Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

PUP.conduit.A and more? [Closed] [Solved]

Started by LESI , Jul 07 2014 09:11 PM

PUP conduitA

This topic is locked

#16
pystryker

Posted 15 July 2014 - 06:48 PM

Trusted Helper

Malware Removal
3,912 posts

Ok, thank you.

Let's run a scan for remnants and check for out of date programs.

Please disable your antivirus for the duration of my instructions. Don't forget to re-enable them after you have completed the steps.

Step 1: Scan with Malwarebytes

Please download Malwarebytes Anti-Malware to your desktop
Install the progamme and select update
Once it has updated select Settings > Detection and Protection
Tick Scan for rootkits

Go back to the Dashboard and select Scan Now

If threats are detected, click the Apply Actions button, MBAM will ask for a reboot.

On completion of the scan (or after the reboot), start MBAM,

Click History, then Application Logs, then check the Select box by the first Scan Log in the list.

Click View, then click Export, select text file and save to the desktop as MBAM.txt and post in your next reply.

Step 2: Scan with ESET Online Scanner

Please note: You can use Internet Explorer or Firefox for this step. Either browser used will have to be ran in admin mode.

Right click on either the Internet Explorer icon or the Firefox icon in the Start Menu or Quick Launch Bar on the Task bar and select Run as Administrator from the menu.

If you use Firefox, you will be prompted to download esetsmartinstaller_enu.exe. Please do so, then double click it to install it.

Please click on this link and then click the ESET Online Scanner bar ---->

Select the option YES, I accept the Terms of Use then click on Start
When prompted allow the Add-On/Active X to install.
Make sure that the option Remove found threats is NOT checked.
Make sure that the option Scan archives is checked.
Now click on Advanced Settings and select the following:
Scan for potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth Technology
Now click on Start
The virus signature database will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
When completed the Online Scan will begin automatically. The scan may take several hours.
Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
Now click on Finish
Use notepad to open the logfile located at C:\Program Files(x86)\ESET\EsetOnlineScanner\log.txt.
Copy and paste that log as a reply to this topic.

Step 3: SecurityCheck Scan

Download Security Check

by screen317 from here or here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
NOTE: If SecurityCheck aborts and you get the following message: UNSUPPORTED OPERATING SYSTEM! ABORTED! try rebooting the system and then run SecurityCheck again.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Things I need to see in your next post:

ESET Scan Log
MBAM Log
SecurityCheck Log

#17
pystryker

Posted 18 July 2014 - 03:23 PM

Trusted Helper

Malware Removal
3,912 posts

Hello

do you still require help?

#18
pystryker

Posted 19 July 2014 - 05:23 PM

Trusted Helper

Malware Removal
3,912 posts

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.

#19
LESI

Posted 21 July 2014 - 09:40 AM

Member

Topic Starter
Member
51 posts

Pystryker,

Thank you for reopening my topic. I didn't see page 2 so I posted in the wrong place. I still have that nasty PUP.Conduit.A
I performed MBAM two more times.
The webpages are very slow to load and surf
The chatting/typing in my chatrooms is very slow

I sure appreciate your help...I did post that the Chrome browser opening page reads as : http://BeyondOrganic...com/group/dinar
and below is the log for MBAM: Thank you so very much, LESI :wave:

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 7/18/2014

Scan Time: 10:27:41 AM

Logfile: MBAM.07.18.14.txt

Administrator: Yes

Version: 2.00.2.1012

Malware Database: v2014.07.18.06

Rootkit Database: v2014.07.17.01

License: Free

Malware Protection: Disabled

Malicious Website Protection: Disabled

Self-protection: Disabled

OS: Windows 8.1

CPU: x64

File System: NTFS

User: Martha

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 361579

Time Elapsed: 34 min, 14 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 0

(No malicious items detected)

Registry Values: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Folders: 0

(No malicious items detected)

Files: 1

PUP.Optional.Conduit.A, C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "homepage": "http://search.condui...49F281233&SSPV=",), Replaced,[c3de178996e50630a1628b4ce81c5ca4]

Physical Sectors: 0

(No malicious items detected)

(end)

#20
pystryker

Posted 21 July 2014 - 07:18 PM

Trusted Helper

Malware Removal
3,912 posts

Hi Lesi, you're quite welcome.

Let's run the ESET scan and see what it turns up. You say you still have the conduit pup? Is it in Chrome?

Please proceed with Step 2 in Post #16 and post the results when the scan is finished. :thumbsup:

Things I need to see in your next post

ESET Log

#21
LESI

Posted 22 July 2014 - 03:10 PM

Member

Topic Starter
Member
51 posts

Pystryker,

Glad you're back with me. I did the ESET scan...it found nothing.

Here it is. LESI :geek:

ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=96609ab176f50a4ab0f4da20fe9e06ea

# engine=19106

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2014-07-10 07:34:55

# local_time=2014-07-10 03:34:55 (-0500, Eastern Daylight Time)

# country="United States"

# lang=1033

# osver=6.2.9200 NT

# compatibility_mode_1='avast! Antivirus'

# compatibility_mode=783 16777213 100 95 0 0 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 0 2101217 0 0

# scanned=230055

# found=0

# cleaned=0

# scan_time=5089

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=96609ab176f50a4ab0f4da20fe9e06ea

# engine=19295

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2014-07-22 09:05:09

# local_time=2014-07-22 05:05:09 (-0500, Eastern Daylight Time)

# country="United States"

# lang=1033

# osver=6.2.9200 NT

# compatibility_mode_1='avast! Antivirus'

# compatibility_mode=783 16777213 100 95 259676 693096 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 750264 3186631 0 0

# scanned=198044

# found=0

# cleaned=0

# scan_time=11356

#22
pystryker

Posted 22 July 2014 - 09:06 PM

Trusted Helper

Malware Removal
3,912 posts

Glad you're back with me. I did the ESET scan...it found nothing.

The ESET log looks good. You say you still have conduit? Is it in Chrome? Let's take a look with SystemLook. :thumbsup:

Please download SystemLook from one of the links below and save it to your Desktop.

Download Mirror #1

Download Mirror #2

Right-click on SystemLook.exe (or double click to run it) and select Run as Administrator to start it.
Copy the content of the following quote-box(do not copy the word quote) into the main textfield:

:filefind
conduit

:folderfind
conduit

:Regfind
conduit

Click the Look button to start the scan.
When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your desktop entitled SystemLook.txt

Please let the scan run till completion. It can take some time as it will be searching the Registry.

Things I need to see in your next post:

SystemLook Log

#23
LESI

Posted 24 July 2014 - 06:39 AM

Member

Topic Starter
Member
51 posts

Pystryker, Ok, I had read the wrong instructions again, and did a MBAM, an ESET and a system check by mistake. :oops:

But then saw the correct instructions to run the SYSTEM LOOK. It took only a minute or two, where you said it could take some time. The log is below. I hope this is still ok. My videos are running in a way where they're stopping if I surf elsewhere. My typing is still slow in chatrooms. LESI :geek:

I really appreciate your help.

I'm also having a problem since downloading WIN 8.1 where the printer isn't working with the software. It says there is a connectivity issue. I removed all printer software & reinstalled the full printer software for my HP Photosmart C4280 All-In-One....to no avail. I've reset the printer, restarted the computer, used a different USB plug on the computer for the wire between the printer and the computer, and cannot seem to find the answer in the troubleshooting on the HP forums. Does this issue need to be addressed in another thread? Thank You.

SystemLook 30.07.11 by jpshortstuff

Log created at 08:28 on 24/07/2014 by Martha

Administrator - Elevation successful

========== filefind ==========

Searching for "conduit"

No files found.

========== folderfind ==========

Searching for "conduit"

No folders found.

========== Regfind ==========

Searching for "conduit"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]

"DisplayName"="Conduit Search"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]

"url1"="http://www.geekstogo...2#entry2418491"

[HKEY_USERS\S-1-5-21-1584447337-3020926857-578221619-1001\Software\Microsoft\Internet Explorer\SearchScopes]

"DisplayName"="Conduit Search"

[HKEY_USERS\S-1-5-21-1584447337-3020926857-578221619-1001\Software\Microsoft\Internet Explorer\TypedURLs]

"url1"="http://www.geekstogo...2#entry2418491"

-= EOF =-

Edited by LESI, 24 July 2014 - 11:12 AM.

#24
pystryker

Posted 24 July 2014 - 05:58 PM

Trusted Helper

Malware Removal
3,912 posts

Pystryker, Ok, I had read the wrong instructions again, and did a MBAM, an ESET and a system check by mistake. But then saw the correct instructions to run the SYSTEM LOOK. It took only a minute or two, where you said it could take some time. The log is below. I hope this is still ok. My videos are running in a way where they're stopping if I surf elsewhere. My typing is still slow in chatrooms. LESI I really appreciate your help.

No worries

You're quite welcome, it's my pleasure. :thumbsup:

I'm also having a problem since downloading WIN 8.1 where the printer isn't working with the software. It says there is a connectivity issue. I removed all printer software & reinstalled the full printer software for my HP Photosmart C4280 All-In-One....to no avail. I've reset the printer, restarted the computer, used a different USB plug on the computer for the wire between the printer and the computer, and cannot seem to find the answer in the troubleshooting on the HP forums. Does this issue need to be addressed in another thread? Thank You.

That's a bit out of my league, as my area of work is malware removal.

However, once we get your machine cleaned, we'll get you over to the appropriate forum and they'll help you out.

Let's take a look with a couple of different scanning tools and see if we can track down the slowness issues.

Please disable your antivirus program before running these steps. Don't forget to re-enable them afterwards.

Step 1: Scan with TDSSKiller

Please download TDSSKiller to the desktop.

Alternate download is here.

Right-click on TDSSKiller.exe and select Run as Administrator to start the program and follow the prompts.
When the main GUI(graphical user interface) window opens, click on Change Parameters
Under Additional options, select both Verify driver digital signatures & Detect TDLFS File System >> OK
Click on Start Scan, the scan will run.
When the scan has finished, if it finds anything please click on the drop down arrow next to Cure and select Skip
A Report will have been created by TDSSKiller in your root directory C:\
To find the log go to Start(Windows 7 Orb) > Computer > C: >> TDSSKiller.V.V.V.VV_DD.DD.YYYY_TT.TT.TT_log <-- The letters denote the version and date & time etc.
Post the contents of that log in your next reply please.

Note: Do not have TDSSKiller remove anything if found at this point in time!

Step 2: Scan with Farbar's Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. Please download the 32-bit version for your machine

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Place a check in the box marked Addition.txt
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
Please copy and paste both logs back here.

Things I need to see in your next post

TDSSKiller Log

FRST Log

Addition.txt Log

#25
LESI

Posted 24 July 2014 - 10:57 PM

Member

Topic Starter
Member
51 posts

Pystryker, :popcorn:

Okie dokie...I ran the TDSSKiller fine, but the FRST wouldn't allow me to download the 32 as they said it's incompatible with my OS so I ran the 64 bit. I hope this was ok. The 3 logs are below.

LESI PS The TDSSKiller didn't fit, so I'm putting that in a 2nd post.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014 01

Ran by Martha (administrator) on HP-ALLINONE on 25-07-2014 00:29:58

Running from C:\Users\Martha\Desktop

Platform: Windows 8.1 (X64) OS Language: English (United States)

Internet Explorer Version 11

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe

(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6844560 2013-11-19] (Realtek Semiconductor)

HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432 2014-07-04] (AVAST Software)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-08] (Hewlett-Packard)

HKU\S-1-5-21-1584447337-3020926857-578221619-1001\...\Run: [FreeScreenSharing] => C:\Users\Martha\AppData\Local\FreeScreenSharing\FreeScreenSharing.exe [2266104 2013-06-26] ()

HKU\S-1-5-21-1584447337-3020926857-578221619-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk

ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)

Startup: C:\Users\Martha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk

ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/...=AVASDF&PC=AV01

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK13/1

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPDSK13/1

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/...=AVASDF&PC=AV01

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...0TR&pc=HPDTDFJS

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...0TR&pc=HPDTDFJS

SearchScopes: HKLM - {84B29D74-CDD6-47A8-9ECE-278809800D63} URL = http://www.amazon.co...s={searchTerms}

SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.co...54371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/...=AVASDF&PC=AV01

SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.co...54371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...0TR&pc=HPDTDFJS

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...0TR&pc=HPDTDFJS

SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/...=AVASDF&PC=AV01

SearchScopes: HKCU - {84B29D74-CDD6-47A8-9ECE-278809800D63} URL =

SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.co...54371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)

Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)

Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76 192.168.1.1

FireFox:

========

FF ProfilePath: C:\Users\Martha\AppData\Roaming\Mozilla\Firefox\Profiles\ad89ajwx.default

FF DefaultSearchEngine: Microsoft (Bing)

FF SearchEngineOrder.1: Microsoft (Bing)

FF SelectedSearchEngine: Microsoft (Bing)

FF Homepage: hxxp://www.msn.com/?pc=AV01

FF Keyword.URL: hxxp://www.bing.com/search

FF Plugin: @java.com/DTPlugin,version=10.65.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @startmeeting.com/launcher - C:\Users\Martha\AppData\Local\SMPlugins\npsmlauncher.dll (Start Meeting)

FF Plugin HKCU: gamevenus.com/CertifiedBrowser - C:\Users\Martha\AppData\Roaming\GVU Technologies\YouTubeDownloaderConverter\npCertifiedBrowser.dll (GVU Technologies)

FF Plugin HKCU: hp.com/HPDetect - C:\Users\Martha\AppData\Roaming\HewlettPackard\HPDetect\1.0.0.0\npHPDetect.dll (HP)

FF SearchPlugin: C:\Users\Martha\AppData\Roaming\Mozilla\Firefox\Profiles\ad89ajwx.default\searchplugins\bing-avast.xml

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]

FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\Firefox\[email protected]

FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\Firefox\[email protected] [2014-01-13]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\Firefox\[email protected]

FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\Firefox\[email protected] [2014-01-13]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-07-04]

FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome:

=======

CHR HomePage: hxxp://search.conduit.com/?ctid=CT3321972&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=5&UP=SP2360F13D-99DE-423C-9AFA-E7849F281233&SSPV=

CHR StartupUrls: "hxxp://beyondorganics.ning.com/group/dinar"

CHR DefaultSearchKeyword: ixquick.com

CHR DefaultNewTabURL:

CHR Extension: (Google Docs) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-15]

CHR Extension: (Google Drive) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-15]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-21]

CHR Extension: (YouTube) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-15]

CHR Extension: (Google Search) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-15]

CHR Extension: (LastPass: Free Password Manager) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-04-10]

CHR Extension: (Skype Click to Call) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-02-14]

CHR Extension: (Google Wallet) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-15]

CHR Extension: (Gmail) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-15]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-04]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-04] (AVAST Software)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2014-01-13] (Freemake) [File not signed]

R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-01-13] (Ellora Assets Corp.) [File not signed]

R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]

R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-07-19] (Hewlett-Packard)

S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]

S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]

S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-06-19] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-06-19] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-06-19] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-04] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-04] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-04] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-04] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-04] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-04] (AVAST Software)

S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-04] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-04] ()

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows ® Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows ® Win 7 DDK provider)

R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-06-19] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-25 00:29 - 2014-07-25 00:31 - 00022279 _____ () C:\Users\Martha\Desktop\FRST.txt

2014-07-25 00:22 - 2014-07-25 00:22 - 01084416 _____ (Farbar) C:\Users\Martha\Downloads\FRST.exe

2014-07-25 00:14 - 2014-07-25 00:14 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Martha\Downloads\tdsskiller (2).exe

2014-07-24 10:01 - 2014-07-24 10:01 - 00001074 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR Registration.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00001343 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00001337 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00001179 _____ () C:\Users\Public\Desktop\Shop for HP Supplies.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00000000 ____D () C:\ProgramData\HP Product Assistant

2014-07-24 09:47 - 2014-07-24 09:49 - 258325536 _____ () C:\Users\Martha\Downloads\PS_AIO_C4200_NonNet_Full_Win_WW_140_404 (2).exe

2014-07-24 08:28 - 2014-07-24 08:33 - 00001924 _____ () C:\Users\Martha\Downloads\SystemLook.txt

2014-07-24 08:27 - 2014-07-24 08:27 - 00165376 _____ () C:\Users\Martha\Downloads\SystemLook_x64.exe

2014-07-24 08:23 - 2014-07-24 08:23 - 00854390 _____ () C:\Users\Martha\Downloads\SecurityCheck (1).exe

2014-07-23 18:24 - 2014-07-23 18:24 - 00454968 _____ () C:\Users\Martha\Desktop\MBAM.07.23.14.one

2014-07-22 18:35 - 2014-07-24 08:57 - 00003176 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForMartha

2014-07-22 18:35 - 2014-07-24 08:57 - 00000360 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForMartha.job

2014-07-22 13:46 - 2014-07-22 13:46 - 02347384 _____ (ESET) C:\Users\Martha\Downloads\esetsmartinstaller_enu (1).exe

2014-07-19 01:33 - 2014-07-19 01:33 - 05017600 _____ () C:\Users\Martha\Downloads\HPSupportSolutionsFramework-11.50.0031.msi

2014-07-19 00:53 - 2014-07-25 00:28 - 00003942 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A29522CF-DB1F-4DA9-A129-EDE5E9A5699D}

2014-07-19 00:53 - 2014-07-19 00:53 - 00000000 __SHD () C:\Users\Martha\AppData\Local\EmieUserList

2014-07-19 00:53 - 2014-07-19 00:53 - 00000000 __SHD () C:\Users\Martha\AppData\Local\EmieSiteList

2014-07-19 00:44 - 2014-07-24 10:07 - 00002345 _____ () C:\Users\Public\Desktop\Add a Device - Photosmart C4200 Series.lnk

2014-07-19 00:26 - 2014-07-19 02:30 - 00188017 ____N () C:\WINDOWS\hpoins13.dat.temp

2014-07-19 00:26 - 2012-09-26 09:18 - 00000462 ____N () C:\WINDOWS\hpomdl13.dat.temp

2014-07-19 00:21 - 2014-07-19 00:23 - 258325536 _____ () C:\Users\Martha\Downloads\PS_AIO_C4200_NonNet_Full_Win_WW_140_404 (1).exe

2014-07-18 12:23 - 2014-07-18 12:23 - 00003208 _____ () C:\WINDOWS\System32\Tasks\{C584B8BE-8B36-452E-95B9-89CC4F4F9F5F}

2014-07-18 12:13 - 2014-07-18 12:13 - 02938144 _____ (LionSea Software co., ltd ) C:\Users\Martha\Downloads\setup.exe

2014-07-18 12:08 - 2014-07-18 12:08 - 00001342 _____ () C:\Users\Martha\Desktop\MBAM.07.18.14.txt

2014-07-16 16:46 - 2014-07-16 16:45 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe

2014-07-16 16:46 - 2014-07-16 16:45 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe

2014-07-16 16:46 - 2014-07-16 16:45 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe

2014-07-16 16:46 - 2014-07-16 16:45 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2014-07-16 16:45 - 2014-07-16 16:45 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-16 16:44 - 2014-07-16 16:45 - 29420456 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-7u65-windows-i586.exe

2014-07-16 16:44 - 2014-07-16 16:45 - 29420456 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-7u65-windows-i586 (1).exe

2014-07-16 16:37 - 2014-07-16 16:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-16 16:37 - 2014-07-16 16:36 - 00319912 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe

2014-07-16 16:37 - 2014-07-16 16:36 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe

2014-07-16 16:37 - 2014-07-16 16:36 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe

2014-07-16 16:37 - 2014-07-16 16:36 - 00111016 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll

2014-07-16 16:36 - 2014-07-16 16:36 - 31012264 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-7u65-windows-x64.exe

2014-07-16 16:36 - 2014-07-16 16:36 - 00000000 ____D () C:\Program Files\Java

2014-07-14 23:37 - 2014-07-23 11:28 - 00000000 ____D () C:\Users\Martha\Desktop\CarePlusMore

2014-07-14 19:32 - 2014-07-25 00:28 - 00000000 ____D () C:\Users\Martha\Desktop\FRST-OlderVersion

2014-07-12 00:44 - 2014-07-25 00:28 - 02093568 _____ (Farbar) C:\Users\Martha\Desktop\FRST64.exe

2014-07-12 00:39 - 2014-07-12 00:39 - 02084864 _____ (Farbar) C:\Users\Martha\Downloads\FRST64 (4).exe

2014-07-11 01:35 - 2014-07-11 01:35 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Martha\Downloads\tdsskiller (1).exe

2014-07-11 01:34 - 2014-07-11 01:34 - 02084864 _____ (Farbar) C:\Users\Martha\Downloads\FRST64 (3).exe

2014-07-11 01:24 - 2014-07-11 01:25 - 00049580 _____ () C:\Users\Martha\Downloads\Addition.txt

2014-07-11 01:21 - 2014-07-11 01:25 - 00141201 _____ () C:\Users\Martha\Downloads\FRST.txt

2014-07-11 01:20 - 2014-07-25 00:30 - 00000000 ____D () C:\FRST

2014-07-11 01:19 - 2014-07-11 01:19 - 02084864 _____ (Farbar) C:\Users\Martha\Downloads\FRST64 (2).exe

2014-07-11 01:18 - 2014-07-11 01:18 - 02084864 _____ (Farbar) C:\Users\Martha\Downloads\FRST64.exe

2014-07-11 01:18 - 2014-07-11 01:18 - 02084864 _____ (Farbar) C:\Users\Martha\Downloads\FRST64 (1).exe

2014-07-11 01:03 - 2014-07-11 01:04 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Martha\Downloads\tdsskiller.exe

2014-07-10 10:25 - 2014-07-10 10:25 - 00854390 _____ () C:\Users\Martha\Downloads\SecurityCheck.exe

2014-07-10 01:59 - 2014-07-10 01:59 - 02347384 _____ (ESET) C:\Users\Martha\Downloads\esetsmartinstaller_enu(3).exe

2014-07-10 01:58 - 2014-07-10 01:58 - 02347384 _____ (ESET) C:\Users\Martha\Downloads\esetsmartinstaller_enu(2).exe

2014-07-10 01:56 - 2014-07-10 01:56 - 02347384 _____ (ESET) C:\Users\Martha\Downloads\esetsmartinstaller_enu(1).exe

2014-07-10 01:26 - 2014-06-26 16:55 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2014-07-10 01:26 - 2014-06-26 16:55 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-09 19:31 - 2014-04-13 23:29 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll

2014-07-09 19:29 - 2014-07-09 19:29 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel

2014-07-09 19:07 - 2014-06-18 21:39 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-07-09 19:07 - 2014-06-18 20:16 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-07-09 19:07 - 2014-06-18 19:46 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2014-07-09 19:07 - 2014-06-18 18:57 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2014-07-09 19:07 - 2014-06-16 18:26 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe

2014-07-09 19:07 - 2014-06-16 18:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe

2014-07-09 19:07 - 2014-06-06 10:20 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-07-09 19:06 - 2014-06-18 20:48 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-07-09 19:06 - 2014-06-18 20:09 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2014-07-09 19:06 - 2014-06-18 19:51 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-07-09 19:06 - 2014-06-18 19:50 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2014-07-09 19:06 - 2014-06-18 19:48 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2014-07-09 19:06 - 2014-06-18 19:39 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-07-09 19:06 - 2014-06-18 19:33 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-07-09 19:06 - 2014-06-18 19:32 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-07-09 19:06 - 2014-06-18 19:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-07-09 19:06 - 2014-06-18 19:12 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2014-07-09 19:06 - 2014-06-18 18:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2014-07-09 19:06 - 2014-06-18 18:58 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-07-09 19:06 - 2014-06-18 18:58 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2014-07-09 19:06 - 2014-06-18 18:52 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-07-09 19:06 - 2014-06-18 18:51 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-07-09 19:06 - 2014-06-18 18:49 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-07-09 19:06 - 2014-06-18 18:45 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-07-09 19:06 - 2014-06-18 18:35 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-07-09 19:06 - 2014-06-18 18:34 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-07-09 19:06 - 2014-06-18 18:15 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-07-09 19:06 - 2014-06-18 18:13 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-07-09 19:06 - 2014-06-18 18:09 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-07-09 19:06 - 2014-06-18 18:07 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-07-09 19:06 - 2014-05-29 23:03 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2014-07-09 19:06 - 2014-05-29 08:02 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2014-07-09 19:06 - 2014-05-29 03:55 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll

2014-07-09 19:06 - 2014-05-29 02:40 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll

2014-07-09 19:06 - 2014-05-29 02:37 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll

2014-07-09 19:06 - 2014-05-29 01:34 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll

2014-07-09 19:06 - 2014-05-29 01:27 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2014-07-09 19:05 - 2014-06-30 18:45 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll

2014-07-09 19:05 - 2014-06-28 03:48 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2014-07-09 19:05 - 2014-06-28 03:07 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2014-07-09 19:05 - 2014-06-06 09:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll

2014-07-09 19:05 - 2014-06-06 08:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll

2014-07-09 19:05 - 2014-05-31 06:07 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2014-07-09 19:05 - 2014-05-31 06:06 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2014-07-09 19:05 - 2014-05-30 23:40 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2014-07-09 19:05 - 2014-05-30 23:30 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2014-07-09 19:05 - 2014-05-30 23:12 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-09 19:05 - 2014-05-30 23:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2014-07-09 19:05 - 2014-05-30 23:03 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2014-07-09 19:05 - 2014-05-30 23:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-09 19:05 - 2014-05-30 22:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2014-07-09 19:05 - 2014-05-30 22:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2014-07-09 19:05 - 2014-05-30 22:48 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2014-07-09 19:05 - 2014-05-30 22:37 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll

2014-07-09 19:05 - 2014-05-30 22:36 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll

2014-07-09 19:05 - 2014-05-30 22:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll

2014-07-09 19:05 - 2014-05-30 22:32 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll

2014-07-09 19:00 - 2014-07-09 19:00 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe

2014-07-09 09:03 - 2014-07-09 09:03 - 01016261 _____ (Thisisu) C:\Users\Martha\Downloads\JRT (2).exe

2014-07-09 01:59 - 2014-07-09 01:59 - 01016261 _____ (Thisisu) C:\Users\Martha\Downloads\JRT (1).exe

2014-07-09 01:28 - 2014-07-09 01:28 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-07-09 01:26 - 2014-07-09 01:26 - 01016261 _____ (Thisisu) C:\Users\Martha\Downloads\JRT.exe

2014-07-09 01:25 - 2014-07-09 01:25 - 01348263 _____ () C:\Users\Martha\Downloads\AdwCleaner (2).exe

2014-07-09 01:23 - 2014-07-09 01:23 - 00003189 _____ () C:\Users\Martha\Desktop\AdwCleaner.07.09.14[S0].txt

2014-07-09 01:10 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll

2014-07-09 01:04 - 2014-07-09 01:15 - 00000000 ____D () C:\AdwCleaner

2014-07-09 01:03 - 2014-07-09 01:03 - 01348263 _____ () C:\Users\Martha\Downloads\AdwCleaner (1).exe

2014-07-09 00:51 - 2014-07-09 00:51 - 00000000 ____D () C:\_OTL

2014-07-07 23:08 - 2014-07-07 23:08 - 00090754 _____ () C:\Users\Martha\Downloads\Extras.Txt

2014-07-07 23:05 - 2014-07-07 23:05 - 00151692 _____ () C:\Users\Martha\Downloads\OTL.Txt

2014-07-07 22:38 - 2014-07-07 22:38 - 00602112 _____ (OldTimer Tools) C:\Users\Martha\Desktop\OTL.exe

2014-07-04 00:39 - 2014-07-04 00:39 - 00000000 ____D () C:\Users\Martha\AppData\Roaming\AVAST Software

2014-07-04 00:38 - 2014-07-04 12:38 - 00427360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys

2014-07-04 00:38 - 2014-07-04 00:38 - 01041168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys

2014-07-04 00:38 - 2014-07-04 00:38 - 00307344 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

2014-07-04 00:38 - 2014-07-04 00:38 - 00224896 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys

2014-07-04 00:38 - 2014-07-04 00:38 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys

2014-07-04 00:38 - 2014-07-04 00:38 - 00092008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys

2014-07-04 00:38 - 2014-07-04 00:38 - 00079184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys

2014-07-04 00:38 - 2014-07-04 00:38 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys

2014-07-04 00:38 - 2014-07-04 00:38 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr

2014-07-04 00:38 - 2014-07-04 00:38 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys

2014-07-04 00:38 - 2014-07-04 00:38 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update

2014-07-04 00:38 - 2014-07-04 00:38 - 00001984 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk

2014-07-04 00:38 - 2014-07-04 00:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast

2014-07-04 00:36 - 2014-07-04 00:36 - 00000000 ____D () C:\Program Files\AVAST Software

2014-07-04 00:33 - 2014-07-04 00:36 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-07-04 00:32 - 2014-07-04 00:33 - 91906368 _____ (AVAST Software) C:\Users\Martha\Downloads\avast_free_antivirus_setup.exe

2014-07-02 00:08 - 2014-07-02 00:08 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-02 00:07 - 2014-07-02 00:07 - 02347384 _____ (ESET) C:\Users\Martha\Downloads\esetsmartinstaller_enu.exe

2014-07-01 18:08 - 2014-07-23 16:34 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2014-07-01 18:07 - 2014-07-01 18:07 - 00001116 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-01 18:07 - 2014-07-01 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-01 18:07 - 2014-07-01 18:07 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-01 18:07 - 2014-07-01 18:07 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-01 18:07 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2014-07-01 18:07 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2014-07-01 18:07 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-07-01 18:05 - 2014-07-01 18:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martha\Downloads\mbam-setup-2.0.2.1012.exe

2014-07-01 17:46 - 2014-07-01 17:46 - 00315392 _____ (Malwarebytes Corporation) C:\Users\Martha\Downloads\mbam-clean-2.0.2.0.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-25 00:32 - 2013-10-14 14:07 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1584447337-3020926857-578221619-1001

2014-07-25 00:31 - 2014-07-25 00:29 - 00022279 _____ () C:\Users\Martha\Desktop\FRST.txt

2014-07-25 00:30 - 2014-07-11 01:20 - 00000000 ____D () C:\FRST

2014-07-25 00:29 - 2014-06-19 19:49 - 01174055 _____ () C:\WINDOWS\WindowsUpdate.log

2014-07-25 00:28 - 2014-07-19 00:53 - 00003942 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A29522CF-DB1F-4DA9-A129-EDE5E9A5699D}

2014-07-25 00:28 - 2014-07-14 19:32 - 00000000 ____D () C:\Users\Martha\Desktop\FRST-OlderVersion

2014-07-25 00:28 - 2014-07-12 00:44 - 02093568 _____ (Farbar) C:\Users\Martha\Desktop\FRST64.exe

2014-07-25 00:27 - 2013-10-15 01:34 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-25 00:27 - 2013-10-15 01:34 - 00000922 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-25 00:27 - 2013-10-15 01:34 - 00000918 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-25 00:22 - 2014-07-25 00:22 - 01084416 _____ (Farbar) C:\Users\Martha\Downloads\FRST.exe

2014-07-25 00:14 - 2014-07-25 00:14 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Martha\Downloads\tdsskiller (2).exe

2014-07-25 00:11 - 2013-10-15 00:47 - 00000000 ____D () C:\Users\Martha\AppData\Roaming\Skype

2014-07-25 00:00 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-07-24 23:38 - 2014-02-12 02:29 - 00000364 _____ () C:\WINDOWS\Tasks\HP Photo Creations Communicator.job

2014-07-24 17:11 - 2014-06-19 20:24 - 00000000 __RDO () C:\Users\Martha\OneDrive

2014-07-24 10:08 - 2013-10-17 21:39 - 00188017 _____ () C:\WINDOWS\hpoins13.dat

2014-07-24 10:08 - 2013-10-17 21:39 - 00017850 _____ () C:\ProgramData\hpzinstall.log

2014-07-24 10:07 - 2014-07-19 00:44 - 00002345 _____ () C:\Users\Public\Desktop\Add a Device - Photosmart C4200 Series.lnk

2014-07-24 10:01 - 2014-07-24 10:01 - 00001074 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR Registration.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00001343 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00001337 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00001179 _____ () C:\Users\Public\Desktop\Shop for HP Supplies.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00000000 ____D () C:\ProgramData\HP Product Assistant

2014-07-24 10:00 - 2013-10-17 21:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

2014-07-24 10:00 - 2013-10-17 21:44 - 00000000 ____D () C:\Program Files (x86)\HP

2014-07-24 10:00 - 2013-10-17 21:32 - 00000000 ____D () C:\ProgramData\HP

2014-07-24 09:49 - 2014-07-24 09:47 - 258325536 _____ () C:\Users\Martha\Downloads\PS_AIO_C4200_NonNet_Full_Win_WW_140_404 (2).exe

2014-07-24 08:57 - 2014-07-22 18:35 - 00003176 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForMartha

2014-07-24 08:57 - 2014-07-22 18:35 - 00000360 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForMartha.job

2014-07-24 08:33 - 2014-07-24 08:28 - 00001924 _____ () C:\Users\Martha\Downloads\SystemLook.txt

2014-07-24 08:27 - 2014-07-24 08:27 - 00165376 _____ () C:\Users\Martha\Downloads\SystemLook_x64.exe

2014-07-24 08:23 - 2014-07-24 08:23 - 00854390 _____ () C:\Users\Martha\Downloads\SecurityCheck (1).exe

2014-07-24 08:14 - 2014-03-14 08:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2014-07-24 08:09 - 2014-03-14 08:32 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-07-24 08:09 - 2014-03-14 08:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-07-23 18:24 - 2014-07-23 18:24 - 00454968 _____ () C:\Users\Martha\Desktop\MBAM.07.23.14.one

2014-07-23 16:34 - 2014-07-01 18:08 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2014-07-23 13:00 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-07-23 11:28 - 2014-07-14 23:37 - 00000000 ____D () C:\Users\Martha\Desktop\CarePlusMore

2014-07-22 18:45 - 2014-06-19 19:17 - 00000000 ____D () C:\ProgramData\Hewlett-Packard

2014-07-22 18:42 - 2013-08-22 10:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-07-22 18:41 - 2014-03-18 05:54 - 00064222 _____ () C:\WINDOWS\PFRO.log

2014-07-22 18:29 - 2013-08-22 09:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI

2014-07-22 17:30 - 2013-11-19 17:14 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log

2014-07-22 17:29 - 2013-11-19 17:14 - 00000000 _____ () C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt

2014-07-22 17:18 - 2013-08-22 10:44 - 00423408 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-07-22 13:46 - 2014-07-22 13:46 - 02347384 _____ (ESET) C:\Users\Martha\Downloads\esetsmartinstaller_enu (1).exe

2014-07-22 12:10 - 2013-10-15 00:47 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-07-19 02:31 - 2014-02-12 02:55 - 00002026 _____ () C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk

2014-07-19 02:30 - 2014-07-19 00:26 - 00188017 ____N () C:\WINDOWS\hpoins13.dat.temp

2014-07-19 01:33 - 2014-07-19 01:33 - 05017600 _____ () C:\Users\Martha\Downloads\HPSupportSolutionsFramework-11.50.0031.msi

2014-07-19 01:23 - 2013-10-17 22:05 - 00000000 ____D () C:\Users\Martha\AppData\Roaming\HpUpdate

2014-07-19 00:53 - 2014-07-19 00:53 - 00000000 __SHD () C:\Users\Martha\AppData\Local\EmieUserList

2014-07-19 00:53 - 2014-07-19 00:53 - 00000000 __SHD () C:\Users\Martha\AppData\Local\EmieSiteList

2014-07-19 00:23 - 2014-07-19 00:21 - 258325536 _____ () C:\Users\Martha\Downloads\PS_AIO_C4200_NonNet_Full_Win_WW_140_404 (1).exe

2014-07-18 12:23 - 2014-07-18 12:23 - 00003208 _____ () C:\WINDOWS\System32\Tasks\{C584B8BE-8B36-452E-95B9-89CC4F4F9F5F}

2014-07-18 12:13 - 2014-07-18 12:13 - 02938144 _____ (LionSea Software co., ltd ) C:\Users\Martha\Downloads\setup.exe

2014-07-18 12:08 - 2014-07-18 12:08 - 00001342 _____ () C:\Users\Martha\Desktop\MBAM.07.18.14.txt

2014-07-16 16:46 - 2013-10-15 13:43 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-16 16:45 - 2014-07-16 16:46 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe

2014-07-16 16:45 - 2014-07-16 16:46 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe

2014-07-16 16:45 - 2014-07-16 16:46 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe

2014-07-16 16:45 - 2014-07-16 16:46 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2014-07-16 16:45 - 2014-07-16 16:45 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-16 16:45 - 2014-07-16 16:44 - 29420456 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-7u65-windows-i586.exe

2014-07-16 16:45 - 2014-07-16 16:44 - 29420456 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-7u65-windows-i586 (1).exe

2014-07-16 16:37 - 2014-07-16 16:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-16 16:36 - 2014-07-16 16:37 - 00319912 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe

2014-07-16 16:36 - 2014-07-16 16:37 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe

2014-07-16 16:36 - 2014-07-16 16:37 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe

2014-07-16 16:36 - 2014-07-16 16:37 - 00111016 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll

2014-07-16 16:36 - 2014-07-16 16:36 - 31012264 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-7u65-windows-x64.exe

2014-07-16 16:36 - 2014-07-16 16:36 - 00000000 ____D () C:\Program Files\Java

2014-07-12 00:39 - 2014-07-12 00:39 - 02084864 _____ (Farbar) C:\Users\Martha\Downloads\FRST64 (4).exe

2014-07-11 01:35 - 2014-07-11 01:35 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Martha\Downloads\tdsskiller (1).exe

2014-07-11 01:34 - 2014-07-11 01:34 - 02084864 _____ (Farbar) C:\Users\Martha\Downloads\FRST64 (3).exe

2014-07-11 01:25 - 2014-07-11 01:24 - 00049580 _____ () C:\Users\Martha\Downloads\Addition.txt

2014-07-11 01:25 - 2014-07-11 01:21 - 00141201 _____ () C:\Users\Martha\Downloads\FRST.txt

2014-07-11 01:19 - 2014-07-11 01:19 - 02084864 _____ (Farbar) C:\Users\Martha\Downloads\FRST64 (2).exe

2014-07-11 01:18 - 2014-07-11 01:18 - 02084864 _____ (Farbar) C:\Users\Martha\Downloads\FRST64.exe

2014-07-11 01:18 - 2014-07-11 01:18 - 02084864 _____ (Farbar) C:\Users\Martha\Downloads\FRST64 (1).exe

2014-07-11 01:04 - 2014-07-11 01:03 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Martha\Downloads\tdsskiller.exe

2014-07-10 10:25 - 2014-07-10 10:25 - 00854390 _____ () C:\Users\Martha\Downloads\SecurityCheck.exe

2014-07-10 04:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\rescache

2014-07-10 01:59 - 2014-07-10 01:59 - 02347384 _____ (ESET) C:\Users\Martha\Downloads\esetsmartinstaller_enu(3).exe

2014-07-10 01:58 - 2014-07-10 01:58 - 02347384 _____ (ESET) C:\Users\Martha\Downloads\esetsmartinstaller_enu(2).exe

2014-07-10 01:56 - 2014-07-10 01:56 - 02347384 _____ (ESET) C:\Users\Martha\Downloads\esetsmartinstaller_enu(1).exe

2014-07-10 01:56 - 2014-05-09 14:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-07-10 01:22 - 2013-08-22 11:36 - 00000000 ___RD () C:\WINDOWS\ToastData

2014-07-10 01:22 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-10 01:22 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-10 01:22 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\WinStore

2014-07-09 19:42 - 2012-07-26 03:59 - 00000000 ____D () C:\WINDOWS\CbsTemp

2014-07-09 19:40 - 2013-10-15 18:53 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-07-09 19:39 - 2013-10-16 02:04 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-07-09 19:35 - 2013-10-16 02:04 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-07-09 19:35 - 2013-08-22 09:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM

2014-07-09 19:30 - 2014-03-18 05:45 - 00000000 ____D () C:\Program Files\Windows Journal