[homebrew901]

It sends me to this page: https://support.nort...utm_source=symc

 

 

Attached Thumbnails

• 

[Advertisements]

And here's the pic of the actual on-screen error message:

 

 

Attached Thumbnails

• 

[homebrew901]

And here's the pic of the actual on-screen error message:

 

 

Attached Thumbnails

• 

[homebrew901]

And here it is after hitting cancel.  Interestingly, I have not loaded McAfee and I removed it (despite not knowingly loading it) before I began this process.  Is there an exploit that disguises itself as McAfee?

Attached Thumbnails

• 

[pystryker]

And here it is after hitting cancel. Interestingly, I have not loaded McAfee and I removed it (despite not knowingly loading it) before I began this process. Is there an exploit that disguises itself as McAfee?

None that I'm aware of, but let's remove the McAfee and Nortons completely with their tools.


Step 1: McAfee Removal
 
Please click the link below to download the McAfee Consumer Products Removal tool. 
 
Once downloaded, run the program and then reboot the machine.
 
http://download.mcaf...atches/MCPR.exe
 
 
Step 2:  Norton Removal Tool
 
This one requires a bit more work.
 
Please click the link below to download the Norton Removal Tool. 
 
Once downloaded, reboot the machine into Safe Mode and run the tool.
 
After running the tool, reboot the machine into Safe Mode again, and run the tool again.
 
ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe
 
 
Once you have completed these 2 steps, re-install Nortons (if you wish) and it should work fine.  Also, make sure that if you re-install Norton, that Norton's firewall is disabled.

[homebrew901]

OK.  I ran both of those.  I took the liberty of running FRST fix again, the log is below.  And just to complicate things, I can no longer view any but the first page of this topic from my PC.  I followed your instructions from the notification email.

[homebrew901]

Oops.  Here's the log.

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-07-2014
Ran by Greg at 2014-07-20 07:21:56 Run:3
Running from C:\Users\Greg\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe (No File)
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe (No File)
Hosts: Hosts file not detected in the default directory
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state on
End
*****************

C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe not found.
C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

=========  netsh advfirewall reset =========

Ok.


========= End of CMD: =========


=========  netsh advfirewall set allprofiles state on =========

Ok.


========= End of CMD: =========


==== End of Fixlog ====

[pystryker]

OK.  I ran both of those.  I took the liberty of running FRST fix again, the log is below.  And just to complicate things, I can no longer view any but the first page of this topic from my PC.  I followed your instructions from the notification email.

 
Please do not run fixes more than the one time I request it.  That's very dangerous and can damage your machine.  Regarding your only being able to see the first page of the topic, I had the same problem trying to view it this morning from FireFox.  I had to switch over to IE to view the topic fully.


Did you re-install Norton? If so, did you make sure that it's firewall was disabled? If you didn't reinstall Norton, please hold off on doing that for the time being.


Let's get a fresh look at your system with FRST.


Start Farbar's Recovery Scan Tool

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Place a check in the box marked Addition.txt
  
  
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
• Things I need to see in your next post:
  
  FRST Log
  
  Addition.txt Log

[homebrew901]

OK, done. From the other topic, I'm glad to know the reply problem isn't mine!  Two logs below:

 

 Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-07-2014
Ran by Greg (administrator) on GREG-PC on 20-07-2014 08:19:48
Running from C:\Users\Greg\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingc...can-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingc...can-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lexmark International, Inc.) C:\Windows\System32\spool\drivers\x64\3\lxeaserv.exe
( ) C:\Windows\System32\lxeacoms.exe
(Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
(Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
() C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe
(Spotify Ltd) C:\Users\Greg\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
() C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
() C:\Program Files\HTC\ModeSelection\VMMModeSelection.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13353064 2011-11-14] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2538280 2010-12-22] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel® Corporation)
HKLM\...\Run: [Lenovo EE Boot Optimizer] => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2012-01-04] (Lenovo)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [789920 2012-01-04] (Lenovo)
HKLM\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9769888 2012-01-04] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2012-01-04] (Lenovo(beijing) Limited)
HKLM\...\Run: [lxeamon.exe] => C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe [148280 2011-01-23] ()
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2010-12-04] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [224352 2010-12-04] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] => C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2012-01-04] (Lenovo)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-12-09] (Nullsoft, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [VMM Mode Selection] => C:\Program Files\HTC\ModeSelection\VMMModeSelection.exe [43520 2011-02-14] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [Spotify Web Helper] => C:\Users\Greg\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-06-24] (Spotify Ltd)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-01-04] (Google Inc.)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [Google Update] => C:\Users\Greg\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-07-13] (Google Inc.)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [MusicManager] => C:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7631872 2014-05-15] (Google Inc.)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [24477056 2014-06-27] (Google)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [GoogleChromeAutoLaunch_9CCDD43624CF0A67FCB8D07A1D3BBB05] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-07-15] (Google Inc.)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [C187750BE23F2EC7BF89516EBD652E6531CE3C2F._service_run] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-07-15] (Google Inc.)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6564120 2014-06-04] (SUPERAntiSpyware)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: E - E:\LaunchU3.exe -a
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {01bdbb8f-5d04-11e2-a21e-e4d53ddad13c} - E:\MotorolaDeviceManagerSetup.exe -a
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {243a6b7f-dd74-11e3-a447-42e578d16eb4} - E:\MotorolaDeviceManagerSetup.exe -a
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {588996f6-49d8-11e1-a3fc-e4d53ddad13c} - E:\TL-Bootstrap.exe
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {5889989e-49d8-11e1-a3fc-e4d53ddad13c} - E:\TL-Bootstrap.exe
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {7242ad19-6be2-11e3-91a8-e4d53ddad13c} - E:\LaunchU3.exe -a
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {f030b89a-bd9f-11e1-a814-e4d53ddad13c} - E:\TL-Bootstrap.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Kirsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe (No File)
Startup: C:\Users\Kirsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe (No File)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: VeriFace Enc -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co...=LENN&bmod=LENN
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.co...1I7LENN_enUS468
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.co...1I7LENN_enUS468
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default
FF NewTab: about:blank
FF DefaultSearchEngine: Google
FF Homepage: hxxp://www.google.com/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Greg\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Greg\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Extension: 20-20 3D Viewer - WEB - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\[email protected] [2014-04-08]
FF Extension: Exif Viewer - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\[email protected] [2013-03-02]
FF Extension: F.B. Purity - Cleans Up Facebook - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\[email protected] [2013-11-20]
FF Extension: NoScript - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-05-17]
FF Extension: Google Reverse Image Search - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\{95322c08-05ff-4f3c-85fd-8ceb821988dd}.xpi [2014-06-16]
FF Extension: gTranslate - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\{aff87fa2-a58e-4edd-b852-0a20203c1e17}.xpi [2012-01-28]
FF Extension: Adblock Plus - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-01-27]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-06-17]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://google.com/", "hxxp://cnn.com/"
CHR DefaultSearchKeyword: 6F7FC68D92A92B4CA28B729A411B059D82D962A01B5CC0E44BDC8C686DED6E89
CHR DefaultSearchURL: 0B87C5EA4C641922B97B3B430A25923933E24B1ED10A1AB6A04D683F3BE2CA53
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.20\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.20\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.20\pdf.dll ()
CHR Plugin: (Norton Identity Safe) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2014.7.0.43_0\npcoplgn.dll No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (NPCIG.dll) - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java™ Platform SE 7 U51) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Google Update) - C:\Users\Greg\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Google Drive) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-11-20]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-22]
CHR Extension: (Google Cast) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-05-28]
CHR Extension: (Adblock Plus) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2012-11-21]
CHR Extension: (Turkopticon) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgefbojfgdddnignhmfmnencgiloojpe [2014-02-15]
CHR Extension: (Tampermonkey) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2014-02-15]
CHR Extension: (Google Calendar) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2012-11-21]
CHR Extension: (A Journey through Middle-earth) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjgkjeheegjnnmheaflhdocglkiegoni [2013-12-14]
CHR Extension: (Google Wallet) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09]
CHR HKCU\...\Chrome\Extension: [mhodfgapkpmcepkmcohmfkneadpikmkd] - C:\Users\Greg\AppData\Local\CRE\mhodfgapkpmcepkmcohmfkneadpikmkd.crx [2013-06-02]
CHR HKLM-x32\...\Chrome\Extension: [mhodfgapkpmcepkmcohmfkneadpikmkd] - C:\Users\Greg\AppData\Local\CRE\mhodfgapkpmcepkmcohmfkneadpikmkd.crx [2013-06-02]

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [956192 2011-02-15] (Broadcom Corporation.)
R2 lxeaCATSCustConnectService; C:\windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxea_device; C:\windows\system32\lxeacoms.exe [1052328 2010-04-14] ( )
R2 lxea_device; C:\windows\SysWOW64\lxeacoms.exe [598696 2010-04-14] ( )
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.)
R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-11-15] (Motorola Mobility LLC)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()
R2 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]

==================== Drivers (Whitelisted) ====================

S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [31264 2013-09-04] (ThreatTrack Security)
S3 HTCAND64; C:\Windows\System32\Drivers\ANDROIDUSB.sys [33736 2009-11-02] (HTC, Corporation) [File not signed]
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [8200552 2010-12-15] (Realtek Semiconductor Corp.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
U3 TrueSight; C:\Windows\SysWOW64\drivers\TrueSight.sys [29160 2014-07-18] ()
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U2 IAStorDataMgrSvc;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
S3 motccgpfl; system32\DRIVERS\motccgpfl.sys [X]
U2 nvUpdatusService;
U2 Oasis2Service;
U2 PCCarerServic;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
S1 SBRE; \??\C:\windows\system32\drivers\SBREdrv.sys [X]
U2 SoftwareService;
U2 Stereo Service;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-20 07:20 - 2014-07-20 07:20 - 00000000 ____D () C:\Users\Greg\Desktop\FRST-OlderVersion
2014-07-20 06:53 - 2014-07-20 06:53 - 00869456 _____ () C:\Users\Greg\Desktop\Norton_Removal_Tool.exe
2014-07-20 06:38 - 2014-07-20 06:38 - 03480040 _____ (McAfee, Inc.) C:\Users\Greg\Desktop\MCPR.exe
2014-07-19 17:58 - 2014-07-19 18:00 - 04028663 _____ () C:\Users\Greg\Desktop\cureit(5244).log
2014-07-19 17:08 - 2014-07-19 17:23 - 00000000 ____D () C:\Users\Greg\Doctor Web
2014-07-19 16:55 - 2014-07-19 17:07 - 153780720 _____ () C:\Users\Greg\Desktop\hdkelxdq.exe
2014-07-19 15:26 - 2014-07-19 15:26 - 02347384 _____ (ESET) C:\Users\Greg\Desktop\esetsmartinstaller_enu.exe
2014-07-19 15:26 - 2014-07-19 15:26 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-19 14:08 - 2014-07-19 14:33 - 00001059 _____ () C:\Users\Greg\Desktop\mbam.txt
2014-07-19 14:07 - 2014-07-19 14:07 - 00001059 _____ () C:\mbam.txt
2014-07-19 11:17 - 2014-07-19 21:07 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-19 11:15 - 2014-07-19 11:15 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-19 11:15 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-07-19 11:15 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-07-19 11:15 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-07-19 11:06 - 2014-07-19 11:08 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Greg\Desktop\mbam-clean-2.1.1.1001.exe
2014-07-19 11:02 - 2014-07-20 07:12 - 00190948 _____ () C:\windows\PFRO.log
2014-07-19 10:27 - 2014-07-19 10:27 - 00854390 _____ () C:\Users\Greg\Desktop\SecurityCheck.exe
2014-07-19 10:25 - 2014-07-19 10:25 - 00001007 _____ () C:\Users\Greg\Documents\eseterror.txt
2014-07-19 10:20 - 2014-07-19 10:20 - 00000093 _____ () C:\Users\Greg\Documents\mbamerror.txt
2014-07-19 10:17 - 2014-07-19 11:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Greg\Desktop\mbam-setup-2.0.2.1012.exe
2014-07-19 10:10 - 2014-07-20 07:12 - 00000840 _____ () C:\windows\setupact.log
2014-07-19 10:10 - 2014-07-19 10:10 - 00000000 _____ () C:\windows\setuperr.log
2014-07-18 22:40 - 2014-07-18 22:40 - 00066735 _____ () C:\Users\Greg\Documents\FRST1039.txt
2014-07-18 22:14 - 2014-07-18 22:14 - 00002273 _____ () C:\Users\Greg\Documents\JRT.txt
2014-07-18 22:13 - 2014-07-18 22:13 - 00002273 _____ () C:\Users\Greg\Desktop\JRT.txt
2014-07-18 22:08 - 2014-07-18 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-07-18 22:02 - 2014-07-18 22:02 - 00006255 _____ () C:\Users\Greg\Documents\AdwCleaner[S0].txt
2014-07-18 21:57 - 2014-07-18 21:58 - 00000000 ____D () C:\AdwCleaner
2014-07-18 21:53 - 2014-07-20 07:20 - 02089984 _____ (Farbar) C:\Users\Greg\Desktop\FRST64.exe
2014-07-18 21:48 - 2014-07-18 21:48 - 01016261 _____ (Thisisu) C:\Users\Greg\Desktop\JRT.exe
2014-07-18 21:48 - 2014-07-18 21:48 - 00448512 _____ (OldTimer Tools) C:\Users\Greg\Desktop\TFC.exe
2014-07-18 21:47 - 2014-07-18 21:56 - 01354223 _____ () C:\Users\Greg\Desktop\AdwCleaner.exe
2014-07-18 21:47 - 2014-07-18 21:47 - 00001204 _____ () C:\Users\Greg\Documents\fixlist.txt
2014-07-18 18:41 - 2014-07-18 20:04 - 00029160 _____ () C:\windows\SysWOW64\Drivers\TrueSight.sys
2014-07-18 18:41 - 2014-07-18 18:41 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-18 18:40 - 2014-07-18 18:40 - 04770904 _____ () C:\Users\Greg\Desktop\RogueKiller.exe
2014-07-17 22:41 - 2014-07-17 22:41 - 00000000 __SHD () C:\Users\Greg\AppData\Local\EmieUserList
2014-07-17 22:41 - 2014-07-17 22:41 - 00000000 __SHD () C:\Users\Greg\AppData\Local\EmieSiteList
2014-07-17 17:48 - 2014-07-17 17:48 - 00008392 _____ () C:\windows\SysWOW64\20140717174812.csv
2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\windows\SysWOW64\Quarantine
2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\windows\SysWOW64\Definitions
2014-07-17 15:02 - 2014-07-17 15:04 - 163602432 _____ () C:\Users\Greg\Downloads\VIPRERescue31342.exe
2014-07-17 14:59 - 2014-07-17 22:13 - 00000000 ____D () C:\VIPRERESCUE
2014-07-17 13:24 - 2014-07-17 13:32 - 00001961 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-07-17 13:23 - 2014-07-17 13:24 - 20147048 _____ (SUPERAntiSpyware) C:\Users\Greg\Downloads\SAS_381D18.EXE
2014-07-17 12:25 - 2014-07-17 12:25 - 00000000 _____ () C:\windows\SysWOW64\SBRC.dat
2014-07-17 12:25 - 2013-09-04 14:57 - 00031264 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiutil.sys
2014-07-17 12:25 - 2013-05-23 08:39 - 00041032 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiark.sys
2014-07-17 12:20 - 2014-07-17 13:13 - 00002954 _____ () C:\Users\Greg\Desktop\Rkill.txt
2014-07-17 12:20 - 2014-07-17 12:20 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\Greg\Downloads\uSeRiNiT.exe
2014-07-16 16:54 - 2014-07-16 16:54 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Greg\Downloads\avira_en_av___ws2.exe
2014-07-16 16:54 - 2014-07-16 16:54 - 00000000 ____D () C:\OETemp
2014-07-16 16:26 - 2014-07-16 16:26 - 00000000 ____D () C:\Users\Greg\AppData\Local\Adobe
2014-07-16 15:15 - 2014-07-16 15:15 - 00000000 _____ () C:\Users\Greg\AppData\Local\{73AAB2C6-70B7-45DF-B7A8-CDF969E0279D}
2014-07-16 13:59 - 2014-07-17 13:25 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-07-16 13:59 - 2014-07-17 13:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-07-16 13:44 - 2014-07-16 13:44 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\SUPERAntiSpyware.com
2014-07-16 13:42 - 2014-07-16 13:42 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-07-16 11:55 - 2014-07-16 11:55 - 00044625 _____ () C:\Users\Greg\Downloads\Addition1.txt
2014-07-16 11:54 - 2014-07-16 11:54 - 00061027 _____ () C:\Users\Greg\Downloads\FRST1.txt
2014-07-16 11:42 - 2014-07-16 11:42 - 00044625 _____ () C:\Users\Greg\Desktop\Addition.txt
2014-07-16 11:41 - 2014-07-20 08:20 - 00027785 _____ () C:\Users\Greg\Desktop\FRST.txt
2014-07-16 11:41 - 2014-07-20 08:19 - 00000000 ____D () C:\FRST
2014-07-10 18:07 - 2014-07-16 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2014-07-09 09:57 - 2014-06-29 22:09 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-09 09:57 - 2014-06-29 22:04 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-09 09:56 - 2014-06-20 16:14 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-07-09 09:56 - 2014-06-20 15:39 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-07-09 09:56 - 2014-06-18 21:39 - 23464448 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-09 09:56 - 2014-06-18 21:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-09 09:56 - 2014-06-18 21:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-07-09 09:56 - 2014-06-18 20:48 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-09 09:56 - 2014-06-18 20:42 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-07-09 09:56 - 2014-06-18 20:42 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-07-09 09:56 - 2014-06-18 20:41 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-07-09 09:56 - 2014-06-18 20:41 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-07-09 09:56 - 2014-06-18 20:32 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-09 09:56 - 2014-06-18 20:31 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-07-09 09:56 - 2014-06-18 20:26 - 00598016 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-07-09 09:56 - 2014-06-18 20:24 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-07-09 09:56 - 2014-06-18 20:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-07-09 09:56 - 2014-06-18 20:23 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-07-09 09:56 - 2014-06-18 20:16 - 17276416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-07-09 09:56 - 2014-06-18 20:14 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-07-09 09:56 - 2014-06-18 20:09 - 00452608 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-09 09:56 - 2014-06-18 19:59 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 09:56 - 2014-06-18 19:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-07-09 09:56 - 2014-06-18 19:53 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-07-09 09:56 - 2014-06-18 19:51 - 05721088 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-09 09:56 - 2014-06-18 19:50 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-07-09 09:56 - 2014-06-18 19:48 - 00292864 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-07-09 09:56 - 2014-06-18 19:39 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-07-09 09:56 - 2014-06-18 19:38 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-07-09 09:56 - 2014-06-18 19:37 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-07-09 09:56 - 2014-06-18 19:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-07-09 09:56 - 2014-06-18 19:35 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-07-09 09:56 - 2014-06-18 19:33 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-09 09:56 - 2014-06-18 19:32 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-07-09 09:56 - 2014-06-18 19:28 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-07-09 09:56 - 2014-06-18 19:28 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-07-09 09:56 - 2014-06-18 19:27 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-09 09:56 - 2014-06-18 19:27 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-07-09 09:56 - 2014-06-18 19:25 - 00442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-07-09 09:56 - 2014-06-18 19:23 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-07-09 09:56 - 2014-06-18 19:22 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-07-09 09:56 - 2014-06-18 19:12 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-07-09 09:56 - 2014-06-18 19:06 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 09:56 - 2014-06-18 19:01 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-07-09 09:56 - 2014-06-18 18:59 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-07-09 09:56 - 2014-06-18 18:58 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-09 09:56 - 2014-06-18 18:58 - 00239616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-07-09 09:56 - 2014-06-18 18:52 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-07-09 09:56 - 2014-06-18 18:51 - 13527040 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-09 09:56 - 2014-06-18 18:49 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-07-09 09:56 - 2014-06-18 18:46 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-07-09 09:56 - 2014-06-18 18:45 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-07-09 09:56 - 2014-06-18 18:35 - 11742208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-07-09 09:56 - 2014-06-18 18:34 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-09 09:56 - 2014-06-18 18:15 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-07-09 09:56 - 2014-06-18 18:13 - 01791488 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-07-09 09:56 - 2014-06-18 18:09 - 01139200 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-07-09 09:56 - 2014-06-18 18:07 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-07-09 09:56 - 2014-06-17 22:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-09 09:56 - 2014-06-17 21:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-07-09 09:56 - 2014-06-17 21:10 - 03157504 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-09 09:56 - 2014-06-06 06:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-09 09:56 - 2014-06-06 05:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-07-09 09:56 - 2014-06-05 10:45 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-09 09:56 - 2014-06-05 10:26 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-07-09 09:56 - 2014-06-05 10:25 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-07-09 09:56 - 2014-05-30 02:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-08 19:56 - 2014-07-08 19:56 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
2014-07-05 00:52 - 2014-07-16 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-07-05 00:52 - 2014-07-16 15:08 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-07-05 00:52 - 2014-07-16 15:08 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2014-07-05 00:52 - 2014-07-05 00:52 - 00002166 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-06-28 21:51 - 2014-06-28 21:51 - 04812672 _____ (Piriform Ltd) C:\Users\Greg\Downloads\ccsetup415.exe
2014-06-22 21:18 - 2014-06-22 21:18 - 00000038 _____ () C:\Users\Greg\Documents\Fifa.txt
2014-06-21 20:20 - 2014-06-21 20:20 - 00006394 _____ () C:\Users\Greg\.recently-used.xbel
2014-06-21 16:11 - 2014-06-21 16:11 - 00436328 _____ () C:\ProgramData\SPL54D.tmp
2014-06-21 13:23 - 2014-06-21 13:23 - 00436328 _____ () C:\ProgramData\SPL92BD.tmp
2014-06-20 09:38 - 2014-06-20 09:40 - 00000000 ____D () C:\Users\TEMP

==================== One Month Modified Files and Folders =======

2014-07-20 08:20 - 2014-07-16 11:41 - 00027785 _____ () C:\Users\Greg\Desktop\FRST.txt
2014-07-20 08:19 - 2014-07-16 11:41 - 00000000 ____D () C:\FRST
2014-07-20 08:13 - 2012-04-04 10:21 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-20 08:06 - 2013-10-01 11:14 - 00000000 ____D () C:\Users\Greg\AppData\Local\CrashDumps
2014-07-20 07:45 - 2012-01-04 23:06 - 00000912 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-20 07:44 - 2013-07-13 14:02 - 00000904 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3584956248-2509123145-931476634-1001UA.job
2014-07-20 07:22 - 2009-07-14 00:45 - 00021280 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-20 07:22 - 2009-07-14 00:45 - 00021280 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-20 07:20 - 2014-07-20 07:20 - 00000000 ____D () C:\Users\Greg\Desktop\FRST-OlderVersion
2014-07-20 07:20 - 2014-07-18 21:53 - 02089984 _____ (Farbar) C:\Users\Greg\Desktop\FRST64.exe
2014-07-20 07:18 - 2012-01-04 22:11 - 01574421 _____ () C:\windows\WindowsUpdate.log
2014-07-20 07:18 - 2009-07-14 01:13 - 00782510 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-20 07:16 - 2013-12-22 14:07 - 00000000 ___RD () C:\Users\Greg\Google Drive
2014-07-20 07:14 - 2012-04-10 16:25 - 00134680 _____ () C:\ProgramData\lxeascan.log
2014-07-20 07:14 - 2012-01-04 22:56 - 00000000 ____D () C:\ProgramData\VeriFace
2014-07-20 07:13 - 2012-01-04 22:57 - 00113767 _____ () C:\windows\system32\fastboot.set
2014-07-20 07:13 - 2012-01-04 22:56 - 03563071 _____ () C:\FaceProv.log
2014-07-20 07:12 - 2014-07-19 11:02 - 00190948 _____ () C:\windows\PFRO.log
2014-07-20 07:12 - 2014-07-19 10:10 - 00000840 _____ () C:\windows\setupact.log
2014-07-20 07:12 - 2012-01-28 17:00 - 00000000 ____D () C:\Temp
2014-07-20 07:12 - 2012-01-04 23:06 - 00000908 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-20 07:12 - 2009-07-14 01:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-20 07:06 - 2013-08-24 01:21 - 00000000 ____D () C:\ProgramData\Norton
2014-07-20 06:53 - 2014-07-20 06:53 - 00869456 _____ () C:\Users\Greg\Desktop\Norton_Removal_Tool.exe
2014-07-20 06:42 - 2012-01-27 03:39 - 00000000 ____D () C:\Users\Greg
2014-07-20 06:38 - 2014-07-20 06:38 - 03480040 _____ (McAfee, Inc.) C:\Users\Greg\Desktop\MCPR.exe
2014-07-19 23:44 - 2013-07-13 14:02 - 00000852 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3584956248-2509123145-931476634-1001Core.job
2014-07-19 21:07 - 2014-07-19 11:17 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-19 18:00 - 2014-07-19 17:58 - 04028663 _____ () C:\Users\Greg\Desktop\cureit(5244).log
2014-07-19 17:23 - 2014-07-19 17:08 - 00000000 ____D () C:\Users\Greg\Doctor Web
2014-07-19 17:07 - 2014-07-19 16:55 - 153780720 _____ () C:\Users\Greg\Desktop\hdkelxdq.exe
2014-07-19 15:26 - 2014-07-19 15:26 - 02347384 _____ (ESET) C:\Users\Greg\Desktop\esetsmartinstaller_enu.exe
2014-07-19 15:26 - 2014-07-19 15:26 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-19 14:33 - 2014-07-19 14:08 - 00001059 _____ () C:\Users\Greg\Desktop\mbam.txt
2014-07-19 14:07 - 2014-07-19 14:07 - 00001059 _____ () C:\mbam.txt
2014-07-19 13:18 - 2012-01-28 16:42 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Winamp
2014-07-19 11:15 - 2014-07-19 11:15 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-19 11:13 - 2014-07-19 10:17 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Greg\Desktop\mbam-setup-2.0.2.1012.exe
2014-07-19 11:08 - 2014-07-19 11:06 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Greg\Desktop\mbam-clean-2.1.1.1001.exe
2014-07-19 10:27 - 2014-07-19 10:27 - 00854390 _____ () C:\Users\Greg\Desktop\SecurityCheck.exe
2014-07-19 10:26 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\system32\NDF
2014-07-19 10:25 - 2014-07-19 10:25 - 00001007 _____ () C:\Users\Greg\Documents\eseterror.txt
2014-07-19 10:20 - 2014-07-19 10:20 - 00000093 _____ () C:\Users\Greg\Documents\mbamerror.txt
2014-07-19 10:10 - 2014-07-19 10:10 - 00000000 _____ () C:\windows\setuperr.log
2014-07-18 23:26 - 2012-01-28 22:09 - 00000000 ____D () C:\Users\Greg\.gimp-2.6
2014-07-18 22:40 - 2014-07-18 22:40 - 00066735 _____ () C:\Users\Greg\Documents\FRST1039.txt
2014-07-18 22:14 - 2014-07-18 22:14 - 00002273 _____ () C:\Users\Greg\Documents\JRT.txt
2014-07-18 22:13 - 2014-07-18 22:13 - 00002273 _____ () C:\Users\Greg\Desktop\JRT.txt
2014-07-18 22:08 - 2014-07-18 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-07-18 22:02 - 2014-07-18 22:02 - 00006255 _____ () C:\Users\Greg\Documents\AdwCleaner[S0].txt
2014-07-18 21:58 - 2014-07-18 21:57 - 00000000 ____D () C:\AdwCleaner
2014-07-18 21:56 - 2014-07-18 21:47 - 01354223 _____ () C:\Users\Greg\Desktop\AdwCleaner.exe
2014-07-18 21:48 - 2014-07-18 21:48 - 01016261 _____ (Thisisu) C:\Users\Greg\Desktop\JRT.exe
2014-07-18 21:48 - 2014-07-18 21:48 - 00448512 _____ (OldTimer Tools) C:\Users\Greg\Desktop\TFC.exe
2014-07-18 21:47 - 2014-07-18 21:47 - 00001204 _____ () C:\Users\Greg\Documents\fixlist.txt
2014-07-18 20:14 - 2012-07-20 15:35 - 00018432 ___SH () C:\Users\Greg\Thumbs.db
2014-07-18 20:04 - 2014-07-18 18:41 - 00029160 _____ () C:\windows\SysWOW64\Drivers\TrueSight.sys
2014-07-18 18:41 - 2014-07-18 18:41 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-18 18:40 - 2014-07-18 18:40 - 04770904 _____ () C:\Users\Greg\Desktop\RogueKiller.exe
2014-07-17 22:41 - 2014-07-17 22:41 - 00000000 __SHD () C:\Users\Greg\AppData\Local\EmieUserList
2014-07-17 22:41 - 2014-07-17 22:41 - 00000000 __SHD () C:\Users\Greg\AppData\Local\EmieSiteList
2014-07-17 22:41 - 2012-01-27 03:45 - 00000000 ____D () C:\Users\Greg\AppData\Local\Google
2014-07-17 22:13 - 2014-07-17 14:59 - 00000000 ____D () C:\VIPRERESCUE
2014-07-17 19:20 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\rescache
2014-07-17 17:48 - 2014-07-17 17:48 - 00008392 _____ () C:\windows\SysWOW64\20140717174812.csv
2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\windows\SysWOW64\Quarantine
2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\windows\SysWOW64\Definitions
2014-07-17 15:04 - 2014-07-17 15:02 - 163602432 _____ () C:\Users\Greg\Downloads\VIPRERescue31342.exe
2014-07-17 13:32 - 2014-07-17 13:24 - 00001961 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-07-17 13:25 - 2014-07-16 13:59 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-07-17 13:24 - 2014-07-17 13:23 - 20147048 _____ (SUPERAntiSpyware) C:\Users\Greg\Downloads\SAS_381D18.EXE
2014-07-17 13:24 - 2014-07-16 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-07-17 13:13 - 2014-07-17 12:20 - 00002954 _____ () C:\Users\Greg\Desktop\Rkill.txt
2014-07-17 12:25 - 2014-07-17 12:25 - 00000000 _____ () C:\windows\SysWOW64\SBRC.dat
2014-07-17 12:20 - 2014-07-17 12:20 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\Greg\Downloads\uSeRiNiT.exe
2014-07-16 17:25 - 2012-11-03 11:08 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-16 17:00 - 2012-01-27 03:39 - 00002239 _____ () C:\Users\Greg\Desktop\OneKey Recovery.lnk
2014-07-16 16:54 - 2014-07-16 16:54 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Greg\Downloads\avira_en_av___ws2.exe
2014-07-16 16:54 - 2014-07-16 16:54 - 00000000 ____D () C:\OETemp
2014-07-16 16:52 - 2012-11-03 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-16 16:52 - 2012-11-03 11:08 - 00000000 ____D () C:\ProgramData\Avira
2014-07-16 16:26 - 2014-07-16 16:26 - 00000000 ____D () C:\Users\Greg\AppData\Local\Adobe
2014-07-16 15:15 - 2014-07-16 15:15 - 00000000 _____ () C:\Users\Greg\AppData\Local\{73AAB2C6-70B7-45DF-B7A8-CDF969E0279D}
2014-07-16 15:08 - 2014-07-10 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2014-07-16 15:08 - 2014-07-05 00:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-07-16 15:08 - 2014-07-05 00:52 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-07-16 15:08 - 2014-07-05 00:52 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2014-07-16 15:08 - 2014-05-15 08:06 - 00000000 ____D () C:\windows\System32\Tasks\Norton Internet Security
2014-07-16 15:08 - 2013-08-24 01:27 - 00000000 ____D () C:\windows\system32\Drivers\NISx64
2014-07-16 15:08 - 2012-03-05 17:32 - 00000000 ____D () C:\Users\Gregory Miller
2014-07-16 15:08 - 2012-03-02 19:12 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2014-07-16 15:08 - 2012-02-12 17:50 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Spotify
2014-07-16 15:08 - 2012-01-27 19:20 - 00000000 ____D () C:\Users\Kirsten
2014-07-16 15:08 - 2012-01-27 03:39 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 15:08 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\AppCompat
2014-07-16 15:07 - 2012-03-02 19:12 - 00000000 ____D () C:\Program Files (x86)\Amazon
2014-07-16 13:58 - 2013-12-23 14:37 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\U3
2014-07-16 13:44 - 2014-07-16 13:44 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\SUPERAntiSpyware.com
2014-07-16 13:42 - 2014-07-16 13:42 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-07-16 11:55 - 2014-07-16 11:55 - 00044625 _____ () C:\Users\Greg\Downloads\Addition1.txt
2014-07-16 11:54 - 2014-07-16 11:54 - 00061027 _____ () C:\Users\Greg\Downloads\FRST1.txt
2014-07-16 11:42 - 2014-07-16 11:42 - 00044625 _____ () C:\Users\Greg\Desktop\Addition.txt
2014-07-16 11:19 - 2012-06-11 17:58 - 05549568 ___SH () C:\Users\Greg\Downloads\Thumbs.db
2014-07-16 10:58 - 2012-03-04 18:11 - 00000000 ____D () C:\Users\Greg\Documents\BeerSmith2
2014-07-16 10:21 - 2011-09-28 23:37 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-07-14 01:04 - 2012-04-18 19:22 - 00002772 _____ () C:\ProgramData\lxea.log
2014-07-12 12:54 - 2012-02-12 17:50 - 00000000 ____D () C:\Users\Greg\AppData\Local\Spotify
2014-07-10 09:51 - 2009-07-14 00:45 - 00314856 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-10 03:07 - 2014-05-06 02:29 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-10 03:07 - 2011-09-28 23:37 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 03:07 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2014-07-10 03:07 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\system32\Dism
2014-07-10 03:04 - 2013-08-14 03:01 - 00000000 ____D () C:\windows\system32\MRT
2014-07-10 03:02 - 2012-01-27 04:10 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-07-09 13:13 - 2012-04-04 10:21 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 13:13 - 2012-04-04 10:21 - 00003768 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-07-09 13:13 - 2012-01-27 17:29 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-08 19:56 - 2014-07-08 19:56 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
2014-07-07 20:47 - 2013-12-22 14:05 - 00002030 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-07-07 20:47 - 2013-12-22 14:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-07-05 00:52 - 2014-07-05 00:52 - 00002166 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-07-04 21:18 - 2013-09-13 17:23 - 00004378 ____H () C:\Users\Greg\Downloads\.picasa.ini
2014-06-29 22:09 - 2014-07-09 09:57 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-29 22:04 - 2014-07-09 09:57 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-28 21:53 - 2012-11-22 04:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-28 21:53 - 2012-10-04 21:11 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-28 21:53 - 2012-10-04 21:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-28 21:51 - 2014-06-28 21:51 - 04812672 _____ (Piriform Ltd) C:\Users\Greg\Downloads\ccsetup415.exe
2014-06-23 22:23 - 2012-01-28 16:39 - 00000000 ____D () C:\Users\Greg\AppData\Local\Downloaded Installations
2014-06-23 22:23 - 2012-01-28 16:38 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-06-23 21:35 - 2012-04-10 16:27 - 00000000 ____D () C:\ProgramData\Lx_cats
2014-06-23 21:34 - 2012-04-10 16:28 - 00051221 _____ () C:\ProgramData\lxeaJSW.log
2014-06-22 21:18 - 2014-06-22 21:18 - 00000038 _____ () C:\Users\Greg\Documents\Fifa.txt
2014-06-21 20:20 - 2014-06-21 20:20 - 00006394 _____ () C:\Users\Greg\.recently-used.xbel
2014-06-21 19:48 - 2012-01-28 22:10 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\gtk-2.0
2014-06-21 16:11 - 2014-06-21 16:11 - 00436328 _____ () C:\ProgramData\SPL54D.tmp
2014-06-21 13:23 - 2014-06-21 13:23 - 00436328 _____ () C:\ProgramData\SPL92BD.tmp
2014-06-20 16:14 - 2014-07-09 09:56 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-06-20 15:39 - 2014-07-09 09:56 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-06-20 09:41 - 2009-07-14 01:09 - 00000000 ____D () C:\windows\System32\Tasks\WPD
2014-06-20 09:40 - 2014-06-20 09:38 - 00000000 ____D () C:\Users\TEMP
2014-06-20 09:39 - 2012-04-10 16:28 - 00000504 _____ () C:\ProgramData\FastPics.log
2014-06-20 09:39 - 2009-07-14 00:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-18 01:25

==================== End Of Log ============================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-07-2014
Ran by Greg at 2014-07-20 08:20:54
Running from C:\Users\Greg\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Ad-Aware Browsing Protection (HKLM-x32\...\Ad-Aware Browsing Protection) (Version: 1.0.0.5 - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.2.0.2070 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version:  - Amazon)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
BeerSmith 2 (HKLM-x32\...\BeerSmith 2) (Version:  - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.7.0.3 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.8.0.5 - Canon Inc.)
Canon Utilities Digital Photo Professional 1.0 (HKLM-x32\...\InstallShield_{F011B8F1-BCCD-4E73-84F8-CB2F2D258755}) (Version: 1.0 - Canon)
Canon Utilities Digital Photo Professional 1.0 (x32 Version: 1.0 - Canon) Hidden
Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\DPP) (Version: 3.11.1.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.13.21.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.2.33 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.1.10 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform)
ChromecastApp (HKCU\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.316.0 - Google Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DD Poker 3  (HKLM-x32\...\DD Poker 3 ) (Version:  - Donohoe Digital LLC)
DD Tournament Poker 1.1 (HKLM-x32\...\DD Tournament Poker 1.1) (Version: 0.1.0.0 - Donohoe Digital LLC)
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 6.0.2.1 - Lenovo)
Energy Management (x32 Version: 6.0.2.1 - Lenovo) Hidden
Evernote v. 5.4.1 (HKLM-x32\...\{A5F7DF42-F67D-11E3-B7EB-00163E98E7D6}) (Version: 5.4.1.3962 - Evernote Corp.)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.20 - Google Inc.)
Google Drive (HKLM-x32\...\{75939021-3B68-419D-8DC1-E9823BFF9658}) (Version: 1.16.7009.9618 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Google+ Auto Backup (HKCU\...\Google+ Auto Backup) (Version: 1.0.25.141 - Google, Inc.)
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Intel PROSet Wireless (Version:  - ) Hidden
Intel PROSet Wireless (x32 Version:  - ) Hidden
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{25FBDA9A-E868-4B3B-B9FF-D923818511A1}) (Version: 14.2.0000 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.5.1001 - Intel Corporation)
Intel® Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
Intel® Wireless Display (HKLM-x32\...\{F84906ED-BB54-4889-B131-FED9C9056FC8}) (Version: 2.0.27.0 - Intel Corporation)
iTunes (HKLM\...\{A535111D-95C8-487F-869E-CE4C239972D2}) (Version: 11.1.1.11 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.8000 - Broadcom Corporation)
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.1.7600.0083 - Realtek Semiconductor Corp.)
Lenovo EE Boot Optimizer (HKLM\...\Lenovo EE Boot Optimizer) (Version: 0.0.1.5 - Lenovo)
Lenovo Games Console (HKLM-x32\...\Lenovo Games Console) (Version: 1.2.6.436 - Oberon Media Inc.)
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 7.0.1628 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 7.0.1628 - CyberLink Corp.) Hidden
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.3603 - CyberLink Corp.)
Lenovo YouCam (x32 Version: 3.1.3603 - CyberLink Corp.) Hidden
Lexmark S300-S400 Series (HKLM\...\Lexmark S300-S400 Series) (Version:  - Lexmark International, Inc.)
Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM-x32\...\McAfee Security Scan) (Version: 3.0.285.6 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.4.5 - Motorola Mobility)
Motorola Device Software Update (x32 Version: 13.09.3001 - Motorola Mobility) Hidden
Motorola Mobile Drivers Installation 6.3.0 (HKLM\...\{759E6A2F-1F01-45EF-A0C4-22F1B56CB975}) (Version: 6.3.0 - Motorola Mobility LLC)
Mozilla Firefox 30.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 en-US)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Music Manager (HKCU\...\MusicManager) (Version:  - Google, Inc.)
Onekey Theater (HKLM-x32\...\InstallShield_{D4B060B9-AD4A-4152-9D99-28B93C615AFE}) (Version: 2.0.2.7 - Lenovo)
Onekey Theater (x32 Version: 2.0.2.7 - Lenovo) Hidden
ooVoo (HKLM-x32\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 2.2.4.25 - ooVoo LLC.)
OpenOffice 4.1.0 (HKLM-x32\...\{C87EF11D-36E9-479D-9898-7541EA1E8A6A}) (Version: 4.10.9764 - Apache Software Foundation)
PandoraRecovery (Remove Only) (HKLM-x32\...\PandoraRecovery) (Version:  - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.7303 - CyberLink Corp.)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6505 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Reader Driver (HKLM-x32\...\{62BBB2F0-E220-4821-A564-730807D2C34D}) (Version: 6.1.7600.10008 - Realtek Semiconductor Corp.)
Spotify (HKCU\...\Spotify) (Version: 0.9.7.16.g4b197456 - Spotify AB)
SRS Control Panel (HKLM\...\{25EE6AF4-8FD6-4E09-AD9B-3ACC0B81D902}) (Version: 1.11.4800 - SRS Labs, Inc.)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.7.1026 - SUPERAntiSpyware.com)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.7.0 - Synaptics Incorporated)
Synctunes Desktop (HKLM-x32\...\{4A14B3B7-5D71-4C3F-967B-50D6A42BF7F7}) (Version: 1.1.0 - The Bit Studio)
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.6 - Lenovo)
UserGuide (x32 Version: 1.0.0.6 - Lenovo) Hidden
VeriFace (HKLM-x32\...\VeriFace) (Version: 4.0.0.1206 - Lenovo)
Winamp (HKLM-x32\...\Winamp) (Version: 5.623  - Nullsoft, Inc)
Winamp Detector Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Driver Package - Lenovo (ACPIVPC) System  (12/02/2010 6.1.0.1) (HKLM\...\EA12B1FB53CE4E387C31A85236C41EF559B5E392) (Version: 12/02/2010 6.1.0.1 - Lenovo)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WModem Driver Installer (HKLM-x32\...\HTC_WModemDriver) (Version: 2.0.6.9 - HTC)

==================== Restore Points  =========================

19-07-2014 23:40:17 Scheduled Checkpoint

==================== Hosts content: ==========================

2014-07-19 21:06 - 2014-07-20 07:21 - 00000035 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0BDE6203-CCC5-425E-A1A7-CF8FF70DAF89} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2010-12-04] (CyberLink)
Task: {191DE6ED-7F99-4268-A4F4-C4C57A7AB600} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe
Task: {2484D104-9D1F-401E-91EC-7DC0DDBBF6F2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-04] (Google Inc.)
Task: {42D32A27-12A6-4564-A7E8-6F8257860CB6} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\WSCStub.exe
Task: {67E33E39-543E-4F8F-A6ED-5C1EEAF942D3} - System32\Tasks\Motorola Device Manager Engine => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] ()
Task: {731F3C08-2C31-4B1B-B56F-3EAE91BB2864} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {79502228-3D3D-498D-B65A-D0FA80BC4269} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {7A02B74B-1065-448C-80DB-0AF05B6094E9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3584956248-2509123145-931476634-1001Core => C:\Users\Greg\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-13] (Google Inc.)
Task: {7BACAB48-89C8-493A-B370-61540EADEB4A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3584956248-2509123145-931476634-1001UA => C:\Users\Greg\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-13] (Google Inc.)
Task: {89A8CD9C-B01D-4E32-9C38-5F084F969A96} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {930BD5C8-78BD-4223-9BC6-1227A34FEB38} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] ()
Task: {9DC97AD5-52CE-4CD9-990D-C1A6FBBFE0A3} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {C2F080D2-B1BE-4A93-99E3-79DD8A1CC28C} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {C5952834-37B7-43E7-9544-45A8A0BC840B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd)
Task: {DC13C704-3687-4D6A-BB90-F0BFB0B7A414} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-04] (Google Inc.)
Task: {F7DD5874-46AD-464A-84D7-E1036FB8E211} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe
Task: {FE8C80C7-AF7C-4D6B-9705-97989B950464} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] ()
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3584956248-2509123145-931476634-1001Core.job => C:\Users\Greg\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3584956248-2509123145-931476634-1001UA.job => C:\Users\Greg\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-07-27 16:07 - 2011-07-27 16:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2012-04-10 16:26 - 2009-11-04 08:17 - 00189440 _____ () C:\windows\system32\spool\PRTPROCS\x64\lxeadrpp.dll
2010-11-11 06:42 - 2010-11-11 06:42 - 00202144 _____ () C:\Program Files (x86)\Lenovo\Onekey Theater\ActiveDetect64.dll
2010-11-11 06:44 - 2010-11-11 06:44 - 00156576 _____ () C:\Program Files (x86)\Lenovo\Onekey Theater\WindowsApiHookDll64.dll
2012-01-04 22:56 - 2012-01-04 22:56 - 01502720 _____ () C:\windows\system32\IcnOvrly.dll
2012-01-04 22:56 - 2012-01-04 22:56 - 00622592 _____ () C:\windows\system32\SimpleExt.dll
2011-07-27 16:07 - 2011-07-27 16:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2008-12-19 23:20 - 2012-01-04 23:11 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\HookLib.dll
2008-12-19 23:20 - 2012-01-04 23:11 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\kbdhook.dll
2011-04-13 23:01 - 2011-03-25 05:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-04-10 16:25 - 2011-01-23 20:08 - 00770728 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe
2012-04-10 16:25 - 2011-01-23 20:08 - 00148280 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe
2012-01-04 22:59 - 2012-01-04 22:59 - 00100256 _____ () C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
2011-02-15 08:26 - 2011-02-15 08:26 - 00205088 _____ () C:\Program Files\Lenovo\Bluetooth Software\btkeyind.dll
2011-02-14 09:55 - 2011-02-14 09:55 - 00043520 ____R () C:\Program Files\HTC\ModeSelection\VMMModeSelection.exe
2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-10-31 11:05 - 2013-10-31 11:05 - 00172032 _____ () C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\css_core.dll
2012-04-10 16:25 - 2010-04-01 14:23 - 00389120 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\lxeascw.dll
2012-04-10 16:25 - 2009-05-27 08:16 - 00192512 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\lxeadatr.dll
2012-04-10 16:25 - 2010-04-01 14:24 - 01159168 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\lxeaDRS.dll
2012-04-10 16:25 - 2009-03-10 02:43 - 00155648 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\lxeacaps.dll
2010-11-11 06:38 - 2010-11-11 06:38 - 00161696 _____ () C:\Program Files (x86)\Lenovo\Onekey Theater\ActiveDetect32.dll
2010-11-11 06:39 - 2010-11-11 06:39 - 00133024 _____ () C:\Program Files (x86)\Lenovo\Onekey Theater\WindowsApiHookDll32.dll
2012-04-10 16:25 - 2009-02-20 03:48 - 00381440 _____ () C:\windows\system32\lxeasm.dll
2012-04-10 16:25 - 2009-02-20 03:48 - 00023552 _____ () C:\windows\system32\lxeasmr.dll
2012-04-10 16:25 - 2010-04-05 07:56 - 00716954 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\Epwizard.DLL
2012-04-10 16:25 - 2010-04-05 07:55 - 00159890 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\customui.dll
2012-04-10 16:25 - 2010-04-05 07:54 - 00123033 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\Eputil.DLL
2012-04-10 16:25 - 2010-04-05 07:54 - 00143502 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\Imagutil.DLL
2012-04-10 16:25 - 2010-04-05 07:55 - 00061604 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\Epfunct.DLL
2012-04-10 16:25 - 2010-04-05 07:56 - 02203803 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\EPWizRes.dll
2012-04-10 16:25 - 2010-04-05 07:56 - 00045221 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\epstring.dll
2012-04-10 16:25 - 2010-04-05 07:56 - 00094359 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\EPOEMDll.dll
2012-04-10 16:25 - 2009-04-07 16:25 - 00409600 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\iptk.dll
2012-04-10 16:25 - 2009-03-02 11:25 - 00151552 _____ () C:\Program Files (x86)\Lexmark S300-S400 Series\lxeaptp.dll
2014-06-17 18:10 - 2014-06-17 18:10 - 00436576 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2014-06-17 18:10 - 2014-06-17 18:10 - 00318304 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2012-01-04 22:56 - 2012-01-04 22:56 - 00013664 _____ () C:\Program Files (x86)\Lenovo\VeriFace\ChooseLang.dll
2014-07-20 07:14 - 2014-07-20 07:14 - 00098816 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32api.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00110080 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\pywintypes27.dll
2014-07-20 07:14 - 2014-07-20 07:14 - 00364544 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\pythoncom27.dll
2014-07-20 07:14 - 2014-07-20 07:14 - 00045568 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\_socket.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 01160704 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\_ssl.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00320512 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32com.shell.shell.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00713216 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\_hashlib.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 01175040 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\wx._core_.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00805888 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\wx._gdi_.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00811008 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\wx._windows_.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 01062400 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\wx._controls_.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00735232 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\wx._misc_.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00128512 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\_elementtree.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00127488 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\pyexpat.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00557056 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\pysqlite2._sqlite.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00007168 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\hashobjs_ext.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00087552 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\_ctypes.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00119808 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32file.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00108544 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32security.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00018432 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32event.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00038912 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32inet.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00070656 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\wx._html2.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00167936 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32gui.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00011264 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32crypt.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00027136 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\_multiprocessing.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00122368 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\wx._wizard.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00010240 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\select.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00024064 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32pipe.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00686080 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\unicodedata.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00025600 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32pdh.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00525640 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\windows._lib_cacheinvalidation.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00035840 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32process.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00017408 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32profile.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00022528 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\win32ts.pyd
2014-07-20 07:14 - 2014-07-20 07:14 - 00078336 _____ () C:\Users\Greg\AppData\Local\Temp\_MEI40402\wx._animate.pyd
2014-06-17 20:46 - 2014-06-17 20:47 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-07-09 13:13 - 2014-07-09 13:13 - 17029808 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Greg\Documents\fund performance.doc:Roxio EMC Stream

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============

Name: SBRE
Description: SBRE
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: SBRE
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/20/2014 08:06:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: plugin-container.exe, version: 30.0.0.5269, time stamp: 0x53914233
Faulting module name: mozalloc.dll, version: 30.0.0.5269, time stamp: 0x53911393
Exception code: 0x80000003
Fault offset: 0x0000141b
Faulting process id: 0xa14
Faulting application start time: 0xplugin-container.exe0
Faulting application path: plugin-container.exe1
Faulting module path: plugin-container.exe2
Report Id: plugin-container.exe3

Error: (07/20/2014 07:50:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: plugin-container.exe, version: 30.0.0.5269, time stamp: 0x53914233
Faulting module name: mozalloc.dll, version: 30.0.0.5269, time stamp: 0x53911393
Exception code: 0x80000003
Fault offset: 0x0000141b
Faulting process id: 0xc04
Faulting application start time: 0xplugin-container.exe0
Faulting application path: plugin-container.exe1
Faulting module path: plugin-container.exe2
Report Id: plugin-container.exe3

Error: (07/20/2014 07:15:12 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: Windows cannot access the file C:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exe for one of the following reasons:
there is a problem with the network connection, the disk that the file is stored on, or the storage
drivers installed on this computer; or the disk is missing.
Windows closed the program Music Manager because of this error.

Program: Music Manager
File: C:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exe

The error value is listed in the Additional Data section.
User Action
1. Open the file again.
This situation might be a temporary problem that corrects itself when the program runs again.
2.
If the file still cannot be accessed and
    - It is on the network,
your network administrator should verify that there is not a problem with the network and that the server can be contacted.
    - It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for
further assistance.

Additional Data
Error value: C0000185
Disk type: 3

Error: (07/20/2014 07:15:12 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: MusicManager.exe, version: 1.0.117.4968, time stamp: 0x537533b5
Faulting module name: MusicManager.exe, version: 1.0.117.4968, time stamp: 0x537533b5
Exception code: 0xc0000006
Fault offset: 0x00086f80
Faulting process id: 0xfc0
Faulting application start time: 0xMusicManager.exe0
Faulting application path: MusicManager.exe1
Faulting module path: MusicManager.exe2
Report Id: MusicManager.exe3

Error: (07/20/2014 07:13:27 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/20/2014 07:11:36 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: )
Description: The Cryptographic Services service failed to initialize the VSS backup "System Writer" object.


Details:
Could not query the status of the EventSystem service.

System Error:
A system shutdown is in progress.
.

Error: (07/20/2014 07:10:02 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/20/2014 07:03:55 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/20/2014 06:50:46 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: Windows cannot access the file C:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exe for one of the following reasons:
there is a problem with the network connection, the disk that the file is stored on, or the storage
drivers installed on this computer; or the disk is missing.
Windows closed the program Music Manager because of this error.

Program: Music Manager
File: C:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exe

The error value is listed in the Additional Data section.
User Action
1. Open the file again.
This situation might be a temporary problem that corrects itself when the program runs again.
2.
If the file still cannot be accessed and
    - It is on the network,
your network administrator should verify that there is not a problem with the network and that the server can be contacted.
    - It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for
further assistance.

Additional Data
Error value: C0000185
Disk type: 3

Error: (07/20/2014 06:50:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: MusicManager.exe, version: 1.0.117.4968, time stamp: 0x537533b5
Faulting module name: MusicManager.exe, version: 1.0.117.4968, time stamp: 0x537533b5
Exception code: 0xc0000006
Fault offset: 0x00086f80
Faulting process id: 0xc20
Faulting application start time: 0xMusicManager.exe0
Faulting application path: MusicManager.exe1
Faulting module path: MusicManager.exe2
Report Id: MusicManager.exe3


System errors:
=============
Error: (07/20/2014 07:16:52 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (07/20/2014 07:14:33 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (07/20/2014 07:14:20 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Windows Media Player Network Sharing Service service failed to start due to the following error:
%%1053

Error: (07/20/2014 07:14:20 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Windows Media Player Network Sharing Service service to connect.

Error: (07/20/2014 07:12:22 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
SBRE

Error: (07/20/2014 07:11:34 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (07/20/2014 07:11:34 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (07/20/2014 07:10:39 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error:
%%1068

Error: (07/20/2014 07:10:03 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (07/20/2014 07:10:03 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068


Microsoft Office Sessions:
=========================
Error: (07/20/2014 08:06:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe30.0.0.526953914233mozalloc.dll30.0.0.526953911393800000030000141ba1401cfa410cb0c9b77C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll54dd63bd-1006-11e4-b9e2-e4d53ddad13c

Error: (07/20/2014 07:50:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe30.0.0.526953914233mozalloc.dll30.0.0.526953911393800000030000141bc0401cfa40e432b9565C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll01a65f31-1004-11e4-b9e2-e4d53ddad13c

Error: (07/20/2014 07:15:12 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: C:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exeMusic ManagerC00001853

Error: (07/20/2014 07:15:12 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: MusicManager.exe1.0.117.4968537533b5MusicManager.exe1.0.117.4968537533b5c000000600086f80fc001cfa40bbc5edba9C:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exeC:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exe1d7d641d-0fff-11e4-b9e2-e4d53ddad13c

Error: (07/20/2014 07:13:27 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Greg\Desktop\esetsmartinstaller_enu.exe

Error: (07/20/2014 07:11:36 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: )
Description:
Details:
Could not query the status of the EventSystem service.

System Error:
A system shutdown is in progress.

Error: (07/20/2014 07:10:02 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Greg\Desktop\esetsmartinstaller_enu.exe

Error: (07/20/2014 07:03:55 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Greg\Desktop\esetsmartinstaller_enu.exe

Error: (07/20/2014 06:50:46 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: C:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exeMusic ManagerC00001853

Error: (07/20/2014 06:50:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: MusicManager.exe1.0.117.4968537533b5MusicManager.exe1.0.117.4968537533b5c000000600086f80c2001cfa408574b883cC:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exeC:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exeb3e7954c-0ffb-11e4-8ccd-e4d53ddad13c


CodeIntegrity Errors:
===================================
  Date: 2012-05-07 15:55:30.170
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lenovo\Energy Management\BatteryTestDLL.dll because the set of per-page image hashes could not be found on the system.

  Date: 2012-05-07 15:55:30.151
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lenovo\Onekey Theater\ActiveDetect64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2012-05-07 15:55:30.127
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lenovo\Energy Management\BatteryTestDLL.dll because the set of per-page image hashes could not be found on the system.

  Date: 2012-05-07 14:59:29.997
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lenovo\Onekey Theater\ActiveDetect64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2012-04-08 19:58:19.926
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lenovo\Energy Management\BatteryTestDLL.dll because the set of per-page image hashes could not be found on the system.

  Date: 2012-04-08 19:58:19.915
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lenovo\Onekey Theater\ActiveDetect64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2012-04-08 19:58:19.899
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lenovo\Energy Management\BatteryTestDLL.dll because the set of per-page image hashes could not be found on the system.

  Date: 2012-04-08 19:57:19.350
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lenovo\Onekey Theater\ActiveDetect64.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Percentage of memory in use: 28%
Total physical RAM: 8106.14 MB
Available physical RAM: 5791.27 MB
Total Pagefile: 16210.46 MB
Available Pagefile: 13780.47 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:421.81 GB) (Free:307.18 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:29 GB) (Free:26.26 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 39F31E53)
Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=422 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=29 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=15 GB) - (Type=12)

==================== End Of Log ============================

 

 

 

[homebrew901]

Oh.  No, I haven't reinstalled Norton.  I ain't reinstalling nuthin' until I've got a clean machine.    In fact, is it OK if I uninstall that Super Spyware Removal thing?  It takes forever to load and my laptop is useless until it does on each and ever restart.

[pystryker]

Oh.  No, I haven't reinstalled Norton.  I ain't reinstalling nuthin' until I've got a clean machine.    In fact, is it OK if I uninstall that Super Spyware Removal thing?  It takes forever to load and my laptop is useless until it does on each and ever restart.

Ok, good. You have far too many protection programs than needed on your machine. That's probably causing a lot of the slowness, and we're going to remove them. Please uninstall the programs below and then run a scan with FRST. I won't need the Additions.txt this time, as the last one showed me the programs that we're going to remove.


Step 1: Program Uninstalls

Please uninstall the following programs from your machine:

Ad-Aware Browsing Protection

McAfee Security Scan Plus

SUPERAntiSpyware
 

Step 2:  Scan with FRST

• Start Farbar's Recovery Scan Tool and press the Scan button.
• FRST will scan your system and produce one log this time. Please post it in your next reply.

Things I need to see in your next post:

FRST Log

[homebrew901]

I uninstalled Norton Security Scan and SUPERAntiSpyware; I can't find ad-aware or anything associated with Lavasoft anywhere on my machine.  For no good reason I also disabled Ad-Aware.  Interestingly, I was unable to uninstall it.  Whenever I try to go to my add-ons in Firefox the browser crashes.  Log:

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-07-2014
Ran by Greg (administrator) on GREG-PC on 20-07-2014 14:16:10
Running from C:\Users\Greg\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingc...can-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingc...can-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lexmark International, Inc.) C:\Windows\System32\spool\drivers\x64\3\lxeaserv.exe
( ) C:\Windows\System32\lxeacoms.exe
(Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
(Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
() C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe
(Spotify Ltd) C:\Users\Greg\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
() C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
() C:\Program Files\HTC\ModeSelection\VMMModeSelection.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13353064 2011-11-14] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2538280 2010-12-22] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel® Corporation)
HKLM\...\Run: [Lenovo EE Boot Optimizer] => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2012-01-04] (Lenovo)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [789920 2012-01-04] (Lenovo)
HKLM\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9769888 2012-01-04] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2012-01-04] (Lenovo(beijing) Limited)
HKLM\...\Run: [lxeamon.exe] => C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe [148280 2011-01-23] ()
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2010-12-04] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [224352 2010-12-04] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] => C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2012-01-04] (Lenovo)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-12-09] (Nullsoft, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [VMM Mode Selection] => C:\Program Files\HTC\ModeSelection\VMMModeSelection.exe [43520 2011-02-14] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [Spotify Web Helper] => C:\Users\Greg\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-06-24] (Spotify Ltd)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-01-04] (Google Inc.)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [Google Update] => C:\Users\Greg\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-07-13] (Google Inc.)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [MusicManager] => C:\Users\Greg\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7631872 2014-05-15] (Google Inc.)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [24477056 2014-06-27] (Google)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [GoogleChromeAutoLaunch_9CCDD43624CF0A67FCB8D07A1D3BBB05] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-07-15] (Google Inc.)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\Run: [C187750BE23F2EC7BF89516EBD652E6531CE3C2F._service_run] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-07-15] (Google Inc.)
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: E - E:\LaunchU3.exe -a
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {01bdbb8f-5d04-11e2-a21e-e4d53ddad13c} - E:\MotorolaDeviceManagerSetup.exe -a
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {243a6b7f-dd74-11e3-a447-42e578d16eb4} - E:\MotorolaDeviceManagerSetup.exe -a
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {588996f6-49d8-11e1-a3fc-e4d53ddad13c} - E:\TL-Bootstrap.exe
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {5889989e-49d8-11e1-a3fc-e4d53ddad13c} - E:\TL-Bootstrap.exe
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {7242ad19-6be2-11e3-91a8-e4d53ddad13c} - E:\LaunchU3.exe -a
HKU\S-1-5-21-3584956248-2509123145-931476634-1001\...\MountPoints2: {f030b89a-bd9f-11e1-a814-e4d53ddad13c} - E:\TL-Bootstrap.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Kirsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe (No File)
Startup: C:\Users\Kirsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe (No File)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: VeriFace Enc -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co...=LENN&bmod=LENN
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.co...1I7LENN_enUS468
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.co...1I7LENN_enUS468
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default
FF NewTab: about:blank
FF DefaultSearchEngine: Google
FF Homepage: hxxp://www.google.com/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Greg\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Greg\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Extension: 20-20 3D Viewer - WEB - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\[email protected] [2014-04-08]
FF Extension: Exif Viewer - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\[email protected] [2013-03-02]
FF Extension: F.B. Purity - Cleans Up Facebook - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\[email protected] [2013-11-20]
FF Extension: NoScript - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-05-17]
FF Extension: Google Reverse Image Search - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\{95322c08-05ff-4f3c-85fd-8ceb821988dd}.xpi [2014-06-16]
FF Extension: gTranslate - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\{aff87fa2-a58e-4edd-b852-0a20203c1e17}.xpi [2012-01-28]
FF Extension: Adblock Plus - C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\1yz2okj5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-01-27]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-06-17]

Chrome:
=======
CHR HomePage: hxxp://search.conduit.com/?ctid=CT3301943&SearchSource=48&CUI=UN72140054152865423&UM=2
CHR StartupUrls: "hxxp://google.com/", "hxxp://cnn.com/"
CHR DefaultSearchKeyword: 6F7FC68D92A92B4CA28B729A411B059D82D962A01B5CC0E44BDC8C686DED6E89
CHR DefaultSearchURL: 0B87C5EA4C641922B97B3B430A25923933E24B1ED10A1AB6A04D683F3BE2CA53
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.20\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.20\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.20\pdf.dll ()
CHR Plugin: (Norton Identity Safe) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2014.7.0.43_0\npcoplgn.dll No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (NPCIG.dll) - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java™ Platform SE 7 U51) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Google Update) - C:\Users\Greg\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Google Drive) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-11-20]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-22]
CHR Extension: (Google Cast) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-05-28]
CHR Extension: (Adblock Plus) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2012-11-21]
CHR Extension: (Turkopticon) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgefbojfgdddnignhmfmnencgiloojpe [2014-02-15]
CHR Extension: (Tampermonkey) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2014-02-15]
CHR Extension: (Google Calendar) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2012-11-21]
CHR Extension: (A Journey through Middle-earth) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjgkjeheegjnnmheaflhdocglkiegoni [2013-12-14]
CHR Extension: (Google Wallet) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09]
CHR HKCU\...\Chrome\Extension: [mhodfgapkpmcepkmcohmfkneadpikmkd] - C:\Users\Greg\AppData\Local\CRE\mhodfgapkpmcepkmcohmfkneadpikmkd.crx [2013-06-02]
CHR HKLM-x32\...\Chrome\Extension: [mhodfgapkpmcepkmcohmfkneadpikmkd] - C:\Users\Greg\AppData\Local\CRE\mhodfgapkpmcepkmcohmfkneadpikmkd.crx [2013-06-02]

==================== Services (Whitelisted) =================

R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [956192 2011-02-15] (Broadcom Corporation.)
R2 lxeaCATSCustConnectService; C:\windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxea_device; C:\windows\system32\lxeacoms.exe [1052328 2010-04-14] ( )
R2 lxea_device; C:\windows\SysWOW64\lxeacoms.exe [598696 2010-04-14] ( )
R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-11-15] (Motorola Mobility LLC)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()
R2 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]

==================== Drivers (Whitelisted) ====================

S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [31264 2013-09-04] (ThreatTrack Security)
S3 HTCAND64; C:\Windows\System32\Drivers\ANDROIDUSB.sys [33736 2009-11-02] (HTC, Corporation) [File not signed]
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [8200552 2010-12-15] (Realtek Semiconductor Corp.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
U3 TrueSight; C:\Windows\SysWOW64\drivers\TrueSight.sys [29160 2014-07-18] ()
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U2 IAStorDataMgrSvc;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
S3 motccgpfl; system32\DRIVERS\motccgpfl.sys [X]
U2 nvUpdatusService;
U2 Oasis2Service;
U2 PCCarerServic;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
S1 SBRE; \??\C:\windows\system32\drivers\SBREdrv.sys [X]
U2 SoftwareService;
U2 Stereo Service;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-20 07:20 - 2014-07-20 07:20 - 00000000 ____D () C:\Users\Greg\Desktop\FRST-OlderVersion
2014-07-20 06:53 - 2014-07-20 06:53 - 00869456 _____ () C:\Users\Greg\Desktop\Norton_Removal_Tool.exe
2014-07-20 06:38 - 2014-07-20 06:38 - 03480040 _____ (McAfee, Inc.) C:\Users\Greg\Desktop\MCPR.exe
2014-07-19 17:58 - 2014-07-19 18:00 - 04028663 _____ () C:\Users\Greg\Desktop\cureit(5244).log
2014-07-19 17:08 - 2014-07-19 17:23 - 00000000 ____D () C:\Users\Greg\Doctor Web
2014-07-19 16:55 - 2014-07-19 17:07 - 153780720 _____ () C:\Users\Greg\Desktop\hdkelxdq.exe
2014-07-19 15:26 - 2014-07-19 15:26 - 02347384 _____ (ESET) C:\Users\Greg\Desktop\esetsmartinstaller_enu.exe
2014-07-19 15:26 - 2014-07-19 15:26 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-19 14:08 - 2014-07-19 14:33 - 00001059 _____ () C:\Users\Greg\Desktop\mbam.txt
2014-07-19 14:07 - 2014-07-19 14:07 - 00001059 _____ () C:\mbam.txt
2014-07-19 11:17 - 2014-07-19 21:07 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-19 11:15 - 2014-07-19 11:15 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-19 11:15 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-07-19 11:15 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-07-19 11:15 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-07-19 11:06 - 2014-07-19 11:08 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Greg\Desktop\mbam-clean-2.1.1.1001.exe
2014-07-19 11:02 - 2014-07-20 07:12 - 00190948 _____ () C:\windows\PFRO.log
2014-07-19 10:27 - 2014-07-19 10:27 - 00854390 _____ () C:\Users\Greg\Desktop\SecurityCheck.exe
2014-07-19 10:25 - 2014-07-19 10:25 - 00001007 _____ () C:\Users\Greg\Documents\eseterror.txt
2014-07-19 10:20 - 2014-07-19 10:20 - 00000093 _____ () C:\Users\Greg\Documents\mbamerror.txt
2014-07-19 10:17 - 2014-07-19 11:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Greg\Desktop\mbam-setup-2.0.2.1012.exe
2014-07-19 10:10 - 2014-07-20 07:12 - 00000840 _____ () C:\windows\setupact.log
2014-07-19 10:10 - 2014-07-19 10:10 - 00000000 _____ () C:\windows\setuperr.log
2014-07-18 22:40 - 2014-07-18 22:40 - 00066735 _____ () C:\Users\Greg\Documents\FRST1039.txt
2014-07-18 22:14 - 2014-07-18 22:14 - 00002273 _____ () C:\Users\Greg\Documents\JRT.txt
2014-07-18 22:13 - 2014-07-18 22:13 - 00002273 _____ () C:\Users\Greg\Desktop\JRT.txt
2014-07-18 22:08 - 2014-07-18 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-07-18 22:02 - 2014-07-18 22:02 - 00006255 _____ () C:\Users\Greg\Documents\AdwCleaner[S0].txt
2014-07-18 21:57 - 2014-07-18 21:58 - 00000000 ____D () C:\AdwCleaner
2014-07-18 21:53 - 2014-07-20 07:20 - 02089984 _____ (Farbar) C:\Users\Greg\Desktop\FRST64.exe
2014-07-18 21:48 - 2014-07-18 21:48 - 01016261 _____ (Thisisu) C:\Users\Greg\Desktop\JRT.exe
2014-07-18 21:48 - 2014-07-18 21:48 - 00448512 _____ (OldTimer Tools) C:\Users\Greg\Desktop\TFC.exe
2014-07-18 21:47 - 2014-07-18 21:56 - 01354223 _____ () C:\Users\Greg\Desktop\AdwCleaner.exe
2014-07-18 21:47 - 2014-07-18 21:47 - 00001204 _____ () C:\Users\Greg\Documents\fixlist.txt
2014-07-18 18:41 - 2014-07-18 20:04 - 00029160 _____ () C:\windows\SysWOW64\Drivers\TrueSight.sys
2014-07-18 18:41 - 2014-07-18 18:41 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-18 18:40 - 2014-07-18 18:40 - 04770904 _____ () C:\Users\Greg\Desktop\RogueKiller.exe
2014-07-17 22:41 - 2014-07-17 22:41 - 00000000 __SHD () C:\Users\Greg\AppData\Local\EmieUserList
2014-07-17 22:41 - 2014-07-17 22:41 - 00000000 __SHD () C:\Users\Greg\AppData\Local\EmieSiteList
2014-07-17 17:48 - 2014-07-17 17:48 - 00008392 _____ () C:\windows\SysWOW64\20140717174812.csv
2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\windows\SysWOW64\Quarantine
2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\windows\SysWOW64\Definitions
2014-07-17 15:02 - 2014-07-17 15:04 - 163602432 _____ () C:\Users\Greg\Downloads\VIPRERescue31342.exe
2014-07-17 14:59 - 2014-07-17 22:13 - 00000000 ____D () C:\VIPRERESCUE
2014-07-17 13:23 - 2014-07-17 13:24 - 20147048 _____ (SUPERAntiSpyware) C:\Users\Greg\Downloads\SAS_381D18.EXE
2014-07-17 12:25 - 2014-07-17 12:25 - 00000000 _____ () C:\windows\SysWOW64\SBRC.dat
2014-07-17 12:25 - 2013-09-04 14:57 - 00031264 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiutil.sys
2014-07-17 12:25 - 2013-05-23 08:39 - 00041032 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiark.sys
2014-07-17 12:20 - 2014-07-17 13:13 - 00002954 _____ () C:\Users\Greg\Desktop\Rkill.txt
2014-07-17 12:20 - 2014-07-17 12:20 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\Greg\Downloads\uSeRiNiT.exe
2014-07-16 16:54 - 2014-07-16 16:54 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Greg\Downloads\avira_en_av___ws2.exe
2014-07-16 16:54 - 2014-07-16 16:54 - 00000000 ____D () C:\OETemp
2014-07-16 16:26 - 2014-07-16 16:26 - 00000000 ____D () C:\Users\Greg\AppData\Local\Adobe
2014-07-16 15:15 - 2014-07-16 15:15 - 00000000 _____ () C:\Users\Greg\AppData\Local\{73AAB2C6-70B7-45DF-B7A8-CDF969E0279D}
2014-07-16 13:59 - 2014-07-20 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-07-16 13:59 - 2014-07-20 14:09 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-07-16 11:55 - 2014-07-16 11:55 - 00044625 _____ () C:\Users\Greg\Downloads\Addition1.txt
2014-07-16 11:54 - 2014-07-16 11:54 - 00061027 _____ () C:\Users\Greg\Downloads\FRST1.txt
2014-07-16 11:42 - 2014-07-20 08:21 - 00047492 _____ () C:\Users\Greg\Desktop\Addition.txt
2014-07-16 11:41 - 2014-07-20 14:16 - 00026538 _____ () C:\Users\Greg\Desktop\FRST.txt
2014-07-16 11:41 - 2014-07-20 14:16 - 00000000 ____D () C:\FRST
2014-07-10 18:07 - 2014-07-16 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2014-07-09 09:57 - 2014-06-29 22:09 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-09 09:57 - 2014-06-29 22:04 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-09 09:56 - 2014-06-20 16:14 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-07-09 09:56 - 2014-06-20 15:39 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-07-09 09:56 - 2014-06-18 21:39 - 23464448 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-09 09:56 - 2014-06-18 21:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-09 09:56 - 2014-06-18 21:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-07-09 09:56 - 2014-06-18 20:48 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-09 09:56 - 2014-06-18 20:42 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-07-09 09:56 - 2014-06-18 20:42 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-07-09 09:56 - 2014-06-18 20:41 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-07-09 09:56 - 2014-06-18 20:41 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-07-09 09:56 - 2014-06-18 20:32 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-09 09:56 - 2014-06-18 20:31 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-07-09 09:56 - 2014-06-18 20:26 - 00598016 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-07-09 09:56 - 2014-06-18 20:24 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-07-09 09:56 - 2014-06-18 20:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-07-09 09:56 - 2014-06-18 20:23 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-07-09 09:56 - 2014-06-18 20:16 - 17276416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-07-09 09:56 - 2014-06-18 20:14 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-07-09 09:56 - 2014-06-18 20:09 - 00452608 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-09 09:56 - 2014-06-18 19:59 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 09:56 - 2014-06-18 19:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-07-09 09:56 - 2014-06-18 19:53 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-07-09 09:56 - 2014-06-18 19:51 - 05721088 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-09 09:56 - 2014-06-18 19:50 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-07-09 09:56 - 2014-06-18 19:48 - 00292864 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-07-09 09:56 - 2014-06-18 19:39 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-07-09 09:56 - 2014-06-18 19:38 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-07-09 09:56 - 2014-06-18 19:37 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-07-09 09:56 - 2014-06-18 19:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-07-09 09:56 - 2014-06-18 19:35 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-07-09 09:56 - 2014-06-18 19:33 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-09 09:56 - 2014-06-18 19:32 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-07-09 09:56 - 2014-06-18 19:28 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-07-09 09:56 - 2014-06-18 19:28 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-07-09 09:56 - 2014-06-18 19:27 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-09 09:56 - 2014-06-18 19:27 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-07-09 09:56 - 2014-06-18 19:25 - 00442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-07-09 09:56 - 2014-06-18 19:23 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-07-09 09:56 - 2014-06-18 19:22 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-07-09 09:56 - 2014-06-18 19:12 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-07-09 09:56 - 2014-06-18 19:06 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 09:56 - 2014-06-18 19:01 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-07-09 09:56 - 2014-06-18 18:59 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-07-09 09:56 - 2014-06-18 18:58 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-09 09:56 - 2014-06-18 18:58 - 00239616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-07-09 09:56 - 2014-06-18 18:52 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-07-09 09:56 - 2014-06-18 18:51 - 13527040 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-09 09:56 - 2014-06-18 18:49 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-07-09 09:56 - 2014-06-18 18:46 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-07-09 09:56 - 2014-06-18 18:45 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-07-09 09:56 - 2014-06-18 18:35 - 11742208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-07-09 09:56 - 2014-06-18 18:34 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-09 09:56 - 2014-06-18 18:15 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-07-09 09:56 - 2014-06-18 18:13 - 01791488 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-07-09 09:56 - 2014-06-18 18:09 - 01139200 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-07-09 09:56 - 2014-06-18 18:07 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-07-09 09:56 - 2014-06-17 22:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-09 09:56 - 2014-06-17 21:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-07-09 09:56 - 2014-06-17 21:10 - 03157504 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-09 09:56 - 2014-06-06 06:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-09 09:56 - 2014-06-06 05:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-07-09 09:56 - 2014-06-05 10:45 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-09 09:56 - 2014-06-05 10:26 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-07-09 09:56 - 2014-06-05 10:25 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-09 09:56 - 2014-05-30 04:08 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-07-09 09:56 - 2014-05-30 03:52 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-07-09 09:56 - 2014-05-30 02:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-08 19:56 - 2014-07-08 19:56 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
2014-06-28 21:51 - 2014-06-28 21:51 - 04812672 _____ (Piriform Ltd) C:\Users\Greg\Downloads\ccsetup415.exe
2014-06-22 21:18 - 2014-06-22 21:18 - 00000038 _____ () C:\Users\Greg\Documents\Fifa.txt
2014-06-21 20:20 - 2014-06-21 20:20 - 00006394 _____ () C:\Users\Greg\.recently-used.xbel
2014-06-21 16:11 - 2014-06-21 16:11 - 00436328 _____ () C:\ProgramData\SPL54D.tmp
2014-06-21 13:23 - 2014-06-21 13:23 - 00436328 _____ () C:\ProgramData\SPL92BD.tmp
2014-06-20 09:38 - 2014-06-20 09:40 - 00000000 ____D () C:\Users\TEMP

==================== One Month Modified Files and Folders =======

2014-07-20 14:16 - 2014-07-16 11:41 - 00026538 _____ () C:\Users\Greg\Desktop\FRST.txt
2014-07-20 14:16 - 2014-07-16 11:41 - 00000000 ____D () C:\FRST
2014-07-20 14:14 - 2013-10-01 11:14 - 00000000 ____D () C:\Users\Greg\AppData\Local\CrashDumps
2014-07-20 14:13 - 2012-04-04 10:21 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-20 14:09 - 2014-07-16 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-07-20 14:09 - 2014-07-16 13:59 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-07-20 13:45 - 2012-01-04 23:06 - 00000912 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-20 13:45 - 2012-01-04 23:06 - 00000908 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-20 13:44 - 2013-07-13 14:02 - 00000904 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3584956248-2509123145-931476634-1001UA.job
2014-07-20 08:21 - 2014-07-16 11:42 - 00047492 _____ () C:\Users\Greg\Desktop\Addition.txt
2014-07-20 07:22 - 2009-07-14 00:45 - 00021280 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-20 07:22 - 2009-07-14 00:45 - 00021280 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-20 07:20 - 2014-07-20 07:20 - 00000000 ____D () C:\Users\Greg\Desktop\FRST-OlderVersion
2014-07-20 07:20 - 2014-07-18 21:53 - 02089984 _____ (Farbar) C:\Users\Greg\Desktop\FRST64.exe
2014-07-20 07:18 - 2012-01-04 22:11 - 01574421 _____ () C:\windows\WindowsUpdate.log
2014-07-20 07:18 - 2009-07-14 01:13 - 00782510 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-20 07:16 - 2013-12-22 14:07 - 00000000 ___RD () C:\Users\Greg\Google Drive
2014-07-20 07:14 - 2012-04-10 16:25 - 00134680 _____ () C:\ProgramData\lxeascan.log
2014-07-20 07:14 - 2012-01-04 22:56 - 00000000 ____D () C:\ProgramData\VeriFace
2014-07-20 07:13 - 2012-01-04 22:57 - 00113767 _____ () C:\windows\system32\fastboot.set
2014-07-20 07:13 - 2012-01-04 22:56 - 03563071 _____ () C:\FaceProv.log
2014-07-20 07:12 - 2014-07-19 11:02 - 00190948 _____ () C:\windows\PFRO.log
2014-07-20 07:12 - 2014-07-19 10:10 - 00000840 _____ () C:\windows\setupact.log
2014-07-20 07:12 - 2012-01-28 17:00 - 00000000 ____D () C:\Temp
2014-07-20 07:12 - 2009-07-14 01:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-20 07:06 - 2013-08-24 01:21 - 00000000 ____D () C:\ProgramData\Norton
2014-07-20 06:53 - 2014-07-20 06:53 - 00869456 _____ () C:\Users\Greg\Desktop\Norton_Removal_Tool.exe
2014-07-20 06:42 - 2012-01-27 03:39 - 00000000 ____D () C:\Users\Greg
2014-07-20 06:38 - 2014-07-20 06:38 - 03480040 _____ (McAfee, Inc.) C:\Users\Greg\Desktop\MCPR.exe
2014-07-19 23:44 - 2013-07-13 14:02 - 00000852 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3584956248-2509123145-931476634-1001Core.job
2014-07-19 21:07 - 2014-07-19 11:17 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-19 18:00 - 2014-07-19 17:58 - 04028663 _____ () C:\Users\Greg\Desktop\cureit(5244).log
2014-07-19 17:23 - 2014-07-19 17:08 - 00000000 ____D () C:\Users\Greg\Doctor Web
2014-07-19 17:07 - 2014-07-19 16:55 - 153780720 _____ () C:\Users\Greg\Desktop\hdkelxdq.exe
2014-07-19 15:26 - 2014-07-19 15:26 - 02347384 _____ (ESET) C:\Users\Greg\Desktop\esetsmartinstaller_enu.exe
2014-07-19 15:26 - 2014-07-19 15:26 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-19 14:33 - 2014-07-19 14:08 - 00001059 _____ () C:\Users\Greg\Desktop\mbam.txt
2014-07-19 14:07 - 2014-07-19 14:07 - 00001059 _____ () C:\mbam.txt
2014-07-19 13:18 - 2012-01-28 16:42 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Winamp
2014-07-19 11:15 - 2014-07-19 11:15 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-19 11:15 - 2014-07-19 11:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-19 11:13 - 2014-07-19 10:17 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Greg\Desktop\mbam-setup-2.0.2.1012.exe
2014-07-19 11:08 - 2014-07-19 11:06 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Greg\Desktop\mbam-clean-2.1.1.1001.exe
2014-07-19 10:27 - 2014-07-19 10:27 - 00854390 _____ () C:\Users\Greg\Desktop\SecurityCheck.exe
2014-07-19 10:26 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\system32\NDF
2014-07-19 10:25 - 2014-07-19 10:25 - 00001007 _____ () C:\Users\Greg\Documents\eseterror.txt
2014-07-19 10:20 - 2014-07-19 10:20 - 00000093 _____ () C:\Users\Greg\Documents\mbamerror.txt
2014-07-19 10:10 - 2014-07-19 10:10 - 00000000 _____ () C:\windows\setuperr.log
2014-07-18 23:26 - 2012-01-28 22:09 - 00000000 ____D () C:\Users\Greg\.gimp-2.6
2014-07-18 22:40 - 2014-07-18 22:40 - 00066735 _____ () C:\Users\Greg\Documents\FRST1039.txt
2014-07-18 22:14 - 2014-07-18 22:14 - 00002273 _____ () C:\Users\Greg\Documents\JRT.txt
2014-07-18 22:13 - 2014-07-18 22:13 - 00002273 _____ () C:\Users\Greg\Desktop\JRT.txt
2014-07-18 22:08 - 2014-07-18 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-07-18 22:02 - 2014-07-18 22:02 - 00006255 _____ () C:\Users\Greg\Documents\AdwCleaner[S0].txt
2014-07-18 21:58 - 2014-07-18 21:57 - 00000000 ____D () C:\AdwCleaner
2014-07-18 21:56 - 2014-07-18 21:47 - 01354223 _____ () C:\Users\Greg\Desktop\AdwCleaner.exe
2014-07-18 21:48 - 2014-07-18 21:48 - 01016261 _____ (Thisisu) C:\Users\Greg\Desktop\JRT.exe
2014-07-18 21:48 - 2014-07-18 21:48 - 00448512 _____ (OldTimer Tools) C:\Users\Greg\Desktop\TFC.exe
2014-07-18 21:47 - 2014-07-18 21:47 - 00001204 _____ () C:\Users\Greg\Documents\fixlist.txt
2014-07-18 20:14 - 2012-07-20 15:35 - 00018432 ___SH () C:\Users\Greg\Thumbs.db
2014-07-18 20:04 - 2014-07-18 18:41 - 00029160 _____ () C:\windows\SysWOW64\Drivers\TrueSight.sys
2014-07-18 18:41 - 2014-07-18 18:41 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-18 18:40 - 2014-07-18 18:40 - 04770904 _____ () C:\Users\Greg\Desktop\RogueKiller.exe
2014-07-17 22:41 - 2014-07-17 22:41 - 00000000 __SHD () C:\Users\Greg\AppData\Local\EmieUserList
2014-07-17 22:41 - 2014-07-17 22:41 - 00000000 __SHD () C:\Users\Greg\AppData\Local\EmieSiteList
2014-07-17 22:41 - 2012-01-27 03:45 - 00000000 ____D () C:\Users\Greg\AppData\Local\Google
2014-07-17 22:13 - 2014-07-17 14:59 - 00000000 ____D () C:\VIPRERESCUE
2014-07-17 19:20 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\rescache
2014-07-17 17:48 - 2014-07-17 17:48 - 00008392 _____ () C:\windows\SysWOW64\20140717174812.csv
2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\windows\SysWOW64\Quarantine
2014-07-17 17:48 - 2014-07-17 17:48 - 00000000 ____D () C:\windows\SysWOW64\Definitions
2014-07-17 15:04 - 2014-07-17 15:02 - 163602432 _____ () C:\Users\Greg\Downloads\VIPRERescue31342.exe
2014-07-17 13:24 - 2014-07-17 13:23 - 20147048 _____ (SUPERAntiSpyware) C:\Users\Greg\Downloads\SAS_381D18.EXE
2014-07-17 13:13 - 2014-07-17 12:20 - 00002954 _____ () C:\Users\Greg\Desktop\Rkill.txt
2014-07-17 12:25 - 2014-07-17 12:25 - 00000000 _____ () C:\windows\SysWOW64\SBRC.dat
2014-07-17 12:20 - 2014-07-17 12:20 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\Greg\Downloads\uSeRiNiT.exe
2014-07-16 17:25 - 2012-11-03 11:08 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-16 17:00 - 2012-01-27 03:39 - 00002239 _____ () C:\Users\Greg\Desktop\OneKey Recovery.lnk
2014-07-16 16:54 - 2014-07-16 16:54 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Greg\Downloads\avira_en_av___ws2.exe
2014-07-16 16:54 - 2014-07-16 16:54 - 00000000 ____D () C:\OETemp
2014-07-16 16:52 - 2012-11-03 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-16 16:52 - 2012-11-03 11:08 - 00000000 ____D () C:\ProgramData\Avira
2014-07-16 16:26 - 2014-07-16 16:26 - 00000000 ____D () C:\Users\Greg\AppData\Local\Adobe
2014-07-16 15:15 - 2014-07-16 15:15 - 00000000 _____ () C:\Users\Greg\AppData\Local\{73AAB2C6-70B7-45DF-B7A8-CDF969E0279D}
2014-07-16 15:08 - 2014-07-10 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2014-07-16 15:08 - 2014-05-15 08:06 - 00000000 ____D () C:\windows\System32\Tasks\Norton Internet Security
2014-07-16 15:08 - 2013-08-24 01:27 - 00000000 ____D () C:\windows\system32\Drivers\NISx64
2014-07-16 15:08 - 2012-03-05 17:32 - 00000000 ____D () C:\Users\Gregory Miller
2014-07-16 15:08 - 2012-03-02 19:12 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2014-07-16 15:08 - 2012-02-12 17:50 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Spotify
2014-07-16 15:08 - 2012-01-27 19:20 - 00000000 ____D () C:\Users\Kirsten
2014-07-16 15:08 - 2012-01-27 03:39 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 15:08 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\AppCompat
2014-07-16 15:07 - 2012-03-02 19:12 - 00000000 ____D () C:\Program Files (x86)\Amazon
2014-07-16 13:58 - 2013-12-23 14:37 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\U3
2014-07-16 11:55 - 2014-07-16 11:55 - 00044625 _____ () C:\Users\Greg\Downloads\Addition1.txt
2014-07-16 11:54 - 2014-07-16 11:54 - 00061027 _____ () C:\Users\Greg\Downloads\FRST1.txt
2014-07-16 11:19 - 2012-06-11 17:58 - 05549568 ___SH () C:\Users\Greg\Downloads\Thumbs.db
2014-07-16 10:58 - 2012-03-04 18:11 - 00000000 ____D () C:\Users\Greg\Documents\BeerSmith2
2014-07-16 10:21 - 2011-09-28 23:37 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-07-14 01:04 - 2012-04-18 19:22 - 00002772 _____ () C:\ProgramData\lxea.log
2014-07-12 12:54 - 2012-02-12 17:50 - 00000000 ____D () C:\Users\Greg\AppData\Local\Spotify
2014-07-10 09:51 - 2009-07-14 00:45 - 00314856 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-10 03:07 - 2014-05-06 02:29 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-10 03:07 - 2011-09-28 23:37 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 03:07 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2014-07-10 03:07 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\system32\Dism
2014-07-10 03:04 - 2013-08-14 03:01 - 00000000 ____D () C:\windows\system32\MRT
2014-07-10 03:02 - 2012-01-27 04:10 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-07-09 13:13 - 2012-04-04 10:21 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 13:13 - 2012-04-04 10:21 - 00003768 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-07-09 13:13 - 2012-01-27 17:29 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-08 19:56 - 2014-07-08 19:56 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
2014-07-07 20:47 - 2013-12-22 14:05 - 00002030 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-07-07 20:47 - 2013-12-22 14:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-07-04 21:18 - 2013-09-13 17:23 - 00004378 ____H () C:\Users\Greg\Downloads\.picasa.ini
2014-06-29 22:09 - 2014-07-09 09:57 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-29 22:04 - 2014-07-09 09:57 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-28 21:53 - 2012-11-22 04:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-28 21:53 - 2012-10-04 21:11 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-28 21:53 - 2012-10-04 21:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-28 21:51 - 2014-06-28 21:51 - 04812672 _____ (Piriform Ltd) C:\Users\Greg\Downloads\ccsetup415.exe
2014-06-23 22:23 - 2012-01-28 16:39 - 00000000 ____D () C:\Users\Greg\AppData\Local\Downloaded Installations
2014-06-23 22:23 - 2012-01-28 16:38 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-06-23 21:35 - 2012-04-10 16:27 - 00000000 ____D () C:\ProgramData\Lx_cats
2014-06-23 21:34 - 2012-04-10 16:28 - 00051221 _____ () C:\ProgramData\lxeaJSW.log
2014-06-22 21:18 - 2014-06-22 21:18 - 00000038 _____ () C:\Users\Greg\Documents\Fifa.txt
2014-06-21 20:20 - 2014-06-21 20:20 - 00006394 _____ () C:\Users\Greg\.recently-used.xbel
2014-06-21 19:48 - 2012-01-28 22:10 - 00000000 ____D () C:\Users\Greg\AppData\Roaming\gtk-2.0
2014-06-21 16:11 - 2014-06-21 16:11 - 00436328 _____ () C:\ProgramData\SPL54D.tmp
2014-06-21 13:23 - 2014-06-21 13:23 - 00436328 _____ () C:\ProgramData\SPL92BD.tmp
2014-06-20 16:14 - 2014-07-09 09:56 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-06-20 15:39 - 2014-07-09 09:56 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-06-20 09:41 - 2009-07-14 01:09 - 00000000 ____D () C:\windows\System32\Tasks\WPD
2014-06-20 09:40 - 2014-06-20 09:38 - 00000000 ____D () C:\Users\TEMP
2014-06-20 09:39 - 2012-04-10 16:28 - 00000504 _____ () C:\ProgramData\FastPics.log
2014-06-20 09:39 - 2009-07-14 00:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-18 01:25

==================== End Of Log ===========================

[homebrew901]

New symptom: I don't know if it's really new or if I'm just noticing it fully, but search boxes which auto-search like on Facebook (is that a flash thing? A java thing?  I dunno) crash the browser.  I'm starting to question what's really going on here.  Is there a way to test my hardware, including the hard drive for corruption?

[pystryker]

Actually, I've been coming to the decision of sending you over to the hardware forums. There is no malware on your machine, what was there are we got rid of. I'm waiting on a couple of my colleagues to respond to a question about some services running on your machine. As for malware, I see nothing in the logs you have posted. Hang with me just a bit longer until I hear from them, and then will proceed from there. :-)

[homebrew901]

Will do.  Thanks.  Is there some step I can or should take in the meantime like uninstalling and reinstalling flash or doing the Java update that my system tray says is available (I've been holding off on updates during this process) or something like that?

Edited by homebrew901, 20 July 2014 - 04:32 PM.

[pystryker]

Will do.  Thanks.  Is there some step I can or should take in the meantime like uninstalling and reinstalling flash or doing the Java update that my system tray says is available (I've been holding off on updates during this process) or something like that?

 
 
I'd continue holding off.  We're going to take a look with TDSSKiller and see if it shows anything. 
 

Please download TDSSKiller to the desktop.

Alternate download is here.

• Right-click on TDSSKiller.exe and select Run as Administrator to start the program and follow the prompts.
• When the main GUI(graphical user interface) window opens, click on Change Parameters
• Under Additional options, select both Verify driver digital signatures & Detect TDLFS File System >> OK
• Click on Start Scan, the scan will run.
• When the scan has finished, if it finds anything please click on the drop down arrow next to Cure and select Skip
• A Report will have been created by TDSSKiller in your root directory C:\
• To find the log go to Start(Windows 7 Orb) > Computer > C: >> TDSSKiller.V.V.V.VV_DD.DD.YYYY_TT.TT.TT_log <-- The letters denote the version and date & time etc.
• Post the contents of that log in your next reply please.

Note: Do not have TDSSKiller remove anything if found at this point in time!

Things I need to see in your next post:

TDSSKiller Log