This topic is lockedNo worries. Please post the logfiles and myrti will go on from there 
Pop ups all the time on computer [Solved]
Started by
Sharon Lee
, Aug 16 2014 07:20 AM
#121
Posted 12 September 2014 - 06:47 AM
Naathim
-
- Expert
-
- 4,568 posts
GeekU Minion
#122
Posted 12 September 2014 - 08:41 AM
Sharon Lee
- Topic Starter
-
- Member
-
- 512 posts
Member
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-09-2014
Ran by Sharon at 2014-09-12 10:37:10
Running from C:\Users\Sharon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MH6CBXKK
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{650DE870-ECA3-4E63-8D77-778512BE5D4C}) (Version: - Microsoft)
Greeting Card Factory Workshop 8.0 (HKLM-x32\...\{30A4DD1D-FD55-4CE4-BA01-758E00BC0228}) (Version: 8.0.0.38 - Nova Development)
Hallmark Card Studio 2011 Deluxe (HKLM-x32\...\{62687EAC-F27D-49AC-A0E2-3899B0459113}) (Version: 12.0.5.1 - Hallmark Software)
HP Deskjet 3050A J611 series Basic Device Software (HKLM\...\{FB555BCF-9202-4886-9203-88C9A210D727}) (Version: 25.0.571.0 - Hewlett-Packard Co.)
HP Deskjet 3050A J611 series Help (HKLM-x32\...\{97DDCAB8-B770-4089-A10F-67568069D78A}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12992 - HP Photo Creations)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (Version: 14.0.6122.5000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.7122.5000 - Microsoft Corporation)
Microsoft Office Word MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.6.0305.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 32.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 32.0 (x86 en-US)) (Version: 32.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0 - Mozilla)
NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA Control Panel 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9179FC17-97A8-4D98-9E09-05720AF5D44E}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{794A0574-4E2F-4D58-B2A0-D7460ACDC85C}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{DCE104A1-1875-4469-A83D-A5BFA6C4640F}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0409-0000-0000000FF1CE}_Office14.SingleImage_{334AA0A1-2BB1-4D74-B66A-2B2C4D9C2C87}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
10-09-2014 11:00:55 Scheduled Checkpoint
10-09-2014 14:23:19 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 22:34 - 2014-08-17 20:33 - 00450712 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {06A27351-05C4-49D1-8393-9DFE8565612C} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2014-05-18] ()
Task: {3764CCF3-17D4-48E1-89F2-395D33B1CFA0} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {5F526F96-3904-4B80-976B-7E62E68BD0ED} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-09] (Adobe Systems Incorporated)
Task: {6FB7B7CF-3C08-4946-B53A-C2FBBAAAE6DE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {B8D4256F-0C1F-4E38-A2E7-485B3DA19FAE} - \RocketTab No Task File <==== ATTENTION
Task: {F70EB34A-5782-4EB1-A6FC-C5C9E2AC2090} - \RocketTab Update Task No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
==================== Loaded Modules (whitelisted) =============
2014-05-15 17:21 - 2014-07-02 14:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-06-08 17:57 - 2011-06-08 17:57 - 02812776 _____ () C:\Windows\system32\HPScanTRDrv_DJ3050A_J611.dll
2010-04-09 18:31 - 2010-04-09 18:31 - 00144672 _____ () C:\Program Files (x86)\Nova Development\Greeting Card Factory Workshop 8.0\ReminderApp.exe
2012-02-07 20:54 - 2012-02-07 20:54 - 00078624 _____ () C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe
2010-04-09 18:31 - 2010-04-09 18:31 - 00086304 _____ () C:\Program Files (x86)\Nova Development\Greeting Card Factory Workshop 8.0\AddressBookCore.dll
2010-04-09 18:10 - 2010-04-09 18:10 - 00147456 _____ () C:\Program Files (x86)\Nova Development\Greeting Card Factory Workshop 8.0\en-US\ReminderApp.resources.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NBService => 3
MSCONFIG\Services: NMIndexingService => 3
MSCONFIG\Services: RichVideo => 2
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/10/2014 08:11:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: plugin-container.exe, version: 32.0.0.5350, time stamp: 0x53fc3d9f
Faulting module name: mozalloc.dll, version: 32.0.0.5350, time stamp: 0x53fc0a56
Exception code: 0x80000003
Fault offset: 0x0000141b
Faulting process id: 0xff8
Faulting application start time: 0xplugin-container.exe0
Faulting application path: plugin-container.exe1
Faulting module path: plugin-container.exe2
Report Id: plugin-container.exe3
Error: (09/08/2014 10:04:27 AM) (Source: VSS) (EventID: 12344) (User: )
Description: Volume Shadow Copy Error: An error 0x00000000c000014d was encountered while Registry Writer was preparing the registry for a shadow
copy. Check the Application and System event logs for any related errors.
Operation:
OnFreeze event
Freeze Event
Context:
Execution Context: Registry Writer
Execution Context: Writer
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer
Writer Instance ID: {6fa0714d-4174-4344-b30e-d70a1ef07575}
Error: (09/01/2014 06:31:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: svchost.exe_stisvc, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: wiaservc.dll, version: 6.1.7601.17514, time stamp: 0x4ce7ca0f
Exception code: 0x40000015
Fault offset: 0x0000000000047a6b
Faulting process id: 0x8fc
Faulting application start time: 0xsvchost.exe_stisvc0
Faulting application path: svchost.exe_stisvc1
Faulting module path: svchost.exe_stisvc2
Report Id: svchost.exe_stisvc3
Error: (08/28/2014 07:08:55 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 10.0.9200.17028 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 2178
Start Time: 01cfc314d99583f5
Termination Time: 42
Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Report Id:
Error: (08/28/2014 01:35:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 10.0.9200.17028 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 2174
Start Time: 01cfc2e640a6a50a
Termination Time: 63
Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Report Id:
Error: (08/20/2014 00:38:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: svchost.exe_stisvc, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: wiaservc.dll, version: 6.1.7601.17514, time stamp: 0x4ce7ca0f
Exception code: 0x40000015
Fault offset: 0x0000000000047a6b
Faulting process id: 0x714
Faulting application start time: 0xsvchost.exe_stisvc0
Faulting application path: svchost.exe_stisvc1
Faulting module path: svchost.exe_stisvc2
Report Id: svchost.exe_stisvc3
Error: (08/19/2014 01:21:34 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]
Error: (08/19/2014 01:21:34 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
Error: (08/19/2014 01:21:34 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]
Error: (08/19/2014 10:53:59 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]
System errors:
=============
Error: (09/11/2014 09:09:28 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the lmhosts service.
Error: (09/11/2014 01:21:18 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the lmhosts service.
Error: (09/10/2014 08:30:03 PM) (Source: Microsoft Antimalware) (EventID: 2004) (User: )
Description: %60 has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted: %24
Error Code: 0x80070003
Error description: The system cannot find the path specified.
Signature version: 0.0.0.0;0.0.0.0
Engine version: %600
Error: (09/10/2014 08:29:58 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 8:28:11 PM on 9/10/2014 was unexpected.
Error: (09/10/2014 10:33:50 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: The Windows Update service did not shut down properly after receiving a preshutdown control.
Error: (09/09/2014 05:21:20 PM) (Source: volsnap) (EventID: 14) (User: )
Description: The shadow copies of volume C: were aborted because of an IO failure on volume C:.
Error: (09/09/2014 05:20:53 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort5.
Error: (09/09/2014 05:20:53 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort5.
Error: (09/09/2014 05:20:53 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort5.
Error: (09/09/2014 00:52:53 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
Microsoft Office Sessions:
=========================
Error: (09/10/2014 08:11:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe32.0.0.535053fc3d9fmozalloc.dll32.0.0.535053fc0a56800000030000141bff801cfccf0021a02d3C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll9f5fb249-38e3-11e4-bba1-00261819c71a
Error: (09/08/2014 10:04:27 AM) (Source: VSS) (EventID: 12344) (User: )
Description: 0x00000000c000014d
Operation:
OnFreeze event
Freeze Event
Context:
Execution Context: Registry Writer
Execution Context: Writer
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer
Writer Instance ID: {6fa0714d-4174-4344-b30e-d70a1ef07575}
Error: (09/01/2014 06:31:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: svchost.exe_stisvc6.1.7600.163854a5bc3c1wiaservc.dll6.1.7601.175144ce7ca0f400000150000000000047a6b8fc01cfc63469b507f7C:\Windows\system32\svchost.exec:\windows\system32\wiaservc.dllb3a08720-3227-11e4-9746-00261819c71a
Error: (08/28/2014 07:08:55 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE10.0.9200.17028217801cfc314d99583f542C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Error: (08/28/2014 01:35:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE10.0.9200.17028217401cfc2e640a6a50a63C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Error: (08/20/2014 00:38:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: svchost.exe_stisvc6.1.7600.163854a5bc3c1wiaservc.dll6.1.7601.175144ce7ca0f400000150000000000047a6b71401cfbc95140c3ac6C:\Windows\system32\svchost.exec:\windows\system32\wiaservc.dll5d3e0e99-2888-11e4-9c3e-00261819c71a
Error: (08/19/2014 01:21:34 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]
Error: (08/19/2014 01:21:34 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
Error: (08/19/2014 01:21:34 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]
Error: (08/19/2014 10:53:59 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]
==================== Memory info ===========================
Processor: Intel® Core™ i7 CPU 920 @ 2.67GHz
Percentage of memory in use: 19%
Total physical RAM: 9207.11 MB
Available physical RAM: 7448.3 MB
Total Pagefile: 18412.4 MB
Available Pagefile: 16193.49 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.66 GB) (Free:411.79 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 8C0867C4)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
==================== End Of Log ============================
#123
Posted 12 September 2014 - 08:42 AM
Sharon Lee
- Topic Starter
-
- Member
-
- 512 posts
Member
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-09-2014
Ran by Sharon (administrator) on SHARON-PC on 12-09-2014 10:36:51
Running from C:\Users\Sharon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MH6CBXKK
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingc...can-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingc...can-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe
(Creative Home) C:\Program Files (x86)\Creative Home\Hallmark Card Studio 2011 Deluxe\Planner\PLNRnote.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Nova Development\Greeting Card Factory Workshop 8.0\ReminderApp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_15_0_0_152_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE
() C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\OFFICEVIRT.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [ReminderApp] => C:\Program Files (x86)\Nova Development\Greeting Card Factory Workshop 8.0\ReminderApp.exe [144672 2010-04-09] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKU\S-1-5-21-3116716917-3147519053-889370201-1000\...\Run: [HP Deskjet 3050A J611 series (NET)] => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2676584 2011-06-08] (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Event Planner Reminder.lnk
ShortcutTarget: Event Planner Reminder.lnk -> C:\Program Files (x86)\Creative Home\Hallmark Card Studio 2011 Deluxe\Planner\PLNRnote.exe (Creative Home)
Startup: C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://rr.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x76831804D0CDCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {5BEA54A6-199B-44BE-8A1F-8E6FEA9000A3} URL = https://search.yahoo...35,19890,0,25,0
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Sharon\AppData\Roaming\Mozilla\Firefox\Profiles\uh4rokfq.default-1408223660292
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Homepage: https://www.yahoo.com/?hps=249
FF Keyword.URL: https://search.yahoo...2&type=800236=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Yahoo! Toolbar - C:\Users\Sharon\AppData\Roaming\Mozilla\Firefox\Profiles\uh4rokfq.default-1408223660292\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2014-09-05]
Chrome:
=======
CHR Profile: C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx []
CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASC_GhromePluginFor6.crx []
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
S3 NMIndexingService; "C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [768680 2013-06-26] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2013-06-26] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29352 2013-06-26] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2013-06-26] (Microsoft Corporation)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-10 20:33 - 2014-09-10 20:33 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-10 20:33 - 2014-09-10 20:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-10 20:32 - 2014-09-10 20:32 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012(5).exe
2014-09-10 17:56 - 2014-09-10 17:57 - 05429848 _____ () C:\Users\Sharon\Downloads\RogueKillerX64.exe
2014-09-10 10:30 - 2014-08-17 00:00 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-10 10:30 - 2014-08-17 00:00 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-10 10:30 - 2014-08-16 23:59 - 19280384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-10 10:30 - 2014-08-16 23:59 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-10 10:30 - 2014-08-16 23:59 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-10 10:30 - 2014-08-16 23:59 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-10 10:30 - 2014-08-16 23:59 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 15399424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-10 10:30 - 2014-08-16 23:58 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-10 10:30 - 2014-08-16 23:58 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 13757440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 02055168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-10 10:30 - 2014-08-16 23:57 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-10 10:30 - 2014-08-16 23:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-10 10:30 - 2014-08-16 03:25 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-10 10:30 - 2014-08-16 02:43 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-10 10:30 - 2014-08-16 02:34 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-09-10 10:30 - 2014-08-16 01:53 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-09-10 10:29 - 2014-08-16 23:57 - 14369280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-10 10:24 - 2014-06-26 22:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-10 10:24 - 2014-06-26 21:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-10 09:20 - 2014-09-09 16:51 - 00001102 _____ () C:\Users\Sharon\Documents\Malwarebytes Anti-Malware.lnk
2014-09-10 08:12 - 2014-09-10 20:43 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Systweak
2014-09-10 08:12 - 2014-09-10 08:12 - 00004030 _____ () C:\Windows\System32\Tasks\LaunchSignup
2014-09-10 08:12 - 2013-08-22 18:36 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-09-10 08:11 - 2014-09-10 08:11 - 00000000 ____D () C:\Users\Sharon\AppData\Local\CrashDumps
2014-09-10 08:06 - 2014-09-11 18:19 - 00036456 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-09-10 06:18 - 2014-09-04 22:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-10 06:18 - 2014-09-04 22:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-10 06:18 - 2014-08-01 07:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-10 06:18 - 2014-08-01 07:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-10 06:18 - 2014-07-06 22:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 06:18 - 2014-07-06 22:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 06:18 - 2014-07-06 21:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-10 06:18 - 2014-07-06 21:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-10 06:18 - 2014-07-06 21:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-10 06:18 - 2014-06-23 23:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-10 06:18 - 2014-06-23 22:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-09 16:51 - 2014-09-09 16:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012(4).exe
2014-09-09 13:34 - 2014-09-09 13:34 - 00000760 _____ () C:\Users\Sharon\Desktop\ComboFix.txt - Shortcut.lnk
2014-09-09 13:34 - 2014-09-09 13:34 - 00000760 _____ () C:\Users\Sharon\Desktop\ComboFix.txt - Shortcut (2).lnk
2014-09-09 12:54 - 2014-09-09 21:32 - 00022394 _____ () C:\ComboFix.txt
2014-09-09 12:48 - 2014-09-09 12:48 - 05576885 ____R (Swearware) C:\Users\Sharon\Downloads\ComboFix.exe
2014-09-08 15:11 - 2014-09-08 15:11 - 00017763 _____ () C:\Users\Sharon\Downloads\DoubleQuoteChristian VoicesDoubleQuote
2014-09-08 15:02 - 2014-09-08 15:02 - 00267070 _____ () C:\Users\Sharon\Downloads\(1 unread) - sharonniese - Yahoo Mail.htm
2014-09-08 15:02 - 2014-09-08 15:02 - 00000000 ____D () C:\Users\Sharon\Downloads\(1 unread) - sharonniese - Yahoo Mail_files
2014-09-08 11:09 - 2014-09-08 14:19 - 00000563 _____ () C:\Windows\CFScript.txt
2014-09-08 10:44 - 2014-09-09 13:43 - 00000563 _____ () C:\Windows\CFScrip.txt
2014-09-06 18:22 - 2014-09-06 18:22 - 04874632 _____ (LionSea Software co., ltd ) C:\Users\Sharon\Downloads\setup.exe
2014-09-06 17:49 - 2014-09-06 17:49 - 00333576 _____ () C:\Windows\Minidump\090614-26286-01.dmp
2014-09-06 17:48 - 2014-09-07 15:36 - 502854807 _____ () C:\Windows\MEMORY.DMP
2014-09-06 16:27 - 2014-09-06 16:27 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-09-05 10:51 - 2014-09-05 10:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-05 10:50 - 2014-09-05 10:50 - 35678152 _____ () C:\Users\Sharon\Downloads\Firefox Setup 32.0.exe
2014-09-05 08:38 - 2014-09-05 08:38 - 00018077 _____ () C:\Users\Sharon\Desktop\dds.txt
2014-09-05 08:38 - 2014-09-05 08:38 - 00006271 _____ () C:\Users\Sharon\Desktop\attach.txt
2014-09-05 08:37 - 2014-09-05 08:37 - 00688992 ____R (Swearware) C:\Users\Sharon\Downloads\dds(3).com
2014-09-05 08:35 - 2014-09-05 08:35 - 00688992 _____ (Swearware) C:\Users\Sharon\Downloads\dds(2).com
2014-09-05 08:32 - 2014-09-05 08:32 - 00688992 _____ (Swearware) C:\Users\Sharon\Downloads\dds(1).com
2014-09-04 19:31 - 2014-09-04 19:31 - 00000889 _____ () C:\Users\Sharon\Desktop\fixbat.txt
2014-09-03 13:58 - 2014-09-03 13:58 - 00140620 _____ () C:\Users\Sharon\Documents\Tina's card.fgc
2014-08-31 12:52 - 2014-08-31 12:52 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Nova Development
2014-08-31 12:50 - 2014-08-31 12:50 - 00002781 _____ () C:\Users\Public\Desktop\Greeting Card Factory Workshop.lnk
2014-08-31 12:50 - 2014-08-31 12:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nova Development
2014-08-31 12:50 - 2014-08-31 12:50 - 00000000 ____D () C:\Program Files (x86)\Nova Development
2014-08-29 14:59 - 2014-08-29 14:59 - 00688992 _____ (Swearware) C:\Users\Sharon\Downloads\dds.com
2014-08-28 20:59 - 2013-12-21 05:39 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-28 20:59 - 2013-12-21 03:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-28 19:34 - 2014-09-01 19:42 - 00000000 ____D () C:\ProgramData\Yahoo!
2014-08-27 20:55 - 2014-08-27 20:55 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-08-27 20:55 - 2014-08-27 20:55 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-08-27 20:55 - 2014-08-27 20:55 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-08-27 20:55 - 2014-08-27 20:55 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-08-27 20:55 - 2014-08-27 20:55 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-08-27 20:55 - 2014-08-27 20:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-08-27 20:55 - 2014-08-27 20:55 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-08-27 20:43 - 2014-08-22 22:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 20:43 - 2014-08-22 21:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-27 20:43 - 2014-08-22 20:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-26 12:17 - 2014-09-09 12:54 - 00000000 ____D () C:\Qoobox
2014-08-26 12:17 - 2014-08-26 12:22 - 00000000 ____D () C:\Windows\erdnt
2014-08-26 12:17 - 2011-06-26 02:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-26 12:17 - 2010-11-07 13:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-26 12:17 - 2009-04-20 00:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-26 12:17 - 2000-08-30 20:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-26 12:17 - 2000-08-30 20:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-26 12:17 - 2000-08-30 20:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-26 12:17 - 2000-08-30 20:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-26 12:17 - 2000-08-30 20:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-26 12:13 - 2014-08-26 12:13 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-26 12:13 - 2014-08-26 12:13 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-26 12:13 - 2014-08-26 12:13 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-26 12:13 - 2014-08-26 12:13 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-26 12:13 - 2014-08-26 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-26 12:13 - 2014-08-26 12:13 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-26 12:00 - 2014-08-26 12:02 - 00000000 ____D () C:\AdwCleaner
2014-08-24 16:46 - 2014-09-07 21:55 - 00000000 ___RD () C:\Users\Sharon\Documents\HP Photo Creations
2014-08-23 14:34 - 2014-08-23 14:35 - 113759992 _____ (Microsoft Corporation) C:\Users\Sharon\Downloads\msert.exe
2014-08-23 14:29 - 2014-08-27 20:57 - 00008916 _____ () C:\Windows\IE10_main.log
2014-08-20 11:55 - 2014-08-20 11:55 - 00347816 _____ (Microsoft Corporation) C:\Users\Sharon\Downloads\MicrosoftFixit.malware.Run.exe
2014-08-19 10:26 - 2014-08-19 10:26 - 00000000 ____D () C:\ProgramData\TEMP
2014-08-18 15:25 - 2014-08-18 15:25 - 00003288 _____ () C:\Windows\System32\Tasks\{7CFE68CD-EEC9-4CE0-9D05-503D54E179EA}
2014-08-18 15:22 - 2014-08-18 15:35 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-18 13:38 - 2014-09-11 01:42 - 00064144 _____ () C:\Windows\PFRO.log
2014-08-18 13:24 - 2014-09-11 11:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-18 13:24 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-18 13:24 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-18 13:24 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-18 13:23 - 2014-08-18 13:23 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012(3).exe
2014-08-17 20:33 - 2009-06-10 17:00 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20140817-203300.backup
2014-08-17 18:20 - 2014-08-18 13:47 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-08-17 18:20 - 2014-08-18 13:46 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-08-17 18:15 - 2014-08-17 18:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-17 18:15 - 2014-08-17 18:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012(2).exe
2014-08-17 14:17 - 2014-09-12 07:46 - 00009744 _____ () C:\Windows\setupact.log
2014-08-17 14:17 - 2014-08-17 14:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-17 11:36 - 2014-08-17 11:36 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\SparkTrust
2014-08-17 11:35 - 2014-08-17 11:37 - 00000000 ____D () C:\ProgramData\SparkTrust
2014-08-16 19:05 - 2014-08-12 16:24 - 00000174 ___SH () C:\Users\Sharon\Documents\desktop (2).ini
2014-08-16 17:29 - 2014-08-16 17:29 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-08-16 17:07 - 2014-08-16 17:07 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\Malwarebytes_Anti_Malware_v2.0.2.exe
2014-08-16 17:02 - 2014-08-22 20:07 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\ProductData
2014-08-16 17:01 - 2014-08-16 17:01 - 00000000 ____D () C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-08-16 16:29 - 2014-09-12 10:36 - 00000000 ____D () C:\FRST
2014-08-16 11:35 - 2014-09-04 07:13 - 00000000 ____D () C:\ProgramData\ProductData
2014-08-16 11:35 - 2014-08-16 11:35 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Apple Computer
2014-08-16 11:34 - 2014-08-16 16:59 - 00000000 ____D () C:\ProgramData\IObit
2014-08-16 11:33 - 2014-08-16 11:35 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-08-16 11:02 - 2014-08-16 16:48 - 00000000 ____D () C:\Program Files (x86)\TotalSystemCare
2014-08-15 22:17 - 2014-08-15 22:33 - 00000000 ____D () C:\ProgramData\MyTurboPC.com
2014-08-15 22:17 - 2014-08-15 22:17 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\MyTurboPC.com
2014-08-15 12:22 - 2014-06-30 18:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-15 12:22 - 2014-06-30 18:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-15 12:22 - 2014-06-06 02:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-15 12:22 - 2014-06-06 02:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-15 12:22 - 2014-03-09 17:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-15 12:22 - 2014-03-09 17:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-15 12:22 - 2014-03-09 17:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-15 12:22 - 2014-03-09 17:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-15 07:59 - 2014-07-15 23:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-15 07:59 - 2014-07-15 22:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-15 07:59 - 2014-07-08 22:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-15 07:59 - 2014-07-08 22:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-15 07:59 - 2014-07-08 22:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-15 07:59 - 2014-07-08 22:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-15 07:59 - 2014-07-08 22:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-15 07:59 - 2014-07-08 21:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-15 07:59 - 2014-07-08 21:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-15 07:59 - 2014-07-08 21:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-15 07:59 - 2014-07-08 21:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-15 07:59 - 2014-07-08 21:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-15 07:59 - 2014-07-08 18:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-15 07:59 - 2014-07-08 18:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-15 07:59 - 2014-06-15 22:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-15 07:59 - 2014-06-03 06:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-15 07:59 - 2014-06-03 06:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-15 07:59 - 2014-06-03 06:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-15 07:59 - 2014-06-03 06:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-15 07:59 - 2014-06-03 05:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-15 07:59 - 2014-06-03 05:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-15 07:59 - 2014-06-03 05:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-15 07:58 - 2014-06-24 22:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-15 07:58 - 2014-06-24 21:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-15 07:57 - 2014-07-13 22:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-15 07:57 - 2014-07-13 21:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-14 20:51 - 2014-08-14 20:51 - 19182768 _____ (Adobe Systems Incorporated) C:\Users\Sharon\Downloads\Adobe_Flash_Player_(Non_IE)_v14.0.0.179.exe
2014-08-13 15:02 - 2014-08-13 15:03 - 18607792 _____ (Adobe Systems Incorporated) C:\Users\Sharon\Downloads\Adobe_Flash_Player_(IE)_v14.0.0.176.exe
2014-08-13 11:13 - 2014-09-01 08:43 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\DiskDefrag
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-12 10:36 - 2014-08-16 16:29 - 00000000 ____D () C:\FRST
2014-09-12 10:30 - 2014-05-15 18:56 - 01660960 _____ () C:\Windows\WindowsUpdate.log
2014-09-12 10:29 - 2014-05-15 21:35 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-12 10:28 - 2014-05-18 18:18 - 00000340 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-09-12 07:54 - 2009-07-14 00:45 - 00020704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-12 07:54 - 2009-07-14 00:45 - 00020704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-12 07:46 - 2014-08-17 14:17 - 00009744 _____ () C:\Windows\setupact.log
2014-09-12 07:46 - 2014-05-15 17:22 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-12 07:46 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-11 21:13 - 2014-05-16 11:42 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\SoftGrid Client
2014-09-11 18:19 - 2014-09-10 08:06 - 00036456 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2014-09-11 11:09 - 2014-08-18 13:24 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-11 01:42 - 2014-08-18 13:38 - 00064144 _____ () C:\Windows\PFRO.log
2014-09-10 20:44 - 2009-07-14 00:45 - 00000000 ____D () C:\Windows\Setup
2014-09-10 20:43 - 2014-09-10 08:12 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Systweak
2014-09-10 20:33 - 2014-09-10 20:33 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-10 20:33 - 2014-09-10 20:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-10 20:33 - 2014-05-17 21:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-10 20:32 - 2014-09-10 20:32 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012(5).exe
2014-09-10 18:56 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2014-09-10 17:57 - 2014-09-10 17:56 - 05429848 _____ () C:\Users\Sharon\Downloads\RogueKillerX64.exe
2014-09-10 10:29 - 2014-05-15 21:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-10 10:28 - 2014-05-15 21:32 - 00002155 _____ () C:\Windows\epplauncher.mif
2014-09-10 10:28 - 2014-05-15 21:32 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-10 10:28 - 2014-05-15 20:07 - 00774402 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-10 10:28 - 2009-07-14 01:13 - 00774402 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-10 10:27 - 2014-05-15 21:32 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-10 10:27 - 2014-05-15 21:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-09-10 10:27 - 2014-05-15 17:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-10 10:25 - 2014-05-15 17:31 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 10:24 - 2014-05-15 20:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-10 08:12 - 2014-09-10 08:12 - 00004030 _____ () C:\Windows\System32\Tasks\LaunchSignup
2014-09-10 08:11 - 2014-09-10 08:11 - 00000000 ____D () C:\Users\Sharon\AppData\Local\CrashDumps
2014-09-10 08:06 - 2014-09-10 08:06 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-09-09 21:32 - 2014-09-09 12:54 - 00022394 _____ () C:\ComboFix.txt
2014-09-09 21:20 - 2014-05-15 21:35 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-09 21:20 - 2014-05-15 21:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-09 21:20 - 2014-05-15 21:35 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-09 16:51 - 2014-09-10 09:20 - 00001102 _____ () C:\Users\Sharon\Documents\Malwarebytes Anti-Malware.lnk
2014-09-09 16:51 - 2014-09-09 16:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012(4).exe
2014-09-09 13:43 - 2014-09-08 10:44 - 00000563 _____ () C:\Windows\CFScrip.txt
2014-09-09 13:34 - 2014-09-09 13:34 - 00000760 _____ () C:\Users\Sharon\Desktop\ComboFix.txt - Shortcut.lnk
2014-09-09 13:34 - 2014-09-09 13:34 - 00000760 _____ () C:\Users\Sharon\Desktop\ComboFix.txt - Shortcut (2).lnk
2014-09-09 12:54 - 2014-08-26 12:17 - 00000000 ____D () C:\Qoobox
2014-09-09 12:52 - 2009-07-13 22:34 - 00000215 _____ () C:\Windows\system.ini
2014-09-09 12:50 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-09 12:48 - 2014-09-09 12:48 - 05576885 ____R (Swearware) C:\Users\Sharon\Downloads\ComboFix.exe
2014-09-09 08:19 - 2014-05-15 19:57 - 00000000 ____D () C:\Users\Sharon
2014-09-08 15:11 - 2014-09-08 15:11 - 00017763 _____ () C:\Users\Sharon\Downloads\DoubleQuoteChristian VoicesDoubleQuote
2014-09-08 15:02 - 2014-09-08 15:02 - 00267070 _____ () C:\Users\Sharon\Downloads\(1 unread) - sharonniese - Yahoo Mail.htm
2014-09-08 15:02 - 2014-09-08 15:02 - 00000000 ____D () C:\Users\Sharon\Downloads\(1 unread) - sharonniese - Yahoo Mail_files
2014-09-08 14:19 - 2014-09-08 11:09 - 00000563 _____ () C:\Windows\CFScript.txt
2014-09-07 21:55 - 2014-08-24 16:46 - 00000000 ___RD () C:\Users\Sharon\Documents\HP Photo Creations
2014-09-07 21:55 - 2014-05-16 10:09 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-09-07 15:36 - 2014-09-06 17:48 - 502854807 _____ () C:\Windows\MEMORY.DMP
2014-09-07 15:36 - 2014-06-12 21:23 - 00000000 ____D () C:\Windows\Minidump
2014-09-06 18:22 - 2014-09-06 18:22 - 04874632 _____ (LionSea Software co., ltd ) C:\Users\Sharon\Downloads\setup.exe
2014-09-06 17:49 - 2014-09-06 17:49 - 00333576 _____ () C:\Windows\Minidump\090614-26286-01.dmp
2014-09-06 16:27 - 2014-09-06 16:27 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-09-05 10:51 - 2014-09-05 10:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-05 10:51 - 2014-08-11 20:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-05 10:51 - 2014-05-16 11:21 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-05 10:51 - 2014-05-16 11:21 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-05 10:50 - 2014-09-05 10:50 - 35678152 _____ () C:\Users\Sharon\Downloads\Firefox Setup 32.0.exe
2014-09-05 08:38 - 2014-09-05 08:38 - 00018077 _____ () C:\Users\Sharon\Desktop\dds.txt
2014-09-05 08:38 - 2014-09-05 08:38 - 00006271 _____ () C:\Users\Sharon\Desktop\attach.txt
2014-09-05 08:37 - 2014-09-05 08:37 - 00688992 ____R (Swearware) C:\Users\Sharon\Downloads\dds(3).com
2014-09-05 08:35 - 2014-09-05 08:35 - 00688992 _____ (Swearware) C:\Users\Sharon\Downloads\dds(2).com
2014-09-05 08:32 - 2014-09-05 08:32 - 00688992 _____ (Swearware) C:\Users\Sharon\Downloads\dds(1).com
2014-09-04 22:10 - 2014-09-10 06:18 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-04 22:05 - 2014-09-10 06:18 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-04 19:31 - 2014-09-04 19:31 - 00000889 _____ () C:\Users\Sharon\Desktop\fixbat.txt
2014-09-04 07:13 - 2014-08-16 11:35 - 00000000 ____D () C:\ProgramData\ProductData
2014-09-03 13:58 - 2014-09-03 13:58 - 00140620 _____ () C:\Users\Sharon\Documents\Tina's card.fgc
2014-09-03 11:21 - 2014-05-15 17:03 - 00000000 ____D () C:\Windows\pss
2014-09-02 15:22 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\registration
2014-09-01 19:42 - 2014-08-28 19:34 - 00000000 ____D () C:\ProgramData\Yahoo!
2014-09-01 18:31 - 2014-05-15 21:23 - 00170408 _____ () C:\Users\Sharon\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-01 08:43 - 2014-08-13 11:13 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\DiskDefrag
2014-09-01 08:43 - 2009-07-14 00:45 - 00527624 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-31 12:52 - 2014-08-31 12:52 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Nova Development
2014-08-31 12:50 - 2014-08-31 12:50 - 00002781 _____ () C:\Users\Public\Desktop\Greeting Card Factory Workshop.lnk
2014-08-31 12:50 - 2014-08-31 12:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nova Development
2014-08-31 12:50 - 2014-08-31 12:50 - 00000000 ____D () C:\Program Files (x86)\Nova Development
2014-08-29 14:59 - 2014-08-29 14:59 - 00688992 _____ (Swearware) C:\Users\Sharon\Downloads\dds.com
2014-08-28 19:50 - 2014-05-15 18:36 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-28 06:57 - 2014-05-15 19:58 - 00001413 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-28 06:55 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-27 20:57 - 2014-08-23 14:29 - 00008916 _____ () C:\Windows\IE10_main.log
2014-08-27 20:55 - 2014-08-27 20:55 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-08-27 20:55 - 2014-08-27 20:55 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-08-27 20:55 - 2014-08-27 20:55 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-08-27 20:55 - 2014-08-27 20:55 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-08-27 20:55 - 2014-08-27 20:55 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-08-27 20:55 - 2014-08-27 20:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-08-27 20:55 - 2014-08-27 20:55 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-08-27 20:55 - 2014-08-27 20:55 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-08-27 20:55 - 2014-08-27 20:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-08-26 12:55 - 2014-05-15 19:52 - 00000000 ____D () C:\Windows\Panther
2014-08-26 12:22 - 2014-08-26 12:17 - 00000000 ____D () C:\Windows\erdnt
2014-08-26 12:14 - 2014-05-15 21:34 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-26 12:13 - 2014-08-26 12:13 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-26 12:13 - 2014-08-26 12:13 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-26 12:13 - 2014-08-26 12:13 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-26 12:13 - 2014-08-26 12:13 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-26 12:13 - 2014-08-26 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-26 12:13 - 2014-08-26 12:13 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-26 12:02 - 2014-08-26 12:00 - 00000000 ____D () C:\AdwCleaner
2014-08-25 18:40 - 2014-05-16 11:39 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\TP
2014-08-23 14:35 - 2014-08-23 14:34 - 113759992 _____ (Microsoft Corporation) C:\Users\Sharon\Downloads\msert.exe
2014-08-23 14:26 - 2009-07-13 23:20 - 00000000 __RHD () C:\Users\Default
2014-08-22 22:07 - 2014-08-27 20:43 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-22 21:45 - 2014-08-27 20:43 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-22 20:59 - 2014-08-27 20:43 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 20:07 - 2014-08-16 17:02 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\ProductData
2014-08-20 11:55 - 2014-08-20 11:55 - 00347816 _____ (Microsoft Corporation) C:\Users\Sharon\Downloads\MicrosoftFixit.malware.Run.exe
2014-08-19 20:26 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\Cursors
2014-08-19 10:26 - 2014-08-19 10:26 - 00000000 ____D () C:\ProgramData\TEMP
2014-08-18 15:35 - 2014-08-18 15:22 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-18 15:25 - 2014-08-18 15:25 - 00003288 _____ () C:\Windows\System32\Tasks\{7CFE68CD-EEC9-4CE0-9D05-503D54E179EA}
2014-08-18 13:47 - 2014-08-17 18:20 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-08-18 13:46 - 2014-08-17 18:20 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-08-18 13:38 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\tracing
2014-08-18 13:23 - 2014-08-18 13:23 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012(3).exe
2014-08-17 18:16 - 2014-08-17 18:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-17 18:16 - 2014-08-17 18:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.2.1012(2).exe
2014-08-17 14:17 - 2014-08-17 14:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-17 11:37 - 2014-08-17 11:35 - 00000000 ____D () C:\ProgramData\SparkTrust
2014-08-17 11:36 - 2014-08-17 11:36 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\SparkTrust
2014-08-17 00:00 - 2014-09-10 10:30 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-17 00:00 - 2014-09-10 10:30 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-16 23:59 - 2014-09-10 10:30 - 19280384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-16 23:59 - 2014-09-10 10:30 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-16 23:59 - 2014-09-10 10:30 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-16 23:59 - 2014-09-10 10:30 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-16 23:59 - 2014-09-10 10:30 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 15399424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-16 23:58 - 2014-09-10 10:30 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-16 23:58 - 2014-09-10 10:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 13757440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 02055168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-16 23:57 - 2014-09-10 10:30 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-16 23:57 - 2014-09-10 10:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-16 23:57 - 2014-09-10 10:29 - 14369280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-16 17:29 - 2014-08-16 17:29 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-08-16 17:07 - 2014-08-16 17:07 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\Malwarebytes_Anti_Malware_v2.0.2.exe
2014-08-16 17:01 - 2014-08-16 17:01 - 00000000 ____D () C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-08-16 16:59 - 2014-08-16 11:34 - 00000000 ____D () C:\ProgramData\IObit
2014-08-16 16:51 - 2014-07-26 15:02 - 00000000 ____D () C:\ProgramData\Malwarebytes Anti-Exploit
2014-08-16 16:48 - 2014-08-16 11:02 - 00000000 ____D () C:\Program Files (x86)\TotalSystemCare
2014-08-16 11:35 - 2014-08-16 11:35 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Apple Computer
2014-08-16 11:35 - 2014-08-16 11:33 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-08-16 03:25 - 2014-09-10 10:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-16 02:43 - 2014-09-10 10:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-16 02:34 - 2014-09-10 10:30 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-08-16 01:53 - 2014-09-10 10:30 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-08-15 22:33 - 2014-08-15 22:17 - 00000000 ____D () C:\ProgramData\MyTurboPC.com
2014-08-15 22:17 - 2014-08-15 22:17 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\MyTurboPC.com
2014-08-14 20:51 - 2014-08-14 20:51 - 19182768 _____ (Adobe Systems Incorporated) C:\Users\Sharon\Downloads\Adobe_Flash_Player_(Non_IE)_v14.0.0.179.exe
2014-08-13 15:03 - 2014-08-13 15:02 - 18607792 _____ (Adobe Systems Incorporated) C:\Users\Sharon\Downloads\Adobe_Flash_Player_(IE)_v14.0.0.176.exe
2014-08-13 11:17 - 2014-05-16 10:55 - 00000000 ___DC () C:\Users\Sharon\AppData\Local\MigWiz
Some content of TEMP:
====================
C:\Users\Sharon\AppData\Local\Temp\BackupSetup.exe
C:\Users\Sharon\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Sharon\AppData\Local\Temp\System.Data.SQLite11883.dll
C:\Users\Sharon\AppData\Local\Temp\System.Data.SQLite19746.dll
C:\Users\Sharon\AppData\Local\Temp\System.Data.SQLite20131.dll
C:\Users\Sharon\AppData\Local\Temp\System.Data.SQLite31929.dll
C:\Users\Sharon\AppData\Local\Temp\System.Data.SQLite33911.dll
C:\Users\Sharon\AppData\Local\Temp\System.Data.SQLite44927.dll
C:\Users\Sharon\AppData\Local\Temp\System.Data.SQLite95182.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-06 10:46
==================== End Of Log ============================
#124
Posted 12 September 2014 - 08:42 AM
Sharon Lee
- Topic Starter
-
- Member
-
- 512 posts
Member
Had to re-do this scan but now I believe this is what you want.
#125
Posted 12 September 2014 - 09:24 AM
Sharon Lee
- Topic Starter
-
- Member
-
- 512 posts
Member
Isn't this what I did? I copied both of them and posted them on here. If this isn't what you want, I don't know what you want. Sorry. Maybe I will have to do another scan. Not sure..
#126
Posted 13 September 2014 - 10:06 AM
myrti
-
- Expert
-
- 2,580 posts
Expert
Hi Sharon,
I will be covering for Naathim over the week-end while he is taking some time off.
I had a look through your logs and they are looking good. Could you tell me what your remaining issues are?
regards
myrti
#127
Posted 13 September 2014 - 10:50 AM
Sharon Lee
- Topic Starter
-
- Member
-
- 512 posts
Member
Hello Myrti, Thank you for your help. I am still having pop up with FireFox. Not sure about the system restore for I have not tried to do it as of yet. I do see that it is at least putting restore points there. I basically don't want to run it and mess up what we have done here. Seems that my machine is slow when I start it and it has never been that way. It has slowed down a bunch. As far as IE and Roadrunner are concerned, I really don't want to even deal with either or them. They are so slow and far too often will not open my mail at all. So I went to Gmail and opened up an account about a month ago. Problem is I would like to get where I don't have to use IE or Roadrunner email. Another story. Sorry...So really, the biggest problem is pop ups still coming up and the slow starting of this machine. System Restore may be working and I shall see after it has more restore points. Once again. Thank you.
#128
Posted 13 September 2014 - 02:59 PM
myrti
-
- Expert
-
- 2,580 posts
Expert
Hi,
can you please tell me what the pop up says?
regards
myrti
#129
Posted 13 September 2014 - 08:31 PM
Sharon Lee
- Topic Starter
-
- Member
-
- 512 posts
Member
Yes, one says to update to FireFox, which I have already done. Another says Make Yahoo your home page in Fox Fire and I have done that also. I put Gmail on here about 2 weeks ago to get away from IE. That causes more problems than I can remember. I am not worried that much about that for when we get the rest of this done, I will try to work on that. Thank you and have a good night.
#130
Posted 14 September 2014 - 03:11 AM
myrti
-
- Expert
-
- 2,580 posts
Expert
Hi,
can you take a screenshot of the popups and attach it here?
Do the following to take a screenshot while the above is open and showing on your desktop.
To do a screenshot please click on the Print Screen key on your keyboard. It is normally the key above your number pad between the F12 key and the Scroll Lock key.
Now go to Start > All Programs > Accessories and click on Paint
In the Empty White Area click and hold the CTRL key and then click the V
Go to the File option at the top and click on Save as
Save as file type JPEG and save it to your Desktop
Make sure the window is open all the way so I can see everything on the top right window.
On Vista/Win7 you could also use the snipping tool and click File > Save As... and save to your desktop then attach it to your next post.
regards
myrti
#131
Posted 14 September 2014 - 08:58 AM
Sharon Lee
- Topic Starter
-
- Member
-
- 512 posts
Member
I have tried to do this many times and it is not working. For some reason it is not pasting to the paint area. I am at a loss now. I shall try again and hope it works this time. So far, no luck or I don't know what I am doing. I have never done this before and so it is new to me. Thank you for your help.
#132
Posted 14 September 2014 - 09:00 AM
myrti
-
- Expert
-
- 2,580 posts
Expert
Hi,
do you maybe have a camera or a phone with which you could take a picture of what you're seeing on the screen?
regards
myrti
#133
Posted 14 September 2014 - 10:58 AM
Sharon Lee
- Topic Starter
-
- Member
-
- 512 posts
Member
Hello, I do have a camera on my cell phone but the grandchildren would have to show me how to use it. They insisted I have one for emergencies. As for other cameras I really don't have one. We just use the cam-recorder. I am of no help here am I? I will try to describe this with words. It is a rectangle and about 4 inches high and close to 10 inches long. The exact wording is: Make Yahoo Your Home Page in FireFox. The other one is more of a square. It wants me to download FireFox which I already have done long ago. I shall not give up on this. I want to try to do it again. Sorry for all the trouble.
#134
Posted 14 September 2014 - 02:22 PM
myrti
-
- Expert
-
- 2,580 posts
Expert
Hi,
no worries, you're no trouble. I'm trying to figure out if this popup is legitimate or not. Sometimes firefox will ask you to download a new version, because it no longer updates the version you have currently installed. But, before I ask you to be follow the instructions I want to be sure that this is not some malicious advertisement trying to fool you into installing something you don't need or want.
Do you have the print key identified on your keyboard? Does the word print show in the same color as the remaining letters on your keyboard or is it maybe in a different color? Is Print the only thing written on the key?
regards
myrti
#135
Posted 15 September 2014 - 08:09 AM
Sharon Lee
- Topic Starter
-
- Member
-
- 512 posts
Member
Hello, no I have no print key with only print on it. But, after trying several more times to keep this to go to the paint window I decided to once again try to go through all the motions I have done so many times with the pop-up. I followed it to the letter and did exactly as it said. The computer shut down and restarted. I don't recall that doing that before. Anyway when I went Yahoo, the pop-up was gone. It tried it over and over and it was gone. I have no idea why for I had done the same thing many times and nothing happened but this time it is gone. I am so happy about that. Thank you so much for all your help. You know I would like to know why this machine is taking so very long to start up but I suppose that is another matter also. I still have other matters but am so happy the pop-ups are gone. I went to system restore and it is now making restore points and it was not doing that for a long time. Something we did here has helped so much and I am not at all sure what. All I know is that I am very happy about the pop-ups and the system restore doing what it is suppose to do.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
As Featured On:
Sign In
Create Account
