Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Adware Keep Popping Up Every time I surf the Internet. [Closed]


  • This topic is locked This topic is locked

#1
nonames123

nonames123

    New Member

  • Member
  • Pip
  • 1 posts
Hello ! my computer infect with a virus that block access the internet and when I click on my internet browser the background on all my pages is pink. I don't know how this happened, how can I make it normal again? also get ad showing  up when i surf the internet. Need Help
 
Thank you !
 
here are the logs
 
 
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-04-2015 01
Ran by Quinntaro (administrator) on G73 on 27-04-2015 10:31:58
Running from C:\Users\Quinntaro\Downloads
Loaded Profiles: Quinntaro (Available profiles: Quinntaro)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Anvisoft) C:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe
(Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel® Corporation) C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Robert Misiak) C:\Program Files (x86)\ChronosXP\ChronosXP.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
(Trend Micro Inc.) C:\Users\Quinntaro\Downloads\HijackThis.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Quinntaro\Downloads\FRST64 (1).exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-12-31] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3011824 2013-01-11] (Synaptics Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-46795753-3919011366-3819783517-1001\...\Run: [ChronosXP] => C:\Program Files (x86)\ChronosXP\ChronosXP.exe [599040 2009-04-12] (Robert Misiak)
HKU\S-1-5-21-46795753-3919011366-3819783517-1001\...\Policies\Explorer: [NoInstrumentation] 0
HKU\S-1-5-21-46795753-3919011366-3819783517-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2428704 2015-01-20] (IObit)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
Startup: C:\Users\Quinntaro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk [2012-06-30]
ShortcutTarget: Stardock ObjectDock.lnk -> C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe (Stardock)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-46795753-3919011366-3819783517-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-46795753-3919011366-3819783517-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-46795753-3919011366-3819783517-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
SearchScopes: HKU\.DEFAULT -> {4C4C7AAB-5854-4241-A414-E2F1EF119C4A} URL = http://www.dnsbasic....s={searchTerms}
SearchScopes: HKU\S-1-5-21-46795753-3919011366-3819783517-1001 -> {13EBD312-3C74-4021-82AD-64F07C2CAC3D} URL = https://search.yahoo...p={searchTerms}
SearchScopes: HKU\S-1-5-21-46795753-3919011366-3819783517-1001 -> {16C9ABCB-C9EB-4990-884E-5755F2681677} URL = http://search.yahoo....p={searchTerms}
SearchScopes: HKU\S-1-5-21-46795753-3919011366-3819783517-1001 -> {43682B77-B546-4606-A6AD-D81710E1AB36} URL = 
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-10-17] (Kaspersky Lab ZAO)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll [2014-08-19] (Oracle Corporation)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll [2014-08-19] (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll [2012-11-13] (Safer-Networking Ltd.)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-10-17] (Kaspersky Lab ZAO)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-19] (Oracle Corporation)
BHO-x32: Ads Removal -> {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll [2014-06-11] (Adblock)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2014-10-17] (IObit)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-19] (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-04-20] (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - TextAloud - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - C:\Program Files (x86)\TextAloud\TAForIE.dll [2007-08-25] ()
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.syste...tel_4.5.5.0.cab
Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 68.105.28.12 68.105.29.12 68.105.28.11
Tcpip\Parameters: [NameServer] 66.228.116.178,66.228.116.179
 
FireFox:
========
FF ProfilePath: C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288
FF DefaultSearchEngine: Google
FF DefaultSearchEngine.US: Google
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-07] ()
FF Plugin: @java.com/DTPlugin,version=11.11.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll [2014-08-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.11.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll [2014-08-19] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll [2012-10-04] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-19] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected] [2014-10-17] ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected] [2014-10-17] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected] [2014-10-17] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-03-16] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-46795753-3919011366-3819783517-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Quinntaro\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2013-05-30] (Citrix Online)
FF Plugin HKU\S-1-5-21-46795753-3919011366-3819783517-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Quinntaro\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF Plugin HKU\S-1-5-21-46795753-3919011366-3819783517-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Quinntaro\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-10-03] (Google)
FF Plugin HKU\S-1-5-21-46795753-3919011366-3819783517-1001: @talk.google.com/O1DPlugin -> C:\Users\Quinntaro\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-10-03] (Google)
FF Plugin HKU\S-1-5-21-46795753-3919011366-3819783517-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Quinntaro\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin HKU\S-1-5-21-46795753-3919011366-3819783517-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Quinntaro\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF user.js: detected! => C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288\user.js [2014-12-15]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2014-11-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2014-11-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2014-11-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2014-11-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2014-11-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Quinntaro\AppData\Roaming\mozilla\plugins\npatgpc.dll [2015-01-24] (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Users\Quinntaro\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2014-10-03] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Quinntaro\AppData\Roaming\mozilla\plugins\npo1d.dll [2014-10-03] (Google)
FF Extension: Ads Removal - C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288\Extensions\[email protected] [2014-08-19]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288\Extensions\[email protected] [2015-04-09]
FF Extension: PriceLEsis - C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288\Extensions\[email protected] [2015-04-27]
FF Extension: Follow.net - C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288\Extensions\[email protected] [2014-11-29]
FF Extension: LastPass - C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288\Extensions\[email protected] [2014-08-19]
FF Extension: FlashGot - C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-08-25]
FF Extension: Video DownloadHelper - C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-03-13]
FF Extension: Adblock Plus - C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-19]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected]
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected] [2014-10-17]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected]
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected] [2014-10-17]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected]
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected] [2014-10-17]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected]
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected] [2014-10-17]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected]
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\[email protected] [2014-10-17]
FF Extension: No Name - C:\Program Files (x86)\IObit Apps Toolbar\FF [Not Found]
 
Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-22]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2014-05-13]
CHR Extension: (Hootsuite Hootlet) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjgfdlplhmndoonmofmflcbiohgbkifn [2014-05-04]
CHR Extension: (Bypass Surveys) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjakedkphmphnlilokfkgkdclmhakhjg [2014-05-19]
CHR Extension: (Ads Removal) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-02-25]
CHR Extension: (BetaFish Adblocker) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-20]
CHR Extension: (No Name) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-12-02]
CHR Extension: (Cisco WebEx Extension) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2015-01-24]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-13]
CHR Extension: (FB LeadJacker) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgcengaamnheankmbmjhiegejenkkkm [2014-05-27]
CHR Extension: (vidIQ Vision for YouTube) - C:\Users\Quinntaro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pachckjkecffpdphbpmfolblodfkgbhl [2015-01-13]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S4 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-08-19] (SUPERAntiSpyware.com)
R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [815392 2014-11-04] (IObit)
R2 AnviCsbSvc; C:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe [42680 2014-08-20] (Anvisoft)
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
S4 DMAgent; C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [514048 2011-11-30] (Red Bend Ltd.) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
S4 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-01-24] (IObit)
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2724128 2015-03-12] (IObit)
S3 OpenVPNService; C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe [37176 2014-10-29] (The OpenVPN Project)
S4 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
S4 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
S4 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
S4 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2014-01-09] (Enigma Software Group USA, LLC.)
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S4 VC10SecS; C:\Program Files (x86)\Virtual CD v10\System\VC10SecS.exe [147312 2014-12-15] (H+H Software GmbH)
R2 WiMAXAppSrv; C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe [979456 2011-11-30] (Intel® Corporation) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 WinUpd; No ImagePath
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-06] (Disc Soft Ltd)
R3 esgiguard; C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [14872 2014-01-07] ()
S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [141320 2014-10-17] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [793800 2014-10-17] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [128200 2014-06-27] (Qualcomm Atheros Co., Ltd.)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-04-27] (Malwarebytes Corporation)
S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [115272 2012-03-25] (MotioninJoy) [File not signed]
S3 pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [82048 2012-09-24] (VSO Software) [File not signed]
S3 pmem; No ImagePath
R3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham64.sys [34944 2012-05-21] (SteelSeries Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 SbieDrv; No ImagePath
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32496 2013-12-31] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2013-12-31] ()
S2 SVKP; No ImagePath
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-07-23] (Anchorfree Inc.)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
R1 vdrv1000; C:\Windows\System32\DRIVERS\vdrv1000.sys [226080 2012-12-06] (H+H Software GmbH)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 WsAudioDevice_383S(1); C:\Windows\System32\drivers\WsAudioDevice_383S(1).sys [29288 2015-02-27] (Wondershare)
S3 WsAudio_Device(1); C:\Windows\System32\drivers\VirtualAudio1.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(2); C:\Windows\System32\drivers\VirtualAudio2.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(3); C:\Windows\System32\drivers\VirtualAudio3.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(4); C:\Windows\System32\drivers\VirtualAudio4.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(5); C:\Windows\System32\drivers\VirtualAudio5.sys [31080 2013-01-25] (Wondershare)
S3 gfiark; system32\drivers\gfiark.sys [X]
S3 HH10Help.sys; \??\C:\Windows\system32\drivers\HH10Help.sys [X]
S0 ntcdrdrv; system32\DRIVERS\ntcdrdrv.sys [X]
S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S0 vmci; system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-04-27 10:31 - 2015-04-27 10:32 - 00029584 _____ () C:\Users\Quinntaro\Downloads\FRST.txt
2015-04-27 10:31 - 2015-04-27 10:32 - 00000000 ____D () C:\FRST
2015-04-27 10:31 - 2015-04-27 10:31 - 02100736 _____ (Farbar) C:\Users\Quinntaro\Downloads\FRST64.exe
2015-04-27 10:31 - 2015-04-27 10:31 - 02100736 _____ (Farbar) C:\Users\Quinntaro\Downloads\FRST64 (1).exe
2015-04-27 10:28 - 2015-04-27 10:28 - 00388608 _____ (Trend Micro Inc.) C:\Users\Quinntaro\Downloads\HijackThis.exe
2015-04-27 10:28 - 2015-04-27 10:28 - 00011619 _____ () C:\Users\Quinntaro\Downloads\hijackthis.log
2015-04-27 10:28 - 2015-04-27 10:28 - 00011619 _____ () C:\Users\Quinntaro\Desktop\hijackthis.log
2015-04-27 09:44 - 2015-04-27 09:55 - 00000112 _____ () C:\Windows\setupact.log
2015-04-27 09:44 - 2015-04-27 09:44 - 05068112 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-27 09:44 - 2015-04-27 09:44 - 00118872 _____ () C:\Users\Quinntaro\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-27 09:44 - 2015-04-27 09:44 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-27 09:35 - 2015-04-27 09:35 - 00000000 ____D () C:\Users\Quinntaro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2015-04-27 09:35 - 2015-04-27 09:35 - 00000000 ____D () C:\sh4ldr
2015-04-27 09:30 - 2015-04-27 09:35 - 00000000 ____D () C:\Windows\AF54923662584AC6A0435B5B89C6EB61.TMP
2015-04-27 03:10 - 2015-04-27 09:33 - 00000364 _____ () C:\Users\Quinntaro\AppData\Roaming\Safer-Networking.log
2015-04-27 02:13 - 2015-04-27 03:25 - 00010150 _____ () C:\spyhunter.fix
2015-04-27 01:40 - 2015-04-27 01:40 - 00000000 ____D () C:\Windows\pss
2015-04-27 00:30 - 2015-04-27 00:30 - 00004310 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserM_1_7_22_478699874-4155726479-3780505679-3006UA__3930393638343132332d3437415a556c2a3223346c41
2015-04-27 00:29 - 2015-04-27 00:39 - 00000000 ____D () C:\ProgramData\12466489938869628421
2015-04-27 00:28 - 2015-04-27 00:39 - 00000000 ____D () C:\ProgramData\idiehacjdceoeiofmaopehfdkmiafdlm
2015-04-27 00:28 - 2015-04-27 00:28 - 28685824 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 27907584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 24107520 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 23409152 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 15376384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-04-27 00:28 - 2015-04-27 00:28 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 08866928 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 08010968 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 07520200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 05442048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 04358656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2015-04-27 00:28 - 2015-04-27 00:28 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2015-04-27 00:28 - 2015-04-27 00:28 - 00848896 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00806912 _____ (AMD) C:\Windows\system32\coinst_14.100.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00723841 _____ () C:\Windows\system32\atiicdxx.dat
2015-04-27 00:28 - 2015-04-27 00:28 - 00638976 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-04-27 00:28 - 2015-04-27 00:28 - 00580816 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2015-04-27 00:28 - 2015-04-27 00:28 - 00580816 _____ () C:\Windows\system32\atiapfxx.blb
2015-04-27 00:28 - 2015-04-27 00:28 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00368128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-04-27 00:28 - 2015-04-27 00:28 - 00275124 _____ () C:\Windows\system32\ativvaxy_vi.dat
2015-04-27 00:28 - 2015-04-27 00:28 - 00273712 _____ () C:\Windows\system32\ativvaxy_vi_nd.dat
2015-04-27 00:28 - 2015-04-27 00:28 - 00234804 _____ () C:\Windows\system32\ativvaxy_cik.dat
2015-04-27 00:28 - 2015-04-27 00:28 - 00233008 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2015-04-27 00:28 - 2015-04-27 00:28 - 00231424 _____ () C:\Windows\system32\clinfo.exe
2015-04-27 00:28 - 2015-04-27 00:28 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00134192 _____ () C:\Windows\system32\ativce03.dat
2015-04-27 00:28 - 2015-04-27 00:28 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00117584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00091136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00082128 _____ () C:\Windows\system32\ativce02.dat
2015-04-27 00:28 - 2015-04-27 00:28 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00058880 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-04-27 00:28 - 2015-04-27 00:28 - 00000000 ____D () C:\Program Files\AMD
2015-04-27 00:28 - 2015-04-27 00:28 - 00000000 ____D () C:\Program Files (x86)\app_setup
2015-04-27 00:27 - 2015-04-27 00:27 - 03962840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-04-27 00:27 - 2015-04-27 00:27 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-04-27 00:27 - 2015-04-27 00:27 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 01099203 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-04-27 00:27 - 2015-04-27 00:27 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\SET783E.tmp
2015-04-27 00:27 - 2015-04-27 00:27 - 00110080 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2015-04-27 00:27 - 2015-04-27 00:27 - 00094720 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys
2015-04-27 00:25 - 2015-04-27 00:25 - 11527888 _____ (Intel Corporation) C:\Windows\system32\Drivers\NETwsw00.sys
2015-04-27 00:15 - 2015-04-27 00:15 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-04-27 00:15 - 2015-04-27 00:15 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-04-27 00:15 - 2015-04-27 00:15 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-04-27 00:15 - 2015-04-27 00:15 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-04-27 00:15 - 2015-04-27 00:15 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-04-27 00:15 - 2015-04-27 00:15 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-04-27 00:14 - 2015-04-27 00:14 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-04-25 23:13 - 2015-04-25 23:14 - 00000000 ____D () C:\Users\Quinntaro\Desktop\CPA
2015-04-25 01:58 - 2010-05-13 17:34 - 00014232 _____ () C:\Windows\SysWOW64\sh4native.exe
2015-04-25 01:25 - 2015-04-25 01:32 - 00000000 ____D () C:\Users\Quinntaro\Desktop\New folder (4)
2015-04-25 01:04 - 2015-04-25 01:04 - 00000000 ____D () C:\Users\Quinntaro\Desktop\IPAS
2015-04-24 19:15 - 2015-04-24 19:15 - 00010752 _____ () C:\Users\Quinntaro\Desktop\Bing Acc.et
2015-04-23 23:16 - 2015-04-23 23:16 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-04-21 04:55 - 2015-04-25 00:50 - 00000000 ____D () C:\Users\Quinntaro\Desktop\New folder (3)
2015-04-21 04:05 - 2015-04-25 00:50 - 00786933 _____ () C:\Users\Quinntaro\Desktop\1579_theeye_1920x1080-916633.jpeg
2015-04-21 03:29 - 2015-04-21 03:29 - 00000289 _____ () C:\Users\Quinntaro\Desktop\Six Rules of Traffic.txt
2015-04-19 23:36 - 2015-04-19 23:37 - 00010828 _____ () C:\Users\Quinntaro\Desktop\FileExchange_Response_27849662.csv
2015-04-18 03:11 - 2015-04-14 23:32 - 145660470 ____N () C:\Users\Quinntaro\Desktop\IMG_2831.MOV
2015-04-17 23:33 - 2015-04-18 01:23 - 00002923 _____ () C:\Users\Quinntaro\Desktop\acne.txt
2015-04-17 22:43 - 2015-04-25 01:04 - 00000000 ____D () C:\ProgramData\Freemake
2015-04-17 22:43 - 2015-04-25 01:03 - 00000000 ____D () C:\Program Files (x86)\Freemake
2015-04-17 22:43 - 2015-04-17 22:43 - 00000000 ____D () C:\Users\Quinntaro\Documents\Freemake
2015-04-17 20:51 - 2015-04-17 20:51 - 00001574 _____ () C:\Users\Quinntaro\Desktop\The Millionaire Creed.txt
2015-04-17 01:20 - 2015-04-17 01:20 - 24580529 _____ () C:\Users\Quinntaro\Downloads\Poppin Duet.mp4
2015-04-14 23:54 - 2015-04-14 23:54 - 00000000 ____D () C:\Users\Quinntaro\Desktop\New folder (2)
2015-04-14 16:15 - 2015-04-01 20:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-14 16:15 - 2015-04-01 19:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-14 16:15 - 2015-03-24 23:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-14 16:15 - 2015-03-24 23:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-14 16:15 - 2015-03-24 23:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-14 16:15 - 2015-03-24 23:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-14 16:15 - 2015-03-24 23:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-14 16:15 - 2015-03-24 23:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-14 16:15 - 2015-03-24 23:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-14 16:15 - 2015-03-24 23:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-14 16:15 - 2015-03-24 23:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-14 16:15 - 2015-03-24 23:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-14 16:15 - 2015-03-24 23:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-14 16:15 - 2015-03-24 23:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-14 16:15 - 2015-03-24 23:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-14 16:15 - 2015-03-24 23:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-14 16:15 - 2015-03-24 23:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-14 16:15 - 2015-03-24 23:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-14 16:15 - 2015-03-22 23:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-14 16:15 - 2015-03-22 23:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-14 16:15 - 2015-03-22 23:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-14 16:15 - 2015-03-22 23:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-14 16:15 - 2015-03-22 23:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-14 16:15 - 2015-03-22 23:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-14 16:15 - 2015-03-22 23:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 16:15 - 2015-03-22 23:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-14 16:15 - 2015-03-17 01:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-14 16:15 - 2015-03-17 01:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-14 16:15 - 2015-03-17 01:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-14 16:15 - 2015-03-17 01:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-14 16:15 - 2015-03-17 01:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-14 16:15 - 2015-03-17 01:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-14 16:15 - 2015-03-17 01:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-14 16:15 - 2015-03-17 01:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-14 16:15 - 2015-03-17 01:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-14 16:15 - 2015-03-17 01:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-14 16:15 - 2015-03-17 01:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-14 16:15 - 2015-03-17 01:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-14 16:15 - 2015-03-17 01:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-14 16:15 - 2015-03-17 01:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-14 16:15 - 2015-03-17 01:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 01:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-14 16:15 - 2015-03-17 01:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-14 16:15 - 2015-03-17 00:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-14 16:15 - 2015-03-17 00:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-14 16:15 - 2015-03-17 00:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-14 16:15 - 2015-03-17 00:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-14 16:15 - 2015-03-17 00:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-14 16:15 - 2015-03-17 00:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-14 16:15 - 2015-03-17 00:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-14 16:15 - 2015-03-17 00:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-14 16:15 - 2015-03-17 00:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-14 16:15 - 2015-03-17 00:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-14 16:15 - 2015-03-17 00:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-14 16:15 - 2015-03-17 00:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-14 16:15 - 2015-03-17 00:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-14 16:15 - 2015-03-17 00:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-14 16:15 - 2015-03-17 00:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-14 16:15 - 2015-03-17 00:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-14 16:15 - 2015-03-17 00:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-14 16:15 - 2015-03-17 00:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-14 16:15 - 2015-03-17 00:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 16:15 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-14 16:15 - 2015-03-16 23:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-14 16:15 - 2015-03-16 23:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-14 16:15 - 2015-03-16 23:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-14 16:15 - 2015-03-16 23:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 16:15 - 2015-03-16 23:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 16:15 - 2015-03-16 23:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-14 16:15 - 2015-03-13 00:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-14 16:15 - 2015-03-13 00:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-14 16:15 - 2015-03-13 00:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-14 16:15 - 2015-03-13 00:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-14 16:15 - 2015-03-13 00:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-14 16:15 - 2015-03-13 00:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-14 16:15 - 2015-03-13 00:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-14 16:15 - 2015-03-13 00:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-14 16:15 - 2015-03-13 00:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-14 16:15 - 2015-03-13 00:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-14 16:15 - 2015-03-12 23:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-14 16:15 - 2015-03-12 23:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-14 16:15 - 2015-03-12 23:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-14 16:15 - 2015-03-12 23:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-14 16:15 - 2015-03-12 23:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-14 16:15 - 2015-03-12 23:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-14 16:15 - 2015-03-12 23:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-14 16:15 - 2015-03-12 23:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-14 16:15 - 2015-03-12 23:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-04-14 16:15 - 2015-03-12 23:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-14 16:15 - 2015-03-12 23:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-14 16:15 - 2015-03-12 23:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-14 16:15 - 2015-03-12 23:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-14 16:15 - 2015-03-12 23:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-14 16:15 - 2015-03-12 23:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-14 16:15 - 2015-03-12 23:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-14 16:15 - 2015-03-12 23:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-14 16:15 - 2015-03-12 23:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-14 16:15 - 2015-03-12 23:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-14 16:15 - 2015-03-12 23:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-14 16:15 - 2015-03-12 23:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-14 16:15 - 2015-03-12 23:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-14 16:15 - 2015-03-12 23:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-14 16:15 - 2015-03-12 23:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-14 16:15 - 2015-03-12 23:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-14 16:15 - 2015-03-12 23:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-14 16:15 - 2015-03-12 23:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-14 16:15 - 2015-03-12 23:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-14 16:15 - 2015-03-12 23:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-14 16:15 - 2015-03-12 23:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-14 16:15 - 2015-03-12 23:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-14 16:15 - 2015-03-12 23:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-14 16:15 - 2015-03-12 22:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-14 16:15 - 2015-03-12 22:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-14 16:15 - 2015-03-12 22:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-14 16:15 - 2015-03-12 22:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-14 16:15 - 2015-03-12 22:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-14 16:15 - 2015-03-12 22:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-14 16:15 - 2015-03-12 22:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-14 16:15 - 2015-03-12 22:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-04-14 16:15 - 2015-03-12 22:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-14 16:15 - 2015-03-12 22:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-14 16:15 - 2015-03-12 22:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-14 16:15 - 2015-03-12 22:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-14 16:15 - 2015-03-12 22:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-14 16:15 - 2015-03-12 22:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-14 16:15 - 2015-03-09 23:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-14 16:15 - 2015-03-09 23:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-14 16:15 - 2015-03-09 23:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-14 16:15 - 2015-03-09 23:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-14 16:15 - 2015-03-05 01:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-14 16:15 - 2015-03-05 00:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-14 16:15 - 2015-02-24 23:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-14 16:14 - 2015-03-04 00:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-14 16:14 - 2015-03-04 00:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-14 16:14 - 2015-03-04 00:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-13 21:46 - 2015-04-13 21:46 - 00000000 ____D () C:\Users\Quinntaro\Desktop\MaxBounty Offers
2015-04-13 03:31 - 2015-04-13 03:31 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-04-12 16:29 - 2015-04-12 16:29 - 00000000 ____D () C:\Users\Quinntaro\Desktop\DotComSecretBook
2015-04-12 06:06 - 2015-04-12 06:24 - 00000000 ____D () C:\Users\Quinntaro\Desktop\Home Security System   FrontPoint Security_files
2015-04-11 01:09 - 2015-04-27 01:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-10 17:31 - 2015-04-17 19:21 - 00000056 _____ () C:\Users\Quinntaro\Desktop\Bing Coupon.txt
2015-04-10 15:19 - 2015-04-10 16:37 - 00000000 ____D () C:\Users\Quinntaro\Desktop\Adword Coupon
2015-04-09 15:52 - 2015-04-09 15:52 - 00003182 _____ () C:\Windows\System32\Tasks\ASC8_PerformanceMonitor
2015-04-09 15:42 - 2015-04-09 15:42 - 00002884 _____ () C:\Windows\System32\Tasks\ASCU8_SkipUac_Quinntaro
2015-04-09 15:42 - 2015-04-09 15:42 - 00000000 ____D () C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2015-04-09 03:00 - 2015-04-09 03:10 - 530090789 _____ () C:\Users\Quinntaro\Desktop\Money Manifest Truth Revealed + 1000's Affirmations Guided Meditation 3D Sound Paul Santisi.mp4
2015-04-08 03:05 - 2015-04-10 00:47 - 00000000 ____D () C:\Users\Quinntaro\Desktop\Marketing Stuff MaxBounty Offers
2015-04-04 15:29 - 2015-04-04 16:25 - 00000000 ____D () C:\Users\Quinntaro\.VirtualBox
2015-04-04 15:29 - 2015-03-16 17:36 - 00922704 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2015-04-04 15:29 - 2015-03-16 17:35 - 00128592 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2015-04-03 23:37 - 2015-04-11 14:26 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-03 23:37 - 2015-04-03 23:37 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-03-31 01:17 - 2015-04-22 18:05 - 00010240 _____ () C:\Users\Quinntaro\Desktop\Bing Accounts.xls
2015-03-29 22:53 - 1999-07-04 15:55 - 00266293 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.009
2015-03-29 22:53 - 1998-12-18 14:17 - 00164112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.00D
2015-03-29 22:53 - 1998-12-18 13:27 - 00598288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.00C
2015-03-29 22:53 - 1998-12-18 13:27 - 00147728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.008
2015-03-29 22:53 - 1998-12-18 13:27 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.00A
2015-03-29 22:53 - 1998-09-25 00:00 - 01409024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.00B
2015-03-29 22:53 - 1998-05-26 17:22 - 00402481 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.00E
2015-03-29 22:53 - 1998-05-07 00:00 - 00174352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.00F
2015-03-29 22:12 - 2015-03-29 22:12 - 00000000 ____D () C:\Program Files (x86)\Magic YouTube Xtractor
2015-03-29 17:28 - 2015-03-29 17:28 - 00000038 ___SH () C:\Users\Quinntaro\AppData\Local\9d79c3153f8f90cc74501.90881086
2015-03-29 17:28 - 2015-03-29 17:28 - 00000000 __SHD () C:\Users\Quinntaro\AppData\Local\icsxml
2015-03-29 17:28 - 2015-03-29 17:28 - 00000000 ____D () C:\Users\Quinntaro\AppData\Roaming\Springly
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-04-27 10:20 - 2014-08-19 16:27 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-27 10:18 - 2015-01-12 16:03 - 00000546 _____ () C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-46795753-3919011366-3819783517-1001.job
2015-04-27 10:17 - 2012-07-29 07:55 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-27 10:05 - 2015-03-01 16:55 - 00000382 _____ () C:\Windows\Tasks\WpsNotifyTask_Quinntaro.job
2015-04-27 10:03 - 2009-07-14 00:45 - 00029120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-27 10:03 - 2009-07-14 00:45 - 00029120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-27 10:02 - 2015-03-01 16:55 - 00000382 _____ () C:\Windows\Tasks\WpsUpdateTask_Quinntaro.job
2015-04-27 10:00 - 2014-07-16 05:28 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-04-27 09:59 - 2009-07-14 01:13 - 00006214 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-27 09:58 - 2014-09-19 10:36 - 01737663 _____ () C:\Windows\WindowsUpdate.log
2015-04-27 09:55 - 2013-04-14 23:21 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-04-27 09:55 - 2013-02-15 20:32 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-27 09:55 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-27 09:54 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-27 09:36 - 2014-05-27 22:00 - 00000924 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-46795753-3919011366-3819783517-1001UA.job
2015-04-27 09:36 - 2013-02-15 20:32 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-27 09:32 - 2013-03-31 23:35 - 00000000 ____D () C:\Users\Quinntaro\AppData\Roaming\IObit
2015-04-27 02:05 - 2012-06-30 06:24 - 00000000 ____D () C:\Users\Quinntaro\AppData\Roaming\uTorrent
2015-04-27 01:53 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\TAPI
2015-04-27 01:01 - 2012-06-30 02:01 - 00000000 ____D () C:\Program Files (x86)\IObit
2015-04-27 00:39 - 2014-11-05 18:21 - 00000000 ____D () C:\Users\Quinntaro\Documents\Audible
2015-04-27 00:39 - 2013-10-04 02:38 - 00000000 ____D () C:\Program Files\Unlocker
2015-04-27 00:39 - 2013-02-04 16:50 - 00000000 ____D () C:\Program Files\CCleaner
2015-04-27 00:39 - 2012-09-27 20:55 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2015-04-27 00:39 - 2012-06-29 22:01 - 00000000 ____D () C:\Users\Quinntaro\AppData\Roaming\Skype
2015-04-27 00:39 - 2012-06-29 20:23 - 00000000 ____D () C:\Users\Quinntaro
2015-04-27 00:39 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-04-27 00:39 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\security
2015-04-27 00:39 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\registration
2015-04-27 00:34 - 2014-07-02 03:40 - 43917312 _____ () C:\Windows\system32\config\components.iodefrag.bak
2015-04-27 00:34 - 2014-02-26 08:05 - 99430400 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-04-27 00:34 - 2014-02-26 08:05 - 05570560 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-04-27 00:34 - 2014-02-26 08:05 - 00032768 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-04-27 00:34 - 2014-02-26 08:05 - 00024576 _____ () C:\Windows\system32\config\SAM.iodefrag.bak
2015-04-27 00:30 - 2013-06-21 20:22 - 00000000 ____D () C:\Users\Quinntaro\AppData\Local\CrashDumps
2015-04-27 00:28 - 2013-08-30 18:58 - 00586240 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-04-27 00:28 - 2013-08-30 18:57 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-04-27 00:28 - 2012-06-11 13:24 - 01117184 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2015-04-27 00:28 - 2012-06-11 13:23 - 01343272 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2015-04-27 00:28 - 2012-06-11 13:01 - 10335208 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2015-04-27 00:28 - 2012-06-11 12:45 - 06799688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2015-04-27 00:28 - 2012-06-11 12:43 - 06796592 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2015-04-27 00:28 - 2012-06-11 12:27 - 01177600 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2015-04-27 00:28 - 2012-06-11 12:25 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2015-04-27 00:28 - 2012-06-11 12:24 - 00099520 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2015-04-27 00:24 - 2012-10-04 18:28 - 00000000 ____D () C:\Program Files (x86)\eMail Verifier
2015-04-27 00:14 - 2014-08-19 16:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-27 00:14 - 2014-08-19 16:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-25 01:57 - 2015-02-16 02:55 - 00000000 ____D () C:\Program Files (x86)\GreenTree Applications
2015-04-25 01:02 - 2013-11-06 11:41 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-24 22:35 - 2012-09-27 21:43 - 00026624 _____ () C:\Users\Quinntaro\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-21 18:47 - 2009-07-14 01:08 - 00032642 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-04-21 02:20 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-21 02:18 - 2013-12-13 15:08 - 00000000 ____D () C:\ProgramData\ProductData
2015-04-19 02:57 - 2012-06-30 08:15 - 00000000 ____D () C:\Users\Quinntaro\AppData\Roaming\vlc
2015-04-16 19:29 - 2012-06-29 22:01 - 00000000 ____D () C:\ProgramData\Skype
2015-04-16 01:29 - 2014-10-18 01:21 - 00000000 ____D () C:\Users\Quinntaro\Desktop\Youtube Accounts
2015-04-15 03:22 - 2014-12-11 04:21 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-15 03:22 - 2014-05-01 14:22 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-15 03:22 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-15 03:06 - 2013-07-23 03:00 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 03:01 - 2012-06-29 22:55 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-13 22:25 - 2015-01-12 16:03 - 00003574 _____ () C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-46795753-3919011366-3819783517-1001
2015-04-13 03:45 - 2014-11-03 00:17 - 00000000 ____D () C:\Users\Quinntaro\Desktop\Self development Motivation
2015-04-13 03:31 - 2014-11-22 00:39 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-04-13 03:31 - 2013-09-30 20:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-04-13 03:31 - 2013-09-30 20:01 - 00000000 ____D () C:\Program Files\iTunes
2015-04-13 03:31 - 2012-06-29 22:06 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-04-12 07:44 - 2012-08-02 12:13 - 00000000 ____D () C:\Users\Quinntaro\AppData\Roaming\FileZilla
2015-04-11 14:35 - 2014-05-27 22:00 - 00000872 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-46795753-3919011366-3819783517-1001Core.job
2015-04-11 14:26 - 2014-06-27 17:49 - 00000000 ____D () C:\Users\Quinntaro\AppData\Roaming\ProductData
2015-04-10 00:46 - 2014-11-30 23:30 - 00000000 ____D () C:\Users\Quinntaro\Desktop\Facebook Auto Poster
2015-04-10 00:46 - 2013-09-17 13:55 - 00000000 ____D () C:\Users\Quinntaro\Desktop\Email List
2015-04-09 15:52 - 2014-12-15 14:27 - 00002902 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Quinntaro
2015-04-09 15:52 - 2014-12-15 14:27 - 00002870 _____ () C:\Windows\System32\Tasks\ASC8_SkipUac_Quinntaro
2015-04-08 19:08 - 2014-07-16 05:28 - 00003820 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1405502936
2015-04-05 20:37 - 2014-06-21 00:14 - 00000000 ____D () C:\Users\Quinntaro\Documents\Turbo Lister Backup
2015-03-29 23:50 - 2015-03-11 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PageBreeze
2015-03-29 22:45 - 2012-08-02 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-03-29 22:45 - 2012-08-02 12:13 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2015-03-28 01:55 - 2012-07-01 13:16 - 00000000 ____D () C:\Windows\Minidump
 
==================== Files in the root of some directories =======
 
2014-03-14 21:59 - 2014-03-14 21:59 - 0000288 _____ () C:\Users\Quinntaro\AppData\Roaming\.backup.dm
2013-06-19 22:23 - 2013-06-19 22:23 - 0000132 _____ () C:\Users\Quinntaro\AppData\Roaming\Adobe AIFF Format CS5 Prefs
2013-10-01 22:45 - 2013-10-31 01:03 - 0000132 _____ () C:\Users\Quinntaro\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-11-04 19:32 - 2015-01-13 16:08 - 0000218 _____ () C:\Users\Quinntaro\AppData\Roaming\BMID.ini
2014-03-04 22:18 - 2015-01-09 22:05 - 0000169 _____ () C:\Users\Quinntaro\AppData\Roaming\BMIDBPPoster.ini
2014-03-04 21:05 - 2015-01-13 16:08 - 0000210 _____ () C:\Users\Quinntaro\AppData\Roaming\BMIDFBGPoster.ini
2014-04-01 22:24 - 2014-04-01 22:24 - 0000049 ____H () C:\Users\Quinntaro\AppData\Roaming\Bounce Mail Handler.ini
2012-06-30 13:34 - 2012-07-07 18:59 - 0000146 _____ () C:\Users\Quinntaro\AppData\Roaming\Earthquakes Meter_Settings.ini
2012-10-04 18:29 - 2012-10-04 18:29 - 0000049 ____H () C:\Users\Quinntaro\AppData\Roaming\eMail Verifier.ini
2012-09-24 16:18 - 2012-09-24 16:55 - 0093696 _____ () C:\Users\Quinntaro\AppData\Roaming\ezpinst.exe
2012-12-28 18:28 - 2012-12-28 18:28 - 0000012 _____ () C:\Users\Quinntaro\AppData\Roaming\log.txt
2014-03-31 18:57 - 2014-10-11 01:00 - 0000020 ____H () C:\Users\Quinntaro\AppData\Roaming\MaxBulk registration.ini
2012-09-24 16:18 - 2012-09-24 16:55 - 0007176 _____ () C:\Users\Quinntaro\AppData\Roaming\pcouffin.cat
2012-09-24 16:18 - 2012-09-24 16:55 - 0001167 _____ () C:\Users\Quinntaro\AppData\Roaming\pcouffin.inf
2012-09-24 16:18 - 2012-09-24 16:55 - 0000033 _____ () C:\Users\Quinntaro\AppData\Roaming\pcouffin.log
2012-09-24 16:18 - 2012-09-24 16:55 - 0082048 _____ (VSO Software) C:\Users\Quinntaro\AppData\Roaming\pcouffin.sys
2015-04-27 03:10 - 2015-04-27 09:33 - 0000364 _____ () C:\Users\Quinntaro\AppData\Roaming\Safer-Networking.log
2014-08-04 00:23 - 2014-08-04 00:23 - 0000045 _____ () C:\Users\Quinntaro\AppData\Roaming\WB.CFG
2015-03-29 17:28 - 2015-03-29 17:28 - 0000038 ___SH () C:\Users\Quinntaro\AppData\Local\9d79c3153f8f90cc74501.90881086
2014-08-03 15:46 - 2014-08-03 15:46 - 0000528 _____ () C:\Users\Quinntaro\AppData\Local\aasession.dat
2013-10-18 06:32 - 2013-10-18 06:32 - 0001456 _____ () C:\Users\Quinntaro\AppData\Local\Adobe Save for Web 12.0 Prefs
2012-09-27 21:43 - 2015-04-24 22:35 - 0026624 _____ () C:\Users\Quinntaro\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-07-05 16:09 - 2012-07-05 16:09 - 0007605 _____ () C:\Users\Quinntaro\AppData\Local\Resmon.ResmonCfg
2012-06-29 22:12 - 2012-06-29 22:12 - 0017408 _____ () C:\Users\Quinntaro\AppData\Local\WebpageIcons.db
2013-04-14 22:11 - 2013-04-14 22:11 - 0000000 _____ () C:\ProgramData\2f5e40_c
2013-02-07 20:26 - 2013-02-10 01:57 - 0000614 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2012-09-27 12:18 - 2012-09-27 12:18 - 0005115 _____ () C:\ProgramData\zjyopzph.wxh
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2014-05-01 05:43
 
==================== End Of Log ============================
 
 
 
 
 
 
 
 
 
Addition Text
 
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-04-2015 01
Ran by Quinntaro at 2015-04-27 10:32:25
Running from C:\Users\Quinntaro\Downloads
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-46795753-3919011366-3819783517-500 - Administrator - Disabled)
Guest (S-1-5-21-46795753-3919011366-3819783517-501 - Limited - Disabled)
Quinntaro (S-1-5-21-46795753-3919011366-3819783517-1001 - Administrator - Enabled) => C:\Users\Quinntaro
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Kaspersky Internet Security (Disabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Disabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
FW: Kaspersky Internet Security (Disabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
µTorrent (HKU\S-1-5-21-46795753-3919011366-3819783517-1001\...\uTorrent) (Version: 3.4.2.38656 - BitTorrent Inc.)
4K Video Downloader 3.4 (HKLM-x32\...\4K Video Downloader_is1) (Version: 3.4.0.1400 - Open Media LLC)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1030 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Advanced Mouse Auto Clicker 3.7 (HKLM-x32\...\{ABB3A44C-97D0-466E-A0E8-562FAEBEF689}_is1) (Version:  - Advanced Mouse Auto Clicker Ltd.)
Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.1.0 - IObit)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{1F7424F8-F992-48BC-90EF-7C4DB0405E3F}) (Version: 1.7.17.25416 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.7.17.25416 - Alcor Micro Corp.) Hidden
AliG Social Lead UID Converter (HKLM-x32\...\com.aligmarketing.converter) (Version: 1.0 - Ali M. Gadit)
AliG Social Lead UID Converter (x32 Version: 1.0 - Ali M. Gadit) Hidden
AMD Catalyst Install Manager (HKLM\...\{08D35D3C-C4F7-09FB-0F89-F680A1CCD3A3}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{9B3B4129-220E-42C7-9C5B-91C65E0885B4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Art Effects for PDR10 (HKLM\...\NewBlue Art Effects for PDR10) (Version: 2.0 - NewBlue)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.30 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}) (Version: 1.1.37 - ASUS)
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.0 - Atheros)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0016 - ASUS)
Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.15 - Audible, Inc.)
BackPage Assistant Pro  (HKLM-x32\...\BackPage Assistant) (Version: Pro  - Build My Income Daily.com)
Bing Ads Editor (HKU\S-1-5-21-46795753-3919011366-3819783517-1001\...\{1c8e2994-73aa-451d-b79a-127c3a80b023}) (Version: 10.7.2091.7702 - Microsoft Corporation)
Bing Ads Editor (x32 Version: 10.7.2091.7702 - Microsoft Corporation) Hidden
BMID Traffic Box PREMIUM (HKLM-x32\...\BMID Traffic Box) (Version: PREMIUM - Build My Income Daily.com)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CamStudio OSS Desktop Recorder (HKLM-x32\...\{FD9C31B6-F572-414D-81E3-89368C97A125}_is1) (Version: 2.6 Beta r294 - CamStudio Open Source Dev Team)
Camtasia Studio 8 (HKLM-x32\...\{DB93E2C2-851F-44B2-B09C-351D2C624AE1}) (Version: 8.0.4.1060 - TechSmith Corporation)
Captcha Sniper (HKLM-x32\...\Captcha Sniper_is1) (Version:  - )
Capture Extractor (HKLM-x32\...\Capture Extractor) (Version:  - )
CBR Reader (HKLM-x32\...\{EDAAC216-AC73-4152-9654-E12FE5A69F5D}_is1) (Version:  - cbrreader.com)
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
ChronosXP (32-bit) (HKLM-x32\...\{E2D2C0EE-64F6-4D64-A237-91B7D176395F}) (Version: 4.1.1111 - Robert Misiak)
Cisco WebEx Meetings (HKLM-x32\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)
Citrix Online Launcher (HKLM-x32\...\{307ECD26-43D7-4AD4-82CF-794B63EDF096}) (Version: 1.0.141 - Citrix)
Cloud System Booster (HKLM-x32\...\Cloud System Booster) (Version: 3.5 - Anvisoft)
Convert Audio Free FLAC to MP3 version 1.0 (HKLM-x32\...\Convert Audio Free FLAC to MP3_is1) (Version: 1.0 - )
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.1703 - CyberLink Corp.)
CyberLink PowerDirector 10 (Version: 10.0.0.1703 - CyberLink Corp.) Hidden
CyberLink WaveEditor (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 1.0.1.3320 - CyberLink Corp.)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Dailymotion Mass Uploader (HKLM-x32\...\com.dailymotion.massuploader) (Version: 0.1.1 - Dailymotion)
Dailymotion Mass Uploader (x32 Version: 0.1.1 - Dailymotion) Hidden
Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.4 - IObit)
eMail Bounce Handler 3.8.2 (HKLM-x32\...\eMail Bounce Handler_is1) (Version:  - Max Programming LLC)
Email Verifier (HKLM-x32\...\Email Verifier) (Version:  - Live Software Inc)
Email Verifier (x32 Version: 6.2 - Live Software Inc) Hidden
eMail Verifier 3.6.3 (HKLM-x32\...\eMail Verifier_is1) (Version:  - Max Programming LLC)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-200 Series Printer Uninstall (HKLM\...\EPSON XP-200 Series) (Version:  - SEIKO EPSON Corporation)
Facebook Groups Assistant Pro  (HKLM-x32\...\Facebook Groups Assistant) (Version: Pro  - Build My Income Daily.com)
Facebook Video Calling 1.2.0.287 (HKLM-x32\...\{B92C5909-1D37-4C51-8397-A28BB28E5DC3}) (Version: 1.2.287 - Skype Limited)
FileZilla Client 3.10.3 (HKLM-x32\...\FileZilla Client) (Version: 3.10.3 - Tim Kosse)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Game Booster 3 (HKLM-x32\...\Game Booster_is1) (Version: 3.5 - IObit)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{F7770F7F-0ABC-30CB-95BC-93761A05CAB6}) (Version: 5.38.4.0 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GoToMeeting 7.1.8.2553 (HKU\S-1-5-21-46795753-3919011366-3819783517-1001\...\GoToMeeting) (Version: 7.1.8.2553 - CitrixOnline)
GVAutoResponder (HKU\S-1-5-21-46795753-3919011366-3819783517-1001\...\840ed2b7c79e9ec0) (Version: 1.1.0.30 - Dave Amenta)
HandBrake 0.9.9.1 (HKLM-x32\...\HandBrake) (Version: 0.9.9.1 - )
HitLeap Viewer 2.8 (HKLM-x32\...\{31B12C11-AE4E-479F-8D6D-242DC265368D}) (Version: 2.8 - HitLeap Ltd.)
HMA! Pro VPN 2.8.19.0 (HKLM-x32\...\HMA! Pro VPN) (Version: 2.8.19.0 - Privax Ltd)
ImageMagick 6.7.0-0 Q16 (2011-06-01) (HKLM-x32\...\ImageMagick 6.7.0 Q16_is1) (Version: 6.7.0 - ImageMagick Studio LLC)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Instagram Downloader (HKLM-x32\...\{9DFA525A-6D12-444B-8F5A-63E2947FFC5D}) (Version: 2.3.0.0 - iWesoft)
Intel® PROSet/Wireless WiMAX Software (HKLM\...\{5F588B19-C575-4750-86FD-6ED2B76E61F1}) (Version: 7.00.0000 - Intel Corporation)
IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.1 - IObit)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.2.6.2 - IObit)
iTunes (HKLM\...\{5D239A92-31A4-4FCA-967D-F9EA8E1FDF6A}) (Version: 12.1.2.27 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 8 Update 11 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418011FF}) (Version: 8.0.110 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{653C1B5A-3287-47B1-8613-0745D4E771C4}) (Version: 15.0.0.463 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.0.463 - Kaspersky Lab) Hidden
Kingsoft Office 2013 (9.1.0.4550) (HKLM-x32\...\Kingsoft Office) (Version: 9.1.0.4550 - Kingsoft Corp.)
K-Lite Mega Codec Pack 10.4.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.4.0 - )
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MaxBulk Mailer 8.4.6 (HKLM-x32\...\MaxBulk Mailer_is1) (Version:  - Max Programming LLC)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MotioninJoy Gamepad tool 0.7.0000 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.0000 - www.motioninjoy.com)
Mozilla Firefox 37.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 en-US)) (Version: 37.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NextUp.com-NeoSpeech Paul16 Voice (HKLM-x32\...\{6A09FF5F-C19B-445A-98E5-23AD860493C3}) (Version: 2.01.0000 - NextUp.com)
NextUp-ScanSoft Jennifer US English Voice (HKLM-x32\...\{799EFFD9-5A62-49D1-A6EA-AF058C5209EB}) (Version: 4.0.0 - NextUp.com)
ObjectDock Free (HKLM-x32\...\ObjectDock Free) (Version: 2.0 - Stardock Corporation)
ObjectDock Free (x32 Version: 2.0 - Stardock Corporation) Hidden
Opera Stable 28.0.1750.51 (HKLM-x32\...\Opera 28.0.1750.51) (Version: 28.0.1750.51 - Opera Software ASA)
paint.net (HKLM\...\{87D5082F-F857-40FE-9C8A-3F2B6C39F426}) (Version: 4.0.2 - dotPDN LLC)
PB Assistant Pro  (HKLM-x32\...\PB Assistant) (Version: Pro  - Build My Income Daily.com)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Pinger (HKU\S-1-5-21-46795753-3919011366-3819783517-1001\...\Pinger 1.4.0.0) (Version: 1.4.0.0 - Pinger Inc.)
Pinger (x32 Version: 1.4.0.0 - Pinger Inc.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Screencast-O-Matic (HKU\S-1-5-21-46795753-3919011366-3819783517-1001\...\Screencast-O-Matic) (Version:  - Screencast-O-Matic)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.2 - IObit)
Sothink Logo Maker Professional (HKLM-x32\...\{574FFDC9-AB09-4C4A-B7BE-C6066502181A}_is1) (Version: 4.0 - SourceTec Software Co., LTD)
Spin Bandit Pro  (HKLM-x32\...\Spin Bandit) (Version: Pro  - Build My Income Daily.com)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.)
SpyHunter (HKLM-x32\...\{AF549236-6258-4AC6-A043-5B5B89C6EB61}) (Version: 4.17.6.4336 - Enigma Software Group USA, LLC)
SteelSeries Engine (HKLM\...\SteelSeries Engine) (Version: 2.3.1382.22251 - SteelSeries)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.7.1018 - SUPERAntiSpyware.com)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.9.0 - Synaptics Incorporated)
System Requirements Lab for Intel (HKLM-x32\...\{C5DA59CF-2BB8-48D5-8E5B-17F2E0F0FEE4}) (Version: 4.5.5.0 - Husdawg, LLC)
TextAloud (HKLM-x32\...\TextAloud MP3_is1) (Version: 2.0 - NextUp.com)
The Sims 4 (HKLM-x32\...\VGhlU2ltczQ=_is1) (Version: 1 - )
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.732.20 - Electronic Arts Inc.)
Thread Manager 3.1.0.0 (HKLM-x32\...\{78F4E027-355C-45C0-90DC-F89DFC618761}_is1) (Version: 3.1.0.0 - Digital Generation)
Turbo Lister 2 (HKLM-x32\...\{8927E07C-97F7-4A54-88FB-D976F50DD46E}) (Version: 2.00.0000 - eBay Inc.)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
USB 2.0 1.3M UVC WebCam (HKLM\...\USB 2.0 1.3M UVC WebCam) (Version:  - )
Video Download Capture version 4.9.1 (HKLM-x32\...\{3C9D008D-3716-4C3F-90CD-38ED57568FAB}_is1) (Version: 4.9.1 - APOWERSOFT LIMITED)
Virtual CD v10 (HKLM-x32\...\{10C51313-A308-4B40-90E3-B368D5882660}) (Version: 10.00.0 - H+H Software GmbH)
VLC media player 2.0.1 (HKLM-x32\...\VLC media player) (Version: 2.0.1 - VideoLAN)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Windows Driver Package - Intel hdc  (07/25/2013 9.1.9.1005) (HKLM\...\63C66BADD37425C98A079D841B81D15CE760D3A6) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows Driver Package - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\03558EE026C7D1019B4A138DD4B58B8AE39211C4) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows Driver Package - Intel System  (07/25/2013 9.1.9.1005) (HKLM\...\BF1AD0105EBDCA6E730BE93DE583343339830A7A) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows Driver Package - Intel USB  (07/25/2013 9.1.9.1005) (HKLM\...\A86AAC18EC59E9369A037083AC25A97B89713EC8) (Version: 07/25/2013 9.1.9.1005 - Intel)
Windows Driver Package - Synaptics (SmbDrv) System  (01/10/2013 16.3.9.0) (HKLM\...\28F546B63BB1E2C8D8FA11DA3717497312022644) (Version: 01/10/2013 16.3.9.0 - Synaptics)
Windows Driver Package - Synaptics (SynTP) Mouse  (01/10/2013 16.3.9.0) (HKLM\...\64AF61DCB4825A180D5141D50D9D36F711D19AA2) (Version: 01/10/2013 16.3.9.0 - Synaptics)
Windows Resource Kit Tools - SubInAcl.exe (HKLM-x32\...\{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}) (Version: 5.2.3790.1164 - Microsoft Corporation)
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WinZip 16.0 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240CC}) (Version: 16.0.9715 - WinZip Computing, S.L. )
YouTube Tsunami 2.7.4 (HKLM-x32\...\com.innercircleriches.yts_is1) (Version: 2.7.4 - Inner Circle Riches)
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-46795753-3919011366-3819783517-1001_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-46795753-3919011366-3819783517-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files (x86)\Citrix\GoToMeeting\2331\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.)
CustomCLSID: HKU\S-1-5-21-46795753-3919011366-3819783517-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Quinntaro\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-46795753-3919011366-3819783517-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Quinntaro\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
 
==================== Restore Points  =========================
 
27-04-2015 09:30:25 Removed SpyHunter
27-04-2015 09:31:50 Installed SpyHunter
27-04-2015 09:33:46 Removed SpyHunter
27-04-2015 09:35:05 Installed SpyHunter
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 22:34 - 2015-04-27 01:49 - 00000849 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {0BD5413F-3DA3-4445-B6E2-2B055FE62E87} - System32\Tasks\WpsNotifyTask_Quinntaro => C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsnotify.exe [2014-03-30] (Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {1BB16744-F5EB-4BF0-B0A0-48D78A699B70} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {22EB4D37-B3D3-4301-AE2A-B91736D31619} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {249FF5D7-293B-4FF9-92B0-1F51D7CFF8BF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-46795753-3919011366-3819783517-1001Core => C:\Users\Quinntaro\AppData\Local\Google\Update\GoogleUpdate.exe [2014-05-06] (Google Inc.)
Task: {25609D65-CBEE-4989-971E-FF91BBA6D2C3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2012-11-13] (Safer-Networking Ltd.)
Task: {25FE5B27-1EDA-4A1C-85C7-10CFB862007D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-11] (Google Inc.)
Task: {2AE9AE26-5987-4C4B-8E58-7DB5B8C7E9EB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {2E2054A5-3046-4BBC-B71E-14E55DC69361} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2012-11-13] (Safer-Networking Ltd.)
Task: {30AA9A42-92E5-456B-B410-04B2DB364167} - System32\Tasks\Driver Booster SkipUAC (SYSTEM) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-05-09] (IObit)
Task: {3CAC9A5A-7BB3-42F4-ABBB-3E4116B5E6B9} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe [2013-06-12] ()
Task: {3DBFE92E-031B-4598-9D72-EB4402A03BAC} - System32\Tasks\Driver Booster SkipUAC (Quinntaro) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-05-09] (IObit)
Task: {4D492D25-3B31-47B8-A4C5-1C6D0B1E9A13} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe [2015-01-23] (IObit)
Task: {54F87D8D-18A8-4190-9481-A628F8767743} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-46795753-3919011366-3819783517-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {5FF06F45-F163-47DE-92B1-34CEB13B811F} - System32\Tasks\G2MUpdateTask-S-1-5-21-46795753-3919011366-3819783517-1001 => C:\Program Files (x86)\Citrix\GoToMeeting\2553\g2mupdate.exe [2015-04-13] (Citrix Online, a division of Citrix Systems, Inc.)
Task: {6CA890E0-6D5B-485B-8AA2-82A3F7BD275A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-11] (Google Inc.)
Task: {7772ECDF-4E15-44D4-9CD9-F535FFDF2866} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-46795753-3919011366-3819783517-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {83436F90-6730-495B-9509-82E6C5BF5335} - System32\Tasks\GoogleUpdateTaskUserM_1_7_22_478699874-4155726479-3780505679-3006UA__3930393638343132332d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\PastaLeadsAgent\startprocess.js" pastaleadss.exe /invoke /f:check_services /l:0
Task: {8CF0AD87-CD16-45C1-A97C-02C4538430B2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {8D76635F-EF88-4A20-89E9-801FA42F7BED} - System32\Tasks\Uninstaller_SkipUac_Quinntaro => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-01-20] (IObit)
Task: {8F8E02B1-359A-4726-A8B1-3472E6B14364} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-01-20] (IObit)
Task: {8FE4BDAD-9E00-466E-BA99-0774855DC98A} - System32\Tasks\ASC8_SkipUac_Quinntaro => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-01-27] (IObit)
Task: {920EF049-B247-49A3-A06D-777A377726BD} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {96729312-2755-43A5-BAC9-445EA925CA0B} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {AD6A7059-0308-4EE5-8F53-811804ED147D} - System32\Tasks\WpsUpdateTask_Quinntaro => C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsupdate.exe [2015-03-01] (Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {B33B5AA4-0977-49A6-B9DA-72429F081065} - System32\Tasks\ASCU8_SkipUac_Quinntaro => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 8\ASC.exe
Task: {CE9811A6-0CE9-45EB-8413-28A4A2140FC8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {D06BC9E3-5AF6-486D-99CB-8AF92631940B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-46795753-3919011366-3819783517-1001UA => C:\Users\Quinntaro\AppData\Local\Google\Update\GoogleUpdate.exe [2014-05-06] (Google Inc.)
Task: {DAC3D2A1-96FB-4634-B88A-3A58B023B7E0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2012-11-13] (Safer-Networking Ltd.)
Task: {DB0517FA-CAB5-496B-83DD-947AF2C42435} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-07] (Adobe Systems Incorporated)
Task: {F8FC676F-1F8A-4329-A038-C9D5D173E7D9} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-07-03] (IObit)
Task: {FFA2BC0C-1733-403D-80B1-7F51C8EF37E6} - System32\Tasks\Opera scheduled Autoupdate 1405502936 => C:\Program Files (x86)\Opera\launcher.exe [2015-04-07] (Opera Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\WINDOWS\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-46795753-3919011366-3819783517-1001Core.job => C:\Users\Quinntaro\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-46795753-3919011366-3819783517-1001UA.job => C:\Users\Quinntaro\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-46795753-3919011366-3819783517-1001.job => C:\Program Files (x86)\Citrix\GoToMeeting\2553\g2mupdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-46795753-3919011366-3819783517-1001Core.job => C:\Users\Quinntaro\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-46795753-3919011366-3819783517-1001UA.job => C:\Users\Quinntaro\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\shield check.job => C:\Users\Quinntaro\AppData\Local\Shield\checkhp.exe
Task: C:\Windows\Tasks\WpsNotifyTask_Quinntaro.job => C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsnotify.exe
Task: C:\Windows\Tasks\WpsUpdateTask_Quinntaro.job => C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsupdate.exe
 
==================== Loaded Modules (whitelisted) ==============
 
2010-10-04 13:54 - 2010-10-04 13:54 - 00776704 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.dll
2015-03-29 06:25 - 2015-03-29 06:25 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-06-30 02:18 - 2012-06-30 02:18 - 00006144 _____ () C:\Users\Quinntaro\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.5.gadget\CoreTempReader.dll
2012-06-30 02:18 - 2012-06-30 02:18 - 00008704 _____ () C:\Users\Quinntaro\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.5.gadget\GetCoreTempInfoNET.dll
2012-06-30 02:18 - 2012-06-30 02:18 - 00007680 _____ () C:\Users\Quinntaro\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.5.gadget\SystemInfo.dll
2015-04-09 15:52 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\sqlite3.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2015-02-13 05:20 - 2015-02-13 05:20 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-04-09 15:52 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\madExcept_.bpl
2015-04-09 15:52 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\madBasic_.bpl
2015-04-09 15:52 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\madDisAsm_.bpl
2010-10-04 13:54 - 2010-10-04 13:54 - 00675840 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\DockShellHook.dll
2014-03-06 15:00 - 2014-03-06 15:00 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\kpcengine.2.3.dll
2009-04-12 11:40 - 2009-04-12 11:40 - 00157184 _____ () C:\Program Files (x86)\ChronosXP\ChronosXPfx.dll
2010-10-04 13:54 - 2010-10-04 13:54 - 00807936 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\CrashRpt.dll
2010-10-04 13:54 - 2010-10-04 13:54 - 00053760 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\zlib.dll
2015-03-29 06:25 - 2015-03-29 06:25 - 00039384 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2015-04-17 22:38 - 2015-04-13 17:55 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libglesv2.dll
2015-04-17 22:38 - 2015-04-13 17:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libegl.dll
2015-04-17 22:38 - 2015-04-13 17:55 - 14980424 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\PepperFlash\pepflashplayer.dll
2014-08-19 19:06 - 2012-11-13 14:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2014-08-19 19:06 - 2012-11-13 14:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-08-19 19:06 - 2012-11-13 14:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-08-19 19:06 - 2012-11-13 14:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-08-19 19:06 - 2012-11-13 14:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
AlternateDataStreams: C:\ProgramData\Temp:D00F0074
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sndappv2 => ""="service"
 
==================== EXE Association (whitelisted) ===============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
HKU\S-1-5-21-46795753-3919011366-3819783517-1001\Software\Classes\exefile:  <===== ATTENTION!
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\.DEFAULT\...\01i.info -> 01i.info
IE restricted site: HKU\.DEFAULT\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\05p.com -> 05p.com
IE restricted site: HKU\.DEFAULT\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\.DEFAULT\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\.DEFAULT\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\.DEFAULT\...\0calories.net -> 0calories.net
IE restricted site: HKU\.DEFAULT\...\0cj.net -> 0cj.net
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1-se.com -> 1-se.com
 
There are 11318 more restricted sites.
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-46795753-3919011366-3819783517-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Quinntaro\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 68.105.28.12 - 68.105.29.12
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\Services: !SASCORE => 2
MSCONFIG\Services: AdvancedSystemCareService6 => 2
MSCONFIG\Services: AdvancedSystemCareService8 => 2
MSCONFIG\Services: DMAgent => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: hshld => 2
MSCONFIG\Services: HssTrayService => 3
MSCONFIG\Services: HssWd => 2
MSCONFIG\Services: IMFservice => 2
MSCONFIG\Services: IntuitUpdateServiceV4 => 2
MSCONFIG\Services: LiveUpdateSvc => 2
MSCONFIG\Services: MBRRemoteText.exe => 2
MSCONFIG\Services: RichVideo64 => 2
MSCONFIG\Services: SDScannerService => 2
MSCONFIG\Services: SDUpdateService => 2
MSCONFIG\Services: SDWSCService => 2
MSCONFIG\Services: Skype C2C Service => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: SpyHunter 4 Service => 2
MSCONFIG\Services: SwitchBoard => 3
MSCONFIG\Services: szserver => 2
MSCONFIG\Services: VC10SecS => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Audible Download Manager.lnk => C:\Windows\pss\Audible Download Manager.lnk.CommonStartup
MSCONFIG\startupreg: Advanced SystemCare 8 => "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
MSCONFIG\startupreg: AmIcoSinglun64 => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
MSCONFIG\startupreg: CloudSystemBooster => "C:\Program Files (x86)\Anvisoft\Cloud System Booster\CloudSystemBooster.exe"  /hide /autorun
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EPLTarget => 
MSCONFIG\startupreg: Google Update => "C:\Users\Quinntaro\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: Hide IP Easy => 
MSCONFIG\startupreg: IntelWirelessWiMAX => "C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe" /tasktray /nosplash
MSCONFIG\startupreg: IObit Malware Fighter => "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Memory Cleaner => C:\Users\Quinntaro\AppData\Roaming\KoshyJohn.com\MemClean\MemClean.exe boot
MSCONFIG\startupreg: Pinger => "C:\Program Files (x86)\Pinger\Pinger.exe"
MSCONFIG\startupreg: PSwitch => 
MSCONFIG\startupreg: SandboxieControl => 
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: ThreadManager.exe => G:\Program Files\Thread Manager\ThreadManager.exe
MSCONFIG\startupreg: uTorrent => "C:\Users\Quinntaro\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
MSCONFIG\startupreg: VC10Player => C:\Program Files (x86)\Virtual CD v10\System\VC10Play.exe
 
==================== FirewallRules (whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
FirewallRules: [{2A2DEA06-EACE-46D0-8D4A-FF73571270AC}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{E73876DC-79C2-4A15-83D9-448497B2FB02}] => (Allow) C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
FirewallRules: [{C6701B75-18CB-4A80-A296-7C6CD1E8278F}] => (Allow) C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
FirewallRules: [{A3129F24-1B21-426C-BB34-53AE291B2DEB}] => (Allow) C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
FirewallRules: [{50A45C41-4396-4742-921C-8FBAEF106F6E}] => (Allow) C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
FirewallRules: [{4B5379F7-7E3A-4810-87B5-E0ECF927B554}] => (Allow) C:\Program Files\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{274D7665-2721-4A78-96F8-3A2DFDEB03AF}] => (Allow) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
FirewallRules: [{E52E7D15-B694-4EA3-B1FE-4306CBCA3C7F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{DFAB54C5-4CC5-45A7-9C87-8E1BA1595DF2}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exe
FirewallRules: [{9A34000A-0F0E-4878-A3F1-38A91B4AD025}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{B8F94B46-8ABB-48D3-A443-640C62EDFDBE}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{45F5A65F-5B35-4114-8FBB-C2A82070C519}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{9F886DE2-FC91-4C51-9E71-C0A74169E51D}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{CC7DFAC0-E9B2-4B62-A9D9-5ED623243F3A}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{477C7DDE-0756-43E6-B626-1C5FD0EB63EC}] => (Allow) C:\Users\Quinntaro\AppData\Roaming\uTorrent\updates\3.4.1_30740.exe
FirewallRules: [{3399BBC6-778E-4E45-8585-36CFC9328484}] => (Allow) C:\Users\Quinntaro\AppData\Roaming\uTorrent\updates\3.4.1_30740.exe
FirewallRules: [{0D8E0652-C540-4298-B013-9F20569801E0}] => (Allow) C:\Users\Quinntaro\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{FBC03921-6C58-4DE1-BAF9-05D3B9C944A7}] => (Allow) C:\Users\Quinntaro\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2B1EEAD4-0841-4878-836C-261AE0A541BC}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{DA95B576-D566-424B-B11B-E0EA6128A6DB}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{6C0A4BD3-176A-423C-AD36-90A88491314E}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\Video Download Capture.exe
FirewallRules: [{A9BA8FDA-5401-45C4-B870-73DB969FCBD3}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\Video Download Capture.exe
FirewallRules: [{DCEE9915-C499-4B93-86B9-DCFFAC796E2F}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftSrv.dll
FirewallRules: [{89CE322C-BD2F-4AC3-BF49-BD16C82BC03F}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftSrv.dll
FirewallRules: [{252EC25E-EFE6-491E-A301-7D1DA61D9C5F}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDump.dll
FirewallRules: [{043E5C27-BF31-4B3E-9703-037E10D4DA06}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDump.dll
FirewallRules: [{AA0F387F-801C-4251-8BE9-5777C36EBAF5}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftAC.dll
FirewallRules: [{83428DE1-4856-4E97-BC44-6BEE44EDCC54}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftAC.dll
FirewallRules: [{8E62D4D8-0F24-4A66-A786-B2C0DAB34B58}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftPlayer.dll
FirewallRules: [{5C1B4BA5-A7AC-40E8-A502-47045CB4D95F}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftPlayer.dll
FirewallRules: [{73B7546D-D2E8-4D78-8B47-E24B24C0E424}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll
FirewallRules: [{6FE5C349-62EC-40D7-884E-C76559632447}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll
FirewallRules: [{8F6AEE7C-AEAC-4BAB-8653-32DFA0D87C54}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll
FirewallRules: [{326B211D-D3F5-411B-A37A-75ACD48C16D9}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll
FirewallRules: [{AF349D69-764A-4B1F-A1E4-D12E182F277E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{79BA9BF6-D137-4B8C-BB19-384F27526CD9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2AF53B61-61C8-4CB3-93BE-55A8BEABB58F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DFCE41AE-368C-42DB-BA80-8A66A5199BBC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B2E1D5C3-C177-4CD6-83C9-6C3387BAF600}] => (Allow) G:\Program Files\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{1DB6EC85-A34A-4D9E-9E77-90F1A1A3C43B}] => (Allow) G:\Program Files\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{2CEA098F-CE37-4ACD-A23E-618AC9F508C0}] => (Allow) C:\Users\Quinntaro\AppData\Roaming\Spiritsoft\urlspirit\urltask.exe
FirewallRules: [{6127DA09-84A1-4026-A8B1-0EB0AA721D0C}] => (Allow) C:\Users\Quinntaro\AppData\Roaming\Spiritsoft\urlspirit\urltask.exe
FirewallRules: [{010B5FE6-D41D-4737-B17F-E30602F20543}] => (Allow) C:\Users\Quinntaro\AppData\Roaming\Spiritsoft\urlspirit\urltask.exe
FirewallRules: [{C1DF00C5-6591-4490-A550-FA7F6535DF20}] => (Allow) C:\Users\Quinntaro\AppData\Roaming\Spiritsoft\urlspirit\urltask.exe
FirewallRules: [{196B0E80-60CF-48D6-A97D-9D319F615F0E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{59544E27-41D7-4F51-AF1B-7ED1EF4B5A57}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DA4387D5-1088-46AD-8149-172838ECDD27}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{F6556837-9D06-4BAA-B920-B03C9D777923}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{6CC642B7-C899-4371-BB66-1AE00BD1C8C2}C:\program files (x86)\internet explorer\iexplore.exe] => (Block) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{8E554890-5363-4502-B800-21962ECC890A}C:\program files (x86)\internet explorer\iexplore.exe] => (Block) C:\program files (x86)\internet explorer\iexplore.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (04/27/2015 09:59:11 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
Error: (04/27/2015 09:59:11 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
 
Error: (04/27/2015 09:49:18 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
Error: (04/27/2015 09:49:18 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
 
Error: (04/27/2015 09:44:42 AM) (Source: ESENT) (EventID: 455) (User: )
Description: DllHost (3736) WebCacheLocal: Error -1811 occurred while opening logfile C:\Users\Quinntaro\AppData\Local\Microsoft\Windows\WebCache\V0100001.log.
 
 
System errors:
=============
Error: (04/27/2015 10:21:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The EsgScanner service failed to start due to the following error: 
%%1275
 
Error: (04/27/2015 10:21:51 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\DRIVERS\EsgScanner.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
 
Error: (04/27/2015 10:21:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The EsgScanner service failed to start due to the following error: 
%%1275
 
Error: (04/27/2015 10:21:44 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\DRIVERS\EsgScanner.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
 
Error: (04/27/2015 10:20:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The EsgScanner service failed to start due to the following error: 
%%1275
 
Error: (04/27/2015 10:20:40 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\DRIVERS\EsgScanner.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
 
Error: (04/27/2015 10:19:23 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The EsgScanner service failed to start due to the following error: 
%%1275
 
Error: (04/27/2015 10:19:23 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\DRIVERS\EsgScanner.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
 
Error: (04/27/2015 10:17:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The EsgScanner service failed to start due to the following error: 
%%1275
 
Error: (04/27/2015 10:17:49 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\DRIVERS\EsgScanner.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
 
 
Microsoft Office Sessions:
=========================
Error: (04/27/2015 09:59:11 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: WmiApRplWmiApRpl8F20300004D070000
 
Error: (04/27/2015 09:59:11 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Performance1637070000000000000000000009030000
 
Error: (04/27/2015 09:49:18 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: WmiApRplWmiApRpl8F20300004D070000
 
Error: (04/27/2015 09:49:18 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Performance1637070000000000000000000009030000
 
Error: (04/27/2015 09:44:42 AM) (Source: ESENT) (EventID: 455) (User: )
Description: DllHost3736WebCacheLocal: C:\Users\Quinntaro\AppData\Local\Microsoft\Windows\WebCache\V0100001.log-1811
 
 
CodeIntegrity Errors:
===================================
  Date: 2014-10-15 09:12:52.157
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-10-15 09:12:52.154
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-10-15 09:12:52.150
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-10-14 00:43:00.457
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-10-14 00:43:00.457
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-10-14 00:43:00.457
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-10-13 03:29:28.042
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-10-13 03:29:28.042
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-10-13 03:29:28.042
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-10-12 02:54:19.702
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i7 CPU Q 740 @ 1.73GHz
Percentage of memory in use: 21%
Total physical RAM: 16308.55 MB
Available physical RAM: 12797.91 MB
Total Pagefile: 32615.29 MB
Available Pagefile: 28353.3 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:111.79 GB) (Free:3.53 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive f: (RECOVERY) (Fixed) (Total:21.47 GB) (Free:12.12 GB) FAT32 ==>[System with boot components (obtained from reading drive)]
Drive g: () (Fixed) (Total:574.68 GB) (Free:98.51 GB) NTFS
 
==================== MBR & Partition Table ==================
 
==================== End Of Log ============================
 

 


  • 0

Advertisements


#2
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Re-install Chrome

Unless you did this yourself, malware has changed your Chrome version into the Development Build. Among other things this allows malware to install any extension it wants. We need to resolve this.

1. If you have bookmarks, let's save them by exporting them - Export Bookmarks
2. Then I need you to go Google Sync and sign into your account
3. Scroll down until you see the "Stop and Clear" button and click on the button. At the prompt click on "Ok"
4. Now we need to uninstall chrome.
Note: When asked about user data or settings you must remove this also so please check the box.
5. Restart the computer and reinstall chrome, You can download The latest version from here - Google Chrome
6. Import your bookmarks back into Chrome
7. Sign back in to your Chrome browser so that your bookmarks sync with your online account.

NEXT

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:


CreateRestorePoint:
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-46795753-3919011366-3819783517-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-46795753-3919011366-3819783517-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
FF Extension: PriceLEsis - C:\Users\Quinntaro\AppData\Roaming\Mozilla\Firefox\Profiles\e764qz3p.default-1408479585288\Extensions\[email protected] [2015-04-27]
S2 WinUpd; No ImagePath
2015-04-27 00:29 - 2015-04-27 00:39 - 00000000 ____D () C:\ProgramData\12466489938869628421
2015-04-27 00:28 - 2015-04-27 00:39 - 00000000 ____D () C:\ProgramData\idiehacjdceoeiofmaopehfdkmiafdlm
2015-03-29 22:12 - 2015-03-29 22:12 - 00000000 ____D () C:\Program Files (x86)\Magic YouTube Xtractor
2015-03-29 17:28 - 2015-03-29 17:28 - 00000038 ___SH () C:\Users\Quinntaro\AppData\Local\9d79c3153f8f90cc74501.90881086
2015-03-29 17:28 - 2015-03-29 17:28 - 00000000 __SHD () C:\Users\Quinntaro\AppData\Local\icsxml
2015-03-29 17:28 - 2015-03-29 17:28 - 00000000 ____D () C:\Users\Quinntaro\AppData\Roaming\Springly
2012-09-27 12:18 - 2012-09-27 12:18 - 0005115 _____ () C:\ProgramData\zjyopzph.wxh
Task: {83436F90-6730-495B-9509-82E6C5BF5335} - System32\Tasks\GoogleUpdateTaskUserM_1_7_22_478699874-4155726479-3780505679-3006UA__3930393638343132332d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\PastaLeadsAgent\startprocess.js" pastaleadss.exe /invoke /f:check_services /l:0
C:\ProgramData\PastaLeadsAgent
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers


Save this as fixlist.txt, in the same location as FRST.exe
FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S0].txt as well.

  • 0

#3
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP