[flydudet900]

Hi, I downloaded a YouTube video through ClipConverter which I used long time ago without a problem.

 

After obtaining the video, I keep getting prompted to download the video again dozens of times until it shuts off my laptop probably due to so much processing. It even saves a file on my desktop every time it prompted without my permission. I used Malwarebytes to get rid of it. 

 

The thing comes back the next day during startup and the laptop shuts off immediately after when I was sure I got rid of it completely yesterday.

 

Then were these ads that showed up on Youtube and Google "by gsave" .These never existed right before I went to ClipConverter. I used Malwarebytes again to get rid of it. 

 

Same thing happened like the ClipConverter problem.

 

I believe these are spyware since they come back even when I deleted them.

 

Ive never came across such problems like spyware and im not good at fighting these things. My antivirus is useless because subscription ended.

 

I already have the Farbar scanner so im just attaching the logs in a file.

 

Thanks if anyone notices this. i also hope there are more ways to stop my laptop from too much processing

 

 

 

Attached Files

•  FRST.txt   84.22KB   284 downloads
•  Addition.txt   37.31KB   321 downloads

[Advertisements]

Hi, you have an infected Chrome plus several other trojan downloaders in action

Uninstall Chrome

Unless you did this yourself, malware has changed your Chrome version into the Development Build. Among other things this allows malware to install any extension it wants. We need to resolve this.

1. If you have bookmarks, let's save them by exporting them - Export Bookmarks
2. Then I need you to go Google Sync and sign into your account
3. Scroll down until you see the "Stop and Clear" button and click on the button. At the prompt click on "Ok"
4. Now we need to uninstall chrome via com=ntrol panel.
Note: When asked about user data or settings you must remove this also so please check the box.
5. We will re-install Chrome on completion


CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

 

CreateRestorePoint:
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\428.lnk
ShortcutTarget: 428.lnk -> C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}\428.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\550.lnk
ShortcutTarget: 550.lnk -> C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}\550.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\610.lnk
ShortcutTarget: 610.lnk -> C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}\610.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7B8.lnk
ShortcutTarget: 7B8.lnk -> C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}\7B8.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\A80.lnk
ShortcutTarget: A80.lnk -> C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}\A80.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AA0.lnk
ShortcutTarget: AA0.lnk -> C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}\AA0.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\B38.lnk
ShortcutTarget: B38.lnk -> C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}\B38.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FE0.lnk
ShortcutTarget: FE0.lnk -> C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}\FE0.exe ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
2015-04-18 16:46 - 2015-04-18 16:46 - 00000000 ____D () C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}
2015-04-16 16:22 - 2015-04-16 16:22 - 00000000 ____D () C:\Users\VAIO\AppData\Local\TempTaskUpdateDetectionBE8B1859-811B-4835-8A74-E6F03867CFCB
2015-04-15 23:26 - 2015-04-15 23:26 - 00000000 ____D () C:\Users\VAIO\AppData\Local\TempTaskUpdateDetection84C971E1-86DF-44E5-B65E-042F712A3972
2015-04-15 20:01 - 2015-04-15 21:21 - 00000000 ____D () C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}
2015-04-15 11:46 - 2015-04-15 11:54 - 00000000 ____D () C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}
2015-04-15 11:46 - 2015-04-15 11:54 - 00000000 ____D () C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}
2015-04-13 06:27 - 2015-04-13 06:37 - 00000000 ____D () C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}
2015-04-12 10:40 - 2015-04-12 10:40 - 00000000 ____D () C:\ProgramData\hcdanlokapdcppafaehdajjheldbdakf
2015-04-12 01:12 - 2015-04-12 01:12 - 00000000 ____D () C:\ProgramData\gnihnpgegkkiioheijehfeiiinajhang
2015-04-11 11:00 - 2015-04-11 11:00 - 00000000 ____D () C:\ProgramData\gfgpdleapnojopdafdhpfcegjhhaafnc
2015-04-11 10:47 - 2015-04-11 11:05 - 00000000 ____D () C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}
2015-04-10 06:23 - 2015-04-10 12:44 - 00000000 ____D () C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}
2015-04-09 17:24 - 2015-04-09 17:24 - 00000000 ____D () C:\ProgramData\307622987895144631
2015-04-09 17:23 - 2015-04-09 17:25 - 00000000 ____D () C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}
2015-04-09 17:23 - 2015-04-09 17:23 - 00000000 ____D () C:\ProgramData\lmmggieabpflmccmdfmafhgmbhjemgea
2014-07-27 16:58 - 2014-07-27 16:58 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{1838B3B7-F6D5-49E6-8B30-BABAB16347DA}
2014-09-27 11:11 - 2014-09-27 11:11 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{4D405E03-03AA-4158-BA06-A2520F053BA9}
2014-06-29 15:30 - 2014-06-29 15:30 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{6DD935A3-8AE1-4DE2-810D-E495640EC939}
2014-09-28 20:36 - 2014-09-28 20:36 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{761E42C6-AF09-4545-8A09-1476E0EED3EC}
2014-09-30 12:12 - 2014-09-30 12:13 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{9EA694DE-3897-4940-8184-D2F43B14D2C0}
2014-09-30 12:14 - 2014-09-30 12:14 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{B0EA2A95-8E4C-4EC4-A8E6-DE42F0190215}
2014-09-03 12:23 - 2014-09-03 12:23 - 0003635 _____ () C:\Users\VAIO\AppData\Local\{BE76FD2F-1FB3-420B-8AD3-F6D69F8E0B6D}
2014-12-26 17:02 - 2014-12-26 17:02 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{C6B7C7D1-F558-49ED-8A2C-CD644C8A02BB}
2014-07-28 21:10 - 2014-07-28 21:10 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{D5CFAF10-9863-4CAA-B662-63D65CB58ACF}
2014-12-21 10:42 - 2014-12-21 10:42 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{E961147C-DDFB-4487-A96C-9F732F4C6700}
2014-09-23 19:08 - 2014-09-23 19:09 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F4FFEBD2-883A-4491-8BEA-FDF67CFD9190}
2014-08-31 21:54 - 2014-08-31 21:54 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F778FE6F-696F-42F6-9483-49110923CCB6}
2014-12-11 02:00 - 2014-12-11 02:00 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F9085DD2-23E0-466B-9801-6A319380024E}
2014-09-25 11:55 - 2014-09-25 11:56 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{FF35405C-0F9B-4820-B1AF-CB6B7FE19AC9}
Task: {138525F2-2652-4E55-9446-2F4410BFDDC6} - System32\Tasks\GoogleUpdateTaskMachineUA1cf683ce314798b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {A9169B3A-5A78-465D-9CCE-A5870DBFE0CD} - \2e10d0f9-1239-4dc7-85f8-42db6a7eaea5-7 No Task File <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1c96ce736a4dbf.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}
C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}
C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}
C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}
C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}
C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}
C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}
C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Google\Chrome
C:\Users\VAIO\AppData\Local\Google\Chrome
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Scan.
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S0].txt as well.

[Essexboy]

Hi, you have an infected Chrome plus several other trojan downloaders in action

Uninstall Chrome

Unless you did this yourself, malware has changed your Chrome version into the Development Build. Among other things this allows malware to install any extension it wants. We need to resolve this.

1. If you have bookmarks, let's save them by exporting them - Export Bookmarks
2. Then I need you to go Google Sync and sign into your account
3. Scroll down until you see the "Stop and Clear" button and click on the button. At the prompt click on "Ok"
4. Now we need to uninstall chrome via com=ntrol panel.
Note: When asked about user data or settings you must remove this also so please check the box.
5. We will re-install Chrome on completion


CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

 

CreateRestorePoint:
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\428.lnk
ShortcutTarget: 428.lnk -> C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}\428.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\550.lnk
ShortcutTarget: 550.lnk -> C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}\550.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\610.lnk
ShortcutTarget: 610.lnk -> C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}\610.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7B8.lnk
ShortcutTarget: 7B8.lnk -> C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}\7B8.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\A80.lnk
ShortcutTarget: A80.lnk -> C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}\A80.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AA0.lnk
ShortcutTarget: AA0.lnk -> C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}\AA0.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\B38.lnk
ShortcutTarget: B38.lnk -> C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}\B38.exe ()
Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FE0.lnk
ShortcutTarget: FE0.lnk -> C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}\FE0.exe ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
2015-04-18 16:46 - 2015-04-18 16:46 - 00000000 ____D () C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}
2015-04-16 16:22 - 2015-04-16 16:22 - 00000000 ____D () C:\Users\VAIO\AppData\Local\TempTaskUpdateDetectionBE8B1859-811B-4835-8A74-E6F03867CFCB
2015-04-15 23:26 - 2015-04-15 23:26 - 00000000 ____D () C:\Users\VAIO\AppData\Local\TempTaskUpdateDetection84C971E1-86DF-44E5-B65E-042F712A3972
2015-04-15 20:01 - 2015-04-15 21:21 - 00000000 ____D () C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}
2015-04-15 11:46 - 2015-04-15 11:54 - 00000000 ____D () C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}
2015-04-15 11:46 - 2015-04-15 11:54 - 00000000 ____D () C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}
2015-04-13 06:27 - 2015-04-13 06:37 - 00000000 ____D () C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}
2015-04-12 10:40 - 2015-04-12 10:40 - 00000000 ____D () C:\ProgramData\hcdanlokapdcppafaehdajjheldbdakf
2015-04-12 01:12 - 2015-04-12 01:12 - 00000000 ____D () C:\ProgramData\gnihnpgegkkiioheijehfeiiinajhang
2015-04-11 11:00 - 2015-04-11 11:00 - 00000000 ____D () C:\ProgramData\gfgpdleapnojopdafdhpfcegjhhaafnc
2015-04-11 10:47 - 2015-04-11 11:05 - 00000000 ____D () C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}
2015-04-10 06:23 - 2015-04-10 12:44 - 00000000 ____D () C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}
2015-04-09 17:24 - 2015-04-09 17:24 - 00000000 ____D () C:\ProgramData\307622987895144631
2015-04-09 17:23 - 2015-04-09 17:25 - 00000000 ____D () C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}
2015-04-09 17:23 - 2015-04-09 17:23 - 00000000 ____D () C:\ProgramData\lmmggieabpflmccmdfmafhgmbhjemgea
2014-07-27 16:58 - 2014-07-27 16:58 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{1838B3B7-F6D5-49E6-8B30-BABAB16347DA}
2014-09-27 11:11 - 2014-09-27 11:11 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{4D405E03-03AA-4158-BA06-A2520F053BA9}
2014-06-29 15:30 - 2014-06-29 15:30 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{6DD935A3-8AE1-4DE2-810D-E495640EC939}
2014-09-28 20:36 - 2014-09-28 20:36 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{761E42C6-AF09-4545-8A09-1476E0EED3EC}
2014-09-30 12:12 - 2014-09-30 12:13 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{9EA694DE-3897-4940-8184-D2F43B14D2C0}
2014-09-30 12:14 - 2014-09-30 12:14 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{B0EA2A95-8E4C-4EC4-A8E6-DE42F0190215}
2014-09-03 12:23 - 2014-09-03 12:23 - 0003635 _____ () C:\Users\VAIO\AppData\Local\{BE76FD2F-1FB3-420B-8AD3-F6D69F8E0B6D}
2014-12-26 17:02 - 2014-12-26 17:02 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{C6B7C7D1-F558-49ED-8A2C-CD644C8A02BB}
2014-07-28 21:10 - 2014-07-28 21:10 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{D5CFAF10-9863-4CAA-B662-63D65CB58ACF}
2014-12-21 10:42 - 2014-12-21 10:42 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{E961147C-DDFB-4487-A96C-9F732F4C6700}
2014-09-23 19:08 - 2014-09-23 19:09 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F4FFEBD2-883A-4491-8BEA-FDF67CFD9190}
2014-08-31 21:54 - 2014-08-31 21:54 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F778FE6F-696F-42F6-9483-49110923CCB6}
2014-12-11 02:00 - 2014-12-11 02:00 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F9085DD2-23E0-466B-9801-6A319380024E}
2014-09-25 11:55 - 2014-09-25 11:56 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{FF35405C-0F9B-4820-B1AF-CB6B7FE19AC9}
Task: {138525F2-2652-4E55-9446-2F4410BFDDC6} - System32\Tasks\GoogleUpdateTaskMachineUA1cf683ce314798b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {A9169B3A-5A78-465D-9CCE-A5870DBFE0CD} - \2e10d0f9-1239-4dc7-85f8-42db6a7eaea5-7 No Task File <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1c96ce736a4dbf.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}
C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}
C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}
C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}
C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}
C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}
C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}
C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Google\Chrome
C:\Users\VAIO\AppData\Local\Google\Chrome
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Scan.
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S0].txt as well.

[flydudet900]

Ok I followed the instructions. But wasnt sure about reinstalling chrome so I reinstalled it after running the FRST.exe fix and AdwCleaner. 

 

Here's the fixlog

 

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-04-2015 01

Ran by VAIO at 2015-04-20 23:27:21 Run:1

Running from C:\Users\VAIO\Desktop

Loaded Profiles: VAIO (Available profiles: VAIO)

Boot Mode: Normal

==============================================

 

Content of fixlist:

*****************

CreateRestorePoint:

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\428.lnk

ShortcutTarget: 428.lnk -> C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}\428.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\550.lnk

ShortcutTarget: 550.lnk -> C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}\550.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\610.lnk

ShortcutTarget: 610.lnk -> C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}\610.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7B8.lnk

ShortcutTarget: 7B8.lnk -> C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}\7B8.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\A80.lnk

ShortcutTarget: A80.lnk -> C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}\A80.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AA0.lnk

ShortcutTarget: AA0.lnk -> C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}\AA0.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\B38.lnk

ShortcutTarget: B38.lnk -> C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}\B38.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FE0.lnk

ShortcutTarget: FE0.lnk -> C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}\FE0.exe ()

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File

S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]

S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

2015-04-18 16:46 - 2015-04-18 16:46 - 00000000 ____D () C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}

2015-04-16 16:22 - 2015-04-16 16:22 - 00000000 ____D () C:\Users\VAIO\AppData\Local\TempTaskUpdateDetectionBE8B1859-811B-4835-8A74-E6F03867CFCB

2015-04-15 23:26 - 2015-04-15 23:26 - 00000000 ____D () C:\Users\VAIO\AppData\Local\TempTaskUpdateDetection84C971E1-86DF-44E5-B65E-042F712A3972

2015-04-15 20:01 - 2015-04-15 21:21 - 00000000 ____D () C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}

2015-04-15 11:46 - 2015-04-15 11:54 - 00000000 ____D () C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}

2015-04-15 11:46 - 2015-04-15 11:54 - 00000000 ____D () C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}

2015-04-13 06:27 - 2015-04-13 06:37 - 00000000 ____D () C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}

2015-04-12 10:40 - 2015-04-12 10:40 - 00000000 ____D () C:\ProgramData\hcdanlokapdcppafaehdajjheldbdakf

2015-04-12 01:12 - 2015-04-12 01:12 - 00000000 ____D () C:\ProgramData\gnihnpgegkkiioheijehfeiiinajhang

2015-04-11 11:00 - 2015-04-11 11:00 - 00000000 ____D () C:\ProgramData\gfgpdleapnojopdafdhpfcegjhhaafnc

2015-04-11 10:47 - 2015-04-11 11:05 - 00000000 ____D () C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}

2015-04-10 06:23 - 2015-04-10 12:44 - 00000000 ____D () C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}

2015-04-09 17:24 - 2015-04-09 17:24 - 00000000 ____D () C:\ProgramData\307622987895144631

2015-04-09 17:23 - 2015-04-09 17:25 - 00000000 ____D () C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}

2015-04-09 17:23 - 2015-04-09 17:23 - 00000000 ____D () C:\ProgramData\lmmggieabpflmccmdfmafhgmbhjemgea

2014-07-27 16:58 - 2014-07-27 16:58 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{1838B3B7-F6D5-49E6-8B30-BABAB16347DA}

2014-09-27 11:11 - 2014-09-27 11:11 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{4D405E03-03AA-4158-BA06-A2520F053BA9}

2014-06-29 15:30 - 2014-06-29 15:30 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{6DD935A3-8AE1-4DE2-810D-E495640EC939}

2014-09-28 20:36 - 2014-09-28 20:36 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{761E42C6-AF09-4545-8A09-1476E0EED3EC}

2014-09-30 12:12 - 2014-09-30 12:13 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{9EA694DE-3897-4940-8184-D2F43B14D2C0}

2014-09-30 12:14 - 2014-09-30 12:14 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{B0EA2A95-8E4C-4EC4-A8E6-DE42F0190215}

2014-09-03 12:23 - 2014-09-03 12:23 - 0003635 _____ () C:\Users\VAIO\AppData\Local\{BE76FD2F-1FB3-420B-8AD3-F6D69F8E0B6D}

2014-12-26 17:02 - 2014-12-26 17:02 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{C6B7C7D1-F558-49ED-8A2C-CD644C8A02BB}

2014-07-28 21:10 - 2014-07-28 21:10 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{D5CFAF10-9863-4CAA-B662-63D65CB58ACF}

2014-12-21 10:42 - 2014-12-21 10:42 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{E961147C-DDFB-4487-A96C-9F732F4C6700}

2014-09-23 19:08 - 2014-09-23 19:09 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F4FFEBD2-883A-4491-8BEA-FDF67CFD9190}

2014-08-31 21:54 - 2014-08-31 21:54 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F778FE6F-696F-42F6-9483-49110923CCB6}

2014-12-11 02:00 - 2014-12-11 02:00 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F9085DD2-23E0-466B-9801-6A319380024E}

2014-09-25 11:55 - 2014-09-25 11:56 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{FF35405C-0F9B-4820-B1AF-CB6B7FE19AC9}

Task: {138525F2-2652-4E55-9446-2F4410BFDDC6} - System32\Tasks\GoogleUpdateTaskMachineUA1cf683ce314798b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {A9169B3A-5A78-465D-9CCE-A5870DBFE0CD} - \2e10d0f9-1239-4dc7-85f8-42db6a7eaea5-7 No Task File <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1c96ce736a4dbf.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}

C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}

C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}

C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}

C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}

C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}

C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}

C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}

C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

C:\Program Files (x86)\Google\Chrome

C:\Users\VAIO\AppData\Local\Google\Chrome

Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f

Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f

RemoveProxy:

EmptyTemp:

CMD: bitsadmin /reset /allusers

*****************

 

Restore point was successfully created.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\428.lnk => Moved successfully.

C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}\428.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\550.lnk => Moved successfully.

C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}\550.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\610.lnk => Moved successfully.

C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}\610.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7B8.lnk => Moved successfully.

C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}\7B8.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\A80.lnk => Moved successfully.

C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}\A80.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AA0.lnk => Moved successfully.

C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}\AA0.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\B38.lnk => Moved successfully.

C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}\B38.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FE0.lnk => Moved successfully.

C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}\FE0.exe not found.

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.

C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.

C:\Windows\SysWOW64\GroupPolicy\GPT.ini => Moved successfully.

"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.

"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}" => Key deleted successfully.

HKCR\Wow6432Node\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB} => Key not found. 

gupdate => Service not found.

gupdatem => Service not found.

C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f} => Moved successfully.

C:\Users\VAIO\AppData\Local\TempTaskUpdateDetectionBE8B1859-811B-4835-8A74-E6F03867CFCB => Moved successfully.

C:\Users\VAIO\AppData\Local\TempTaskUpdateDetection84C971E1-86DF-44E5-B65E-042F712A3972 => Moved successfully.

C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746} => Moved successfully.

C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4} => Moved successfully.

C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f} => Moved successfully.

C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1} => Moved successfully.

"C:\ProgramData\hcdanlokapdcppafaehdajjheldbdakf" => File/Directory not found.

"C:\ProgramData\gnihnpgegkkiioheijehfeiiinajhang" => File/Directory not found.

"C:\ProgramData\gfgpdleapnojopdafdhpfcegjhhaafnc" => File/Directory not found.

C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050} => Moved successfully.

C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e} => Moved successfully.

C:\ProgramData\307622987895144631 => Moved successfully.

C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259} => Moved successfully.

"C:\ProgramData\lmmggieabpflmccmdfmafhgmbhjemgea" => File/Directory not found.

C:\Users\VAIO\AppData\Local\{1838B3B7-F6D5-49E6-8B30-BABAB16347DA} => Moved successfully.

C:\Users\VAIO\AppData\Local\{4D405E03-03AA-4158-BA06-A2520F053BA9} => Moved successfully.

C:\Users\VAIO\AppData\Local\{6DD935A3-8AE1-4DE2-810D-E495640EC939} => Moved successfully.

C:\Users\VAIO\AppData\Local\{761E42C6-AF09-4545-8A09-1476E0EED3EC} => Moved successfully.

C:\Users\VAIO\AppData\Local\{9EA694DE-3897-4940-8184-D2F43B14D2C0} => Moved successfully.

C:\Users\VAIO\AppData\Local\{B0EA2A95-8E4C-4EC4-A8E6-DE42F0190215} => Moved successfully.

C:\Users\VAIO\AppData\Local\{BE76FD2F-1FB3-420B-8AD3-F6D69F8E0B6D} => Moved successfully.

C:\Users\VAIO\AppData\Local\{C6B7C7D1-F558-49ED-8A2C-CD644C8A02BB} => Moved successfully.

C:\Users\VAIO\AppData\Local\{D5CFAF10-9863-4CAA-B662-63D65CB58ACF} => Moved successfully.

C:\Users\VAIO\AppData\Local\{E961147C-DDFB-4487-A96C-9F732F4C6700} => Moved successfully.

C:\Users\VAIO\AppData\Local\{F4FFEBD2-883A-4491-8BEA-FDF67CFD9190} => Moved successfully.

C:\Users\VAIO\AppData\Local\{F778FE6F-696F-42F6-9483-49110923CCB6} => Moved successfully.

C:\Users\VAIO\AppData\Local\{F9085DD2-23E0-466B-9801-6A319380024E} => Moved successfully.

C:\Users\VAIO\AppData\Local\{FF35405C-0F9B-4820-B1AF-CB6B7FE19AC9} => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{138525F2-2652-4E55-9446-2F4410BFDDC6}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{138525F2-2652-4E55-9446-2F4410BFDDC6}" => Key deleted successfully.

C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf683ce314798b => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA1cf683ce314798b" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A9169B3A-5A78-465D-9CCE-A5870DBFE0CD}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A9169B3A-5A78-465D-9CCE-A5870DBFE0CD}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\2e10d0f9-1239-4dc7-85f8-42db6a7eaea5-7" => Key deleted successfully.

C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job not found.

C:\Windows\Tasks\GoogleUpdateTaskMachineUA1c96ce736a4dbf.job not found.

"C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}" => File/Directory not found.

"C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}" => File/Directory not found.

"C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}" => File/Directory not found.

"C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}" => File/Directory not found.

"C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}" => File/Directory not found.

"C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}" => File/Directory not found.

"C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}" => File/Directory not found.

"C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}" => File/Directory not found.

"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" => File/Directory not found.

 

"C:\Program Files (x86)\Google\Chrome" directory move:

 

Could not move "C:\Program Files (x86)\Google\Chrome" directory. => Scheduled to move on reboot.

 

"C:\Users\VAIO\AppData\Local\Google\Chrome" => File/Directory not found.

 

========= reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========

 

The operation completed successfully.

 

 

 

========= End of Reg: =========

 

 

========= reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========

 

The operation completed successfully.

 

 

 

========= End of Reg: =========

 

 

========= RemoveProxy: =========

 

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.

 

 

========= End of RemoveProxy: =========

 

 

=========  bitsadmin /reset /allusers =========

 

 

BITSADMIN version 3.0 [ 7.5.7601 ]

BITS administration utility.

© Copyright 2000-2006 Microsoft Corp.

 

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.

Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

 

Unable to cancel {418EC78E-B5C9-4EA7-A747-EBF7E02E3691}.

{D0C8B87D-F9E9-47CF-84A9-B7733A25EE6C} canceled.

{EEE73FA7-1D3A-4612-AC80-42405C5997CB} canceled.

2 out of 3 jobs canceled.

 

========= End of CMD: =========

 

EmptyTemp: => Removed 1 GB temporary data.

 

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-20 23:30:19)<=

 

C:\Program Files (x86)\Google\Chrome => Is moved successfully.

 

==== End of Fixlog 23:30:20 ====

 

 

The AdwCleaner log

 

 

# AdwCleaner v4.201 - Logfile created 20/04/2015 at 23:39:44

# Updated 08/04/2015 by Xplode

# Database : 2015-04-19.4 [Server]

# Operating system : Windows 7 Professional Service Pack 1 (x64)

# Username : VAIO - VAIO-VAIO

# Running from : C:\Users\VAIO\Desktop\adwcleaner_4.201.exe

# Option : Cleaning

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

 

***** [ Scheduled tasks ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

Key Deleted : HKCU\Software\Local AppWizard-Generated Applications

 

***** [ Web browsers ] *****

 

-\\ Internet Explorer v11.0.9600.17728

 

 

-\\ Comodo Dragon v

 

 

-\\ Chrome Canary v

 

 

*************************

 

AdwCleaner[R0].txt - [901 bytes] - [20/04/2015 23:34:55]

AdwCleaner[R1].txt - [959 bytes] - [20/04/2015 23:37:28]

AdwCleaner[S0].txt - [815 bytes] - [20/04/2015 23:39:44]

 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [873  bytes] ##########

 

 

[flydudet900]

Hi, I wasnt sure when I should uninstall and reinstall Chrome so I uninstalled it before running FRST.exe and reinstalled Chrome after restart from AdwCleaner. I restarted a few times just to make sure it wont pop up again. Successfully no pop ups. Thanks a million! Here's the logs.

 

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-04-2015 01

Ran by VAIO at 2015-04-20 23:27:21 Run:1

Running from C:\Users\VAIO\Desktop

Loaded Profiles: VAIO (Available profiles: VAIO)

Boot Mode: Normal

==============================================

 

Content of fixlist:

*****************

CreateRestorePoint:

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\428.lnk

ShortcutTarget: 428.lnk -> C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}\428.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\550.lnk

ShortcutTarget: 550.lnk -> C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}\550.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\610.lnk

ShortcutTarget: 610.lnk -> C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}\610.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7B8.lnk

ShortcutTarget: 7B8.lnk -> C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}\7B8.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\A80.lnk

ShortcutTarget: A80.lnk -> C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}\A80.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AA0.lnk

ShortcutTarget: AA0.lnk -> C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}\AA0.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\B38.lnk

ShortcutTarget: B38.lnk -> C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}\B38.exe ()

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FE0.lnk

ShortcutTarget: FE0.lnk -> C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}\FE0.exe ()

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File

S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]

S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

2015-04-18 16:46 - 2015-04-18 16:46 - 00000000 ____D () C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}

2015-04-16 16:22 - 2015-04-16 16:22 - 00000000 ____D () C:\Users\VAIO\AppData\Local\TempTaskUpdateDetectionBE8B1859-811B-4835-8A74-E6F03867CFCB

2015-04-15 23:26 - 2015-04-15 23:26 - 00000000 ____D () C:\Users\VAIO\AppData\Local\TempTaskUpdateDetection84C971E1-86DF-44E5-B65E-042F712A3972

2015-04-15 20:01 - 2015-04-15 21:21 - 00000000 ____D () C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}

2015-04-15 11:46 - 2015-04-15 11:54 - 00000000 ____D () C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}

2015-04-15 11:46 - 2015-04-15 11:54 - 00000000 ____D () C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}

2015-04-13 06:27 - 2015-04-13 06:37 - 00000000 ____D () C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}

2015-04-12 10:40 - 2015-04-12 10:40 - 00000000 ____D () C:\ProgramData\hcdanlokapdcppafaehdajjheldbdakf

2015-04-12 01:12 - 2015-04-12 01:12 - 00000000 ____D () C:\ProgramData\gnihnpgegkkiioheijehfeiiinajhang

2015-04-11 11:00 - 2015-04-11 11:00 - 00000000 ____D () C:\ProgramData\gfgpdleapnojopdafdhpfcegjhhaafnc

2015-04-11 10:47 - 2015-04-11 11:05 - 00000000 ____D () C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}

2015-04-10 06:23 - 2015-04-10 12:44 - 00000000 ____D () C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}

2015-04-09 17:24 - 2015-04-09 17:24 - 00000000 ____D () C:\ProgramData\307622987895144631

2015-04-09 17:23 - 2015-04-09 17:25 - 00000000 ____D () C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}

2015-04-09 17:23 - 2015-04-09 17:23 - 00000000 ____D () C:\ProgramData\lmmggieabpflmccmdfmafhgmbhjemgea

2014-07-27 16:58 - 2014-07-27 16:58 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{1838B3B7-F6D5-49E6-8B30-BABAB16347DA}

2014-09-27 11:11 - 2014-09-27 11:11 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{4D405E03-03AA-4158-BA06-A2520F053BA9}

2014-06-29 15:30 - 2014-06-29 15:30 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{6DD935A3-8AE1-4DE2-810D-E495640EC939}

2014-09-28 20:36 - 2014-09-28 20:36 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{761E42C6-AF09-4545-8A09-1476E0EED3EC}

2014-09-30 12:12 - 2014-09-30 12:13 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{9EA694DE-3897-4940-8184-D2F43B14D2C0}

2014-09-30 12:14 - 2014-09-30 12:14 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{B0EA2A95-8E4C-4EC4-A8E6-DE42F0190215}

2014-09-03 12:23 - 2014-09-03 12:23 - 0003635 _____ () C:\Users\VAIO\AppData\Local\{BE76FD2F-1FB3-420B-8AD3-F6D69F8E0B6D}

2014-12-26 17:02 - 2014-12-26 17:02 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{C6B7C7D1-F558-49ED-8A2C-CD644C8A02BB}

2014-07-28 21:10 - 2014-07-28 21:10 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{D5CFAF10-9863-4CAA-B662-63D65CB58ACF}

2014-12-21 10:42 - 2014-12-21 10:42 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{E961147C-DDFB-4487-A96C-9F732F4C6700}

2014-09-23 19:08 - 2014-09-23 19:09 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F4FFEBD2-883A-4491-8BEA-FDF67CFD9190}

2014-08-31 21:54 - 2014-08-31 21:54 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F778FE6F-696F-42F6-9483-49110923CCB6}

2014-12-11 02:00 - 2014-12-11 02:00 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{F9085DD2-23E0-466B-9801-6A319380024E}

2014-09-25 11:55 - 2014-09-25 11:56 - 0000000 _____ () C:\Users\VAIO\AppData\Local\{FF35405C-0F9B-4820-B1AF-CB6B7FE19AC9}

Task: {138525F2-2652-4E55-9446-2F4410BFDDC6} - System32\Tasks\GoogleUpdateTaskMachineUA1cf683ce314798b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {A9169B3A-5A78-465D-9CCE-A5870DBFE0CD} - \2e10d0f9-1239-4dc7-85f8-42db6a7eaea5-7 No Task File <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1c96ce736a4dbf.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}

C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}

C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}

C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}

C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}

C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}

C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}

C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}

C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

C:\Program Files (x86)\Google\Chrome

C:\Users\VAIO\AppData\Local\Google\Chrome

Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f

Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f

RemoveProxy:

EmptyTemp:

CMD: bitsadmin /reset /allusers

*****************

 

Restore point was successfully created.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\428.lnk => Moved successfully.

C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}\428.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\550.lnk => Moved successfully.

C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}\550.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\610.lnk => Moved successfully.

C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}\610.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7B8.lnk => Moved successfully.

C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}\7B8.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\A80.lnk => Moved successfully.

C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}\A80.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AA0.lnk => Moved successfully.

C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}\AA0.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\B38.lnk => Moved successfully.

C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}\B38.exe not found.

C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FE0.lnk => Moved successfully.

C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}\FE0.exe not found.

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.

C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.

C:\Windows\SysWOW64\GroupPolicy\GPT.ini => Moved successfully.

"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.

"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}" => Key deleted successfully.

HKCR\Wow6432Node\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB} => Key not found. 

gupdate => Service not found.

gupdatem => Service not found.

C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f} => Moved successfully.

C:\Users\VAIO\AppData\Local\TempTaskUpdateDetectionBE8B1859-811B-4835-8A74-E6F03867CFCB => Moved successfully.

C:\Users\VAIO\AppData\Local\TempTaskUpdateDetection84C971E1-86DF-44E5-B65E-042F712A3972 => Moved successfully.

C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746} => Moved successfully.

C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4} => Moved successfully.

C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f} => Moved successfully.

C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1} => Moved successfully.

"C:\ProgramData\hcdanlokapdcppafaehdajjheldbdakf" => File/Directory not found.

"C:\ProgramData\gnihnpgegkkiioheijehfeiiinajhang" => File/Directory not found.

"C:\ProgramData\gfgpdleapnojopdafdhpfcegjhhaafnc" => File/Directory not found.

C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050} => Moved successfully.

C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e} => Moved successfully.

C:\ProgramData\307622987895144631 => Moved successfully.

C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259} => Moved successfully.

"C:\ProgramData\lmmggieabpflmccmdfmafhgmbhjemgea" => File/Directory not found.

C:\Users\VAIO\AppData\Local\{1838B3B7-F6D5-49E6-8B30-BABAB16347DA} => Moved successfully.

C:\Users\VAIO\AppData\Local\{4D405E03-03AA-4158-BA06-A2520F053BA9} => Moved successfully.

C:\Users\VAIO\AppData\Local\{6DD935A3-8AE1-4DE2-810D-E495640EC939} => Moved successfully.

C:\Users\VAIO\AppData\Local\{761E42C6-AF09-4545-8A09-1476E0EED3EC} => Moved successfully.

C:\Users\VAIO\AppData\Local\{9EA694DE-3897-4940-8184-D2F43B14D2C0} => Moved successfully.

C:\Users\VAIO\AppData\Local\{B0EA2A95-8E4C-4EC4-A8E6-DE42F0190215} => Moved successfully.

C:\Users\VAIO\AppData\Local\{BE76FD2F-1FB3-420B-8AD3-F6D69F8E0B6D} => Moved successfully.

C:\Users\VAIO\AppData\Local\{C6B7C7D1-F558-49ED-8A2C-CD644C8A02BB} => Moved successfully.

C:\Users\VAIO\AppData\Local\{D5CFAF10-9863-4CAA-B662-63D65CB58ACF} => Moved successfully.

C:\Users\VAIO\AppData\Local\{E961147C-DDFB-4487-A96C-9F732F4C6700} => Moved successfully.

C:\Users\VAIO\AppData\Local\{F4FFEBD2-883A-4491-8BEA-FDF67CFD9190} => Moved successfully.

C:\Users\VAIO\AppData\Local\{F778FE6F-696F-42F6-9483-49110923CCB6} => Moved successfully.

C:\Users\VAIO\AppData\Local\{F9085DD2-23E0-466B-9801-6A319380024E} => Moved successfully.

C:\Users\VAIO\AppData\Local\{FF35405C-0F9B-4820-B1AF-CB6B7FE19AC9} => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{138525F2-2652-4E55-9446-2F4410BFDDC6}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{138525F2-2652-4E55-9446-2F4410BFDDC6}" => Key deleted successfully.

C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf683ce314798b => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA1cf683ce314798b" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A9169B3A-5A78-465D-9CCE-A5870DBFE0CD}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A9169B3A-5A78-465D-9CCE-A5870DBFE0CD}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\2e10d0f9-1239-4dc7-85f8-42db6a7eaea5-7" => Key deleted successfully.

C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job not found.

C:\Windows\Tasks\GoogleUpdateTaskMachineUA1c96ce736a4dbf.job not found.

"C:\ProgramData\{744c7cc7-e566-41a8-744c-c7cc7e56f31f}" => File/Directory not found.

"C:\ProgramData\{6235adc3-c2d9-1ff2-6235-5adc3c2db70f}" => File/Directory not found.

"C:\ProgramData\{e1251014-0b12-91a7-e125-510140b14050}" => File/Directory not found.

"C:\ProgramData\{78ce172d-08b8-65c9-78ce-e172d08b5cb4}" => File/Directory not found.

"C:\ProgramData\{339e81f0-6532-ac13-339e-e81f065307c1}" => File/Directory not found.

"C:\ProgramData\{7d6895d1-bf7e-6cdd-7d68-895d1bf75746}" => File/Directory not found.

"C:\ProgramData\{1302355b-8f58-8efc-1302-2355b8f5d56e}" => File/Directory not found.

"C:\ProgramData\{c91ef896-566a-14ec-c91e-ef896566e259}" => File/Directory not found.

"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" => File/Directory not found.

 

"C:\Program Files (x86)\Google\Chrome" directory move:

 

Could not move "C:\Program Files (x86)\Google\Chrome" directory. => Scheduled to move on reboot.

 

"C:\Users\VAIO\AppData\Local\Google\Chrome" => File/Directory not found.

 

========= reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========

 

The operation completed successfully.

 

 

 

========= End of Reg: =========

 

 

========= reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========

 

The operation completed successfully.

 

 

 

========= End of Reg: =========

 

 

========= RemoveProxy: =========

 

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.

 

 

========= End of RemoveProxy: =========

 

 

=========  bitsadmin /reset /allusers =========

 

 

BITSADMIN version 3.0 [ 7.5.7601 ]

BITS administration utility.

© Copyright 2000-2006 Microsoft Corp.

 

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.

Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

 

Unable to cancel {418EC78E-B5C9-4EA7-A747-EBF7E02E3691}.

{D0C8B87D-F9E9-47CF-84A9-B7733A25EE6C} canceled.

{EEE73FA7-1D3A-4612-AC80-42405C5997CB} canceled.

2 out of 3 jobs canceled.

 

========= End of CMD: =========

 

EmptyTemp: => Removed 1 GB temporary data.

 

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-20 23:30:19)<=

 

C:\Program Files (x86)\Google\Chrome => Is moved successfully.

 

==== End of Fixlog 23:30:20 ====

[Essexboy]

How is the computer now ?

Could I have a fresh FRST scan please

[flydudet900]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015

Ran by VAIO (administrator) on VAIO-VAIO on 21-04-2015 21:18:35

Running from C:\Users\VAIO\Desktop

Loaded Profiles: VAIO (Available profiles: VAIO)

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(NVIDIA Corporation) C:\Windows\System32\nvservice.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(QUALCOMM, Inc.) C:\Program Files (x86)\QUALCOMM\QDLService2k\QDLService2kSony.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Disc Soft Ltd) C:\Users\VAIO\Documents\Daemon Tools Pro Advanced v5.3.0.0359\SPTD\DAEMON Tools Pro Advanced\DTShellHlp.exe

(Realtek Semiconductor Crop.) C:\Program Files\Realtek\Audio\HDA\vncutil64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe

(UPEK Inc.) C:\Program Files\Protector Suite\psqltray.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe

(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe

(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe

(Sony Corporation) C:\Program Files\Sony\VCM Manager Settings\VcmMgrNotification64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe

() C:\Program Files\Sony\VAIO Care\listener.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saOemMgr.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9962016 2010-06-18] (Realtek Semiconductor)

HKLM\...\Run: [vncutil] => C:\Program Files\Realtek\Audio\HDA\vncutil64.exe [475680 2010-06-18] (Realtek Semiconductor Crop.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1886504 2010-03-01] (Synaptics Incorporated)

HKLM\...\Run: [PSQLLauncher] => C:\Program Files\Protector Suite\launcher.exe [84744 2010-04-28] (UPEK Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.)

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)

HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-06-01] (Sony Corporation)

HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-11] (Microsoft Corporation)

HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)

HKLM-x32\...\Run: [PMBVolumeWatcher] => c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation)

HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)

HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Users\VAIO\Documents\Daemon Tools Pro Advanced v5.3.0.0359\SPTD\DAEMON Tools Pro Advanced\DTAgent.exe [3111456 2013-05-13] (Disc Soft Ltd)

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\...\Run: [CAHeadless] => c:\Program Files (x86)\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe [615808 2009-09-06] (Adobe Systems Incorporated)

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.)

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466144 2014-11-27] (Sony)

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\...\Run: [OneDrive] => C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\OneDrive.exe [281248 2015-03-14] (Microsoft Corporation)

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\...\Run: [GoogleChromeAutoLaunch_383B11BEA98E40A9F8C66A1E0D3441DA] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-14] (Google Inc.)

HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-03-27] (Microsoft Corporation)

Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2014-03-27]

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-07-23]

ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

Startup: C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2014-12-11]

ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll [2015-03-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll [2015-03-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll [2015-03-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [UEAFOverlay] -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll [2010-04-28] (UPEK Inc.)

ShellIconOverlayIdentifiers: [UEAFOverlayOpen] -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll [2010-04-28] (UPEK Inc.)

ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll [2015-03-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll [2015-03-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll [2015-03-14] (Microsoft Corporation)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://sony.msn.com

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://vaio-online.sony.com/

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000 -> DefaultScope {1B7AAF27-979B-43A8-BAD9-8A25D3324629} URL = https://www.google.c...q={searchTerms}

SearchScopes: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000 -> {1B7AAF27-979B-43A8-BAD9-8A25D3324629} URL = https://www.google.c...q={searchTerms}

SearchScopes: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000 -> {33DB22EE-24BD-4911-86E5-0D1E442B9494} URL = http://search.yahoo....p={SearchTerms}

SearchScopes: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000 -> {91CE9609-47FD-4031-B631-4EEA39EE1352} URL = http://www.bing.com/...rc=IE-SearchBox

BHO: McAfee Phishing Filter -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL No File

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-19] (Microsoft Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)

BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2014-04-24] (McAfee, Inc.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2014-03-27] (Sun Microsystems, Inc.)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-22] (Adobe Systems Incorporated)

BHO-x32: McAfee Phishing Filter -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> c:\Program Files\McAfee\MSK\mskapbho.dll [2011-03-11] ()

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-19] (Microsoft Corporation)

BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-03-03] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2014-04-24] (McAfee, Inc.)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2014-03-27] (Sun Microsystems, Inc.)

Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2014-04-24] (McAfee, Inc.)

Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2014-04-24] (McAfee, Inc.)

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2014-04-24] (McAfee, Inc.)

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2014-04-24] (McAfee, Inc.)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-17] (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-17] (Microsoft Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2014-04-24] (McAfee, Inc.)

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2014-04-24] (McAfee, Inc.)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2014-01-28] (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2014-01-28] (McAfee, Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

 

FireFox:

========

FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2014-01-28] ()

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2014-01-28] ()

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-11-22] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-17] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-20] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-20] (Google Inc.)

FF Plugin HKU\S-1-5-21-2362847013-1138255259-1108517563-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\VAIO\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-01-27] (Unity Technologies ApS)

FF Plugin HKU\S-1-5-21-2362847013-1138255259-1108517563-1000: sony.com/MediaGoDetector -> C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll [2014-07-10] (Sony Network Entertainment International LLC)

FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension

FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2014-03-27]

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor

FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-03-27]

FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK

FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-03-27]

 

Chrome: 

=======

CHR Profile: C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-20]

CHR Extension: (Google Docs) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-20]

CHR Extension: (Google Drive) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-20]

CHR Extension: (YouTube) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-20]

CHR Extension: (Google Search) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-20]

CHR Extension: (Google Sheets) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-20]

CHR Extension: (SiteAdvisor) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-04-20]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-20]

CHR Extension: (Skype Click to Call) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-04-20]

CHR Extension: (Google Wallet) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-20]

CHR Extension: (Gmail) - C:\Users\VAIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-20]

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - http://clients2.goog...ice/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [ihenkjeihefokohmemphikjnjbmegdik] - "C:\Program Files (x86)\Sony\Media Go\MediaGoDetector.crx" [Not Found]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

 

==================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)

R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)

R2 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [155856 2014-06-03] (McAfee, Inc.)

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)

R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025712 2014-01-21] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)

R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)

R2 nvservice; C:\Windows\system32\nvservice.exe [192800 2013-02-04] (NVIDIA Corporation)

R2 QDLService2kSony; c:\Program Files (x86)\QUALCOMM\QDLService2k\QDLService2kSony.exe [330488 2009-12-09] (QUALCOMM, Inc.)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [190496 2010-06-18] (Realtek Semiconductor)

R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-01] (Intel Corporation)

R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-19] (ArcSoft, Inc.)

S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation)

R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [958112 2011-10-24] (Sony Corporation)

R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [845312 2010-08-11] (Sony Corporation) [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-27] (ArcSoft, Inc.)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-08-02] (DT Soft Ltd)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)

R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)

U3 mfeapfk01; No ImagePath

R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)

U3 mfeavfk01; No ImagePath

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)

R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [422712 2014-01-21] (McAfee, Inc.)

S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96592 2014-01-21] (McAfee, Inc.)

S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)

R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)

R3 qcfilterSny2k; C:\Windows\System32\DRIVERS\qcfilterSny2k.sys [6400 2009-12-09] (QUALCOMM Incorporated)

R3 qcusbnetsny2k; C:\Windows\System32\DRIVERS\qcusbnetsny2k.sys [240640 2009-12-09] (QUALCOMM Incorporated)

R3 qcusbsersny2k; C:\Windows\System32\DRIVERS\qcusbserSny2k.sys [121216 2009-12-09] (QUALCOMM Incorporated)

R3 semav6thermal64ro; C:\Windows\system32\drivers\semav6thermal64ro.sys [13792 2014-09-07] ()

S3 VBTUSB; C:\Windows\System32\Drivers\VBTUSB.sys [14848 2011-05-09] (Sony Corporation) [File not signed]

 

==================== NetSvcs (Whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2015-04-21 21:18 - 2015-04-21 21:18 - 00030621 _____ () C:\Users\VAIO\Desktop\FRST.txt

2015-04-21 21:18 - 2015-04-21 21:18 - 00000000 ____D () C:\Users\VAIO\Desktop\FRST-OlderVersion

2015-04-21 00:11 - 2015-04-21 00:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

2015-04-20 23:43 - 2015-04-20 23:43 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-04-20 23:43 - 2015-04-20 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-04-20 23:42 - 2015-04-21 21:15 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-04-20 23:42 - 2015-04-21 08:05 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-04-20 23:42 - 2015-04-20 23:42 - 00003890 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-04-20 23:42 - 2015-04-20 23:42 - 00003638 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-04-20 23:34 - 2015-04-20 23:39 - 00000000 ____D () C:\AdwCleaner

2015-04-20 23:10 - 2015-04-20 23:10 - 02217984 _____ () C:\Users\VAIO\Desktop\adwcleaner_4.201.exe

2015-04-20 23:00 - 2015-04-20 23:00 - 00361608 _____ () C:\Users\VAIO\Downloads\bookmarks_4_20_15.html

2015-04-18 21:38 - 2015-04-20 22:54 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-04-18 21:38 - 2015-04-18 21:38 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-04-18 21:38 - 2015-04-18 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-04-18 21:38 - 2015-04-18 21:38 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-04-18 21:38 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-04-18 21:38 - 2015-03-17 06:15 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-04-18 21:38 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-04-18 21:37 - 2015-04-18 21:37 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\VAIO\Downloads\mbam-setup-2.1.4.1018.exe

2015-04-18 16:55 - 2015-04-21 21:18 - 02099712 _____ (Farbar) C:\Users\VAIO\Desktop\FRST64.exe

2015-04-18 16:55 - 2015-04-21 21:18 - 00000000 ____D () C:\FRST

2015-04-17 21:57 - 2015-04-17 21:57 - 00000000 ____D () C:\ProgramData\Sony Mobile

2015-04-17 21:57 - 2015-04-17 21:57 - 00000000 ____D () C:\Program Files (x86)\Sony Mobile

2015-04-17 20:29 - 2015-04-17 20:29 - 17593008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2015-04-15 22:17 - 2015-04-15 22:17 - 00000000 ____D () C:\ProgramData\TEMP

2015-04-15 17:56 - 2015-04-15 17:56 - 00000000 ____D () C:\Users\VAIO\AppData\Local\openvr

2015-04-15 12:02 - 2015-03-25 11:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-15 12:02 - 2015-03-25 11:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-15 12:02 - 2015-03-25 11:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-15 12:02 - 2015-03-25 11:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-15 12:02 - 2015-03-25 11:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-15 12:02 - 2015-03-25 11:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-15 12:02 - 2015-03-25 11:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-15 12:02 - 2015-03-25 11:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-15 12:02 - 2015-03-25 11:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-15 12:02 - 2015-03-25 11:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-15 12:02 - 2015-03-25 11:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-15 12:02 - 2015-03-25 11:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-04-15 12:02 - 2015-03-25 11:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-04-15 12:02 - 2015-03-25 11:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-04-15 12:02 - 2015-03-25 11:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-04-15 12:02 - 2015-03-25 11:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-04-15 12:02 - 2015-03-23 11:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-15 12:02 - 2015-03-23 11:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-15 12:02 - 2015-03-23 11:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-15 12:02 - 2015-03-23 11:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-15 12:02 - 2015-03-23 11:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-15 12:02 - 2015-03-23 11:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-15 12:02 - 2015-03-23 11:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-15 12:02 - 2015-03-23 11:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-15 12:02 - 2015-03-17 13:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-15 12:02 - 2015-03-17 13:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-15 12:02 - 2015-03-17 13:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-15 12:02 - 2015-03-17 13:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-15 12:02 - 2015-03-17 13:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-04-15 12:02 - 2015-03-17 13:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-04-15 12:02 - 2015-03-17 13:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-15 12:02 - 2015-03-17 13:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-15 12:02 - 2015-03-17 13:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-15 12:02 - 2015-03-17 13:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-04-15 12:02 - 2015-03-17 13:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-04-15 12:02 - 2015-03-17 13:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-15 12:02 - 2015-03-17 13:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-15 12:02 - 2015-03-17 13:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-15 12:02 - 2015-03-17 13:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 13:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-04-15 12:02 - 2015-03-17 13:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-04-15 12:02 - 2015-03-17 12:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-04-15 12:02 - 2015-03-17 12:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-04-15 12:02 - 2015-03-17 12:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-04-15 12:02 - 2015-03-17 12:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-04-15 12:02 - 2015-03-17 12:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-04-15 12:02 - 2015-03-17 12:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-04-15 12:02 - 2015-03-17 12:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-04-15 12:02 - 2015-03-17 12:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-04-15 12:02 - 2015-03-17 12:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-04-15 12:02 - 2015-03-17 12:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-04-15 12:02 - 2015-03-17 12:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-04-15 12:02 - 2015-03-17 12:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-04-15 12:02 - 2015-03-17 12:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-04-15 12:02 - 2015-03-17 12:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-04-15 12:02 - 2015-03-17 12:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-04-15 12:02 - 2015-03-17 12:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-04-15 12:02 - 2015-03-17 12:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-04-15 12:02 - 2015-03-17 12:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-04-15 12:02 - 2015-03-17 12:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 12:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 11:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-04-15 12:02 - 2015-03-17 11:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-04-15 12:02 - 2015-03-17 11:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 11:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 11:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-04-15 12:02 - 2015-03-17 11:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-04-15 12:02 - 2015-03-10 11:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-15 12:02 - 2015-03-10 11:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-15 12:02 - 2015-03-10 11:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-04-15 12:02 - 2015-03-10 11:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-04-15 12:02 - 2015-03-05 13:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-15 12:02 - 2015-03-05 12:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-04-15 12:01 - 2015-02-25 11:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-04-15 11:58 - 2015-04-02 08:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-04-15 11:58 - 2015-04-02 07:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-04-15 11:58 - 2015-03-13 12:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-04-15 11:58 - 2015-03-13 12:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-04-15 11:58 - 2015-03-13 12:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-04-15 11:58 - 2015-03-13 12:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-04-15 11:58 - 2015-03-13 12:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-04-15 11:58 - 2015-03-13 12:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-04-15 11:58 - 2015-03-13 12:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-04-15 11:58 - 2015-03-13 12:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-04-15 11:58 - 2015-03-13 12:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-04-15 11:58 - 2015-03-13 12:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-04-15 11:58 - 2015-03-13 11:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-04-15 11:58 - 2015-03-13 11:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-04-15 11:58 - 2015-03-13 11:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-04-15 11:58 - 2015-03-13 11:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-04-15 11:58 - 2015-03-13 11:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-04-15 11:58 - 2015-03-13 11:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-04-15 11:58 - 2015-03-13 11:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-04-15 11:58 - 2015-03-13 11:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-04-15 11:58 - 2015-03-13 11:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-04-15 11:58 - 2015-03-13 11:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-04-15 11:58 - 2015-03-13 11:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-04-15 11:58 - 2015-03-13 11:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-04-15 11:58 - 2015-03-13 11:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-04-15 11:58 - 2015-03-13 11:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-04-15 11:58 - 2015-03-13 11:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-04-15 11:58 - 2015-03-13 11:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-04-15 11:58 - 2015-03-13 11:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-04-15 11:58 - 2015-03-13 11:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-04-15 11:58 - 2015-03-13 11:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-04-15 11:58 - 2015-03-13 11:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-04-15 11:58 - 2015-03-13 11:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-04-15 11:58 - 2015-03-13 11:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-04-15 11:58 - 2015-03-13 11:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-04-15 11:58 - 2015-03-13 11:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-04-15 11:58 - 2015-03-13 11:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-04-15 11:58 - 2015-03-13 11:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-04-15 11:58 - 2015-03-13 11:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-04-15 11:58 - 2015-03-13 11:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-04-15 11:58 - 2015-03-13 11:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-04-15 11:58 - 2015-03-13 11:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-04-15 11:58 - 2015-03-13 11:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-04-15 11:58 - 2015-03-13 11:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-04-15 11:58 - 2015-03-13 10:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-04-15 11:58 - 2015-03-13 10:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-04-15 11:58 - 2015-03-13 10:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-04-15 11:58 - 2015-03-13 10:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-04-15 11:58 - 2015-03-13 10:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-04-15 11:58 - 2015-03-13 10:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-04-15 11:58 - 2015-03-13 10:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-04-15 11:58 - 2015-03-13 10:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-04-15 11:58 - 2015-03-13 10:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-04-15 11:58 - 2015-03-13 10:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-04-15 11:58 - 2015-03-13 10:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-04-15 11:58 - 2015-03-13 10:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-04-15 11:58 - 2015-03-13 10:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-04-15 11:58 - 2015-03-13 10:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-04-15 11:55 - 2015-03-04 12:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-15 11:55 - 2015-03-04 12:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-15 11:55 - 2015-03-04 12:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-04-12 10:41 - 2015-04-18 22:01 - 00000000 ____D () C:\Program Files (x86)\TailCutter

2015-04-12 02:22 - 2015-04-12 02:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA

2015-04-12 01:43 - 2015-04-12 21:49 - 00000000 ____D () C:\Users\VAIO\Desktop\Terraria

2015-04-07 19:19 - 2015-04-07 19:19 - 00000000 ____D () C:\Users\VAIO\AppData\OICE_15_974FA576_32C1D314_3032

2015-04-05 19:36 - 2015-04-05 19:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX

2015-04-05 19:36 - 2015-04-05 19:36 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-01 16:52 - 2015-04-16 16:09 - 00000000 ____D () C:\Users\VAIO\Desktop\Super Smash Lander Suicide Party, Bro_Data

2015-03-31 22:31 - 2012-01-10 01:20 - 08948736 _____ () C:\Users\VAIO\Desktop\Super Smash Lander Suicide Party, Bro.exe

2015-03-31 18:38 - 2015-03-31 18:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2015-03-31 18:38 - 2015-03-31 18:38 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2015-03-31 18:38 - 2015-03-30 15:25 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys

2015-03-30 22:58 - 2015-03-30 22:58 - 00000000 ____D () C:\Users\VAIO\AppData\OICE_15_974FA576_32C1D314_1791

2015-03-29 22:55 - 2015-03-29 22:56 - 00000000 ____D () C:\Users\VAIO\AppData\Local\Sony

2015-03-29 22:55 - 2015-03-29 22:55 - 00001885 _____ () C:\Users\Public\Desktop\Media Go.lnk

2015-03-29 22:54 - 2015-03-29 22:55 - 00000000 ____D () C:\Program Files (x86)\Sony Media Go Install

2015-03-29 22:52 - 2015-03-29 22:56 - 00000000 ____D () C:\Users\VAIO\AppData\Roaming\Sony

2015-03-29 22:52 - 2015-03-29 22:52 - 00000000 ____D () C:\ProgramData\Package Cache

2015-03-28 02:36 - 2015-03-28 02:36 - 00001753 _____ () C:\Users\Public\Desktop\iTunes.lnk

2015-03-28 02:36 - 2015-03-28 02:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-03-28 02:36 - 2015-03-28 02:36 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7

2015-03-28 02:36 - 2015-03-28 02:36 - 00000000 ____D () C:\Program Files\iTunes

2015-03-28 02:36 - 2015-03-28 02:36 - 00000000 ____D () C:\Program Files\iPod

2015-03-28 02:36 - 2015-03-28 02:36 - 00000000 ____D () C:\Program Files (x86)\iTunes

 

==================== One Month Modified Files and Folders =======

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2015-04-21 21:18 - 2014-03-27 01:55 - 02070090 _____ () C:\Windows\WindowsUpdate.log

2015-04-21 21:16 - 2014-07-25 12:23 - 00000000 ____D () C:\Users\VAIO\AppData\Roaming\Skype

2015-04-21 21:15 - 2015-03-06 19:42 - 00016248 _____ () C:\Windows\setupact.log

2015-04-21 21:15 - 2015-03-04 01:15 - 00000000 ____D () C:\Users\VAIO\AppData\Local\LogMeIn Hamachi

2015-04-21 21:15 - 2009-07-14 13:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-04-21 08:05 - 2014-05-02 14:21 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-04-21 00:14 - 2009-07-14 12:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-04-21 00:14 - 2009-07-14 12:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-04-21 00:11 - 2009-07-14 13:13 - 00783440 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-21 00:07 - 2014-03-26 11:32 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{5B9FBAF3-D635-4C5D-9905-114439A3A287}

2015-04-21 00:07 - 2010-07-21 06:03 - 00436546 _____ () C:\Windows\PFRO.log

2015-04-20 23:43 - 2014-05-02 14:29 - 00000000 ____D () C:\Users\VAIO\AppData\Local\Google

2015-04-20 23:43 - 2014-05-02 14:29 - 00000000 ____D () C:\Program Files (x86)\Google

2015-04-20 23:42 - 2014-05-02 14:28 - 00000000 ____D () C:\Users\VAIO\AppData\Local\Deployment

2015-04-20 23:29 - 2014-06-29 14:35 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2015-04-20 23:29 - 2009-07-14 12:45 - 00000000 ____D () C:\Windows\Setup

2015-04-20 23:27 - 2009-07-14 11:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2015-04-20 23:27 - 2009-07-14 11:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy

2015-04-20 00:52 - 2014-12-20 21:21 - 00000000 ____D () C:\Windows\rescache

2015-04-19 21:26 - 2015-01-27 21:19 - 00000000 ____D () C:\Users\VAIO\Downloads\College

2015-04-19 19:42 - 2014-05-02 14:33 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-04-18 22:02 - 2009-07-14 15:46 - 00000000 ____D () C:\Windows\ShellNew

2015-04-18 10:04 - 2009-07-14 11:20 - 00000000 ____D () C:\Windows\AppCompat

2015-04-18 00:24 - 2009-07-14 11:20 - 00000000 ____D () C:\Windows\registration

2015-04-17 20:29 - 2014-05-02 14:21 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-04-17 20:29 - 2014-05-02 14:21 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-04-17 20:29 - 2014-05-02 14:21 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-04-16 00:59 - 2014-03-26 11:32 - 00000000 ____D () C:\Users\VAIO

2015-04-15 22:12 - 2014-07-25 12:04 - 00000000 ____D () C:\Users\VAIO\Desktop\Broforce

2015-04-15 17:46 - 2014-12-13 19:30 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-15 17:46 - 2014-05-05 16:35 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-15 17:41 - 2014-04-22 05:46 - 00776054 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-04-15 14:29 - 2014-03-27 09:04 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-04-15 14:29 - 2014-03-27 09:04 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-15 11:44 - 2009-07-14 11:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-04-14 14:22 - 2014-03-27 12:11 - 00000000 ____D () C:\Users\VAIO\AppData\Roaming\Adobe

2015-04-14 14:17 - 2014-08-14 00:43 - 00000000 ____D () C:\ProgramData\FLEXnet

2015-04-13 06:26 - 2009-07-14 13:08 - 00032622 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-04-12 02:23 - 2014-05-20 21:02 - 00000000 ____D () C:\Users\VAIO\Documents\My Games

2015-03-29 22:55 - 2014-12-24 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

2015-03-29 22:55 - 2014-03-27 02:01 - 00000000 ____D () C:\Program Files (x86)\Sony

2015-03-29 22:55 - 2010-07-21 07:38 - 00000000 ____D () C:\ProgramData\Sony Corporation

2015-03-29 22:43 - 2014-03-26 17:01 - 00000000 ____D () C:\Users\VAIO\AppData\Local\Sony Corporation

2015-03-28 02:36 - 2014-07-22 20:51 - 00000000 ____D () C:\Program Files\Common Files\Apple

 

==================== Files in the root of some directories =======

 

2014-05-04 23:49 - 2015-01-18 09:09 - 0000131 _____ () C:\Users\VAIO\AppData\Roaming\WB.CFG

2014-09-30 12:13 - 2014-09-30 12:13 - 0000000 ____H () C:\Users\VAIO\AppData\Local\BITCDDB.tmp

2012-05-03 19:12 - 2012-05-03 19:12 - 0000532 _____ () C:\Users\VAIO\AppData\Local\datos.txt

 

Some content of TEMP:

====================

C:\Users\VAIO\AppData\Local\Temp\Quarantine.exe

C:\Users\VAIO\AppData\Local\Temp\sqlite3.dll

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2015-04-20 00:45

 

==================== End Of Log ============================

[flydudet900]

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-04-2015

Ran by VAIO at 2015-04-21 21:19:28

Running from C:\Users\VAIO\Desktop

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}

AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated)

Adobe Premiere Elements 8.0 (HKLM-x32\...\PremElem80) (Version: 8.0 - Adobe Systems Incorporated)

Adobe Reader 9.3 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A93000000001}) (Version: 9.3.0 - Adobe Systems Incorporated)

Apple Application Support (32-bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.115 - ArcSoft)

ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.390 - ArcSoft)

Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden

BitTorrent (HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\...\BitTorrent) (Version: 7.9.2.32895 - BitTorrent Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

DAEMON Tools Pro Advanced (HKLM-x32\...\DAEMON Tools Pro Advanced) (Version:  - )

Double Action: Boogaloo (HKLM-x32\...\Steam App 317360) (Version:  - Double Action Factory)

Evernote v. 5.8.4 (HKLM-x32\...\{C15841A6-C20A-11E4-977D-00163E98E7D6}) (Version: 5.8.4.6870 - Evernote Corp.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)

Intel® PROSet/Wireless WiFi Software (HKLM\...\{D16A2127-B927-4379-B153-3DEC091E4EEB}) (Version: 13.02.1000 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)

Intel® Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation)

iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)

Java™ 6 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.)

Java™ 6 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.)

Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden

Malwarebytes Anti-Malware version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)

McAfee SecurityCenter (HKLM-x32\...\MSC) (Version: 12.8.934 - McAfee, Inc.)

Media Gallery (Version: 2.0.0.11150 - Sony Corporation) Hidden

Media Go (HKLM-x32\...\{AF06B8FA-B916-4001-AE51-6645488DEF09}) (Version: 2.8.303 - Sony)

Media Go Network Downloader (HKLM-x32\...\{5562F05F-908C-4F15-9B3C-98D5FD32DCAB}) (Version: 1.5.19.0 - Sony)

Media Go Video Playback Engine 2.12.110.06300 (HKLM-x32\...\{15023164-F226-9ECA-D0CB-59AB4B40D222}) (Version: 2.12.110.06300 - Sony)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4701.1002 - Microsoft Corporation)

Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)

NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.61.39 - NVIDIA Corporation)

NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden

PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.3.00.06040 - Sony Corporation)

PMB VAIO Edition Guide (x32 Version: 1.5.00.03020 - Sony Corporation) Hidden

PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00 - Sony Corporation) Hidden

PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00 - Sony Corporation) Hidden

PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00.06180 - Sony Corporation) Hidden

PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.3.00.06110 - Sony Corporation) Hidden

PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00 - Sony Corporation) Hidden

PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00 - Sony Corporation) Hidden

PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00.06180 - Sony Corporation) Hidden

Prepare Your VAIO (Version: 5.0.06070 - Sony Corporation) Hidden

Prepare Your VAIO (x32 Version: 5.0.0.06120 - Sony Corporation) Hidden

Protector Suite 2009 (HKLM\...\{0F841121-4DB6-4B31-839F-7F5AB3BB3423}) (Version: 5.9.3.6321 - UPEK Inc.)

Qualcomm Gobi 2000 Package for Sony (HKLM-x32\...\{A91C7D28-59EE-41D4-88C8-F273FFBC4564}) (Version: 1.1.80 - QUALCOMM)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6028 - Realtek Semiconductor Corp.)

Remote Keyboard (x32 Version: 1.1.1.03020 - Sony Corporation) Hidden

Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)

Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)

SmartSound Quicktracks for Premiere Elements 8.0 (HKLM-x32\...\InstallShield_{4685A344-6718-4923-AA9D-158A0A2E1CFB}) (Version: 3.11.3090 - SmartSound Software Inc)

SmartSound Quicktracks for Premiere Elements 8.0 (x32 Version: 3.11.3090 - SmartSound Software Inc) Hidden

Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.15.5.201504081732 - Sony Mobile Communications Inc.)

Sony PC Companion 2.10.251 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.251 - Sony)

SQLite_3_7_8_x64 (Version: 3.7.8.0 - Sony Corporation) Hidden

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.16.0 - Synaptics Incorporated)

Tabletop Simulator (HKLM-x32\...\Steam App 286160) (Version:  - Berserk Games)

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

Unity Web Player (HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\...\UnityWebPlayer) (Version: 4.6.2f1 - Unity Technologies ApS)

Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)

VAIO - Media Gallery (HKLM-x32\...\{DD696AF7-8A89-41D5-976A-2053E41A69BE}) (Version: 2.0.1.12040 - Sony Corporation)

VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.03020 - Sony Corporation)

VAIO - PMB VAIO Edition plug-in (Click to Disc) (HKLM-x32\...\InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}) (Version: 3.3.00.06180 - Sony Corporation)

VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer) (HKLM-x32\...\InstallShield_{1873FFC1-FDCB-47E1-B7C7-F418211E3530}) (Version: 1.3.00.06110 - Sony Corporation)

VAIO - PMB VAIO Edition plug-in (VAIO Movie Story) (HKLM-x32\...\InstallShield_{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}) (Version: 2.3.00.06180 - Sony Corporation)

VAIO - Remote Keyboard (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.0.1.03020 - Sony Corporation)

VAIO - Xperia Link (HKLM-x32\...\{D91558BF-D1F3-411F-AEFE-8774CB406512}) (Version: 1.1.2.08070 - Sony Corporation)

VAIO Care (HKLM\...\{55A60C1D-BEBF-4249-BFB2-F4E5C2E77988}) (Version: 8.4.1.07021 - Sony Corporation)

VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.3.0.05310 - Sony Corporation)

VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.4.0.05240 - Sony Corporation)

VAIO Data Restore Tool (x32 Version: 1.4.0.05240 - Sony Corporation) Hidden

VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.2.00.05120 - Sony Corporation)

VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.2.02200 - Sony Corporation)

VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.2.0.07020 - Sony Corporation)

VAIO Hardware Diagnostics (x32 Version: 4.0.0.06230 - Sony Corporation) Hidden

VAIO Manual (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 1.1.0.05280 - Sony Corporation)

VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.1.0.18210 - Sony Corporation)

VAIO Media plus (Version: 2.1.0 - Sony Corporation) Hidden

VAIO Media plus (x32 Version: 2.1.0.18210 - Sony Corporation) Hidden

VAIO Media plus Opening Movie (HKLM-x32\...\{6BF03C88-C06A-48DC-B9A1-FE72B24E5FA9}) (Version: 2.1.0.14080 - Sony Corporation)

VAIO Movie Story Template Data (HKLM-x32\...\InstallShield_{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}) (Version: 2.3.00.06040 - Sony Corporation)

VAIO Movie Story Template Data (x32 Version: 2.3.00.06040 - Sony Corporation) Hidden

VAIO Platform Update Program (HKLM-x32\...\{69DABBAD-F800-4060-9730-CCA6FFDC2D23}) (Version: 1.1.0.12290 - Sony Corporation)

VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.3.0.06040 - Sony Corporation)

VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.3.1.08110 - Sony Corporation)

VAIO Transfer Support (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.2.0.06230 - Sony Corporation)

VGClientX64 (Version: 1.0.0 - Sony Corporation) Hidden

VGClientX86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden

VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden

VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden

WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.5600 - Broadcom Corporation)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)

Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)

Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XperiaLinkx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

CustomCLSID: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2362847013-1138255259-1108517563-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\VAIO\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation)

 

==================== Restore Points  =========================

 

20-04-2015 23:27:22 Restore Point Created by FRST

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2009-07-14 10:34 - 2009-06-11 05:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

 

==================== Scheduled Tasks (whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

 

Task: {02EAC5D3-2618-4125-8A6B-3CD5BE025F8B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-17] (Adobe Systems Incorporated)

Task: {06AB7E5C-C91D-47EB-994F-786F9224A030} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-07-02] (Sony Corporation)

Task: {10419250-CB6B-44E0-A0FA-3B0BB00F5A39} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"

Task: {1B765AAA-7F31-4EE9-9710-FE3865AC709D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-20] (Google Inc.)

Task: {21EFE256-1AB7-48FE-B6B7-9190DAB78FBD} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-07-02] (Sony Corporation)

Task: {234FCFF5-F0DD-485B-8B94-1D73D0B33931} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-07-02] (Sony Corporation)

Task: {2E5B744E-D495-4F1B-9D53-6C7A2416833D} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2012-02-20] (Sony Corporation)

Task: {3171E773-6B5C-4F52-B077-9E67C28095A8} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-07-02] (Sony Corporation)

Task: {36B54DC7-205A-4E94-8A14-B9FE8129F7F7} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2014-01-16] (Sony Corporation)

Task: {3C099D06-A836-4D26-B11D-556C464558A1} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)

Task: {3F3F6B27-6E89-4F96-8476-A9199698B467} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-06-01] (Sony Corporation)

Task: {44C89AEC-F15D-4C63-86F2-D81290C9AEFD} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {48744F82-61E9-4DD9-8D23-4A6E4B0B2A19} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-07-02] (Sony Corporation)

Task: {4A7CF6F7-B271-4CBE-9025-B09CA46585B9} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {4E6587D7-4330-4BFD-8B94-6714006371CF} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)

Task: {56C63ACD-5C43-46C8-AF83-8FC37F43B2ED} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {6241AFA7-01BD-4F2E-BB84-5393AA1007F1} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-22] (Sony Corporation)

Task: {6A501329-3564-4506-817A-EBFDE5663A2F} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)

Task: {7520AF19-8DF9-4691-801B-6FB5BEB2B600} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-07-02] (Sony Corporation)

Task: {7BE0E1B4-FDC6-49C2-BA50-67E866D547F8} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-07-02] (Sony Corporation)

Task: {87C9EB0E-1C99-4088-B3A4-7F744FFB4717} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {A229F16B-FB96-4BB1-9534-993A976428A8} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music VAIO => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2011-10-03] (Sony Corporation)

Task: {A5E7481A-5B1E-449B-9FD3-91782A4D8F33} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-07-02] (Sony Corporation)

Task: {A8168B76-8EEF-4468-87ED-6C586A18091D} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-06-01] (Sony Corporation)

Task: {B6A54337-C844-4FC7-AAFB-7B5655FCB801} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-20] (Google Inc.)

Task: {BD08FE7C-E6B6-4F77-BA81-1A9A47903FD0} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)

Task: {C1635FD8-772D-47D6-B945-F784A45E51FD} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-07-02] (Sony Corporation)

Task: {D063594D-6FB5-4524-B6FE-A7817780929C} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-22] (Sony Corporation)

Task: {D0810315-9429-40E3-9971-5DB405C741F1} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-07-02] (Sony Corporation)

Task: {DA95A189-6867-4AE1-9458-B5D02E03D20B} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {DC9E4CAB-5499-4FD6-8708-9CC2EB416366} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2014-06-25] (Sony Corporation)

Task: {E40D85C4-B3A1-496A-973E-041551CDCA50} - System32\Tasks\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool => C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe

Task: {E980CD5F-5378-4DEC-B4BE-5183ABB327E8} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-22] (Sony Corporation)

Task: {F7C3854D-5C6E-40C6-A0E3-D3E544F95F85} - System32\Tasks\Sony Corporation\Xperia Link\Xperia Link Logon Start => C:\Program Files (x86)\Sony\Xperia Link\Xperia Link.exe [2013-05-28] (Sony Corporation)

Task: {FB65A256-9323-414F-B6F8-148CDA2F7AB2} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2014-03-01] (Sony Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

 

==================== Loaded Modules (whitelisted) ==============

 

2010-03-06 00:21 - 2010-03-06 00:21 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll

2015-03-18 21:48 - 2015-01-27 23:29 - 08898720 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2015-02-13 04:20 - 2015-02-13 04:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-02-13 04:20 - 2015-02-13 04:20 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2014-11-21 15:45 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2014-12-24 16:11 - 2014-06-23 08:07 - 00113376 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe

2013-11-01 14:59 - 2013-11-01 14:59 - 00062464 _____ () C:\Program Files\Sony\VAIO Care\listener.exe

2014-03-27 02:02 - 2010-06-01 10:18 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll

2014-03-27 02:02 - 2010-06-01 10:18 - 00013312 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll

2013-05-14 23:33 - 2013-05-14 23:33 - 00002560 _____ () C:\Users\VAIO\Documents\Daemon Tools Pro Advanced v5.3.0.0359\SPTD\DAEMON Tools Pro Advanced\MSIMG32.dll

2014-12-24 16:11 - 2012-04-30 10:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll

2014-12-24 16:11 - 2014-12-04 14:18 - 00241152 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll

2011-07-07 14:54 - 2011-07-07 14:54 - 00233984 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll

2014-12-24 16:11 - 2013-05-20 11:58 - 00620718 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\sqlite3.dll

2014-12-24 16:11 - 2010-01-11 15:44 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll

2015-02-16 14:57 - 2015-02-16 14:57 - 00669696 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdate.dll

2015-03-03 18:29 - 2015-03-03 18:29 - 00439304 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll

2015-03-03 18:29 - 2015-03-03 18:29 - 00321032 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll

2014-11-22 12:54 - 2014-11-22 12:54 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll

2015-04-20 23:43 - 2015-04-14 05:55 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libglesv2.dll

2015-04-20 23:43 - 2015-04-14 05:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libegl.dll

2014-11-07 20:20 - 2014-11-07 20:20 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3d576cbc4ffc5ad06fd61510c5d8f326\IsdiInterop.ni.dll

2010-07-21 06:14 - 2010-03-04 11:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

 

==================== EXE Association (whitelisted) ===============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

 

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-2362847013-1138255259-1108517563-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\VAIO\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.0.1

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

(Currently there is no automatic fix for this section.)

 

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-2362847013-1138255259-1108517563-500 - Administrator - Disabled)

Guest (S-1-5-21-2362847013-1138255259-1108517563-501 - Limited - Disabled)

VAIO (S-1-5-21-2362847013-1138255259-1108517563-1000 - Administrator - Enabled) => C:\Users\VAIO

 

==================== Faulty Device Manager Devices =============

 

Name: McAfee Inc. mfeapfk

Description: McAfee Inc. mfeapfk

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: mfeapfk

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft Teredo Tunneling Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (04/21/2015 09:15:08 PM) (Source: McLogEvent) (EventID: 5022) (User: NT AUTHORITY)

Description: MCSCAN32 Engine Initialisation failed.

Engine returned error : 1

 

Error: (04/21/2015 06:57:34 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 9828

 

Error: (04/21/2015 06:57:34 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 9828

 

Error: (04/21/2015 06:57:34 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

 

Error: (04/21/2015 00:07:19 AM) (Source: McLogEvent) (EventID: 5022) (User: NT AUTHORITY)

Description: MCSCAN32 Engine Initialisation failed.

Engine returned error : 1

 

Error: (04/20/2015 11:40:35 PM) (Source: McLogEvent) (EventID: 5022) (User: NT AUTHORITY)

Description: MCSCAN32 Engine Initialisation failed.

Engine returned error : 1

 

Error: (04/20/2015 11:29:50 PM) (Source: McLogEvent) (EventID: 5022) (User: NT AUTHORITY)

Description: MCSCAN32 Engine Initialisation failed.

Engine returned error : 1

 

Error: (04/20/2015 11:27:22 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.

.

This is often caused by incorrect security settings in either the writer or requestor process.

 

 

Operation:

   Gathering Writer Data

 

Context:

   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}

   Writer Name: System Writer

   Writer Instance ID: {ad18cea8-c11f-4933-b7d5-099e92965d1b}

 

Error: (04/20/2015 10:56:29 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: VcmINSMgr.exe, version: 3.9.40.9080, time stamp: 0x4e6853d7

Faulting module name: VzCdb.dll_unloaded, version: 0.0.0.0, time stamp: 0x4e7162bf

Exception code: 0xc0000005

Fault offset: 0x735c0468

Faulting process id: 0xe94

Faulting application start time: 0xVcmINSMgr.exe0

Faulting application path: VcmINSMgr.exe1

Faulting module path: VcmINSMgr.exe2

Report Id: VcmINSMgr.exe3

 

Error: (04/20/2015 10:42:35 PM) (Source: McLogEvent) (EventID: 5022) (User: NT AUTHORITY)

Description: MCSCAN32 Engine Initialisation failed.

Engine returned error : 1

 

 

System errors:

=============

Error: (04/21/2015 09:15:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The McAfee Inc. mfeapfk service failed to start due to the following error: 

%%1243

 

Error: (04/21/2015 08:05:16 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

 

Error: (04/21/2015 00:07:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The McAfee Inc. mfeapfk service failed to start due to the following error: 

%%1243

 

Error: (04/20/2015 11:40:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The McAfee Inc. mfeapfk service failed to start due to the following error: 

%%1243

 

Error: (04/20/2015 11:39:57 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)

Description: WLAN Extensibility Module has stopped unexpectedly.

 

Module Path: C:\Windows\System32\IWMSSvc.dll

 

Error: (04/20/2015 11:39:57 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)

Description: WLAN Extensibility Module has stopped unexpectedly.

 

Module Path: C:\Windows\System32\IWMSSvc.dll

 

Error: (04/20/2015 11:39:52 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)

Description: WLAN Extensibility Module has stopped unexpectedly.

 

Module Path: C:\Windows\System32\IWMSSvc.dll

 

Error: (04/20/2015 11:39:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Application Virtualization Client service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (04/20/2015 11:39:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Windows Presentation Foundation Font Cache 3.0.0.0 service terminated unexpectedly.  It has done this 2 time(s).

 

Error: (04/20/2015 11:39:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Microsoft Office ClickToRun Service service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

 

 

Microsoft Office Sessions:

=========================

Error: (04/21/2015 09:15:08 PM) (Source: McLogEvent) (EventID: 5022) (User: NT AUTHORITY)

Description: 1

 

Error: (04/21/2015 06:57:34 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 9828

 

Error: (04/21/2015 06:57:34 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 9828

 

Error: (04/21/2015 06:57:34 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

 

Error: (04/21/2015 00:07:19 AM) (Source: McLogEvent) (EventID: 5022) (User: NT AUTHORITY)

Description: 1

 

Error: (04/20/2015 11:40:35 PM) (Source: McLogEvent) (EventID: 5022) (User: NT AUTHORITY)

Description: 1

 

Error: (04/20/2015 11:29:50 PM) (Source: McLogEvent) (EventID: 5022) (User: NT AUTHORITY)

Description: 1

 

Error: (04/20/2015 11:27:22 PM) (Source: VSS) (EventID: 8194) (User: )

Description: 0x80070005, Access is denied.

 

 

Operation:

   Gathering Writer Data

 

Context:

   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}

   Writer Name: System Writer

   Writer Instance ID: {ad18cea8-c11f-4933-b7d5-099e92965d1b}

 

Error: (04/20/2015 10:56:29 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: VcmINSMgr.exe3.9.40.90804e6853d7VzCdb.dll_unloaded0.0.0.04e7162bfc0000005735c0468e9401d07b783c366d60C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exeVzCdb.dll6c928b80-e76d-11e4-ac1c-0024bed746b3

 

Error: (04/20/2015 10:42:35 PM) (Source: McLogEvent) (EventID: 5022) (User: NT AUTHORITY)

Description: 1

 

 

==================== Memory info =========================== 

 

Processor: Intel® Core™ i5 CPU M 580 @ 2.67GHz

Percentage of memory in use: 57%

Total physical RAM: 5813.82 MB

Available physical RAM: 2475.86 MB

Total Pagefile: 10816.12 MB

Available Pagefile: 7318.83 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:106.06 GB) (Free:6.62 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: EAC322EA)

Partition 1: (Not Active) - (Size=13.1 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=106.1 GB) - (Type=07 NTFS)

 

==================== End Of Log ============================

[flydudet900]

Restarted several times every 5 mins. It used to bring up the ClipConverter prompts with a new file out of nowhere on desktop upon startup. So far, none of that happened every time on startup.

 

I can even tell the difference to how my computer sounds. Most probably the computer's not processing the trojan codes anymore. Unless theres still any problems you see in the logs.

 

Again, thanks a million for everything.

[Essexboy]

Chrome now looks good

Subject to no further problems

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Remove tools

Download and run Delfix
Select the options as shown



: Keep Java Updated :

WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article

I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)

If you do need to keep Java then download JavaRa
Run the programme and select Remove Java Runtime. Uninstall all versions of Java present
Once done then run it again and select Update Java runtime > Download and install Latest version



Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware



Malwarebytes.

Update and run weekly to keep your system clean

Unchecky

Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.