Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Programs not responding, freezes, slow, weird spontaneous dimming of s

Started by mellybee , Mar 26 2014 03:25 PM

malware virus slow idk suspect virus or something beats me

This topic is locked

#1
mellybee

Posted 26 March 2014 - 03:25 PM

New Member

Member
6 posts

Hello,

Over the course of three days my computers performance has rapidly declined with the symptoms mentioned above: Programs not responding, freezes, slow, weird spontaneous dimming of screen. I run eset 7, but I ran into some alerts on chrome and eset, nothing saying anything was infected...but I just don't know why things all of a sudden went to crap. Please help. I'm a traveling nurse and I NEED this laptop to work. Thank you so much for what you do, any help is greatly appreciated.

Melissa

#2
pystryker

Posted 26 March 2014 - 08:51 PM

Trusted Helper

Malware Removal
3,912 posts

Hello and welcome to Geeks to Go! My nickname is Pystryker , and I will be helping you with your issue today.

Before we get started, I have a few things I need to go over with you

Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process.
At the top of your post, please click on the "Follow this topic" button and make sure that the "Received notification" box is checked and set to "Instantly" This will send an email to you as soon as I reply to your topic, allowing us to solve your problem faster.

If any of your security programs give you a warning about any tool I ask you to use, please do not worry. All the links and tools I provide to you will be safe.
Please read through my instructions carefully and completely before executing them.
Please make sure that all the programs I ask you to download are downloaded to and run from your Desktop.
Please make sure you print out these instructions so that you will be able to refer to them while working on your machine. Part of the solution(s) to your problem may involve us working in Safe Mode and you will need them to go by.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.
Please read through my instructions carefully and make sure you complete them from start to finish. I will make sure that I lay the instructions out in a step by step order to make them easy to follow
This is a complicated process. It requires several steps, patience, and careful following of my instructions in the order they are given to diagnose your problems to get your machine back in working order.
Please stay with me until the end of all steps and procedures and I declare your system clean. Just because there is a lack of symptoms does not indicate a clean machine. I promise to do the same for you.
Please make sure you reply within 3 days to my responses, if there is no reply within 3 days, the topic will be closed and you will need to request the topic be reopened.
Before we get started, please remember we will do our best to get your machine repaired. However, there are some cases where the only solution is a reformat and reinstall of the operating system. This is a worst case scenario though.
It is impossible for me to know what interactions may happen between your computer's software and the tools we will use to clean your machine. Therefore, I highly recommend you backup any critical personal files on your machine before we start.
If possible, please have your original Windows installation disks handy, just in case.
If you have any questions at all, please don't hesitate to ask. There's no such thing as a stupid question when dealing with malware.
If you are unsure of an instruction I give you, or if something unexepected occurs, Do NOT proceed! Stop and ask for clarification of the instruction or tell me what occurred.
Please copy and paste the contents of any requested logs in your replies. Do not attach the log files in your replies unless requested to do so.
Please remember, the fixes are for your machine and your machine ONLY!

Once we have cleaned your machine, we'll have some cleanup and prevention steps to go through. We will also provide you with some information about how to reduce your chances of infection and get some protections in place to help defend you against this in the future

Please be patient while I am analyzing your logs. I know you are probably scared and very frustrated with this problem, but I am a volunteer and sometimes life does get in the way.

Let's get started by taking a look and see what's going on, shall we? :thumbsup:

Please disable your antivirus for the duration of my instructions. Don't forget to re-enable them after you have completed the steps.

Step 1: Scan with FRST

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Place a check in the box marked Addition.txt
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please copy and paste log back here.
The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

Step 2: Scan with aswMBR

Please download aswMBR.exe to your desktop.
Double click the file to run it.
It will ask if you want to download the latest Avast! virus definitions, please answer yes.

Click the Scan button to begin the scan.

Once the scan has finished, click on Save Log, save it to your desktop as asw.txt, and please post it in your next reply.
Click Exit

Things I need to see in your next post:

FRST Scan Log

Additions.txt Log

aswMBR Log

#3
mellybee

Posted 27 March 2014 - 01:44 PM

New Member

Topic Starter
Member
6 posts

Thank you for your help :3

(Google Inc.) C:\Users\Melissa\AppData\Local\GCC\Chrome-bin\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HPPowerAssistant] - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2919992 2011-01-26] (Hewlett-Packard Company)

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-08-23] (IDT, Inc.)

HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2804976 2013-10-30] (Synaptics Incorporated)

HKLM-x32\...\Run: [File Sanitizer] - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [12274688 2011-02-07] (Hewlett-Packard)

HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-26] (Intel Corporation)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2012-02-27] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [DTRun] - c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [517456 2010-11-24] (ArcSoft Inc.)

HKLM-x32\...\Run: [HPQuickWebProxy] - c:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [76344 2011-02-10] (Hewlett-Packard Company)

HKLM-x32\...\Run: [QLBController] - C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [323128 2011-07-06] (Hewlett-Packard Company)

HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-05-23] (Hewlett-Packard Development Company L.P.)

HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,

Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]

HKU\S-1-5-21-3225065892-2875577131-3997705866-1002\...\MountPoints2: {3510af62-bd7c-11e2-a0a8-68a3c4cc8494} - H:\LaunchU3.exe

HKU\S-1-5-21-3225065892-2875577131-3997705866-1002\...\MountPoints2: {40b68425-89d7-11e0-ba6c-806e6f6e6963} - G:\CD_Start.exe

Lsa: [Notification Packages] EpePcNp64 DPPassFilter scecli

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPCOM/1

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo....psg&type=CMNTDF

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKCU - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL =

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)

BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

Toolbar: HKCU - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.micros...n/ieawsdc32.cab

DPF: HKLM-x32 {0E5F0222-96B9-11D3-8997-00104BD12D94} http://utilities.pcp...ols/pcmatic.cab

DPF: HKLM-x32 {10000000-1000-1000-1000-100000000000} http://cdn.betteradv....0/ghostery.cab

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab

DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.h...tDetection2.cab

DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 75.75.76.76 75.75.75.75

FireFox:

========

FF ProfilePath: C:\Users\Melissa\AppData\Roaming\Mozilla\Firefox\Profiles\xoei3ypk.default

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw.dll No File

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-12-10]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\

FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\ []

FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-12-10]

Chrome:

=======

CHR Extension: (Fun Dial (Release Candidate)) - C:\Users\Melissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\bakijjialdiiboeaknfpmflphhmljfkd [2014-03-22]

CHR Extension: (XKit) - C:\Users\Melissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpfgeeomkfdefkckijiabdbogjkdaecd [2014-03-23]

CHR Extension: (LastPass: Free Password Manager) - C:\Users\Melissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-02-23]

CHR Extension: (Grammarly Lite - Smart Spellchecker) - C:\Users\Melissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2014-03-23]

CHR Extension: (Google Wallet) - C:\Users\Melissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-23]

CHR Extension: (Checker Plus for Gmail™) - C:\Users\Melissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2014-03-26]

CHR HKLM\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\Users\Melissa\AppData\Local\newhb2.crx [2013-10-23]

CHR HKCU\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\Users\Melissa\AppData\Local\newhb2.crx [2013-10-23]

CHR HKLM-x32\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\Users\Melissa\AppData\Local\newhb2.crx [2013-10-23]

CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - C:\Program Files (x86)\LastPass\lpchrome.crx [2013-01-05]

CHR HKLM-x32\...\Chrome\Extension: [ieakfmpjhljbpbfpldjkddkjmmgjmgon] - C:\Program Files (x86)\WebConnect\ieakfmpjhljbpbfpldjkddkjmmgjmgon.crx [2013-01-05]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

S3 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-01-06] (Atheros)

R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [481104 2011-02-11] (DigitalPersona, Inc.)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)

S3 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [464480 2011-02-03] (Hewlett-Packard Company)

R3 HP ProtectTools Service; c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [36864 2011-01-12] (Hewlett-Packard Development Company, L.P)

S3 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [681528 2010-08-05] (Hewlett-Packard)

S3 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [1698360 2011-07-06] (Hewlett-Packard Company)

S3 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1318912 2011-02-09] ()

S3 uArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [502464 2010-11-11] (ArcSoft, Inc.)

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.)

S3 XobniService; C:\Program Files (x86)\Xobni\XobniService.exe [62184 2011-03-07] (Xobni Corporation)

==================== Drivers (Whitelisted) ====================

S3 ARCVCAM; C:\Windows\System32\DRIVERS\ArcSoftVCapture.sys [32192 2010-11-11] (ArcSoft, Inc.)

S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [63336 2011-02-07] (Hewlett-Packard Company)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)

U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)

R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)

R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)

R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)

R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)

S2 MCSTRM; No ImagePath

R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [168008 2011-02-09] (McAfee, Inc.)

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1866080 2012-11-28] ()

S2 SSPORT; C:\windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-09-11] (Samsung Electronics)

S0 BootDefragDriver; System32\drivers\BootDefragDriver.sys [X]

S2 DgiVecp; \??\C:\windows\system32\Drivers\DgiVecp.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-03-27 14:26 - 2014-03-27 14:27 - 00017783 _____ () C:\Users\Melissa\Desktop\FRST.txt

2014-03-27 14:25 - 2014-03-27 14:26 - 00000000 ____D () C:\FRST

2014-03-27 14:24 - 2014-03-27 14:24 - 02157056 _____ (Farbar) C:\Users\Melissa\Desktop\FRST64.exe

2014-03-26 21:42 - 2014-03-26 21:42 - 00000056 _____ () C:\windows\setupact.log

2014-03-26 21:42 - 2014-03-26 21:42 - 00000000 _____ () C:\windows\setuperr.log

2014-03-26 21:27 - 2014-03-26 21:27 - 00000000 ____D () C:\ProgramData\GlarySoft

2014-03-25 21:48 - 2014-03-27 13:53 - 00000898 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA1cf489de357aced.job

2014-03-25 21:48 - 2014-03-25 21:48 - 00003894 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf489de357aced

2014-03-25 20:28 - 2014-03-25 20:28 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\Adobe

2014-03-25 18:02 - 2014-03-26 19:42 - 00577536 _____ () C:\Users\Melissa\Desktop\New Canvas.sai

2014-03-25 17:03 - 2014-03-26 17:09 - 00000000 ____D () C:\Users\Melissa\Desktop\ART REF

2014-03-24 20:13 - 2014-03-24 20:13 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\WTablet

2014-03-24 20:08 - 2014-03-24 20:08 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-03-24 20:08 - 2014-03-24 20:08 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-03-24 20:08 - 2014-03-24 20:08 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-03-24 20:08 - 2014-03-24 20:08 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-03-24 20:08 - 2013-11-11 19:16 - 00090424 _____ (Wacom Technology) C:\windows\system32\Drivers\wachidrouter.sys

2014-03-24 20:08 - 2013-11-11 19:16 - 00015160 _____ (Wacom Technology) C:\windows\system32\Drivers\wacomrouterfilter.sys

2014-03-24 20:08 - 2013-11-11 19:16 - 00014136 _____ (Windows ® Win 7 DDK provider) C:\windows\system32\Drivers\hidkmdf.sys

2014-03-24 20:08 - 2012-12-11 17:12 - 01721576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wdfcoinstaller01009.dll

2014-03-24 20:07 - 2014-03-24 20:08 - 00000000 ____D () C:\Program Files\Tablet

2014-03-24 20:07 - 2013-12-04 11:35 - 01945880 _____ (Wacom Technology, Corp.) C:\windows\system32\Wacom_Tablet.dll

2014-03-24 20:07 - 2013-12-04 11:35 - 01938712 _____ (Wacom Technology, Corp.) C:\windows\system32\Wacom_Touch_Tablet.dll

2014-03-24 20:07 - 2013-12-04 11:35 - 01808152 _____ (Wacom Technology, Corp.) C:\windows\system32\Wintab32.dll

2014-03-24 20:07 - 2013-12-04 11:35 - 01805080 _____ (Wacom Technology, Corp.) C:\windows\system32\WacomMT.dll

2014-03-24 20:07 - 2013-12-04 11:35 - 01604376 _____ (Wacom Technology, Corp.) C:\windows\SysWOW64\Wacom_Tablet.dll

2014-03-24 20:07 - 2013-12-04 11:35 - 01596696 _____ (Wacom Technology, Corp.) C:\windows\SysWOW64\Wacom_Touch_Tablet.dll

2014-03-24 20:07 - 2013-12-04 11:35 - 01483032 _____ (Wacom Technology, Corp.) C:\windows\SysWOW64\Wintab32.dll

2014-03-24 20:07 - 2013-12-04 11:35 - 01479960 _____ (Wacom Technology, Corp.) C:\windows\SysWOW64\WacomMT.dll

2014-03-24 15:19 - 2014-03-24 15:19 - 00000894 _____ () C:\Users\Melissa\Desktop\GIMP 2.lnk

2014-03-24 15:17 - 2014-03-24 15:18 - 00000000 ____D () C:\Program Files\GIMP 2

2014-03-24 15:16 - 2014-03-24 15:17 - 90396104 _____ (The GIMP Team ) C:\Users\Melissa\Downloads\gimp-2.8.10-setup.exe

2014-03-24 15:10 - 2014-03-24 15:10 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe

2014-03-24 15:06 - 2014-03-24 15:07 - 160412641 _____ () C:\Users\Melissa\Downloads\Portable Photoshop CS5.zip

2014-03-24 15:04 - 2014-03-24 15:04 - 00001054 _____ () C:\Users\Melissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk

2014-03-24 15:03 - 2014-03-24 15:13 - 00000000 ____D () C:\Users\Melissa\AppData\Local\iLivid

2014-03-24 15:03 - 2014-03-24 15:03 - 01759480 _____ (Bandoo Media Inc) C:\Users\Melissa\Downloads\iLividSetup-r1236-n-bc.exe

2014-03-24 12:15 - 2014-03-24 12:15 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\WinRAR

2014-03-24 12:15 - 2014-03-24 12:15 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2014-03-24 12:15 - 2014-03-24 12:15 - 00000000 ____D () C:\Program Files (x86)\WinRAR

2014-03-24 12:14 - 2014-03-24 12:15 - 00000000 ____D () C:\Users\Melissa\Downloads\WinRAR_TSV275Z6B

2014-03-24 12:14 - 2014-03-24 12:15 - 00000000 ____D () C:\Users\Melissa\AppData\Local\GCC

2014-03-24 12:14 - 2014-03-24 12:14 - 00004580 _____ () C:\windows\System32\Tasks\GC_Informer

2014-03-24 12:14 - 2014-03-24 12:14 - 00004564 _____ () C:\windows\System32\Tasks\GC_Scheduler

2014-03-24 12:13 - 2014-03-24 12:13 - 00681448 _____ (ClientConnect) C:\Users\Melissa\Downloads\WinRAR_TSV275Z6B.exe

2014-03-22 23:12 - 2014-03-22 23:12 - 00071868 _____ () C:\Users\Melissa\Documents\cc_20140322_231204.reg

2014-03-22 22:55 - 2014-03-22 22:56 - 09575182 _____ (firealpaca.com ) C:\Users\Melissa\Downloads\FireAlpaca_setup.exe

2014-03-22 22:43 - 2014-03-22 22:43 - 00000000 ____D () C:\ProgramData\SYSTEMAX Software Development

2014-03-22 22:42 - 2014-03-26 23:37 - 00000000 ____D () C:\PaintToolSAI

2014-03-22 22:42 - 2014-03-22 22:42 - 00000571 _____ () C:\Users\Public\Desktop\PaintTool SAI Ver.1.lnk

2014-03-22 22:42 - 2014-03-22 22:42 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\SYSTEMAX Software Development

2014-03-12 01:39 - 2014-03-01 01:05 - 23133696 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2014-03-12 01:39 - 2014-03-01 00:17 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2014-03-12 01:39 - 2014-03-01 00:16 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll

2014-03-12 01:39 - 2014-02-28 23:58 - 02765824 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2014-03-12 01:39 - 2014-02-28 23:52 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2014-03-12 01:39 - 2014-02-28 23:51 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll

2014-03-12 01:39 - 2014-02-28 23:42 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2014-03-12 01:39 - 2014-02-28 23:40 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2014-03-12 01:39 - 2014-02-28 23:37 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2014-03-12 01:39 - 2014-02-28 23:33 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2014-03-12 01:39 - 2014-02-28 23:33 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe

2014-03-12 01:39 - 2014-02-28 23:32 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll

2014-03-12 01:39 - 2014-02-28 23:30 - 17074688 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll

2014-03-12 01:39 - 2014-02-28 23:23 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2014-03-12 01:39 - 2014-02-28 23:17 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2014-03-12 01:39 - 2014-02-28 23:11 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb

2014-03-12 01:39 - 2014-02-28 23:02 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2014-03-12 01:39 - 2014-02-28 22:54 - 05768704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2014-03-12 01:39 - 2014-02-28 22:52 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll

2014-03-12 01:39 - 2014-02-28 22:51 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll

2014-03-12 01:39 - 2014-02-28 22:47 - 02168320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll

2014-03-12 01:39 - 2014-02-28 22:43 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll

2014-03-12 01:39 - 2014-02-28 22:43 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll

2014-03-12 01:39 - 2014-02-28 22:42 - 00627200 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2014-03-12 01:39 - 2014-02-28 22:40 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll

2014-03-12 01:39 - 2014-02-28 22:38 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe

2014-03-12 01:39 - 2014-02-28 22:37 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll

2014-03-12 01:39 - 2014-02-28 22:35 - 02041856 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2014-03-12 01:39 - 2014-02-28 22:18 - 13051904 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2014-03-12 01:39 - 2014-02-28 22:16 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll

2014-03-12 01:39 - 2014-02-28 22:14 - 04244480 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll

2014-03-12 01:39 - 2014-02-28 22:10 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2014-03-12 01:39 - 2014-02-28 22:03 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll

2014-03-12 01:39 - 2014-02-28 22:00 - 01964032 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

2014-03-12 01:39 - 2014-02-28 21:57 - 11266048 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll

2014-03-12 01:39 - 2014-02-28 21:38 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2014-03-12 01:39 - 2014-02-28 21:32 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll

2014-03-12 01:39 - 2014-02-28 21:27 - 01156096 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll

2014-03-12 01:39 - 2014-02-28 21:25 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2014-03-12 01:39 - 2014-02-28 21:25 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll

2014-03-12 01:38 - 2014-02-06 20:23 - 03156480 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

2014-03-12 01:38 - 2014-01-28 21:32 - 00484864 _____ (Microsoft Corporation) C:\windows\system32\wer.dll

2014-03-12 01:38 - 2014-01-28 21:06 - 00381440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll

2014-03-12 01:38 - 2014-01-27 21:32 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll

2014-03-12 01:33 - 2014-02-03 21:32 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll

2014-03-12 01:33 - 2014-02-03 21:32 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll

2014-03-12 01:33 - 2014-02-03 21:04 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll

2014-03-12 01:33 - 2014-02-03 21:04 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll

2014-02-27 16:50 - 2014-02-27 16:50 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-02-27 16:50 - 2014-02-27 16:50 - 00000000 ____D () C:\Users\Melissa\AppData\Local\Skype

==================== One Month Modified Files and Folders =======

2014-03-27 14:27 - 2014-03-27 14:26 - 00017783 _____ () C:\Users\Melissa\Desktop\FRST.txt

2014-03-27 14:26 - 2014-03-27 14:25 - 00000000 ____D () C:\FRST

2014-03-27 14:24 - 2014-03-27 14:24 - 02157056 _____ (Farbar) C:\Users\Melissa\Desktop\FRST64.exe

2014-03-27 13:53 - 2014-03-25 21:48 - 00000898 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA1cf489de357aced.job

2014-03-27 13:49 - 2013-09-06 19:49 - 00000294 _____ () C:\windows\Tasks\DSite.job

2014-03-27 13:34 - 2014-02-22 12:47 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job

2014-03-26 23:37 - 2014-03-22 22:42 - 00000000 ____D () C:\PaintToolSAI

2014-03-26 21:53 - 2014-02-23 07:41 - 00000896 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-03-26 21:50 - 2009-07-13 23:45 - 00019760 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-03-26 21:50 - 2009-07-13 23:45 - 00019760 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-03-26 21:45 - 2011-05-29 04:25 - 01226592 _____ () C:\windows\WindowsUpdate.log

2014-03-26 21:44 - 2013-10-03 05:50 - 00000336 _____ () C:\windows\Tasks\GlaryInitialize 3.job

2014-03-26 21:43 - 2011-09-06 13:05 - 00000476 _____ () C:\windows\Tasks\SDMsgUpdate (TE).job

2014-03-26 21:42 - 2014-03-26 21:42 - 00000056 _____ () C:\windows\setupact.log

2014-03-26 21:42 - 2014-03-26 21:42 - 00000000 _____ () C:\windows\setuperr.log

2014-03-26 21:42 - 2011-05-04 19:50 - 00000000 ____D () C:\ProgramData\HPQLOG

2014-03-26 21:42 - 2009-07-14 00:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT

2014-03-26 21:38 - 2013-08-29 13:51 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\Skype

2014-03-26 21:27 - 2014-03-26 21:27 - 00000000 ____D () C:\ProgramData\GlarySoft

2014-03-26 21:21 - 2013-10-03 05:49 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 3

2014-03-26 21:17 - 2013-09-09 22:52 - 00000000 ____D () C:\Users\Melissa\Desktop\SPRITES

2014-03-26 19:42 - 2014-03-25 18:02 - 00577536 _____ () C:\Users\Melissa\Desktop\New Canvas.sai

2014-03-26 17:09 - 2014-03-25 17:03 - 00000000 ____D () C:\Users\Melissa\Desktop\ART REF

2014-03-26 09:23 - 2009-07-14 00:13 - 00786558 _____ () C:\windows\system32\PerfStringBackup.INI

2014-03-25 21:48 - 2014-03-25 21:48 - 00003894 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf489de357aced

2014-03-25 21:48 - 2014-02-23 07:41 - 00003644 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-03-25 20:28 - 2014-03-25 20:28 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\Adobe

2014-03-24 20:13 - 2014-03-24 20:13 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\WTablet

2014-03-24 20:08 - 2014-03-24 20:08 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-03-24 20:08 - 2014-03-24 20:08 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-03-24 20:08 - 2014-03-24 20:08 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-03-24 20:08 - 2014-03-24 20:08 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-03-24 20:08 - 2014-03-24 20:07 - 00000000 ____D () C:\Program Files\Tablet

2014-03-24 15:19 - 2014-03-24 15:19 - 00000894 _____ () C:\Users\Melissa\Desktop\GIMP 2.lnk

2014-03-24 15:18 - 2014-03-24 15:17 - 00000000 ____D () C:\Program Files\GIMP 2

2014-03-24 15:17 - 2014-03-24 15:16 - 90396104 _____ (The GIMP Team ) C:\Users\Melissa\Downloads\gimp-2.8.10-setup.exe

2014-03-24 15:13 - 2014-03-24 15:03 - 00000000 ____D () C:\Users\Melissa\AppData\Local\iLivid

2014-03-24 15:10 - 2014-03-24 15:10 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe

2014-03-24 15:09 - 2011-08-31 20:23 - 00000000 ____D () C:\ProgramData\Adobe

2014-03-24 15:07 - 2014-03-24 15:06 - 160412641 _____ () C:\Users\Melissa\Downloads\Portable Photoshop CS5.zip

2014-03-24 15:04 - 2014-03-24 15:04 - 00001054 _____ () C:\Users\Melissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk

2014-03-24 15:03 - 2014-03-24 15:03 - 01759480 _____ (Bandoo Media Inc) C:\Users\Melissa\Downloads\iLividSetup-r1236-n-bc.exe

2014-03-24 12:15 - 2014-03-24 12:15 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\WinRAR

2014-03-24 12:15 - 2014-03-24 12:15 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2014-03-24 12:15 - 2014-03-24 12:15 - 00000000 ____D () C:\Program Files (x86)\WinRAR

2014-03-24 12:15 - 2014-03-24 12:14 - 00000000 ____D () C:\Users\Melissa\Downloads\WinRAR_TSV275Z6B

2014-03-24 12:15 - 2014-03-24 12:14 - 00000000 ____D () C:\Users\Melissa\AppData\Local\GCC

2014-03-24 12:14 - 2014-03-24 12:14 - 00004580 _____ () C:\windows\System32\Tasks\GC_Informer

2014-03-24 12:14 - 2014-03-24 12:14 - 00004564 _____ () C:\windows\System32\Tasks\GC_Scheduler

2014-03-24 12:13 - 2014-03-24 12:13 - 00681448 _____ (ClientConnect) C:\Users\Melissa\Downloads\WinRAR_TSV275Z6B.exe

2014-03-24 00:49 - 2013-09-06 20:49 - 00000200 _____ () C:\Users\Melissa\AppData\Roaming\WB.CFG

2014-03-23 22:55 - 2011-08-01 14:09 - 00003198 _____ () C:\windows\System32\Tasks\HPCeeScheduleForMelissa

2014-03-23 22:55 - 2011-08-01 14:09 - 00000340 _____ () C:\windows\Tasks\HPCeeScheduleForMelissa.job

2014-03-23 22:19 - 2013-10-20 14:33 - 00000000 ____D () C:\Users\Melissa\Desktop\RECENT GIFS

2014-03-22 23:12 - 2014-03-22 23:12 - 00071868 _____ () C:\Users\Melissa\Documents\cc_20140322_231204.reg

2014-03-22 23:11 - 2011-08-28 18:57 - 00000000 ____D () C:\Users\Melissa\AppData\Local\CrashDumps

2014-03-22 22:58 - 2013-07-12 17:02 - 00000000 ____D () C:\Users\Melissa\Desktop\TUMBLR

2014-03-22 22:57 - 2013-12-01 15:44 - 00001180 _____ () C:\Users\Public\Desktop\FireAlpaca.lnk

2014-03-22 22:56 - 2014-03-22 22:55 - 09575182 _____ (firealpaca.com ) C:\Users\Melissa\Downloads\FireAlpaca_setup.exe

2014-03-22 22:43 - 2014-03-22 22:43 - 00000000 ____D () C:\ProgramData\SYSTEMAX Software Development

2014-03-22 22:42 - 2014-03-22 22:42 - 00000571 _____ () C:\Users\Public\Desktop\PaintTool SAI Ver.1.lnk

2014-03-22 22:42 - 2014-03-22 22:42 - 00000000 ____D () C:\Users\Melissa\AppData\Roaming\SYSTEMAX Software Development

2014-03-20 20:45 - 2009-07-27 10:04 - 00000000 ____D () C:\windows\Panther

2014-03-19 03:02 - 2013-08-03 03:01 - 00000000 ____D () C:\windows\system32\MRT

2014-03-19 03:00 - 2011-08-01 17:04 - 90015360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

2014-03-17 15:52 - 2013-03-22 15:25 - 00000000 ____D () C:\Users\Melissa\Desktop\JOB STUFF

2014-03-15 11:48 - 2014-02-23 07:42 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-03-14 14:34 - 2014-01-22 23:21 - 00000000 ____D () C:\Users\Melissa\Desktop\RENAUX

2014-03-12 19:04 - 2013-11-01 01:02 - 00000000 ____D () C:\Users\Melissa\Desktop\TROLLS

2014-03-12 18:54 - 2013-12-31 11:21 - 00000000 ____D () C:\Users\Melissa\Desktop\ALIZAR

2014-03-12 09:34 - 2014-02-22 12:47 - 00003768 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater

2014-03-12 09:34 - 2012-05-12 13:23 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe

2014-03-12 09:34 - 2011-08-02 20:23 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-03-12 07:59 - 2009-07-13 23:45 - 00410640 _____ () C:\windows\system32\FNTCACHE.DAT

2014-03-12 07:58 - 2012-05-21 03:00 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-03-12 07:58 - 2012-05-21 03:00 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-03-12 03:03 - 2011-08-01 18:44 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-03-04 07:51 - 2009-07-13 22:20 - 00000000 ____D () C:\windows\system32\NDF

2014-03-01 01:05 - 2014-03-12 01:39 - 23133696 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2014-03-01 00:17 - 2014-03-12 01:39 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2014-03-01 00:16 - 2014-03-12 01:39 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll

2014-02-28 23:58 - 2014-03-12 01:39 - 02765824 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2014-02-28 23:52 - 2014-03-12 01:39 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2014-02-28 23:51 - 2014-03-12 01:39 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll

2014-02-28 23:42 - 2014-03-12 01:39 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2014-02-28 23:40 - 2014-03-12 01:39 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2014-02-28 23:37 - 2014-03-12 01:39 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2014-02-28 23:33 - 2014-03-12 01:39 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2014-02-28 23:33 - 2014-03-12 01:39 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe

2014-02-28 23:32 - 2014-03-12 01:39 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll

2014-02-28 23:30 - 2014-03-12 01:39 - 17074688 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll

2014-02-28 23:23 - 2014-03-12 01:39 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2014-02-28 23:17 - 2014-03-12 01:39 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2014-02-28 23:11 - 2014-03-12 01:39 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb

2014-02-28 23:02 - 2014-03-12 01:39 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2014-02-28 22:54 - 2014-03-12 01:39 - 05768704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2014-02-28 22:52 - 2014-03-12 01:39 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll

2014-02-28 22:51 - 2014-03-12 01:39 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll

2014-02-28 22:47 - 2014-03-12 01:39 - 02168320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll

2014-02-28 22:43 - 2014-03-12 01:39 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll

2014-02-28 22:43 - 2014-03-12 01:39 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll

2014-02-28 22:42 - 2014-03-12 01:39 - 00627200 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2014-02-28 22:40 - 2014-03-12 01:39 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll

2014-02-28 22:38 - 2014-03-12 01:39 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe

2014-02-28 22:37 - 2014-03-12 01:39 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll

2014-02-28 22:35 - 2014-03-12 01:39 - 02041856 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2014-02-28 22:18 - 2014-03-12 01:39 - 13051904 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2014-02-28 22:16 - 2014-03-12 01:39 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll

2014-02-28 22:14 - 2014-03-12 01:39 - 04244480 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll

2014-02-28 22:10 - 2014-03-12 01:39 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2014-02-28 22:03 - 2014-03-12 01:39 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll

2014-02-28 22:00 - 2014-03-12 01:39 - 01964032 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

2014-02-28 21:57 - 2014-03-12 01:39 - 11266048 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll

2014-02-28 21:38 - 2014-03-12 01:39 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2014-02-28 21:32 - 2014-03-12 01:39 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll

2014-02-28 21:27 - 2014-03-12 01:39 - 01156096 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll

2014-02-28 21:25 - 2014-03-12 01:39 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2014-02-28 21:25 - 2014-03-12 01:39 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll

2014-02-28 20:18 - 2011-11-04 19:43 - 00001196 _____ () C:\Users\Melissa\Desktop\My Skyscape.lnk

2014-02-28 20:18 - 2011-09-06 12:42 - 00001226 _____ () C:\Users\Melissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Skyscape.lnk

2014-02-27 16:50 - 2014-02-27 16:50 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-02-27 16:50 - 2014-02-27 16:50 - 00000000 ____D () C:\Users\Melissa\AppData\Local\Skype

2014-02-27 16:50 - 2011-05-29 04:46 - 00000000 ____D () C:\ProgramData\Skype

Files to move or delete:

====================

C:\Users\Melissa\WinZip175.exe

Some content of TEMP:

====================

C:\Users\Melissa\AppData\Local\Temp\Setup-Wacom.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-03-20 00:04

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014

Ran by Melissa at 2014-03-27 14:28:23

Running from C:\Users\Melissa\Desktop

Boot Mode: Normal

==========================================================

==================== Security Center ========================

AV: ESET Smart Security 7.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: ESET Smart Security 7.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

FW: ESET Personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)

ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.3.0.3670 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 3.3.0.3670 - Adobe Systems Incorporated) Hidden

Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.06) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)

Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.1.629 - Adobe Systems, Inc.)

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ArcSoft TotalMedia (HKLM-x32\...\ArcSoft TotalMedia) (Version: 2.0.39.12 - ArcSoft)

ArcSoft TotalMedia (x32 Version: 1.0.48.25 - ArcSoft) Hidden

ArcSoft Webcam Sharing Manager (HKLM-x32\...\{190A7D93-3823-439C-91B9-ADCE3EC2A6A2}) (Version: 2.0.0.30 - ArcSoft)

Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)

Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden

Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.02.000.55 - Atheros Communications)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden

Build-a-Lot - The Elizabethan Era (x32 Version: 2.2.0.95 - WildTangent) Hidden

Bullzip PDF Printer 9.8.0.1599 (HKLM\...\Bullzip PDF Printer_is1) (Version: 9.8.0.1599 - Bullzip)

Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 4.01 - Piriform)

Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

CME STAT (for Windows PCs) by Skyscape (HKLM-x32\...\CME STAT_pc) (Version: 10.1.5 - Skyscape, Inc)

CNSkills (for Windows PCs) by Skyscape (HKLM-x32\...\CNSkills_pc) (Version: 11.0.3 - Skyscape, Inc)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Device Access Manager for HP ProtectTools (HKLM\...\{55B52830-024A-443E-AF61-61E1E71AFA1B}) (Version: 6.0.0.9 - Hewlett-Packard Company)

Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden

Drive Encryption For HP ProtectTools (HKLM\...\{8A0041CD-277C-4C1F-BFE4-7AC508B20B4C}) (Version: 6.0.33.24411 - Hewlett-Packard Company)

DrugGuide (for Windows PCs) by Skyscape (HKLM-x32\...\DrugGuide_pc) (Version: 14.2.0 - Skyscape, Inc)

Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)

ESET Smart Security (HKLM\...\{F7C525E7-659A-47F6-A25A-7A63FA10E767}) (Version: 7.0.302.26 - ESET, spol s r. o.)

Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.)

Face Recognition for HP ProtectTools (HKLM\...\{D3A775F2-2674-4452-8D80-1FC1446052EE}) (Version: 6.00.4303 - Hewlett-Packard Company)

Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden

FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden

File Sanitizer For HP ProtectTools (HKLM-x32\...\{6D6ADF03-B257-4EA5-BBC1-1D145AF8D514}) (Version: 6.0.0.8 - Hewlett-Packard Company)

FireAlpaca 1.0.47 (HKLM-x32\...\FireAlpaca_is1) (Version: 1.0.47 - firealpaca.com)

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

GigaClicks Crawler (x32 Version: 22.0.0.67 - GigaClicks Inc.) Hidden <==== ATTENTION

GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)

Glary Utilities 3.9.2 (HKLM-x32\...\Glary Utilities 3) (Version: 3.9.2.139 - Glarysoft Ltd)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)

Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden

HP 3D DriveGuard (HKLM\...\{83DA38AB-1014-41C2-A3CD-E2B93832A71A}) (Version: 4.1.4.1 - Hewlett-Packard Company)

HP Auto (Version: 1.0.12494.3472 - Hewlett-Packard Company) Hidden

HP Connection Manager (HKLM-x32\...\{7A6B4340-7090-418F-8976-EE9650B35550}) (Version: 4.1.22.1 - Hewlett-Packard Company)

HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden

HP Documentation (HKLM-x32\...\{6A9C9BE1-14A3-42ED-A388-42E30A1412E9}) (Version: 1.2.0.0 - Hewlett-Packard)

HP ESU for Microsoft Windows 7 (HKLM-x32\...\{CFC1988A-F492-4BC5-B6F7-683A95718AE9}) (Version: 1.1.11.1 - Hewlett-Packard Company)

HP Game Console (x32 Version: - WildTangent) Hidden

HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.5 - WildTangent)

HP HotKey Support (HKLM\...\{76997589-A71A-4651-9956-F2F79972A54D}) (Version: 4.0.20.1 - Hewlett-Packard Company)

HP Power Assistant (HKLM\...\{3D8EDF72-13CC-4E51-AAB6-32A20524D2E0}) (Version: 2.0.2.0 - Hewlett-Packard Company)

HP Product Detection (HKLM-x32\...\{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}) (Version: 10.7.9.0 - Hewlett-Packard Company)

HP ProtectTools Security Manager (HKLM\...\HPProtectTools) (Version: 6.00.888 - Hewlett-Packard Company)

HP ProtectTools Security Manager (Version: 6.00.888 - Hewlett-Packard Company) Hidden

HP QuickWeb (HKLM-x32\...\{20976B1F-E910-404D-9261-C16EE7E12DC8}) (Version: 3.0.0.9057 - Hewlett-Packard Company)

HP Setup (HKLM-x32\...\{03046EBB-CB7C-4B98-BEFB-690EB955DA22}) (Version: 8.5.4526.3645 - Hewlett-Packard Company)

HP SoftPaq Download Manager (HKLM-x32\...\{EA75386A-9DFF-4156-8D45-3CFBD8724DAD}) (Version: 3.4.7.0 - Hewlett-Packard Company)

HP Software Framework (HKLM-x32\...\{B7F60A16-7A7B-41FB-9AE3-DE9E324FBA06}) (Version: 4.0.112.1 - Hewlett-Packard Company)

HP Software Setup (HKLM-x32\...\{531000B3-DBEE-4115-BBF3-DA48B67C053F}) (Version: 8.2.1.1 - Hewlett-Packard Company)

HP System Default Settings (HKLM-x32\...\{54C65FE7-83BD-4A5B-A9B4-41F793C5F241}) (Version: 2.1.2 - Hewlett-Packard Company)

HP Webcam Driver (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.50058.0 - Sonix)

HPAsset component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{EAFB2AD8-D92B-464C-8D97-B9CB94703C4A}) (Version: 3.0.2.163 - Apple Inc.)

IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6341.0 - IDT)

Image Editor Packages (HKCU\...\Image Editor Packages) (Version: - ) <==== ATTENTION

Info Center 1.0.0.5 (HKLM-x32\...\Info Center_is1) (Version: 1.0.0.5 - PC Pitstop LLC)

Insaniquarium Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

Intel® Identity Protection Technology 1.0.71.0 (HKLM-x32\...\{2C43790E-8470-1027-82D3-DF319F3C410F}) (Version: 1.0.71.0 - Intel Corporation)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)

iTunes (HKLM\...\{A535111D-95C8-487F-869E-CE4C239972D2}) (Version: 11.1.1.11 - Apple Inc.)

IVMed11 (for Windows PCs) by Skyscape (HKLM-x32\...\IVMed11_pc) (Version: 13.0.4 - Skyscape, Inc)

Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Jewel Quest II (x32 Version: 2.2.0.95 - WildTangent) Hidden

Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden

JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.57.2 - JMicron Technology Corp.)

John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden

LaserJet 1020 series (HKLM-x32\...\HP-LaserJet 1020 series) (Version: - )

LastPass(uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass)

Maintenance Samsung CLP-320 Series (HKLM-x32\...\Samsung CLP-320 Series) (Version: - Samsung Electronics Co., Ltd.)

Malwarebytes Anti-Malware version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden

Microsoft Office Access MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Access Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office InfoPath MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden

Microsoft Office Publisher MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft_VC90_CRT_x86 (HKLM-x32\...\{DF2035BE-5820-4965-BD97-7FAF8D4A7879}) (Version: 1.0.0 - Microsoft Corporation)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

PaintTool SAI Ver.1 (HKLM-x32\...\PaintToolSAI) (Version: - )

Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden

PESTERCHUM (HKLM-x32\...\Pesterchum) (Version: - )

Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden

Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden

Privacy Manager for HP ProtectTools (HKLM\...\{ACA53F68-B003-4D0E-9C3D-0C4EE09D08A8}) (Version: 6.00.831 - Hewlett-Packard Company)

QuickTime (HKLM-x32\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)

Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 1.12.0016 - Realtek)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.19.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.19.0 - Renesas Electronics Corporation) Hidden

Rhapsody (HKLM-x32\...\Rhapsody) (Version: - )

RnDiag9 (for Windows PCs) by Skyscape (HKLM-x32\...\RnDiag9_pc) (Version: 13.0.4 - Skyscape, Inc)

RnDisease4 (for Windows PCs) by Skyscape (HKLM-x32\...\RnDisease4_pc) (Version: 14.0.3 - Skyscape, Inc)

RnDxTests4 (for Windows PCs) by Skyscape (HKLM-x32\...\RnDxTests4_pc) (Version: 14.0.2 - Skyscape, Inc)

SDK (x32 Version: 2.24.025 - Portrait Displays, Inc.) Hidden

Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)

Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

SmartDraw VP (HKLM-x32\...\SmartDraw VP) (Version: - SmartDraw.com)

smARTupdate (HKLM-x32\...\smARTupdate) (Version: - )

SoftwareWatcher bundle (HKLM-x32\...\SoftwareWatcher bundle) (Version: 2.0.0.3 - SoftwareWatcher)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.18.8 - Synaptics Incorporated)

Tabers21 (for Windows PCs) by Skyscape (HKLM-x32\...\Tabers21_pc) (Version: 11.0.21 - Skyscape, Inc)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)

Update for Image Editor (HKCU\...\DSite) (Version: - ) <==== ATTENTION

Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_PROPLUS_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version: - Microsoft)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)

Update for Microsoft Office Access 2007 Help (KB963663) (HKLM-x32\...\{90120000-0015-0409-0000-0000000FF1CE}_PROPLUS_{6B76A18A-AA1E-42AB-A7AD-6C84BBB43987}) (Version: - Microsoft)

Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0409-0000-0000000FF1CE}_PROPLUS_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version: - Microsoft)

Update for Microsoft Office Infopath 2007 Help (KB963662) (HKLM-x32\...\{90120000-0044-0409-0000-0000000FF1CE}_PROPLUS_{716B81B8-B13C-41DF-8EAC-7A2F656CAB63}) (Version: - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0409-0000-0000000FF1CE}_PROPLUS_{ED38F8A3-4F61-494E-8BCA-E3AC7760C924}) (Version: - Microsoft)

Update for Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0409-0000-0000000FF1CE}_PROPLUS_{0451F231-E3E3-4943-AB9F-58EB96171784}) (Version: - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878234) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{EC1934B0-AE0F-4BBD-8955-54BB3247ED9E}) (Version: - Microsoft)

Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0409-0000-0000000FF1CE}_PROPLUS_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version: - Microsoft)

Update for Microsoft Office Publisher 2007 Help (KB963667) (HKLM-x32\...\{90120000-0019-0409-0000-0000000FF1CE}_PROPLUS_{2E40DE55-B289-4C8B-8901-5D369B16814F}) (Version: - Microsoft)

Update for Microsoft Office Script Editor Help (KB963671) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_PROPLUS_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version: - Microsoft)

Update for Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0409-0000-0000000FF1CE}_PROPLUS_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version: - Microsoft)

Validity Fingerprint Sensor Driver (HKLM\...\{FFC3E41D-2C2B-45B7-9AD9-5EA19572DD26}) (Version: 4.3.117.0 - Validity Sensors, Inc.)

VCE 3.0 - Medical Surgical Patient Set (HKLM-x32\...\VCE 3.0 - Medical Surgical Patient Set) (Version: - )

VIP Access SDK x64(1.0.0.50) (HKLM-x32\...\VIP Access SDK) (Version: 1.0.0.50 - Symantec Inc.)

Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden

Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)

VLC media player 2.0.2 (HKLM-x32\...\VLC media player) (Version: 2.0.2 - VideoLAN)

Wacom Tablet (HKLM\...\Wacom Tablet Driver) (Version: 6.3.7-6 - Wacom Technology Corp.)

WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)

WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)

Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden

Windows Driver Package - Atheros Communications Inc. (athr) Net (11/09/2011 9.2.0.467) (HKLM\...\0636F1DFE5C1926FDBB1AC4C08CC616CF9A9A781) (Version: 11/09/2011 9.2.0.467 - Atheros Communications Inc.)

Windows Driver Package - Intel® Corporation (IntcDAud) MEDIA (08/23/2011 6.14.00.3086) (HKLM\...\66A129BB411C95940270753202E51BC35C0DB0D2) (Version: 08/23/2011 6.14.00.3086 - Intel® Corporation)

Windows Driver Package - Realtek (RTL8167) Net (03/21/2011 7.043.0321.2011) (HKLM\...\650A09C975543C782ADAC3763AF3CE1F442F8846) (Version: 03/21/2011 7.043.0321.2011 - Realtek)

Windows Driver Package - Realtek (RTL8167) Net (08/23/2011 7.048.0823.2011) (HKLM\...\4A38D9B38E10E18D3528EDAB22652EB131FADECB) (Version: 08/23/2011 7.048.0823.2011 - Realtek)

Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Argazki Galeria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Language Selector (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

WinRAR 5.01 (32-bit) (x32 Version: 5.01.0 - win.rar GmbH) Hidden

Xobni (HKLM-x32\...\XobniMain) (Version: 1.9.5.13282 - Xobni Corp.)

Xobni Core (x32 Version: 1.0.0 - Xobni, Inc.) Hidden

Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Restore Points =========================

24-03-2014 06:39:34 Scheduled Checkpoint

26-03-2014 02:58:01 Windows Update

==================== Hosts content: ==========================

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {08565569-B47F-410E-B352-7EB5EE0A7A7A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {14981CBF-3E5F-45A3-9168-05280E341A24} - System32\Tasks\HPCeeScheduleForMelissa => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)

Task: {23D733DA-9168-400A-B11F-D8DB434C89A6} - System32\Tasks\SDMsgUpdate (TE) => C:\Program Files (x86)\SmartDraw VP\Messages\SDNotify.exe [2010-04-06] ()

Task: {244E51B2-C871-46AC-975A-8EE75A8E9D8B} - System32\Tasks\GlaryInitialize 3 => C:\Program Files (x86)\Glary Utilities 3\Initialize.exe [2013-09-13] (Glarysoft Ltd)

Task: {57B86C38-95C8-4121-A858-19BB93F50CE8} - System32\Tasks\DSite => C:\Users\Melissa\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-09-06] () <==== ATTENTION

Task: {5991765D-1094-46E2-AB45-70221D76D004} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)

Task: {6E636CE3-A2E6-48B8-A492-AEB17304D431} - System32\Tasks\GoogleUpdateTaskMachineUA1cf489de357aced => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-23] (Google Inc.)

Task: {79B7A0C3-5EE8-47C2-A8EE-50EFE5F711A4} - System32\Tasks\GC_Scheduler => %LOCALAPPDATA%\GCC\Controller.exe <==== ATTENTION

Task: {8DC43B77-AA38-4451-9AEB-55173AB43354} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)

Task: {9F125394-9FD5-4A91-ACF5-1D33B51F800A} - System32\Tasks\Microsoft\Windows\Maintenance\UP_Scheduler => %LOCALAPPDATA%\GCC\Controller.exe <==== ATTENTION

Task: {A9A84E3C-2EDE-4383-8BA6-1275344C49A7} - System32\Tasks\GC_Informer => %LOCALAPPDATA%\GCC\Controller.exe <==== ATTENTION

Task: {EE44229A-4293-42B0-9BF6-16343341E8E2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-23] (Google Inc.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\windows\Tasks\DSite.job => C:\Users\Melissa\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

Task: C:\windows\Tasks\GlaryInitialize 3.job => C:\Program Files (x86)\Glary Utilities 3\Initialize.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA1cf489de357aced.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\windows\Tasks\HPCeeScheduleForMelissa.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

Task: C:\windows\Tasks\SDMsgUpdate (TE).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe

==================== Loaded Modules (whitelisted) =============

2013-04-29 12:33 - 2012-09-18 15:27 - 00192512 _____ () C:\windows\System32\zlhp1020.dll

2011-06-21 09:42 - 2011-06-21 09:42 - 00034304 _____ () C:\windows\System32\sst3cl6.dll

2011-08-29 14:49 - 2012-09-18 15:27 - 00065024 _____ () C:\windows\system32\spool\PRTPROCS\x64\pphp1020.dll

2011-08-02 14:08 - 2011-06-21 04:23 - 00826880 _____ () C:\windows\system32\spool\DRIVERS\x64\3\sst3cdu.dll

2011-01-31 13:54 - 2011-01-31 13:54 - 00107008 _____ () c:\Program Files\Hewlett-Packard\Pre-Boot Security for HP ProtectTools\BIOSDomainPlugin.dll

2011-02-09 14:04 - 2011-02-09 14:04 - 02905600 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeHpFve64.dll

2010-09-06 15:18 - 2010-09-06 15:18 - 01412608 _____ () C:\windows\system32\LIBEAY32.dll

2011-02-09 13:27 - 2011-02-09 13:27 - 00141824 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHostInterface64.dll

2014-03-22 07:45 - 2014-03-22 07:45 - 00493568 _____ () C:\Users\Melissa\AppData\Local\GCC\Controller.exe

2014-03-24 20:07 - 2013-12-04 11:35 - 01185048 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll

2011-05-04 19:56 - 2011-01-26 19:34 - 01083392 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\System.Data.SQLite.dll

2011-01-26 20:14 - 2011-01-26 20:14 - 00036408 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Remote.dll

2011-01-26 20:13 - 2011-01-26 20:13 - 00080440 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HardwareAccess.dll

2011-01-26 20:13 - 2011-01-26 20:13 - 00047160 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\Graphs.dll

2011-04-08 10:57 - 2011-04-08 10:57 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll

2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2014-02-12 08:38 - 2014-02-12 08:38 - 00169472 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3e27ac2000641918e7215d97c63e957d\IsdiInterop.ni.dll

2011-05-29 04:28 - 2011-01-12 20:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll

2011-04-08 10:57 - 2011-04-08 10:57 - 00514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll

2014-03-15 11:48 - 2014-03-14 19:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll

2014-03-15 11:48 - 2014-03-14 19:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll

2014-03-15 11:48 - 2014-03-14 19:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll

2014-03-15 11:48 - 2014-03-14 19:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll

2014-03-15 11:48 - 2014-03-14 19:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll

2014-03-15 11:48 - 2014-03-14 19:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll

2014-03-24 12:15 - 2013-12-03 21:48 - 04055504 _____ () C:\Users\Melissa\AppData\Local\GCC\Chrome-bin\31.0.1650.63\pdf.dll

2014-03-24 12:15 - 2013-12-03 21:48 - 00399312 _____ () C:\Users\Melissa\AppData\Local\GCC\Chrome-bin\31.0.1650.63\ppgooglenaclpluginchrome.dll

2014-03-24 12:15 - 2013-12-03 21:47 - 01619408 _____ () C:\Users\Melissa\AppData\Local\GCC\Chrome-bin\31.0.1650.63\ffmpegsumo.dll

2013-08-13 07:15 - 2013-08-13 07:15 - 00206336 _____ () C:\Users\Melissa\AppData\Local\Temp\{D485355D-2092-4567-98D5-D1D5C2DDF04E}\{A9DE9A58-5AF1-44C6-B7E3-7B18945442D8}\Default\Extensions\jmiibbdogibcphdfkkmlimfffneaecbc\2.4_0\plugin\convenience.dll

2014-03-24 12:15 - 2013-12-03 21:48 - 13586896 _____ () C:\Users\Melissa\AppData\Local\GCC\Chrome-bin\31.0.1650.63\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\windows\Diseases and Disorders: A Nursing Therapeutics Manual Setup Log.txt

AlternateDataStreams: C:\windows\Nursing Diagnosis Handbook: A Guide to Planning Care Setup Log.txt

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\64018839.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\64018839.sys => ""="Driver"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: p2psvc => 3

MSCONFIG\Services: pdfcDispatcher => 3

MSCONFIG\startupfolder: C:^Users^Melissa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Skyscape SmartUpdate.lnk => C:\windows\pss\Skyscape SmartUpdate.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: AthBtTray => "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"

MSCONFIG\startupreg: AtherosBtStack => "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

MSCONFIG\startupreg: Boxoft Tools => "C:\ProgramData\Boxtools\Boxofttoolbox.exe" -autorun

MSCONFIG\startupreg: Info Center => C:\Program Files (x86)\PCPitstop\Info Center\InfoCenter.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: MfeEpePcMonitor => "C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe"

MSCONFIG\startupreg: MobileDocuments => C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe

MSCONFIG\startupreg: PDF Complete => C:\Program Files (x86)\PDF Complete\pdfsty.exe

MSCONFIG\startupreg: Samsung PanelMgr => C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun

==================== Faulty Device Manager Devices =============

Name: ArcSoft Webcam Sharing Manager

Description: ArcSoft Webcam Sharing Manager

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: ArcSoft

Service: ARCVCAM

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

==================== Event log errors: =========================

Application errors:

==================

Error: (03/26/2014 09:43:50 PM) (Source: ESENT) (User: )

Description: taskhost (3332) WebCacheLocal: Error -1811 occurred while opening logfile C:\Users\Melissa\AppData\Local\Microsoft\Windows\WebCache\V01000F7.log.

Error: (03/26/2014 09:38:51 PM) (Source: Application Hang) (User: )

Description: The program taskmgr.exe version 6.1.7601.17514 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 21a8

Start Time: 01cf496591986284

Termination Time: 6

Application Path: C:\windows\system32\taskmgr.exe

Report Id: e30323e7-b558-11e3-b928-6431509bc592

Error: (03/26/2014 09:25:17 PM) (Source: Application Hang) (User: )

Description: The program chrome.exe version 33.0.1750.154 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 2204

Start Time: 01cf4963464c3029

Termination Time: 19

Application Path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Report Id: ff8b2397-b556-11e3-b928-6431509bc592

Error: (03/26/2014 09:19:55 PM) (Source: Application Hang) (User: )

Process ID: 1af4

Start Time: 01cf4962dbd29087

Termination Time: 0

Application Path: C:\windows\system32\taskmgr.exe

Report Id: 430b1e53-b556-11e3-b928-6431509bc592

Error: (03/25/2014 09:57:54 PM) (Source: Application Hang) (User: )

Process ID: 13e4

Start Time: 01cf489ee0ea46ee

Termination Time: 2

Application Path: C:\windows\system32\taskmgr.exe

Report Id: 5ac7f421-b492-11e3-b9c2-6431509bc592

Error: (03/25/2014 08:24:04 PM) (Source: Application Hang) (User: )

Process ID: 1460

Start Time: 01cf4891869b4eb6

Termination Time: 6

Application Path: C:\windows\system32\taskmgr.exe

Report Id: 3dcae26b-b485-11e3-b9d2-6431509bc592

Error: (03/24/2014 08:06:42 PM) (Source: Application Error) (User: )

Description: Faulting application name: Startup.exe, version: 11.5.0.593, time stamp: 0x49bc924a

Faulting module name: DIRAPI.dll, version: 11.5.0.593, time stamp: 0x49bc87c9

Exception code: 0xc0000005

Fault offset: 0x0003ea41

Faulting process id: 0x1180

Faulting application start time: 0xStartup.exe0

Faulting application path: Startup.exe1

Faulting module path: Startup.exe2

Report Id: Startup.exe3

Error: (03/24/2014 00:12:49 PM) (Source: SideBySide) (User: )

Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

A component version required by the application conflicts with another component version already active.

Conflicting components are:.

Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/20/2014 08:45:54 PM) (Source: Application Error) (User: )

Description: Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d672ee4

Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c92c

Exception code: 0xc0000005

Fault offset: 0x0000000000029fa9

Faulting process id: 0xbf4

Faulting application start time: 0xExplorer.EXE0

Faulting application path: Explorer.EXE1

Faulting module path: Explorer.EXE2

Report Id: Explorer.EXE3

Error: (03/10/2014 07:24:19 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 7200523

System errors:

=============

Error: (03/26/2014 09:46:43 PM) (Source: DCOM) (User: Melissa-HP)

Description: machine-defaultLocalActivation{3EEF301F-B596-4C0B-BD92-013BEAFCE793}{3EEF301F-B596-4C0B-BD92-013BEAFCE793}Melissa-HPMelissaS-1-5-21-3225065892-2875577131-3997705866-1002LocalHost (Using LRPC)

Error: (03/26/2014 09:42:32 PM) (Source: Service Control Manager) (User: )

Description: The SSPORT service failed to start due to the following error:

%%2

Error: (03/26/2014 09:42:32 PM) (Source: Service Control Manager) (User: )

Description: The MCSTRM service failed to start due to the following error:

%%2

Error: (03/26/2014 09:42:32 PM) (Source: Service Control Manager) (User: )

Description: The DgiVecp service failed to start due to the following error:

%%2

Error: (03/26/2014 09:42:26 PM) (Source: BTHUSB) (User: )

Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (03/26/2014 09:42:28 PM) (Source: EventLog) (User: )

Description: The previous system shutdown at 9:41:15 PM on ‎3/‎26/‎2014 was unexpected.

Error: (03/26/2014 09:08:44 PM) (Source: DCOM) (User: Melissa-HP)

Error: (03/26/2014 05:04:24 PM) (Source: DCOM) (User: Melissa-HP)

Error: (03/26/2014 04:59:48 PM) (Source: Service Control Manager) (User: )

Description: The SSPORT service failed to start due to the following error:

%%2

Error: (03/26/2014 04:59:48 PM) (Source: Service Control Manager) (User: )

Description: The MCSTRM service failed to start due to the following error:

%%2

Microsoft Office Sessions:

=========================

CodeIntegrity Errors:

===================================

Date: 2013-10-03 05:54:12.410

Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Glary Utilities 3\ProcObsrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-10-03 05:54:12.182

Date: 2013-01-01 17:40:43.981

Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-01-01 17:40:43.872

==================== Memory info ===========================

Percentage of memory in use: 61%

Total physical RAM: 4030.37 MB

Available physical RAM: 1563.56 MB

Total Pagefile: 8058.91 MB

Available Pagefile: 4979.67 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:275.89 GB) (Free:187.62 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive e: (HP_RECOVERY) (Fixed) (Total:16.9 GB) (Free:2.56 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive f: (HP_TOOLS) (Fixed) (Total:4.98 GB) (Free:2.13 GB) FAT32

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 4166D6A8)

Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=276 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=17 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=5 GB) - (Type=0C)

==================== End Of Log ============================

Run date: 2014-03-27 14:34:10

-----------------------------

14:34:10.482 OS Version: Windows x64 6.1.7601 Service Pack 1

14:34:10.482 Number of processors: 4 586 0x2A07

14:34:10.483 ComputerName: MELISSA-HP UserName: Melissa

14:34:12.049 Initialize success

14:37:31.855 AVAST engine defs: 14032700

14:37:58.219 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1

14:37:58.223 Disk 0 Vendor: TOSHIBA_ MH00 Size: 305245MB BusType: 3

14:37:58.372 Disk 0 MBR read successfully

14:37:58.375 Disk 0 MBR scan

14:37:58.398 Disk 0 Windows 7 default MBR code

14:37:58.401 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 300 MB offset 2048

14:37:58.432 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 282516 MB offset 616448

14:37:58.463 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 17305 MB offset 579209216

14:37:58.505 Disk 0 Partition 4 00 0C FAT32 LBA MSDOS5.0 5115 MB offset 614649856

14:37:58.599 Disk 0 scanning C:\windows\system32\drivers

14:38:10.213 Service scanning

14:38:44.196 Disk 0 MBR has been saved successfully to "C:\Users\Melissa\Desktop\MBR.dat"

14:38:44.221 The log file has been saved successfully to "C:\Users\Melissa\Desktop\aswMBR.txt"

Run date: 2014-03-27 14:40:21

-----------------------------

14:40:21.758 OS Version: Windows x64 6.1.7601 Service Pack 1

14:40:21.758 Number of processors: 4 586 0x2A07

14:40:21.760 ComputerName: MELISSA-HP UserName: Melissa

14:40:23.518 Initialize success

14:40:47.357 The log file has been saved successfully to "C:\Users\Melissa\Desktop\aswMBR.txt"

#4
pystryker

Posted 27 March 2014 - 06:51 PM

Trusted Helper

Malware Removal
3,912 posts

Thank you for your help :3

Hi You are quite welcome. :thumbsup:

The FRST log is incomplete. It looks like part of it wasn't selected or didn't survive being pasted. Please re-post the FRST log. No need to re-post the Additions log. Also, do you recognize or install this program on your machine: GigaClicks Crawler

I'm currently working up a fix for your machine and we can proceed as soon as I get the rest of the FRST log.

#5
mellybee

Posted 27 March 2014 - 08:15 PM

New Member

Topic Starter
Member
6 posts

I dont even know what that gigaclicks thing is, so no. Thanks again!

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014

Ran by Melissa (administrator) on MELISSA-HP on 27-03-2014 14:26:35

Running from C:\Users\Melissa\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)

Internet Explorer Version 11

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

(Validity Sensors, Inc.) C:\windows\system32\vcsFPService.exe

(DigitalPersona, Inc.) c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Hewlett-Packard Development Company, L.P) c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe

(DigitalPersona, Inc.) c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe

() C:\Users\Melissa\AppData\Local\GCC\Controller.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe

(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

(Microsoft Corporation) C:\windows\sysWOW64\wbem\wmiprvse.exe

(DigitalPersona, Inc.) c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

() C:\Users\Melissa\AppData\Local\GCC\Controller.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe

(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe

(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe

(Portrait Displays, Inc) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe

(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdiSdkHelperx64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe