Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

chrome.exe Uploading data [Solved]

Started by Phantom_Najd , Aug 10 2015 11:38 PM

automatically sleep

This topic is locked

#1
Phantom_Najd

Posted 10 August 2015 - 11:38 PM

New Member

Member
7 posts

I noticed that my laptop is not going to sleep mode automatically. I worked quite a bit on this issue and I found out that it will go to sleep automatically only if Chrome is not working. I ran CMD.EXE as administrator and used powercfg -requests command and below is the result

DISPLAY:

None.

SYSTEM:

None.

AWAYMODE:

None.

EXECUTION:

[PROCESS] \Device\HarddiskVolume5\Program Files (x86)\Google\Chrome\Application\

chrome.exe

Uploading data

[PROCESS] \Device\HarddiskVolume5\Program Files (x86)\Google\Chrome\Application\

chrome.exe

Uploading data

PERFBOOST:

None.

So I went ahead and started searching this chrome.exe Uploading data and all my searching results were directing me to maleware and spyware removal sites and tools so I knew my laptop is infected.

I ran FRST64.exe and here is the FRST.txt contents:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-08-2015

Ran by Sony (administrator) on VAIO (10-08-2015 16:59:44)

Running from C:\Users\Sony\Downloads

Loaded Profiles: Sony (Available Profiles: Sony)

Platform: Windows 8.1 Pro (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

() C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ccSvcHst.exe

(Strong Technology, LLC.) C:\Program Files (x86)\StrongVPN\StrongService.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe

(Intel Corporation) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\Smc.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ccSvcHst.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\lync.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Sony Corporation) C:\Program Files\Sony\NFC Connection Utility\NFCConnectionUtility.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Strong Technology, LLC.) C:\Program Files (x86)\StrongVPN\StrongDial.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTsysTray8.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Plantronics) C:\Program Files (x86)\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Clip.exe

(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe

() C:\Program Files\Sony\VAIO Care\listener.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ucmapi.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\outlook.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [640304 2013-12-11] (ELAN Microelectronics Corp.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1361112 2013-11-18] (Realtek Semiconductor)

HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [142040 2013-07-30] (Realtek Semiconductor Corp.)

HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.)

HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740376 2013-02-06] (Sony Corporation)

HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [286272 2015-05-27] (RealNetworks, Inc.)

HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [590400 2015-05-16] ()

HKLM-x32\...\Run: [Plantronics MyHeadset Updater] => C:\Program Files (x86)\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe [80384 2014-12-15] (Plantronics)

HKLM-x32\...\Run: [PLTUpdater.exe] => C:\Program Files (x86)\Plantronics\Spokes3G\PLTUpdater.exe -min

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\WINDOWS\SYSTEM32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-1599145927-658135827-4201669361-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office 15\root\office15\lync.exe [24048808 2015-06-16] (Microsoft Corporation)

HKU\S-1-5-21-1599145927-658135827-4201669361-1001\...\Run: [StrongVPN Client] => C:\Program Files (x86)\StrongVPN\StrongDial.exe [1504952 2015-04-06] (Strong Technology, LLC.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk [2015-05-26]

ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-05-27]

ShortcutTarget: RealTimes.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)

ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)

BootExecute: autocheck autochk *

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1599145927-658135827-4201669361-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://sony13.msn.com/?pc=SAJB

HKU\S-1-5-21-1599145927-658135827-4201669361-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.mecl.com....t-computing.php

HKU\S-1-5-21-1599145927-658135827-4201669361-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.mecl.com....t-computing.php

SearchScopes: HKU\S-1-5-21-1599145927-658135827-4201669361-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.co...q={searchTerms}

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)

BHO-x32: Symantec Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\bin\IPS\IPSBHO.DLL [2013-10-31] (Symantec Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-21] (Oracle Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-21] (Oracle Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-05-26] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

Tcpip\..\Interfaces\{C6BDF84B-0F51-4831-8A6A-4E23907DD8E4}: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-21] ()

FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2013-12-29] (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-21] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1218158.dll [2015-05-07] (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-11-22] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-11-22] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-21] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-21] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-05-27] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-05-26] (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=18.0.0.112 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2015-05-27] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=18.0.0.112 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2015-05-27] (RealTimes)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-13] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-13] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1599145927-658135827-4201669361-1001: LWAPlugin15.8 -> C:\Users\Sony\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll [2013-03-13] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Users\Sony\AppData\Roaming\mozilla\plugins\npLWAPlugin15.8.dll [2013-03-13] (Microsoft Corporation)

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\IPSFF

FF Extension: Symantec Vulnerability Protection - C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\IPSFF [2015-05-27]

Chrome:

=======

CHR Profile: C:\Users\Sony\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Entanglement Web App) - C:\Users\Sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd [2015-05-26]

CHR Extension: (Cleanflight - Configurator) - C:\Users\Sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\enacoimjcgeinfnnnpajinjgmkahmfgb [2015-05-26]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-26]

CHR Extension: (Poppit!) - C:\Users\Sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi [2015-05-26]

CHR Extension: (Prayer Times) - C:\Users\Sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndmbeogingkjkmmkoomnigifmpajmbkc [2015-05-26]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-26]

CHR Extension: (Status Bar) - C:\Users\Sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojjdiklbbogaliiljdbpbkkkghendjja [2015-05-26]

CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - https://clients2.goo...ice/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)

R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [283296 2013-06-29] (Intel Corporation)

R3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)

R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)

R2 ETDService; C:\Program Files\Elantech\ETDService.exe [99632 2013-12-11] (ELAN Microelectronics Corp.)

R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-12] (Intel® Corporation) [File not signed]

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-12] (Intel® Corporation)

R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-11-22] (Intel Corporation)

R2 Intel® Wireless Bluetooth® 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-27] (Intel Corporation)

R2 ISCTAgent; C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe [200168 2013-12-04] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2013-11-22] (Intel Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [265936 2014-10-29] ()

S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-28] (Sony Corporation)

R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-02-06] (Sony Corporation)

R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2015-05-16] ()

R2 RealTimes Desktop Service; C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1115224 2015-05-27] (RealNetworks, Inc.)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [288472 2013-11-18] (Realtek Semiconductor)

R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-19] (Intel Corporation)

R2 SepMasterService; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ccSvcHst.exe [144368 2013-10-31] (Symantec Corporation)

R3 SmcService; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\Smc.exe [2377984 2013-10-31] (Symantec Corporation)

S3 SNAC; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\snac64.exe [334736 2013-10-31] (Symantec Corporation)

R2 StrongVPN Service; C:\Program Files (x86)\StrongVPN\StrongService.exe [103608 2015-04-06] (Strong Technology, LLC.)

S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)

S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-07] (Sony Corporation)

R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-03-01] (Sony Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3818704 2014-10-29] (Intel® Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 BHDrvx64; C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\BASHDefs\20150728.013\BHDrvx64.sys [1647856 2015-06-22] (Symantec Corporation)

R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [132608 2015-01-30] (Microsoft Corporation)

R3 BthHFAud; C:\Windows\System32\drivers\BthHfAud.sys [32768 2014-11-21] (Microsoft Corporation)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)

R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)

R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)

R1 ccSettings_{2FF4FBED-F03A-4EE2-AC58-C985811A4FBE}; C:\Windows\System32\Drivers\SEP\0C010FAD\0FAD.105\x64\ccSetx64.sys [169048 2013-10-31] (Symantec Corporation)

S3 CSRBC; C:\Windows\System32\Drivers\csrbcx64.sys [38400 2014-12-15] (CSR plc.)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-08-02] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153936 2015-08-02] (Symantec Corporation)

R3 ETDSMBus; C:\Windows\System32\drivers\ETDSMBus.sys [22832 2013-08-20] (ELAN Microelectronic Corp.)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-09-27] (Intel Corporation)

R1 IDSVia64; C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\IPSDefs\20150807.011\IDSvia64.sys [671448 2015-05-26] (Symantec Corporation)

R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-13] ()

R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-13] ()

R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-13] ()

R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77992 2013-11-28] (Intel Corporation)

R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [47008 2013-07-30] ()

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-12-19] (Intel Corporation)

R3 NAVENG; C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\VirusDefs\20150809.022\ENG64.SYS [138488 2015-06-24] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\VirusDefs\20150809.022\EX64.SYS [2146040 2015-06-24] (Symantec Corporation)

R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3482600 2014-11-06] (Intel Corporation)

S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [3648480 2013-08-30] (Intel Corporation)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [444632 2013-12-19] (Realsil Semiconductor Corporation)

R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8242904 2013-07-30] (Realtek Semiconductor Corp.)

R3 semav6thermal64ro; C:\WINDOWS\system32\drivers\semav6thermal64ro.sys [13792 2015-05-27] ()

R3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-11-21] (Microsoft Corporation)

R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-11-21] (Microsoft Corporation)

R1 SRTSP; C:\Windows\System32\Drivers\SEP\0C010FAD\0FAD.105\x64\SRTSP64.SYS [797272 2013-10-31] (Symantec Corporation)

R1 SRTSPX; C:\Windows\System32\Drivers\SEP\0C010FAD\0FAD.105\x64\SRTSPX64.SYS [36952 2013-10-31] (Symantec Corporation)

S3 SyDvCtrl; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\SyDvCtrl64.sys [34800 2013-10-31] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\Drivers\SEP\0C010FAD\0FAD.105\x64\SYMDS64.SYS [493656 2013-10-31] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\Drivers\SEP\0C010FAD\0FAD.105\x64\SYMEFA64.SYS [1147480 2013-10-31] (Symantec Corporation)

S0 SymELAM; C:\Windows\System32\Drivers\SEP\0C010FAD\0FAD.105\x64\SymELAM.sys [23568 2013-10-31] (Symantec Corporation)

R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2015-05-27] (Symantec Corporation)

R1 SymIRON; C:\Windows\System32\Drivers\SEP\0C010FAD\0FAD.105\x64\Ironx64.SYS [224856 2013-10-31] (Symantec Corporation)

R1 SYMNETS; C:\Windows\System32\Drivers\SEP\0C010FAD\0FAD.105\x64\SYMNETS.SYS [437336 2013-10-31] (Symantec Corporation)

R1 SysPlant; C:\Windows\System32\Drivers\SysPlant.sys [155352 2015-05-27] (Symantec Corporation)

R3 tapstrong; C:\Windows\system32\DRIVERS\tapstrong.sys [38760 2015-01-18] (The OpenVPN Project)

R1 Teefer2; C:\Windows\system32\DRIVERS\Teefer.sys [92456 2013-10-31] (Symantec Corporation)

R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [206744 2013-06-21] (Windows ® Win 7 DDK provider)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-10 16:59 - 2015-08-10 16:59 - 00026569 _____ C:\Users\Sony\Downloads\FRST.txt

2015-08-10 16:59 - 2015-08-10 16:59 - 00000000 ____D C:\FRST

2015-08-10 16:53 - 2015-08-10 16:53 - 02171392 _____ (Farbar) C:\Users\Sony\Downloads\FRST64.exe

2015-08-10 16:27 - 2015-08-10 16:27 - 00000000 ____D C:\Users\Sony\AppData\Local\CrashRpt

2015-08-10 16:27 - 2015-08-10 16:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices

2015-08-10 16:24 - 2015-08-10 16:02 - 00024064 _____ C:\WINDOWS\zoek-delete.exe

2015-08-10 16:03 - 2015-08-10 16:26 - 00016918 _____ C:\zoek-results.log

2015-08-10 16:02 - 2015-08-10 16:20 - 00000000 ____D C:\zoek_backup

2015-08-10 16:01 - 2015-08-10 16:02 - 01308672 _____ C:\Users\Sony\Downloads\zoek.exe

2015-08-10 13:09 - 2015-08-10 13:09 - 00029721 _____ C:\Users\Sony\Documents\iVend AMG Requirements_06072015 v3.xlsx

2015-08-02 18:38 - 2015-08-02 18:38 - 00001765 _____ C:\Users\Public\Desktop\iTunes.lnk

2015-08-02 18:38 - 2015-08-02 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-08-02 18:38 - 2015-08-02 18:38 - 00000000 ____D C:\Program Files\iTunes

2015-08-02 18:38 - 2015-08-02 18:38 - 00000000 ____D C:\Program Files\iPod

2015-08-02 18:38 - 2015-08-02 18:38 - 00000000 ____D C:\Program Files (x86)\iTunes

2015-08-02 00:48 - 2015-07-09 22:51 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2015-08-02 00:48 - 2015-07-09 21:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll

2015-08-02 00:48 - 2015-07-09 19:03 - 03701760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2015-08-02 00:48 - 2015-07-09 18:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe

2015-08-02 00:48 - 2015-07-09 18:53 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll

2015-08-02 00:48 - 2015-07-09 18:50 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll

2015-08-02 00:48 - 2015-07-09 18:50 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2015-08-02 00:48 - 2015-07-09 18:48 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2015-08-02 00:48 - 2015-07-09 18:46 - 02229248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll

2015-08-02 00:48 - 2015-07-09 18:38 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe

2015-08-02 00:48 - 2015-07-09 18:37 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll

2015-08-02 00:48 - 2015-07-09 18:35 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2015-08-02 00:48 - 2015-07-09 18:34 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2015-08-02 00:47 - 2015-06-28 08:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2015-08-02 00:47 - 2015-06-28 08:07 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2015-08-02 00:47 - 2015-06-28 08:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2015-08-02 00:47 - 2015-06-28 08:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2015-08-02 00:47 - 2015-06-27 19:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2015-08-02 00:47 - 2015-06-27 06:13 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2015-08-02 00:47 - 2015-06-27 06:12 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2015-08-02 00:47 - 2015-06-27 06:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys

2015-08-02 00:47 - 2015-06-27 05:40 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll

2015-08-02 00:47 - 2015-06-27 05:05 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2015-08-02 00:47 - 2015-06-27 05:00 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2015-08-02 00:47 - 2015-06-27 04:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll

2015-08-02 00:47 - 2015-06-27 04:26 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2015-08-02 00:47 - 2015-06-25 05:31 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2015-08-02 00:46 - 2015-06-16 01:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe

2015-08-02 00:46 - 2015-06-16 01:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2015-08-02 00:46 - 2015-06-16 00:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe

2015-08-02 00:46 - 2015-06-16 00:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2015-08-02 00:46 - 2015-06-15 23:50 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2015-08-02 00:46 - 2015-06-15 22:57 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2015-08-02 00:46 - 2015-05-31 00:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll

2015-08-02 00:46 - 2015-05-30 22:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2015-08-02 00:46 - 2015-05-30 22:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2015-08-02 00:45 - 2015-03-09 05:02 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsp.sys

2015-08-02 00:44 - 2015-07-03 00:21 - 19877376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-08-02 00:44 - 2015-07-02 23:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-08-02 00:44 - 2015-07-02 23:49 - 25193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-08-02 00:44 - 2015-07-02 23:23 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-08-02 00:44 - 2015-07-02 23:19 - 12855296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-08-02 00:44 - 2015-07-02 22:55 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2015-08-02 00:44 - 2015-07-02 22:20 - 14453248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-08-02 00:44 - 2015-07-02 21:59 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2015-08-02 00:44 - 2015-07-02 01:08 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2015-08-02 00:44 - 2015-07-02 00:14 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2015-08-01 21:47 - 2015-06-16 01:39 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2015-08-01 21:47 - 2015-06-16 01:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2015-08-01 21:47 - 2015-06-16 01:26 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll

2015-08-01 21:47 - 2015-06-16 01:24 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2015-08-01 21:47 - 2015-06-16 01:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx

2015-08-01 21:47 - 2015-06-16 00:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2015-08-01 21:47 - 2015-06-16 00:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2015-08-01 21:47 - 2015-06-16 00:56 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2015-08-01 21:47 - 2015-06-16 00:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2015-08-01 21:47 - 2015-06-16 00:49 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll

2015-08-01 21:47 - 2015-06-16 00:41 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2015-08-01 21:47 - 2015-06-16 00:38 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2015-08-01 21:47 - 2015-06-16 00:36 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2015-08-01 21:47 - 2015-06-16 00:17 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2015-08-01 21:47 - 2015-06-16 00:16 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2015-08-01 21:47 - 2015-06-16 00:15 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2015-08-01 21:47 - 2015-06-16 00:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2015-08-01 21:47 - 2015-06-16 00:04 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll

2015-08-01 21:47 - 2015-06-16 00:03 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2015-08-01 21:47 - 2015-06-15 23:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2015-08-01 21:47 - 2015-06-15 23:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx

2015-08-01 21:47 - 2015-06-15 23:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2015-08-01 21:47 - 2015-06-15 23:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2015-08-01 21:47 - 2015-06-15 23:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2015-08-01 21:47 - 2015-06-15 23:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2015-08-01 21:47 - 2015-06-15 23:37 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll

2015-08-01 21:47 - 2015-06-15 23:32 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2015-08-01 21:47 - 2015-06-15 23:31 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2015-08-01 21:47 - 2015-06-15 23:30 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2015-08-01 21:47 - 2015-06-15 23:30 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2015-08-01 21:47 - 2015-06-15 23:17 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2015-08-01 21:47 - 2015-06-15 23:07 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2015-08-01 21:47 - 2015-06-15 23:02 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2015-08-01 21:43 - 2015-07-25 16:34 - 01084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2015-08-01 21:43 - 2015-07-14 17:14 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2015-08-01 21:43 - 2015-07-14 17:14 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2015-08-01 21:43 - 2015-07-14 17:14 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2015-08-01 21:43 - 2015-07-14 17:13 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2015-08-01 21:43 - 2015-06-16 08:36 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2015-08-01 21:43 - 2015-06-16 08:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2015-08-01 21:43 - 2015-06-11 06:49 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2015-08-01 21:43 - 2015-06-10 19:13 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2015-08-01 13:29 - 2015-08-01 13:29 - 00000000 ____D C:\Users\Sony\AppData\Local\YSearchUtil

2015-07-21 20:29 - 2015-07-21 20:29 - 00000000 ____D C:\ProgramData\Sun

2015-07-14 05:43 - 2015-07-14 05:52 - 450296772 _____ C:\Users\Sony\Desktop\1.rar

2015-07-13 12:12 - 2015-06-30 01:43 - 00026288 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2015-07-13 12:12 - 2015-06-29 18:07 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2015-07-13 12:12 - 2015-06-29 18:07 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2015-07-13 12:12 - 2015-06-29 18:07 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2015-07-13 12:12 - 2015-06-29 18:07 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2015-07-13 12:12 - 2015-06-27 06:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2015-07-13 12:12 - 2015-06-27 06:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2015-07-13 12:12 - 2015-06-27 05:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll

2015-07-13 12:12 - 2015-06-27 02:21 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2015-07-13 12:12 - 2015-06-27 02:21 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll

2015-07-13 12:12 - 2015-05-12 03:24 - 00536920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll

2015-07-13 12:12 - 2015-05-11 21:17 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2015-07-13 12:12 - 2015-05-07 20:50 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2015-07-13 12:12 - 2015-05-07 20:00 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll

2015-07-13 12:12 - 2015-05-07 19:53 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2015-07-13 12:12 - 2015-05-07 19:47 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll

2015-07-13 12:12 - 2015-05-07 19:12 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll

2015-07-13 12:12 - 2015-05-07 18:21 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll

2015-07-13 12:12 - 2015-05-07 18:05 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll

2015-07-13 12:12 - 2015-05-03 18:09 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-07-13 12:12 - 2015-05-03 17:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2015-07-13 12:12 - 2015-05-03 17:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll

2015-07-13 12:12 - 2015-05-03 17:49 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll

2015-07-13 12:12 - 2015-05-03 03:39 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2015-07-13 12:12 - 2015-05-01 04:13 - 06521800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe

2015-07-13 12:12 - 2015-05-01 04:13 - 01488000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2015-07-13 12:12 - 2015-05-01 04:13 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2015-07-13 12:12 - 2015-04-30 02:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll

2015-07-13 12:12 - 2015-04-25 05:25 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys

2015-07-13 12:12 - 2015-04-23 18:47 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll

2015-07-13 12:12 - 2015-04-23 18:16 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll

2015-07-13 12:11 - 2015-05-12 16:19 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2015-07-13 12:11 - 2015-05-11 19:34 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll

2015-07-13 12:11 - 2015-05-03 18:07 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2015-07-13 12:11 - 2015-05-03 17:57 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2015-07-13 12:11 - 2015-05-02 02:33 - 00410739 _____ C:\WINDOWS\system32\ApnDatabase.xml

2015-07-13 12:11 - 2015-04-28 16:13 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls

2015-07-13 12:11 - 2015-04-28 16:13 - 00513480 _____ C:\WINDOWS\system32\locale.nls

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-10 16:36 - 2015-05-26 19:14 - 02044136 _____ C:\WINDOWS\WindowsUpdate.log

2015-08-10 16:31 - 2014-11-21 11:43 - 00863592 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-08-10 16:27 - 2015-05-27 11:50 - 00000000 ____D C:\Users\Sony\AppData\Roaming\.strongvpn

2015-08-10 16:26 - 2015-05-26 21:01 - 00000912 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2015-08-10 16:26 - 2015-05-26 20:44 - 00000000 ___DO C:\Users\Sony\OneDrive

2015-08-10 16:25 - 2015-06-07 10:03 - 00000008 __RSH C:\ProgramData\ntuser.pol

2015-08-10 16:25 - 2014-11-21 11:34 - 00356806 _____ C:\WINDOWS\PFRO.log

2015-08-10 16:25 - 2013-08-22 17:46 - 00364787 _____ C:\WINDOWS\setupact.log

2015-08-10 16:25 - 2013-08-22 17:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-08-10 16:25 - 2013-08-22 16:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI

2015-08-10 16:20 - 2013-08-22 18:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy

2015-08-10 16:19 - 2015-05-27 10:37 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2015-08-10 16:19 - 2015-05-26 21:01 - 00000916 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2015-08-10 16:04 - 2015-06-10 11:44 - 00000000 ____D C:\Users\Sony\AppData\Local\CrashDumps

2015-08-10 16:00 - 2013-08-22 18:36 - 00000000 ____D C:\WINDOWS\system32\sru

2015-08-10 13:34 - 2015-05-21 20:48 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1599145927-658135827-4201669361-1001

2015-08-10 13:11 - 2013-08-22 16:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM

2015-08-10 09:36 - 2015-05-21 19:41 - 00000000 ____D C:\Users\Sony\AppData\Local\Packages

2015-08-09 11:05 - 2015-07-07 21:46 - 00000000 ____D C:\Users\Sony\Documents\McKensey Strategy Workshop 06-07-2015

2015-08-09 09:13 - 2013-08-22 18:36 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-08-06 02:20 - 2015-05-26 21:01 - 00002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-08-05 13:27 - 2015-05-27 06:05 - 00000000 ___DC C:\WINDOWS\Panther

2015-08-05 13:24 - 2015-07-10 16:39 - 00000000 ___HD C:\$Windows.~BT

2015-08-02 18:38 - 2015-05-27 11:08 - 00000000 ____D C:\Program Files\Common Files\Apple

2015-08-02 12:36 - 2013-08-22 18:36 - 00000000 ____D C:\WINDOWS\rescache

2015-08-02 12:25 - 2013-08-22 17:44 - 00500304 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2015-08-02 00:48 - 2012-07-26 10:59 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-08-02 00:47 - 2015-06-25 09:56 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2015-08-02 00:47 - 2013-12-29 20:57 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2015-08-02 00:38 - 2015-05-26 21:58 - 00000000 ___SD C:\WINDOWS\system32\GWX

2015-08-01 21:47 - 2015-05-26 21:40 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-08-01 21:40 - 2015-05-26 23:01 - 00000000 ____D C:\Program Files\Microsoft Office 15

2015-08-01 21:30 - 2015-07-07 22:41 - 00004952 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for VAIO-Sony VAIO

2015-08-01 13:33 - 2015-05-27 11:10 - 00000000 ____D C:\Users\Sony\AppData\Roaming\Apple Computer

2015-07-21 20:30 - 2015-05-27 11:05 - 00000000 ____D C:\ProgramData\Oracle

2015-07-21 20:30 - 2013-12-29 20:52 - 00000000 ____D C:\Program Files (x86)\Java

2015-07-21 20:29 - 2013-12-29 20:52 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2015-07-21 20:19 - 2015-05-27 10:37 - 00003718 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2015-07-14 00:10 - 2014-11-21 19:23 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2015-07-14 00:10 - 2014-11-21 19:23 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2015-07-13 12:58 - 2013-08-22 18:36 - 00000000 ___RD C:\WINDOWS\ToastData

2015-07-13 12:58 - 2013-08-22 18:36 - 00000000 ____D C:\WINDOWS\WinStore

2015-07-13 12:13 - 2015-05-26 21:58 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX

2015-07-13 12:13 - 2015-05-26 21:58 - 00000000 ____D C:\WINDOWS\system32\appraiser

2015-07-13 12:13 - 2014-11-21 19:17 - 00000000 ___SD C:\WINDOWS\system32\CompatTel

2015-07-13 12:08 - 2015-05-27 15:25 - 00000000 ____D C:\Users\Sony\AppData\Roaming\iolo

2015-07-13 10:14 - 2015-05-26 21:01 - 00003888 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2015-07-13 10:14 - 2015-05-26 21:01 - 00003652 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Files in the root of some directories =======

2015-05-26 19:08 - 2015-05-26 19:08 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-08-01 21:45

==================== End of log ============================

Addition.txt contents:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:09-08-2015

Ran by Sony (2015-08-10 17:00:07)

Running from C:\Users\Sony\Downloads

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1599145927-658135827-4201669361-500 - Administrator - Disabled)

Guest (S-1-5-21-1599145927-658135827-4201669361-501 - Limited - Disabled)

Sony (S-1-5-21-1599145927-658135827-4201669361-1001 - Administrator - Enabled) => C:\Users\Sony

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Symantec Endpoint Protection (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Symantec Endpoint Protection (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Symantec Endpoint Protection (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.12) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.8.158 - Adobe Systems, Inc.)

Apple Application Support (32-bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

ESDL (x32 Version: 1.0.0 - Sony Corporation) Hidden

ETDWare X64 11.11.2.2_WHQL (HKLM\...\Elantech) (Version: 11.11.2.2 - ELAN Microelectronic Corp.)

FDUx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.69.5227 - Gretech Corporation)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.130 - Google Inc.)

Google Update Helper (x32 Version: 1.3.21.115 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden

Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1015 - Intel Corporation)

Intel Experience Center - Configuration (x32 Version: 1.5.0.0 - Intel) Hidden

Intel® Experience Center Desktop Software (HKLM-x32\...\{e4fefc02-cd6c-45e3-8974-e7357e71da40}) (Version: 1.5.0.0 - Intel)

Intel® Experience Center Driver (HKLM-x32\...\{16660b76-bdc5-47cf-b28d-846120a1ee76}) (Version: 1.0.90.0 - Intel Corporation)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3355 - Intel Corporation)

Intel® PROSet/Wireless Software for Bluetooth® Technology(patch version 3.0.1335.5) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0362 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Intel® Smart Connect Technology (HKLM\...\{51AC86D3-C431-48AD-9195-0D6C930D07CD}) (Version: 4.2.41.2710 - Intel Corporation)

Intel® WiDi (HKLM\...\{24A36A7A-108C-4846-BE1F-2CD05497B998}) (Version: 4.2.15.0 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{c78a13fd-4324-4ddb-a613-746d2461441d}) (Version: 17.13.1 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)

iTunes (HKLM\...\{6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}) (Version: 12.2.1.16 - Apple Inc.)

Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)

KONICA MINOLTA bizhub 350/250/200 (HKLM\...\KONICA MINOLTA bizhub 350/250/200 Installer) (Version: - )

KONICA MINOLTA C360Series (HKLM\...\KONICA MINOLTA C360Series Installer) (Version: - KONICA MINOLTA)

Microsoft Lync Web App Plug-in (HKLM\...\{D45C764D-E3E8-4D81-A7B3-974F16FEA4A2}) (Version: 15.8.8308.857 - Microsoft Corporation)

Microsoft Office 365 ProPlus - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 15.0.4737.1003 - Microsoft Corporation)

Microsoft Office Proofing Tools 2013 - اللغة العربية (HKLM-x32\...\{90150000-001F-0401-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

NFC Connection Utility (HKLM\...\{F3FC1B12-45AA-4ACE-AD9F-DFD87BE9457E}) (Version: 1.0.0.14100 - Sony Corporation)

NXPProximityInstaller (HKLM-x32\...\NXPProximityInstaller) (Version: 6.5.9.0 - NXP Semiconductors)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden

Plantronics CSR Driver (64-bit) (Version: 3.1.50883.11482 - Plantronics, Inc.) Hidden

Plantronics CsrDfu Installer (x32 Version: 3.1.50883.11482 - Plantronics, Inc.) Hidden

Plantronics HidDfu Installer (x32 Version: 3.1.50883.11482 - Plantronics, Inc.) Hidden

Plantronics MyHeadset Updater Device Handlers (32-bit) (x32 Version: 3.1.50883.11482 - Plantronics, Inc.) Hidden

Plantronics MyHeadset Updater DFU Handlers (32-bit) (x32 Version: 3.1.50883.11482 - Plantronics, Inc.) Hidden

Plantronics MyHeadset Updater Install Check (x32 Version: 3.1.50883.11482 - Plantronics, Inc.) Hidden

Plantronics MyHeadset Updater MLS (Version: 3.0.0.0 - Plantronics, Inc.) Hidden

Plantronics MyHeadset Updater Runtime (x32 Version: 3.1.50883.11482 - Plantronics, Inc.) Hidden

Plantronics MyHeadset Updater Startup (x32 Version: 3.1.50883.11482 - Plantronics, Inc.) Hidden

PlayMemories Home (HKLM-x32\...\{1E5C7043-09C5-4974-A69F-A5271FD82BBC}) (Version: 7.0.02.14060 - Sony Corporation)

Readon TV Movie Radio Player 7.6.0.0 (HKLM-x32\...\{80074966-5231-428D-9AE7-B7D5D2DC3246}) (Version: 7.6.0 - Readon Technology)

RealDownloader (x32 Version: 18.0.0.113 - RealNetworks) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.21243 - Realtek Semiconductor Corp.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7064 - Realtek Semiconductor Corp.)

Realtek PC Camera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.00225 - Realtek Semiconductor Corp.)

RealTimes (RealPlayer) (HKLM-x32\...\RealPlayer 18.0) (Version: 18.0.0 - RealNetworks)

RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden

Remote Keyboard (x32 Version: 1.2.0.09270 - Sony Corporation) Hidden

Restore (x32 Version: 1.0.0 - Sony Corporation) Hidden

Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.)

SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden

SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden

StrongVPN Client (HKLM-x32\...\{6EB6293C-9286-4981-8672-956E1A92F33B}_is1) (Version: 1.5.1.0 - Black Oak Computers, Inc)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Symantec Endpoint Protection (HKLM\...\{B53661DC-CD94-4B14-B15F-D9DDCFF72558}) (Version: 12.1.4013.4013 - Symantec Corporation)

The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.0.124 - PandoraTV)

UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden

VAIO - Remote Keyboard (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.2.0.09270 - Sony Corporation)

VAIO - Xperia Link (HKLM-x32\...\{D91558BF-D1F3-411F-AEFE-8774CB406512}) (Version: 1.3.3.11280 - Sony Corporation)

VAIO BIOS Data Transfer Utility (x32 Version: 1.0.0.02050 - Sony Corporation) Hidden

VAIO Care (HKLM\...\{EF649526-0134-46A8-8DF3-D7F9309E48DB}) (Version: 8.4.2.12046 - Sony Corporation)

VAIO Care Hardware Diagnostics Plugin (HKLM-x32\...\{EC153498-00E1-4C9C-89BE-81527C6750BE}) (Version: 4.8.0.13250 - Sony Corporation)

VAIO Care Recovery (HKLM\...\{3A097A28-308D-4C39-809F-C72ED47636E2}) (Version: 1.0.2.08020 - Sony Corporation)

VAIO Control Center (HKLM-x32\...\{8E797841-A110-41FD-B17A-3ABC0641187A}) (Version: 6.3.8.13060 - Sony Corporation)

VAIO CPU Fan Diagnostic (HKLM-x32\...\{BCE6E3D7-B565-4E1B-AC77-F780666A35FB}) (Version: 1.2.0.03050 - Sony Corporation)

VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.11.0.13250 - Sony Corporation)

VAIO Easy Connect (x32 Version: 8.2.0.14170 - Sony Corporation) Hidden

VAIO Gesture Control (HKLM-x32\...\{692955F2-DE9F-4078-8FAA-858D6F3A1776}) (Version: 2.5.0.09250 - Sony Corporation)

VAIO Gesture Control (x32 Version: 2.5.0.09250 - Sony Corporation) Hidden

VAIO Image Optimizer (HKLM-x32\...\InstallShield_{5597C927-029A-46A7-A0C0-8DABD9891A50}) (Version: 3.3.00.10220 - Sony Corporation)

VAIO Image Optimizer (x32 Version: 3.2.00.07040 - Sony Corporation) Hidden

VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 2.3.0.05230 - Sony Corporation)

VAIO Media Server Settings (HKLM\...\{62A172B2-550E-499D-9A82-5190D18390AA}) (Version: 1.1.0.02220 - Sony Corporation)

VAIO Movie Creator (HKLM-x32\...\InstallShield_{C2CC5822-32E6-4D21-88EA-DE8CED09EE2F}) (Version: 4.3.01.11140 - Sony Corporation)

VAIO Movie Creator (x32 Version: 4.2.00.07040 - Sony Corporation) Hidden

VAIO Sample Music (HKLM-x32\...\{FBEE3D44-0933-4B84-BB6A-49957F89187F}) (Version: 1.0.0.03051 - Sony Corporation)

VAIO Touch Search (HKLM\...\{F792DDDD-71C8-419E-AE05-46B0CDB1BEC8}) (Version: 1.1.0.1511 - Sony Corporation)

VAIO Transfer Support (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.9.0.11060 - Sony Corporation)

VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.0.1.02280 - Sony Corporation)

VCCMMx64 (Version: 1.0.0 - Sony Corporation) Hidden

VCCMMx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

VCCx64 (Version: 1.0.0 - Sony Corporation) Hidden

VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

VHD (x32 Version: 1.0.0 - Sony Corporation) Hidden

Video Downloader (x32 Version: 1.0.0 - RealNetworks) Hidden

VIx64 (Version: 1.0.0 - Sony Corporation) Hidden

VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

VPMx64 (Version: 1.0.0 - Sony Corporation ) Hidden

VSSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden

VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden

VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

Windows Driver Package - Cambridge Silicon Radio (CSRBC) USB (10/26/2012 2.4.0.0) (HKLM\...\20C7EDA3129B3FF8F72F9BF59252B718B554FBDC) (Version: 10/26/2012 2.4.0.0 - Cambridge Silicon Radio)

WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

XperiaLinkx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

Yahoo Search Set (HKLM-x32\...\Yahoo! SearchSet) (Version: - Yahoo Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Restore Points =========================

12-07-2015 09:39:17 Windows Modules Installer

01-08-2015 21:43:28 Windows Update

09-08-2015 09:08:52 Scheduled Checkpoint

10-08-2015 16:03:58 zoek.exe restore point

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 16:25 - 2013-08-22 16:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0587B618-3645-4967-927F-C656ECAA7F14} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2013-07-27] (Sony Corporation)

Task: {06FF2700-0793-49DD-A84A-0F46746AFFA3} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)

Task: {10CD4899-38ED-432F-AA51-E9D85CD55DE1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)

Task: {40CC6FCC-94FF-4FAD-BABB-29F527C69386} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)

Task: {4412DDA0-B96C-430D-8056-AA4B5D4F9B89} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2014-01-16] (Sony Corporation)

Task: {47055CB3-6834-49C9-8E49-F47366E9BD4C} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [2015-05-16] ()

Task: {47514452-1118-4798-A594-82B815CB7136} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)

Task: {49280ED9-067C-4606-BB2E-12EEA9DBBA49} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-07-03] (Microsoft Corporation)

Task: {511D09B8-7FA6-48D4-A261-24E03DAE8963} - System32\Tasks\Sony Corporation\VAIO Control Center\NightTimeEnd => C:\Program Files (x86)\Sony\VAIO Control Center\VESSmartConnectTime.exe [2013-07-27] (Sony Corporation)

Task: {52393BC0-4C06-452E-BBBD-02AAD5A35A07} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)

Task: {52A29765-EBCD-4EB0-9EE1-F285EE9C498E} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterUser => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2014-11-17] (Sony Corporation)

Task: {5871C747-1523-4902-A302-6A89B78221BB} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient

Task: {5AA1C28A-D2D6-4F34-98F8-5CCD4571E50E} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterSystem => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2014-11-17] (Sony Corporation)

Task: {5B8769D5-A895-4B99-8049-13FC309646C9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)

Task: {5DD2AB7C-541D-4566-8AB5-F7A167AD83EA} - System32\Tasks\Sony Corporation\VAIO Update\Launch Application => C:\Program Files\SONY\VAIO Update\ShellExeProxy.exe [2014-03-01] (Sony Corporation)

Task: {625BAD9F-09E2-4C6A-BF42-4F2945E1B37F} - System32\Tasks\Sony Corporation\VAIO Control Center\NightTimeStart => C:\Program Files (x86)\Sony\VAIO Control Center\VESSmartConnectTime.exe [2013-07-27] (Sony Corporation)

Task: {68D88AE7-C23B-4050-9DC3-718AF93291EE} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2013-05-24] (Sony Corporation)

Task: {6A77DC1E-0736-44FC-8B42-9BE28E38FFB6} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-06-09] (Microsoft Corporation)

Task: {76BB7006-668E-44E2-8CAE-E88EEC1B31D1} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)

Task: {8415F9D8-4C4F-410B-B9EA-6294089CD8B9} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-21] (Adobe Systems Incorporated)

Task: {8590D735-908D-4452-9571-57C9DCF5F99F} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)

Task: {8F52D28A-06E4-4488-BECB-38F1BF2D5E35} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)

Task: {92AC0EF3-A431-42B6-B9DD-BAFACBD14D72} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)

Task: {965AE6AB-38C0-4C69-95DD-159D7AF69473} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)

Task: {97BEABAF-95BF-42BC-99B4-61640769AAD8} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"

Task: {99CF1791-82A6-4F38-96E9-27E2FCF09A51} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)

Task: {A83D74D4-03B9-432A-A914-EEF40C0163CE} - System32\Tasks\Sony Corporation\NFC Connection Utility\NFC Logon Start => C:\Program Files\Sony\NFC Connection Utility\NFCConnectionUtility.exe [2014-02-11] (Sony Corporation)

Task: {ADC56820-123B-4A08-9AE5-25033E5E9C5E} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2013-07-27] (Sony Corporation)

Task: {B6B8AFA5-4547-4AAC-A32A-7FAC8DDF5D3D} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)

Task: {BE2621EF-9414-4952-93EE-ED60069C85B3} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)

Task: {BF76BAE6-1E58-4BB9-BF51-0F4D90E284F9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-26] (Google Inc.)

Task: {C75D30E1-1CA7-4B96-9ACA-F18E3DE5DDC7} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2014-12-03] (Sony Corporation)

Task: {C79A529A-B5C3-4151-92DB-A425A77483B9} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2014-03-01] (Sony Corporation)

Task: {CA764383-3865-4791-9D4D-6267BE6C17FA} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2014-03-01] (Sony Corporation)

Task: {CC130CD4-37C4-4E5E-B202-0955C6ADF128} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {CEDF97F1-1723-478A-A9AB-9AA6372A74D6} - System32\Tasks\Sony Corporation\VAIO Hardware Diagnostics\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2013-01-25] (Sony Corporation)

Task: {D6B4B8CA-929A-4F2A-97EF-AE756B6A25EF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {E12946A5-7C75-41B1-8E46-FB7D954A8374} - System32\Tasks\Microsoft Office 15 Sync Maintenance for VAIO-Sony VAIO => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-06-02] (Microsoft Corporation)

Task: {EBB57B65-14E0-4F33-9674-CA151BDD1378} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)

Task: {F60F39A0-9FA3-4649-BA71-18ABAABAEF82} - System32\Tasks\Sony Corporation\Xperia Link\Xperia Link Logon Start => C:\Program Files (x86)\Sony\Xperia Link\Xperia Link.exe [2014-11-28] (Sony Corporation)

Task: {F95A37C5-A261-4351-B85E-5C0FBAF3ED67} - System32\Tasks\Sony Corporation\VAIO Care\DeployVAIOManual => %ProgramData%\Sony Corporation\VAIO Care\VAIOUserGuideUpdate.exe

Task: {FAB467C9-B398-4BF7-A83C-DBC6B525646B} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIO Capture\VAIO Clip => C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Clip.exe [2013-07-27] (Sony Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-05-27 17:03 - 2009-10-01 14:08 - 00015360 _____ () C:\WINDOWS\System32\KOAZ8J_L.DLL

2015-05-27 17:03 - 2009-10-01 14:08 - 00015360 _____ () C:\WINDOWS\System32\KOAZ8A_L.DLL

2015-05-27 17:03 - 2010-04-23 18:35 - 00015360 _____ () C:\WINDOWS\System32\KOAZ8W_L.DLL

2015-05-06 18:16 - 2007-11-06 08:22 - 00014848 _____ () C:\WINDOWS\System32\KOBZQABL.dll

2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2015-05-26 23:01 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2013-12-04 08:44 - 2013-12-04 08:44 - 00200168 _____ () C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe

2013-12-04 08:44 - 2013-12-04 08:44 - 00054760 _____ () C:\Program Files\Intel\Intel® Smart Connect Technology Agent\NetworkHeuristic.dll

2013-12-04 08:44 - 2013-12-04 08:44 - 00034792 _____ () C:\Program Files\Intel\Intel® Smart Connect Technology Agent\ISCTNetMon.dll

2015-05-16 17:01 - 2015-05-16 17:01 - 00031856 _____ () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe

2015-05-27 00:07 - 2015-05-27 00:07 - 08898720 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2013-11-19 10:21 - 2013-11-19 10:21 - 00062464 _____ () C:\Program Files\Sony\VAIO Care\listener.exe

2015-05-16 17:00 - 2015-05-16 17:00 - 00035976 _____ () C:\Program Files (x86)\Real\UpdateService\DL2UpdatePlugin.dll

2015-05-16 17:00 - 2015-05-16 17:00 - 00039560 _____ () C:\Program Files (x86)\Real\UpdateService\RealDownloaderUpdatePlugin.dll

2015-05-16 17:00 - 2015-05-16 17:00 - 00037528 _____ () C:\Program Files (x86)\Real\UpdateService\VideoDLUpdatePlugin.dll

2015-05-26 23:02 - 2015-05-26 23:02 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll

2015-05-26 23:02 - 2015-05-26 23:49 - 01754296 _____ () C:\Program Files\Microsoft Office 15\root\office15\tmpod.dll

2015-05-26 23:02 - 2015-05-26 23:33 - 00022696 _____ () C:\Program Files\Microsoft Office 15\root\office15\lynchtmlconvpxy.dll

2015-05-27 11:06 - 2015-05-27 11:06 - 00088640 _____ () C:\Program Files (x86)\Real\RealPlayer\CrashRpt\CrashRpt1402.dll

2014-12-15 07:53 - 2014-12-15 07:53 - 00032768 _____ () C:\Program Files (x86)\Plantronics\MyHeadsetUpdater\NativeUsbLib.dll

2013-12-29 20:49 - 2013-11-22 05:55 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll

2015-05-26 23:02 - 2015-05-26 23:02 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\AppVIsvStream32.dll

2015-05-26 23:06 - 2015-05-27 00:08 - 08898720 _____ () C:\Program Files\Microsoft Office 15\root\Office15\1033\GrooveIntlResource.dll

2015-08-06 02:20 - 2015-07-31 09:19 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libglesv2.dll

2015-08-06 02:20 - 2015-07-31 09:19 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libegl.dll

2015-05-26 23:02 - 2015-05-26 23:49 - 01754296 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\tmpod.dll

2015-07-21 19:50 - 2015-06-16 17:08 - 01032360 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\ADDINS\UmOutlookAddin.dll

2015-08-06 02:20 - 2015-07-31 09:19 - 16308040 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\PepperFlash\pepflashplayer.dll

2015-07-21 19:50 - 2015-07-21 19:50 - 00122024 _____ () C:\Program Files\Microsoft Office 15\root\Office15\JitV.dll

2015-05-26 23:02 - 2015-05-26 23:02 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\Office15\AppVIsvStream32.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Sony\OneDrive:ms-properties

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SepMasterService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SmcService => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1599145927-658135827-4201669361-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sony\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe

FirewallRules: [{BBE1AC82-BF3D-4EE1-8360-8C9F63FBD9C4}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe

FirewallRules: [{841D5732-2AC7-4ABB-92A7-A87BC1D2232B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe

FirewallRules: [{61462DFE-A99D-425A-AC1A-2ED9FBA96495}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe

FirewallRules: [{1272F41A-B055-4F5D-9AFD-5DC61060E45C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe

FirewallRules: [{82E74B36-8DE5-4BEE-AF85-94D2C7019DA7}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

FirewallRules: [{FA9C3005-4956-4D37-AC1E-ADC89EC589F6}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

FirewallRules: [{E0FB8664-6378-45B0-89E3-72F771275254}] => (Allow) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\Smc.exe

FirewallRules: [{4E33BF29-2DF9-45B6-860F-29D84D72CCC4}] => (Allow) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\Smc.exe

FirewallRules: [{AC854425-A10E-471A-85B3-401334E247DF}] => (Allow) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\snac64.exe

FirewallRules: [{69F6890E-742D-4E56-B99B-BF75868A0A9D}] => (Allow) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\snac64.exe

FirewallRules: [{8B5C897B-3914-45E7-BE70-27AA8180979C}] => (Allow) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe

FirewallRules: [{2767985B-9C91-4B82-BFAF-84A3F4204C27}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{31B38FB6-112F-4B0B-AD76-72069283E8C9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{BC51EEF0-F78D-475E-BD85-351BB61B962F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{63540C6B-D58A-463A-BA63-5967E12E1B80}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{F9D1C672-08CB-4121-98C2-D1FEC0C81E00}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [{D00599DF-1686-4F0D-B113-E36989E9DDB4}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAgent.exe

FirewallRules: [{411F6E0F-4B00-41FE-BCF3-7E0F917533A3}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAdmin.exe

FirewallRules: [{E8008FF3-CFBD-47DB-A04B-5099ABE0B42F}] => (Allow) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe

FirewallRules: [{ED9C6F30-4627-4C4A-A87D-3E151E461022}] => (Allow) C:\Program Files\Sony\VAIO Care\VAIOShell.exe

FirewallRules: [{A800BA99-4AFA-491D-9799-70579E80D6A8}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{24C7CDFE-C816-44AF-9421-EA4CA81915EA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (08/10/2015 04:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: VCAgent.exe, version: 8.4.2.12030, time stamp: 0x5476d099

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0xc0000005

Fault offset: 0x00007ff8ff59acb1

Faulting process id: 0x146c

Faulting application start time: 0xVCAgent.exe0

Faulting application path: VCAgent.exe1

Faulting module path: VCAgent.exe2

Report Id: VCAgent.exe3

Faulting package full name: VCAgent.exe4

Faulting package-relative application ID: VCAgent.exe5

Error: (08/10/2015 04:25:11 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: VCAgent.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.NullReferenceException

Stack:

at VCAgent.View.MainWindow.WindowProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)

at System.Windows.Interop.HwndSource.PublicHooksFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)

at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)

at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)

at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)

at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)

at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)

at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)

at MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)

at MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)

at MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)

at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)

at MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)

at System.Windows.Threading.Dispatcher.GetMessage(System.Windows.Interop.MSG ByRef, IntPtr, Int32, Int32)

at System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)

at System.Windows.Application.RunInternal(System.Windows.Window)

at System.Windows.Application.Run()

at VCAgent.App.Main()

Error: (08/10/2015 04:04:08 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: DaS_21.exe, version: 2.1.0.4, time stamp: 0x540c90b2

Faulting module name: KERNELBASE.dll, version: 6.3.9600.17415, time stamp: 0x54505737

Exception code: 0xe0434352

Fault offset: 0x0000000000008b9c

Faulting process id: 0x1158

Faulting application start time: 0xDaS_21.exe0

Faulting application path: DaS_21.exe1

Faulting module path: DaS_21.exe2

Report Id: DaS_21.exe3

Faulting package full name: DaS_21.exe4

Faulting package-relative application ID: DaS_21.exe5

Error: (08/10/2015 04:04:08 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: DaS_21.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.ArgumentOutOfRangeException

Stack:

at System.String.Substring(Int32, Int32)

at DriverAndServicesOut.GetProcess.GetPathName(System.String)

at DriverAndServicesOut.GetProcess.GetAllServices(System.String)

at DriverAndServicesOut.Program.Main(System.String[])

Error: (08/10/2015 03:04:15 PM) (Source: Symantec AntiVirus) (EventID: 51) (User: )

Description: Security Risk Found!Tracking Cookies in File: Cookie:[email protected]/ by: Manual scan. Action: Delete succeeded. Action Description: The file was deleted successfully.

Error: (08/10/2015 01:24:17 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: GWXUX.exe, version: 6.3.9600.17924, time stamp: 0x55959290

Faulting module name: ntdll.dll, version: 6.3.9600.17736, time stamp: 0x550f4336

Exception code: 0xc0000005

Fault offset: 0x000000000003d85e

Faulting process id: 0x1fec

Faulting application start time: 0xGWXUX.exe0

Faulting application path: GWXUX.exe1

Faulting module path: GWXUX.exe2

Report Id: GWXUX.exe3

Faulting package full name: GWXUX.exe4

Faulting package-relative application ID: GWXUX.exe5

Error: (08/10/2015 01:10:04 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: VCAgent.exe, version: 8.4.2.12030, time stamp: 0x5476d099

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0xc0000005

Fault offset: 0x00007ffa1379acb1

Faulting process id: 0x1680

Faulting application start time: 0xVCAgent.exe0

Faulting application path: VCAgent.exe1

Faulting module path: VCAgent.exe2

Report Id: VCAgent.exe3

Faulting package full name: VCAgent.exe4

Faulting package-relative application ID: VCAgent.exe5

Error: (08/10/2015 01:10:04 PM) (Source: .NET Runtime) (EventID: 1026) (User: )