Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

PUP.conduit.A and more? [Closed] [Solved]

Started by LESI , Jul 07 2014 09:11 PM

PUP conduitA

This topic is locked

#31
pystryker

Posted 27 July 2014 - 05:28 AM

Trusted Helper

Malware Removal
3,912 posts

Here's my MBAM log. Looks good! Although, you want to know something? I'm stumped because my webpages took an extremely long time to load, and the typing in the chats so slow that I've been using another person's computer. I hope you have some tricks up your sleeve. LESI

Agreed, that MBAM log looks good.

Let's run SecurityCheck to see if you have any out of date programs on your machine. Once we check that and update any programs needed, as your machine is malware free, we'll have the techs over in the Hardware Forum check your hardware and make sure that you machine doesn't have hardware issues.

Download Security Check

by screen317 from here or here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Things I need to see in your next post

SecurityCheck Log

#32
LESI

Posted 28 July 2014 - 06:18 AM

Member

Topic Starter
Member
51 posts

Pystryker,

Big thunderstorm last night, so just did the job this morning!

Thank You, LESI

Results of screen317's Security Check version 0.99.86

x64 (UAC is enabled)

Internet Explorer 11

``````````````Antivirus/Firewall Check:``````````````

Windows Firewall Enabled!

Windows Defender

avast! Antivirus

Antivirus out of date!

`````````Anti-malware/Other Utilities Check:`````````

Java 7 Update 65

Adobe Reader XI

Mozilla Firefox (29.0)

Google Chrome 35.0.1916.153

Google Chrome 36.0.1985.125

````````Process Check: objlist.exe by Laurent````````

AVAST Software Avast AvastSvc.exe

AVAST Software Avast AvastUI.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C: %

````````````````````End of Log``````````````````````

#33
pystryker

Posted 28 July 2014 - 06:26 PM

Trusted Helper

Malware Removal
3,912 posts

Big thunderstorm last night, so just did the job this morning!

Thank You, LESI

No worries, I understand.

and you are quite welcome. :thumbsup:

Great news, your logs are CLEAN! :thumbsup:

but we still have a few things we need to address namely:

I need to remove the tools we installed on your machine.
We also have some programs on your machine that need updating to help protect you in the future.
I'll also provide a link to the Hardware Support forum so they can give your machine a checkup.

Step 1: Tool Removal with Delfix and Creation of a clean restore point

Download Delfix from here
Ensure Remove disinfection tools is ticked
Also tick:
- Create registry backup
- Purge system restore
Click Run

The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply.

You can uninstall ESET Online Scanner at this time.

I recommend keeping Malwarebytes Anti-Malware installed. Make sure to update it and run it at least once a week. If it finds things such as PUP's (Potentially Unwanted Programs) you can delete those with no worries. However, if it finds something like a trojan, come see us.

Step 2: Update Avast Antivirus and Installation of FileHippo

Avast anti-virus needs updating. Please update it by following the instructions below.

Right click on the Avast orb in your try and select Open Avast user interface.
Then click on Settings and then Update.
From there you can update both the program (if necessary) and the virus definitions.

Keeping your software updated

Another weapon against malicious programs and viruses is to keeping other programs updated. There are several programs out there that can check for out of date programs on your computer. One is Filehippo. You can run this on a weekly or monthly basis to check your programs for updates and then it will provide a link for you to download them.

Download Filehippo Updatechecker

Step 3: Tips, Information, Optional Unchecky Installation and Link to Hardware Forum

Watch what you open in your emails. If you get an email from an unknown source with any attached files, do not open it.

Be careful of the websites you visit.

When installing new programs, don't be "click happy" and click through the screens. Many programs come with adware in them and are set to install them by default. Several programs require that you uncheck or select no to prevent the installation. Take you time and read each screen as you go.

To help protect yourself while on the web, I recommend you read How did I get infected in the first place?

Installation of Unchecky

This is a very good little program that will automatically uncheck any boxes during a software installation. This helps prevent the software from installing any malware that is by default checked while the program is being installed.

Click here to be taken to Unchecky.com

Click the very large Download button.

Click Save

Once downloaded, double click the program (Vista, Win 7, and 8, right click and Run as Administrator)

Once open, click the Install button.

Then click Finish

Unchecky is now installed and will help you keep unwanted check boxes unchecked. :thumbsup:

Link to Hardware Forum

Please click the link below to go to the Hardware Forum. Once there, start a new topic describing the problem and let them know that your machine was just cleaned in the Virus, Spyware Malware Removal forum.

http://www.geekstogo...nd-peripherals/

#34
LESI

Posted 28 July 2014 - 08:55 PM

Member

Topic Starter
Member
51 posts

Pystryker,

Thank you for all this help. I feel so much relief and I really enjoyed the process. You mentioned sending me to get help with my printer software, and getting the printer connectivity issue resolved in another location. Where do I go for that?

My log is below.

I'd like to donate to you...in case I can't find that location, please tell me where to find the link to do so.

Blessings, LESI

# DelFix v10.7 - Logfile created 28/07/2014 at 22:25:36

# Updated 27/04/2014 by Xplode

# Username : Martha - HP-ALLINONE

# Operating System : Windows 8.1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\_OTL

Deleted : C:\FRST

Deleted : C:\AdwCleaner

Deleted : C:\Users\Martha\Desktop\FRST-OlderVersion

Deleted : C:\AdwCleaner[S1].txt

Deleted : C:\TDSSKiller.3.0.0.40_11.07.2014_01.04.13_log.txt

Deleted : C:\TDSSKiller.3.0.0.40_25.07.2014_00.14.21_log.txt

Deleted : C:\Users\Martha\Desktop\Addition.txt

Deleted : C:\Users\Martha\Desktop\AdwCleaner.07.09.14[S0].txt

Deleted : C:\Users\Martha\Desktop\FRST.txt

Deleted : C:\Users\Martha\Desktop\FRST64.exe

Deleted : C:\Users\Martha\Desktop\OTL.exe

Deleted : C:\Users\Martha\Downloads\Addition.txt

Deleted : C:\Users\Martha\Downloads\AdwCleaner (1).exe

Deleted : C:\Users\Martha\Downloads\AdwCleaner (2).exe

Deleted : C:\Users\Martha\Downloads\adwcleaner.exe

Deleted : C:\Users\Martha\Downloads\esetsmartinstaller_enu (1).exe

Deleted : C:\Users\Martha\Downloads\esetsmartinstaller_enu(1).exe

Deleted : C:\Users\Martha\Downloads\esetsmartinstaller_enu(2).exe

Deleted : C:\Users\Martha\Downloads\esetsmartinstaller_enu(3).exe

Deleted : C:\Users\Martha\Downloads\esetsmartinstaller_enu.exe

Deleted : C:\Users\Martha\Downloads\Extras.Txt

Deleted : C:\Users\Martha\Downloads\FRST.exe

Deleted : C:\Users\Martha\Downloads\FRST.txt

Deleted : C:\Users\Martha\Downloads\FRST64 (1).exe

Deleted : C:\Users\Martha\Downloads\FRST64 (2).exe

Deleted : C:\Users\Martha\Downloads\FRST64 (3).exe

Deleted : C:\Users\Martha\Downloads\FRST64 (4).exe

Deleted : C:\Users\Martha\Downloads\FRST64.exe

Deleted : C:\Users\Martha\Downloads\JRT (1).exe

Deleted : C:\Users\Martha\Downloads\JRT (2).exe

Deleted : C:\Users\Martha\Downloads\JRT.exe

Deleted : C:\Users\Martha\Downloads\OTL.Txt

Deleted : C:\Users\Martha\Downloads\SecurityCheck (1).exe

Deleted : C:\Users\Martha\Downloads\SecurityCheck (2).exe

Deleted : C:\Users\Martha\Downloads\SecurityCheck (3).exe

Deleted : C:\Users\Martha\Downloads\SecurityCheck (4).exe

Deleted : C:\Users\Martha\Downloads\SecurityCheck.exe

Deleted : C:\Users\Martha\Downloads\SystemLook.txt

Deleted : C:\Users\Martha\Downloads\SystemLook_x64.exe

Deleted : C:\Users\Martha\Downloads\tdsskiller (1).exe

Deleted : C:\Users\Martha\Downloads\tdsskiller (2).exe

Deleted : C:\Users\Martha\Downloads\tdsskiller.exe

Deleted : HKLM\SOFTWARE\OldTimer Tools

Deleted : HKLM\SOFTWARE\AdwCleaner

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #5 [OTL Restore Point - 7/9/2014 12:52:06 AM | 07/09/2014 04:52:06]

Deleted : RP #6 [Removed Java 7 Update 60 | 07/16/2014 20:32:07]

Deleted : RP #7 [Installed HP Support Solutions Framework | 07/19/2014 05:33:55]

Deleted : RP #8 [Removed HP Support Solutions Framework | 07/23/2014 01:28:56]

New restore point created !

########## - EOF - ##########

#35
pystryker

Posted 28 July 2014 - 08:59 PM

Trusted Helper

Malware Removal
3,912 posts

Thank you for all this help. I feel so much relief and I really enjoyed the process. You mentioned sending me to get help with my printer software, and getting the printer connectivity issue resolved in another location. Where do I go for that?

You're quite welcome, and I appreciate your staying until we finished.

That link to the hardware forum also covers peripherals, and they should be able to help with the printer issue as well. :thumbsup:

I'd like to donate to you...in case I can't find that location, please tell me where to find the link to do so.

That's very generous of you.

The link is at the bottom of my signature in this post.

#36
pystryker

Posted 29 July 2014 - 07:05 AM

Trusted Helper

Malware Removal
3,912 posts

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

<br /><br />If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.<br /><br />Everyone else please begin a New Topic.

#37
pystryker

Posted 04 August 2014 - 03:20 PM

Trusted Helper

Malware Removal
3,912 posts

Please disable your antivirus for the duration of my instructions. Don't forget to re-enable them after you have completed the steps.

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. You will need to download and run the 32-bit version.

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Place a check in the box marked Addition.txt
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please copy and paste log back here.
The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

Things I need to see in your next post:

FRST Log

Addition.txt Log

#38
LESI

Posted 04 August 2014 - 08:48 PM

Member

Topic Starter
Member
51 posts

Pystryker,

I got your internal email return message re: reopening my topic: in re: to still having PUPs and slow browser.

I await your instruction for which programs to run.

Thank You,

LESI :yes:

#39
LESI

Posted 04 August 2014 - 10:12 PM

Member

Topic Starter
Member
51 posts

Pystryker,

Here are my scans from Farber Recovery below. Things are running a little faster tonight...I did update the Windows from the filehippo suggested list as well as Avast and downloaded most all of the other suggestions. There was one not for WIN 8.1....and I can't operate the ERUNT...and I also downloaded IOBit which caught a lot of viruses the other day, at a friend's suggestion. I've run the Super AntiSpyware at bootup and it keeps catching errors, and MalwareBytes seems to show a clean slate.

Although things were very slow all day, tonight the speed has picked up but not right after I downloaded the WIN update suggested by filehippo...so not sure why...but I'll keep you posted.

LESI :yeah:

Can't wait to get my printer running again too.

=====================================================================================================

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014

Ran by Martha (administrator) on HP-ALLINONE on 04-08-2014 23:27:42

Running from C:\Users\Martha\Downloads

Platform: Windows 8.1 (X64) OS Language: English (United States)

Internet Explorer Version 11

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe

(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(SUPERAntiSpyware.com) C:\Users\Martha\Downloads\SASCore64.exe

(SUPERAntiSpyware) C:\Users\Martha\Downloads\SUPERAntiSpyware.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6844560 2013-11-19] (Realtek Semiconductor)

HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-06-16] (Oracle Corporation)

HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1601856 2014-06-23] (IObit)

HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-08] (Hewlett-Packard)

HKU\.DEFAULT\...\Run: [Advanced SystemCare 7] => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2295584 2014-04-21] (IObit)

HKU\S-1-5-21-1584447337-3020926857-578221619-1001\...\Run: [FreeScreenSharing] => C:\Users\Martha\AppData\Local\FreeScreenSharing\FreeScreenSharing.exe [2266104 2013-06-26] ()

HKU\S-1-5-21-1584447337-3020926857-578221619-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)

HKU\S-1-5-21-1584447337-3020926857-578221619-1001\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)

HKU\S-1-5-21-1584447337-3020926857-578221619-1001\...\Run: [SUPERAntiSpyware] => C:\Users\Martha\Downloads\SUPERAntiSpyware.exe [7761176 2014-08-02] (SUPERAntiSpyware)

HKU\S-1-5-21-1584447337-3020926857-578221619-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)

HKU\S-1-5-21-1584447337-3020926857-578221619-1004\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)

HKU\S-1-5-21-1584447337-3020926857-578221619-500\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)

HKU\S-1-5-21-1584447337-3020926857-578221619-500\...\Run: [FreeScreenSharing] => C:\Users\Martha\AppData\Local\FreeScreenSharing\FreeScreenSharing.exe [2266104 2013-06-26] ()

HKU\S-1-5-21-1584447337-3020926857-578221619-500\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk

ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)

Startup: C:\Users\Martha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk

ShortcutTarget: ERUNT AutoBackup.lnk -> C:\Program Files (x86)\ERUNT\AUTOBACK.EXE ()

Startup: C:\Users\Martha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk

ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/...=AVASDF&PC=AV01

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK13/1

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPDSK13/1

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/...=AVASDF&PC=AV01

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...0TR&pc=HPDTDFJS

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...0TR&pc=HPDTDFJS

SearchScopes: HKLM - {84B29D74-CDD6-47A8-9ECE-278809800D63} URL = http://www.amazon.co...s={searchTerms}

SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.co...54371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/...=AVASDF&PC=AV01

SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.co...54371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...0TR&pc=HPDTDFJS

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...0TR&pc=HPDTDFJS

SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/...=AVASDF&PC=AV01

SearchScopes: HKCU - {84B29D74-CDD6-47A8-9ECE-278809800D63} URL =

SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.co...54371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)

BHO-x32: Ads Removal -> {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)

Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)

Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76 192.168.1.1

FireFox:

========

FF ProfilePath: C:\Users\Martha\AppData\Roaming\Mozilla\Firefox\Profiles\ad89ajwx.default

FF DefaultSearchEngine: Microsoft (Bing)

FF SearchEngineOrder.1: Microsoft (Bing)

FF SelectedSearchEngine: Microsoft (Bing)

FF Homepage: hxxp://www.msn.com/?pc=AV01

FF Keyword.URL: hxxp://www.bing.com/search

FF Plugin: @java.com/DTPlugin,version=11.11.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.11.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.11.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.11.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @startmeeting.com/launcher - C:\Users\Martha\AppData\Local\SMPlugins\npsmlauncher.dll (Start Meeting)

FF Plugin HKCU: gamevenus.com/CertifiedBrowser - C:\Users\Martha\AppData\Roaming\GVU Technologies\YouTubeDownloaderConverter\npCertifiedBrowser.dll (GVU Technologies)

FF Plugin HKCU: hp.com/HPDetect - C:\Users\Martha\AppData\Roaming\HewlettPackard\HPDetect\1.0.0.0\npHPDetect.dll (HP)

FF user.js: detected! => C:\Users\Martha\AppData\Roaming\Mozilla\Firefox\Profiles\ad89ajwx.default\user.js

FF SearchPlugin: C:\Users\Martha\AppData\Roaming\Mozilla\Firefox\Profiles\ad89ajwx.default\searchplugins\bing-avast.xml

FF Extension: Ads Removal - C:\Users\Martha\AppData\Roaming\Mozilla\Firefox\Profiles\ad89ajwx.default\Extensions\[email protected] [2014-08-02]

FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Martha\AppData\Roaming\Mozilla\Firefox\Profiles\ad89ajwx.default\Extensions\[email protected] [2014-08-02]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]

FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\Firefox\[email protected]

FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\Firefox\[email protected] [2014-01-13]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\Firefox\[email protected]

FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\Firefox\[email protected] [2014-01-13]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-07-04]

FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome:

=======

CHR Extension: (Google Docs) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-25]

CHR Extension: (Google Drive) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-25]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-07-25]

CHR Extension: (YouTube) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-25]

CHR Extension: (Google Search) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-25]

CHR Extension: (Google Wallet) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-25]

CHR Extension: (Gmail) - C:\Users\Martha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-25]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-04]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Users\Martha\Downloads\SASCORE64.EXE [172344 2014-07-22] (SUPERAntiSpyware.com)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-04] (AVAST Software)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2014-01-13] (Freemake) [File not signed]

R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-01-13] (Ellora Assets Corp.) [File not signed]

R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]

R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-07-19] (Hewlett-Packard)

S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]

S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]

R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [107624 2014-07-29] (RaMMicHaeL)

S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-06-19] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-06-19] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-06-19] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-04] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-04] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-04] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-04] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-04] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-04] (AVAST Software)

S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-04] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-04] ()

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows ® Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows ® Win 7 DDK provider)

R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)

S1 SASDIFSV; C:\Users\Martha\Downloads\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Users\Martha\Downloads\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-06-19] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 23:27 - 2014-08-04 23:28 - 00025247 _____ () C:\Users\Martha\Downloads\FRST.txt

2014-08-04 23:26 - 2014-08-04 23:27 - 00000000 ____D () C:\FRST

2014-08-04 23:26 - 2014-08-04 23:26 - 02094080 _____ (Farbar) C:\Users\Martha\Downloads\FRST64.exe

2014-08-04 23:24 - 2014-08-04 23:24 - 01084928 _____ (Farbar) C:\Users\Martha\Downloads\FRST.exe

2014-08-04 21:51 - 2014-08-04 21:51 - 00014336 _____ () C:\Users\Martha\Downloads\Uninstall.dat

2014-08-04 21:48 - 2014-08-04 21:48 - 00001664 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk

2014-08-04 21:48 - 2014-08-04 21:48 - 00000000 ____D () C:\Users\Martha\Downloads\Plugins

2014-08-04 21:37 - 2014-08-04 21:37 - 18615872 _____ (SUPERAntiSpyware) C:\Users\Martha\Downloads\SUPERAntiSpyware (4).exe

2014-08-04 14:19 - 2014-08-04 14:19 - 00000350 _____ () C:\WINDOWS\PFRO.log

2014-08-04 12:14 - 2014-08-04 21:30 - 00000000 ____D () C:\Users\Martha\Tracing

2014-08-04 10:58 - 2014-08-04 10:58 - 00000000 ____D () C:\WINDOWS\en

2014-08-04 10:57 - 2014-08-04 10:57 - 00001323 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk

2014-08-04 10:57 - 2014-08-04 10:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live

2014-08-04 10:55 - 2014-08-04 10:55 - 00001392 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2014-08-04 10:54 - 2014-08-04 10:54 - 00001476 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk

2014-08-04 10:53 - 2014-08-04 10:53 - 00002504 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk

2014-08-04 10:51 - 2014-08-04 10:51 - 00000000 ____D () C:\Program Files\Windows Live

2014-08-04 10:50 - 2014-08-04 10:50 - 00000381 _____ () C:\WINDOWS\DirectX.log

2014-08-04 10:48 - 2014-08-04 10:48 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive

2014-08-04 09:34 - 2014-08-04 09:34 - 01239752 _____ (Microsoft Corporation) C:\Users\Martha\Downloads\wlsetup-web.exe

2014-08-04 00:41 - 2014-08-04 00:41 - 00001052 _____ () C:\Users\Martha\Desktop\MBAM.08.03.14.txt

2014-08-02 21:44 - 2014-08-02 21:44 - 07761176 _____ (SUPERAntiSpyware) C:\Users\Martha\Downloads\SUPERAntiSpyware.exe

2014-08-02 11:57 - 2014-08-02 11:57 - 00009334 _____ () C:\Users\Martha\Downloads\SysRestorePoint_v13 (2).zip

2014-08-02 11:56 - 2014-08-02 11:56 - 09889352 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll

2014-08-02 11:56 - 2014-08-02 11:56 - 00359128 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsPStor.sys

2014-08-02 11:53 - 2014-08-02 11:53 - 00000156 _____ () C:\WINDOWS\setupact.log

2014-08-02 11:53 - 2014-08-02 11:53 - 00000000 _____ () C:\WINDOWS\setuperr.log

2014-08-02 11:52 - 2014-08-02 11:56 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp

2014-08-02 11:52 - 2014-08-02 11:52 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs

2014-08-02 11:51 - 2014-08-02 11:51 - 02101848 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll

2014-08-02 11:51 - 2014-08-02 11:51 - 01406976 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll

2014-08-02 11:51 - 2014-08-02 11:51 - 00450096 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll

2014-08-02 11:51 - 2014-08-02 11:51 - 00360496 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll

2014-08-02 11:50 - 2014-08-02 11:50 - 56270848 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat

2014-08-02 11:50 - 2014-08-02 11:50 - 03872984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys

2014-08-02 11:50 - 2014-08-02 11:50 - 02825432 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll

2014-08-02 11:50 - 2014-08-02 11:50 - 02792152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\SET7E8B.tmp

2014-08-02 11:50 - 2014-08-02 11:50 - 02770976 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll

2014-08-02 11:50 - 2014-08-02 11:50 - 02037336 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll

2014-08-02 11:50 - 2014-08-02 11:50 - 01958616 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl

2014-08-02 11:50 - 2014-08-02 11:50 - 01286872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll

2014-08-02 11:50 - 2014-08-02 11:50 - 01033304 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll

2014-08-02 11:50 - 2014-08-02 11:50 - 01024216 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll

2014-08-02 11:50 - 2014-08-02 11:50 - 00946392 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll

2014-08-02 11:50 - 2014-08-02 11:50 - 00757301 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT

2014-08-02 11:50 - 2014-08-02 11:50 - 00624344 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll

2014-08-02 11:50 - 2014-08-02 11:50 - 00209096 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll

2014-08-02 11:50 - 2014-08-02 11:50 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll

2014-08-02 10:28 - 2014-08-02 10:28 - 00002370 _____ () C:\WINDOWS\System32\Tasks\ASC7_SkipUac_Martha

2014-08-02 10:28 - 2014-08-02 10:28 - 00000268 _____ () C:\WINDOWS\Tasks\ASC7_SkipUac_Martha.job

2014-08-02 10:27 - 2014-08-02 10:27 - 00000000 ____D () C:\Users\Martha\AppData\Roaming\ProductData

2014-08-02 10:26 - 2014-08-02 10:26 - 00003170 _____ () C:\WINDOWS\System32\Tasks\SmartDefrag3_Update

2014-08-02 10:26 - 2014-06-04 15:17 - 00034080 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe

2014-08-02 10:25 - 2014-08-02 10:25 - 00002434 _____ () C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Administrator

2014-08-02 10:25 - 2014-08-02 10:25 - 00001174 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk

2014-08-02 10:25 - 2014-08-02 10:25 - 00000312 _____ () C:\WINDOWS\Tasks\Uninstaller_SkipUac_Administrator.job

2014-08-02 10:25 - 2014-08-02 10:25 - 00000000 ____D () C:\Users\Martha\AppData\Roaming\Apple Computer

2014-08-02 10:25 - 2014-08-02 10:25 - 00000000 ____D () C:\ProgramData\ProductData

2014-08-02 10:24 - 2014-08-02 11:45 - 00002151 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2014-08-02 10:24 - 2014-08-02 10:24 - 00002860 _____ () C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (SYSTEM)

2014-08-02 10:24 - 2014-08-02 10:24 - 00001116 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk

2014-08-02 10:24 - 2014-08-02 10:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3

2014-08-02 10:24 - 2014-08-02 10:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7

2014-08-02 10:24 - 2014-08-02 10:24 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2014-08-02 10:24 - 2014-06-04 15:17 - 00128288 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll20140802102554.dll

2014-08-02 10:24 - 2014-06-04 15:17 - 00128288 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll

2014-08-02 10:24 - 2014-06-04 15:17 - 00021184 _____ (IObit) C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys

2014-08-02 10:23 - 2014-08-02 10:23 - 00003220 _____ () C:\WINDOWS\System32\Tasks\Driver Booster Scan

2014-08-02 10:23 - 2014-08-02 10:23 - 00003166 _____ () C:\WINDOWS\System32\Tasks\StartMenuAutoupdate

2014-08-02 10:23 - 2014-08-02 10:23 - 00003164 _____ () C:\WINDOWS\System32\Tasks\Driver Booster Update

2014-08-02 10:23 - 2014-08-02 10:23 - 00001205 _____ () C:\Users\Public\Desktop\Start Menu 8.lnk

2014-08-02 10:23 - 2014-08-02 10:23 - 00001116 _____ () C:\Users\Public\Desktop\Driver Booster.lnk

2014-08-02 10:23 - 2014-08-02 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Start Menu 8

2014-08-02 10:23 - 2014-08-02 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster

2014-08-02 10:22 - 2014-08-02 10:22 - 26163624 _____ (IObit ) C:\Users\Martha\Downloads\IObit-Malware-Figher-Setup (2).exe

2014-08-02 10:21 - 2014-08-02 10:25 - 00000000 ____D () C:\Users\Martha\AppData\Roaming\IObit

2014-08-02 10:21 - 2014-08-02 10:25 - 00000000 ____D () C:\Program Files (x86)\IObit

2014-08-02 10:21 - 2014-08-02 10:23 - 00000000 ____D () C:\ProgramData\IObit

2014-08-02 10:21 - 2014-08-02 10:21 - 00001191 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk

2014-08-02 10:21 - 2014-08-02 10:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter

2014-08-02 10:19 - 2014-08-02 10:19 - 26163624 _____ (IObit ) C:\Users\Martha\Downloads\IObit-Malware-Figher-Setup.exe

2014-08-02 10:19 - 2014-08-02 10:19 - 26163624 _____ (IObit ) C:\Users\Martha\Downloads\IObit-Malware-Figher-Setup (1).exe

2014-08-01 20:28 - 2014-08-01 20:28 - 00003142 _____ () C:\WINDOWS\System32\Tasks\{8DBC21F3-A951-4D97-B7EE-9AA918423402}

2014-08-01 19:05 - 2014-08-01 19:06 - 35260712 _____ () C:\Users\Martha\Downloads\Firefox Setup 32.0b3.exe

2014-08-01 10:10 - 2014-08-01 10:12 - 18549136 _____ (SUPERAntiSpyware) C:\Users\Martha\Downloads\SUPERAntiSpyware (3).exe

2014-07-30 19:50 - 2014-07-30 19:50 - 31150504 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-8u11-windows-i586 (1).exe

2014-07-30 19:48 - 2014-07-30 19:48 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe

2014-07-30 19:48 - 2014-07-30 19:48 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe

2014-07-30 19:48 - 2014-07-30 19:48 - 00176040 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe

2014-07-30 19:48 - 2014-07-30 19:48 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2014-07-30 19:48 - 2014-07-30 19:48 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-30 19:47 - 2014-07-30 19:47 - 31150504 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-8u11-windows-i586.exe

2014-07-30 19:45 - 2014-07-30 19:44 - 00321448 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe

2014-07-30 19:44 - 2014-07-30 19:44 - 00191400 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe

2014-07-30 19:44 - 2014-07-30 19:44 - 00190888 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe

2014-07-30 19:44 - 2014-07-30 19:44 - 00111016 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll

2014-07-30 19:44 - 2014-07-30 19:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-30 19:44 - 2014-07-30 19:44 - 00000000 ____D () C:\Program Files\Java

2014-07-30 19:43 - 2014-07-30 19:43 - 34176936 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-8u11-windows-x64 (1).exe

2014-07-30 19:42 - 2014-07-30 19:42 - 00560408 _____ (SUPERAdBlocker.com) C:\Users\Martha\Downloads\Uninstall.exe

2014-07-30 19:28 - 2014-07-30 19:28 - 34176936 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-8u11-windows-x64.exe

2014-07-30 18:41 - 2014-07-30 18:41 - 00895120 _____ (Google Inc.) C:\Users\Martha\Downloads\ChromeSetup.exe

2014-07-30 09:27 - 2014-07-30 09:27 - 18464664 _____ (SUPERAntiSpyware) C:\Users\Martha\Downloads\SUPERAntiSpyware (2).exe

2014-07-30 00:59 - 2014-07-30 00:59 - 18464664 _____ (SUPERAntiSpyware) C:\Users\Martha\Downloads\SUPERAntiSpyware (1).exe

2014-07-30 00:39 - 2014-08-04 16:39 - 00000536 _____ () C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 80c221b6-9a17-4f2a-b06c-cf4073c61ff3.job

2014-07-30 00:39 - 2014-08-03 02:00 - 00000536 _____ () C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 8cb6c0c7-679d-47af-9ec4-608e1e23cd23.job

2014-07-30 00:39 - 2014-07-30 00:39 - 00003598 _____ () C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task 8cb6c0c7-679d-47af-9ec4-608e1e23cd23

2014-07-30 00:39 - 2014-07-30 00:39 - 00003516 _____ () C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task 80c221b6-9a17-4f2a-b06c-cf4073c61ff3

2014-07-30 00:39 - 2014-07-30 00:39 - 00000000 ____D () C:\Users\Martha\AppData\Roaming\SUPERAntiSpyware.com

2014-07-30 00:38 - 2014-08-04 21:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware

2014-07-30 00:38 - 2014-07-30 00:38 - 00001822 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk

2014-07-30 00:38 - 2014-07-30 00:38 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com

2014-07-30 00:25 - 2014-07-30 00:25 - 00000000 ____D () C:\ProgramData\Licenses

2014-07-30 00:24 - 2014-07-30 00:30 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster

2014-07-30 00:24 - 2014-07-30 00:24 - 04095448 _____ (BrightFort LLC ) C:\Users\Martha\Downloads\spywareblastersetup50.exe

2014-07-30 00:24 - 2014-07-30 00:24 - 00001093 _____ () C:\Users\Public\Desktop\SpywareBlaster.lnk

2014-07-30 00:24 - 2014-07-30 00:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster

2014-07-30 00:24 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL

2014-07-30 00:20 - 2014-07-30 00:20 - 04420728 _____ (Systweak Inc ) C:\Users\Martha\Downloads\rcp_dcomnew_sec_300.exe

2014-07-30 00:20 - 2014-07-30 00:20 - 04420728 _____ (Systweak Inc ) C:\Users\Martha\Downloads\rcp_dcomnew_sec_300 (1).exe

2014-07-29 16:45 - 2014-07-29 16:45 - 00466712 _____ (SUPERAntiSpyware.com) C:\Users\Martha\Downloads\SSUpdate64.exe

2014-07-29 11:09 - 2014-07-29 11:09 - 00448512 _____ (OldTimer Tools) C:\Users\Martha\Downloads\TFC.exe

2014-07-28 23:06 - 2014-07-28 23:06 - 00009334 _____ () C:\Users\Martha\Downloads\SysRestorePoint_v13 (1).zip

2014-07-28 23:04 - 2014-07-28 23:04 - 00009334 _____ () C:\Users\Martha\Downloads\SysRestorePoint_v13.zip

2014-07-28 23:03 - 2014-08-01 19:23 - 00000000 ____D () C:\WINDOWS\ERDNT

2014-07-28 23:00 - 2014-07-28 23:00 - 00000938 _____ () C:\Users\Martha\Desktop\NTREGOPT.lnk

2014-07-28 23:00 - 2014-07-28 23:00 - 00000938 _____ () C:\Users\Betty\Desktop\NTREGOPT.lnk

2014-07-28 23:00 - 2014-07-28 23:00 - 00000938 _____ () C:\Users\Administrator\Desktop\NTREGOPT.lnk

2014-07-28 23:00 - 2014-07-28 23:00 - 00000919 _____ () C:\Users\Martha\Desktop\ERUNT.lnk

2014-07-28 23:00 - 2014-07-28 23:00 - 00000919 _____ () C:\Users\Betty\Desktop\ERUNT.lnk

2014-07-28 23:00 - 2014-07-28 23:00 - 00000919 _____ () C:\Users\Administrator\Desktop\ERUNT.lnk

2014-07-28 23:00 - 2014-07-28 23:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT

2014-07-28 23:00 - 2014-07-28 23:00 - 00000000 ____D () C:\Program Files (x86)\ERUNT

2014-07-28 22:58 - 2014-07-28 22:58 - 00791393 _____ (Lars Hederer ) C:\Users\Martha\Downloads\erunt-setup.exe

2014-07-28 22:43 - 2014-07-28 22:43 - 00001033 _____ () C:\Users\Public\Desktop\Unchecky.lnk

2014-07-28 22:43 - 2014-07-28 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky

2014-07-28 22:43 - 2014-07-28 22:43 - 00000000 ____D () C:\Program Files (x86)\Unchecky

2014-07-28 22:42 - 2014-07-28 22:42 - 00694968 _____ (RaMMicHaeL) C:\Users\Martha\Downloads\unchecky_setup.exe

2014-07-28 22:39 - 2014-07-28 22:39 - 00002013 _____ () C:\Users\Martha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update Checker.lnk

2014-07-28 22:39 - 2014-07-28 22:39 - 00001983 _____ () C:\Users\Martha\Desktop\Update Checker.lnk

2014-07-28 22:39 - 2014-07-28 22:39 - 00000000 ____D () C:\Program Files (x86)\FileHippo.com

2014-07-28 22:38 - 2014-07-28 22:38 - 00264757 _____ () C:\Users\Martha\Downloads\FHSetup.exe

2014-07-28 22:25 - 2014-07-28 22:26 - 00002941 _____ () C:\DelFix.txt

2014-07-24 10:01 - 2014-07-24 10:01 - 00001074 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR Registration.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00001343 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00001337 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00001179 _____ () C:\Users\Public\Desktop\Shop for HP Supplies.lnk

2014-07-24 10:00 - 2014-07-24 10:00 - 00000000 ____D () C:\ProgramData\HP Product Assistant

2014-07-24 09:47 - 2014-07-24 09:49 - 258325536 _____ () C:\Users\Martha\Downloads\PS_AIO_C4200_NonNet_Full_Win_WW_140_404 (2).exe

2014-07-22 19:31 - 2014-07-22 19:31 - 00172344 _____ (SUPERAntiSpyware.com) C:\Users\Martha\Downloads\SASCore64.exe

2014-07-22 18:35 - 2014-08-04 21:46 - 00003176 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForMartha

2014-07-22 18:35 - 2014-08-04 21:46 - 00000360 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForMartha.job

2014-07-19 01:33 - 2014-07-19 01:33 - 05017600 _____ () C:\Users\Martha\Downloads\HPSupportSolutionsFramework-11.50.0031.msi

2014-07-19 00:53 - 2014-08-04 15:04 - 00003942 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A29522CF-DB1F-4DA9-A129-EDE5E9A5699D}

2014-07-19 00:53 - 2014-07-19 00:53 - 00000000 __SHD () C:\Users\Martha\AppData\Local\EmieUserList

2014-07-19 00:53 - 2014-07-19 00:53 - 00000000 __SHD () C:\Users\Martha\AppData\Local\EmieSiteList

2014-07-19 00:44 - 2014-07-24 10:07 - 00002345 _____ () C:\Users\Public\Desktop\Add a Device - Photosmart C4200 Series.lnk

2014-07-19 00:26 - 2014-07-19 02:30 - 00188017 ____N () C:\WINDOWS\hpoins13.dat.temp

2014-07-19 00:26 - 2012-09-26 09:18 - 00000462 ____N () C:\WINDOWS\hpomdl13.dat.temp

2014-07-19 00:21 - 2014-07-19 00:23 - 258325536 _____ () C:\Users\Martha\Downloads\PS_AIO_C4200_NonNet_Full_Win_WW_140_404 (1).exe

2014-07-18 12:23 - 2014-07-18 12:23 - 00003208 _____ () C:\WINDOWS\System32\Tasks\{C584B8BE-8B36-452E-95B9-89CC4F4F9F5F}

2014-07-18 12:13 - 2014-07-18 12:13 - 02938144 _____ (LionSea Software co., ltd ) C:\Users\Martha\Downloads\setup.exe

2014-07-16 16:44 - 2014-07-16 16:45 - 29420456 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-7u65-windows-i586.exe

2014-07-16 16:44 - 2014-07-16 16:45 - 29420456 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-7u65-windows-i586 (1).exe

2014-07-16 16:36 - 2014-07-16 16:36 - 31012264 _____ (Oracle Corporation) C:\Users\Martha\Downloads\jre-7u65-windows-x64.exe

2014-07-14 23:37 - 2014-07-23 11:28 - 00000000 ____D () C:\Users\Martha\Desktop\CarePlusMore

2014-07-14 14:26 - 2014-07-14 14:26 - 00000192 _____ () C:\Users\Martha\Downloads\High Contrast Black.set

2014-07-10 01:26 - 2014-06-26 16:55 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2014-07-10 01:26 - 2014-06-26 16:55 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-09 19:31 - 2014-04-13 23:29 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll

2014-07-09 19:29 - 2014-07-09 19:29 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel

2014-07-09 19:07 - 2014-06-18 21:39 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-07-09 19:07 - 2014-06-18 20:16 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-07-09 19:07 - 2014-06-18 19:46 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2014-07-09 19:07 - 2014-06-18 18:57 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2014-07-09 19:07 - 2014-06-16 18:26 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe

2014-07-09 19:07 - 2014-06-16 18:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe

2014-07-09 19:07 - 2014-06-06 10:20 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-07-09 19:06 - 2014-06-18 20:48 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-07-09 19:06 - 2014-06-18 20:09 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2014-07-09 19:06 - 2014-06-18 19:51 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-07-09 19:06 - 2014-06-18 19:50 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2014-07-09 19:06 - 2014-06-18 19:48 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2014-07-09 19:06 - 2014-06-18 19:39 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-07-09 19:06 - 2014-06-18 19:33 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-07-09 19:06 - 2014-06-18 19:32 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-07-09 19:06 - 2014-06-18 19:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-07-09 19:06 - 2014-06-18 19:12 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2014-07-09 19:06 - 2014-06-18 18:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2014-07-09 19:06 - 2014-06-18 18:58 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-07-09 19:06 - 2014-06-18 18:58 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2014-07-09 19:06 - 2014-06-18 18:52 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-07-09 19:06 - 2014-06-18 18:51 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-07-09 19:06 - 2014-06-18 18:49 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-07-09 19:06 - 2014-06-18 18:45 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-07-09 19:06 - 2014-06-18 18:35 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-07-09 19:06 - 2014-06-18 18:34 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-07-09 19:06 - 2014-06-18 18:15 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-07-09 19:06 - 2014-06-18 18:13 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-07-09 19:06 - 2014-06-18 18:09 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-07-09 19:06 - 2014-06-18 18:07 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-07-09 19:06 - 2014-05-29 23:03 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2014-07-09 19:06 - 2014-05-29 08:02 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2014-07-09 19:06 - 2014-05-29 03:55 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll

2014-07-09 19:06 - 2014-05-29 02:40 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll

2014-07-09 19:06 - 2014-05-29 02:37 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll

2014-07-09 19:06 - 2014-05-29 01:34 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll

2014-07-09 19:06 - 2014-05-29 01:27 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2014-07-09 19:05 - 2014-06-30 18:45 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll

2014-07-09 19:05 - 2014-06-28 03:48 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2014-07-09 19:05 - 2014-06-28 03:07 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2014-07-09 19:05 - 2014-06-06 09:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll

2014-07-09 19:05 - 2014-06-06 08:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll

2014-07-09 19:05 - 2014-05-31 06:07 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2014-07-09 19:05 - 2014-05-31 06:06 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2014-07-09 19:05 - 2014-05-30 23:40 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2014-07-09 19:05 - 2014-05-30 23:30 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2014-07-09 19:05 - 2014-05-30 23:12 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-09 19:05 - 2014-05-30 23:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2014-07-09 19:05 - 2014-05-30 23:03 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2014-07-09 19:05 - 2014-05-30 23:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-09 19:05 - 2014-05-30 22:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2014-07-09 19:05 - 2014-05-30 22:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2014-07-09 19:05 - 2014-05-30 22:48 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2014-07-09 19:05 - 2014-05-30 22:37 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll

2014-07-09 19:05 - 2014-05-30 22:36 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll

2014-07-09 19:05 - 2014-05-30 22:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll

2014-07-09 19:05 - 2014-05-30 22:32 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll

2014-07-09 19:00 - 2014-07-09 19:00 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe

2014-07-09 01:28 - 2014-07-28 22:25 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-07-09 01:10 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll

2014-07-08 15:30 - 2014-07-08 15:30 - 00000192 _____ () C:\Users\Martha\Downloads\SAS Default.set

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 23:28 - 2014-08-04 23:27 - 00025247 _____ () C:\Users\Martha\Downloads\FRST.txt

2014-08-04 23:27 - 2014-08-04 23:26 - 00000000 ____D () C:\FRST

2014-08-04 23:27 - 2013-10-15 01:34 - 00000922 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-04 23:27 - 2013-10-15 00:47 - 00000000 ____D () C:\Users\Martha\AppData\Roaming\Skype

2014-08-04 23:26 - 2014-08-04 23:26 - 02094080 _____ (Farbar) C:\Users\Martha\Downloads\FRST64.exe

2014-08-04 23:24 - 2014-08-04 23:24 - 01084928 _____ (Farbar) C:\Users\Martha\Downloads\FRST.exe

2014-08-04 23:02 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-08-04 23:01 - 2014-06-19 19:49 - 01919876 _____ () C:\WINDOWS\WindowsUpdate.log

2014-08-04 22:43 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-08-04 22:38 - 2014-02-12 02:29 - 00000364 _____ () C:\WINDOWS\Tasks\HP Photo Creations Communicator.job

2014-08-04 21:51 - 2014-08-04 21:51 - 00014336 _____ () C:\Users\Martha\Downloads\Uninstall.dat

2014-08-04 21:50 - 2013-10-14 14:07 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1584447337-3020926857-578221619-1001

2014-08-04 21:48 - 2014-08-04 21:48 - 00001664 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk

2014-08-04 21:48 - 2014-08-04 21:48 - 00000000 ____D () C:\Users\Martha\Downloads\Plugins

2014-08-04 21:48 - 2014-07-30 00:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware

2014-08-04 21:46 - 2014-07-22 18:35 - 00003176 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForMartha

2014-08-04 21:46 - 2014-07-22 18:35 - 00000360 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForMartha.job

2014-08-04 21:37 - 2014-08-04 21:37 - 18615872 _____ (SUPERAntiSpyware) C:\Users\Martha\Downloads\SUPERAntiSpyware (4).exe

2014-08-04 21:30 - 2014-08-04 12:14 - 00000000 ____D () C:\Users\Martha\Tracing

2014-08-04 21:29 - 2014-06-19 20:24 - 00000000 __RDO () C:\Users\Martha\OneDrive

2014-08-04 21:29 - 2013-10-15 01:34 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-08-04 21:29 - 2013-10-15 01:34 - 00000918 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-04 17:37 - 2014-06-19 19:28 - 00000000 ____D () C:\Users\Martha

2014-08-04 16:39 - 2014-07-30 00:39 - 00000536 _____ () C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 80c221b6-9a17-4f2a-b06c-cf4073c61ff3.job

2014-08-04 15:04 - 2014-07-19 00:53 - 00003942 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A29522CF-DB1F-4DA9-A129-EDE5E9A5699D}

2014-08-04 14:27 - 2014-06-19 19:17 - 00000000 ____D () C:\ProgramData\Hewlett-Packard

2014-08-04 14:22 - 2014-07-04 00:38 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update

2014-08-04 14:20 - 2013-08-22 10:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-08-04 14:19 - 2014-08-04 14:19 - 00000350 _____ () C:\WINDOWS\PFRO.log

2014-08-04 14:19 - 2014-05-09 14:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-08-04 11:03 - 2014-04-02 01:43 - 00000000 ____D () C:\Users\Martha\AppData\Local\Windows Live

2014-08-04 10:58 - 2014-08-04 10:58 - 00000000 ____D () C:\WINDOWS\en

2014-08-04 10:57 - 2014-08-04 10:57 - 00001323 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk

2014-08-04 10:57 - 2014-08-04 10:57 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live

2014-08-04 10:55 - 2014-08-04 10:55 - 00001392 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2014-08-04 10:54 - 2014-08-04 10:54 - 00001476 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk

2014-08-04 10:54 - 2012-09-11 10:18 - 00000000 ____D () C:\Program Files (x86)\Windows Live

2014-08-04 10:53 - 2014-08-04 10:53 - 00002504 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk

2014-08-04 10:51 - 2014-08-04 10:51 - 00000000 ____D () C:\Program Files\Windows Live

2014-08-04 10:50 - 2014-08-04 10:50 - 00000381 _____ () C:\WINDOWS\DirectX.log

2014-08-04 10:48 - 2014-08-04 10:48 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive

2014-08-04 09:34 - 2014-08-04 09:34 - 01239752 _____ (Microsoft Corporation) C:\Users\Martha\Downloads\wlsetup-web.exe

2014-08-04 00:41 - 2014-08-04 00:41 - 00001052 _____ () C:\Users\Martha\Desktop\MBAM.08.03.14.txt

2014-08-03 10:03 - 2014-07-01 18:08 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2014-08-03 02:00 - 2014-07-30 00:39 - 00000536 _____ () C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 8cb6c0c7-679d-47af-9ec4-608e1e23cd23.job

2014-08-02 21:44 - 2014-08-02 21:44 - 07761176 _____ (SUPERAntiSpyware) C:\Users\Martha\Downloads\SUPERAntiSpyware.exe

2014-08-02 11:57 - 2014-08-02 11:57 - 00009334 _____ () C:\Users\Martha\Downloads\SysRestorePoint_v13 (2).zip

2014-08-02 11:56 - 2014-08-02 11:56 - 09889352 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll

2014-08-02 11:56 - 2014-08-02 11:56 - 00359128 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsPStor.sys

2014-08-02 11:56 - 2014-08-02 11:52 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp

2014-08-02 11:53 - 2014-08-02 11:53 - 00000156 _____ () C:\WINDOWS\setupact.log

2014-08-02 11:53 - 2014-08-02 11:53 - 00000000 _____ () C:\WINDOWS\setuperr.log

2014-08-02 11:52 - 2014-08-02 11:52 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs

2014-08-02 11:52 - 2014-06-19 19:16 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM