Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Slow web browsing + LiveSupport ads

slow internet windows 7 livesupport ads

  • Please log in to reply

#16
cblock

cblock

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

Alright, thanks! Here are the Frst and Addition logs respectively...

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015
Ran by Andy (administrator) on MEGATRON on 21-04-2015 12:54:57
Running from C:\Users\Andy\Desktop
Loaded Profiles: Andy (Available profiles: Andy & Guest)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
() C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
(SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8158240 2009-10-06] (Realtek Semiconductor)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [RunDLLEntry_THXCfg] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [RunDLLEntry_EptMon] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\EptMon64.dll,RunDLLEntry EptMon64
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284696 2009-10-02] (Intel Corporation)
HKLM-x32\...\Run: [ShwiconXP9106] => C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2009-07-17] (Alcor Micro Corp.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807600 2009-11-13] ()
HKLM-x32\...\Run: [PDVDDXSrv] => C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe [140520 2009-12-29] (CyberLink Corp.)
HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-10] (Creative Technology Ltd.)
HKLM-x32\...\Run: [DellSupportCenter] => C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe [206064 2009-05-21] (SupportSoft, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
HKLM-x32\...\runonceex: [ContentMerger] => c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\ContentMerger10.exe [19952 2009-06-26] (Sonic Solutions)
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-07-17] (Google Inc.)
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\...\Run: [CryptoUpdate] => C:\Windows\system32\regsvr32.exe /s "C:\Users\Andy\AppData\Roaming\Microsoft\Crypto\RSA\cert_v79_0.tpl"
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\...\Run: [AgentUpdate] => C:\Windows\system32\regsvr32.exe /s "C:\Users\Andy\AppData\Roaming\Microsoft\Crypto\RSA\cert_v79_0.tpa"
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\...\RunOnce: [Application Restart #2] => C:\Users\Andy\AppData\Local\Pokki\Engine\pokki.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-p (the data entry has 484 more characters).
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\...\RunOnce: [AgentUpdate] => C:\Windows\system32\regsvr32.exe /s "C:\Users\Andy\AppData\Roaming\Microsoft\Crypto\RSA\cert_v79_0.tpa"
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\...\RunOnce: [CryptoUpdate] => C:\Windows\system32\regsvr32.exe /s "C:\Users\Andy\AppData\Roaming\Microsoft\Crypto\RSA\cert_v79_0.tpl"
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-03-19] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-10-25]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2015-03-06]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk [2010-06-16]
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2010-05-24]
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2010-05-24]
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk [2013-09-01]
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
SearchScopes: HKLM -> {F194DCC1-81E2-4376-A2E8-7DEE19AB5E1E} URL = http://www.bing.com/...rc=IE-SearchBox
SearchScopes: HKLM-x32 -> {8CFB28CC-06BF-4CBF-97AA-6F325E8700B0} URL = http://www.bing.com/...rc=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2277838659-3731106266-1447913230-1000 -> DefaultScope {BE71D4E4-5D2F-488A-93FC-77D774BEA013} URL = https://search.yahoo...p={searchTerms}
SearchScopes: HKU\S-1-5-21-2277838659-3731106266-1447913230-1000 -> {BE71D4E4-5D2F-488A-93FC-77D774BEA013} URL = https://search.yahoo...p={searchTerms}
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-24] (Sun Microsystems, Inc.)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-05-24] (Sun Microsystems, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
Toolbar: HKU\S-1-5-21-2277838659-3731106266-1447913230-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2009-11-27] (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62
 
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-05-06] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
 
Chrome: 
=======
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.7.771\_platform_specific\win_x86\widevinecdmadapter.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\internal-nacl-plugin No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.170.4) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeploytk.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java™ Platform SE 6 U17) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
CHR Profile: C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Bookmark Manager) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-21]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]
CHR Extension: (Google Wallet) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-17]
CHR Profile: C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Docs) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-10]
CHR Extension: (Google Drive) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-10]
CHR Extension: (YouTube) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-10]
CHR Extension: (Google Search) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-10]
CHR Extension: (Linksicle) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gohhkpbcblcpnaghfmnkfangnkkagacg [2013-11-17]
CHR Extension: (DefaultTab) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc [2013-11-10]
CHR Extension: (bomlabio) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ljidjdddaoiogpbmniipclcppkoembao [2013-11-10]
CHR Extension: (InternetHelper3.1) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nemfjadlboooiffmcelkafilagddogim [2013-11-10]
CHR Extension: (Google Wallet) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-10]
CHR Extension: (Gmail) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-10]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2009-06-09] (Stardock Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-12-11] (Brother Industries Ltd.)
R1 lsnfd; C:\Windows\System32\drivers\lsnfd.sys [58192 2013-10-02] (Linksicle)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-04-21] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2013-03-05] (Realtek Semiconductor Corporation                           )
S1 RxFilter; C:\Windows\SysWOW64\DRIVERS\RxFilter.sys [65520 2009-06-26] (Sonic Solutions)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-04-21 12:54 - 2015-04-21 12:54 - 00000000 ____D () C:\Users\Andy\Desktop\FRST-OlderVersion
2015-04-20 18:28 - 2015-04-21 12:53 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-20 18:27 - 2015-04-20 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-20 18:27 - 2015-04-20 18:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-20 18:27 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-20 18:27 - 2015-03-17 06:15 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-20 18:22 - 2015-04-20 18:25 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Andy\Desktop\mbam-setup-2.1.4.1018.exe
2015-04-19 21:37 - 2015-04-19 21:37 - 00000981 _____ () C:\Users\Andy\Desktop\JRT.txt
2015-04-19 21:35 - 2015-04-19 21:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-MEGATRON-Windows-7-Home-Premium-(64-bit).dat
2015-04-19 21:35 - 2015-04-19 21:35 - 00000000 ____D () C:\RegBackup
2015-04-19 21:31 - 2015-04-19 21:32 - 02684539 _____ (Thisisu) C:\Users\Andy\Desktop\JRT.exe
2015-04-19 21:20 - 2015-04-19 21:20 - 02217984 _____ () C:\Users\Andy\Desktop\adwcleaner_4.201.exe
2015-04-18 20:30 - 2015-04-21 12:56 - 00019767 _____ () C:\Users\Andy\Desktop\FRST.txt
2015-04-18 20:30 - 2015-04-18 20:30 - 00022976 _____ () C:\Users\Andy\Desktop\Addition.txt
2015-04-18 19:29 - 2015-04-18 19:29 - 00022978 _____ () C:\Users\Andy\Downloads\Addition.txt
2015-04-18 19:28 - 2015-04-21 12:55 - 00000000 ____D () C:\FRST
2015-04-18 19:28 - 2015-04-18 19:29 - 00052579 _____ () C:\Users\Andy\Downloads\FRST.txt
2015-04-18 19:27 - 2015-04-21 12:54 - 02099712 _____ (Farbar) C:\Users\Andy\Desktop\FRST64.exe
2015-04-14 20:53 - 2015-04-14 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-04-14 20:04 - 2015-04-01 17:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-14 20:04 - 2015-04-01 16:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-14 20:04 - 2015-03-24 20:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-14 20:04 - 2015-03-24 20:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-14 20:04 - 2015-03-24 20:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-14 20:04 - 2015-03-24 20:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-14 20:04 - 2015-03-24 20:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-14 20:04 - 2015-03-24 20:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-14 20:04 - 2015-03-24 20:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-14 20:04 - 2015-03-24 20:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-14 20:04 - 2015-03-24 20:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-14 20:04 - 2015-03-24 20:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-14 20:04 - 2015-03-24 20:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-14 20:04 - 2015-03-24 20:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-14 20:04 - 2015-03-24 20:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-14 20:04 - 2015-03-24 20:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-14 20:04 - 2015-03-24 20:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-14 20:04 - 2015-03-24 20:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-14 20:04 - 2015-03-22 20:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-14 20:04 - 2015-03-22 20:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-14 20:04 - 2015-03-22 20:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-14 20:04 - 2015-03-22 20:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-14 20:04 - 2015-03-22 20:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-14 20:04 - 2015-03-22 20:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-14 20:04 - 2015-03-22 20:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 20:04 - 2015-03-22 20:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-14 20:04 - 2015-03-16 22:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-14 20:04 - 2015-03-16 22:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-14 20:04 - 2015-03-16 22:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-14 20:04 - 2015-03-16 22:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-14 20:04 - 2015-03-16 22:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-14 20:04 - 2015-03-16 22:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-14 20:04 - 2015-03-16 22:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-14 20:04 - 2015-03-16 22:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-14 20:04 - 2015-03-16 22:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-14 20:04 - 2015-03-16 22:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-14 20:04 - 2015-03-16 22:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-14 20:04 - 2015-03-16 22:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-14 20:04 - 2015-03-16 22:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-14 20:04 - 2015-03-16 22:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-14 20:04 - 2015-03-16 22:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 22:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-14 20:04 - 2015-03-16 22:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-14 20:04 - 2015-03-16 21:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-14 20:04 - 2015-03-16 21:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-14 20:04 - 2015-03-16 21:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-14 20:04 - 2015-03-16 21:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-14 20:04 - 2015-03-16 21:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-14 20:04 - 2015-03-16 21:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-14 20:04 - 2015-03-16 21:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-14 20:04 - 2015-03-16 21:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-14 20:04 - 2015-03-16 21:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-14 20:04 - 2015-03-16 21:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-14 20:04 - 2015-03-16 21:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-14 20:04 - 2015-03-16 21:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-14 20:04 - 2015-03-16 21:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-14 20:04 - 2015-03-16 21:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-14 20:04 - 2015-03-16 21:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-14 20:04 - 2015-03-16 21:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-14 20:04 - 2015-03-16 21:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-14 20:04 - 2015-03-16 21:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-14 20:04 - 2015-03-16 21:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 21:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 20:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-14 20:04 - 2015-03-16 20:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-14 20:04 - 2015-03-16 20:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 20:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 20:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:04 - 2015-03-16 20:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:04 - 2015-03-12 21:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-14 20:04 - 2015-03-12 21:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-14 20:04 - 2015-03-12 21:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-14 20:04 - 2015-03-12 21:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-14 20:04 - 2015-03-12 21:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-14 20:04 - 2015-03-12 21:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-14 20:04 - 2015-03-12 21:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-14 20:04 - 2015-03-12 21:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-14 20:04 - 2015-03-12 21:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-14 20:04 - 2015-03-12 21:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-14 20:04 - 2015-03-12 20:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-14 20:04 - 2015-03-12 20:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-14 20:04 - 2015-03-12 20:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-14 20:04 - 2015-03-12 20:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-14 20:04 - 2015-03-12 20:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-14 20:04 - 2015-03-12 20:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-14 20:04 - 2015-03-12 20:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-14 20:04 - 2015-03-12 20:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-14 20:04 - 2015-03-12 20:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-04-14 20:04 - 2015-03-12 20:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-14 20:04 - 2015-03-12 20:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-14 20:04 - 2015-03-12 20:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-14 20:04 - 2015-03-12 20:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-14 20:04 - 2015-03-12 20:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-14 20:04 - 2015-03-12 20:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-14 20:04 - 2015-03-12 20:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-14 20:04 - 2015-03-12 20:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-14 20:04 - 2015-03-12 20:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-14 20:04 - 2015-03-12 20:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-14 20:04 - 2015-03-12 20:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-14 20:04 - 2015-03-12 20:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-14 20:04 - 2015-03-12 20:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-14 20:04 - 2015-03-12 20:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-14 20:04 - 2015-03-12 20:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-14 20:04 - 2015-03-12 20:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-14 20:04 - 2015-03-12 20:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-14 20:04 - 2015-03-12 20:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-14 20:04 - 2015-03-12 20:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-14 20:04 - 2015-03-12 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-14 20:04 - 2015-03-12 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-14 20:04 - 2015-03-12 20:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-14 20:04 - 2015-03-12 20:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-14 20:04 - 2015-03-12 19:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-14 20:04 - 2015-03-12 19:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-14 20:04 - 2015-03-12 19:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-14 20:04 - 2015-03-12 19:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-14 20:04 - 2015-03-12 19:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-14 20:04 - 2015-03-12 19:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-14 20:04 - 2015-03-12 19:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-14 20:04 - 2015-03-12 19:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-04-14 20:04 - 2015-03-12 19:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-14 20:04 - 2015-03-12 19:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-14 20:04 - 2015-03-12 19:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-14 20:04 - 2015-03-12 19:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-14 20:04 - 2015-03-12 19:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-14 20:04 - 2015-03-12 19:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-14 20:04 - 2015-03-09 20:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-14 20:04 - 2015-03-09 20:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-14 20:04 - 2015-03-09 20:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-14 20:04 - 2015-03-09 20:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-14 20:04 - 2015-03-04 22:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-14 20:04 - 2015-03-04 21:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-14 20:04 - 2015-02-24 20:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-14 20:03 - 2015-03-03 21:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-14 20:03 - 2015-03-03 21:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-14 20:03 - 2015-03-03 21:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-05 01:30 - 2015-04-05 01:30 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-05 01:30 - 2015-04-05 01:30 - 00000000 ___SD () C:\Windows\system32\GWX
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-04-21 12:56 - 2009-07-13 22:10 - 01408949 _____ () C:\Windows\WindowsUpdate.log
2015-04-21 12:53 - 2013-07-17 21:11 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-21 12:53 - 2010-06-16 17:18 - 00000000 ____D () C:\Users\Andy\AppData\Local\SoftThinks
2015-04-21 12:53 - 2010-05-24 20:26 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2015-04-21 12:53 - 2010-05-24 20:26 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2015-04-21 12:53 - 2010-05-24 20:05 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2015-04-21 12:51 - 2010-05-24 21:53 - 00160380 _____ () C:\Windows\PFRO.log
2015-04-21 12:51 - 2009-07-13 22:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-21 12:51 - 2009-07-13 21:51 - 00079887 _____ () C:\Windows\setupact.log
2015-04-21 01:28 - 2013-01-22 00:50 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-21 01:12 - 2013-07-17 21:11 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-21 01:05 - 2014-07-12 05:48 - 00190976 _____ () C:\Users\Andy\Desktop\writersblock.wps
2015-04-21 01:05 - 2013-01-28 12:21 - 00021838 _____ () C:\Users\Andy\AppData\Roaming\wklnhst.dat
2015-04-21 01:05 - 2009-07-13 22:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2015-04-20 18:27 - 2013-12-01 14:15 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\Malwarebytes
2015-04-20 18:27 - 2013-12-01 14:14 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-04-20 18:27 - 2013-12-01 14:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-20 17:39 - 2009-07-13 21:45 - 00022464 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-20 17:39 - 2009-07-13 21:45 - 00022464 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-20 17:35 - 2009-07-13 22:13 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-19 21:26 - 2013-12-01 14:05 - 00000000 ____D () C:\AdwCleaner
2015-04-17 23:24 - 2013-07-17 21:11 - 00002185 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-17 22:28 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-15 12:28 - 2013-01-22 00:50 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 12:28 - 2013-01-22 00:50 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-15 12:28 - 2013-01-22 00:50 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 11:52 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\rescache
2015-04-15 11:49 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-15 00:40 - 2014-12-10 04:17 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-15 00:40 - 2014-05-06 13:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-15 00:40 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-14 20:54 - 2014-02-25 01:28 - 00774632 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-14 20:53 - 2010-05-24 20:12 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-14 20:53 - 2010-05-24 20:12 - 00000000 ____D () C:\ProgramData\Skype
2015-04-01 18:01 - 2014-09-24 02:37 - 00321536 _____ () C:\Users\Andy\Desktop\tribulations3.wps
2015-03-26 23:35 - 2014-11-14 00:25 - 00066048 _____ () C:\Users\Andy\Desktop\c13.wps
2015-03-23 12:19 - 2009-07-13 22:08 - 00032652 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-22 01:12 - 2013-01-21 07:29 - 00000000 ____D () C:\Users\Andy\AppData\Local\Adobe
 
==================== Files in the root of some directories =======
 
2013-01-28 12:21 - 2015-04-21 01:05 - 0021838 _____ () C:\Users\Andy\AppData\Roaming\wklnhst.dat
2013-04-20 00:27 - 2013-04-20 00:28 - 0000084 _____ () C:\Users\Andy\AppData\Local\DVDPATH.TXT
 
Some content of TEMP:
====================
C:\Users\Andy\AppData\Local\Temp\Quarantine.exe
C:\Users\Andy\AppData\Local\Temp\sqlite3.dll
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-04-15 11:45
 
==================== End Of Log ============================
 
 
 
 
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-04-2015
Ran by Andy at 2015-04-21 12:56:41
Running from C:\Users\Andy\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader 9.1.2 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A91000000001}) (Version: 9.1.2 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{B678797F-DF38-4556-8A31-8B818E261868}) (Version: 8.0.0.23 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Banctec Service Agreement (HKLM-x32\...\{42D68A86-DB1C-4256-B8C9-5D0D92919AF5}) (Version: 2.0.0 - Dell Inc.)
Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
BitTorrent (HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\...\BitTorrent) (Version: 7.9.0.30621 - BitTorrent Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell)
Dell DataSafe Online (HKLM-x32\...\{13766F76-6C8C-4E57-A9F3-3212D1C6E0D1}) (Version: 1.2.0009 - Dell, Inc.)
Dell Dock (HKLM-x32\...\Dell Dock) (Version:  - Stardock Corporation)
Dell Dock (Version: 2.0 - Stardock Corporation) Hidden
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell Support Center (Support Software) (HKLM-x32\...\{E3BFEE55-39E2-4BE0-B966-89FE583822C1}) (Version: 2.5.09100 - Dell)
DirectXInstallService (x32 Version: 9.0.2 - Roxio) Hidden
EMC 10 Content (x32 Version: 1.0.035 - Roxo, Inc.) Hidden
EMCGadgets64 (Version: 1.0.302 - Sonic) Hidden
Free YouTube To MP3 Converter 4.4.1 (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.4.1 - cyan soft ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GoToAssist 8.0.0.514 (HKLM-x32\...\GoToAssist) (Version:  - )
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.0.1006 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.0.1037 - Intel Corporation)
iTunes (HKLM\...\{F46AA0F1-E284-4878-A462-5F11B9166C0E}) (Version: 11.4.0.18 - Apple Inc.)
Java™ 6 Update 17 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416017FF}) (Version: 6.0.170 - Sun Microsystems, Inc.)
Java™ 6 Update 17 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216017FF}) (Version: 6.0.170 - Sun Microsystems, Inc.)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 7.38 - mIRC Co. Ltd.)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Multimedia Card Reader (HKLM-x32\...\InstallShield_{9F0A32A5-4EBF-4B9D-A3CD-31579F2E1400}) (Version: 1.4.915.1 - Fitipower)
Multimedia Card Reader (x32 Version: 1.4.915.1 - Fitipower) Hidden
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation)
PowerDVD DX (HKLM-x32\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 8.3.6029 - CyberLink Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5953 - Realtek Semiconductor Corp.)
Roxio Easy CD and DVD Burning (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio)
Roxio File Backup (Version: 1.3.0 - Roxio) Hidden
Skype Toolbars (HKLM-x32\...\{981029E0-7FC9-4CF3-AB39-6F133621921A}) (Version: 1.0.4036 - Skype Technologies S.A.)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
Stamps.com (HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\...\Stamps.com) (Version:  - Stamps.com, Inc.)
Stamps.com (x32 Version: 10.1.1.2456 - Stamps.com, Inc.) Hidden
Tenorshare iPhone Data Recovery  (HKLM-x32\...\Tenorshare iPhone Data Recovery) (Version:  - Tenorshare, Inc.)
THX TruStudio PC (HKLM-x32\...\{010A785B-F920-4350-821B-6309909C20BB}) (Version: 1.0 - Creative Technology Limited)
TP-LINK TL-WN725N_TL-WN723N Driver (HKLM-x32\...\{3C3F9CEB-2C5A-4A47-8EAA-DA76037546BA}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
VD64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Wondershare Dr.Fone for iOS(Build 5.4.0.15) (HKLM-x32\...\{A26F8BBD-EC10-4bdc-8AD8-F146825A8A63}_is1) (Version: 5.4.0.15 - Wondershare Software Co.,Ltd.)
XChat 2 (remove only) (HKLM-x32\...\xchat) (Version:  - )
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 
==================== Restore Points  =========================
 
25-03-2015 00:59:47 Windows Update
31-03-2015 11:54:40 Windows Update
03-04-2015 13:51:25 Windows Update
05-04-2015 01:30:09 Windows Update
10-04-2015 20:59:36 Windows Update
14-04-2015 20:03:05 Windows Update
14-04-2015 20:51:36 Windows Update
18-04-2015 21:59:24 Restore Point Created by FRST
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 19:34 - 2015-04-18 21:59 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {0471A17E-892B-42C0-8619-A00D3638B306} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {4E74DABE-3BAF-4516-8AEA-656664DE9277} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {58E36838-2AEA-49E7-AC62-9BE997141038} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {79AE6BBB-8449-472A-AE71-882777FB0F2B} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {A4B07EA9-09DF-4B3A-B5B2-4F293FDAB827} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {E98AC814-F896-4224-835B-5EC8A4BFD1E6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {EB1237D4-6F11-4BD5-9C91-B796C113E5AC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {F9EA017C-1D09-472C-B8C9-04DAE8D09349} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) ==============
 
2014-11-27 20:49 - 2015-04-17 22:14 - 00247808 ___SH () C:\Users\Andy\AppData\Roaming\Microsoft\Crypto\RSA\cert_v79_0.tpa
2015-03-06 05:26 - 2013-01-10 20:09 - 00848384 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2014-10-16 01:27 - 2014-10-16 01:27 - 00472576 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\c29d8779b3a3599f44e21e017541cd0c\VistaBridgeLibrary.ni.dll
2009-11-13 14:15 - 2009-11-13 14:15 - 01807600 _____ () C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
2010-05-24 20:05 - 2011-08-18 09:05 - 02751808 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-07-31 12:16 - 2014-07-31 12:16 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-05-24 20:01 - 2009-10-02 11:18 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll
2015-03-06 05:27 - 2013-01-10 19:32 - 01411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2015-03-06 05:26 - 2013-01-10 20:16 - 00193024 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2015-03-06 05:26 - 2013-01-07 17:03 - 00297472 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJRtl.dll
2009-11-13 14:15 - 2009-11-13 14:15 - 00275696 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.dll
2009-11-13 14:15 - 2009-11-13 14:15 - 00058608 _____ () C:\Program Files (x86)\Dell DataSafe Online\BalloonWindow.dll
2009-11-13 14:15 - 2009-11-13 14:15 - 00095472 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbUI.dll
2009-11-13 14:15 - 2009-11-13 14:15 - 00152816 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.XmlSerializers.dll
2009-11-13 14:15 - 2009-11-13 14:15 - 00017648 _____ () C:\Program Files (x86)\Dell DataSafe Online\cpputils.dll
2015-04-17 23:24 - 2015-04-13 14:55 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libglesv2.dll
2015-04-17 23:24 - 2015-04-13 14:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libegl.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== EXE Association (whitelisted) ===============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 209.18.47.61 - 209.18.47.62
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-2277838659-3731106266-1447913230-500 - Administrator - Disabled)
Andy (S-1-5-21-2277838659-3731106266-1447913230-1000 - Administrator - Enabled) => C:\Users\Andy
Guest (S-1-5-21-2277838659-3731106266-1447913230-501 - Limited - Enabled) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-2277838659-3731106266-1447913230-1002 - Limited - Enabled)
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (04/20/2015 07:09:54 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Please use sxstrace.exe for detailed diagnosis.
 
Error: (04/19/2015 00:32:35 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Please use sxstrace.exe for detailed diagnosis.
 
Error: (04/18/2015 09:59:23 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.
 
 
Operation:
   Gathering Writer Data
 
Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {70b61494-b01f-4561-8357-d28411dce470}
 
Error: (04/18/2015 08:52:01 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Please use sxstrace.exe for detailed diagnosis.
 
Error: (04/17/2015 01:11:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17051
 
Error: (04/17/2015 01:11:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17051
 
Error: (04/17/2015 01:11:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (04/17/2015 01:11:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 16052
 
Error: (04/17/2015 01:11:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 16052
 
Error: (04/17/2015 01:11:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
 
System errors:
=============
Error: (04/21/2015 00:53:31 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.
 
Error: (04/21/2015 00:51:49 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
RxFilter
 
Error: (04/21/2015 00:51:44 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.
 
Module Path: C:\Windows\system32\Rtlihvs.dll
Error Code: 126
 
Error: (04/20/2015 05:32:11 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.
 
Error: (04/20/2015 05:31:41 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.
 
Error: (04/20/2015 05:31:08 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
RxFilter
 
Error: (04/20/2015 05:31:02 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.
 
Module Path: C:\Windows\system32\Rtlihvs.dll
Error Code: 126
 
Error: (04/20/2015 00:37:45 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.
 
Module Path: C:\Windows\system32\Rtlihvs.dll
Error Code: 126
 
Error: (04/20/2015 00:36:51 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.
 
Error: (04/20/2015 00:36:15 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
RxFilter
 
 
Microsoft Office Sessions:
=========================
Error: (04/20/2015 07:09:54 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8
 
Error: (04/19/2015 00:32:35 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8
 
Error: (04/18/2015 09:59:23 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Access is denied.
 
 
Operation:
   Gathering Writer Data
 
Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {70b61494-b01f-4561-8357-d28411dce470}
 
Error: (04/18/2015 08:52:01 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8
 
Error: (04/17/2015 01:11:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17051
 
Error: (04/17/2015 01:11:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17051
 
Error: (04/17/2015 01:11:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (04/17/2015 01:11:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 16052
 
Error: (04/17/2015 01:11:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 16052
 
Error: (04/17/2015 01:11:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i7 CPU 860 @ 2.80GHz
Percentage of memory in use: 38%
Total physical RAM: 8151.08 MB
Available physical RAM: 5044.57 MB
Total Pagefile: 16300.35 MB
Available Pagefile: 13053.83 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
 
==================== Drives ================================
 
Drive c: (OS) (Fixed) (Total:921.57 GB) (Free:790.68 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 8A427EA7)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=9.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=921.6 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================

  • 0

Advertisements


#17
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts

PS: Should I go ahead and remove the "Non-Malware"? 203 of them... but it only offers the option to remove. No quarantine is offered.

I would go ahead an remove those, sorry forgot to answer that before. Looking at log now.

Next
Please remove these programs from your programs an features list, Start > Control panel > Programs an features. In the list find the program listed below and uninstall it. Out of date Java is an infection risk....
  • Java™ 6 Update 17 (64-bit)
  • Java™ 6 Update 17 (HKLM-x32
Note
Due to multiple security problems with Java we are now recommending that it not be installed unless you absolutely know you need it.
I would uninstall it from the programs an Features menu anything called Java. Start > Control Panel > Programs & Features, uninstall all Java.

Next
Out of date Adobe flash player installed!You should ensure you use the latest Adobe flash player and install any security updates that are released. You can download the latest Flashplayer and updates from Here.Please uncheck any optional offers before downloading.


Next
Go to http://www.speedtest.net/ and click on Begin Test
When the Test finishes click on Share This Result and then select Forum then Copy then move to a reply and Ctrl + v

Next
A few items to fix:
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Open notepad (Start =>All Programs => Accessories => Notepad).
Copy/Paste the contents of the code box below into Notepad.[/b]
start
CloseProcesses:
CreateRestorePoint:
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.7.771\_platform_specific\win_x86\widevinecdmadapter.dll No File
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\internal-nacl-plugin No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll No File
C:\Users\Andy\AppData\Local\Temp\Quarantine.exe
C:\Users\Andy\AppData\Local\Temp\sqlite3.dll
Emptytemp:
Click Format and ensure Wordwrap is unchecked.
Save as Fixlist.txt to your Desktop (Must be in this location)
Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

Note: If the tool warns you about the version you're using being an outdated version please download and run the updated version.

In your next reply post;
1. Fixlog.txt.
2. Speed test results.
3. Not sure what's going on with the desktop icons, tell me how they are.

Thanks
Joe :)
  • 0

#18
cblock

cblock

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

Thanks, here is the Malwarebytes log.

 

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 4/21/2015
Scan Time: 10:48:18 PM
Logfile: malwarelog.txt
Administrator: Yes
 
Version: 2.01.4.1018
Malware Database: v2015.04.22.01
Rootkit Database: v2015.04.21.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Andy
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 388397
Time Elapsed: 6 min, 38 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 12
PUP.Optional.DefaultTab.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, Quarantined, [04950669a9e1c96d0d5e68e0966d1de3], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, Quarantined, [04950669a9e1c96d0d5e68e0966d1de3], 
PUP.Optional.InternetHelperTB.A, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{07CBF788-1359-421B-A4E3-5A8D041B90A3}, Quarantined, [90098ae54c3e072fb63e340ea75c7888], 
PUP.Optional.InternetHelperTB.A, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{07CBF788-1359-421B-A4E3-5A8D041B90A3}, Quarantined, [90098ae54c3e072fb63e340ea75c7888], 
PUP.Optional.MixiDJ.C, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{E4C3A8B6-7724-45D1-A629-17B69118EBCD}, Quarantined, [18810d6290fa7abcdb08d4678e752ed2], 
PUP.Optional.MixiDJ.C, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{E4C3A8B6-7724-45D1-A629-17B69118EBCD}, Quarantined, [18810d6290fa7abcdb08d4678e752ed2], 
PUP.Optional.Linksicle.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{2AD2D8CA-D24D-40D2-A8FC-46952409BA9A}, Quarantined, [7821076895f5171ff872f84d5da60000], 
PUP.Optional.Bomlabio.A, HKLM\SOFTWARE\WOW6432NODE\bomlabio, Quarantined, [3465214e5a30eb4bda55023c07fecf31], 
PUP.Optional.Linksicle, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LSNFD, Quarantined, [3d5cc0af9bef63d35ff753be58ac5da3], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, Quarantined, [1f7abfb0c3c7fb3b343f2ae936ce9868], 
PUP.Optional.MixiDJToolbar.A, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\APPDATALOW\SOFTWARE\MixiDJ_V8, Quarantined, [b4e57df2becca2942f5b42c90004b44c], 
PUP.Optional.PriceGong.A, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Quarantined, [f8a1105feaa015214cbe1abf7f84cb35], 
 
Registry Values: 7
PUP.Optional.InternetHelperTB.A, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{07CBF788-1359-421B-A4E3-5A8D041B90A3}, Ë?÷Ã? Y  B¤ãZ  Â£, Quarantined, [90098ae54c3e072fb63e340ea75c7888]
PUP.Optional.MixiDJ.C, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{E4C3A8B6-7724-45D1-A629-17B69118EBCD}, ¶¨Ã?ä$wÃ?E¦) ¶â?? ëÃ, Quarantined, [18810d6290fa7abcdb08d4678e752ed2]
PUP.Optional.InternetHelperTB.A, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{07CBF788-1359-421B-A4E3-5A8D041B90A3}, Quarantined, [01980a65107aa78fc034ac96d92a27d9], 
PUP.Optional.MixiDJ.C, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{E4C3A8B6-7724-45D1-A629-17B69118EBCD}, Quarantined, [8b0efd72dcaeaa8c02e1eb50b350c53b], 
PUP.Optional.Linksicle, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LSNFD|ImagePath, system32\drivers\lsnfd.sys, Quarantined, [3d5cc0af9bef63d35ff753be58ac5da3]
PUP.Optional.Spigot.A, HKU\S-1-5-21-2277838659-3731106266-1447913230-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BE71D4E4-5D2F-488A-93FC-77D774BEA013}|URL, https://search.yahoo...={searchTerms},Quarantined, [3e5b8de2c5c5a88e548d338ff112dc24]
PUP.Optional.ConduitSearchProtect, HKU\S-1-5-21-2277838659-3731106266-1447913230-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SearchProtect, C:\Users\Guest\AppData\Roaming\SearchProtect\bin\cltmng.exe, Quarantined, [c3d65a15226862d4e78fc55e30d512ee]
 
Registry Data: 0
(No malicious items detected)
 
Folders: 41
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\AddedAppDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\DefualtImages, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\DetectedAppDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\EngineFirstTimeDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\NewSearchProtectorDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\NewSearchProtectorDialog\images, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorBubbleDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorBubbleDialog\images, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorDialog\Images, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorRetakeoverDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorRetakeoverDialog\Images, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\images, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarUntrustedAppsApprovalDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\UntrustedAddedAppDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\UntrustedAppApprovalDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\UntrustedAppPendingDialog, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\EmailNotifier, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\ExternalComponent, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Logs, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\MyStuffApps, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\plugins, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\RadioPlayer, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\AppsMetaData, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\DynamicDialogs, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\ToolbarLogin, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\ToolbarSettings, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\ToolbarTranslation, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_en, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_en\ToolbarTranslation, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\SearchInNewTab, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MySpeedDial.A, C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff, Quarantined, [1e7b9bd4e4a6a59121f17a2040c3c739], 
 
Files: 143
PUP.Optional.Bandoo, C:\Users\Andy\Downloads\iLividSetup-r1236-n-bc.exe, Quarantined, [50494728a7e36acc9943f24812ef5ea2], 
PUP.Optional.AirAdInstaller, C:\Users\Andy\Downloads\Setup (1).exe, Quarantined, [e5b4a9c6147665d177d598a402fe2ed2], 
PUP.Optional.OptimumInstaller.A, C:\Users\Andy\Downloads\setup (2).exe, Quarantined, [bfda412ef1990c2a78339ce2818026da], 
PUP.Optional.OptimumInstaller.A, C:\Users\Andy\Downloads\setup (3).exe, Quarantined, [7b1ef37c99f159dd218aadd157aaa65a], 
PUP.Optional.AirAdInstaller, C:\Users\Andy\Downloads\Setup (4).exe, Quarantined, [9504d19ebdcd76c071db9f9dcf31eb15], 
PUP.Optional.AirAdInstaller, C:\Users\Andy\Downloads\Setup (5).exe, Quarantined, [6d2c59165b2f3ef82725ea52ca3610f0], 
PUP.Optional.AirAdInstaller, C:\Users\Andy\Downloads\Setup (6).exe, Quarantined, [6039b7b864261125c18b4af2f10f8e72], 
PUP.Optional.OptimumInstaller.A, C:\Users\Andy\Downloads\setup (7).exe, Quarantined, [bfda432c24662d09c3e80c721fe28080], 
PUP.Optional.OptimumInstaller.A, C:\Users\Andy\Downloads\setup (8).exe, Quarantined, [66337bf4d4b655e1bdee3f3f50b1ce32], 
PUP.Optional.AirAdInstaller, C:\Users\Andy\Downloads\Setup (9).exe, Quarantined, [ebae4728b8d24beb66e644f8b947d729], 
PUP.Optional.AirAdInstaller, C:\Users\Andy\Downloads\Setup.exe, Quarantined, [f5a4de915139c86e4a02d16b52ae7789], 
PUP.Optional.DomaIQ.Gen, C:\Users\Andy\Downloads\java_installer.exe, Quarantined, [88112a45cac042f47501be1451b00000], 
PUP.Optional.Linksicle, C:\Windows\System32\drivers\lsnfd.sys, Quarantined, [3d5cc0af9bef63d35ff753be58ac5da3], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\hktbMixi.dll, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\ldrtbMixi.dll, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\tbMix1.dll, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\tbMixi.dll, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\ThirdPartyComponents.xml, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\toolbar.cfg, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_MarketPlace_78_f1b_789d74ff-86a2-4fb9-9903-16e7b2641f1b_Appearance_634825030599553405_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_MarketPlace_93_ce3_93951332-f9a7-4af7-af02-17ec3d749ce3_Appearance_634159521796627506_24x24_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_MarketPlace_97_5e6_9739aadc-99e3-4b66-8c1e-bc6ae6cd55e6_Appearance_634165981520378434_24x24_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___weather_conduit_com_images_weather_Default_sunny_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___weather_conduit_com_images_weather_Default_sunny_night_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_MoreFromPublisher_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_More_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Options_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Privacy_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Refresh_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Upgrade_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_ClientImages_radio_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_eula_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_main_menu_home_page_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_bankImages_ConduitEngine_ContextMenu_LikeIcon_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_MarketPlace_71_92f_71422c68-106e-4efa-a402-2c5d0c3ab92f_Appearance_634374241008412502_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_Menu_uninstall-icon_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_6_325_CT3255406_Images_634865922899792583_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_6_325_CT3255406_images_634865923226984272_24PX_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_6_325_CT3255406_Skins_634865921557431652_28px_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_conduit_com_bankimages_commandcomps_block_gif.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_About_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Browse_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Contact_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Hide_png.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\RoundedCornersIE9.css, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\DialogsAPI.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\excanvas.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\generalDialogStyle.css, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\PIE.htc, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\RoundedCorners.css, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\settings.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\version.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\AddedAppDialog\app-added.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\AddedAppDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\DefualtImages\icon.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\DetectedAppDialog\app-2go.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\DetectedAppDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\EngineFirstTimeDialog\EngineFirstTimeDialog.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\EngineFirstTimeDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\EngineFirstTimeDialog\right-click.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\NewSearchProtectorDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\NewSearchProtectorDialog\SearchProtector.css, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\NewSearchProtectorDialog\SearchProtector.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\NewSearchProtectorDialog\images\ok-button.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\NewSearchProtectorDialog\images\separation-line.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\NewSearchProtectorDialog\images\warning.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorBubbleDialog\bubble.css, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorBubbleDialog\bubble.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorBubbleDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorBubbleDialog\images\information.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorBubbleDialog\images\x-default-LTR.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorBubbleDialog\images\x-default-RTL.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-LTR.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-RTL.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorDialog\SearchProtector.css, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorDialog\SearchProtector.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorDialog\Images\info.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorDialog\Images\ok-on.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorDialog\Images\ok.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorRetakeoverDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorRetakeoverDialog\SearchProtectorRetakeover.css, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorRetakeoverDialog\SearchProtectorRetakeover.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorRetakeoverDialog\Images\Icon.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorRetakeoverDialog\Images\info.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorRetakeoverDialog\Images\ok-on.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\SearchProtectorRetakeoverDialog\Images\ok.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.css, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\images\app-store-icon.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\images\arrow.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\images\divider.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\images\emailNotifier.gif, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\images\facebook.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\images\radio.GIF, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\images\Thumbs.db, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\images\truste_welcome.GIF, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarFirstTimeDialog\images\weather.GIF, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarUntrustedAppsApprovalDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\ToolbarUntrustedAppsApprovalDialog\ToolbarUntrustedAppsApprovalDialog.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\UntrustedAddedAppDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\UntrustedAddedAppDialog\UT-app-dialog-added.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\UntrustedAppApprovalDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\UntrustedAppApprovalDialog\UT-app-dialog-needs-your-approval.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\UntrustedAppPendingDialog\main.html, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Dialogs\UntrustedAppPendingDialog\UT-app-dialog-is-waiting.js, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=GottenApps&locale=en&ctid=CT3287822.xml, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=OtherApps&locale=en&ctid=CT3287822.xml, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=SharedApps&locale=en&ctid=CT3287822.xml, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=en&ctid=CT3287822&UM=UM_UNINSTALL_ID.xml, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=en&ctid=CT3287822.xml, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\manifest.xml, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin\PriceGongIE.dll, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin\PriceGong_16.png, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\RadioPlayer\IP_Stations_Media_List.xml, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\RadioPlayer\Predefined_Media_List.xml, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\AppsMetaData\data.bck.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\AppsMetaData\data.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\DynamicDialogs\data.bck.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\DynamicDialogs\data.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\ToolbarLogin\data.bck.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\ToolbarLogin\data.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\ToolbarSettings\data.bck.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\ToolbarSettings\data.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_CT3287822\ToolbarTranslation\data.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_en\ToolbarTranslation\data.bck.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\Repository\conduit_CT3287822_en\ToolbarTranslation\data.txt, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
PUP.Optional.MixiDJToolbar.A, C:\Users\Guest\AppData\LocalLow\MixiDJ_V8\SearchInNewTab\SearchInNewTabContent.xml, Quarantined, [7e1b006f79110135eb58b6dcca39ba46], 
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)

  • 0

#19
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts
I made an error in the adobe up date. You need to up date Adobe Reader not flash as Iindicated.

Your Adobe reader needs updating. You should ensure you use the latest Adobe Acrobat Reader and install any security updates that are released. You can download the latest reader and updates from here.
Note Important: Please uncheck any optional offers before downloading. This is what users do they forget to un-check the optional installs, don't just click the download button take your time an look at the page, un-check then download. This particular page tries to install McAfee Scanner so un-check it, then click download.
  • 0

#20
cblock

cblock

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

Speedtest result... I think I'm gonna have to call them. I'm not sure what package I have for sure, but I believe it's supposed to be 30Megs. The speed test showed it's only 3Megs...

 

4307890805.png


  • 0

#21
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts
Yes call them....
  • 0

#22
cblock

cblock

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

I made an error in the adobe up date. You need to up date Adobe Reader not flash as Iindicated.

Your Adobe reader needs updating. You should ensure you use the latest Adobe Acrobat Reader and install any security updates that are released. You can download the latest reader and updates from here.
Note Important: Please uncheck any optional offers before downloading. This is what users do they forget to un-check the optional installs, don't just click the download button take your time an look at the page, un-check then download. This particular page tries to install McAfee Scanner so un-check it, then click download.

I was actually about to inquire about that.
 
I updated my Flash pretty recently. About a month or two ago. Flash has given me problems for a while now. A lot of web pages seem to be crashing, so I disabled it for a while. I redownloaded again and enabled for now.
 
Thanks, I just updated Adobe. Will go ahead and apply Fix.
  • 0

#23
cblock

cblock

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

Desktop icons are doing fine. No unwanted programs are lingering at the moment. Thanks a lot!

 

Here's the Fixlog!

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-04-2015
Ran by Andy at 2015-04-21 23:39:20 Run:2
Running from C:\Users\Andy\Desktop
Loaded Profiles: Andy (Available profiles: Andy & Guest)
Boot Mode: Normal
==============================================
 
Content of fixlist:
*****************
start
CloseProcesses:
CreateRestorePoint:
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.7.771\_platform_specific\win_x86\widevinecdmadapter.dll No File
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\internal-nacl-plugin No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll No File
C:\Users\Andy\AppData\Local\Temp\Quarantine.exe
C:\Users\Andy\AppData\Local\Temp\sqlite3.dll
Emptytemp:
*****************
 
Processes closed successfully.
Restore point was successfully created.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
C:\Users\Andy\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.7.771\_platform_specific\win_x86\widevinecdmadapter.dll not found.
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\internal-nacl-plugin No File not found.
C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\pdf.dll not found.
C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll not found.
C:\Users\Andy\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\Andy\AppData\Local\Temp\sqlite3.dll => Moved successfully.
EmptyTemp: => Removed 452.3 MB temporary data.
 
 
The system needed a reboot. 
 
==== End of Fixlog 23:39:41 ====

  • 0

#24
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts
Thanks your machine is free from malware.

Do we still have the desktop Icon issue ?
  • 0

#25
cblock

cblock

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

No, there are no unwanted icons, anymore. 

 

Thanks so much!


  • 0

Advertisements


#26
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts
One more thing for you to do and I will close this topic.

We need to clean up the tools and log files.

Download DelFix by Xplode and save it to your desktop.
  • Run the tool by right click on the 51a5ce45263de-delfix.png icon and Run as administrator option.
  • Make sure that these ones are checked:
    • Remove disinfection tools
    • Purge system restore
    • Reset system settings
  • Push Run.
  • The program will run for a few seconds and display a notepad report.
    Paste it for my review.

  • 0

#27
cblock

cblock

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

One more thing for you to do and I will close this topic.

We need to clean up the tools and log files.

Download DelFix by Xplode and save it to your desktop.

  • Run the tool by right click on the 51a5ce45263de-delfix.png icon and Run as administrator option.
  • Make sure that these ones are checked:
    • Remove disinfection tools
    • Purge system restore
    • Reset system settings
  • Push Run.
  • The program will run for a few seconds and display a notepad report.
    Paste it for my review.

 

The link sends me to a 404 page not found. 

 

Maybe it's because it's a little late? Will try again tomorrow, thanks!


  • 0

#28
cblock

cblock

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

Tried it again. I think that website has moved or the URL's no longer apt. 


  • 0

#29
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts
Try this link for dellfix

http://www.bleepingc...ownload/delfix/
  • 0

#30
cblock

cblock

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

Thanks, it ended up wiping out all the software I downloaded for the fix.

 

# DelFix v10.8 - Logfile created 23/04/2015 at 00:40:20
# Updated 29/07/2014 by Xplode
# Username : Andy - MEGATRON
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
 
~ Removing disinfection tools ...
 
Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\Users\Andy\Desktop\FRST-OlderVersion
Deleted : C:\Users\Andy\Desktop\Addition.txt
Deleted : C:\Users\Andy\Desktop\AdwCleaner.exe
Deleted : C:\Users\Andy\Desktop\adwcleaner_4.201.exe
Deleted : C:\Users\Andy\Desktop\Fixlog.txt
Deleted : C:\Users\Andy\Desktop\FRST.txt
Deleted : C:\Users\Andy\Desktop\FRST64.exe
Deleted : C:\Users\Andy\Desktop\JRT.exe
Deleted : C:\Users\Andy\Desktop\JRT.txt
Deleted : C:\Users\Andy\Downloads\Addition.txt
Deleted : C:\Users\Andy\Downloads\Extras.Txt
Deleted : C:\Users\Andy\Downloads\FRST.txt
Deleted : C:\Users\Andy\Downloads\OTL.Txt
Deleted : C:\Users\Andy\Downloads\OTL (1).exe
Deleted : C:\Users\Andy\Downloads\OTL.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
 
~ Cleaning system restore ...
 
Deleted : RP #217 [Windows Update | 04/03/2015 20:51:25]
Deleted : RP #218 [Windows Update | 04/05/2015 08:30:09]
Deleted : RP #219 [Windows Update | 04/11/2015 03:59:36]
Deleted : RP #220 [Windows Update | 04/15/2015 03:03:05]
Deleted : RP #221 [Windows Update | 04/15/2015 03:51:36]
Deleted : RP #223 [Restore Point Created by FRST | 04/19/2015 04:59:24]
Deleted : RP #224 [Windows Update | 04/21/2015 19:57:09]
Deleted : RP #225 [Removed Java™ 6 Update 17 | 04/22/2015 06:19:47]
Deleted : RP #226 [Removed Java™ 6 Update 17 (64-bit) | 04/22/2015 06:20:41]
Deleted : RP #228 [Restore Point Created by FRST | 04/22/2015 06:39:20]
 
New restore point created !
 
~ Resetting system settings ... OK
 
########## - EOF - ##########

  • 0






Similar Topics


Also tagged with one or more of these keywords: slow internet, windows 7, livesupport ads

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP