 - 2012-12-07 07:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2016-01-24 15:36 - 2012-12-07 07:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2016-01-24 15:36 - 2012-12-07 05:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2016-01-24 15:36 - 2012-12-07 05:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2016-01-24 15:35 - 2015-12-08 16:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2016-01-24 15:35 - 2015-12-08 16:53 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-01-24 15:35 - 2015-10-01 12:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-01-24 15:35 - 2015-10-01 12:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-01-24 15:35 - 2015-10-01 12:50 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-01-24 15:35 - 2015-10-01 12:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-01-24 15:35 - 2015-10-01 12:50 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-01-24 15:35 - 2015-10-01 11:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-01-24 15:35 - 2015-02-02 22:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll 2016-01-24 15:35 - 2015-02-02 22:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll 2016-01-24 15:35 - 2015-02-02 22:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2016-01-24 15:35 - 2015-02-02 22:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe 2016-01-24 15:35 - 2015-02-02 22:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe 2016-01-24 15:35 - 2015-02-02 22:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll 2016-01-24 15:35 - 2015-02-02 22:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys 2016-01-24 15:35 - 2014-12-18 21:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2016-01-24 15:35 - 2014-11-25 22:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2016-01-24 15:35 - 2014-10-31 17:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2016-01-24 15:35 - 2014-10-24 20:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2016-01-24 15:35 - 2014-06-27 19:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2016-01-24 15:35 - 2014-06-27 19:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2016-01-24 15:34 - 2015-12-08 16:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2016-01-24 15:34 - 2015-12-08 16:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL 2016-01-24 15:34 - 2015-12-08 16:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL 2016-01-24 15:34 - 2015-12-08 16:54 - 01202688 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll 2016-01-24 15:34 - 2015-12-08 16:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2016-01-24 15:34 - 2015-12-08 16:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL 2016-01-24 15:34 - 2015-12-08 16:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2016-01-24 15:34 - 2015-12-08 16:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2016-01-24 15:34 - 2015-12-08 16:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL 2016-01-24 15:34 - 2015-12-08 16:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2016-01-24 15:34 - 2015-12-08 16:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL 2016-01-24 15:34 - 2015-12-08 16:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL 2016-01-24 15:34 - 2015-12-08 16:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2016-01-24 15:34 - 2015-12-08 16:53 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL 2016-01-24 15:34 - 2015-12-08 16:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL 2016-01-24 15:34 - 2015-12-08 16:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL 2016-01-24 15:34 - 2015-12-08 16:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL 2016-01-24 15:34 - 2015-12-08 16:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL 2016-01-24 15:34 - 2015-12-08 16:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2016-01-24 15:34 - 2015-12-08 16:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL 2016-01-24 15:34 - 2015-12-08 16:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL 2016-01-24 15:34 - 2015-12-08 16:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll 2016-01-24 15:34 - 2015-12-08 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2016-01-24 15:34 - 2015-12-08 16:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2016-01-24 15:34 - 2015-12-08 16:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll 2016-01-24 15:34 - 2015-12-08 16:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2016-01-24 15:34 - 2015-12-08 16:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2016-01-24 15:34 - 2015-12-08 16:11 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2016-01-24 15:34 - 2015-12-08 16:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys 2016-01-24 15:34 - 2015-12-08 16:00 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-01-24 15:34 - 2015-11-05 14:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll 2016-01-24 15:34 - 2015-11-05 04:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2016-01-24 15:34 - 2015-10-01 12:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-01-24 15:34 - 2015-10-01 12:50 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-01-24 15:34 - 2015-07-14 21:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll 2016-01-24 15:34 - 2015-02-18 02:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2016-01-24 15:34 - 2015-02-02 22:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2016-01-24 15:34 - 2014-10-29 20:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2016-01-24 15:34 - 2014-10-13 20:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2016-01-24 15:34 - 2014-07-16 20:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2016-01-24 15:34 - 2014-07-16 20:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2016-01-24 15:34 - 2014-07-16 20:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2016-01-24 15:34 - 2014-07-16 20:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2016-01-24 15:34 - 2013-10-11 21:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2016-01-24 15:34 - 2013-10-11 21:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2016-01-24 15:34 - 2013-10-11 21:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2016-01-24 15:34 - 2013-08-04 20:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2016-01-24 15:34 - 2013-07-25 20:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2016-01-24 15:34 - 2012-09-25 17:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2016-01-24 15:34 - 2012-04-25 23:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2016-01-24 15:34 - 2012-04-25 23:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2016-01-24 15:34 - 2012-03-17 02:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2016-01-24 15:34 - 2011-12-16 02:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2016-01-24 15:34 - 2011-11-17 00:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2016-01-24 15:34 - 2011-06-15 03:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll 2016-01-24 15:34 - 2011-06-15 03:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2016-01-24 15:34 - 2011-06-15 03:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2016-01-24 15:34 - 2011-06-15 03:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2016-01-24 15:34 - 2011-06-15 03:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2016-01-24 15:33 - 2015-11-13 17:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2016-01-24 15:33 - 2015-11-13 17:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2016-01-24 15:33 - 2015-11-13 17:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe 2016-01-24 15:33 - 2015-06-25 04:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2016-01-24 15:33 - 2015-06-25 04:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2016-01-24 15:33 - 2015-06-25 04:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2016-01-24 15:33 - 2015-06-01 18:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2016-01-24 15:33 - 2015-05-08 22:14 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-01-24 15:33 - 2015-05-08 22:13 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-01-24 15:33 - 2015-05-08 22:13 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-01-24 15:33 - 2015-05-08 22:12 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-01-24 15:33 - 2015-05-08 22:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 20:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 20:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-01-24 15:33 - 2015-05-08 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-01-24 15:33 - 2015-04-29 13:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2016-01-24 15:33 - 2015-04-29 13:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2016-01-24 15:33 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2016-01-24 15:33 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2016-01-24 15:33 - 2015-04-29 13:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2016-01-24 15:33 - 2015-04-24 12:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2016-01-24 15:33 - 2015-02-24 22:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2016-01-24 15:33 - 2014-12-18 20:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2016-01-24 15:33 - 2014-12-07 21:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2016-01-24 15:33 - 2014-12-05 22:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2016-01-24 15:33 - 2014-01-28 21:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2016-01-24 15:33 - 2013-12-03 21:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2016-01-24 15:33 - 2013-12-03 21:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2016-01-24 15:33 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2016-01-24 15:33 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2016-01-24 15:33 - 2013-12-03 21:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2016-01-24 15:33 - 2013-12-03 20:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2016-01-24 15:33 - 2013-12-03 20:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2016-01-24 15:33 - 2013-12-03 20:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2016-01-24 15:33 - 2013-12-03 20:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2016-01-24 15:33 - 2013-11-26 20:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2016-01-24 15:33 - 2013-11-26 20:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2016-01-24 15:33 - 2013-11-26 20:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2016-01-24 15:33 - 2013-11-26 20:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2016-01-24 15:33 - 2013-11-26 20:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2016-01-24 15:33 - 2013-11-26 20:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2016-01-24 15:33 - 2013-11-26 20:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2016-01-24 15:33 - 2013-07-12 05:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2016-01-24 15:33 - 2013-06-25 17:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2016-01-24 15:33 - 2012-11-28 17:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2016-01-24 15:33 - 2012-11-28 17:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2016-01-24 15:33 - 2012-11-28 17:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2016-01-24 15:33 - 2012-10-09 12:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2016-01-24 15:33 - 2012-10-09 12:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2016-01-24 15:33 - 2012-10-03 11:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2016-01-24 15:33 - 2012-10-03 11:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2016-01-24 15:33 - 2012-05-13 23:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2016-01-24 15:33 - 2012-01-04 03:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2016-01-24 15:33 - 2011-03-11 00:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2016-01-24 15:33 - 2011-03-11 00:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2016-01-24 15:33 - 2011-02-22 23:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2016-01-24 15:30 - 2014-10-02 20:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2016-01-24 15:30 - 2014-10-02 20:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2016-01-24 15:30 - 2014-10-02 20:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2016-01-24 15:30 - 2014-10-02 20:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2016-01-24 15:30 - 2014-10-02 20:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2016-01-24 15:25 - 2012-02-17 00:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2016-01-24 15:25 - 2012-02-16 23:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2016-01-24 14:55 - 2016-01-24 14:55 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-01-24 14:54 - 2016-01-24 14:54 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2016-01-24 14:50 - 2016-01-24 14:50 - 00008192 __RSH C:\BOOTSECT.BAK 2016-01-24 14:50 - 2016-01-24 12:02 - 00000000 ____D C:\Windows\Panther 2016-01-24 14:50 - 2014-06-27 19:21 - 00391640 __RSH C:\bootmgr 2016-01-24 12:48 - 2016-01-24 12:48 - 00000000 ____D C:\Windows\system32\SPReview 2016-01-24 12:48 - 2016-01-24 12:48 - 00000000 ____D C:\Windows\system32\EventProviders 2016-01-24 12:36 - 2010-11-20 07:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe 2016-01-24 12:36 - 2010-11-20 07:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll 2016-01-24 12:36 - 2010-11-20 07:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00160128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00130432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00116096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00085376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys 2016-01-24 12:36 - 2010-11-20 07:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys 2016-01-24 12:36 - 2010-11-20 07:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll 2016-01-24 12:36 - 2010-11-20 07:29 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2016-01-24 12:36 - 2010-11-20 07:29 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2016-01-24 12:36 - 2010-11-20 07:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2016-01-24 12:36 - 2010-11-20 07:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll 2016-01-24 12:36 - 2010-11-20 07:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2016-01-24 12:36 - 2010-11-20 07:29 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2016-01-24 12:36 - 2010-11-20 07:29 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2016-01-24 12:36 - 2010-11-20 07:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys 2016-01-24 12:36 - 2010-11-20 07:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2016-01-24 12:36 - 2010-11-20 07:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll 2016-01-24 12:36 - 2010-11-20 07:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL 2016-01-24 12:36 - 2010-11-20 07:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL 2016-01-24 12:36 - 2010-11-20 07:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL 2016-01-24 12:36 - 2010-11-20 07:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL 2016-01-24 12:36 - 2010-11-20 07:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll 2016-01-24 12:36 - 2010-11-20 07:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 01698816 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2016-01-24 12:36 - 2010-11-20 07:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL 2016-01-24 12:36 - 2010-11-20 07:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL 2016-01-24 12:36 - 2010-11-20 07:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll 2016-01-24 12:36 - 2010-11-20 07:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2016-01-24 12:36 - 2010-11-20 07:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll 2016-01-24 12:36 - 2010-11-20 07:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll 2016-01-24 12:36 - 2010-11-20 07:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe 2016-01-24 12:36 - 2010-11-20 07:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe 2016-01-24 12:36 - 2010-11-20 07:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl 2016-01-24 12:36 - 2010-11-20 07:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe 2016-01-24 12:36 - 2010-11-20 07:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2016-01-24 12:36 - 2010-11-20 07:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2016-01-24 12:36 - 2010-11-20 07:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2016-01-24 12:36 - 2010-11-20 07:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl 2016-01-24 12:36 - 2010-11-20 07:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr 2016-01-24 12:36 - 2010-11-20 07:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl 2016-01-24 12:36 - 2010-11-20 07:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2016-01-24 12:36 - 2010-11-20 07:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2016-01-24 12:36 - 2010-11-20 07:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe 2016-01-24 12:36 - 2010-11-20 06:54 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2016-01-24 12:36 - 2010-11-20 05:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll 2016-01-24 12:36 - 2010-11-20 05:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys 2016-01-24 12:36 - 2010-11-20 05:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2016-01-24 12:36 - 2010-11-20 04:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2016-01-24 12:36 - 2010-11-20 03:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2016-01-24 12:36 - 2010-11-20 03:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2016-01-24 12:36 - 2010-11-20 03:39 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2016-01-24 12:36 - 2010-11-04 21:20 - 00146852 _____ C:\Windows\system32\systemsf.ebd 2016-01-24 12:36 - 2010-11-04 20:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2016-01-24 12:36 - 2010-11-04 20:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2016-01-24 12:36 - 2010-11-04 20:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2016-01-24 12:36 - 2010-11-04 20:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2016-01-24 12:35 - 2010-11-20 07:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL 2016-01-24 12:35 - 2010-11-20 07:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL 2016-01-24 12:35 - 2010-11-20 07:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL 2016-01-24 12:35 - 2010-11-20 07:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll 2016-01-24 12:35 - 2010-11-20 07:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL 2016-01-24 12:35 - 2010-11-20 07:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL 2016-01-24 12:35 - 2010-11-20 07:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll 2016-01-24 12:35 - 2010-11-20 07:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL 2016-01-24 12:35 - 2010-11-20 07:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00093696 _____ (Windows ® Codename Longhorn DDK provider) C:\Windows\system32\fms.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll 2016-01-24 12:35 - 2010-11-20 07:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll 2016-01-24 12:35 - 2010-11-20 07:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL 2016-01-24 12:35 - 2010-11-20 07:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll 2016-01-24 12:35 - 2010-11-20 07:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgrade.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe 2016-01-24 12:35 - 2010-11-20 07:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe 2016-01-24 12:35 - 2010-11-20 07:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr 2016-01-24 12:35 - 2010-11-20 07:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl 2016-01-24 12:35 - 2010-11-20 07:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl 2016-01-24 12:35 - 2010-11-20 07:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl 2016-01-24 12:35 - 2010-11-20 07:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2016-01-24 12:35 - 2010-11-20 07:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl 2016-01-24 12:35 - 2010-11-20 07:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2016-01-24 12:35 - 2010-11-20 07:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr 2016-01-24 12:35 - 2010-11-20 07:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp 2016-01-24 12:35 - 2010-11-20 07:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr 2016-01-24 12:35 - 2010-11-20 07:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr 2016-01-24 12:35 - 2010-11-20 07:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe 2016-01-24 12:35 - 2010-11-20 07:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv 2016-01-24 12:35 - 2010-11-20 07:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax 2016-01-24 12:35 - 2010-11-20 07:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe 2016-01-24 12:35 - 2010-11-20 07:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2016-01-24 12:35 - 2010-11-20 07:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl 2016-01-24 12:35 - 2010-11-20 07:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax 2016-01-24 12:35 - 2010-11-20 07:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax 2016-01-24 12:35 - 2010-11-20 07:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2016-01-24 12:35 - 2010-11-20 07:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax 2016-01-24 12:35 - 2010-11-20 07:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe 2016-01-24 12:35 - 2010-11-20 07:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2016-01-24 12:35 - 2010-11-20 07:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax 2016-01-24 12:35 - 2010-11-20 07:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax 2016-01-24 12:35 - 2010-11-20 07:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax 2016-01-24 12:35 - 2010-11-20 07:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2016-01-24 12:35 - 2010-11-20 07:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll 2016-01-24 12:35 - 2010-11-20 07:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll 2016-01-24 12:35 - 2010-11-20 07:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll 2016-01-24 12:35 - 2010-11-20 07:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME 2016-01-24 12:35 - 2010-11-20 07:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime 2016-01-24 12:35 - 2010-11-20 07:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll 2016-01-24 12:35 - 2010-11-20 07:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2016-01-24 12:35 - 2010-11-20 07:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL 2016-01-24 12:35 - 2010-11-20 06:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll 2016-01-24 12:35 - 2010-11-20 06:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll 2016-01-24 12:35 - 2010-11-20 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys 2016-01-24 12:35 - 2010-11-20 05:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys 2016-01-24 12:35 - 2010-11-20 05:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll 2016-01-24 12:35 - 2010-11-20 05:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys 2016-01-24 12:35 - 2010-11-20 05:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys 2016-01-24 12:35 - 2010-11-20 05:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys 2016-01-24 12:35 - 2010-11-20 05:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys 2016-01-24 12:35 - 2010-11-20 05:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys 2016-01-24 12:35 - 2010-11-20 05:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys 2016-01-24 12:35 - 2010-11-20 05:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys 2016-01-24 12:35 - 2010-11-20 05:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys 2016-01-24 12:35 - 2010-11-20 05:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys 2016-01-24 12:35 - 2010-11-20 05:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys 2016-01-24 12:35 - 2010-11-20 04:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2016-01-24 12:35 - 2010-11-20 04:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys 2016-01-24 12:35 - 2010-11-20 04:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys 2016-01-24 12:35 - 2010-11-20 04:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys 2016-01-24 12:35 - 2010-11-20 04:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys 2016-01-24 12:35 - 2010-11-20 04:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys 2016-01-24 12:35 - 2010-11-20 04:19 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2016-01-24 12:35 - 2010-11-20 03:47 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys 2016-01-24 12:35 - 2010-11-20 03:42 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2016-01-24 12:35 - 2010-11-20 03:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys 2016-01-24 12:35 - 2010-11-20 03:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys 2016-01-24 12:35 - 2010-11-20 00:23 - 00053600 _____ C:\Windows\system32\dosx.exe 2016-01-24 12:35 - 2010-11-09 20:45 - 00010429 _____ C:\Windows\system32\ScavengeSpace.xml 2016-01-24 12:35 - 2010-11-04 21:20 - 00105559 _____ C:\Windows\system32\RacRules.xml 2016-01-24 12:35 - 2010-11-04 21:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll 2016-01-24 12:17 - 2016-01-24 12:17 - 00000000 ____D C:\Program Files\Intel 2016-01-24 12:17 - 2016-01-24 12:17 - 00000000 ____D C:\Intel 2016-01-24 12:12 - 2015-12-02 13:25 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2016-01-24 12:10 - 2016-01-24 12:12 - 00000000 ____D C:\Windows\system32\MRT 2016-01-24 12:10 - 2016-01-24 12:10 - 141317472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-01-24 12:07 - 2016-01-25 14:12 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-01-24 12:07 - 2016-01-25 12:20 - 00000878 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-01-24 12:07 - 2016-01-24 13:07 - 00002158 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-01-24 12:07 - 2016-01-24 13:07 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-01-24 12:07 - 2016-01-24 12:08 - 00000000 ____D C:\Users\mike\AppData\Local\Google 2016-01-24 12:07 - 2016-01-24 12:07 - 00927824 _____ (Google Inc.) C:\Users\mike\Downloads\ChromeSetup.exe 2016-01-24 12:07 - 2016-01-24 12:07 - 00000000 ____D C:\Program Files\Google 2016-01-24 12:06 - 2016-01-25 05:52 - 00000000 ____D C:\Users\mike\AppData\Local\Mozilla 2016-01-24 12:06 - 2016-01-24 12:06 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-01-24 12:06 - 2016-01-24 12:06 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-01-24 12:06 - 2016-01-24 12:06 - 00000000 ____D C:\Users\mike\AppData\Roaming\Mozilla 2016-01-24 12:06 - 2016-01-24 12:06 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2016-01-24 12:06 - 2016-01-24 12:06 - 00000000 ____D C:\Program Files\Mozilla Firefox 2016-01-24 12:05 - 2016-01-25 06:20 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI 2016-01-24 12:02 - 2016-01-24 12:02 - 00001413 _____ C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-01-24 12:02 - 2016-01-24 12:02 - 00000020 ___SH C:\Users\mike\ntuser.ini 2016-01-24 12:02 - 2016-01-24 12:02 - 00000000 _SHDL C:\Users\mike\My Documents 2016-01-24 12:02 - 2016-01-24 12:02 - 00000000 _SHDL C:\Users\mike\Documents\My Videos 2016-01-24 12:02 - 2016-01-24 12:02 - 00000000 _SHDL C:\Users\mike\Documents\My Pictures 2016-01-24 12:02 - 2016-01-24 12:02 - 00000000 _SHDL C:\Users\mike\Documents\My Music 2016-01-24 12:02 - 2016-01-24 12:02 - 00000000 ____D C:\Users\mike\AppData\Local\VirtualStore 2016-01-24 12:02 - 2016-01-24 12:02 - 00000000 ____D C:\Users\mike 2016-01-24 12:02 - 2009-07-14 02:48 - 00000000 ____D C:\Users\mike\AppData\Roaming\Media Center Programs ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-01-25 14:46 - 2009-07-13 21:37 - 00000000 ____D C:\Windows 2016-01-25 13:18 - 2009-07-13 23:34 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-01-25 13:18 - 2009-07-13 23:34 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-01-25 06:20 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\inf 2016-01-25 06:12 - 2009-07-14 02:48 - 00000000 ____D C:\Windows\ShellNew 2016-01-25 06:12 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\MSBuild 2016-01-25 06:12 - 2009-07-13 21:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-01-25 06:09 - 2009-07-13 21:37 - 00000000 ____D C:\Program Files\Common Files\System 2016-01-25 06:09 - 2009-07-13 21:04 - 00000478 _____ C:\Windows\win.ini 2016-01-25 03:54 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\rescache 2016-01-25 03:17 - 2009-07-13 23:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-01-25 03:16 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\PolicyDefinitions 2016-01-24 19:46 - 2009-07-13 23:33 - 00267016 _____ C:\Windows\system32\FNTCACHE.DAT 2016-01-24 19:44 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\tracing 2016-01-24 19:44 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2016-01-24 19:43 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\Dism 2016-01-24 19:07 - 2009-07-14 02:49 - 00000000 ____D C:\Program Files\Windows Journal 2016-01-24 19:07 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Defender 2016-01-24 14:55 - 2009-07-13 23:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-01-24 14:50 - 2009-07-13 23:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2016-01-24 13:03 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Sidebar 2016-01-24 13:03 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Portable Devices 2016-01-24 13:03 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2016-01-24 13:03 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\DVD Maker 2016-01-24 13:03 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\sysprep 2016-01-24 13:03 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\Setup 2016-01-24 13:03 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\oobe 2016-01-24 13:03 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\manifeststore 2016-01-24 13:03 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\servicing 2016-01-24 13:02 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\migwiz 2016-01-24 12:51 - 2009-07-13 21:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll Some files in TEMP: ==================== C:\Users\mike\AppData\Local\Temp\ose00000.exe ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-01-24 17:38 ==================== End of FRST.txt ============================ Quote
mikehende Posted January 25, 2016 Author Posted January 25, 2016 Additional scan result of Farbar Recovery Scan Tool (x86) Version:25-01-2016 Ran by mike (2016-01-25 14:48:49) Running from C:\Users\mike\Desktop Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2016-01-24 17:02:05) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-662645051-3460318641-168889603-500 - Administrator - Disabled) Guest (S-1-5-21-662645051-3460318641-168889603-501 - Limited - Disabled) mike (S-1-5-21-662645051-3460318641-168889603-1000 - Administrator - Enabled) => C:\Users\mike ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: ThreatTrack Security VIPRE (Enabled - Up to date) {BC4CE0B2-D6B5-59A2-9E54-9AA2C7DBE398} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: ThreatTrack Security VIPRE (Enabled - Up to date) {072D0156-F08F-562C-A4E4-A1D0BC5CA925} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Classic Menu for Office Enterprise 2010 (HKLM\...\{DF4ED63C-D32A-4F0C-AC6A-224C83184D8B}) (Version: 2.25 - Detong Technology Ltd.) FileZilla Client 3.14.1 (HKLM\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse) Google Chrome (HKLM\...\Google Chrome) (Version: 48.0.2564.82 - Google Inc.) Google Update Helper (Version: 1.3.29.1 - Google Inc.) Hidden Greenshot 1.2.8.12 (HKLM\...\Greenshot_is1) (Version: 1.2.8.12 - Greenshot) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation) mini-KMS Auto Activation Tool 1.13 (HKLM\...\mini-KMS Auto Activation Tool 1.13) (Version: - ) Mozilla Firefox 43.0.4 (x86 en-US) (HKLM\...\Mozilla Firefox 43.0.4 (x86 en-US)) (Version: 43.0.4 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 43.0.4 - Mozilla) Office Tab (HKLM\...\{FB75BC84-DC75-485D-9F00-1D342085FD03}) (Version: 6.00 - Detong Technology Ltd.) VIPRE Antivirus (HKLM\...\{C1D1FC57-3EB9-4B21-BCA3-F1C927508200}) (Version: 9.0.1.4 - ThreatTrack Security Inc.) VIPRE Antivirus (Version: 9.0.1.4 - ThreatTrack Security, Inc.) Hidden ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1FC0E844-5029-49CB-8D49-DED22825EF35} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {6AEF0C98-2CB4-4B67-8C70-4C977C7355CC} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc Task: {85634833-FC8A-4C2A-80A7-76A1D7A2CE0B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-01-24] (Google Inc.) Task: {9D4681DD-0DD3-4A19-9AB6-7E17DA22C0FD} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {D622195C-D680-4FEA-9C56-59660C7C9E94} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {F350D2CC-E92E-42A5-826C-1E6CA4F2C64B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-01-24] (Google Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2010-03-24 21:17 - 2010-03-24 21:17 - 08794464 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2010-01-30 02:41 - 2010-01-30 02:41 - 04254560 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2016-01-25 07:17 - 2015-06-26 02:13 - 00184184 _____ () C:\Program Files\VIPRE\Definitions\libBase64.dll 2016-01-25 07:17 - 2015-06-26 02:13 - 00175992 _____ () C:\Program Files\VIPRE\Definitions\libMachoUniv.dll 2015-09-29 13:08 - 2015-09-29 13:08 - 00160768 _____ () C:\Program Files\VIPRE\unrar.dll 2010-01-30 02:41 - 2010-01-30 02:41 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf 2010-09-09 13:03 - 2010-09-09 13:03 - 00053248 _____ () C:\Program Files\Classic Menu for Office 2010\armaccess.dll 2010-08-25 19:16 - 2010-08-25 19:16 - 01425816 _____ () C:\Windows\system32\OfficeTabFunction.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:58A5270D AlternateDataStreams: C:\ProgramData\TEMP:A5C00DEE ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBPIMSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBAMSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBPIMSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WebExaminer => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WebProxy => ""="service" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 21:04 - 2009-06-10 16:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-662645051-3460318641-168889603-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\mike\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{197992ED-CF94-43F7-B6AE-0561601D8063}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{DE83A442-7708-4019-87E9-03DC9F7160D4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{AA4A3667-109E-40BF-A34E-4E84FFBDBBF1}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe FirewallRules: [{AAEAF834-7FB1-4C41-A771-954B2CE104FA}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [TCP Query User{563FB7E8-2972-4D08-A9DE-974CBE4D395D}C:\windows\actofvl\kmservice.exe] => (Allow) C:\windows\actofvl\kmservice.exe FirewallRules: [uDP Query User{C83983A7-8782-4CE8-B5D3-972774E053FB}C:\windows\actofvl\kmservice.exe] => (Allow) C:\windows\actofvl\kmservice.exe ==================== Restore Points ========================= 24-01-2016 12:02:20 Windows Update 24-01-2016 12:09:55 Windows Update 24-01-2016 12:15:52 Windows Update 24-01-2016 12:19:45 Windows Update 24-01-2016 12:37:47 Windows Update 24-01-2016 13:08:06 Windows Update 24-01-2016 15:54:33 Windows Update 24-01-2016 19:16:41 Windows Update 24-01-2016 20:58:53 Windows Update 25-01-2016 03:00:10 Windows Update 25-01-2016 06:08:23 Installed Microsoft Office Professional Plus 2010 ==================== Faulty Device Manager Devices ============= Name: PS/2 Compatible Mouse Description: PS/2 Compatible Mouse Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Standard PS/2 Keyboard Description: Standard PS/2 Keyboard Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: (Standard keyboards) Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (01/25/2016 06:39:40 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: plugin-container.exe, version: 43.0.4.5848, time stamp: 0x568c88bd Faulting module name: mozglue.dll, version: 43.0.4.5848, time stamp: 0x568c7b16 Exception code: 0x80000003 Fault offset: 0x0000ed44 Faulting process id: 0x748 Faulting application start time: 0xplugin-container.exe0 Faulting application path: plugin-container.exe1 Faulting module path: plugin-container.exe2 Report Id: plugin-container.exe3 Error: (01/25/2016 06:08:23 AM) (Source: VSS) (EventID: 8194) (User: ) Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. . This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {594a86b2-37f0-4af0-9f7f-0822536f198b} System errors: ============= Error: (01/24/2016 07:46:40 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "MIKE-PC :0" could not be registered on the interface with IP address 192.168.1.18. The computer with the IP address 192.168.1.167 did not allow the name to be claimed by this computer. Error: (01/24/2016 07:46:40 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "MIKE-PC :20" could not be registered on the interface with IP address 192.168.1.18. The computer with the IP address 192.168.1.167 did not allow the name to be claimed by this computer. Error: (01/24/2016 07:46:40 PM) (Source: Server) (EventID: 2505) (User: ) Description: The server could not bind to the transport \Device\NetBT_Tcpip_{3D3A6E98-514F-42CB-83D8-60B582665F65} because another computer on the network has the same name. The server could not start. Error: (01/24/2016 07:43:06 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Windows 7 (KB3109094). Error: (01/24/2016 07:43:06 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Windows 7 (KB3035132). Error: (01/24/2016 07:43:06 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Windows 7 (KB3078601). Error: (01/24/2016 07:43:06 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Windows 7 (KB3110329). Error: (01/24/2016 07:43:06 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Windows 7 (KB3035126). Error: (01/24/2016 07:12:39 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The Windows Modules Installer service terminated with the following error: %%16405 Error: (01/24/2016 07:11:35 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "MIKE-PC :20" could not be registered on the interface with IP address 192.168.1.18. The computer with the IP address 192.168.1.167 did not allow the name to be claimed by this computer. ==================== Memory info =========================== Processor: Intel® Core2 Duo CPU E8400 @ 3.00GHz Percentage of memory in use: 74% Total physical RAM: 1977.25 MB Available physical RAM: 514.08 MB Total Virtual: 3954.49 MB Available Virtual: 1914.36 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.76 GB) (Free:72.42 GB) NTFS ==>[drive with boot components (obtained from BCD)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 07F2837E) Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================ Quote
starbuck Posted January 26, 2016 Posted January 26, 2016 Hi Mike, yesterday I reloaded the OS and just a short while ago PC Keeper opened up again in another window as it was doing. To be honest, I'm surprised that PcKeeper is the only thing you got. ShortcutTarget: Auto Activate Office 2010 VL.lnk -> C:\Windows\actofvl\aaovl.exe () mini-KMS Auto Activation Tool 1.13 (HKLM\...\mini-KMS Auto Activation Tool 1.13) (Version: - ) Have you any idea of the dangers when installing pirate activators (let alone being illegal ) http://www.herdprotect.com/aaovl.exe-3bf801c9f7a696f2e25a96c6094d0595c65fc0bf.aspx Please read this thread: Keygens, crack programs etc... installed Quote
Recommended Posts