[civiccrazy]

Just installed Windows 7 on a brand new hard drive a couple of weeks ago.  Started getting numerous pop ups when i try to go to any website a couple of days ago.

 

 

 

 

 

 

 

OTL logfile created on: 8/5/2014 7:41:56 AM - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\David\Downloads

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.17207)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

 

8.00 Gb Total Physical Memory | 6.03 Gb Available Physical Memory | 75.39% Memory free

16.00 Gb Paging File | 12.64 Gb Available in Paging File | 79.01% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 111.79 Gb Total Space | 72.76 Gb Free Space | 65.09% Space Free | Partition Type: NTFS

Drive K: | 232.88 Gb Total Space | 115.71 Gb Free Space | 49.69% Space Free | Partition Type: NTFS

 

Computer Name: DAVID-COMPUTER | User Name: David | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - [2014/08/05 07:41:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\David\Downloads\OTL.exe

PRC - [2014/07/22 01:34:53 | 000,230,792 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe

PRC - [2014/07/15 05:24:50 | 000,860,488 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

PRC - [2014/07/10 18:34:10 | 003,244,048 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

PRC - [2014/07/10 18:33:16 | 005,187,088 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe

PRC - [2014/07/10 18:32:46 | 001,417,160 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgfws.exe

PRC - [2014/07/10 18:23:36 | 000,289,328 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

PRC - [2014/06/25 10:14:08 | 002,020,192 | ---- | M] (Wondershare) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

PRC - [2014/06/17 17:56:02 | 000,242,216 | ---- | M] (Foxit Corporation) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe

PRC - [2014/06/10 21:48:32 | 000,043,336 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe

PRC - [2014/06/02 10:48:54 | 001,042,808 | R--- | M] (Western Digital Technologies, Inc.) -- C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe

PRC - [2014/06/02 10:38:32 | 005,563,760 | R--- | M] (Western Digital Technologies, Inc.) -- C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe

PRC - [2014/06/02 10:36:12 | 000,296,312 | R--- | M] (Western Digital Technologies, Inc.) -- C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

PRC - [2014/05/12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

PRC - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

PRC - [2014/05/12 07:24:34 | 006,970,168 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

PRC - [2013/12/24 01:00:00 | 000,642,664 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe

PRC - [2010/10/12 13:56:40 | 000,979,328 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

 

 

========== Modules (No Company Name) ==========

 

MOD - [2014/07/23 03:14:52 | 000,806,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\34b53ecafa1d7ccc7ca961d722b5d983\System.ServiceModel.Internals.ni.dll

MOD - [2014/07/23 03:14:32 | 002,825,216 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f6d7bb59f318c130d68816a89335d05e\System.Runtime.Serialization.ni.dll

MOD - [2014/07/23 03:13:37 | 000,122,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\78652b7fa68ee058bff6a118c657f565\SMDiagnostics.ni.dll

MOD - [2014/07/23 03:03:51 | 007,662,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\bada32953bb6b16a53d653eae23d78dc\System.Xml.ni.dll

MOD - [2014/07/23 03:03:28 | 000,976,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bbc48ec4245e502ae19b0601d3799c9e\System.Configuration.ni.dll

MOD - [2014/07/23 03:03:19 | 010,060,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ff26cc03e6d57d8abd13b990332e67c6\System.ni.dll

MOD - [2014/07/23 03:03:13 | 016,953,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll

MOD - [2014/07/15 05:24:48 | 000,353,096 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppgooglenaclpluginchrome.dll

MOD - [2014/07/15 05:24:46 | 014,664,008 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll

MOD - [2014/07/15 05:24:44 | 008,537,928 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll

MOD - [2014/07/15 05:24:38 | 000,718,664 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll

MOD - [2014/07/15 05:24:36 | 000,126,280 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll

MOD - [2014/07/15 05:24:35 | 001,732,936 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll

MOD - [2014/07/03 13:20:20 | 000,073,544 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

MOD - [2014/07/03 13:19:50 | 001,044,808 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

MOD - [2014/06/25 10:13:48 | 001,457,664 | ---- | M] () -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

MOD - [2014/05/19 17:19:02 | 000,137,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

 

 

========== Services (SafeList) ==========

 

SRV:64bit: - [2014/07/22 03:37:18 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)

SRV:64bit: - [2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:64bit: - [2011/06/09 13:01:00 | 000,555,392 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe -- (EpsonCustomerParticipation)

SRV:64bit: - [2011/04/25 11:00:02 | 000,136,576 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE -- (EPSON_PM_RPCV4_05)

SRV - [2014/07/10 18:34:10 | 003,244,048 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent)

SRV - [2014/07/10 18:32:46 | 001,417,160 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgfws.exe -- (avgfws)

SRV - [2014/07/10 18:23:36 | 000,289,328 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe -- (avgwd)

SRV - [2014/06/17 17:56:02 | 000,242,216 | ---- | M] (Foxit Corporation) [Auto | Running] -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe -- (FoxitCloudUpdateService)

SRV - [2014/06/02 10:48:54 | 001,042,808 | R--- | M] (Western Digital Technologies, Inc.) [Auto | Running] -- C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe -- (WDBackup)

SRV - [2014/06/02 10:36:12 | 000,296,312 | R--- | M] (Western Digital Technologies, Inc.) [Auto | Running] -- C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe -- (WDDriveService)

SRV - [2014/05/12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)

SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

 

 

========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2014/08/05 07:31:00 | 000,122,584 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)

DRV:64bit: - [2014/08/05 07:10:05 | 000,079,064 | ---- | M] (Malwarebytes Corporation) [Kernel | Boot | Unknown] -- C:\Windows\SysNative\drivers\qtxrtac.sys -- (esiv)

DRV:64bit: - [2014/06/30 15:43:02 | 000,152,344 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)

DRV:64bit: - [2014/06/17 19:21:34 | 000,235,800 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)

DRV:64bit: - [2014/06/17 19:07:12 | 000,328,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)

DRV:64bit: - [2014/06/17 19:06:58 | 000,269,080 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)

DRV:64bit: - [2014/06/17 19:06:24 | 000,190,744 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)

DRV:64bit: - [2014/06/17 19:06:22 | 000,242,968 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)

DRV:64bit: - [2014/06/17 19:06:20 | 000,123,672 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)

DRV:64bit: - [2014/06/17 19:06:06 | 000,031,512 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)

DRV:64bit: - [2014/06/10 21:50:24 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)

DRV:64bit: - [2014/05/12 07:26:10 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)

DRV:64bit: - [2014/05/12 07:25:56 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)

DRV:64bit: - [2014/01/22 08:52:10 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)

DRV:64bit: - [2014/01/22 08:52:10 | 000,108,800 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)

DRV:64bit: - [2013/09/26 13:44:54 | 000,057,144 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgfwd6a.sys -- (Avgfwfd)

DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2012/03/01 02:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011/03/11 02:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011/03/11 02:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2010/11/20 23:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2010/11/20 23:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010/11/20 23:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009/06/10 16:35:42 | 000,187,392 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

 

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE11SR

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>

 

 

========== FireFox ==========

 

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.65.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.65.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

 

 

 

========== Chrome  ==========

 

CHR - default_search_provider:  ()

CHR - default_search_provider: search_url = 

CHR - default_search_provider: suggest_url = 

CHR - homepage: http://start.sweetpa...006.10043&st=23

CHR - plugin: Error reading preferences file

CHR - Extension: Angry Birds = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\

CHR - Extension: Google Docs = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\

CHR - Extension: Google Drive = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\

CHR - Extension: Google Voice Search Hotword (Beta) = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\

CHR - Extension: YouTube = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: Google Search = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: Poppit! = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi\3.1_0\

CHR - Extension: AVG Secure Search = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\1.0.0.8_0\

CHR - Extension: Google Wallet = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

CHR - Extension: Gmail = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

CHR - Extension: Re-Markable = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\plahnnlgijmddhebnhfopcigefgojaan\1.176.0.0_0\

 

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O4:64bit: - HKLM..\Run: [Onboard] C:\Program Files\Western Digital\WD SmartWare\BackupTask.exe /Onboard "C:\Program Files\Western Digital\WD SmartWare\WDSmartWare.exe" File not found

O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)

O4 - HKLM..\Run: [EEventManager] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)

O4 - HKLM..\Run: [FUFAXRCV] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION)

O4 - HKLM..\Run: [FUFAXSTM] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION)

O4 - HKLM..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe (Western Digital Technologies, Inc.)

O4 - HKLM..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)

O4 - HKLM..\Run: [WSHelperSetup.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)

O4 - HKCU..\Run: [GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe (Malwarebytes Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C4941DFA-B66A-4CE8-8EF7-913C4CEC56E8}: DhcpNameServer = 192.168.0.1

O18:64bit: - Protocol\Handler\belarc - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found

O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found

O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found

O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll (Belarc, Inc.)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18:64bit: - Protocol\Filter\text/xml - No CLSID value found

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2007/05/10 08:48:26 | 000,000,032 | ---- | M] () - K:\autorun.inf -- [ NTFS ]

O33 - MountPoints2\{a1327ac0-116e-11e4-8de1-806e6f6e6963}\Shell - "" = AutoRun

O33 - MountPoints2\{a1327ac0-116e-11e4-8de1-806e6f6e6963}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL D:\autorun.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 

========== Files/Folders - Created Within 30 Days ==========

 

[2014/08/05 07:40:27 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Diagnostics

[2014/08/05 07:10:05 | 000,079,064 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\qtxrtac.sys

[2014/08/04 23:06:48 | 000,000,000 | ---D | C] -- C:\Windows\LastGood

[2014/08/04 06:37:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

[2014/08/04 06:37:12 | 000,000,000 | ---D | C] -- C:\Program Files\iPod

[2014/08/04 06:37:11 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes

[2014/08/04 06:37:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes

[2014/08/04 06:37:11 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

[2014/08/03 14:25:59 | 000,122,584 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys

[2014/08/03 14:25:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

[2014/08/03 14:25:35 | 000,091,352 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys

[2014/08/03 14:25:35 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys

[2014/08/03 14:25:35 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys

[2014/08/03 14:25:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware

[2014/08/03 14:25:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2014/08/03 12:55:42 | 000,000,000 | ---D | C] -- C:\Users\David\Documents\Wondershare

[2014/08/03 12:40:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BrowserSafeguard

[2014/08/03 12:39:54 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts

[2014/08/03 10:16:30 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Apple Computer

[2014/08/03 10:16:27 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE

[2014/08/03 10:16:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer

[2014/08/03 09:03:40 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Apple

[2014/08/03 09:03:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update

[2014/08/03 09:03:37 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Apple Computer

[2014/08/03 09:03:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple

[2014/08/03 09:03:29 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour

[2014/08/03 09:03:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour

[2014/08/03 09:03:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple

[2014/08/03 09:03:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple

[2014/08/03 09:02:43 | 000,000,000 | ---D | C] -- C:\Users\David\Desktop\DCIM

[2014/08/03 08:47:17 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Wondershare

[2014/08/03 08:47:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wondershare

[2014/08/03 08:47:05 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Wondershare

[2014/08/03 08:47:05 | 000,000,000 | ---D | C] -- C:\Users\David\.android

[2014/07/31 09:04:17 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Foxit Scanner Images

[2014/07/29 15:57:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

[2014/07/29 15:57:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft ActiveSync

[2014/07/29 15:57:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER

[2014/07/29 15:56:23 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH

[2014/07/29 15:56:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office

[2014/07/29 15:54:49 | 000,000,000 | RH-D | C] -- C:\MSOCache

[2014/07/23 09:03:20 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Leadertech

[2014/07/23 09:01:34 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Epson

[2014/07/23 09:01:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\EPSON

[2014/07/23 09:01:08 | 000,000,000 | ---D | C] -- C:\Program Files\EPSON

[2014/07/23 09:00:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software

[2014/07/23 09:00:43 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information

[2014/07/23 09:00:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Epson Software

[2014/07/23 09:00:04 | 000,000,000 | ---D | C] -- C:\ProgramData\EPSON

[2014/07/23 08:59:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

[2014/07/23 08:59:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\epson

[2014/07/22 08:54:48 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\EmieUserList

[2014/07/22 08:54:48 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\EmieSiteList

[2014/07/22 08:53:11 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat

[2014/07/22 08:53:11 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat

[2014/07/22 08:52:23 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Adobe

[2014/07/22 08:41:12 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\CompatTel

[2014/07/22 08:39:19 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Western Digital

[2014/07/22 08:39:16 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Western_Digital_Technolog

[2014/07/22 08:34:22 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Downloads

[2014/07/22 08:34:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital

[2014/07/22 08:33:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Western Digital

[2014/07/22 08:33:55 | 000,000,000 | ---D | C] -- C:\Program Files\Western Digital

[2014/07/22 08:33:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Western Digital

[2014/07/22 08:33:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Western Digital

[2014/07/22 08:33:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Western Digital

[2014/07/22 08:33:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache

[2014/07/22 08:25:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java

[2014/07/22 08:25:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

[2014/07/22 08:25:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java

[2014/07/22 08:24:08 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Foxit Software

[2014/07/22 08:23:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader

[2014/07/22 08:23:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Foxit Software

[2014/07/22 08:22:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle

[2014/07/22 08:22:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun

[2014/07/22 08:21:52 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Programs

[2014/07/22 08:14:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Belarc

[2014/07/22 08:12:12 | 000,114,688 | ---- | C] (Euro Plus d.o.o.) -- C:\Windows\SysNative\zdnPMS.dll

[2014/07/22 08:12:12 | 000,114,176 | ---- | C] (Euro Plus d.o.o.) -- C:\Windows\SysNative\zdnPMU.dll

[2014/07/22 08:10:13 | 000,000,000 | ---D | C] -- C:\ZD270316

[2014/07/22 04:34:22 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files

[2014/07/22 04:34:22 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\MFAData

[2014/07/22 04:34:22 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData

[2014/07/22 04:34:22 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Avg2014

[2014/07/22 04:28:48 | 000,000,000 | R--D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

[2014/07/22 04:28:48 | 000,000,000 | R--D | C] -- C:\Users\David\Searches

[2014/07/22 04:28:48 | 000,000,000 | R--D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

[2014/07/22 04:28:48 | 000,000,000 | -H-D | C] -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned

[2014/07/22 04:28:43 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Identities

[2014/07/22 04:28:41 | 000,000,000 | R--D | C] -- C:\Users\David\Contacts

[2014/07/22 04:28:40 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\VirtualStore

[2014/07/22 04:28:37 | 000,000,000 | --SD | C] -- C:\Users\David\AppData\Roaming\Microsoft

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Videos

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Saved Games

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Pictures

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Music

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Links

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Favorites

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Downloads

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Documents

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Desktop

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\Temporary Internet Files

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Templates

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Start Menu

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\SendTo

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Recent

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\PrintHood

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\NetHood

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Documents\My Videos

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Documents\My Pictures

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Documents\My Music

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\My Documents

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Local Settings

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\History

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Cookies

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Application Data

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\Application Data

[2014/07/22 04:28:37 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData

[2014/07/22 04:28:37 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Temp

[2014/07/22 04:28:37 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Microsoft

[2014/07/22 04:28:37 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Media Center Programs

[2014/07/22 04:28:10 | 000,000,000 | -HSD | C] -- C:\Recovery

[2014/07/22 04:28:09 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution

[2014/07/22 04:05:10 | 000,000,000 | ---D | C] -- C:\Windows\Panther

[2014/07/22 03:48:48 | 000,000,000 | ---D | C] -- C:\Windows\Migration

[2014/07/22 03:48:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET

[2014/07/22 03:08:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT

[2014/07/22 03:06:11 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch

[2014/07/22 03:06:00 | 000,000,000 | -HSD | C] -- C:\System Volume Information

[2014/07/22 01:40:39 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\AVG2014

[2014/07/22 01:40:08 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\TuneUp Software

[2014/07/22 01:40:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

[2014/07/22 01:40:02 | 000,000,000 | -H-D | C] -- C:\$AVG

[2014/07/22 01:40:02 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2014

[2014/07/22 01:39:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG

[2014/07/22 01:37:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

[2014/07/22 01:35:00 | 000,000,000 | -HSD | C] -- C:\Windows\Installer

[2014/07/22 01:34:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google

[2014/07/22 01:34:49 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Google

[2014/07/22 01:34:42 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Deployment

[2014/07/22 01:34:42 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Apps

 

========== Files - Modified Within 30 Days ==========

 

[2014/08/05 07:40:12 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/08/05 07:31:00 | 000,122,584 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys

[2014/08/05 07:10:05 | 000,079,064 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\qtxrtac.sys

[2014/08/05 07:09:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014/08/04 22:39:00 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014/08/04 17:40:32 | 000,781,298 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2014/08/04 17:40:32 | 000,661,656 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2014/08/04 17:40:32 | 000,121,524 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2014/08/04 08:53:54 | 000,029,968 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2014/08/04 08:53:54 | 000,029,968 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2014/08/04 08:47:19 | 000,008,192 | ---- | M] () -- C:\Windows\SysWow64\WDPABKP.dat

[2014/08/04 08:46:34 | 2146,295,807 | -HS- | M] () -- C:\hiberfil.sys

[2014/08/04 06:37:24 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk

[2014/08/03 14:25:38 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2014/08/03 12:40:04 | 000,000,258 | RHS- | M] () -- C:\ProgramData\ntuser.pol

[2014/08/03 10:04:06 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf

[2014/08/03 09:44:16 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf

[2014/08/03 09:42:23 | 000,365,864 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2014/08/03 09:02:03 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

[2014/07/31 09:19:13 | 000,917,797 | ---- | M] () -- C:\Users\David\Documents\home again.pdf

[2014/07/31 09:06:12 | 001,684,598 | ---- | M] () -- C:\Users\David\Documents\Joey July Paystubs.pdf

[2014/07/29 15:58:00 | 000,000,376 | ---- | M] () -- C:\Windows\ODBC.INI

[2014/07/23 09:03:20 | 000,000,079 | ---- | M] () -- C:\Windows\EWF545.ini

[2014/07/23 08:59:50 | 000,000,930 | ---- | M] () -- C:\Users\Public\Desktop\EPSON Scan.lnk

[2014/07/23 03:01:44 | 000,773,536 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2014/07/22 08:23:57 | 000,001,382 | ---- | M] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk

[2014/07/22 08:23:57 | 000,001,358 | ---- | M] () -- C:\Users\Public\Desktop\Foxit Reader.lnk

[2014/07/22 08:14:58 | 000,002,144 | ---- | M] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Belarc Advisor.lnk

[2014/07/22 08:14:58 | 000,002,120 | ---- | M] () -- C:\Users\Public\Desktop\Belarc Advisor.lnk

[2014/07/22 04:33:24 | 000,001,437 | ---- | M] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

[2014/07/22 03:37:21 | 000,016,284 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf

[2014/07/22 03:37:19 | 000,016,284 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf

[2014/07/22 03:08:07 | 000,108,227 | ---- | M] () -- C:\Windows\SysWow64\license.rtf

[2014/07/22 03:08:07 | 000,108,227 | ---- | M] () -- C:\Windows\SysNative\license.rtf

[2014/07/22 03:06:28 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

[2014/07/22 02:16:39 | 000,002,279 | ---- | M] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

[2014/07/22 01:40:08 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2014.lnk

[2014/07/22 01:37:18 | 000,002,255 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

 

========== Files Created - No Company Name ==========

 

[2014/08/04 06:37:24 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk

[2014/08/03 14:25:38 | 000,001,102 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2014/08/03 12:40:04 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2014/08/03 10:04:06 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf

[2014/08/03 09:44:16 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf

[2014/08/03 09:03:39 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk

[2014/08/03 09:02:03 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

[2014/07/31 09:19:13 | 000,917,797 | ---- | C] () -- C:\Users\David\Documents\home again.pdf

[2014/07/31 09:06:11 | 001,684,598 | ---- | C] () -- C:\Users\David\Documents\Joey July Paystubs.pdf

[2014/07/29 15:58:00 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI

[2014/07/23 08:59:50 | 000,000,930 | ---- | C] () -- C:\Users\Public\Desktop\EPSON Scan.lnk

[2014/07/23 08:59:19 | 000,000,079 | ---- | C] () -- C:\Windows\EWF545.ini

[2014/07/22 09:04:27 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\WDPABKP.dat

[2014/07/22 08:23:57 | 000,001,382 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk

[2014/07/22 08:23:57 | 000,001,358 | ---- | C] () -- C:\Users\Public\Desktop\Foxit Reader.lnk

[2014/07/22 08:14:58 | 000,002,144 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Belarc Advisor.lnk

[2014/07/22 08:14:58 | 000,002,132 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk

[2014/07/22 08:14:58 | 000,002,120 | ---- | C] () -- C:\Users\Public\Desktop\Belarc Advisor.lnk

[2014/07/22 04:33:24 | 000,001,437 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

[2014/07/22 04:28:49 | 000,001,413 | ---- | C] () -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

[2014/07/22 04:28:37 | 000,000,290 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

[2014/07/22 04:28:37 | 000,000,272 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

[2014/07/22 03:49:21 | 000,773,536 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2014/07/22 03:37:21 | 000,016,284 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf

[2014/07/22 03:37:19 | 000,016,284 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf

[2014/07/22 03:07:51 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

[2014/07/22 03:07:50 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

[2014/07/22 03:06:28 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

[2014/07/22 03:06:01 | 2146,295,807 | -HS- | C] () -- C:\hiberfil.sys

[2014/07/22 02:49:08 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

[2014/07/22 02:34:02 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

[2014/07/22 01:40:08 | 000,000,965 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2014.lnk

[2014/07/22 01:37:18 | 000,002,279 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

[2014/07/22 01:37:18 | 000,002,255 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2014/07/22 01:34:54 | 000,000,896 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/07/22 01:34:53 | 000,000,892 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

 

========== ZeroAccess Check ==========

 

[2009/07/14 00:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2014/03/24 22:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2014/03/24 22:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 21:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 23:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 21:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 

========== LOP Check ==========

 

[2014/07/22 01:40:39 | 000,000,000 | ---D | M] -- C:\Users\David\AppData\Roaming\AVG2014

[2014/08/03 09:42:45 | 000,000,000 | ---D | M] -- C:\Users\David\AppData\Roaming\Epson

[2014/07/31 09:19:14 | 000,000,000 | ---D | M] -- C:\Users\David\AppData\Roaming\Foxit Scanner Images

[2014/07/31 09:04:04 | 000,000,000 | ---D | M] -- C:\Users\David\AppData\Roaming\Foxit Software

[2014/07/23 09:03:20 | 000,000,000 | ---D | M] -- C:\Users\David\AppData\Roaming\Leadertech

[2014/07/22 01:40:08 | 000,000,000 | ---D | M] -- C:\Users\David\AppData\Roaming\TuneUp Software

[2014/08/03 08:47:05 | 000,000,000 | ---D | M] -- C:\Users\David\AppData\Roaming\Wondershare

 

========== Purity Check ==========

 

 

 

< End of report >

 

[Advertisements]

Any help?

[civiccrazy]

Any help?

[23red]

Hi civiccrazy

 

I'm 23red, and it'll be my pleasure to assist you with your problem.  I am currently reviewing your log.  In the meantime, I'd be grateful if you would note the following:

 

•  Please make sure to carefully read every post completely before doing anything.
•  If you're not sure, or if something unexpected happens do not continue! Stop and ask!  It is not a problem.
•  Please do not run any other scans or other software on your computer unless asked as it may make this repair more difficult.
•  Please stick with me until all malware is gone from your system.  Malware removal is not an instant process, just because you no longer see any symptoms it does not necessarily mean your system is completely clear.

•  Please copy/paste to Notepad and save my instructions as a text file on your desktop, or print them out, as you may not be able to access this thread at times.

• Back up your data. I will not knowingly suggest your any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.

•  As I am currently in training, I will be helping you under the supervision of our Expert Teachers.   As such, there will likely be a delay between posts.   I do my best to respond as quick as I can.  I, like everyone else here am also a volunteer and sometimes life keeps me busy 

•  Thank you for your understanding and I appreciate your patience.

 

Please allow some time to go through the log you posted.  I'll post back as soon as possible.

 
In the mean time, any chance you could locate and post the Extras.txt that was also generated when you ran OTL?

It should be located at C:\Users\David\Downloads

 

While you're in there, may you please cut and paste OTL to your Desktop.  It works best from there

 

Thank you
 

[civiccrazy]

OTL Extras logfile created on: 8/5/2014 7:41:57 AM - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\David\Downloads

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.17207)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

 

8.00 Gb Total Physical Memory | 6.03 Gb Available Physical Memory | 75.39% Memory free

16.00 Gb Paging File | 12.64 Gb Available in Paging File | 79.01% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 111.79 Gb Total Space | 72.76 Gb Free Space | 65.09% Space Free | Partition Type: NTFS

Drive K: | 232.88 Gb Total Space | 115.71 Gb Free Space | 49.69% Space Free | Partition Type: NTFS

 

Computer Name: DAVID-COMPUTER | User Name: David | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 

========== Extra Registry (SafeList) ==========

 

 

========== File Associations ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

 

========== Shell Spawning ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

 

========== Security Center Settings ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

 

========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

========== Authorized Applications List ==========

 

 

========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{01F6077D-A004-41F7-BBC9-EF7405F07076}" = rport=137 | protocol=17 | dir=out | app=system | 

"{03953049-46F0-408A-8DE3-6409257DF6FD}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{03C7089F-8F94-4A1F-BD48-05B4834CACF0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{068088C5-2A98-496F-8F63-2A41B696C17A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{1EA6ABB2-88F1-47B1-8FDB-ABC69EB78A9A}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{2540C3B4-C846-43C8-98FB-EC4448AE8873}" = rport=445 | protocol=6 | dir=out | app=system | 

"{28592C96-724D-4BB9-B478-4846A2FE69B3}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{2AD83E58-08E0-4BFD-B7B0-4189A0EDE8FC}" = lport=139 | protocol=6 | dir=in | app=system | 

"{2EF54C64-F3B0-4C9C-9481-FFD7DBCD8281}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | 

"{371B8C38-FFE8-4743-BDCB-5C3857784C62}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{39131A68-EB58-46C1-BA12-24471EE86535}" = rport=138 | protocol=17 | dir=out | app=system | 

"{3AAA2EE3-EA3E-452C-AE91-748286CF9BD8}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{42C5E704-8D5D-4C2D-9E85-837850CFE52B}" = rport=10243 | protocol=6 | dir=out | app=system | 

"{43F8D8B2-5099-4FD4-BD56-9E60DE1841DB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{4A1776C6-C7B7-4190-8091-EE166D8FBEA5}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 | 

"{4A62CAC7-17FA-4370-B078-94C9B16A6438}" = lport=138 | protocol=17 | dir=in | app=system | 

"{754E906E-EDBB-41B5-9484-9154B2DADF91}" = lport=137 | protocol=17 | dir=in | app=system | 

"{86BE750F-B63D-408A-A1ED-5ABFA889CB08}" = lport=10243 | protocol=6 | dir=in | app=system | 

"{A6213F02-2925-4706-80E6-4F72D197C642}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{CD576B5D-34ED-4369-A9EF-AC6BEB2E2B7A}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{DA7A63DC-D604-4A21-A945-66250CD3EAFE}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{E151EE4C-B946-4D26-93E3-C7B9F71FD62A}" = lport=445 | protocol=6 | dir=in | app=system | 

"{E4F524E4-1E4A-49B2-BB32-0961C2B2AD36}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{FF54CBA5-A665-4EC8-A739-F8A53C900000}" = rport=139 | protocol=6 | dir=out | app=system | 

 

========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{017CA908-C416-4BF6-AF50-A95ECB08A814}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgemca.exe | 

"{077055F0-159E-49EC-9449-7A55537D1F48}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 

"{0D3A1324-D96C-484F-9B9E-8AC8DC6F584F}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgmfapx.exe | 

"{127DAD83-41C2-4AB4-8F3D-B835833101A3}" = protocol=58 | dir=out | [email protected],-28546 | 

"{12EF9004-17E8-4458-AC8D-174E7C3A4663}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgdiagex.exe | 

"{14BB3DB7-340C-4DC1-8FFF-E8E11D1FABCB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{1966EF2D-00A7-4CFD-9785-58050807BA02}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgnsa.exe | 

"{1FAD5431-EBED-4459-B2CB-A7434FF18FED}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{285AF0D6-B830-4DCA-917F-26D529C68DDE}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgmfapx.exe | 

"{28F7E90F-AE6B-4918-904F-25921E6CEFBD}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{2CF00D23-9B53-4EE4-843B-73BB528FA9DB}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 

"{45E48B37-7895-4798-99EC-B463058C763A}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgnsa.exe | 

"{54A4C44F-EF13-41AD-80D6-D654637519B9}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 

"{57925B8F-0D78-49FC-9711-683CB7E6AB3B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{59348A36-674F-46C2-AEAE-AB50B128678E}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 

"{614C3BCC-E5DA-49D9-9D24-BD0D943FFF24}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{6B1B56A3-35BE-497D-899A-8785A9610136}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgdiagex.exe | 

"{713413BB-CB89-4038-8D80-83A37C88FD8F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{7E5889BE-4E20-4D4B-A252-9CF227B20718}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{8C8F0849-3D52-479E-8658-53E9656F6139}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{8F1BA703-D552-41E8-8265-4D6C06AE7A72}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{937F861D-AF57-49AE-A23D-1E86A182235B}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgemca.exe | 

"{99B1B8AA-A89A-47F4-82CA-995892274D95}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 

"{99FD8617-EC57-44E5-8C07-8FE415BBEDAA}" = protocol=1 | dir=out | [email protected],-28544 | 

"{AB1B8084-8D4E-42D9-8EBA-1519FCAE81D1}" = protocol=58 | dir=in | [email protected],-28545 | 

"{B0ADA7CA-374E-4514-B424-6ECCBB21D0E7}" = protocol=6 | dir=out | app=system | 

"{B2E3D921-93BD-48CF-BD56-3B98A0F561CD}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | 

"{B377A1E7-D50B-4552-B8AD-A0F9E442B3FF}" = protocol=1 | dir=in | [email protected],-28543 | 

"{BC5CE9B6-CAD0-4C30-8827-7E0FCC25EACA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{CA14583E-0899-4C79-89B2-E3A0C66CE624}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{DE38A762-7560-4715-89E2-8FC60FACC7B7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{FEFAF622-28AA-470D-90C3-F911D981AB7B}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"TCP Query User{09C041FC-DAF3-4B2B-AE4A-0FF4EF778397}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=6 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe | 

"UDP Query User{2D277F51-12DE-4613-8A29-17D4B1C76955}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=17 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe | 

 

========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}" = iTunes

"{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}" = Apple Mobile Device Support

"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour

"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1

"{814FA673-A085-403C-9545-747FC1495069}" = Epson Customer Participation

"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables

"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1

"{B5BBEF15-44B1-43FA-A4B7-3AFE501B5949}" = AVG 2014

"{F6ABA2F3-9759-48CD-B25B-A07A811E92E4}" = WD SmartWare

"{F763D68B-B8D6-4C16-84EE-A2D990C5C639}" = AVG 2014

"AVG" = AVG 2014

"EPSON WorkForce 545 Series" = EPSON WorkForce 545 Series Printer Uninstall

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}" = Epson FAX Utility

"{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}" = Apple Application Support

"{26A24AE4-039D-4CA4-87B4-2F03217065FF}" = Java 7 Update 65

"{324C58C7-A292-4523-A943-91DE1EB6A1FE}" = WD Quick View

"{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1" = Foxit Cloud

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{6DFBE8A2-CDBF-453E-B34C-32F202FCEE4C}" = Software Updater

"{72fda14f-5a07-49d5-b7f7-202377e9b522}" = WD SmartWare Installer

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{91110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003

"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}" = Epson Event Manager

"Belarc Advisor" = Belarc Advisor 8.4

"EPSON PC-FAX Driver 2" = Epson PC-FAX Driver

"EPSON Scanner" = EPSON Scan

"Foxit Reader_is1" = Foxit Reader

"Google Chrome" = Google Chrome

"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware version 2.0.2.1012

 

========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 8/5/2014 7:05:16 AM | Computer Name = David-Computer | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 5008

 

Error - 8/5/2014 7:05:17 AM | Computer Name = David-Computer | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

 

Error - 8/5/2014 7:05:17 AM | Computer Name = David-Computer | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 6084

 

Error - 8/5/2014 7:05:17 AM | Computer Name = David-Computer | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 6084

 

Error - 8/5/2014 7:05:18 AM | Computer Name = David-Computer | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

 

Error - 8/5/2014 7:05:18 AM | Computer Name = David-Computer | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 7082

 

Error - 8/5/2014 7:05:18 AM | Computer Name = David-Computer | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 7082

 

Error - 8/5/2014 7:05:19 AM | Computer Name = David-Computer | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

 

Error - 8/5/2014 7:05:19 AM | Computer Name = David-Computer | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 8081

 

Error - 8/5/2014 7:05:19 AM | Computer Name = David-Computer | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 8081

 

[ System Events ]

Error - 8/3/2014 2:14:23 PM | Computer Name = David-Computer | Source = Service Control Manager | ID = 7001

Description = The Network List Service service depends on the Network Location Awareness

 service which failed to start because of the following error:   %%1068

 

Error - 8/3/2014 2:14:23 PM | Computer Name = David-Computer | Source = Service Control Manager | ID = 7001

Description = The Network List Service service depends on the Network Location Awareness

 service which failed to start because of the following error:   %%1068

 

Error - 8/3/2014 2:14:23 PM | Computer Name = David-Computer | Source = Service Control Manager | ID = 7001

Description = The Network List Service service depends on the Network Location Awareness

 service which failed to start because of the following error:   %%1068

 

Error - 8/3/2014 2:14:23 PM | Computer Name = David-Computer | Source = Service Control Manager | ID = 7001

Description = The Network List Service service depends on the Network Location Awareness

 service which failed to start because of the following error:   %%1068

 

Error - 8/3/2014 2:14:23 PM | Computer Name = David-Computer | Source = Service Control Manager | ID = 7001

Description = The Network List Service service depends on the Network Location Awareness

 service which failed to start because of the following error:   %%1068

 

Error - 8/3/2014 2:14:23 PM | Computer Name = David-Computer | Source = Service Control Manager | ID = 7001

Description = The Network List Service service depends on the Network Location Awareness

 service which failed to start because of the following error:   %%1068

 

Error - 8/3/2014 2:19:15 PM | Computer Name = David-Computer | Source = nvlddmkm | ID = 11141134

Description = 

 

Error - 8/4/2014 6:28:19 AM | Computer Name = David-Computer | Source = nvlddmkm | ID = 11141134

Description = 

 

Error - 8/4/2014 8:46:37 AM | Computer Name = David-Computer | Source = nvlddmkm | ID = 11141134

Description = 

 

Error - 8/4/2014 3:58:40 PM | Computer Name = David-Computer | Source = Service Control Manager | ID = 7011

Description = A timeout (30000 milliseconds) was reached while waiting for a transaction

 response from the MBAMScheduler service.

 

 

< End of report >

[23red]

Hi civiccrazy

 

Let's get this squared away:

 

Step 1

 

We need to change your homepage in Chrome. Please follow these instructions:

 

1.  Open Chrome and type this in the address bar: chrome:settings
2.  When the Settings page opens, look under On Startup and then click the spot for Open a specific set of pages and click Set Pages
3.  When the window opens, type in any page you wish as your new start page and remove the sweetpacks entry.
4.  Once you have typed in your new home page, close the window.

 

Try it out, make sure it's ok.  Please advise if you have any problems.

 

 

Step 2

 

OTL Fix

 

Please right click on on your Desktop, choose Run as Administrator, accept UAC prompts.

 

Under in the textbox at the bottom, please paste in the following text:

 

 

 

:Commands
[CREATERESTOREPOINT]
:OTL
O33 - MountPoints2\{a1327ac0-116e-11e4-8de1-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{a1327ac0-116e-11e4-8de1-806e6f6e6963}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL D:\autorun.exe
[2014/08/03 12:40:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BrowserSafeguard
:Files
netsh advfirewall reset /c
netsh advfirewall set allprofiles state on /c
ipconfig /flushdns /c
:Commands
[emptytemp]

 

 

 

 

•  Push the   button.

•  OTL will ask to reboot the machine. Please do so if asked. 

•  If the machine reboots, the log will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, (where mmddyyyy_hhmmss is the date of the tool run).

•  Copy and Paste that report in your next reply, please

 

Step 3

 

ADWCleaner

 

1.  Download ADWCleaner from this link to your Desktop. 

2.  Right click on your Desktop, choose Run as Administrator.

3.  Accept UAC prompt.

4.  Accept AdwCleaner's Terms of Use.  And the AdwCleaner window opens:

5.  Click on the <~ Scan button and wait for the scan to finish.

6.  After the Scan has finished the window may or may not show what it found and above the progress bar you will see Pending..... Please uncheck elements you don't want to remove. Please check to be sure no good items accidentally got picked up.

7.  Once that is complete, click the <~ Clean button

8.  Once it has finished Cleaning, click the <~ Report button to get the log.

9.  Copy and Paste it into your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[S0].txt

 

Step 4

 

 Junkware Removal Tool

 

•   Please download Junkware Removal Tool to your desktop.

•  Shut down your protection software now to avoid potential conflicts.

•  Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".

•  The tool will open and start scanning your system.

•  Please be patient as this can take a while to complete depending on your system's specifications.

•  On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

•  Post the contents of JRT.txt into your next post.

 

 

Step 5

 

Fresh OTL Scan

 

• Please right click on Run as Administrator, accept UAC prompts.

• Make sure all other windows are closed and to let it run uninterrupted.

• Please check the box next to Scan All Users.

• Click the button. Do not change any settings unless otherwise told to do so. The scan wont take long.

• When the scan completes OTL.Txt will be saved in the same location as OTL ~ Desktop

• Please copy (Edit ~> Select All,  Edit ~> Copy) the log it produces in your next reply.

 

When you return please post:

 

1.  OTL fix log
2.  C:\AdwCleaner\AdwCleaner[S0].txt
3.  JRT.txt
4.  Fresh OTL.txt

 

Thank you

[civiccrazy]

  All processes killed

========== COMMANDS ==========

Restore point Set: OTL Restore Point

========== OTL ==========

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a1327ac0-116e-11e4-8de1-806e6f6e6963}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a1327ac0-116e-11e4-8de1-806e6f6e6963}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a1327ac0-116e-11e4-8de1-806e6f6e6963}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a1327ac0-116e-11e4-8de1-806e6f6e6963}\ not found.

File C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL D:\autorun.exe not found.

C:\Program Files (x86)\BrowserSafeguard\Resources folder moved successfully.

C:\Program Files (x86)\BrowserSafeguard folder moved successfully.

========== FILES ==========

< netsh advfirewall reset /c >

Ok.

C:\Users\David\Downloads\cmd.bat deleted successfully.

C:\Users\David\Downloads\cmd.txt deleted successfully.

< netsh advfirewall set allprofiles state on /c >

Ok.

C:\Users\David\Downloads\cmd.bat deleted successfully.

C:\Users\David\Downloads\cmd.txt deleted successfully.

< ipconfig /flushdns /c >

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Users\David\Downloads\cmd.bat deleted successfully.

C:\Users\David\Downloads\cmd.txt deleted successfully.

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: All Users

 

User: David

->Temp folder emptied: 168450224 bytes

->Temporary Internet Files folder emptied: 185234246 bytes

->Java cache emptied: 743040 bytes

->Google Chrome cache emptied: 408364839 bytes

 

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

User: Public

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32 (64bit) .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 18330538 bytes

%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33298 bytes

RecycleBin emptied: 3849211660 bytes

 

Total Files Cleaned = 4,416.00 mb

 

 

OTL by OldTimer - Version 3.2.69.0 log created on 08102014_162326

 

Files\Folders moved on Reboot...

C:\Users\David\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

C:\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

 

PendingFileRenameOperations files...

 

Registry entries deleted on Reboot...

 

 

 

 

 

 

 

 

# AdwCleaner v3.304 - Report created 10/08/2014 at 16:36:43

# Updated 08/08/2014 by Xplode

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

# Username : David - DAVID-COMPUTER

# Running from : C:\Users\David\Desktop\AdwCleaner.exe

# Option : Clean

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

Folder Deleted : C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts

Folder Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof

File Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.betterdeals00.betterdeals.co_0.localstorage

File Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.betterdeals00.betterdeals.co_0.localstorage-journal

File Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage

File Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

 

***** [ Scheduled Tasks ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}

Key Deleted : HKCU\Software\APN PIP

 

***** [ Browsers ] *****

 

-\\ Internet Explorer v11.0.9600.17207

 

 

-\\ Google Chrome v36.0.1985.125

 

[ File : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences ]

 

Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

Deleted [Search Provider] : hxxp://www.stubhub.com/search/doSearch?searchStr={searchTerms}&pageNumber=1&resultsPerPage=50&searchMode=event&start=0&rows=50&geo_exp=1

Deleted [Search Provider] : hxxp://www.fast-growing-trees.com/search-results.htm?q={searchTerms}&x=-945&y=-55

Deleted [Search Provider] : hxxp://greensburgdailynews.com/search?SearchableText={searchTerms}&sa=Go&sitesearch=hxxp%3A%2F%2Fgreensburgdailynews.com&client=pub-4648602590429272&forid=1&q=bridal+expo&stores=local&filter=0&ie=ISO-8859-1&oe=ISO-8859-1&flav=0000&sig=cK_Ze8nEuuDj9suv&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23FFFFFF%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A11&hl=en

Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}

Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

Deleted [Search Provider] : hxxp://www.thank-you-note-samples.com/thank-you-search-results.html?cx=partner-pub-8787612180637643%3A40wiy9m10wl&cof=FORID%3A10&ie=ISO-8859-1&q={searchTerms}&sa=Search+Thank-You-Note-Samples.com&siteurl=www.thank-you-note-samples.com%2F

Deleted [Homepage] : hxxp://start.sweetpacks.com/?barid={F95C317C-EB5B-11E2-BB28-48022A3940A9}&src=10&crg=3.5000006.10043&st=23

Deleted [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof

 

*************************

 

AdwCleaner[R0].txt - [1924 octets] - [10/08/2014 16:33:14]

AdwCleaner[S0].txt - [3132 octets] - [10/08/2014 16:36:43]

 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3192 octets] ##########

 

[civiccrazy]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 7 Home Premium x64

Ran by David on Sun 08/10/2014 at 16:43:41.82

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

 

~~~ Services

 

 

 

~~~ Registry Values

 

 

 

~~~ Registry Keys

 

 

 

~~~ Files

 

 

 

~~~ Folders

 

 

 

~~~ Event Viewer Logs were cleared

 

 

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Sun 08/10/2014 at 16:53:08.82

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[civiccrazy]

OTL logfile created on: 8/10/2014 4:56:21 PM - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\David\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.17207)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

 

8.00 Gb Total Physical Memory | 6.18 Gb Available Physical Memory | 77.31% Memory free

16.00 Gb Paging File | 13.75 Gb Available in Paging File | 85.98% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 111.79 Gb Total Space | 48.60 Gb Free Space | 43.47% Space Free | Partition Type: NTFS

Drive F: | 232.88 Gb Total Space | 96.04 Gb Free Space | 41.24% Space Free | Partition Type: NTFS

Drive K: | 232.88 Gb Total Space | 115.71 Gb Free Space | 49.69% Space Free | Partition Type: NTFS

Drive Z: | 931.41 Gb Total Space | 884.34 Gb Free Space | 94.95% Space Free | Partition Type: NTFS

 

Computer Name: DAVID-COMPUTER | User Name: David | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - [2014/08/10 16:22:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\David\Desktop\OTL.exe

PRC - [2014/07/22 01:34:53 | 000,230,792 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe

PRC - [2014/07/15 05:24:50 | 000,860,488 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

PRC - [2014/07/11 02:39:16 | 000,511,872 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

PRC - [2014/07/10 18:34:10 | 003,244,048 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

PRC - [2014/07/10 18:33:16 | 005,187,088 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe

PRC - [2014/07/10 18:32:46 | 001,417,160 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgfws.exe

PRC - [2014/07/10 18:29:38 | 000,318,992 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgcfgex.exe

PRC - [2014/07/10 18:23:36 | 000,289,328 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

PRC - [2014/06/25 10:14:08 | 002,020,192 | ---- | M] (Wondershare) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

PRC - [2014/06/17 17:56:02 | 000,242,216 | ---- | M] (Foxit Corporation) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe

PRC - [2014/06/02 10:48:54 | 001,042,808 | R--- | M] (Western Digital Technologies, Inc.) -- C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe

PRC - [2014/06/02 10:38:32 | 005,563,760 | R--- | M] (Western Digital Technologies, Inc.) -- C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe

PRC - [2014/06/02 10:36:12 | 000,296,312 | R--- | M] (Western Digital Technologies, Inc.) -- C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

PRC - [2014/05/12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

PRC - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

PRC - [2014/05/12 07:24:34 | 006,970,168 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

PRC - [2013/12/24 01:00:00 | 000,863,848 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe

PRC - [2013/12/24 01:00:00 | 000,642,664 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe

PRC - [2010/10/12 13:56:40 | 000,979,328 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

 

 

========== Modules (No Company Name) ==========

 

MOD - [2014/07/23 03:14:52 | 000,806,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\34b53ecafa1d7ccc7ca961d722b5d983\System.ServiceModel.Internals.ni.dll

MOD - [2014/07/23 03:14:32 | 002,825,216 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f6d7bb59f318c130d68816a89335d05e\System.Runtime.Serialization.ni.dll

MOD - [2014/07/23 03:13:37 | 000,122,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\78652b7fa68ee058bff6a118c657f565\SMDiagnostics.ni.dll

MOD - [2014/07/23 03:03:51 | 007,662,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\bada32953bb6b16a53d653eae23d78dc\System.Xml.ni.dll

MOD - [2014/07/23 03:03:28 | 000,976,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bbc48ec4245e502ae19b0601d3799c9e\System.Configuration.ni.dll

MOD - [2014/07/23 03:03:19 | 010,060,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ff26cc03e6d57d8abd13b990332e67c6\System.ni.dll

MOD - [2014/07/23 03:03:13 | 016,953,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll

MOD - [2014/07/15 05:24:48 | 000,353,096 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppgooglenaclpluginchrome.dll

MOD - [2014/07/15 05:24:46 | 014,664,008 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll

MOD - [2014/07/15 05:24:44 | 008,537,928 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll

MOD - [2014/07/15 05:24:38 | 000,718,664 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll

MOD - [2014/07/15 05:24:36 | 000,126,280 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll

MOD - [2014/07/15 05:24:35 | 001,732,936 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll

MOD - [2014/07/03 13:20:20 | 000,073,544 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

MOD - [2014/07/03 13:19:50 | 001,044,808 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

MOD - [2014/06/25 10:13:48 | 001,457,664 | ---- | M] () -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

MOD - [2014/05/19 17:19:02 | 000,137,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

 

 

========== Services (SafeList) ==========

 

SRV:64bit: - [2014/07/22 03:37:18 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)

SRV:64bit: - [2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:64bit: - [2011/06/09 13:01:00 | 000,555,392 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe -- (EpsonCustomerParticipation)

SRV:64bit: - [2011/04/25 11:00:02 | 000,136,576 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE -- (EPSON_PM_RPCV4_05)

SRV - [2014/07/10 18:34:10 | 003,244,048 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent)

SRV - [2014/07/10 18:32:46 | 001,417,160 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgfws.exe -- (avgfws)

SRV - [2014/07/10 18:23:36 | 000,289,328 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe -- (avgwd)

SRV - [2014/06/17 17:56:02 | 000,242,216 | ---- | M] (Foxit Corporation) [Auto | Running] -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe -- (FoxitCloudUpdateService)

SRV - [2014/06/02 10:48:54 | 001,042,808 | R--- | M] (Western Digital Technologies, Inc.) [Auto | Running] -- C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe -- (WDBackup)

SRV - [2014/06/02 10:36:12 | 000,296,312 | R--- | M] (Western Digital Technologies, Inc.) [Auto | Running] -- C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe -- (WDDriveService)

SRV - [2014/05/12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)

SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

 

 

========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2014/08/10 16:38:46 | 000,122,584 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)

DRV:64bit: - [2014/06/30 15:43:02 | 000,152,344 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)

DRV:64bit: - [2014/06/17 19:21:34 | 000,235,800 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)

DRV:64bit: - [2014/06/17 19:07:12 | 000,328,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)

DRV:64bit: - [2014/06/17 19:06:58 | 000,269,080 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)

DRV:64bit: - [2014/06/17 19:06:24 | 000,190,744 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)

DRV:64bit: - [2014/06/17 19:06:22 | 000,242,968 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)

DRV:64bit: - [2014/06/17 19:06:20 | 000,123,672 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)

DRV:64bit: - [2014/06/17 19:06:06 | 000,031,512 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)

DRV:64bit: - [2014/06/10 21:50:24 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)

DRV:64bit: - [2014/05/12 07:26:10 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)

DRV:64bit: - [2014/05/12 07:25:56 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)

DRV:64bit: - [2014/01/22 08:52:10 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)

DRV:64bit: - [2014/01/22 08:52:10 | 000,108,800 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)

DRV:64bit: - [2013/09/26 13:44:54 | 000,057,144 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgfwd6a.sys -- (Avgfwfd)

DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2012/03/01 02:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011/03/11 02:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011/03/11 02:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2010/11/20 23:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2010/11/20 23:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010/11/20 23:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009/06/10 16:35:42 | 000,187,392 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

 

 

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 

 

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 

 

IE - HKU\S-1-5-21-3636867177-167865813-2041884550-1000\..\SearchScopes,DefaultScope = 

IE - HKU\S-1-5-21-3636867177-167865813-2041884550-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE11SR

IE - HKU\S-1-5-21-3636867177-167865813-2041884550-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3636867177-167865813-2041884550-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>

 

 

========== FireFox ==========

 

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.65.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.65.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

 

 

 

========== Chrome  ==========

 

CHR - default_search_provider:  ()

CHR - default_search_provider: search_url = 

CHR - default_search_provider: suggest_url = 

CHR - homepage: http://start.sweetpa...006.10043&st=23

CHR - plugin: Error reading preferences file

CHR - Extension: Angry Birds = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\

CHR - Extension: Google Docs = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\

CHR - Extension: Google Drive = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\

CHR - Extension: Google Voice Search Hotword (Beta) = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\

CHR - Extension: YouTube = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: Google Search = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: Poppit! = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi\3.1_0\

CHR - Extension: AVG Secure Search = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\1.0.0.8_0\

CHR - Extension: Google Wallet = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

CHR - Extension: Gmail = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

CHR - Extension: Re-Markable = C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\plahnnlgijmddhebnhfopcigefgojaan\1.176.0.0_0\

 

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O4:64bit: - HKLM..\Run: [Onboard] C:\Program Files\Western Digital\WD SmartWare\BackupTask.exe /Onboard "C:\Program Files\Western Digital\WD SmartWare\WDSmartWare.exe" File not found

O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)

O4 - HKLM..\Run: [EEventManager] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)

O4 - HKLM..\Run: [FUFAXRCV] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION)

O4 - HKLM..\Run: [FUFAXSTM] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION)

O4 - HKLM..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe (Western Digital Technologies, Inc.)

O4 - HKLM..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)

O4 - HKLM..\Run: [WSHelperSetup.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)

O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-21-3636867177-167865813-2041884550-1000..\Run: [GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C4941DFA-B66A-4CE8-8EF7-913C4CEC56E8}: DhcpNameServer = 192.168.0.1

O18:64bit: - Protocol\Handler\belarc - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found

O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found

O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found

O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll (Belarc, Inc.)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18:64bit: - Protocol\Filter\text/xml - No CLSID value found

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2013/06/07 04:19:37 | 000,000,000 | ---- | M] () - F:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2007/05/10 08:48:26 | 000,000,032 | ---- | M] () - K:\autorun.inf -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 

========== Files/Folders - Created Within 30 Days ==========

 

[2014/08/10 16:43:40 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2014/08/10 16:34:21 | 001,016,261 | ---- | C] (Thisisu) -- C:\Users\David\Desktop\JRT.exe

[2014/08/10 16:33:46 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\SysWow64\sqlite3.dll

[2014/08/10 16:31:29 | 000,000,000 | ---D | C] -- C:\AdwCleaner

[2014/08/10 16:23:26 | 000,000,000 | ---D | C] -- C:\_OTL

[2014/08/10 16:22:31 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\David\Desktop\OTL.exe

[2014/08/10 01:48:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

[2014/08/10 01:48:35 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes

[2014/08/10 01:48:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes

[2014/08/10 01:48:35 | 000,000,000 | ---D | C] -- C:\Program Files\iPod

[2014/08/10 01:48:35 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

[2014/08/06 07:07:50 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\uTorrent

[2014/08/05 12:06:10 | 000,000,000 | ---D | C] -- C:\Users\David\Desktop\Wedding pics 16 Goats in a Tree

[2014/08/05 12:06:08 | 000,000,000 | ---D | C] -- C:\Users\David\Desktop\School Pictures

[2014/08/05 12:06:06 | 000,000,000 | ---D | C] -- C:\Users\David\Desktop\Recipes

[2014/08/05 12:06:02 | 000,000,000 | ---D | C] -- C:\Users\David\Desktop\Nikon D5000

[2014/08/05 12:05:55 | 000,000,000 | ---D | C] -- C:\Users\David\Desktop\NFL pool

[2014/08/05 12:05:52 | 000,000,000 | ---D | C] -- C:\Users\David\Desktop\MUSIC

[2014/08/05 12:05:48 | 000,000,000 | ---D | C] -- C:\Users\David\Desktop\Heather Folder

[2014/08/05 12:05:22 | 000,000,000 | R--D | C] -- C:\Users\David\Desktop\My Pictures

[2014/08/05 07:40:27 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Diagnostics

[2014/08/03 19:28:01 | 002,620,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll

[2014/08/03 19:28:01 | 000,058,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe

[2014/08/03 19:28:01 | 000,044,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll

[2014/08/03 19:27:56 | 000,700,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll

[2014/08/03 19:27:56 | 000,581,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll

[2014/08/03 19:27:56 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll

[2014/08/03 19:27:56 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll

[2014/08/03 19:27:56 | 000,038,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll

[2014/08/03 19:27:56 | 000,036,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll

[2014/08/03 19:27:54 | 000,198,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll

[2014/08/03 19:27:54 | 000,179,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll

[2014/08/03 19:27:54 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe

[2014/08/03 19:27:54 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe

[2014/08/03 14:25:59 | 000,122,584 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys

[2014/08/03 14:25:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

[2014/08/03 14:25:35 | 000,091,352 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys

[2014/08/03 14:25:35 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys

[2014/08/03 14:25:35 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys

[2014/08/03 14:25:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware

[2014/08/03 14:25:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2014/08/03 12:55:42 | 000,000,000 | ---D | C] -- C:\Users\David\Documents\Wondershare

[2014/08/03 10:16:30 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Apple Computer

[2014/08/03 10:16:27 | 000,033,240 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys

[2014/08/03 10:16:27 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE

[2014/08/03 10:16:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer

[2014/08/03 09:43:11 | 001,721,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01009.dll

[2014/08/03 09:43:11 | 001,002,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinUSBCoInstaller2.dll

[2014/08/03 09:03:40 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Apple

[2014/08/03 09:03:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update

[2014/08/03 09:03:37 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Apple Computer

[2014/08/03 09:03:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple

[2014/08/03 09:03:29 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour

[2014/08/03 09:03:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour

[2014/08/03 09:03:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple

[2014/08/03 09:03:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple

[2014/08/03 09:02:43 | 000,000,000 | ---D | C] -- C:\Users\David\Desktop\DCIM

[2014/08/03 08:47:17 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Wondershare

[2014/08/03 08:47:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wondershare

[2014/08/03 08:47:05 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Wondershare

[2014/08/03 08:47:05 | 000,000,000 | ---D | C] -- C:\Users\David\.android

[2014/07/31 09:04:17 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Foxit Scanner Images

[2014/07/29 15:57:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

[2014/07/29 15:57:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft ActiveSync

[2014/07/29 15:57:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER

[2014/07/29 15:56:23 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH

[2014/07/29 15:56:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office

[2014/07/29 15:54:49 | 000,000,000 | RH-D | C] -- C:\MSOCache

[2014/07/23 09:03:20 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Leadertech

[2014/07/23 09:01:34 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Epson

[2014/07/23 09:01:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\EPSON

[2014/07/23 09:01:08 | 000,000,000 | ---D | C] -- C:\Program Files\EPSON

[2014/07/23 09:00:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software

[2014/07/23 09:00:43 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information

[2014/07/23 09:00:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Epson Software

[2014/07/23 09:00:06 | 000,120,320 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\SysNative\E_YLMHWA.DLL

[2014/07/23 09:00:06 | 000,083,968 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\SysNative\E_YD4BHWA.DLL

[2014/07/23 09:00:04 | 000,000,000 | ---D | C] -- C:\ProgramData\EPSON

[2014/07/23 08:59:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

[2014/07/23 08:59:49 | 000,464,384 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\SysNative\esxw2ud.dll

[2014/07/23 08:59:49 | 000,132,560 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\SysNative\esdevapp.exe

[2014/07/23 08:59:49 | 000,013,824 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\SysNative\esxcdev.dll

[2014/07/23 08:59:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\epson

[2014/07/22 22:19:12 | 002,871,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe

[2014/07/22 22:19:11 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe

[2014/07/22 22:19:08 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll

[2014/07/22 22:19:08 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll

[2014/07/22 22:19:06 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll

[2014/07/22 22:19:06 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll

[2014/07/22 22:18:51 | 002,565,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll

[2014/07/22 22:18:50 | 001,699,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll

[2014/07/22 22:18:50 | 000,107,904 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys

[2014/07/22 22:18:50 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fsutil.exe

[2014/07/22 22:18:50 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fsutil.exe

[2014/07/22 22:18:50 | 000,027,008 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys

[2014/07/22 22:18:45 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe

[2014/07/22 22:18:44 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll

[2014/07/22 22:18:43 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe

[2014/07/22 08:54:48 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\EmieUserList

[2014/07/22 08:54:48 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\EmieSiteList

[2014/07/22 08:53:11 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat

[2014/07/22 08:53:11 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat

[2014/07/22 08:52:23 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Adobe

[2014/07/22 08:41:12 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\CompatTel

[2014/07/22 08:39:19 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Western Digital

[2014/07/22 08:39:16 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Western_Digital_Technolog

[2014/07/22 08:34:22 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Downloads

[2014/07/22 08:34:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital

[2014/07/22 08:33:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Western Digital

[2014/07/22 08:33:55 | 000,000,000 | ---D | C] -- C:\Program Files\Western Digital

[2014/07/22 08:33:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Western Digital

[2014/07/22 08:33:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Western Digital

[2014/07/22 08:33:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Western Digital

[2014/07/22 08:33:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache

[2014/07/22 08:25:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java

[2014/07/22 08:25:25 | 000,272,808 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe

[2014/07/22 08:25:19 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe

[2014/07/22 08:25:19 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe

[2014/07/22 08:25:19 | 000,098,216 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

[2014/07/22 08:25:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

[2014/07/22 08:25:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java

[2014/07/22 08:24:08 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Foxit Software

[2014/07/22 08:23:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader

[2014/07/22 08:23:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Foxit Software

[2014/07/22 08:22:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle

[2014/07/22 08:22:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun

[2014/07/22 08:21:52 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Programs

[2014/07/22 08:14:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Belarc

[2014/07/22 08:12:12 | 000,114,688 | ---- | C] (Euro Plus d.o.o.) -- C:\Windows\SysNative\zdnPMS.dll

[2014/07/22 08:12:12 | 000,114,176 | ---- | C] (Euro Plus d.o.o.) -- C:\Windows\SysNative\zdnPMU.dll

[2014/07/22 08:10:13 | 000,000,000 | ---D | C] -- C:\ZD270316

[2014/07/22 04:34:22 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files

[2014/07/22 04:34:22 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\MFAData

[2014/07/22 04:34:22 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData

[2014/07/22 04:34:22 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Avg2014

[2014/07/22 04:32:46 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll

[2014/07/22 04:32:46 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll

[2014/07/22 04:28:48 | 000,000,000 | R--D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

[2014/07/22 04:28:48 | 000,000,000 | R--D | C] -- C:\Users\David\Searches

[2014/07/22 04:28:48 | 000,000,000 | R--D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

[2014/07/22 04:28:48 | 000,000,000 | -H-D | C] -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned

[2014/07/22 04:28:43 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Identities

[2014/07/22 04:28:41 | 000,000,000 | R--D | C] -- C:\Users\David\Contacts

[2014/07/22 04:28:40 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\VirtualStore

[2014/07/22 04:28:37 | 000,000,000 | --SD | C] -- C:\Users\David\AppData\Roaming\Microsoft

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Videos

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Saved Games

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Pictures

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Music

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Links

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Favorites

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Downloads

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Documents

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\Desktop

[2014/07/22 04:28:37 | 000,000,000 | R--D | C] -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\Temporary Internet Files

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Templates

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Start Menu

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\SendTo

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Recent

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\PrintHood

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\NetHood

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Documents\My Videos

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Documents\My Pictures

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Documents\My Music

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\My Documents

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Local Settings

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\History

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Cookies

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\Application Data

[2014/07/22 04:28:37 | 000,000,000 | -HSD | C] -- C:\Users\David\AppData\Local\Application Data

[2014/07/22 04:28:37 | 000,000,000 | -H-D | C] -- C:\Users\David\AppData

[2014/07/22 04:28:37 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Temp

[2014/07/22 04:28:37 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Microsoft

[2014/07/22 04:28:37 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\Media Center Programs

[2014/07/22 04:28:10 | 000,000,000 | -HSD | C] -- C:\Recovery

[2014/07/22 04:28:09 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution

[2014/07/22 04:05:10 | 000,000,000 | ---D | C] -- C:\Windows\Panther

[2014/07/22 04:01:03 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL

[2014/07/22 04:01:02 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL

[2014/07/22 04:01:02 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll

[2014/07/22 04:01:01 | 014,631,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll

[2014/07/22 03:48:48 | 000,000,000 | ---D | C] -- C:\Windows\Migration

[2014/07/22 03:48:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET

[2014/07/22 03:41:36 | 000,028,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEUDINIT.EXE

[2014/07/22 03:37:26 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll

[2014/07/22 03:37:22 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll

[2014/07/22 03:37:22 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jsIntl.dll

[2014/07/22 03:37:22 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat

[2014/07/22 03:37:22 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll

[2014/07/22 03:37:22 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec

[2014/07/22 03:37:22 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll

[2014/07/22 03:37:22 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll

[2014/07/22 03:37:22 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll

[2014/07/22 03:37:22 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe

[2014/07/22 03:37:22 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx

[2014/07/22 03:37:22 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll

[2014/07/22 03:37:21 | 001,964,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl

[2014/07/22 03:37:21 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll

[2014/07/22 03:37:21 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll

[2014/07/22 03:37:21 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe

[2014/07/22 03:37:21 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe

[2014/07/22 03:37:21 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll

[2014/07/22 03:37:21 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll

[2014/07/22 03:37:21 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe

[2014/07/22 03:37:21 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll

[2014/07/22 03:37:21 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll

[2014/07/22 03:37:21 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll

[2014/07/22 03:37:21 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll

[2014/07/22 03:37:21 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll

[2014/07/22 03:37:21 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll

[2014/07/22 03:37:21 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll

[2014/07/22 03:37:21 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll

[2014/07/22 03:37:21 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll

[2014/07/22 03:37:20 | 005,721,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll

[2014/07/22 03:37:20 | 000,942,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jsIntl.dll

[2014/07/22 03:37:20 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll

[2014/07/22 03:37:20 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll

[2014/07/22 03:37:20 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll

[2014/07/22 03:37:20 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll

[2014/07/22 03:37:20 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll

[2014/07/22 03:37:20 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll

[2014/07/22 03:37:20 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll

[2014/07/22 03:37:20 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe

[2014/07/22 03:37:20 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe

[2014/07/22 03:37:20 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll

[2014/07/22 03:37:20 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe

[2014/07/22 03:37:20 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll

[2014/07/22 03:37:20 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll

[2014/07/22 03:37:20 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe

[2014/07/22 03:37:20 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe

[2014/07/22 03:37:19 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll

[2014/07/22 03:37:19 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll

[2014/07/22 03:37:19 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat

[2014/07/22 03:37:19 | 000,608,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe

[2014/07/22 03:37:19 | 000,598,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll

[2014/07/22 03:37:19 | 000,452,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll

[2014/07/22 03:37:19 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec

[2014/07/22 03:37:19 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll

[2014/07/22 03:37:19 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll

[2014/07/22 03:37:19 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll

[2014/07/22 03:37:19 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx

[2014/07/22 03:37:19 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll

[2014/07/22 03:37:19 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll

[2014/07/22 03:37:19 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll

[2014/07/22 03:37:18 | 002,040,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl

[2014/07/22 03:37:18 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll

[2014/07/22 03:37:18 | 000,631,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll

[2014/07/22 03:37:18 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll

[2014/07/22 03:37:18 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe

[2014/07/22 03:37:18 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll

[2014/07/22 03:37:18 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe

[2014/07/22 03:37:18 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe

[2014/07/22 03:37:18 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll

[2014/07/22 03:37:18 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe

[2014/07/22 03:37:18 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll

[2014/07/22 03:37:18 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll

[2014/07/22 03:37:18 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll

[2014/07/22 03:37:18 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll

[2014/07/22 03:37:18 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll

[2014/07/22 03:37:18 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll

[2014/07/22 03:37:18 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll

[2014/07/22 03:37:18 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe

[2014/07/22 03:37:18 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll

[2014/07/22 03:32:30 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll

[2014/07/22 03:32:30 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

[2014/07/22 03:32:30 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll

[2014/07/22 03:32:30 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

[2014/07/22 03:32:30 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll

[2014/07/22 03:32:30 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll

[2014/07/22 03:32:30 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll

[2014/07/22 03:32:30 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll

[2014/07/22 03:32:30 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll

[2014/07/22 03:32:30 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

[2014/07/22 03:32:30 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll

[2014/07/22 03:32:29 | 002,776,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll

[2014/07/22 03:32:29 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll

[2014/07/22 03:32:29 | 001,682,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll

[2014/07/22 03:32:29 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll

[2014/07/22 03:32:29 | 001,238,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll

[2014/07/22 03:32:29 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll

[2014/07/22 03:32:29 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll

[2014/07/22 03:32:29 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll

[2014/07/22 03:32:29 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll

[2014/07/22 03:32:29 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll

[2014/07/22 03:32:29 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll

[2014/07/22 03:32:29 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll

[2014/07/22 03:32:29 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll

[2014/07/22 03:32:29 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll

[2014/07/22 03:32:29 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll

[2014/07/22 03:08:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT

[2014/07/22 03:06:11 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch

[2014/07/22 03:06:00 | 000,000,000 | -HSD | C] -- C:\System Volume Information

[2014/07/22 02:49:08 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll

[2014/07/22 02:49:08 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFHost.exe

[2014/07/22 02:49:08 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll

[2014/07/22 02:49:08 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll

[2014/07/22 02:42:01 | 000,023,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fs_rec.sys

[2014/07/22 02:39:12 | 000,519,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll

[2014/07/22 02:39:12 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll

[2014/07/22 02:38:56 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll

[2014/07/22 02:38:56 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll

[2014/07/22 02:38:53 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll

[2014/07/22 02:38:53 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscacheugc.exe

[2014/07/22 02:38:53 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe

[2014/07/22 02:38:52 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcjt32.dll

[2014/07/22 02:38:52 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbctrac.dll

[2014/07/22 02:38:52 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbctrac.dll

[2014/07/22 02:38:52 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccp32.dll

[2014/07/22 02:38:52 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccp32.dll

[2014/07/22 02:38:52 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccu32.dll

[2014/07/22 02:38:52 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccr32.dll

[2014/07/22 02:38:52 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccu32.dll

[2014/07/22 02:38:52 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccr32.dll

[2014/07/22 02:38:36 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe

[2014/07/22 02:38:36 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe

[2014/07/22 02:38:36 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe

[2014/07/22 02:38:36 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe

[2014/07/22 02:38:36 | 000,553,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe

[2014/07/22 02:38:36 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe

[2014/07/22 02:38:36 | 000,528,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll

[2014/07/22 02:38:36 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe

[2014/07/22 02:38:36 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe

[2014/07/22 02:38:36 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll

[2014/07/22 02:38:36 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll

[2014/07/22 02:38:36 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll

[2014/07/22 02:38:36 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll

[2014/07/22 02:38:36 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll

[2014/07/22 02:38:36 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll

[2014/07/22 02:38:35 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll

[2014/07/22 02:38:35 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll

[2014/07/22 02:38:20 | 005,550,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe

[2014/07/22 02:38:19 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe

[2014/07/22 02:38:19 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe

[2014/07/22 02:38:19 | 000,722,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\objsel.dll

[2014/07/22 02:38:19 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe

[2014/07/22 02:38:19 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll

[2014/07/22 02:38:18 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\objsel.dll

[2014/07/22 02:38:18 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe

[2014/07/22 02:38:18 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cngprovider.dll

[2014/07/22 02:38:18 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adprovider.dll

[2014/07/22 02:38:18 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\capiprovider.dll

[2014/07/22 02:38:18 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpapiprovider.dll

[2014/07/22 02:38:18 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cngprovider.dll

[2014/07/22 02:38:18 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adprovider.dll

[2014/07/22 02:38:18 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\capiprovider.dll

[2014/07/22 02:38:18 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpapiprovider.dll

[2014/07/22 02:38:18 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dimsroam.dll

[2014/07/22 02:38:18 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll

[2014/07/22 02:38:18 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wincredprovider.dll

[2014/07/22 02:38:18 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dimsroam.dll

[2014/07/22 02:38:18 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wincredprovider.dll

[2014/07/22 02:38:17 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll

[2014/07/22 02:38:17 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll

[2014/07/22 02:38:08 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll

[2014/07/22 02:38:08 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll

[2014/07/22 02:38:08 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe

[2014/07/22 02:38:07 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe

[2014/07/22 02:38:07 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devrtl.dll

[2014/07/22 02:37:51 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll

[2014/07/22 02:37:48 | 000,376,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys

[2014/07/22 02:37:48 | 000,288,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS

[2014/07/22 02:37:40 | 002,746,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll

[2014/07/22 02:37:40 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll

[2014/07/22 02:37:40 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wpc.dll

[2014/07/22 02:37:40 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Wpc.dll

[2014/07/22 02:37:40 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\fpb.rs

[2014/07/22 02:37:40 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\SysNative\fpb.rs

[2014/07/22 02:37:40 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\oflc-nz.rs

[2014/07/22 02:37:40 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\SysNative\oflc-nz.rs

[2014/07/22 02:37:40 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegibbfc.rs

[2014/07/22 02:37:40 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegibbfc.rs

[2014/07/22 02:37:40 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\csrr.rs

[2014/07/22 02:37:40 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\SysNative\csrr.rs

[2014/07/22 02:37:40 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\cob-au.rs

[2014/07/22 02:37:40 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\SysNative\cob-au.rs

[2014/07/22 02:37:40 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\usk.rs

[2014/07/22 02:37:40 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\SysNative\usk.rs

[2014/07/22 02:37:40 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\grb.rs

[2014/07/22 02:37:40 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\SysNative\grb.rs

[2014/07/22 02:37:40 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi-pt.rs

[2014/07/22 02:37:40 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi-pt.rs

[2014/07/22 02:37:40 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi.rs

[2014/07/22 02:37:40 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi.rs

[2014/07/22 02:37:40 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\djctq.rs

[2014/07/22 02:37:40 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\SysNative\djctq.rs

[2014/07/22 02:37:39 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\cero.rs

[2014/07/22 02:37:39 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\SysNative\cero.rs

[2014/07/22 02:37:39 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\esrb.rs

[2014/07/22 02:37:39 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\SysNative\esrb.rs

[2014/07/22 02:37:39 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\oflc.rs

[2014/07/22 02:37:39 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\SysNative\oflc.rs

[2014/07/22 02:37:39 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi-fi.rs

[2014/07/22 02:37:39 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi-fi.rs

[2014/07/22 02:37:27 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcorehc.dll

[2014/07/22 02:37:27 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll

[2014/07/22 02:37:27 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcorehc.dll

[2014/07/22 02:37:27 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll

[2014/07/22 02:37:27 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netevent.dll

[2014/07/22 02:37:27 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netevent.dll

[2014/07/22 02:37:21 | 001,474,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll

[2014/07/22 02:37:21 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll

[2014/07/22 02:37:04 | 000,111,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe

[2014/07/22 02:36:14 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll

[2014/07/22 02:36:14 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll

[2014/07/22 02:36:11 | 003,717,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll

[2014/07/22 02:36:11 | 003,217,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll

[2014/07/22 02:36:11 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll

[2014/07/22 02:36:11 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aaclient.dll

[2014/07/22 02:36:11 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll

[2014/07/22 02:36:11 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll

[2014/07/22 02:36:06 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll

[2014/07/22 02:36:05 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys

[2014/07/22 02:35:55 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnet.dll

[2014/07/22 02:35:55 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnet.dll

[2014/07/22 02:35:37 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe

[2014/07/22 02:35:37 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe

[2014/07/22 02:35:29 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42.dll

[2014/07/22 02:35:29 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42u.dll

[2014/07/22 02:35:29 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll

[2014/07/22 02:35:29 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll

[2014/07/22 02:35:27 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\osk.exe

[2014/07/22 02:35:27 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\osk.exe

[2014/07/22 02:35:25 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll

[2014/07/22 02:35:18 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll

[2014/07/22 02:35:18 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll

[2014/07/22 02:35:18 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll

[2014/07/22 02:35:17 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll

[2014/07/22 02:35:09 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll

[2014/07/22 02:35:09 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll

[2014/07/22 02:35:09 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll

[2014/07/22 02:35:09 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll

[2014/07/22 02:35:03 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll

[2014/07/22 02:35:03 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll

[2014/07/22 02:35:02 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll

[2014/07/22 02:35:02 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll

[2014/07/22 02:35:02 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax

[2014/07/22 02:35:02 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax

[2014/07/22 02:34:57 | 001,118,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll

[2014/07/22 02:34:57 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll

[2014/07/22 02:34:57 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll

[2014/07/22 02:34:57 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll

[2014/07/22 02:34:57 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax

[2014/07/22 02:34:57 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax

[2014/07/22 02:34:55 | 000,509,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll

[2014/07/22 02:34:54 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll

[2014/07/22 02:34:52 | 000,642,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi

[2014/07/22 02:34:52 | 000,605,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe

[2014/07/22 02:34:52 | 000,566,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi

[2014/07/22 02:34:52 | 000,518,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe

[2014/07/22 02:34:52 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdusb.dll

[2014/07/22 02:34:52 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd1394.dll

[2014/07/22 02:34:52 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdcom.dll

[2014/07/22 02:34:49 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll

[2014/07/22 02:34:42 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll

[2014/07/22 02:34:42 | 000,878,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll

[2014/07/22 02:34:42 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll

[2014/07/22 02:34:42 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll

[2014/07/22 02:34:38 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll

[2014/07/22 02:34:38 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll

[2014/07/22 02:34:37 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll

[2014/07/22 02:34:34 | 001,930,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll

[2014/07/22 02:34:34 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll

[2014/07/22 02:34:34 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credui.dll

[2014/07/22 02:34:34 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll

[2014/07/22 02:34:34 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartcardCredentialProvider.dll

[2014/07/22 02:34:23 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml6r.dll

[2014/07/22 02:34:23 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml6r.dll

[2014/07/22 02:34:23 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll

[2014/07/22 02:34:23 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll

[2014/07/22 02:34:19 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll

[2014/07/22 02:34:19 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll

[2014/07/22 02:34:19 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe

[2014/07/22 02:34:19 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll

[2014/07/22 02:34:19 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll

[2014/07/22 02:34:18 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe

[2014/07/22 02:34:18 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll

[2014/07/22 02:34:18 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll

[2014/07/22 02:34:18 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll

[2014/07/22 02:34:18 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe

[2014/07/22 02:34:18 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

[2014/07/22 02:34:18 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll

[2014/07/22 02:34:18 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll

[2014/07/22 02:34:18 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll

[2014/07/22 02:34:18 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll

[2014/07/22 02:34:18 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll

[2014/07/22 02:34:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll

[2014/07/22 02:34:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll

[2014/07/22 02:34:17 | 001,888,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL

[2014/07/22 02:34:17 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe

[2014/07/22 02:34:16 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL

[2014/07/22 02:34:16 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys

[2014/07/22 02:34:16 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys

[2014/07/22 02:34:11 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wer.dll

[2014/07/22 02:34:11 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll

[2014/07/22 02:34:06 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll

[2014/07/22 02:34:06 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll

[2014/07/22 02:34:02 | 000,368,128 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll

[2014/07/22 02:34:02 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll

[2014/07/22 02:34:02 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll

[2014/07/22 02:34:02 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll

[2014/07/22 02:34:02 | 000,054,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfLdr.sys

[2014/07/22 02:34:02 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll

[2014/07/22 02:34:02 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll

[2014/07/22 02:34:02 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll

[2014/07/22 02:34:02 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll

[2014/07/22 02:34:02 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wdfres.dll

[2014/07/22 02:33:59 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll

[2014/07/22 02:33:54 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcore6.dll

[2014/07/22 02:33:54 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dhcpcore6.dll

[2014/07/22 02:33:54 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcsvc6.dll

[2014/07/22 02:33:50 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RNDISMP.sys

[2014/07/22 02:33:49 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe

[2014/07/22 02:33:47 | 002,315,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll

[2014/07/22 02:33:47 | 002,223,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll

[2014/07/22 02:33:47 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll

[2014/07/22 02:33:47 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll

[2014/07/22 02:33:47 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll

[2014/07/22 02:33:47 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll

[2014/07/22 02:33:47 | 000,491,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll

[2014/07/22 02:33:47 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll

[2014/07/22 02:33:47 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll

[2014/07/22 02:33:47 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe

[2014/07/22 02:33:47 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe

[2014/07/22 02:33:46 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscntrs.dll

[2014/07/22 02:33:46 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscntrs.dll

[2014/07/22 02:33:41 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OxpsConverter.exe

[2014/07/22 02:33:39 | 003,216,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll

[2014/07/22 02:33:38 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll

[2014/07/22 02:33:37 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll

[2014/07/22 02:33:37 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll

[2014/07/22 02:33:37 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll

[2014/07/22 02:33:37 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll

[2014/07/22 02:33:35 | 000,190,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys

[2014/07/22 02:33:35 | 000,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys

[2014/07/22 02:33:35 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iologmsg.dll

[2014/07/22 02:33:35 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iologmsg.dll

[2014/07/22 02:33:32 | 000,404,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll

[2014/07/22 02:33:32 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe

[2014/07/22 02:33:31 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prevhost.exe

[2014/07/22 02:33:31 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prevhost.exe

[2014/07/22 02:33:30 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xmllite.dll

[2014/07/22 02:33:28 | 000,155,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys

[2014/07/22 02:33:28 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll

[2014/07/22 02:33:27 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll

[2014/07/22 02:33:26 | 000,515,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl

[2014/07/22 02:33:26 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl

[2014/07/22 02:33:25 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\synceng.dll

[2014/07/22 02:33:25 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\synceng.dll

[2014/07/22 02:33:25 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll

[2014/07/22 02:33:25 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll

[2014/07/22 02:33:25 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll

[2014/07/22 02:33:24 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys

[2014/07/22 02:33:24 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys

[2014/07/22 02:33:23 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys

[2014/07/22 02:33:23 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\drmk.sys

[2014/07/22 02:29:36 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll

[2014/07/22 02:28:36 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe

[2014/07/22 02:28:36 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe

[2014/07/22 02:28:35 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll

[2014/07/22 02:28:35 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll

[2014/07/22 02:28:30 | 000,265,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys

[2014/07/22 02:28:30 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll

[2014/07/22 02:28:29 | 000,723,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll

[2014/07/22 02:28:29 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll

[2014/07/22 02:28:27 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll

[2014/07/22 02:28:26 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll

[2014/07/22 02:28:24 | 000,634,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcrt.dll

[2014/07/22 02:28:23 | 000,861,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll

[2014/07/22 02:28:23 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll

[2014/07/22 02:28:22 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll

[2014/07/22 02:28:22 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx

[2014/07/22 02:28:22 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshom.ocx

[2014/07/22 02:28:21 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll

[2014/07/22 02:28:21 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll

[2014/07/22 02:28:21 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe

[2014/07/22 02:28:21 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe

[2014/07/22 02:22:56 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll

[2014/07/22 02:22:56 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll

[2014/07/22 02:22:12 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshwfp.dll

[2014/07/22 02:22:12 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll

[2014/07/22 02:22:12 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FWPUCLNT.DLL

[2014/07/22 02:22:12 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL

[2014/07/22 01:40:39 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\AVG2014

[2014/07/22 01:40:08 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Roaming\TuneUp Software

[2014/07/22 01:40:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

[2014/07/22 01:40:02 | 000,000,000 | -H-D | C] -- C:\$AVG

[2014/07/22 01:40:02 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2014

[2014/07/22 01:39:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG

[2014/07/22 01:37:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

[2014/07/22 01:35:00 | 000,000,000 | -HSD | C] -- C:\Windows\Installer

[2014/07/22 01:34:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google

[2014/07/22 01:34:49 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Google

[2014/07/22 01:34:42 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Deployment

[2014/07/22 01:34:42 | 000,000,000 | ---D | C] -- C:\Users\David\AppData\Local\Apps

 

========== Files - Modified Within 30 Days ==========

 

[2014/08/10 16:45:31 | 000,029,968 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2014/08/10 16:45:31 | 000,029,968 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2014/08/10 16:44:22 | 000,781,298 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2014/08/10 16:44:22 | 000,661,656 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2014/08/10 16:44:22 | 000,121,524 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2014/08/10 16:39:32 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/08/10 16:38:52 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014/08/10 16:38:46 | 000,122,584 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys

[2014/08/10 16:38:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014/08/10 16:38:17 | 2146,295,807 | -HS- | M] () -- C:\hiberfil.sys

[2014/08/10 16:34:10 | 001,016,261 | ---- | M] (Thisisu) -- C:\Users\David\Desktop\JRT.exe

[2014/08/10 16:31:06 | 001,366,203 | ---- | M] () -- C:\Users\David\Desktop\AdwCleaner.exe

[2014/08/10 16:22:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\David\Desktop\OTL.exe

[2014/08/10 01:48:51 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk

[2014/08/06 07:08:58 | 000,000,837 | ---- | M] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk

[2014/08/03 14:25:38 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2014/08/03 12:40:04 | 000,000,258 | RHS- | M] () -- C:\ProgramData\ntuser.pol

[2014/08/03 10:04:06 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf

[2014/08/03 09:44:16 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf

[2014/08/03 09:43:11 | 001,721,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01009.dll

[2014/08/03 09:43:11 | 001,002,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WinUSBCoInstaller2.dll

[2014/08/03 09:42:23 | 000,365,864 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2014/08/03 09:02:03 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

[2014/07/31 09:19:13 | 000,917,797 | ---- | M] () -- C:\Users\David\Documents\home again.pdf

[2014/07/31 09:06:12 | 001,684,598 | ---- | M] () -- C:\Users\David\Documents\Joey July Paystubs.pdf

[2014/07/29 15:58:00 | 000,000,376 | ---- | M] () -- C:\Windows\ODBC.INI

[2014/07/23 09:03:20 | 000,000,079 | ---- | M] () -- C:\Windows\EWF545.ini

[2014/07/23 08:59:50 | 000,000,930 | ---- | M] () -- C:\Users\Public\Desktop\EPSON Scan.lnk

[2014/07/23 03:01:44 | 000,773,536 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2014/07/22 08:25:15 | 000,272,808 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe

[2014/07/22 08:25:15 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe

[2014/07/22 08:25:15 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe

[2014/07/22 08:25:15 | 000,098,216 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

[2014/07/22 08:23:57 | 000,001,382 | ---- | M] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk

[2014/07/22 08:23:57 | 000,001,358 | ---- | M] () -- C:\Users\Public\Desktop\Foxit Reader.lnk

[2014/07/22 08:14:58 | 000,002,144 | ---- | M] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Belarc Advisor.lnk

[2014/07/22 08:14:58 | 000,002,120 | ---- | M] () -- C:\Users\Public\Desktop\Belarc Advisor.lnk

[2014/07/22 04:33:24 | 000,001,437 | ---- | M] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

[2014/07/22 03:37:26 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll

[2014/07/22 03:37:22 | 000,704,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll

[2014/07/22 03:37:22 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jsIntl.dll

[2014/07/22 03:37:22 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat

[2014/07/22 03:37:22 | 000,442,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll

[2014/07/22 03:37:22 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec

[2014/07/22 03:37:22 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll

[2014/07/22 03:37:22 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll

[2014/07/22 03:37:22 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll

[2014/07/22 03:37:22 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe

[2014/07/22 03:37:22 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx

[2014/07/22 03:37:22 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll

[2014/07/22 03:37:21 | 001,964,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl

[2014/07/22 03:37:21 | 001,068,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll

[2014/07/22 03:37:21 | 000,610,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll

[2014/07/22 03:37:21 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe

[2014/07/22 03:37:21 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe

[2014/07/22 03:37:21 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll

[2014/07/22 03:37:21 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll

[2014/07/22 03:37:21 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe

[2014/07/22 03:37:21 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll

[2014/07/22 03:37:21 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll

[2014/07/22 03:37:21 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll

[2014/07/22 03:37:21 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll

[2014/07/22 03:37:21 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll

[2014/07/22 03:37:21 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll

[2014/07/22 03:37:21 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll

[2014/07/22 03:37:21 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll

[2014/07/22 03:37:21 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll

[2014/07/22 03:37:21 | 000,016,284 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf

[2014/07/22 03:37:20 | 005,721,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll

[2014/07/22 03:37:20 | 000,942,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jsIntl.dll

[2014/07/22 03:37:20 | 000,752,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll

[2014/07/22 03:37:20 | 000,598,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll

[2014/07/22 03:37:20 | 000,592,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll

[2014/07/22 03:37:20 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll

[2014/07/22 03:37:20 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll

[2014/07/22 03:37:20 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll

[2014/07/22 03:37:20 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll

[2014/07/22 03:37:20 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll

[2014/07/22 03:37:20 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe

[2014/07/22 03:37:20 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe

[2014/07/22 03:37:20 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll

[2014/07/22 03:37:20 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe

[2014/07/22 03:37:20 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll

[2014/07/22 03:37:20 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll

[2014/07/22 03:37:20 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe

[2014/07/22 03:37:20 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe

[2014/07/22 03:37:19 | 001,249,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll

[2014/07/22 03:37:19 | 000,846,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll

[2014/07/22 03:37:19 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat

[2014/07/22 03:37:19 | 000,608,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe

[2014/07/22 03:37:19 | 000,452,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll

[2014/07/22 03:37:19 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec

[2014/07/22 03:37:19 | 000,292,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll

[2014/07/22 03:37:19 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll

[2014/07/22 03:37:19 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll

[2014/07/22 03:37:19 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx

[2014/07/22 03:37:19 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll

[2014/07/22 03:37:19 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll

[2014/07/22 03:37:19 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll

[2014/07/22 03:37:19 | 000,016,284 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf

[2014/07/22 03:37:18 | 002,040,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl

[2014/07/22 03:37:18 | 000,774,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll

[2014/07/22 03:37:18 | 000,631,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll

[2014/07/22 03:37:18 | 000,548,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll

[2014/07/22 03:37:18 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe

[2014/07/22 03:37:18 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll

[2014/07/22 03:37:18 | 000,143,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe

[2014/07/22 03:37:18 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe

[2014/07/22 03:37:18 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll

[2014/07/22 03:37:18 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe

[2014/07/22 03:37:18 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll

[2014/07/22 03:37:18 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll

[2014/07/22 03:37:18 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll

[2014/07/22 03:37:18 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll

[2014/07/22 03:37:18 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll

[2014/07/22 03:37:18 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll

[2014/07/22 03:37:18 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll

[2014/07/22 03:37:18 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe

[2014/07/22 03:37:18 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll

[2014/07/22 03:32:30 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll

[2014/07/22 03:32:30 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

[2014/07/22 03:32:30 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll

[2014/07/22 03:32:30 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

[2014/07/22 03:32:30 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll

[2014/07/22 03:32:30 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll

[2014/07/22 03:32:30 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll

[2014/07/22 03:32:30 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll

[2014/07/22 03:32:30 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll

[2014/07/22 03:32:30 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll

[2014/07/22 03:32:30 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

[2014/07/22 03:32:30 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll

[2014/07/22 03:32:29 | 002,776,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll

[2014/07/22 03:32:29 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll

[2014/07/22 03:32:29 | 001,682,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll

[2014/07/22 03:32:29 | 001,643,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll

[2014/07/22 03:32:29 | 001,238,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll

[2014/07/22 03:32:29 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll

[2014/07/22 03:32:29 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll

[2014/07/22 03:32:29 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll

[2014/07/22 03:32:29 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll

[2014/07/22 03:32:29 | 000,333,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll

[2014/07/22 03:32:29 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll

[2014/07/22 03:32:29 | 000,245,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll

[2014/07/22 03:32:29 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll

[2014/07/22 03:32:29 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll

[2014/07/22 03:32:29 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll

[2014/07/22 03:08:07 | 000,108,227 | ---- | M] () -- C:\Windows\SysWow64\license.rtf

[2014/07/22 03:08:07 | 000,108,227 | ---- | M] () -- C:\Windows\SysNative\license.rtf

[2014/07/22 03:06:28 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

[2014/07/22 02:16:39 | 000,002,279 | ---- | M] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

[2014/07/22 01:40:08 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2014.lnk

[2014/07/22 01:37:18 | 000,002,255 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

 

========== Files Created - No Company Name ==========

 

[2014/08/10 16:30:56 | 001,366,203 | ---- | C] () -- C:\Users\David\Desktop\AdwCleaner.exe

[2014/08/10 01:48:51 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk

[2014/08/06 07:08:58 | 000,000,837 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk

[2014/08/03 14:25:38 | 000,001,102 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2014/08/03 12:40:04 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2014/08/03 10:04:06 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf

[2014/08/03 09:44:16 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf

[2014/08/03 09:03:39 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk

[2014/08/03 09:02:03 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

[2014/07/31 09:19:13 | 000,917,797 | ---- | C] () -- C:\Users\David\Documents\home again.pdf

[2014/07/31 09:06:11 | 001,684,598 | ---- | C] () -- C:\Users\David\Documents\Joey July Paystubs.pdf

[2014/07/29 15:58:00 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI

[2014/07/23 08:59:50 | 000,000,930 | ---- | C] () -- C:\Users\Public\Desktop\EPSON Scan.lnk

[2014/07/23 08:59:19 | 000,000,079 | ---- | C] () -- C:\Windows\EWF545.ini

[2014/07/22 08:23:57 | 000,001,382 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk

[2014/07/22 08:23:57 | 000,001,358 | ---- | C] () -- C:\Users\Public\Desktop\Foxit Reader.lnk

[2014/07/22 08:14:58 | 000,002,144 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Belarc Advisor.lnk

[2014/07/22 08:14:58 | 000,002,132 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk

[2014/07/22 08:14:58 | 000,002,120 | ---- | C] () -- C:\Users\Public\Desktop\Belarc Advisor.lnk

[2014/07/22 04:33:24 | 000,001,437 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

[2014/07/22 04:28:49 | 000,001,413 | ---- | C] () -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

[2014/07/22 04:28:37 | 000,000,290 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

[2014/07/22 04:28:37 | 000,000,272 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

[2014/07/22 03:49:21 | 000,773,536 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2014/07/22 03:37:21 | 000,016,284 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf

[2014/07/22 03:37:19 | 000,016,284 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf

[2014/07/22 03:07:51 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

[2014/07/22 03:07:50 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

[2014/07/22 03:06:28 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

[2014/07/22 03:06:01 | 2146,295,807 | -HS- | C] () -- C:\hiberfil.sys

[2014/07/22 02:49:08 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

[2014/07/22 02:34:02 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

[2014/07/22 01:40:08 | 000,000,965 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2014.lnk

[2014/07/22 01:37:18 | 000,002,279 | ---- | C] () -- C:\Users\David\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

[2014/07/22 01:37:18 | 000,002,255 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2014/07/22 01:34:54 | 000,000,896 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/07/22 01:34:53 | 000,000,892 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

 

========== ZeroAccess Check ==========

 

[2009/07/14 00:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2014/03/24 22:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2014/03/24 22:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 21:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 23:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 21:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 

< End of report >

[civiccrazy]

Still getting pop ups.

[23red]

Hi civiccrazy  

 

Step 1

Peer to Peer Warning

 

Looking through your log, I've noticed you have uTorrent installed. 
GeeksToGo does not recommend using such programs.  You should read the description of Peer-to-Peer programs below and decide for yourself:

 

P2P(Peer-to-Peer) may be a great way to get lots of seemingly freeware, but it is a great way to get infected as well. The program(s) may be safe, but there's no way to tell if the file being shared is infected. P2P programs, more often than not, install adware and/or spyware and worse still, some worms spread via P2P networks, infecting you as well.
Once upon a time, P2P file sharing was fairly safe. This is no longer true. P2P programs form a direct conduit inside your computer, their security measures are easily circumvented, and malware writers are increasingly exploiting them to spread their wares on to your computer. If your P2P program is not configured correctly, your computer may also be sharing more files than you realize. There have been cases where people's passwords, address books and other personal, private, and financial details have been exposed to a file sharing network by a badly configured program.

If you still need convincing, please read these short reports on the dangers of peer-2-peer programs and file sharing:

 

•  FBI Cyber Education Letter

•  infoworld

My suggestion would be for you to uninstall this Optional Removal:

uTorrent

The choice is yours.  If you decide to keep it, please refrain from using it until we are finished with cleaning.

Onward:

 

Please advise if the pop ups have stopped after completing these 4 steps and the reboot after:

 

Step 1
Delete a Google Chrome extension:

 

1.  Open the Chrome browser
2.  Click the Chrome menu on the browser toolbar.
3.  Click Tools.
4.  Select Extensions. A page like the one shown below will open:

 

 

Check for any Sweetpacks items, uncheck the box for AVG Secure Search and any other extensions you don't recognize.

If there is a check mark in the box next to it/them, click the box to uncheck it/them. Then click the trash can icon next to the box.
A confirmation dialog will appear, click Remove.

 

 

Step 2
Reset Chrome Search Provider:

 
1.  Click the Chrome menu icon on the browser toolbar
2.  Select Settings. The Settings page will open.
3.  In the "Search" section, click Manage search engines.

 

 

Mouse over them and click the X to remove them.
Make the search engine of your choice,  Google the (Default) search engine by mousing over it and clicking Make default.

 

 

Step 3
Change the Chrome HomePage:

 

1.  Click on the Chrome menu icon on the browser toolbar
2.  When the drop-down menu appears, select the choice labeled Settings.
3.  Chrome's Options should now be displayed in a new tab or window, depending on your settings:

 

 

4.  Click on Settings in the left menu pane, if it is not already selected.
5.  Next, locate the Appearance section.

 

By default, the Home button is not visible on Chrome's main toolbar and the Show Home button option is disabled.
 
First, activate this option by clicking on the empty check box next to Show Home button.
When the Show Home button checkbox is selected, a web address appears below it or a small pop up window opens to let you choose if you want the New Tab page as your home page or a specific page such as http://www.google.com or Bing. 

You need to change your Homepage from the malicious one it is now.

To start out at a different/cleaner webpage, click Change and enter the new address, like http://www.google.com.
Or type or copy it in the Open this page choice. 

 

Either way, remove the sweetpacks entry that is now there!

 

Finally, once you are satisfied with your new setting, click on the OK button.

 

 

Step 4
Clear Chrome Cache and Browsing History:

 

Click the Chrome menu icon on the browser toolbar.
Select Tools.
Select Clear browsing data.

 

Select the following:

 

Clear browsing history
Clear download history
Empty the cache
Delete cookies and other site and plug-in data

In the drop-down at the top of the dialog box, select the beginning of time

 

Click Clear browsing data.
 
Close Chrome.

Reboot, and see if it behaves.

 

 

Step 5
Farbar Recovery Scan Tool:
 

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

 

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

 

 

When you return please post:

1.  FRST.exe/FRST64.exe
2.  Addition.txt

3.  Please let me know if the popups have stopped.  And if no, which browser you're still experiencing the popups with.
 

Thank you
 

[civiccrazy]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2014

Ran by David (administrator) on DAVID-COMPUTER on 13-08-2014 00:33:35

Running from C:\Users\David\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11

Boot Mode: Normal

 

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE

(Foxit Corporation) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\nacl64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\nacl64.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [Onboard] => C:\Program Files\Western Digital\WD SmartWare\WDSmartWare.exe [3195248 2014-06-02] (Western Digital Technologies, Inc.)

HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5187088 2014-07-10] (AVG Technologies CZ, s.r.o.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5563760 2014-06-02] (Western Digital Technologies, Inc.)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [642664 2013-12-24] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863848 2013-12-24] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare)

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-08-01] (Apple Inc.)

HKU\S-1-5-21-3636867177-167865813-2041884550-1000\...\Run: [GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-07-15] (Google Inc.)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} -  No File

Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll (Belarc, Inc.)

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

 

FireFox:

========

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR StartupUrls: "hxxp://yahoo.com/"

CHR Extension: (Angry Birds) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-07-22]

CHR Extension: (Google Docs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-22]

CHR Extension: (Google Drive) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-22]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-07-22]

CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-22]

CHR Extension: (Google Search) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-22]

CHR Extension: (Poppit!) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi [2014-07-22]

CHR Extension: (AVG Secure Search) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2014-07-22]

CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-22]

CHR Extension: (Gmail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-22]

 

==================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1417160 2014-07-10] (AVG Technologies CZ, s.r.o.)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3244048 2014-07-10] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-07-10] (AVG Technologies CZ, s.r.o.)

R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [242216 2014-06-17] (Foxit Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-06-02] (Western Digital Technologies, Inc.)

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-06-02] (Western Digital Technologies, Inc.)

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)

R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [242968 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)

R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [269080 2014-06-17] (AVG Technologies CZ, s.r.o.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-13] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-08-13 00:33 - 2014-08-13 00:33 - 02100224 _____ (Farbar) C:\Users\David\Desktop\FRST64.exe

2014-08-13 00:33 - 2014-08-13 00:33 - 00013655 _____ () C:\Users\David\Desktop\FRST.txt

2014-08-13 00:33 - 2014-08-13 00:33 - 00000000 ____D () C:\FRST

2014-08-13 00:32 - 2014-08-13 00:33 - 02100224 _____ (Farbar) C:\Users\David\Downloads\FRST64.exe

2014-08-13 00:32 - 2014-08-13 00:32 - 01092096 _____ (Farbar) C:\Users\David\Downloads\FRST.exe

2014-08-12 15:13 - 2014-08-12 15:13 - 00000000 ____D () C:\Windows\Sun

2014-08-10 17:02 - 2014-08-10 17:02 - 00239340 _____ () C:\Users\David\Desktop\OTL.Txt

2014-08-10 17:02 - 2014-08-10 17:02 - 00022552 _____ () C:\Users\David\Desktop\Extras.Txt

2014-08-10 16:53 - 2014-08-10 16:53 - 00000633 _____ () C:\Users\David\Desktop\JRT.txt

2014-08-10 16:43 - 2014-08-10 16:43 - 00000000 ____D () C:\Windows\ERUNT

2014-08-10 16:34 - 2014-08-10 16:34 - 01016261 _____ (Thisisu) C:\Users\David\Downloads\JRT.exe

2014-08-10 16:34 - 2014-08-10 16:34 - 01016261 _____ (Thisisu) C:\Users\David\Desktop\JRT.exe

2014-08-10 16:33 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-08-10 16:31 - 2014-08-10 16:36 - 00000000 ____D () C:\AdwCleaner

2014-08-10 16:30 - 2014-08-10 16:31 - 01366203 _____ () C:\Users\David\Desktop\AdwCleaner.exe

2014-08-10 16:23 - 2014-08-10 16:23 - 00000000 ____D () C:\_OTL

2014-08-10 16:22 - 2014-08-10 16:22 - 00602112 _____ (OldTimer Tools) C:\Users\David\Desktop\OTL.exe

2014-08-10 01:48 - 2014-08-10 01:48 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-08-10 01:48 - 2014-08-10 01:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-08-10 01:48 - 2014-08-10 01:48 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-08-10 01:48 - 2014-08-10 01:48 - 00000000 ____D () C:\Program Files\iTunes

2014-08-10 01:48 - 2014-08-10 01:48 - 00000000 ____D () C:\Program Files\iPod

2014-08-10 01:48 - 2014-08-10 01:48 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-08-06 07:07 - 2014-08-13 00:12 - 00000000 ____D () C:\Users\David\AppData\Roaming\uTorrent

2014-08-06 07:06 - 2014-08-06 07:06 - 01936720 _____ (BitTorrent Inc.) C:\Users\David\Downloads\uTorrent (1).exe

2014-08-05 12:06 - 2014-08-05 12:19 - 00000000 ____D () C:\Users\David\Desktop\Nikon D5000

2014-08-05 12:06 - 2014-08-05 12:09 - 00000000 ____D () C:\Users\David\Desktop\Wedding pics 16 Goats in a Tree

2014-08-05 12:06 - 2014-08-05 12:07 - 00015360 _____ () C:\Users\David\Desktop\Mileage.xls

2014-08-05 12:06 - 2014-08-05 12:06 - 00000000 ____D () C:\Users\David\Desktop\Recipes

2014-08-05 12:05 - 2014-08-05 12:05 - 00000000 ____D () C:\Users\David\Desktop\NFL pool

2014-08-05 12:05 - 2014-08-05 12:05 - 00000000 ____D () C:\Users\David\Desktop\Heather Folder

2014-08-05 07:47 - 2014-08-05 07:47 - 00098126 _____ () C:\Users\David\Downloads\OTL.Txt

2014-08-05 07:47 - 2014-08-05 07:47 - 00040858 _____ () C:\Users\David\Downloads\Extras.Txt

2014-08-05 07:26 - 2014-08-05 07:29 - 00000000 ____D () C:\Users\David\Downloads\erunt

2014-08-05 07:26 - 2014-08-05 07:26 - 00003768 _____ () C:\Users\David\Documents\geeks.txt

2014-08-04 23:02 - 2014-08-04 22:58 - 12877824 _____ () C:\Users\David\Downloads\3d0d7e5fb2ce288813306e4d4636395e047a3d28

2014-08-03 19:28 - 2014-05-14 12:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-08-03 19:28 - 2014-05-14 12:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-08-03 19:28 - 2014-05-14 12:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-08-03 19:28 - 2014-05-14 12:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-08-03 19:27 - 2014-05-14 12:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-08-03 19:27 - 2014-05-14 12:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-08-03 19:27 - 2014-05-14 12:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-08-03 19:27 - 2014-05-14 12:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2014-08-03 19:27 - 2014-05-14 12:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-08-03 19:27 - 2014-05-14 12:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-08-03 19:27 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-08-03 19:27 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-08-03 19:27 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-08-03 19:27 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-08-03 14:25 - 2014-08-13 00:30 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-03 14:25 - 2014-08-03 14:25 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-08-03 14:25 - 2014-08-03 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-03 14:25 - 2014-08-03 14:25 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-03 14:25 - 2014-08-03 14:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-03 14:25 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-08-03 14:25 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-08-03 14:25 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-08-03 14:22 - 2014-08-03 14:23 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\David\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-03 12:55 - 2014-08-03 12:55 - 00000000 ____D () C:\Users\David\Documents\Wondershare

2014-08-03 12:40 - 2014-08-03 12:40 - 00000258 __RSH () C:\ProgramData\ntuser.pol

2014-08-03 10:16 - 2014-08-03 10:16 - 00000000 ____D () C:\Users\David\AppData\Local\Apple Computer

2014-08-03 10:16 - 2014-08-03 10:16 - 00000000 ____D () C:\ProgramData\Apple Computer

2014-08-03 10:16 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys

2014-08-03 10:04 - 2014-08-03 10:04 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf

2014-08-03 09:44 - 2014-08-03 09:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf

2014-08-03 09:43 - 2014-08-03 09:43 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll

2014-08-03 09:43 - 2014-08-03 09:43 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll

2014-08-03 09:03 - 2014-08-03 12:43 - 00000000 ____D () C:\Users\David\AppData\Roaming\Apple Computer

2014-08-03 09:03 - 2014-08-03 09:03 - 01936720 _____ (BitTorrent Inc.) C:\Users\David\Downloads\uTorrent.exe

2014-08-03 09:03 - 2014-08-03 09:03 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Windows\System32\Tasks\Apple

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Users\David\AppData\Local\Apple

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\ProgramData\Apple

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Program Files\Common Files\Apple

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Program Files\Bonjour

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Program Files (x86)\Bonjour

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update

2014-08-03 09:02 - 2014-08-03 09:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

2014-08-03 09:02 - 2014-08-03 09:02 - 00000000 ____D () C:\Users\David\Desktop\DCIM

2014-08-03 08:53 - 2014-08-03 08:58 - 113509200 _____ (Apple Inc.) C:\Users\David\Downloads\iTunes64Setup.exe

2014-08-03 08:47 - 2014-08-04 07:38 - 00000000 ____D () C:\Users\David\.android

2014-08-03 08:47 - 2014-08-03 08:47 - 00000000 ____D () C:\Users\David\AppData\Roaming\Wondershare

2014-08-03 08:47 - 2014-08-03 08:47 - 00000000 ____D () C:\Users\David\AppData\Local\Wondershare

2014-08-03 00:30 - 2014-08-03 00:39 - 34823304 _____ (Wondershare ) C:\Users\David\Downloads\mobile-transfer.exe

2014-08-01 16:23 - 2014-08-01 16:23 - 01377513 _____ () C:\Users\David\Downloads\Football Cheer Chants.htm

2014-07-31 09:04 - 2014-07-31 09:19 - 00000000 ____D () C:\Users\David\AppData\Roaming\Foxit Scanner Images

2014-07-31 09:04 - 2014-07-31 09:04 - 00000000 _____ () C:\Users\David\Sti_Trace.log

2014-07-29 16:12 - 2014-08-12 00:25 - 00016896 _____ () C:\Users\David\Desktop\Doug.xls

2014-07-29 16:12 - 2014-08-05 12:04 - 00022528 _____ () C:\Users\David\Desktop\Chores Aydien.xls

2014-07-29 16:12 - 2014-08-05 12:01 - 00019456 _____ () C:\Users\David\Desktop\Chores Payton.xls

2014-07-29 15:58 - 2014-07-29 15:58 - 00000376 _____ () C:\Windows\ODBC.INI

2014-07-29 15:57 - 2014-07-29 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

2014-07-29 15:57 - 2014-07-29 15:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft ActiveSync

2014-07-29 15:56 - 2014-08-04 08:46 - 00000000 ____D () C:\Windows\PCHEALTH

2014-07-29 15:56 - 2014-07-29 15:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office

2014-07-29 15:54 - 2014-07-29 15:54 - 00000000 __RHD () C:\MSOCache

2014-07-23 09:03 - 2014-07-23 09:03 - 00000000 ____D () C:\Users\David\AppData\Roaming\Leadertech

2014-07-23 09:01 - 2014-08-03 09:42 - 00000000 ____D () C:\Users\David\AppData\Roaming\Epson

2014-07-23 09:01 - 2014-07-23 09:01 - 00000000 ____D () C:\Program Files\EPSON

2014-07-23 09:01 - 2014-07-23 09:01 - 00000000 ____D () C:\Program Files\Common Files\EPSON

2014-07-23 09:00 - 2014-07-23 09:01 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-23 09:00 - 2014-07-23 09:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software

2014-07-23 09:00 - 2014-07-23 09:01 - 00000000 ____D () C:\ProgramData\EPSON

2014-07-23 09:00 - 2014-07-23 09:01 - 00000000 ____D () C:\Program Files (x86)\Epson Software

2014-07-23 09:00 - 2011-04-20 07:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMHWA.DLL

2014-07-23 09:00 - 2011-03-15 07:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YD4BHWA.DLL

2014-07-23 08:59 - 2014-07-23 09:03 - 00000079 _____ () C:\Windows\EWF545.ini

2014-07-23 08:59 - 2014-07-23 09:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

2014-07-23 08:59 - 2014-07-23 09:00 - 00000000 ____D () C:\Program Files (x86)\epson

2014-07-23 08:59 - 2014-07-23 08:59 - 00000930 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk

2014-07-23 08:59 - 2009-12-09 00:00 - 00464384 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll

2014-07-23 08:59 - 2009-10-16 00:00 - 00132560 _____ (Seiko Epson Corporation) C:\Windows\system32\esdevapp.exe

2014-07-23 08:59 - 2009-10-16 00:00 - 00013824 _____ (Seiko Epson Corporation) C:\Windows\system32\esxcdev.dll

2014-07-22 22:19 - 2013-12-24 19:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-07-22 22:19 - 2013-12-24 18:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-07-22 22:19 - 2013-11-26 04:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-07-22 22:19 - 2013-11-23 14:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2014-07-22 22:19 - 2013-11-23 13:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2014-07-22 22:19 - 2013-11-22 18:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-07-22 22:19 - 2011-02-25 02:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2014-07-22 22:19 - 2011-02-25 01:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2014-07-22 22:18 - 2014-06-18 20:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-22 22:18 - 2014-02-03 22:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2014-07-22 22:18 - 2014-02-03 22:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2014-07-22 22:18 - 2012-02-11 02:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2014-07-22 22:18 - 2012-02-11 02:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

2014-07-22 22:18 - 2011-03-11 02:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys

2014-07-22 22:18 - 2011-03-11 02:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys

2014-07-22 22:18 - 2011-03-11 02:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys

2014-07-22 22:18 - 2011-03-11 02:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys

2014-07-22 22:18 - 2011-03-11 02:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys

2014-07-22 22:18 - 2011-03-11 02:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2014-07-22 22:18 - 2011-03-11 02:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe

2014-07-22 22:18 - 2011-03-11 01:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2014-07-22 22:18 - 2011-03-11 01:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe

2014-07-22 22:18 - 2011-03-11 00:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2014-07-22 08:54 - 2014-07-22 08:54 - 00000000 __SHD () C:\Users\David\AppData\Local\EmieUserList

2014-07-22 08:54 - 2014-07-22 08:54 - 00000000 __SHD () C:\Users\David\AppData\Local\EmieSiteList

2014-07-22 08:52 - 2014-07-22 08:52 - 00000000 ____D () C:\Users\David\AppData\Roaming\Adobe

2014-07-22 08:41 - 2014-07-22 08:41 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-22 08:39 - 2014-07-22 08:39 - 00000000 ____D () C:\Users\David\AppData\Local\Western_Digital_Technolog

2014-07-22 08:39 - 2014-07-22 08:39 - 00000000 ____D () C:\Users\David\AppData\Local\Western Digital

2014-07-22 08:34 - 2014-07-22 08:34 - 00009130 _____ () C:\Windows\DPINST.LOG

2014-07-22 08:34 - 2014-07-22 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital

2014-07-22 08:33 - 2014-07-22 08:33 - 00000000 ____D () C:\ProgramData\Western Digital

2014-07-22 08:33 - 2014-07-22 08:33 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-22 08:33 - 2014-07-22 08:33 - 00000000 ____D () C:\Program Files\Western Digital

2014-07-22 08:33 - 2014-07-22 08:33 - 00000000 ____D () C:\Program Files\Common Files\Western Digital

2014-07-22 08:33 - 2014-07-22 08:33 - 00000000 ____D () C:\Program Files (x86)\Western Digital

2014-07-22 08:28 - 2014-07-22 08:30 - 39898307 _____ () C:\Users\David\Downloads\WD_SmartWare_ Installer_2.4.1.9.zip

2014-07-22 08:25 - 2014-07-22 08:25 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-22 08:25 - 2014-07-22 08:25 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-22 08:25 - 2014-07-22 08:25 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-22 08:25 - 2014-07-22 08:25 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-22 08:25 - 2014-07-22 08:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-22 08:25 - 2014-07-22 08:25 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-22 08:24 - 2014-07-31 09:04 - 00000000 ____D () C:\Users\David\AppData\Roaming\Foxit Software

2014-07-22 08:24 - 2014-07-22 08:24 - 00000000 ____D () C:\Users\Public\Foxit Software

2014-07-22 08:23 - 2014-07-22 08:23 - 00918952 _____ (Oracle Corporation) C:\Users\David\Downloads\chromeinstall-7u65 (1).exe

2014-07-22 08:23 - 2014-07-22 08:23 - 00001358 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk

2014-07-22 08:23 - 2014-07-22 08:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader

2014-07-22 08:23 - 2014-07-22 08:23 - 00000000 ____D () C:\Program Files (x86)\Foxit Software

2014-07-22 08:22 - 2014-07-22 08:25 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-22 08:22 - 2014-07-22 08:22 - 00000000 ____D () C:\ProgramData\Sun

2014-07-22 08:14 - 2014-07-22 08:14 - 00918952 _____ (Oracle Corporation) C:\Users\David\Downloads\chromeinstall-7u65.exe

2014-07-22 08:14 - 2014-07-22 08:14 - 00002132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk

2014-07-22 08:14 - 2014-07-22 08:14 - 00002120 _____ () C:\Users\Public\Desktop\Belarc Advisor.lnk

2014-07-22 08:14 - 2014-07-22 08:14 - 00000000 ____D () C:\Program Files (x86)\Belarc

2014-07-22 08:12 - 2013-06-28 08:46 - 00114688 _____ (Euro Plus d.o.o.) C:\Windows\system32\zdnPMS.dll

2014-07-22 08:12 - 2013-06-28 08:46 - 00114176 _____ (Euro Plus d.o.o.) C:\Windows\system32\zdnPMU.dll

2014-07-22 08:11 - 2014-07-22 08:11 - 03358176 _____ () C:\Users\David\Downloads\advisorinstaller.exe

2014-07-22 08:10 - 2014-07-22 08:21 - 37790904 _____ (Foxit Corporation ) C:\Users\David\Downloads\FoxitReader621.0618_prom_enu_Setup.exe

2014-07-22 08:10 - 2014-07-22 08:10 - 00000000 ____D () C:\ZD270316

2014-07-22 08:09 - 2014-07-22 08:09 - 08665480 _____ () C:\Users\David\Downloads\zd270316-certified.exe

2014-07-22 08:08 - 2014-07-22 08:22 - 124098848 _____ () C:\Users\David\Downloads\epson14500.exe

2014-07-22 04:34 - 2014-08-13 00:11 - 00000000 ____D () C:\ProgramData\MFAData

2014-07-22 04:34 - 2014-07-22 08:06 - 00000000 ____D () C:\Users\David\AppData\Local\Avg2014

2014-07-22 04:34 - 2014-07-22 04:34 - 00000000 ____D () C:\Users\David\AppData\Local\MFAData

2014-07-22 04:32 - 2012-02-17 02:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll

2014-07-22 04:32 - 2012-02-17 01:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll

2014-07-22 04:32 - 2012-02-17 00:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

2014-07-22 04:28 - 2014-08-13 00:33 - 02056505 _____ () C:\Windows\WindowsUpdate.log

2014-07-22 04:28 - 2014-08-03 09:42 - 00000000 ____D () C:\Users\David

2014-07-22 04:28 - 2014-07-22 08:52 - 00001413 _____ () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-07-22 04:28 - 2014-07-22 04:28 - 00000020 ___SH () C:\Users\David\ntuser.ini

2014-07-22 04:28 - 2014-07-22 04:28 - 00000000 __SHD () C:\Recovery

2014-07-22 04:28 - 2014-07-22 04:28 - 00000000 ____D () C:\Users\David\AppData\Local\VirtualStore

2014-07-22 04:28 - 2009-07-14 00:54 - 00000000 ___RD () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-07-22 04:28 - 2009-07-14 00:49 - 00000000 ___RD () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-07-22 04:05 - 2014-07-22 04:28 - 00000000 ____D () C:\Windows\Panther

2014-07-22 04:01 - 2013-05-10 01:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2014-07-22 04:01 - 2013-05-10 01:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2014-07-22 04:01 - 2013-05-10 00:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2014-07-22 04:01 - 2013-05-10 00:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2014-07-22 03:49 - 2014-07-23 03:01 - 00773536 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-07-22 03:41 - 2013-10-14 19:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2014-07-22 03:37 - 2014-07-22 03:37 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-22 03:37 - 2014-07-22 03:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-22 03:37 - 2014-07-22 03:37 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-22 03:37 - 2014-07-22 03:37 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-22 03:37 - 2014-07-22 03:37 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-07-22 03:37 - 2014-07-22 03:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-07-22 03:37 - 2014-07-22 03:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-07-22 03:37 - 2014-07-22 03:37 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-07-22 03:37 - 2014-07-22 03:37 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-07-22 03:37 - 2014-07-22 03:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-07-22 03:37 - 2014-07-22 03:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2014-07-22 03:31 - 2014-07-22 03:41 - 00013120 _____ () C:\Windows\IE11_main.log

2014-07-22 03:08 - 2014-07-22 03:09 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-22 03:08 - 2014-06-26 18:40 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-22 03:07 - 2014-07-22 03:07 - 00001355 _____ () C:\Windows\TSSysprep.log

2014-07-22 03:07 - 2014-07-22 03:07 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

2014-07-22 03:07 - 2014-07-22 03:07 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

2014-07-22 03:06 - 2014-07-22 03:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

2014-07-22 02:49 - 2012-07-25 23:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll

2014-07-22 02:49 - 2012-07-25 23:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2014-07-22 02:49 - 2012-07-25 23:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2014-07-22 02:49 - 2012-07-25 23:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2014-07-22 02:49 - 2012-07-25 23:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll

2014-07-22 02:49 - 2012-07-25 22:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2014-07-22 02:49 - 2012-07-25 22:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2014-07-22 02:49 - 2012-06-02 10:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2014-07-22 02:42 - 2012-03-01 02:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys

2014-07-22 02:42 - 2012-03-01 02:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll

2014-07-22 02:42 - 2012-03-01 01:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll

2014-07-22 02:39 - 2014-06-29 22:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-22 02:39 - 2014-06-29 22:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-22 02:38 - 2014-06-06 06:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-22 02:38 - 2014-06-06 05:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-22 02:38 - 2014-03-04 05:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-07-22 02:38 - 2014-03-04 05:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-07-22 02:38 - 2014-03-04 05:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-07-22 02:38 - 2014-03-04 05:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-07-22 02:38 - 2014-03-04 05:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-07-22 02:38 - 2014-03-04 05:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-07-22 02:38 - 2014-03-04 05:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-07-22 02:38 - 2014-03-04 05:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-07-22 02:38 - 2014-03-04 05:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-07-22 02:38 - 2014-03-04 05:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-07-22 02:38 - 2014-03-04 05:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2014-07-22 02:38 - 2014-03-04 05:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2014-07-22 02:38 - 2014-03-04 05:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll

2014-07-22 02:38 - 2014-03-04 05:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll

2014-07-22 02:38 - 2014-03-04 05:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll

2014-07-22 02:38 - 2014-03-04 05:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll

2014-07-22 02:38 - 2014-03-04 05:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll

2014-07-22 02:38 - 2014-03-04 05:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll

2014-07-22 02:38 - 2014-03-04 05:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll

2014-07-22 02:38 - 2014-03-04 05:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-07-22 02:38 - 2013-12-03 22:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2014-07-22 02:38 - 2013-12-03 22:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2014-07-22 02:38 - 2013-12-03 22:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2014-07-22 02:38 - 2013-12-03 22:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2014-07-22 02:38 - 2013-12-03 22:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-07-22 02:38 - 2013-12-03 22:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2014-07-22 02:38 - 2013-12-03 22:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2014-07-22 02:38 - 2013-12-03 22:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2014-07-22 02:38 - 2013-12-03 22:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2014-07-22 02:38 - 2013-12-03 22:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2014-07-22 02:38 - 2013-12-03 22:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2014-07-22 02:38 - 2013-12-03 22:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2014-07-22 02:38 - 2013-12-03 22:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2014-07-22 02:38 - 2013-12-03 22:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-07-22 02:38 - 2013-12-03 21:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2014-07-22 02:38 - 2013-12-03 21:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2014-07-22 02:38 - 2013-12-03 21:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2014-07-22 02:38 - 2013-12-03 21:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2014-07-22 02:38 - 2013-08-01 22:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2014-07-22 02:38 - 2013-08-01 22:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2014-07-22 02:38 - 2013-08-01 21:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2014-07-22 02:38 - 2013-08-01 20:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2014-07-22 02:38 - 2012-04-26 01:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2014-07-22 02:38 - 2012-04-26 01:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll

2014-07-22 02:38 - 2012-04-26 01:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe

2014-07-22 02:38 - 2011-06-15 06:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll

2014-07-22 02:38 - 2011-06-15 06:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll

2014-07-22 02:38 - 2011-06-15 06:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll

2014-07-22 02:38 - 2011-06-15 06:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll

2014-07-22 02:38 - 2011-06-15 04:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll

2014-07-22 02:38 - 2011-06-15 04:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll

2014-07-22 02:38 - 2011-06-15 04:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll

2014-07-22 02:38 - 2011-06-15 04:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll

2014-07-22 02:38 - 2011-06-15 04:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll

2014-07-22 02:38 - 2011-05-24 07:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll

2014-07-22 02:38 - 2011-05-24 06:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll

2014-07-22 02:38 - 2011-05-24 06:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll

2014-07-22 02:38 - 2011-05-24 06:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll

2014-07-22 02:38 - 2011-05-24 06:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2014-07-22 02:38 - 2011-03-03 02:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2014-07-22 02:38 - 2011-03-03 02:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2014-07-22 02:38 - 2011-03-03 02:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe

2014-07-22 02:38 - 2011-03-03 01:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2014-07-22 02:38 - 2011-03-03 01:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe

2014-07-22 02:37 - 2014-04-04 22:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-07-22 02:37 - 2014-04-04 22:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-07-22 02:37 - 2014-03-24 22:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-07-22 02:37 - 2014-03-24 22:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-07-22 02:37 - 2013-11-26 07:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-07-22 02:37 - 2013-10-05 16:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2014-07-22 02:37 - 2013-10-05 15:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2014-07-22 02:37 - 2013-07-25 22:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2014-07-22 02:37 - 2013-07-25 21:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2014-07-22 02:37 - 2013-07-09 01:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2014-07-22 02:37 - 2013-07-09 01:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2014-07-22 02:37 - 2013-07-09 00:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2014-07-22 02:37 - 2013-07-09 00:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2014-07-22 02:37 - 2013-02-27 02:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-07-22 02:37 - 2013-02-27 01:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2014-07-22 02:37 - 2012-12-07 09:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2014-07-22 02:37 - 2012-12-07 09:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2014-07-22 02:37 - 2012-12-07 08:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2014-07-22 02:37 - 2012-12-07 08:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll

2014-07-22 02:37 - 2012-12-07 07:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs

2014-07-22 02:37 - 2012-12-07 07:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs

2014-07-22 02:37 - 2012-12-07 07:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs

2014-07-22 02:37 - 2012-12-07 07:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs

2014-07-22 02:37 - 2012-12-07 07:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs

2014-07-22 02:37 - 2012-12-07 07:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs

2014-07-22 02:37 - 2012-12-07 07:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs

2014-07-22 02:37 - 2012-12-07 07:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs

2014-07-22 02:37 - 2012-12-07 07:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs

2014-07-22 02:37 - 2012-12-07 07:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs

2014-07-22 02:37 - 2012-12-07 07:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs

2014-07-22 02:37 - 2012-12-07 07:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs

2014-07-22 02:37 - 2012-12-07 07:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs

2014-07-22 02:37 - 2012-12-07 07:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs

2014-07-22 02:37 - 2012-12-07 06:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs

2014-07-22 02:37 - 2012-10-03 13:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2014-07-22 02:37 - 2012-10-03 13:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll

2014-07-22 02:37 - 2012-10-03 13:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2014-07-22 02:37 - 2012-10-03 13:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2014-07-22 02:37 - 2012-10-03 13:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll

2014-07-22 02:37 - 2012-10-03 13:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2014-07-22 02:37 - 2012-10-03 12:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll

2014-07-22 02:37 - 2012-10-03 12:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2014-07-22 02:37 - 2012-10-03 12:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll

2014-07-22 02:37 - 2012-10-03 12:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2014-07-22 02:37 - 2012-01-13 03:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2014-07-22 02:36 - 2013-12-31 19:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls

2014-07-22 02:36 - 2013-12-31 19:04 - 00420008 _____ () C:\Windows\system32\locale.nls

2014-07-22 02:36 - 2013-11-11 22:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-07-22 02:36 - 2013-11-11 22:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2014-07-22 02:36 - 2013-07-12 06:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2014-07-22 02:36 - 2013-04-26 01:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2014-07-22 02:36 - 2013-04-26 00:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2014-07-22 02:36 - 2013-02-15 02:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-07-22 02:36 - 2013-02-15 02:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-07-22 02:36 - 2013-02-15 02:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll

2014-07-22 02:36 - 2013-02-15 00:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-07-22 02:36 - 2013-02-15 00:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll

2014-07-22 02:36 - 2013-02-14 23:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-07-22 02:36 - 2013-02-12 00:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2014-07-22 02:36 - 2012-05-05 04:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2014-07-22 02:36 - 2012-05-05 03:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2014-07-22 02:35 - 2014-06-17 22:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-22 02:35 - 2014-06-17 21:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-22 02:35 - 2014-06-17 21:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-22 02:35 - 2014-06-05 10:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-22 02:35 - 2014-06-05 10:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-22 02:35 - 2014-06-05 10:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-07-22 02:35 - 2014-04-11 22:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-07-22 02:35 - 2014-04-11 22:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-07-22 02:35 - 2014-04-11 22:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-07-22 02:35 - 2014-04-11 22:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2014-07-22 02:35 - 2014-04-11 22:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-07-22 02:35 - 2014-04-11 22:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-07-22 02:35 - 2013-10-18 22:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2014-07-22 02:35 - 2013-10-18 21:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2014-07-22 02:35 - 2013-07-04 08:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2014-07-22 02:35 - 2013-04-25 19:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2014-07-22 02:35 - 2013-03-31 18:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2014-07-22 02:35 - 2012-11-02 01:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll

2014-07-22 02:35 - 2012-11-02 01:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll

2014-07-22 02:35 - 2012-03-17 03:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2014-07-22 02:35 - 2011-10-26 01:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2014-07-22 02:35 - 2011-10-26 01:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2014-07-22 02:35 - 2011-10-26 00:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2014-07-22 02:35 - 2011-10-26 00:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2014-07-22 02:35 - 2011-08-17 01:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll

2014-07-22 02:35 - 2011-08-17 01:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax

2014-07-22 02:35 - 2011-08-17 00:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll

2014-07-22 02:35 - 2011-08-17 00:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax

2014-07-22 02:35 - 2011-04-09 02:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2014-07-22 02:35 - 2011-04-09 01:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2014-07-22 02:35 - 2011-03-11 02:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll

2014-07-22 02:35 - 2011-03-11 02:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll

2014-07-22 02:35 - 2011-03-11 01:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll

2014-07-22 02:35 - 2011-03-11 01:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll

2014-07-22 02:34 - 2014-05-30 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-22 02:34 - 2014-05-30 04:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-22 02:34 - 2014-05-30 04:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-22 02:34 - 2014-05-30 04:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-22 02:34 - 2014-05-30 04:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-22 02:34 - 2014-05-30 04:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-22 02:34 - 2014-05-30 04:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-22 02:34 - 2014-05-30 03:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-22 02:34 - 2014-05-30 03:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-22 02:34 - 2014-05-30 03:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-22 02:34 - 2014-05-30 03:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-22 02:34 - 2014-05-30 03:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-22 02:34 - 2014-05-30 03:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-22 02:34 - 2014-05-30 03:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-22 02:34 - 2014-03-26 10:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2014-07-22 02:34 - 2014-03-26 10:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-07-22 02:34 - 2014-03-26 10:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2014-07-22 02:34 - 2014-03-26 10:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-07-22 02:34 - 2014-03-26 10:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2014-07-22 02:34 - 2014-03-26 10:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-07-22 02:34 - 2014-03-26 10:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll

2014-07-22 02:34 - 2014-03-26 10:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-07-22 02:34 - 2014-03-04 05:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2014-07-22 02:34 - 2014-03-04 05:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2014-07-22 02:34 - 2014-03-04 05:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2014-07-22 02:34 - 2014-03-04 05:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2014-07-22 02:34 - 2014-03-04 05:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2014-07-22 02:34 - 2014-03-04 05:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2014-07-22 02:34 - 2014-03-04 05:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2014-07-22 02:34 - 2014-03-04 05:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2014-07-22 02:34 - 2014-03-04 05:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2014-07-22 02:34 - 2014-03-04 04:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2014-07-22 02:34 - 2014-03-04 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2014-07-22 02:34 - 2014-01-28 22:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2014-07-22 02:34 - 2014-01-28 22:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2014-07-22 02:34 - 2013-11-26 21:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-07-22 02:34 - 2013-11-26 21:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-07-22 02:34 - 2013-11-26 21:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-07-22 02:34 - 2013-11-26 21:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-07-22 02:34 - 2013-11-26 21:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-07-22 02:34 - 2013-11-26 21:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-07-22 02:34 - 2013-10-03 22:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll

2014-07-22 02:34 - 2013-10-03 22:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll

2014-07-22 02:34 - 2013-10-03 22:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-07-22 02:34 - 2013-10-03 21:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll

2014-07-22 02:34 - 2013-10-03 21:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-07-22 02:34 - 2013-10-03 21:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll

2014-07-22 02:34 - 2013-09-07 22:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll

2014-07-22 02:34 - 2013-09-07 22:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll

2014-07-22 02:34 - 2013-08-28 22:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-07-22 02:34 - 2013-08-28 22:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2014-07-22 02:34 - 2013-08-28 22:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2014-07-22 02:34 - 2013-08-28 21:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-07-22 02:34 - 2013-08-28 21:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2014-07-22 02:34 - 2013-08-28 21:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2014-07-22 02:34 - 2013-08-01 22:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 22:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 21:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2014-07-22 02:34 - 2013-08-01 20:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 20:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 20:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2014-07-22 02:34 - 2013-08-01 20:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2014-07-22 02:34 - 2013-07-25 05:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2014-07-22 02:34 - 2013-07-25 04:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2014-07-22 02:34 - 2013-07-09 01:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-07-22 02:34 - 2013-07-09 00:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2014-07-22 02:34 - 2013-07-04 08:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2014-07-22 02:34 - 2013-07-04 08:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2014-07-22 02:34 - 2013-07-04 07:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2014-07-22 02:34 - 2013-07-04 07:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2014-07-22 02:34 - 2013-07-04 06:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2014-07-22 02:34 - 2013-06-25 18:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2014-07-22 02:34 - 2013-06-06 01:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2014-07-22 02:34 - 2013-06-06 01:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2014-07-22 02:34 - 2013-06-06 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2014-07-22 02:34 - 2013-06-06 01:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2014-07-22 02:34 - 2013-06-06 00:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2014-07-22 02:34 - 2013-06-06 00:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2014-07-22 02:34 - 2013-06-06 00:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2014-07-22 02:34 - 2013-06-05 23:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2014-07-22 02:34 - 2013-06-05 23:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2014-07-22 02:34 - 2013-06-05 23:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2014-07-22 02:34 - 2013-05-10 01:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

2014-07-22 02:34 - 2013-05-09 23:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll

2014-07-22 02:34 - 2012-11-28 18:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2014-07-22 02:34 - 2012-11-28 18:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2014-07-22 02:34 - 2012-11-28 18:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2014-07-22 02:34 - 2012-01-04 06:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2014-07-22 02:34 - 2012-01-04 04:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2014-07-22 02:34 - 2011-11-17 02:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll

2014-07-22 02:34 - 2011-11-17 01:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll

2014-07-22 02:34 - 2011-07-08 22:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2014-07-22 02:34 - 2011-04-28 23:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2014-07-22 02:34 - 2011-04-28 23:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-07-22 02:34 - 2011-04-28 23:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-07-22 02:34 - 2011-04-26 22:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2014-07-22 02:34 - 2011-04-26 22:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-07-22 02:34 - 2011-02-05 13:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-07-22 02:34 - 2011-02-05 13:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll

2014-07-22 02:34 - 2011-02-05 13:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll

2014-07-22 02:34 - 2011-02-05 13:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll

2014-07-22 02:34 - 2011-02-05 13:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-07-22 02:34 - 2011-02-05 13:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2014-07-22 02:34 - 2011-02-05 13:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2014-07-22 02:34 - 2010-12-23 06:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll

2014-07-22 02:34 - 2010-12-23 06:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll

2014-07-22 02:34 - 2010-12-23 06:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax

2014-07-22 02:34 - 2010-12-23 01:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll

2014-07-22 02:34 - 2010-12-23 01:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll

2014-07-22 02:34 - 2010-12-23 01:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax

2014-07-22 02:33 - 2014-05-30 02:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-22 02:33 - 2014-04-24 22:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2014-07-22 02:33 - 2014-04-24 22:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2014-07-22 02:33 - 2014-02-03 22:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2014-07-22 02:33 - 2014-02-03 22:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2014-07-22 02:33 - 2014-02-03 22:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2014-07-22 02:33 - 2014-02-03 22:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll

2014-07-22 02:33 - 2014-02-03 22:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll

2014-07-22 02:33 - 2014-01-27 22:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2014-07-22 02:33 - 2013-10-29 22:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2014-07-22 02:33 - 2013-10-29 22:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2014-07-22 02:33 - 2013-10-03 22:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2014-07-22 02:33 - 2013-10-03 21:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2014-07-22 02:33 - 2013-10-02 22:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-07-22 02:33 - 2013-10-02 22:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-07-22 02:33 - 2013-08-04 22:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2014-07-22 02:33 - 2013-07-20 06:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2014-07-22 02:33 - 2013-07-20 06:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2014-07-22 02:33 - 2013-07-09 01:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2014-07-22 02:33 - 2013-07-09 00:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2014-07-22 02:33 - 2013-07-04 08:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2014-07-22 02:33 - 2013-07-04 07:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll

2014-07-22 02:33 - 2013-07-03 00:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys

2014-07-22 02:33 - 2013-07-03 00:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2014-07-22 02:33 - 2013-07-03 00:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2014-07-22 02:33 - 2013-06-15 00:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2014-07-22 02:33 - 2013-03-19 01:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll

2014-07-22 02:33 - 2013-01-24 02:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2014-07-22 02:33 - 2012-11-22 23:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe

2014-07-22 02:33 - 2012-10-09 14:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll

2014-07-22 02:33 - 2012-10-09 14:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2014-07-22 02:33 - 2012-10-09 13:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll

2014-07-22 02:33 - 2012-10-09 13:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll

2014-07-22 02:33 - 2012-09-25 18:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll

2014-07-22 02:33 - 2012-09-25 18:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll

2014-07-22 02:33 - 2012-08-22 14:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2014-07-22 02:33 - 2012-08-21 17:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe

2014-07-22 02:33 - 2012-07-04 18:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2014-07-22 02:33 - 2012-07-04 18:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2014-07-22 02:33 - 2012-07-04 18:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll

2014-07-22 02:33 - 2012-07-04 17:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll

2014-07-22 02:33 - 2012-07-04 17:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll

2014-07-22 02:33 - 2012-07-04 16:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys

2014-07-22 02:33 - 2012-05-01 01:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2014-07-22 02:33 - 2012-04-27 23:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2014-07-22 02:33 - 2012-04-07 08:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-07-22 02:33 - 2012-04-07 07:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-07-22 02:33 - 2011-12-30 02:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2014-07-22 02:33 - 2011-12-30 01:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl

2014-07-22 02:33 - 2011-06-16 01:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll

2014-07-22 02:33 - 2011-06-16 00:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll

2014-07-22 02:33 - 2011-05-04 01:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2014-07-22 02:33 - 2011-05-04 01:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2014-07-22 02:33 - 2011-05-04 01:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2014-07-22 02:33 - 2011-05-04 01:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2014-07-22 02:33 - 2011-05-04 01:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2014-07-22 02:33 - 2011-05-04 01:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2014-07-22 02:33 - 2011-05-04 01:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2014-07-22 02:33 - 2011-05-04 01:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2014-07-22 02:33 - 2011-05-04 01:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2014-07-22 02:33 - 2011-05-04 00:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2014-07-22 02:33 - 2011-05-04 00:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2014-07-22 02:33 - 2011-05-04 00:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2014-07-22 02:33 - 2011-05-04 00:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2014-07-22 02:33 - 2011-05-04 00:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2014-07-22 02:33 - 2011-05-04 00:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll

2014-07-22 02:33 - 2011-05-04 00:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2014-07-22 02:33 - 2011-05-04 00:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2014-07-22 02:33 - 2011-05-04 00:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2014-07-22 02:33 - 2011-05-03 01:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2014-07-22 02:33 - 2011-05-03 00:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2014-07-22 02:33 - 2011-02-18 06:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe

2014-07-22 02:33 - 2011-02-18 01:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe

2014-07-22 02:33 - 2011-02-12 07:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe

2014-07-22 02:29 - 2014-01-23 22:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2014-07-22 02:29 - 2013-08-27 21:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll

2014-07-22 02:29 - 2011-02-23 00:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys

2014-07-22 02:28 - 2013-10-11 22:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2014-07-22 02:28 - 2013-10-11 22:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2014-07-22 02:28 - 2013-10-11 22:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2014-07-22 02:28 - 2013-10-11 22:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2014-07-22 02:28 - 2013-10-11 21:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2014-07-22 02:28 - 2013-10-11 21:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2014-07-22 02:28 - 2013-10-11 21:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2014-07-22 02:28 - 2013-10-11 21:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2014-07-22 02:28 - 2013-08-01 08:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-07-22 02:28 - 2013-05-13 01:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2014-07-22 02:28 - 2013-05-12 23:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2014-07-22 02:28 - 2013-05-12 23:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2014-07-22 02:28 - 2013-05-12 23:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2014-07-22 02:28 - 2013-04-10 02:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2014-07-22 02:28 - 2012-06-06 02:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll

2014-07-22 02:28 - 2012-06-06 01:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll

2014-07-22 02:28 - 2012-05-14 01:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-07-22 02:28 - 2011-12-16 04:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll

2014-07-22 02:28 - 2011-12-16 03:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll

2014-07-22 02:28 - 2011-10-15 02:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll

2014-07-22 02:28 - 2011-10-15 01:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll

2014-07-22 02:28 - 2011-08-27 01:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-07-22 02:28 - 2011-08-27 01:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll

2014-07-22 02:28 - 2011-08-27 00:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-07-22 02:28 - 2011-08-27 00:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll

2014-07-22 02:28 - 2011-02-03 07:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2014-07-22 02:22 - 2013-10-11 22:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2014-07-22 02:22 - 2013-10-11 22:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2014-07-22 02:22 - 2013-10-11 22:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2014-07-22 02:22 - 2013-10-11 22:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2014-07-22 02:22 - 2013-10-11 22:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2014-07-22 02:22 - 2011-11-19 10:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-07-22 02:22 - 2011-11-19 10:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-07-22 01:40 - 2014-08-03 12:42 - 00000000 ____D () C:\ProgramData\AVG2014

2014-07-22 01:40 - 2014-07-22 01:40 - 00000965 _____ () C:\Users\Public\Desktop\AVG 2014.lnk

2014-07-22 01:40 - 2014-07-22 01:40 - 00000000 ___HD () C:\$AVG

2014-07-22 01:40 - 2014-07-22 01:40 - 00000000 ____D () C:\Users\David\AppData\Roaming\TuneUp Software

2014-07-22 01:40 - 2014-07-22 01:40 - 00000000 ____D () C:\Users\David\AppData\Roaming\AVG2014

2014-07-22 01:40 - 2014-07-22 01:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2014-07-22 01:39 - 2014-07-22 01:39 - 00000000 ____D () C:\Program Files (x86)\AVG

2014-07-22 01:37 - 2014-07-22 01:37 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-22 01:37 - 2014-07-22 01:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-22 01:34 - 2014-08-13 00:30 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-22 01:34 - 2014-08-12 21:39 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-22 01:34 - 2014-08-03 08:51 - 00088256 _____ () C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT

2014-07-22 01:34 - 2014-07-22 01:37 - 00000000 ____D () C:\Users\David\AppData\Local\Google

2014-07-22 01:34 - 2014-07-22 01:37 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-22 01:34 - 2014-07-22 01:34 - 00003892 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-22 01:34 - 2014-07-22 01:34 - 00003640 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-22 01:34 - 2014-07-22 01:34 - 00000000 ____D () C:\Users\David\AppData\Local\Deployment

2014-07-22 01:34 - 2014-07-22 01:34 - 00000000 ____D () C:\Users\David\AppData\Local\Apps\2.0

 

==================== One Month Modified Files and Folders =======

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-08-13 00:33 - 2014-08-13 00:33 - 02100224 _____ (Farbar) C:\Users\David\Desktop\FRST64.exe

2014-08-13 00:33 - 2014-08-13 00:33 - 00013655 _____ () C:\Users\David\Desktop\FRST.txt

2014-08-13 00:33 - 2014-08-13 00:33 - 00000000 ____D () C:\FRST

2014-08-13 00:33 - 2014-08-13 00:32 - 02100224 _____ (Farbar) C:\Users\David\Downloads\FRST64.exe

2014-08-13 00:33 - 2014-07-22 04:28 - 02056505 _____ () C:\Windows\WindowsUpdate.log

2014-08-13 00:32 - 2014-08-13 00:32 - 01092096 _____ (Farbar) C:\Users\David\Downloads\FRST.exe

2014-08-13 00:30 - 2014-08-03 14:25 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-13 00:30 - 2014-07-22 01:34 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-13 00:30 - 2010-11-20 23:47 - 01053386 _____ () C:\Windows\PFRO.log

2014-08-13 00:30 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-08-13 00:30 - 2009-07-14 00:51 - 00033883 _____ () C:\Windows\setupact.log

2014-08-13 00:12 - 2014-08-06 07:07 - 00000000 ____D () C:\Users\David\AppData\Roaming\uTorrent

2014-08-13 00:11 - 2014-07-22 04:34 - 00000000 ____D () C:\ProgramData\MFAData

2014-08-12 21:39 - 2014-07-22 01:34 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-12 15:37 - 2009-07-14 00:45 - 00029968 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-08-12 15:37 - 2009-07-14 00:45 - 00029968 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-08-12 15:34 - 2009-07-14 01:13 - 00781298 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-08-12 15:29 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system

2014-08-12 15:13 - 2014-08-12 15:13 - 00000000 ____D () C:\Windows\Sun

2014-08-12 00:25 - 2014-07-29 16:12 - 00016896 _____ () C:\Users\David\Desktop\Doug.xls

2014-08-10 17:02 - 2014-08-10 17:02 - 00239340 _____ () C:\Users\David\Desktop\OTL.Txt

2014-08-10 17:02 - 2014-08-10 17:02 - 00022552 _____ () C:\Users\David\Desktop\Extras.Txt

2014-08-10 16:53 - 2014-08-10 16:53 - 00000633 _____ () C:\Users\David\Desktop\JRT.txt

2014-08-10 16:43 - 2014-08-10 16:43 - 00000000 ____D () C:\Windows\ERUNT

2014-08-10 16:36 - 2014-08-10 16:31 - 00000000 ____D () C:\AdwCleaner

2014-08-10 16:34 - 2014-08-10 16:34 - 01016261 _____ (Thisisu) C:\Users\David\Downloads\JRT.exe

2014-08-10 16:34 - 2014-08-10 16:34 - 01016261 _____ (Thisisu) C:\Users\David\Desktop\JRT.exe

2014-08-10 16:31 - 2014-08-10 16:30 - 01366203 _____ () C:\Users\David\Desktop\AdwCleaner.exe

2014-08-10 16:23 - 2014-08-10 16:23 - 00000000 ____D () C:\_OTL

2014-08-10 16:22 - 2014-08-10 16:22 - 00602112 _____ (OldTimer Tools) C:\Users\David\Desktop\OTL.exe

2014-08-10 16:03 - 2009-07-14 01:32 - 00000000 ____D () C:\Windows\Offline Web Pages

2014-08-10 01:48 - 2014-08-10 01:48 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-08-10 01:48 - 2014-08-10 01:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-08-10 01:48 - 2014-08-10 01:48 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-08-10 01:48 - 2014-08-10 01:48 - 00000000 ____D () C:\Program Files\iTunes

2014-08-10 01:48 - 2014-08-10 01:48 - 00000000 ____D () C:\Program Files\iPod

2014-08-10 01:48 - 2014-08-10 01:48 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-08-08 16:04 - 2009-07-14 01:32 - 00000000 ____D () C:\Windows\addins

2014-08-08 16:04 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\TAPI

2014-08-06 07:06 - 2014-08-06 07:06 - 01936720 _____ (BitTorrent Inc.) C:\Users\David\Downloads\uTorrent (1).exe

2014-08-05 12:19 - 2014-08-05 12:06 - 00000000 ____D () C:\Users\David\Desktop\Nikon D5000

2014-08-05 12:09 - 2014-08-05 12:06 - 00000000 ____D () C:\Users\David\Desktop\Wedding pics 16 Goats in a Tree

2014-08-05 12:07 - 2014-08-05 12:06 - 00015360 _____ () C:\Users\David\Desktop\Mileage.xls

2014-08-05 12:06 - 2014-08-05 12:06 - 00000000 ____D () C:\Users\David\Desktop\Recipes

2014-08-05 12:05 - 2014-08-05 12:05 - 00000000 ____D () C:\Users\David\Desktop\NFL pool

2014-08-05 12:05 - 2014-08-05 12:05 - 00000000 ____D () C:\Users\David\Desktop\Heather Folder

2014-08-05 12:04 - 2014-07-29 16:12 - 00022528 _____ () C:\Users\David\Desktop\Chores Aydien.xls

2014-08-05 12:01 - 2014-07-29 16:12 - 00019456 _____ () C:\Users\David\Desktop\Chores Payton.xls

2014-08-05 10:48 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\tracing

2014-08-05 07:47 - 2014-08-05 07:47 - 00098126 _____ () C:\Users\David\Downloads\OTL.Txt

2014-08-05 07:47 - 2014-08-05 07:47 - 00040858 _____ () C:\Users\David\Downloads\Extras.Txt

2014-08-05 07:40 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-08-05 07:29 - 2014-08-05 07:26 - 00000000 ____D () C:\Users\David\Downloads\erunt

2014-08-05 07:26 - 2014-08-05 07:26 - 00003768 _____ () C:\Users\David\Documents\geeks.txt

2014-08-04 22:58 - 2014-08-04 23:02 - 12877824 _____ () C:\Users\David\Downloads\3d0d7e5fb2ce288813306e4d4636395e047a3d28

2014-08-04 09:13 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache

2014-08-04 08:46 - 2014-07-29 15:56 - 00000000 ____D () C:\Windows\PCHEALTH

2014-08-04 07:38 - 2014-08-03 08:47 - 00000000 ____D () C:\Users\David\.android

2014-08-03 14:25 - 2014-08-03 14:25 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-08-03 14:25 - 2014-08-03 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-03 14:25 - 2014-08-03 14:25 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-03 14:25 - 2014-08-03 14:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-03 14:23 - 2014-08-03 14:22 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\David\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-03 12:55 - 2014-08-03 12:55 - 00000000 ____D () C:\Users\David\Documents\Wondershare

2014-08-03 12:43 - 2014-08-03 09:03 - 00000000 ____D () C:\Users\David\AppData\Roaming\Apple Computer

2014-08-03 12:42 - 2014-07-22 01:40 - 00000000 ____D () C:\ProgramData\AVG2014

2014-08-03 12:40 - 2014-08-03 12:40 - 00000258 __RSH () C:\ProgramData\ntuser.pol

2014-08-03 12:40 - 2009-07-13 23:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-08-03 12:40 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy

2014-08-03 10:16 - 2014-08-03 10:16 - 00000000 ____D () C:\Users\David\AppData\Local\Apple Computer

2014-08-03 10:16 - 2014-08-03 10:16 - 00000000 ____D () C:\ProgramData\Apple Computer

2014-08-03 10:04 - 2014-08-03 10:04 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf

2014-08-03 09:44 - 2014-08-03 09:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf

2014-08-03 09:43 - 2014-08-03 09:43 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll

2014-08-03 09:43 - 2014-08-03 09:43 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll

2014-08-03 09:43 - 2009-07-14 01:32 - 00000000 ____D () C:\Windows\system32\FxsTmp

2014-08-03 09:42 - 2014-07-23 09:01 - 00000000 ____D () C:\Users\David\AppData\Roaming\Epson

2014-08-03 09:42 - 2014-07-22 04:28 - 00000000 ____D () C:\Users\David

2014-08-03 09:42 - 2009-07-14 01:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-08-03 09:42 - 2009-07-14 00:45 - 00365864 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-03 09:03 - 2014-08-03 09:03 - 01936720 _____ (BitTorrent Inc.) C:\Users\David\Downloads\uTorrent.exe

2014-08-03 09:03 - 2014-08-03 09:03 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Windows\System32\Tasks\Apple

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Users\David\AppData\Local\Apple

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\ProgramData\Apple

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Program Files\Common Files\Apple

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Program Files\Bonjour

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Program Files (x86)\Bonjour

2014-08-03 09:03 - 2014-08-03 09:03 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update

2014-08-03 09:02 - 2014-08-03 09:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

2014-08-03 09:02 - 2014-08-03 09:02 - 00000000 ____D () C:\Users\David\Desktop\DCIM

2014-08-03 08:58 - 2014-08-03 08:53 - 113509200 _____ (Apple Inc.) C:\Users\David\Downloads\iTunes64Setup.exe

2014-08-03 08:51 - 2014-07-22 01:34 - 00088256 _____ () C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT

2014-08-03 08:47 - 2014-08-03 08:47 - 00000000 ____D () C:\Users\David\AppData\Roaming\Wondershare

2014-08-03 08:47 - 2014-08-03 08:47 - 00000000 ____D () C:\Users\David\AppData\Local\Wondershare

2014-08-03 00:39 - 2014-08-03 00:30 - 34823304 _____ (Wondershare ) C:\Users\David\Downloads\mobile-transfer.exe

2014-08-01 16:23 - 2014-08-01 16:23 - 01377513 _____ () C:\Users\David\Downloads\Football Cheer Chants.htm

2014-07-31 09:19 - 2014-07-31 09:04 - 00000000 ____D () C:\Users\David\AppData\Roaming\Foxit Scanner Images

2014-07-31 09:04 - 2014-07-31 09:04 - 00000000 _____ () C:\Users\David\Sti_Trace.log

2014-07-31 09:04 - 2014-07-22 08:24 - 00000000 ____D () C:\Users\David\AppData\Roaming\Foxit Software

2014-07-29 16:12 - 2009-07-13 23:20 - 00000000 __RHD () C:\Users\Public\Libraries

2014-07-29 15:58 - 2014-07-29 15:58 - 00000376 _____ () C:\Windows\ODBC.INI

2014-07-29 15:57 - 2014-07-29 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

2014-07-29 15:57 - 2014-07-29 15:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft ActiveSync

2014-07-29 15:57 - 2014-07-29 15:56 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office

2014-07-29 15:57 - 2011-04-12 04:28 - 00000000 ____D () C:\Windows\ShellNew

2014-07-29 15:57 - 2009-07-13 22:34 - 00000499 _____ () C:\Windows\win.ini

2014-07-29 15:54 - 2014-07-29 15:54 - 00000000 __RHD () C:\MSOCache

2014-07-23 09:03 - 2014-07-23 09:03 - 00000000 ____D () C:\Users\David\AppData\Roaming\Leadertech

2014-07-23 09:03 - 2014-07-23 08:59 - 00000079 _____ () C:\Windows\EWF545.ini

2014-07-23 09:01 - 2014-07-23 09:01 - 00000000 ____D () C:\Program Files\EPSON

2014-07-23 09:01 - 2014-07-23 09:01 - 00000000 ____D () C:\Program Files\Common Files\EPSON

2014-07-23 09:01 - 2014-07-23 09:00 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-23 09:01 - 2014-07-23 09:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software

2014-07-23 09:01 - 2014-07-23 09:00 - 00000000 ____D () C:\ProgramData\EPSON

2014-07-23 09:01 - 2014-07-23 09:00 - 00000000 ____D () C:\Program Files (x86)\Epson Software

2014-07-23 09:01 - 2014-07-23 08:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

2014-07-23 09:00 - 2014-07-23 08:59 - 00000000 ____D () C:\Program Files (x86)\epson

2014-07-23 08:59 - 2014-07-23 08:59 - 00000930 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk

2014-07-23 03:01 - 2014-07-22 03:49 - 00773536 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-07-22 08:54 - 2014-07-22 08:54 - 00000000 __SHD () C:\Users\David\AppData\Local\EmieUserList

2014-07-22 08:54 - 2014-07-22 08:54 - 00000000 __SHD () C:\Users\David\AppData\Local\EmieSiteList

2014-07-22 08:52 - 2014-07-22 08:52 - 00000000 ____D () C:\Users\David\AppData\Roaming\Adobe

2014-07-22 08:52 - 2014-07-22 04:28 - 00001413 _____ () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-07-22 08:41 - 2014-07-22 08:41 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-22 08:41 - 2011-04-12 04:28 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-22 08:41 - 2009-07-14 01:32 - 00000000 ____D () C:\Program Files\Windows Defender

2014-07-22 08:41 - 2009-07-14 01:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-07-22 08:41 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK

2014-07-22 08:41 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR

2014-07-22 08:41 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-22 08:41 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\zh-HK

2014-07-22 08:41 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\tr-TR

2014-07-22 08:41 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-22 08:41 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-07-22 08:41 - 2009-07-13 23:20 - 00000000 ____D () C:\Program Files\Common Files\System

2014-07-22 08:39 - 2014-07-22 08:39 - 00000000 ____D () C:\Users\David\AppData\Local\Western_Digital_Technolog

2014-07-22 08:39 - 2014-07-22 08:39 - 00000000 ____D () C:\Users\David\AppData\Local\Western Digital

2014-07-22 08:34 - 2014-07-22 08:34 - 00009130 _____ () C:\Windows\DPINST.LOG

2014-07-22 08:34 - 2014-07-22 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital

2014-07-22 08:33 - 2014-07-22 08:33 - 00000000 ____D () C:\ProgramData\Western Digital

2014-07-22 08:33 - 2014-07-22 08:33 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-22 08:33 - 2014-07-22 08:33 - 00000000 ____D () C:\Program Files\Western Digital

2014-07-22 08:33 - 2014-07-22 08:33 - 00000000 ____D () C:\Program Files\Common Files\Western Digital

2014-07-22 08:33 - 2014-07-22 08:33 - 00000000 ____D () C:\Program Files (x86)\Western Digital

2014-07-22 08:30 - 2014-07-22 08:28 - 39898307 _____ () C:\Users\David\Downloads\WD_SmartWare_ Installer_2.4.1.9.zip

2014-07-22 08:25 - 2014-07-22 08:25 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-22 08:25 - 2014-07-22 08:25 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-22 08:25 - 2014-07-22 08:25 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-22 08:25 - 2014-07-22 08:25 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-22 08:25 - 2014-07-22 08:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-22 08:25 - 2014-07-22 08:25 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-22 08:25 - 2014-07-22 08:22 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-22 08:24 - 2014-07-22 08:24 - 00000000 ____D () C:\Users\Public\Foxit Software

2014-07-22 08:23 - 2014-07-22 08:23 - 00918952 _____ (Oracle Corporation) C:\Users\David\Downloads\chromeinstall-7u65 (1).exe

2014-07-22 08:23 - 2014-07-22 08:23 - 00001358 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk

2014-07-22 08:23 - 2014-07-22 08:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader

2014-07-22 08:23 - 2014-07-22 08:23 - 00000000 ____D () C:\Program Files (x86)\Foxit Software

2014-07-22 08:22 - 2014-07-22 08:22 - 00000000 ____D () C:\ProgramData\Sun

2014-07-22 08:22 - 2014-07-22 08:08 - 124098848 _____ () C:\Users\David\Downloads\epson14500.exe

2014-07-22 08:21 - 2014-07-22 08:10 - 37790904 _____ (Foxit Corporation ) C:\Users\David\Downloads\FoxitReader621.0618_prom_enu_Setup.exe

2014-07-22 08:14 - 2014-07-22 08:14 - 00918952 _____ (Oracle Corporation) C:\Users\David\Downloads\chromeinstall-7u65.exe

2014-07-22 08:14 - 2014-07-22 08:14 - 00002132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk

2014-07-22 08:14 - 2014-07-22 08:14 - 00002120 _____ () C:\Users\Public\Desktop\Belarc Advisor.lnk

2014-07-22 08:14 - 2014-07-22 08:14 - 00000000 ____D () C:\Program Files (x86)\Belarc

2014-07-22 08:11 - 2014-07-22 08:11 - 03358176 _____ () C:\Users\David\Downloads\advisorinstaller.exe

2014-07-22 08:10 - 2014-07-22 08:10 - 00000000 ____D () C:\ZD270316

2014-07-22 08:09 - 2014-07-22 08:09 - 08665480 _____ () C:\Users\David\Downloads\zd270316-certified.exe

2014-07-22 08:06 - 2014-07-22 04:34 - 00000000 ____D () C:\Users\David\AppData\Local\Avg2014

2014-07-22 04:34 - 2014-07-22 04:34 - 00000000 ____D () C:\Users\David\AppData\Local\MFAData

2014-07-22 04:28 - 2014-07-22 04:28 - 00000020 ___SH () C:\Users\David\ntuser.ini

2014-07-22 04:28 - 2014-07-22 04:28 - 00000000 __SHD () C:\Recovery

2014-07-22 04:28 - 2014-07-22 04:28 - 00000000 ____D () C:\Users\David\AppData\Local\VirtualStore

2014-07-22 04:28 - 2014-07-22 04:05 - 00000000 ____D () C:\Windows\Panther

2014-07-22 04:28 - 2009-07-14 01:32 - 00000000 ____D () C:\Windows\system32\restore

2014-07-22 04:04 - 2009-07-14 01:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG

2014-07-22 04:04 - 2009-07-14 01:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

2014-07-22 03:41 - 2014-07-22 03:31 - 00013120 _____ () C:\Windows\IE11_main.log

2014-07-22 03:37 - 2014-07-22 03:37 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-22 03:37 - 2014-07-22 03:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-22 03:37 - 2014-07-22 03:37 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-22 03:37 - 2014-07-22 03:37 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-22 03:37 - 2014-07-22 03:37 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-07-22 03:37 - 2014-07-22 03:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-07-22 03:37 - 2014-07-22 03:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-07-22 03:37 - 2014-07-22 03:37 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-07-22 03:37 - 2014-07-22 03:37 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-07-22 03:37 - 2014-07-22 03:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-07-22 03:37 - 2014-07-22 03:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-07-22 03:37 - 2014-07-22 03:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-07-22 03:37 - 2014-07-22 03:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2014-07-22 03:32 - 2014-07-22 03:32 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2014-07-22 03:09 - 2014-07-22 03:08 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-22 03:07 - 2014-07-22 03:07 - 00001355 _____ () C:\Windows\TSSysprep.log

2014-07-22 03:07 - 2014-07-22 03:07 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

2014-07-22 03:07 - 2014-07-22 03:07 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

2014-07-22 03:07 - 2009-07-14 01:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-07-22 03:07 - 2009-07-14 00:46 - 00002790 _____ () C:\Windows\DtcInstall.log

2014-07-22 03:07 - 2009-07-13 23:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-07-22 03:07 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\sysprep

2014-07-22 03:06 - 2014-07-22 03:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

2014-07-22 01:40 - 2014-07-22 01:40 - 00000965 _____ () C:\Users\Public\Desktop\AVG 2014.lnk

2014-07-22 01:40 - 2014-07-22 01:40 - 00000000 ___HD () C:\$AVG

2014-07-22 01:40 - 2014-07-22 01:40 - 00000000 ____D () C:\Users\David\AppData\Roaming\TuneUp Software

2014-07-22 01:40 - 2014-07-22 01:40 - 00000000 ____D () C:\Users\David\AppData\Roaming\AVG2014

2014-07-22 01:40 - 2014-07-22 01:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2014-07-22 01:39 - 2014-07-22 01:39 - 00000000 ____D () C:\Program Files (x86)\AVG

2014-07-22 01:37 - 2014-07-22 01:37 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-22 01:37 - 2014-07-22 01:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-22 01:37 - 2014-07-22 01:34 - 00000000 ____D () C:\Users\David\AppData\Local\Google

2014-07-22 01:37 - 2014-07-22 01:34 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-22 01:34 - 2014-07-22 01:34 - 00003892 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-22 01:34 - 2014-07-22 01:34 - 00003640 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-22 01:34 - 2014-07-22 01:34 - 00000000 ____D () C:\Users\David\AppData\Local\Deployment

2014-07-22 01:34 - 2014-07-22 01:34 - 00000000 ____D () C:\Users\David\AppData\Local\Apps\2.0

 

Some content of TEMP:

====================

C:\Users\David\AppData\Local\Temp\Quarantine.exe

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2014-08-07 00:21

 

==================== End Of Log ============================

 

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-08-2014

Ran by David at 2014-08-13 00:34:23

Running from C:\Users\David\Desktop

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: AVG Internet Security 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: AVG Internet Security 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4744 - AVG Technologies)

AVG 2014 (Version: 14.0.4007 - AVG Technologies) Hidden

AVG 2014 (Version: 14.0.4744 - AVG Technologies) Hidden

Belarc Advisor 8.4 (HKLM-x32\...\Belarc Advisor) (Version: 8.4.0.0 - Belarc Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)

Epson Event Manager (HKLM-x32\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION)

Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.46.00 - SEIKO EPSON CORPORATION)

Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

EPSON WorkForce 545 Series Printer Uninstall (HKLM\...\EPSON WorkForce 545 Series) (Version:  - SEIKO EPSON Corporation)

Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.5.129.617 - Foxit Corporation)

Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.2.1.618 - Foxit Corporation)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

iTunes (HKLM\...\{77DE5105-D05E-448C-96CB-7FA381903753}) (Version: 11.3.1.2 - Apple Inc.)

Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)

Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden

Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation)

Software Updater (HKLM-x32\...\{6DFBE8A2-CDBF-453E-B34C-32F202FCEE4C}) (Version: 4.2.1 - SEIKO EPSON CORPORATION)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

WD Quick View (HKLM-x32\...\{324C58C7-A292-4523-A943-91DE1EB6A1FE}) (Version: 2.4.1.9 - Western Digital Technologies, Inc.)

WD SmartWare (HKLM\...\{F6ABA2F3-9759-48CD-B25B-A07A811E92E4}) (Version: 2.4.1.9 - Western Digital Technologies, Inc.)

WD SmartWare Installer (HKLM-x32\...\{72fda14f-5a07-49d5-b7f7-202377e9b522}) (Version: 2.4.1.9 - Western Digital Technologies, Inc.)

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

 

==================== Restore Points  =========================

 

03-08-2014 13:43:25 Device Driver Package Install: Google, Inc.

03-08-2014 14:03:52 Device Driver Package Install: Google, Inc. SAMSUNG Android Phone

03-08-2014 14:15:58 Installed iTunes

03-08-2014 23:27:34 Windows Update

04-08-2014 10:35:58 Installed iTunes

10-08-2014 20:23:38 OTL Restore Point - 8/10/2014 4:23:37 PM

11-08-2014 03:14:59 Windows Backup

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2009-07-13 22:34 - 2009-06-10 17:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

 

==================== Scheduled Tasks (whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

 

Task: {5F886994-C838-43AC-8FAC-51BA94ECDFBF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {9BFE6068-B06D-4F03-9C98-CBBD7F5770E4} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {D24B9683-F7F5-41C4-AC46-E8F1D5C19A9A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22] (Google Inc.)

Task: {E600CCBC-C68F-433E-8F9E-97A991A865BF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22] (Google Inc.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

 

==================== Loaded Modules (whitelisted) =============

 

2014-07-03 13:20 - 2014-07-03 13:20 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-07-03 13:19 - 2014-07-03 13:19 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2009-07-13 17:03 - 2009-07-13 21:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll

2014-08-03 08:47 - 2014-06-25 10:13 - 01457664 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2014-08-03 08:47 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

2014-07-22 01:37 - 2014-07-15 05:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll

2014-07-22 01:37 - 2014-07-15 05:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll

2014-07-22 01:37 - 2014-07-15 05:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll

2014-07-22 01:37 - 2014-07-15 05:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll

2014-07-22 01:37 - 2014-07-15 05:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll

2014-07-22 01:37 - 2014-07-15 05:24 - 14664008 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

 

==================== EXE Association (whitelisted) =============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

 

==================== MSCONFIG/TASK MANAGER disabled items =========

 

(Currently there is no automatic fix for this section.)

 

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (08/13/2014 00:31:56 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (08/13/2014 00:25:46 AM) (Source: Chrome) (EventID: 1) (User: NT AUTHORITY)

Description: Chrome has encountered a fatal error.

ver=36.0.1985.125;lang=;guid=BC0B8FCD0E784BD2A18EF8380C3DAF2B;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\7bca6aec-881f-4517-9d63-a278a94cbd53.dmp

 

Error: (08/12/2014 10:11:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 8143

 

Error: (08/12/2014 10:11:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 8143

 

Error: (08/12/2014 10:11:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

 

Error: (08/12/2014 10:11:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 7129

 

Error: (08/12/2014 10:11:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 7129

 

Error: (08/12/2014 10:11:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

 

Error: (08/12/2014 10:11:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 6131

 

Error: (08/12/2014 10:11:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 6131

 

 

System errors:

=============

Error: (08/13/2014 00:30:17 AM) (Source: nvlddmkm) (EventID: 14) (User: )

Description: 

 

Error: (08/12/2014 04:59:44 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the lmhosts service.

 

Error: (08/12/2014 03:34:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The WD Backup service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

 

Error: (08/12/2014 03:30:13 PM) (Source: nvlddmkm) (EventID: 14) (User: )

Description: 

 

Error: (08/12/2014 00:16:41 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

 

Error: (08/10/2014 07:39:04 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

 

Error: (08/10/2014 05:03:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The WD Backup service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

 

Error: (08/10/2014 04:57:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The WD Backup service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

 

 

Microsoft Office Sessions:

=========================

Error: (08/13/2014 00:31:56 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (08/13/2014 00:25:46 AM) (Source: Chrome) (EventID: 1) (User: NT AUTHORITY)

Description: Chrome has encountered a fatal error.

ver=36.0.1985.125;lang=;guid=BC0B8FCD0E784BD2A18EF8380C3DAF2B;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\7bca6aec-881f-4517-9d63-a278a94cbd53.dmp

 

Error: (08/12/2014 10:11:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 8143

 

Error: (08/12/2014 10:11:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 8143

 

Error: (08/12/2014 10:11:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

 

Error: (08/12/2014 10:11:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 7129

 

Error: (08/12/2014 10:11:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 7129

 

Error: (08/12/2014 10:11:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

 

Error: (08/12/2014 10:11:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 6131

 

Error: (08/12/2014 10:11:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 6131

 

 

==================== Memory info =========================== 

 

Processor: Intel® Core™2 Duo CPU E6550 @ 2.33GHz

Percentage of memory in use: 30%

Total physical RAM: 8190.49 MB

Available physical RAM: 5684.72 MB

Total Pagefile: 16379.16 MB

Available Pagefile: 13606.77 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:111.79 GB) (Free:48.43 GB) NTFS

Drive f: (250 GB) (Fixed) (Total:232.88 GB) (Free:96.04 GB) NTFS

Drive k: (OneTouch4) (Fixed) (Total:232.88 GB) (Free:115.71 GB) NTFS

Drive z: () (Fixed) (Total:931.41 GB) (Free:798.64 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows XP) (Size: 233 GB) (Disk ID: 00670067)

Partition 1: (Active) - (Size=233 GB) - (Type=07 NTFS)

 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: FC491A6E)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

 

========================================================

Disk: 2 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: FC491A66)

Partition 1: (Not Active) - (Size=112 GB) - (Type=07 NTFS)

 

========================================================

Disk: 3 (Size: 233 GB) (Disk ID: 3BD7EEBA)

Partition 1: (Active) - (Size=233 GB) - (Type=07 NTFS)

 

==================== End Of Log ============================

[civiccrazy]

Seems to be doing fine now.  Thank you so much for your help

[23red]

Hi civiccrazy

 

 

Seems to be doing fine now.  Thank you so much for your help

 

That is great to hear!  You're most welcome

 

Two items to complete, FRST revealed a smidge that still remains.  Then I'll post back with some tips for you.

 

Step 1

SecurityCheck by Screen317:

 

Please also download Security Check by screen317 <~ from this link.

•Save it to your Desktop.

•Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.

•A Notepad document should open automatically called checkup.txt; please also post the contents of that document.

NOTE: If SecurityCheck aborts and you get the following message: UNSUPPORTED OPERATING SYSTEM! ABORTED!  Try rebooting the system and then run SecurityCheck again.

 

For the one item found to remove with FRST, please do the following:

 

Step 2

FRST Fix

 

Download attached fixlist.txt file and save it to the Desktop.   fixlist.txt   63bytes   125 downloads

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

 

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

 

Run FRST/FRST64 and press the Fix button just once and wait.

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

When you return please post:

 

1.  checkup.txt
2.  Fixlog.txt

 

Thank you

[civiccrazy]

 Results of screen317's Security Check version 0.99.87  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 11  

``````````````Antivirus/Firewall Check:`````````````` 

 Windows Firewall Enabled!  

AVG Internet Security 2014   

 Antivirus up to date!   

`````````Anti-malware/Other Utilities Check:````````` 

 Java 7 Update 65  

 Java version out of Date! 

 Google Chrome 36.0.1985.125  

 Google Chrome 36.0.1985.143  

````````Process Check: objlist.exe by Laurent````````  

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbam.exe  

 AVG avgwdsvc.exe 

 Malwarebytes Anti-Malware mbamscheduler.exe   

`````````````````System Health check````````````````` 

 Total Fragmentation on Drive C: 5% 

````````````````````End of Log`````````````````````` 

[civiccrazy]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-08-2014

Ran by David at 2014-08-14 23:28:14 Run:1

Running from C:\Users\David\Desktop

Boot Mode: Normal

==============================================

 

Content of fixlist:

*****************

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

*****************

 

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.

C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.

 

 

The system needed a reboot. 

 

==== End of Fixlog ====