[shiring]

Ads always pop up and almost never allows me to download anything. Help would be greatly appreciated.

 

 Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01

Ran by Devon (administrator) on DEVONS-PC on 01-07-2015 21:47:59

Running from C:\Users\Devon\Desktop

Loaded Profiles: Devon (Available Profiles: Devon)

Platform: Windows 8.1 (X64) OS Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

() C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe

(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Sendori) C:\Program Files (x86)\PureLeads\plsapp.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(PureLeads) C:\Program Files (x86)\PureLeads\PureLeadsSvc.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\HPSmplPass.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe

() C:\Users\Devon\AppData\Roaming\Settings Manager\SettingsManager.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

() C:\Users\Devon\AppData\Roaming\Update Manager\OldForDeletion~spC588.tmp

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe

(Weather Warnings LLC) C:\Users\Devon\AppData\Local\StormAlerts\StormAlerts.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe

(PureLeads) C:\Program Files (x86)\PureLeads\PureLeadsTray.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.4150\Agent.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.5952\Battle.net.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe

(sendori) C:\Program Files (x86)\PureLeads\PureLeads.Service.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\plugin-nm-server.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20905_x64__8wekyb3d8bbwe\livecomm.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202520 2013-08-19] (Realtek Semiconductor)

HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\HPSmplPass.exe [2755640 2013-09-26] (Hewlett-Packard)

HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [155704 2013-09-26] (Hewlett-Packard)

HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [155704 2013-09-26] (Hewlett-Packard)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2771184 2013-07-26] (Synaptics Incorporated)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-25] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-07-24] (Hewlett-Packard Company)

HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-09-01] (CyberLink Corp.)

HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [1045304 2013-12-25] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [PureLeads Tray] => C:\Program Files (x86)\PureLeads\PureLeadsTray.exe [83232 2014-01-23] (PureLeads)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)

HKU\S-1-5-21-3504287385-1609395910-1784112399-1002\...\Run: [uTorrent] => C:\Users\Devon\AppData\Roaming\uTorrent\updates\3.4.3_40298.exe [1694560 2015-05-09] (BitTorrent Inc.)

HKU\S-1-5-21-3504287385-1609395910-1784112399-1002\...\Run: [Settings Manager] => C:\Users\Devon\AppData\Roaming\Settings Manager\SettingsManager.EXE [897520 2015-05-22] ()

HKU\S-1-5-21-3504287385-1609395910-1784112399-1002\...\Run: [UM] => C:\Users\Devon\AppData\Roaming\Update Manager\UM.EXE [776880 2015-06-27] ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-10-27]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Users\Devon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Storm Alerts.lnk [2014-06-12]

ShortcutTarget: Storm Alerts.lnk -> C:\Users\Devon\AppData\Local\StormAlerts\StormAlerts.exe (Weather Warnings LLC)

Startup: C:\Users\Devon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormAlerts.lnk [2014-06-12]

ShortcutTarget: StormAlerts.lnk -> C:\Users\Devon\AppData\Local\StormAlerts\StormAlertsApp.exe ()

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://speedial.com/...=1520057872&ir=

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://speedial.com/...=1520057872&ir=

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT14/1

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT14/1

HKU\S-1-5-21-3504287385-1609395910-1784112399-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://astromenda.co...=1355595878&ir=

HKU\S-1-5-21-3504287385-1609395910-1784112399-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT14/1

SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = http://speedial.com/...=1520057872&ir=

SearchScopes: HKLM -> {31090377-0740-419E-BEFC-A56E50500D5B} URL = http://astromenda.co...=1355595878&ir=

SearchScopes: HKLM -> {664FF449-72E5-4A82-925C-4BFBD1C8FBCF} URL = http://www.amazon.co...s={searchTerms}

SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.co...54371-11896-2/4?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKLM-x32 -> {664FF449-72E5-4A82-925C-4BFBD1C8FBCF} URL = http://www.amazon.co...s={searchTerms}

SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.co...54371-11896-2/4?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKU\S-1-5-21-3504287385-1609395910-1784112399-1002 -> DefaultScope {31090377-0740-419E-BEFC-A56E50500D5B} URL = http://astromenda.co...=1355595878&ir=

SearchScopes: HKU\S-1-5-21-3504287385-1609395910-1784112399-1002 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = http://speedial.com/...=1520057872&ir=

SearchScopes: HKU\S-1-5-21-3504287385-1609395910-1784112399-1002 -> {31090377-0740-419E-BEFC-A56E50500D5B} URL = http://astromenda.co...=1355595878&ir=

SearchScopes: HKU\S-1-5-21-3504287385-1609395910-1784112399-1002 -> {4938F3B2-5DE4-485E-AADD-E08176C4DD4F} URL = http://search.yahoo....p={searchTerms}

SearchScopes: HKU\S-1-5-21-3504287385-1609395910-1784112399-1002 -> {664FF449-72E5-4A82-925C-4BFBD1C8FBCF} URL = http://www.amazon.co...s={searchTerms}

SearchScopes: HKU\S-1-5-21-3504287385-1609395910-1784112399-1002 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.co...54371-11896-2/4?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-03-21] (Kaspersky Lab ZAO)

BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-03-21] (Kaspersky Lab ZAO)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-08-13] (Oracle Corporation)

BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2014-03-21] (Kaspersky Lab ZAO)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-08-13] (Oracle Corporation)

BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-03-21] (Kaspersky Lab ZAO)

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll [2013-09-06] (McAfee, Inc.)

BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-03-21] (Kaspersky Lab ZAO)

BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-03-21] (Kaspersky Lab ZAO)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-27] (Oracle Corporation)

BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-03-21] (Kaspersky Lab ZAO)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-27] (Oracle Corporation)

BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-03-21] (Kaspersky Lab ZAO)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)

Winsock: Catalog9 01 C:\Windows\SysWOW64\plsapp.dll [354592 2014-04-13] (Sendori)

Winsock: Catalog9 02 C:\Windows\SysWOW64\plsapp.dll [354592 2014-04-13] (Sendori)

Winsock: Catalog9 03 C:\Windows\SysWOW64\plsapp.dll [354592 2014-04-13] (Sendori)

Winsock: Catalog9 04 C:\Windows\SysWOW64\plsapp.dll [354592 2014-04-13] (Sendori)

Winsock: Catalog9 15 C:\Windows\SysWOW64\plsapp.dll [354592 2014-04-13] (Sendori)

Winsock: Catalog9-x64 01 C:\Windows\system32\plsapp64.dll [439296 2014-04-13] (Sendori)

Winsock: Catalog9-x64 02 C:\Windows\system32\plsapp64.dll [439296 2014-04-13] (Sendori)

Winsock: Catalog9-x64 03 C:\Windows\system32\plsapp64.dll [439296 2014-04-13] (Sendori)

Winsock: Catalog9-x64 04 C:\Windows\system32\plsapp64.dll [439296 2014-04-13] (Sendori)

Winsock: Catalog9-x64 15 C:\Windows\system32\plsapp64.dll [439296 2014-04-13] (Sendori)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.1

Tcpip\..\Interfaces\{A8F2A90D-56CB-482C-977C-39A31EC8A451}: [DhcpNameServer] 10.0.0.1

Tcpip\..\Interfaces\{C2812F78-84B7-4454-AD02-58CC5DFEF2CC}: [DhcpNameServer] 10.0.0.1

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_190.dll [2015-06-23] ()

FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-08-13] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-08-13] (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_190.dll [2015-06-23] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll [2014-03-11] (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-05-06] ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-27] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-10-27] (Oracle Corporation)

FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll [2013-09-06] (McAfee, Inc.)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-06] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-22] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-22] (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll No File

FF Plugin HKU\S-1-5-21-3504287385-1609395910-1784112399-1002: @nsroblox.roblox.com/launcher -> C:\Users\Devon\AppData\Local\Roblox\Versions\version-e7d5859bbf11477d\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)

FF Plugin HKU\S-1-5-21-3504287385-1609395910-1784112399-1002: @nsroblox.roblox.com/launcher64 -> C:\Users\Devon\AppData\Local\Roblox\Versions\version-e7d5859bbf11477d\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)

FF Plugin HKU\S-1-5-21-3504287385-1609395910-1784112399-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Devon\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-07] (Unity Technologies ApS)

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\[email protected]

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\[email protected] [2014-03-20]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\[email protected]

FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\[email protected] [2014-03-20]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\[email protected]

FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\[email protected] [2014-03-20]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\[email protected]

FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\[email protected] [2014-03-20]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\[email protected]

FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\[email protected] [2014-03-20]

 

Chrome: 

=======

CHR Profile: C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-01]

CHR Extension: (Google Docs) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-20]

CHR Extension: (Google Drive) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-20]

CHR Extension: (Kaspersky Protection) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-03-21]

CHR Extension: (YouTube) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-20]

CHR Extension: (No Name) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-20]

CHR Extension: (Kaspersky URL Advisor) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-03-20]

CHR Extension: (Google Sheets) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-01]

CHR Extension: (Safe Money) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-03-20]

CHR Extension: (Dangerous Websites Blocker) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-03-20]

CHR Extension: (Virtual Keyboard) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-03-20]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-01]

CHR Extension: (Ask Shopping Toolbar) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpadbdkobbgjgonnfnipfngifldcdfin [2015-06-01]

CHR Extension: (Google Wallet) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-20]

CHR Extension: (Gmail) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-20]

CHR Extension: (Anti-Banner) - C:\Users\Devon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-03-20]

CHR HKLM\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - https://clients2.goo...ice/update2/crx

CHR HKU\S-1-5-21-3504287385-1609395910-1784112399-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - https://clients2.goo...ice/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - https://clients2.goo...ice/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.googl...mnlhhddbepgkeaa

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-08]

CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-08]

CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-08]

CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-08]

CHR HKLM-x32\...\Chrome\Extension: [lpadbdkobbgjgonnfnipfngifldcdfin] - C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ-V7-SAT\CRX\ToolbarCR.crx [2014-05-22]

CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-08]

CHR HKLM-x32\...\Chrome\Extension: [pljcgbedjplidkdjahbaalanadmjfgop] - C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ-V7C\CRX\ToolbarCR.crx [2014-05-22]

 

==================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

S2 0172321395363403mcinstcleanup; C:\Windows\TEMP\017232~1.EXE [834664 2013-07-13] (McAfee, Inc.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-09-25] (Advanced Micro Devices, Inc.) [File not signed]

S4 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-05-15] () [File not signed]

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-08] (Kaspersky Lab ZAO)

S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-28] (Microsoft Corporation)

R2 Cachedrv server; C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe [109568 2013-09-26] () [File not signed]

R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-09-05] (CyberLink)

R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [298760 2013-09-05] (CyberLink)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237352 2015-04-25] (EasyAntiCheat Ltd)

R2 HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [1039160 2013-12-25] (Hewlett-Packard Development Company, L.P.)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)

R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [87552 2013-09-26] (Softex Inc.) [File not signed]

R2 plsapp; C:\Program Files (x86)\PureLeads\plsapp.exe [3690784 2014-01-23] (Sendori)

R2 PlsvcV1; C:\Program Files (x86)\PureLeads\PureLeadsSvc.exe [91936 2014-01-23] (PureLeads)

R2 PlsvcV2; C:\Program Files (x86)\PureLeads\PureLeads.Service.exe [24352 2014-01-23] (sendori)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-18] (Realtek Semiconductor)

S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-08-26] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-03] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-03] (Microsoft Corporation)

S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [X]

S2 mcbootdelaystartsvc; "C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-23] (Advanced Micro Devices)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-07-18] (Symantec Corporation)

R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-03-30] (LogMeIn Inc.)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-03-21] (Kaspersky Lab ZAO)

S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-03-21] (Kaspersky Lab)

U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-03-21] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-03-21] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-08] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-03-21] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-08] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)

R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-03-21] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-03-21] (Kaspersky Lab ZAO)

R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [290008 2013-07-05] (Realtek Semiconductor Corp.)

R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2945240 2013-09-12] (Realtek Semiconductor Corporation                           )

S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-07-26] (Synaptics Incorporated)

S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [34544 2013-07-26] (Synaptics Incorporated)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-03] (Microsoft Corporation)

R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)

R1 {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64; C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys [61120 2014-06-11] (StdLib)

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

U3 McMPFSvc; No ImagePath

U3 McNaiAnn; No ImagePath

U3 mcpltsvc; No ImagePath

U3 McProxy; No ImagePath

U3 mfecore; No ImagePath

U3 MSK80Service; No ImagePath

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-07-01 21:47 - 2015-07-01 21:49 - 00033537 _____ C:\Users\Devon\Desktop\FRST.txt

2015-07-01 21:46 - 2015-07-01 21:44 - 02112512 _____ (Farbar) C:\Users\Devon\Desktop\FRST64.exe

2015-07-01 21:45 - 2015-07-01 21:48 - 00000000 ____D C:\FRST

2015-07-01 21:44 - 2015-07-01 21:44 - 02112512 _____ (Farbar) C:\Users\Devon\Downloads\FRST64.exe

2015-07-01 21:24 - 2015-07-01 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rpg Maker VX Ace Full

2015-07-01 21:23 - 2015-07-01 21:23 - 00000000 ____D C:\Program Files (x86)\Enterbrain

2015-07-01 20:46 - 2015-07-01 21:19 - 243378687 _____ () C:\Users\Devon\Downloads\Rpg Maker VX Ace Full Download.exe

2015-06-20 17:57 - 2015-06-20 17:57 - 00000000 ____D C:\Users\Devon\AppData\Local\Blizzard

2015-06-20 09:55 - 2015-06-20 17:57 - 00000000 ____D C:\Program Files (x86)\Hearthstone

2015-06-20 09:55 - 2015-06-20 09:55 - 00001204 _____ C:\Users\Public\Desktop\Hearthstone.lnk

2015-06-20 09:55 - 2015-06-20 09:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone

2015-06-20 09:44 - 2015-07-01 21:43 - 00000000 ____D C:\Users\Devon\AppData\Local\Battle.net

2015-06-20 09:44 - 2015-06-20 17:53 - 00000000 ____D C:\Users\Devon\AppData\Roaming\Battle.net

2015-06-20 09:44 - 2015-06-20 09:44 - 00001167 _____ C:\Users\Public\Desktop\Battle.net.lnk

2015-06-20 09:44 - 2015-06-20 09:44 - 00000000 ____D C:\Users\Devon\AppData\Local\Blizzard Entertainment

2015-06-20 09:43 - 2015-07-01 16:08 - 00000000 ____D C:\Program Files (x86)\Battle.net

2015-06-20 09:43 - 2015-06-20 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2015-06-20 09:43 - 2015-06-20 09:44 - 00000000 ____D C:\ProgramData\Blizzard Entertainment

2015-06-20 09:41 - 2015-06-20 09:41 - 00000000 ____D C:\ProgramData\Battle.net

2015-06-20 09:40 - 2015-06-20 09:40 - 03056696 _____ (Blizzard Entertainment) C:\Users\Devon\Downloads\Hearthstone-Setup-enUS.exe

2015-06-14 13:59 - 2015-05-22 08:08 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-06-14 13:59 - 2015-05-21 08:08 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-06-14 13:59 - 2015-05-21 08:08 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-06-14 13:59 - 2015-05-21 08:08 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-06-14 13:59 - 2015-05-21 08:08 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-06-14 13:59 - 2015-05-21 08:08 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-06-14 13:59 - 2015-05-21 08:08 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-06-14 13:59 - 2015-04-16 17:07 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-06-14 13:59 - 2015-04-09 19:34 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2015-06-14 13:59 - 2015-04-09 19:11 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll

2015-06-14 13:59 - 2015-04-08 17:07 - 00410336 _____ C:\Windows\system32\ApnDatabase.xml

2015-06-14 13:59 - 2015-03-19 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll

2015-06-14 13:59 - 2015-03-19 22:08 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll

2015-06-14 13:59 - 2015-03-19 21:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll

2015-06-14 13:59 - 2015-03-19 21:07 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2015-06-14 13:59 - 2015-03-19 20:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys

2015-06-14 13:59 - 2015-03-17 12:26 - 00467776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2015-06-14 13:59 - 2015-03-08 21:02 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys

2015-06-14 13:58 - 2015-04-01 17:22 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll

2015-06-14 13:58 - 2015-04-01 17:20 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll

2015-06-14 13:58 - 2015-03-31 22:45 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll

2015-06-14 13:58 - 2015-03-31 21:31 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll

2015-06-14 13:58 - 2015-03-12 20:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2015-06-14 13:58 - 2015-03-12 19:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll

2015-06-14 13:58 - 2015-03-03 20:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll

2015-06-14 13:58 - 2015-03-03 20:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll

2015-06-14 13:58 - 2015-03-01 20:43 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll

2015-06-14 13:58 - 2015-03-01 20:21 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll

2015-06-14 13:58 - 2015-01-29 19:53 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2015-06-14 13:58 - 2014-11-14 01:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll

2015-06-14 13:57 - 2015-05-25 08:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll

2015-06-14 13:57 - 2015-05-25 08:07 - 01430528 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2015-06-14 13:57 - 2015-05-21 11:47 - 04177920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-06-14 13:57 - 2015-04-08 17:41 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rgb9rast.dll

2015-06-14 13:57 - 2015-04-02 19:35 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll

2015-06-14 13:57 - 2015-04-02 19:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll

2015-06-14 13:57 - 2015-04-01 17:42 - 03097600 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2015-06-14 13:57 - 2015-04-01 17:30 - 02483712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll

2015-06-14 13:57 - 2015-03-12 21:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys

2015-06-14 13:57 - 2015-03-10 20:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe

2015-06-14 13:57 - 2015-03-10 20:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe

2015-06-14 13:56 - 2015-05-27 09:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-06-14 13:56 - 2015-05-27 09:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-06-14 13:56 - 2015-05-22 22:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-06-14 13:56 - 2015-05-22 22:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-06-14 13:56 - 2015-05-22 22:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-06-14 13:56 - 2015-05-22 22:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-06-14 13:56 - 2015-05-22 22:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-06-14 13:56 - 2015-05-22 21:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-06-14 13:56 - 2015-05-22 21:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-06-14 13:56 - 2015-05-22 21:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-06-14 13:56 - 2015-05-22 21:47 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2015-06-14 13:56 - 2015-05-22 21:43 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2015-06-14 13:56 - 2015-05-22 21:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-06-14 13:56 - 2015-05-22 21:38 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-06-14 13:56 - 2015-05-22 21:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-06-14 13:56 - 2015-05-22 21:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-06-14 13:56 - 2015-05-22 21:28 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2015-06-14 13:56 - 2015-05-22 21:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-06-14 13:56 - 2015-05-22 21:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-06-14 13:56 - 2015-05-22 21:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-06-14 13:56 - 2015-05-22 14:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-06-14 13:56 - 2015-05-22 14:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-06-14 13:56 - 2015-05-22 14:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-06-14 13:56 - 2015-05-22 13:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-06-14 13:56 - 2015-05-22 13:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-06-14 13:56 - 2015-05-22 13:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-06-14 13:56 - 2015-05-22 13:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-06-14 13:56 - 2015-05-22 13:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-06-14 13:56 - 2015-05-22 13:23 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2015-06-14 13:56 - 2015-05-22 13:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-06-14 13:56 - 2015-05-22 13:15 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2015-06-14 13:56 - 2015-05-22 13:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-06-14 13:56 - 2015-05-22 13:08 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-06-14 13:56 - 2015-05-22 13:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-06-14 13:56 - 2015-05-22 13:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-06-14 13:56 - 2015-05-22 12:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-06-14 13:56 - 2015-05-22 12:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-06-14 13:56 - 2015-05-22 12:49 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2015-06-14 13:56 - 2015-05-22 12:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-06-14 13:56 - 2015-05-22 12:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-06-14 13:56 - 2015-04-24 21:34 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2015-06-14 13:56 - 2015-04-24 21:33 - 00549888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll

2015-06-14 13:56 - 2015-04-16 01:17 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS

2015-06-14 13:56 - 2015-04-13 17:37 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll

2015-06-14 13:56 - 2015-04-13 17:34 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll

2015-06-14 13:56 - 2015-04-09 19:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll

2015-06-14 13:56 - 2015-04-09 19:17 - 01018880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll

2015-06-14 13:56 - 2015-03-31 23:21 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2015-06-14 13:56 - 2015-03-31 23:18 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2015-06-14 13:56 - 2015-03-31 23:17 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2015-06-14 13:56 - 2015-03-31 23:08 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2015-06-14 13:56 - 2015-03-31 22:46 - 03633664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2015-06-14 13:56 - 2015-03-31 22:17 - 02551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2015-06-14 13:56 - 2015-03-31 22:17 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2015-06-14 13:56 - 2015-03-31 21:53 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2015-06-14 13:56 - 2015-03-31 21:53 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2015-06-14 13:56 - 2015-03-31 21:45 - 02749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2015-06-14 13:56 - 2015-03-31 21:45 - 00699392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2015-06-14 13:56 - 2015-03-31 21:14 - 01920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2015-06-14 13:56 - 2015-03-31 21:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2015-06-14 13:56 - 2015-03-12 23:03 - 00239424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2015-06-14 13:56 - 2015-03-12 23:03 - 00154432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2015-06-14 13:56 - 2015-03-05 22:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll

2015-06-14 13:56 - 2015-03-05 21:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll

2015-06-14 13:56 - 2015-03-05 21:43 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll

2015-06-14 13:56 - 2015-02-17 18:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2015-06-13 02:14 - 2015-06-13 02:14 - 00000000 __SHD C:\found.001

2015-06-11 03:18 - 2015-06-03 11:18 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-06-11 03:18 - 2015-06-03 11:18 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-06-10 19:25 - 2015-04-30 15:35 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2015-06-10 19:25 - 2015-04-30 15:35 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2015-06-05 22:34 - 2015-06-05 22:35 - 00969584 _____ (ROBLOX Corporation) C:\Users\Devon\Downloads\RobloxPlayerLauncher.exe

2015-06-02 18:06 - 2015-04-08 17:55 - 00410128 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2015-06-02 18:04 - 2015-04-21 11:13 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2015-06-02 18:04 - 2015-04-21 10:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-06-02 18:04 - 2015-04-21 10:28 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-06-02 17:53 - 2015-03-30 00:47 - 00561928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-06-02 17:53 - 2015-03-26 22:27 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2015-06-02 17:53 - 2015-03-26 21:50 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2015-06-02 17:53 - 2015-03-26 21:48 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-06-02 17:09 - 2015-04-30 18:05 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-06-02 17:09 - 2015-04-30 17:48 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-06-02 17:09 - 2015-04-09 20:00 - 01996800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-06-02 17:09 - 2015-04-09 19:50 - 01387008 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-06-02 17:09 - 2015-04-09 19:26 - 01560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-07-01 21:45 - 2014-08-25 23:26 - 00000296 _____ C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job

2015-07-01 21:38 - 2014-12-27 21:50 - 00003112 _____ C:\Windows\System32\Tasks\RDReminder

2015-07-01 21:35 - 2014-03-20 20:00 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3504287385-1609395910-1784112399-1002

2015-07-01 21:25 - 2014-03-21 20:28 - 00000426 ____H C:\Windows\Tasks\Norton Security Scan for Devon.job

2015-07-01 21:24 - 2014-03-20 20:36 - 00000926 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-07-01 21:14 - 2014-03-20 21:11 - 00000000 ____D C:\Program Files (x86)\Steam

2015-07-01 21:04 - 2014-09-20 17:32 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-07-01 21:04 - 2014-06-12 01:08 - 00000312 _____ C:\Windows\Tasks\UpdaterEX.job

2015-07-01 21:02 - 2014-08-08 00:02 - 00000312 _____ C:\Windows\Tasks\WSE_Astromenda.job

2015-07-01 21:00 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\system32\sru

2015-07-01 20:03 - 2014-04-27 18:09 - 00000000 ____D C:\Users\Devon\AppData\Local\LogMeIn Hamachi

2015-07-01 17:27 - 2014-03-29 14:30 - 00003166 _____ C:\Windows\System32\Tasks\HPCeeScheduleForDevon

2015-07-01 17:27 - 2014-03-29 14:30 - 00000352 _____ C:\Windows\Tasks\HPCeeScheduleForDevon.job

2015-07-01 17:22 - 2014-03-20 20:36 - 00000922 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-07-01 16:04 - 2014-03-20 19:44 - 01048893 _____ C:\Windows\WindowsUpdate.log

2015-06-28 11:02 - 2014-06-12 01:08 - 00000164 _____ C:\Users\Devon\AppData\Roaming\WB.CFG

2015-06-28 11:00 - 2014-03-27 19:26 - 00894976 ___SH C:\Users\Devon\Downloads\Thumbs.db

2015-06-28 10:22 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\AppReadiness

2015-06-27 16:57 - 2013-08-22 10:20 - 00000000 ____D C:\Windows\CbsTemp

2015-06-27 16:50 - 2015-05-02 17:47 - 00000000 ____D C:\Users\Devon\AppData\Roaming\Update Manager

2015-06-27 16:50 - 2014-03-20 19:56 - 00000000 ____D C:\Users\Devon\Documents\Youcam

2015-06-27 16:49 - 2014-06-10 08:35 - 00000000 __RDO C:\Users\Devon\SkyDrive (2)

2015-06-27 16:49 - 2014-04-13 00:42 - 00000000 ____D C:\Users\Devon\AppData\Roaming\uTorrent

2015-06-27 16:49 - 2014-03-20 20:25 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2015-06-27 16:48 - 2013-08-22 09:46 - 00046894 _____ C:\Windows\setupact.log

2015-06-27 16:48 - 2013-08-22 09:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-06-23 12:05 - 2014-09-20 17:32 - 00003718 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-06-23 12:04 - 2015-01-23 21:06 - 18174128 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2015-06-22 15:21 - 2015-02-28 16:39 - 00000222 _____ C:\Users\Devon\Desktop\Town of Salem.url

2015-06-20 14:10 - 2014-07-22 19:07 - 00000222 _____ C:\Users\Devon\Desktop\Unturned.url

2015-06-20 14:08 - 2015-02-16 15:39 - 00000222 _____ C:\Users\Devon\Desktop\Besiege.url

2015-06-20 14:03 - 2014-08-15 21:28 - 00000000 ____D C:\Users\Devon\AppData\Local\Game Dev Tycoon - Steam

2015-06-20 09:18 - 2013-08-22 09:44 - 00346816 _____ C:\Windows\system32\FNTCACHE.DAT

2015-06-20 09:16 - 2013-08-22 08:25 - 00262144 ___SH C:\Windows\system32\config\BBI

2015-06-20 00:19 - 2014-12-18 17:36 - 00000000 ____D C:\Windows\system32\appraiser

2015-06-20 00:19 - 2014-07-10 10:16 - 00000000 ___SD C:\Windows\system32\CompatTel

2015-06-20 00:19 - 2013-08-22 10:36 - 00000000 ___RD C:\Windows\ToastData

2015-06-20 00:19 - 2013-08-22 10:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel

2015-06-20 00:19 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\PolicyDefinitions

2015-06-19 22:53 - 2014-03-21 17:03 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log

2015-06-19 10:41 - 2014-08-16 14:40 - 00000000 ____D C:\Users\Devon\AppData\Local\CSDSteamBuild

2015-06-19 10:33 - 2014-04-10 18:48 - 00000000 ____D C:\Windows\system32\MRT

2015-06-17 16:28 - 2014-11-06 18:28 - 00000000 ____D C:\ProgramData\Skype

2015-06-17 16:26 - 2014-11-06 18:28 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-06-12 01:28 - 2014-03-20 20:50 - 00000000 ____D C:\Users\Devon\AppData\Roaming\.minecraft

2015-06-12 01:07 - 2014-09-20 19:02 - 00000000 ____D C:\Users\Devon\AppData\Local\Glyph

2015-06-12 01:07 - 2014-09-20 19:02 - 00000000 ____D C:\Program Files (x86)\Glyph

2015-06-11 03:12 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers

2015-06-09 18:36 - 2013-08-22 14:12 - 00000000 ____D C:\Program Files\Windows Journal

2015-06-05 22:37 - 2014-05-16 21:15 - 00000000 ____D C:\Users\Devon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox

2015-06-02 17:30 - 2014-03-25 19:19 - 00000220 _____ C:\Users\Devon\Desktop\Garry's Mod.url

2015-06-01 23:51 - 2013-08-26 01:09 - 00956476 _____ C:\Windows\system32\PerfStringBackup.INI

2015-06-01 23:43 - 2014-06-12 01:18 - 00000000 ____D C:\Users\Devon\AppData\Local\PriceMeter

2015-06-01 23:43 - 2013-08-26 01:01 - 00022284 _____ C:\Windows\PFRO.log

 

==================== Files in the root of some directories =======

 

2014-06-12 01:08 - 2015-06-28 11:02 - 0000164 _____ () C:\Users\Devon\AppData\Roaming\WB.CFG

2014-12-01 19:02 - 2015-05-17 20:02 - 0000001 _____ () C:\Users\Devon\AppData\Local\DSI.DAT

2014-12-01 19:02 - 2014-12-01 19:02 - 0022528 _____ () C:\Users\Devon\AppData\Local\dsisetup59437342.exe

2014-12-17 23:02 - 2014-12-17 23:02 - 0022528 _____ () C:\Users\Devon\AppData\Local\dsisetup995099532.exe

2015-02-23 18:40 - 2015-02-23 18:40 - 0000000 _____ () C:\Users\Devon\AppData\Local\{CE9D072B-D4B8-4A2C-8BD9-4F1259814DB6}

 

Some files in TEMP:

====================

C:\Users\Devon\AppData\Local\Temp\APNSetup.exe

C:\Users\Devon\AppData\Local\Temp\autorun.dll

C:\Users\Devon\AppData\Local\Temp\BackupSetup.exe

C:\Users\Devon\AppData\Local\Temp\C371.exe

C:\Users\Devon\AppData\Local\Temp\COMAP.EXE

C:\Users\Devon\AppData\Local\Temp\d1po5gt9.dll

C:\Users\Devon\AppData\Local\Temp\Extract.exe

C:\Users\Devon\AppData\Local\Temp\ICReinstall_Adobe_Flash_Setup.exe

C:\Users\Devon\AppData\Local\Temp\ICReinstall_FileZilla_3.9.0.2_win32-setup.exe

C:\Users\Devon\AppData\Local\Temp\install_flashplayer14x32_mssa_aaa_aih.exe

C:\Users\Devon\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll

C:\Users\Devon\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.9-R0.2-16-g37c7969-b3105jnks.dll

C:\Users\Devon\AppData\Local\Temp\jansi-64-git-Bukkit-1.7.9-R0.2-17-g3833911-b3106jnks.dll

C:\Users\Devon\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe

C:\Users\Devon\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe

C:\Users\Devon\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe

C:\Users\Devon\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe

C:\Users\Devon\AppData\Local\Temp\mssinstaller.exe

C:\Users\Devon\AppData\Local\Temp\SearchProtectionSetup.exe

C:\Users\Devon\AppData\Local\Temp\sp64126.exe

C:\Users\Devon\AppData\Local\Temp\SP64854.exe

C:\Users\Devon\AppData\Local\Temp\SP65792.exe

C:\Users\Devon\AppData\Local\Temp\SpOrder.dll

C:\Users\Devon\AppData\Local\Temp\Sqlite3.dll

C:\Users\Devon\AppData\Local\Temp\UninstallHPSA.exe

C:\Users\Devon\AppData\Local\Temp\UNT8C37.tmp.exe

C:\Users\Devon\AppData\Local\Temp\UNT8C38.tmp.exe

C:\Users\Devon\AppData\Local\Temp\UNT8C39.tmp.exe

C:\Users\Devon\AppData\Local\Temp\UNT8C3A.tmp.exe

C:\Users\Devon\AppData\Local\Temp\UNT8C3B.tmp.exe

C:\Users\Devon\AppData\Local\Temp\UNT8C3C.tmp.exe

C:\Users\Devon\AppData\Local\Temp\UNT8C4D.tmp.exe

C:\Users\Devon\AppData\Local\Temp\UNT8C4E.tmp.exe

C:\Users\Devon\AppData\Local\Temp\UNT8C4F.tmp.exe

C:\Users\Devon\AppData\Local\Temp\UNT8C50.tmp.exe

C:\Users\Devon\AppData\Local\Temp\utt33FD.tmp.exe

C:\Users\Devon\AppData\Local\Temp\vcredist_x64.exe

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2015-06-28 10:39

 

==================== End of log ============================

[Advertisements]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

We are missing a log report called Additions.txt
Please locate the log on the desktop and post it in your next reply

Thanks
Joe

[zep516]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

We are missing a log report called Additions.txt
Please locate the log on the desktop and post it in your next reply

Thanks
Joe

[zep516]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.