Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Something is eating up my disk space! Please help! [Closed]

Started by Paul 62 , Sep 02 2014 05:03 PM

This topic is locked

#1
Paul 62

Posted 02 September 2014 - 05:03 PM

Member

Member
25 posts

I have a Windows 7 desktop that I use infrequently.

About two weeks ago, I got a system error saying I was almost out of diskspace which is impossible for me on a 55 gig harddrive (since I have very few pics, no movies and do very little downloading).

I cleaned up a few obvious things that I don't need. I also downloaded AVG f(free) and CCCleaner. With this effort, I got back 1 gig which has pretty much all been used up again- and just in the last 24hrs.

Can some one help me, please?

Thanks!

#2
LiquidTension

Posted 04 September 2014 - 06:44 AM

Expert

Expert
1,151 posts

Hello Paul 62, welcome to Geeks To Go Malware Removal forum!

My username is LiquidTension, but you can call me Adam. I will be assisting you with your malware-related problems.
If you would allow me to call you by your first name I would prefer that. xsmile.png.pagespeed.ic.CwSpBGGvqN.png

======================================================

Please read through the points below to ensure this process moves as quickly and efficiently as possible.

Please read through my instructions thoroughly, and ensure you carry out each step in the order specified.
Please do not post logs using the CODE, QUOTE or ATTACHMENT format. Logs should be posted directly in plain text. If you receive an error whilst posting, please break the log in half and use multiple posts.
Please do not run any tools or take any steps other than those I provide for you. Independent efforts may make matters worse, and will affect my ability in ascertaining the current situation & providing the best set of instructions for you.
Please backup important documents before proceeding with my instructions.
If you come across any issues whilst following my instructions, please stop and inform me of the issue in as much detail as possible. Please do not hesitate to ask before you run anything.
Topics are locked if no response is made after 5 days. Please inform me if you will require additional time to complete my instructions.

======================================================

Are you experiencing any other issues?

Please run the following diagnostic scans so I can ascertain the state of your computer.

STEP 1
xlK5Hdb.png.pagespeed.ce.J4MzrrPAEo.png Farbar Recovery Scan Tool (FRST) Scan

Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
Right-Click FRST.exe / FRST64.exe and select Run as administrator to run the programme.
Click Yes to the disclaimer.
Ensure the Addition.txt box is checked.
Click the Scan button and let the programme run.
Upon completion, click OK, then OK on the Addition.txt pop up screen.
Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste in your next reply.

STEP 2
YARWD1t.png.pagespeed.ce.nvhmVeYDe3.png TDSSKiller Scan

Please download TDSSKiller and save the file to your Desktop.
Right-Click TDSSKiller.exe and select Run as administrator to run the programme.
Click Change parameters. Place a checkmark next to Detect TDLFS file system.
Click Start Scan. Do not use the computer during the scan.
If objects are found, change the action to skip.
Click Continue and close the window.
A log will be created and saved to the root directory (usually C:\). Copy the contents of the log and paste in your next reply.

STEP 3
x58k7hrY.png.pagespeed.ic.rrdYoSlt3Q.png WinDirStat

Please download WinDirStat and save it to your Desktop.
Right-Click the WinDirStat icon and select Run as administrator to run the programme.
Follow the prompts.
Select the drive you wish to verify (C:\) and let the programme run until it has finished enumerating all files/folders.
On the left hand side, expand any folders that appear to be consuming a large amount of space.
Do the same for folders within the folder(s) you have already expanded.
Take a screenshot and post the image in your next reply. Instructions on how to take a screenshot can be found in this article.
Upload the image to Imgur.com and paste the URL in your next reply.

======================================================

STEP 4
xpfNZP4A.png.pagespeed.ic.bp5cRl1pJg.jpg Logs
In your next reply please include the following logs. Please be sure to copy and paste the requested logs, as well as provide information on any questions I may have asked.

Are you experiencing any other issues?
FRST.txt
Addition.txt
TDSSKiller log
WinDirStat screenshot

#3
LiquidTension

Posted 06 September 2014 - 07:03 PM

Expert

Expert
1,151 posts

Hello,

Do you still require assistance?

#4
Paul 62

Posted 07 September 2014 - 07:45 AM

Member

Topic Starter
Member
25 posts

Hi Adam,

I'm Paul.

Sorry for the delay. I've been out of town.

I very much need your help and will do as you've asked this morning and post the results.

Thanks for your patience.

Paul

#5
LiquidTension

Posted 07 September 2014 - 07:53 AM

Expert

Expert
1,151 posts

No problem, Paul.

Answer my question, post up the logs and screenshot when you're ready.

#6
Paul 62

Posted 07 September 2014 - 08:47 AM

Member

Topic Starter
Member
25 posts

Adam- I'll have to send this in chunks... the logs must be too big for the forum to accept (its timing out on the upload?)

#7
Paul 62

Posted 07 September 2014 - 08:49 AM

Member

Topic Starter
Member
25 posts

This is the FRST log:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-09-2014

Ran by Paul (administrator) on PAUL-PC on 07-09-2014 09:49:47

Running from C:\Users\Paul\Downloads

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

() C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

() C:\Program Files (x86)\AVG Security Toolbar\AVG-Secure-Search-Update_0814tb.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

() C:\ProgramData\Avg_Update_0814tb\0814tb_{60393F9A-EA31-4BF1-A11A-05D2EE30410C}.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

() C:\Program Files (x86)\AVG Secure Search\vprot.exe

() C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe

() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe

(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe

(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe

() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe

(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11613288 2010-11-19] (Realtek Semiconductor)

HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Secure Search\vprot.exe [2640408 2014-09-01] ()

HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5188112 2014-08-25] (AVG Technologies CZ, s.r.o.)

HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-2984152052-1607329531-1161540839-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6462744 2014-08-21] (Piriform Ltd)

HKU\S-1-5-21-2984152052-1607329531-1161540839-1000\...\Run: [AvgUpdater0814tb] => C:\ProgramData\Avg_Update_0814tb\0814tb_{60393F9A-EA31-4BF1-A11A-05D2EE30410C}.exe [2782744 2014-08-30] ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ca.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC75D9B594240CE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-CA

SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={4732B7DC-6BB2-4E73-ADC0-870C24FF9FE1}&mid=16c71a01e6aa47d0b1245fc49f541bcb-b97d9db78836825b1a61cfe456745ead38c47622&lang=en&ds=AVG&pr=fr&d=2012-10-06 10:18:45&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}

SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={4732B7DC-6BB2-4E73-ADC0-870C24FF9FE1}&mid=16c71a01e6aa47d0b1245fc49f541bcb-b97d9db78836825b1a61cfe456745ead38c47622&lang=en&ds=AVG&pr=fr&d=2012-10-06 10:18:45&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}

BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File

BHO-x32: AVG Security Toolbar -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll (AVG Secure Search)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll (AVG Secure Search)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File

Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File

Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll (AVG Secure Search)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll No File

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @carbon.getu.com/Conduit Update;version=3 -> C:\Users\Paul\AppData\Local\Conduit\Update\1.3.25.23\npConduitUpdate3.dll (Conduit Inc.)

FF Plugin HKCU: @carbon.getu.com/Conduit Update;version=9 -> C:\Users\Paul\AppData\Local\Conduit\Update\1.3.25.23\npConduitUpdate3.dll (Conduit Inc.)

FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\17.0.1.12

Chrome:

=======

CHR HomePage: Default -> hxxp://www.google.com

CHR StartupUrls: Default -> "https://www.google.c...VLMe7rQG0-oDwCw", "hxxp://www.accuradio.com/#!/feat/mostpopular/"

CHR DefaultSearchKeyword: Default -> EB96864DC7313C426B89288B55908177B622E31B4EE1059836768864E77249FB

CHR DefaultSearchURL: Default -> https://mail.google....c=mailto&url=%s

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\pdf.dll ()

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\gcswf32.dll No File

CHR Plugin: (AVG Internet Security) - C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2161_0\plugins/avgnpss.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.1.0\\npsitesafety.dll (AVG Technologies)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File

CHR Profile: C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-30]

CHR Extension: (McAfee Security Scan+) - C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh [2014-02-26]

CHR Extension: (Google Wallet) - C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-07]

CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\18.1.0.443\avg.crx [2014-05-15]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] ()

R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-01] ()

R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3242000 2014-08-25] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-08-25] (AVG Technologies CZ, s.r.o.)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2253112 2014-07-14] (AVG)

R2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [1820184 2014-08-20] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AE3000; C:\Windows\System32\DRIVERS\AE3000w764.sys [1717824 2012-03-02] (Ralink Technology Corp.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [244504 2014-07-21] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-08-06] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)

R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [269080 2014-06-17] (AVG Technologies CZ, s.r.o.)

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-20] (AVG Technologies)

S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2014-06-23] (TuneUp Software)

S3 VLAN; C:\Windows\System32\DRIVERS\RtVLAN60.sys [29472 2010-01-14] (Windows ® Codename Longhorn DDK provider)

S3 RTL8192cu; system32\DRIVERS\RTL8192cu.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-07 09:49 - 2014-09-07 09:49 - 00016560 _____ () C:\Users\Paul\Downloads\FRST.txt

2014-09-07 09:49 - 2014-09-07 09:49 - 00000000 ____D () C:\FRST

2014-09-07 09:48 - 2014-09-07 09:48 - 02104832 _____ (Farbar) C:\Users\Paul\Downloads\FRST64.exe

2014-09-03 19:07 - 2014-09-03 19:07 - 05048584 _____ (JAM Software ) C:\Users\Paul\Downloads\TreeSizeFreeSetup.exe

2014-09-03 19:07 - 2014-09-03 19:07 - 00000000 ____D () C:\Users\Paul\AppData\Roaming\JAM Software

2014-09-03 19:07 - 2014-09-03 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free

2014-09-03 19:07 - 2014-09-03 19:07 - 00000000 ____D () C:\Program Files (x86)\JAM Software

2014-09-03 08:05 - 2014-09-03 08:05 - 00000328 _____ () C:\Windows\PFRO.log

2014-09-02 22:09 - 2014-09-02 22:10 - 00020720 _____ () C:\Users\Paul\Downloads\Black Magic Porter 10 gal (2).bsmx

2014-09-02 22:09 - 2014-09-02 22:09 - 00020993 _____ () C:\Users\Paul\Downloads\Black Magic Porter 10 gal (1).bsmx

2014-09-02 22:04 - 2014-09-02 22:08 - 00020720 _____ () C:\Users\Paul\Downloads\Black Magic Porter 10 gal.bsmx

2014-09-01 17:30 - 2014-09-01 17:30 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013

2014-09-01 17:03 - 2014-09-01 17:03 - 00001035 _____ () C:\Users\Paul\Desktop\WinDirStat.lnk

2014-09-01 17:03 - 2014-09-01 17:03 - 00000000 ____D () C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinDirStat

2014-09-01 17:03 - 2014-09-01 17:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat

2014-09-01 17:03 - 2014-09-01 17:03 - 00000000 ____D () C:\Program Files (x86)\WinDirStat

2014-09-01 17:02 - 2014-09-01 17:02 - 00645729 _____ (WDS Team) C:\Users\Paul\Downloads\windirstat1_1_2_setup.exe

2014-09-01 16:15 - 2014-09-07 09:18 - 00000336 _____ () C:\Windows\setupact.log

2014-09-01 16:15 - 2014-09-01 16:15 - 00000000 _____ () C:\Windows\setuperr.log

2014-08-30 09:40 - 2014-09-07 09:22 - 00164813 _____ () C:\Windows\WindowsUpdate.log

2014-08-30 09:36 - 2014-09-07 09:19 - 00000376 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rmv.job

2014-08-30 09:36 - 2014-08-30 09:36 - 00002670 _____ () C:\Windows\System32\Tasks\AVG-Secure-Search-Update_0814tb_rmv

2014-08-30 09:36 - 2014-08-30 09:36 - 00002668 _____ () C:\Windows\System32\Tasks\AVG-Secure-Search-Update_0814tb_rel

2014-08-30 09:36 - 2014-08-30 09:36 - 00000376 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rel.job

2014-08-30 09:36 - 2014-08-30 09:36 - 00000000 ____D () C:\Program Files (x86)\AVG Security Toolbar

2014-08-30 09:35 - 2014-08-30 09:35 - 00000000 ____D () C:\ProgramData\Avg_Update_0814tb

2014-08-28 22:15 - 2014-08-22 22:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-28 22:15 - 2014-08-22 21:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-28 22:15 - 2014-08-22 20:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-28 22:15 - 2014-05-08 05:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-08-28 22:15 - 2014-05-08 05:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-08-28 22:15 - 2014-01-08 22:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-08-28 22:15 - 2014-01-03 18:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-08-28 22:12 - 2014-05-14 12:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-08-28 22:12 - 2014-05-14 12:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-08-28 22:12 - 2014-05-14 12:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-08-28 22:12 - 2014-05-14 12:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-08-28 22:07 - 2014-08-28 22:07 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe online update program

2014-08-28 22:05 - 2014-08-28 22:05 - 00002229 _____ () C:\Users\Public\Desktop\AVG 1-Click Maintenance.lnk

2014-08-28 22:05 - 2014-08-28 22:05 - 00002215 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014.lnk

2014-08-28 22:05 - 2014-08-28 22:05 - 00002203 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk

2014-08-28 22:05 - 2014-08-28 22:05 - 00000000 ____D () C:\Users\Paul\AppData\Roaming\AVG

2014-08-28 22:05 - 2014-08-28 22:05 - 00000000 ____D () C:\Users\Paul\AppData\Local\AVG

2014-08-28 22:05 - 2014-08-28 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014

2014-08-28 22:05 - 2014-07-14 12:26 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe

2014-08-28 22:05 - 2014-07-14 12:26 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll

2014-08-28 22:05 - 2014-07-14 12:26 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll

2014-08-28 22:04 - 2014-08-28 22:07 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}

2014-08-28 22:04 - 2014-08-28 22:05 - 00000000 ____D () C:\ProgramData\AVG

2014-08-28 21:48 - 2014-08-28 21:48 - 00003118 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe

2014-08-28 21:47 - 2014-08-28 21:47 - 00003090 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe

2014-08-28 21:47 - 2014-08-28 21:47 - 00003062 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe

2014-08-28 21:47 - 2014-08-28 21:47 - 00003060 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe

2014-08-28 21:47 - 2014-08-28 21:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf

2014-08-28 21:47 - 2014-08-28 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mouse and Keyboard Center

2014-08-28 21:47 - 2014-08-28 21:47 - 00000000 ____D () C:\Program Files\Microsoft Mouse and Keyboard Center

2014-08-28 21:47 - 2013-10-01 22:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-08-28 21:47 - 2013-10-01 22:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-08-28 21:47 - 2013-10-01 22:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-08-28 21:47 - 2013-10-01 21:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-08-28 21:47 - 2013-10-01 21:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-08-28 21:47 - 2013-10-01 21:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-08-28 21:47 - 2013-10-01 21:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-08-28 21:47 - 2013-10-01 20:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-08-28 21:47 - 2013-10-01 20:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-08-28 21:47 - 2013-10-01 20:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2014-08-28 21:47 - 2013-10-01 20:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-08-28 21:47 - 2013-10-01 20:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-08-28 21:47 - 2013-10-01 19:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-08-28 21:47 - 2013-10-01 19:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-08-28 21:47 - 2013-10-01 19:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-08-28 21:47 - 2013-10-01 18:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-08-28 21:45 - 2014-08-28 21:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf

2014-08-28 21:45 - 2012-08-23 10:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-08-28 21:45 - 2012-08-23 10:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-08-28 21:45 - 2012-08-23 10:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys

2014-08-28 21:45 - 2012-08-23 07:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2014-08-28 21:45 - 2012-08-23 06:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2014-08-28 21:43 - 2013-09-24 22:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-08-28 21:43 - 2013-09-24 21:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-08-28 21:43 - 2012-05-04 07:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2014-08-28 21:43 - 2012-05-04 05:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2014-08-28 21:39 - 2014-08-28 21:39 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-08-28 21:39 - 2014-08-28 21:39 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-08-28 21:39 - 2014-08-28 21:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-08-28 21:39 - 2014-08-28 21:39 - 00000000 ____D () C:\Program Files\CCleaner

2014-08-28 21:38 - 2014-08-28 21:38 - 04902336 _____ (Piriform Ltd) C:\Users\Paul\Downloads\ccsetup417pro.exe

2014-08-28 21:38 - 2014-08-28 21:38 - 04902336 _____ (Piriform Ltd) C:\Users\Paul\Downloads\ccsetup417pro (1).exe

2014-08-28 21:16 - 2014-08-28 21:16 - 01187960 _____ () C:\Users\Paul\Downloads\ProcessExplorer.zip

2014-08-28 17:11 - 2014-05-14 12:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-08-28 17:11 - 2014-05-14 12:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-08-28 17:11 - 2014-05-14 12:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-08-28 17:11 - 2014-05-14 12:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2014-08-28 17:11 - 2014-05-14 12:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-08-28 17:11 - 2014-05-14 12:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-08-28 17:11 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-08-28 17:11 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-08-28 17:11 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-08-28 17:11 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-08-28 17:09 - 2014-08-28 17:09 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter

2014-08-20 21:12 - 2014-08-20 21:12 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-08-20 21:12 - 2014-08-20 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-08-20 21:12 - 2014-08-20 21:12 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-08-20 21:12 - 2014-08-20 21:12 - 00000000 ____D () C:\Program Files\iTunes

2014-08-20 21:12 - 2014-08-20 21:12 - 00000000 ____D () C:\Program Files\iPod

2014-08-20 21:12 - 2014-08-20 21:12 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-08-20 21:08 - 2014-08-20 21:10 - 113492816 _____ (Apple Inc.) C:\Users\Paul\Downloads\iTunes64Setup (1).exe

2014-08-20 03:01 - 2014-06-30 18:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2014-08-20 03:01 - 2014-06-30 18:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll

2014-08-20 03:01 - 2014-06-06 02:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-08-20 03:01 - 2014-06-06 02:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-08-20 03:01 - 2014-03-09 17:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2014-08-20 03:01 - 2014-03-09 17:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2014-08-20 03:01 - 2014-03-09 17:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe

2014-08-20 03:01 - 2014-03-09 17:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll

2014-08-18 17:22 - 2014-07-31 19:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-08-18 17:22 - 2014-07-31 19:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-08-18 17:22 - 2014-07-25 10:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-08-18 17:22 - 2014-07-25 10:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-08-18 17:22 - 2014-07-25 10:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-08-18 17:22 - 2014-07-25 09:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-08-18 17:22 - 2014-07-25 09:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-08-18 17:22 - 2014-07-25 09:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-08-18 17:22 - 2014-07-25 09:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-08-18 17:22 - 2014-07-25 09:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-08-18 17:22 - 2014-07-25 09:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-08-18 17:22 - 2014-07-25 09:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-08-18 17:22 - 2014-07-25 09:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-08-18 17:22 - 2014-07-25 09:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-08-18 17:22 - 2014-07-25 09:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-08-18 17:22 - 2014-07-25 09:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-08-18 17:22 - 2014-07-25 09:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-08-18 17:22 - 2014-07-25 08:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-08-18 17:22 - 2014-07-25 08:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-08-18 17:22 - 2014-07-25 08:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-08-18 17:22 - 2014-07-25 08:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-08-18 17:22 - 2014-07-25 08:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-08-18 17:22 - 2014-07-25 08:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-08-18 17:22 - 2014-07-25 08:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-08-18 17:22 - 2014-07-25 08:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-08-18 17:22 - 2014-07-25 08:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-08-18 17:22 - 2014-07-25 08:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-08-18 17:22 - 2014-07-25 08:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-08-18 17:22 - 2014-07-25 08:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-08-18 17:22 - 2014-07-25 08:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-08-18 17:22 - 2014-07-25 08:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-08-18 17:22 - 2014-07-25 08:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-08-18 17:22 - 2014-07-25 08:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-08-18 17:22 - 2014-07-25 08:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-08-18 17:22 - 2014-07-25 08:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-08-18 17:22 - 2014-07-25 08:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-08-18 17:22 - 2014-07-25 07:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-08-18 17:22 - 2014-07-25 07:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-08-18 17:22 - 2014-07-25 07:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-08-18 17:22 - 2014-07-25 07:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-08-18 17:22 - 2014-07-25 07:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-08-18 17:22 - 2014-07-25 07:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-08-18 17:22 - 2014-07-25 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-08-18 17:22 - 2014-07-25 07:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-08-18 17:22 - 2014-07-25 07:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-08-18 17:22 - 2014-07-25 07:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-08-18 17:22 - 2014-07-25 07:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-08-18 17:22 - 2014-07-25 07:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-08-18 17:22 - 2014-07-25 07:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-08-18 17:22 - 2014-07-25 07:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-08-18 17:22 - 2014-07-25 06:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-08-18 17:22 - 2014-07-25 06:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-08-18 17:22 - 2014-07-25 06:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-08-18 17:22 - 2014-07-25 06:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-08-18 17:22 - 2014-07-25 06:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-08-18 17:22 - 2014-07-25 06:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-08-18 17:22 - 2014-07-15 23:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-08-18 17:22 - 2014-07-15 22:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2014-08-18 17:22 - 2014-06-24 22:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-08-18 17:22 - 2014-06-24 21:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-08-18 17:22 - 2014-06-15 22:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-08-18 17:22 - 2014-06-03 06:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-08-18 17:22 - 2014-06-03 06:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-08-18 17:22 - 2014-06-03 06:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-08-18 17:22 - 2014-06-03 06:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-08-18 17:22 - 2014-06-03 05:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-08-18 17:22 - 2014-06-03 05:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-08-18 17:22 - 2014-06-03 05:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-08-18 17:21 - 2014-08-06 22:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-08-18 17:21 - 2014-07-13 22:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-08-18 17:21 - 2014-07-13 21:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2014-08-18 17:20 - 2014-08-06 22:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-08-14 07:54 - 2014-08-14 07:54 - 00000000 ____D () C:\Windows\system32\Macromed

2014-08-13 21:58 - 2014-09-07 09:15 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-08-13 21:58 - 2014-08-30 10:03 - 00002287 _____ () C:\Users\Paul\Desktop\U Browser.lnk

2014-08-13 21:58 - 2014-08-14 07:54 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-08-13 21:58 - 2014-08-14 07:54 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-08-13 21:58 - 2014-08-14 07:54 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-08-13 21:58 - 2014-08-13 21:58 - 00000000 ____D () C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\U Browser

2014-08-13 21:57 - 2014-09-07 09:16 - 00000914 _____ () C:\Windows\Tasks\ConduitUpdateTaskUserS-1-5-21-2984152052-1607329531-1161540839-1000UA.job

2014-08-13 21:57 - 2014-09-07 09:15 - 00000862 _____ () C:\Windows\Tasks\ConduitUpdateTaskUserS-1-5-21-2984152052-1607329531-1161540839-1000Core.job

2014-08-13 21:57 - 2014-08-13 21:58 - 00000000 ____D () C:\Users\Paul\AppData\Local\Conduit

2014-08-13 21:57 - 2014-08-13 21:57 - 00640744 _____ (Conduit Inc.) C:\Users\Paul\Downloads\ubrowser.exe

2014-08-13 21:57 - 2014-08-13 21:57 - 00003882 _____ () C:\Windows\System32\Tasks\ConduitUpdateTaskUserS-1-5-21-2984152052-1607329531-1161540839-1000UA

2014-08-13 21:57 - 2014-08-13 21:57 - 00003486 _____ () C:\Windows\System32\Tasks\ConduitUpdateTaskUserS-1-5-21-2984152052-1607329531-1161540839-1000Core

2014-08-13 21:23 - 2014-08-13 21:23 - 00014780 _____ () C:\Users\Paul\Downloads\Final List CEO Search Candidates Updated August 6 2014.xlsx

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-07 09:49 - 2014-09-07 09:49 - 00016560 _____ () C:\Users\Paul\Downloads\FRST.txt

2014-09-07 09:49 - 2014-09-07 09:49 - 00000000 ____D () C:\FRST

2014-09-07 09:48 - 2014-09-07 09:48 - 02104832 _____ (Farbar) C:\Users\Paul\Downloads\FRST64.exe

2014-09-07 09:42 - 2012-12-09 11:39 - 00000000 ____D () C:\Users\Paul\Desktop\Paul's stuff

2014-09-07 09:26 - 2009-07-14 00:45 - 00029120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-07 09:26 - 2009-07-14 00:45 - 00029120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-07 09:24 - 2012-06-07 07:53 - 00000000 ____D () C:\ProgramData\MFAData

2014-09-07 09:23 - 2009-07-14 01:13 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-07 09:22 - 2014-08-30 09:40 - 00164813 _____ () C:\Windows\WindowsUpdate.log

2014-09-07 09:19 - 2014-08-30 09:36 - 00000376 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rmv.job

2014-09-07 09:19 - 2012-06-05 09:55 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-07 09:18 - 2014-09-01 16:15 - 00000336 _____ () C:\Windows\setupact.log

2014-09-07 09:18 - 2012-06-05 09:55 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-09-07 09:18 - 2012-06-05 09:55 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-07 09:18 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-07 09:16 - 2014-08-13 21:57 - 00000914 _____ () C:\Windows\Tasks\ConduitUpdateTaskUserS-1-5-21-2984152052-1607329531-1161540839-1000UA.job

2014-09-07 09:15 - 2014-08-13 21:58 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-09-07 09:15 - 2014-08-13 21:57 - 00000862 _____ () C:\Windows\Tasks\ConduitUpdateTaskUserS-1-5-21-2984152052-1607329531-1161540839-1000Core.job

2014-09-03 19:07 - 2014-09-03 19:07 - 05048584 _____ (JAM Software ) C:\Users\Paul\Downloads\TreeSizeFreeSetup.exe

2014-09-03 19:07 - 2014-09-03 19:07 - 00000000 ____D () C:\Users\Paul\AppData\Roaming\JAM Software

2014-09-03 19:07 - 2014-09-03 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free

2014-09-03 19:07 - 2014-09-03 19:07 - 00000000 ____D () C:\Program Files (x86)\JAM Software

2014-09-03 08:05 - 2014-09-03 08:05 - 00000328 _____ () C:\Windows\PFRO.log

2014-09-03 08:05 - 2012-10-14 16:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-09-02 22:10 - 2014-09-02 22:09 - 00020720 _____ () C:\Users\Paul\Downloads\Black Magic Porter 10 gal (2).bsmx

2014-09-02 22:10 - 2013-11-24 15:34 - 00000000 ____D () C:\Users\Paul\Documents\BeerSmith2

2014-09-02 22:09 - 2014-09-02 22:09 - 00020993 _____ () C:\Users\Paul\Downloads\Black Magic Porter 10 gal (1).bsmx

2014-09-02 22:08 - 2014-09-02 22:04 - 00020720 _____ () C:\Users\Paul\Downloads\Black Magic Porter 10 gal.bsmx

2014-09-02 21:59 - 2014-07-15 17:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2014-09-02 21:59 - 2014-05-04 20:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird.bak

2014-09-02 19:02 - 2014-03-31 09:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2014-09-02 19:02 - 2013-10-24 09:45 - 00000965 _____ () C:\Users\Public\Desktop\AVG 2014.lnk

2014-09-01 17:38 - 2012-06-05 09:48 - 00000000 ____D () C:\Users\Paul\AppData\Local\VirtualStore

2014-09-01 17:30 - 2014-09-01 17:30 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013

2014-09-01 17:26 - 2014-03-15 18:49 - 00075264 _____ () C:\Users\Paul\Downloads\EZ_water_calculator_3.0.2.xls

2014-09-01 17:03 - 2014-09-01 17:03 - 00001035 _____ () C:\Users\Paul\Desktop\WinDirStat.lnk

2014-09-01 17:03 - 2014-09-01 17:03 - 00000000 ____D () C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinDirStat

2014-09-01 17:03 - 2014-09-01 17:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat

2014-09-01 17:03 - 2014-09-01 17:03 - 00000000 ____D () C:\Program Files (x86)\WinDirStat

2014-09-01 17:02 - 2014-09-01 17:02 - 00645729 _____ (WDS Team) C:\Users\Paul\Downloads\windirstat1_1_2_setup.exe

2014-09-01 16:48 - 2013-03-30 14:42 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-09-01 16:15 - 2014-09-01 16:15 - 00000000 _____ () C:\Windows\setuperr.log

2014-09-01 16:15 - 2013-10-24 09:45 - 00000000 ____D () C:\Program Files (x86)\AVG Secure Search

2014-08-30 10:03 - 2014-08-13 21:58 - 00002287 _____ () C:\Users\Paul\Desktop\U Browser.lnk

2014-08-30 09:36 - 2014-08-30 09:36 - 00002670 _____ () C:\Windows\System32\Tasks\AVG-Secure-Search-Update_0814tb_rmv

2014-08-30 09:36 - 2014-08-30 09:36 - 00002668 _____ () C:\Windows\System32\Tasks\AVG-Secure-Search-Update_0814tb_rel

2014-08-30 09:36 - 2014-08-30 09:36 - 00000376 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rel.job

2014-08-30 09:36 - 2014-08-30 09:36 - 00000000 ____D () C:\Program Files (x86)\AVG Security Toolbar

2014-08-30 09:35 - 2014-08-30 09:35 - 00000000 ____D () C:\ProgramData\Avg_Update_0814tb

2014-08-30 09:35 - 2009-07-14 00:45 - 00343720 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-28 22:07 - 2014-08-28 22:07 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe online update program

2014-08-28 22:07 - 2014-08-28 22:04 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}

2014-08-28 22:05 - 2014-08-28 22:05 - 00002229 _____ () C:\Users\Public\Desktop\AVG 1-Click Maintenance.lnk

2014-08-28 22:05 - 2014-08-28 22:05 - 00002215 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014.lnk

2014-08-28 22:05 - 2014-08-28 22:05 - 00002203 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk

2014-08-28 22:05 - 2014-08-28 22:05 - 00000000 ____D () C:\Users\Paul\AppData\Roaming\AVG

2014-08-28 22:05 - 2014-08-28 22:05 - 00000000 ____D () C:\Users\Paul\AppData\Local\AVG

2014-08-28 22:05 - 2014-08-28 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014

2014-08-28 22:05 - 2014-08-28 22:04 - 00000000 ____D () C:\ProgramData\AVG

2014-08-28 22:05 - 2012-06-07 07:55 - 00000000 ____D () C:\Program Files (x86)\AVG

2014-08-28 21:48 - 2014-08-28 21:48 - 00003118 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe

2014-08-28 21:48 - 2009-07-13 23:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-08-28 21:48 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-08-28 21:47 - 2014-08-28 21:47 - 00003090 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe

2014-08-28 21:47 - 2014-08-28 21:47 - 00003062 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe

2014-08-28 21:47 - 2014-08-28 21:47 - 00003060 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe

2014-08-28 21:47 - 2014-08-28 21:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf

2014-08-28 21:47 - 2014-08-28 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mouse and Keyboard Center

2014-08-28 21:47 - 2014-08-28 21:47 - 00000000 ____D () C:\Program Files\Microsoft Mouse and Keyboard Center

2014-08-28 21:47 - 2012-06-08 07:42 - 00003092 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe

2014-08-28 21:47 - 2012-06-05 09:55 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-08-28 21:45 - 2014-08-28 21:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf

2014-08-28 21:42 - 2013-07-17 03:01 - 00000000 ____D () C:\Windows\system32\MRT

2014-08-28 21:42 - 2012-06-07 10:22 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-08-28 21:40 - 2013-03-02 16:46 - 00000000 ____D () C:\Users\Paul\AppData\Roaming\FileZilla

2014-08-28 21:40 - 2012-06-05 13:44 - 00000000 ____D () C:\Windows\Panther