Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Laptop/Chrome Virus Issue [Solved]

Started by xander291190 , Sep 02 2015 05:14 PM

chrome

This topic is locked

#16
xander291190

Posted 09 September 2015 - 03:21 PM

Member

Topic Starter
Member
13 posts

Nevan,

Ok, here's the results:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-09-2015

Ran by user (administrator) on HP (10-09-2015 07:15:43)

Running from C:\Users\user\Downloads

Loaded Profiles: user (Available Profiles: user)

Platform: Windows 8.1 Connected (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidMonitorSvc.exe

(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe

(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe

(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe

(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe

(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7535832 2014-02-13] (Realtek Semiconductor)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [704344 2015-02-05] (Alps Electric Co., Ltd.)

HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-29] (Hewlett-Packard)

HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-29] (Hewlett-Packard)

HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-29] (Hewlett-Packard)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-18] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [1045304 2013-10-09] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [40184 2015-02-27] (Panda Security, S.L.)

HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe,

HKU\S-1-5-21-934653896-176862922-3437185597-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2899136 2015-08-20] (Valve Corporation)

HKU\S-1-5-21-934653896-176862922-3437185597-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd)

ShellIconOverlayIdentifiers: [0PerformanceMonitor] -> {3B5B973C-92A4-4855-9D3F-0F3D23332208} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{0E2E738C-AA2B-43E7-AC64-518FDCB854EF}: [DhcpNameServer] 192.168.1.1

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.jp.msn.com/HPALL14/14

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.jp.msn.com/HPALL14/14

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.jp.msn.com/HPALL14/14

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.jp.msn.com/HPALL14/14

HKU\S-1-5-21-934653896-176862922-3437185597-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.jp.msn.com/HPALL14/14

HKU\S-1-5-21-934653896-176862922-3437185597-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.jp.msn.com/HPALL14/14

SearchScopes: HKU\S-1-5-21-934653896-176862922-3437185597-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}

SearchScopes: HKU\S-1-5-21-934653896-176862922-3437185597-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}

FireFox:

========

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-06] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-09-03] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-09-03] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

Chrome:

=======

CHR HomePage: Default -> hxxp://www.facebook.com/

CHR StartupUrls: Default -> "hxxp://www.facebook.com/"

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-16]

CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-16]

CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-16]

CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-16]

CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-16]

CHR Extension: (Google Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-16]

CHR Extension: (Google Docs Offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03]

CHR Extension: (AdBlock) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-16]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-16]

CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-16]

CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-16]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [140288 2014-04-18] () [File not signed]

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-18] (Advanced Micro Devices, Inc.) [File not signed]

R2 ApHidMonitorService; C:\Program Files\Apoint2K\HidMonitorSvc.exe [87384 2015-02-05] (Alps Electric Co., Ltd.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-08-07] (Windows ® Win 7 DDK provider) [File not signed]

R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [1039160 2013-10-09] (Hewlett-Packard Development Company, L.P.)

R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [142584 2015-02-27] (Panda Security, S.L.)

R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-29] (Softex Inc.) [File not signed]

R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [66808 2014-10-09] (Panda Security, S.L.)

R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [38136 2015-02-27] (Panda Security, S.L.)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-02-13] (Realtek Semiconductor)

S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)

S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17640 2013-10-24] (Advanced Micro Devices, INC.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-14] (Advanced Micro Devices, Inc.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3858944 2013-10-17] (Qualcomm Atheros Communications, Inc.)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-12] (Advanced Micro Devices)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-06] (CyberLink)

S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)

S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2015-09-03] ()

R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [93968 2015-02-10] (Panda Security, S.L.)

R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [202000 2015-02-10] (Panda Security, S.L.)

R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [110864 2015-02-10] (Panda Security, S.L.)

R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [116496 2015-02-10] (Panda Security, S.L.)

R1 NNSNAHSL; C:\Windows\system32\DRIVERS\NNSNAHSL.sys [49936 2014-12-31] (Panda Security, S.L.)

R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [99600 2015-02-10] (Panda Security, S.L.)

R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [69904 2015-02-10] (Panda Security, S.L.)

R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [124176 2015-02-10] (Panda Security, S.L.)

R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [299792 2015-02-10] (Panda Security, S.L.)

R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [166160 2015-02-10] (Panda Security, S.L.)

R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [113424 2015-02-10] (Panda Security, S.L.)

R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [257296 2015-02-10] (Panda Security, S.L.)

R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [106256 2015-02-10] (Panda Security, S.L.)

R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [163576 2015-06-18] (Panda Security, S.L.)

R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [121616 2015-02-26] (Panda Security, S.L.)

R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [197392 2015-02-26] (Panda Security, S.L.)

R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124176 2015-02-26] (Panda Security, S.L.)

R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [133904 2015-02-26] (Panda Security, S.L.)

R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [107792 2015-02-26] (Panda Security, S.L.)

S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [61712 2015-05-22] (Panda Security, S.L.)

R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [291544 2014-01-04] (Realtek Semiconductor Corp.)

S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-08-01] (Realtek Semiconductor Corporation )

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-23] (Hewlett-Packard Development Company, L.P.)

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

S3 mdf16; \??\C:\Users\user\AppData\Local\Temp\mdf16.sys [X]

S3 mvd23; \??\C:\Users\user\AppData\Local\Temp\mvd23.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-10 07:15 - 2015-09-10 07:16 - 00015440 _____ C:\Users\user\Downloads\FRST.txt

2015-09-10 07:13 - 2015-09-10 07:13 - 00852704 _____ C:\Users\user\Downloads\SecurityCheck.exe

2015-09-10 07:09 - 2015-09-10 07:09 - 02190336 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe

2015-09-10 06:53 - 2015-09-10 07:03 - 00000000 ____D C:\Users\user\Documents\Tablet Stuff

2015-09-10 00:55 - 2015-09-10 00:55 - 00889416 _____ (Microsoft Corporation) C:\Users\user\Downloads\dotNetFx40_Full_setup.exe

2015-09-10 00:10 - 2014-10-23 10:14 - 04012982 _____ (NathanScott Apps) C:\Users\user\Downloads\IDTool.exe

2015-09-10 00:09 - 2015-09-10 00:09 - 02744965 _____ C:\Users\user\Downloads\idtool.zip

2015-09-10 00:09 - 2015-09-10 00:09 - 00002601 _____ C:\Users\user\Downloads\FSS.txt

2015-09-09 23:55 - 2015-09-09 23:55 - 00302011 _____ C:\Users\user\Downloads\WindowsUpdateDiagnostic.diagcab

2015-09-09 11:52 - 2015-09-09 11:56 - 309468831 _____ C:\Users\user\Downloads\The.Fall.2x01.HDTV.x264-FoV.mp4

2015-09-09 08:40 - 2015-08-27 12:48 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-09-09 08:40 - 2015-08-27 04:00 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-09-09 08:40 - 2015-08-27 04:00 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-09-09 08:40 - 2015-08-27 04:00 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-09-09 08:40 - 2015-08-27 04:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-09-09 08:40 - 2015-08-27 00:46 - 03705344 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-09-09 08:40 - 2015-08-27 00:29 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-09-09 08:40 - 2015-08-27 00:27 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-09-09 08:40 - 2015-08-27 00:27 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2015-09-09 08:40 - 2015-08-27 00:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-09-09 08:40 - 2015-08-27 00:26 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-09-09 08:40 - 2015-08-27 00:26 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-09-09 08:39 - 2015-09-02 12:56 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-09-09 08:39 - 2015-09-02 12:55 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-09-09 08:39 - 2015-09-02 12:50 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-09-09 08:39 - 2015-09-02 12:17 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-09-09 08:39 - 2015-09-02 12:13 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-09-09 08:39 - 2015-08-23 04:19 - 25188352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-09-09 08:39 - 2015-08-23 03:35 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-09-09 08:39 - 2015-08-23 03:34 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-09-09 08:39 - 2015-08-23 03:22 - 19856384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-09-09 08:39 - 2015-08-23 03:21 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-09-09 08:39 - 2015-08-23 03:20 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-09-09 08:39 - 2015-08-23 02:55 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-09-09 08:39 - 2015-08-23 02:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-09-09 08:39 - 2015-08-23 02:50 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2015-09-09 08:39 - 2015-08-23 02:45 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-09-09 08:39 - 2015-08-23 02:44 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-09-09 08:39 - 2015-08-23 02:41 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-09-09 08:39 - 2015-08-23 02:41 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-09-09 08:39 - 2015-08-23 02:41 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-09-09 08:39 - 2015-08-23 02:41 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-09-09 08:39 - 2015-08-23 02:39 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-09-09 08:39 - 2015-08-23 02:28 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-09-09 08:39 - 2015-08-23 02:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-09-09 08:39 - 2015-08-23 02:23 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2015-09-09 08:39 - 2015-08-23 02:22 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-09-09 08:39 - 2015-08-23 02:20 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-09-09 08:39 - 2015-08-23 02:18 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-09-09 08:39 - 2015-08-23 02:18 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-09-09 08:39 - 2015-08-23 02:18 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-09-09 08:39 - 2015-08-23 02:14 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-09-09 08:39 - 2015-08-23 02:01 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-09-09 08:39 - 2015-08-23 02:00 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-09-09 08:39 - 2015-08-23 01:56 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-09-09 08:39 - 2015-08-23 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-09-09 08:39 - 2015-08-04 07:15 - 00074928 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-09-09 08:39 - 2015-08-04 07:15 - 00065600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2015-09-09 08:39 - 2015-08-02 00:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-09-09 08:39 - 2015-08-01 13:47 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe

2015-09-09 08:39 - 2015-08-01 13:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe

2015-09-09 08:39 - 2015-08-01 13:38 - 01265152 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2015-09-09 08:39 - 2015-08-01 13:37 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe

2015-09-09 08:39 - 2015-08-01 13:37 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe

2015-09-09 08:39 - 2015-07-31 03:18 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2015-09-09 08:39 - 2015-07-31 02:22 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll

2015-09-09 08:39 - 2015-07-23 00:34 - 02775552 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-09-09 08:39 - 2015-07-23 00:33 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll

2015-09-09 08:39 - 2015-07-23 00:25 - 02461184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-09-09 08:39 - 2015-07-23 00:25 - 01546752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll

2015-09-09 08:39 - 2015-07-19 04:31 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll

2015-09-09 08:39 - 2015-07-19 04:29 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

2015-09-09 08:39 - 2015-07-19 04:29 - 00148480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll

2015-09-09 08:39 - 2015-07-19 04:27 - 00520192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

2015-09-09 08:39 - 2015-07-14 13:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tzsync.exe

2015-09-06 10:13 - 2015-09-06 10:13 - 00000000 ____D C:\Program Files (x86)\ESET

2015-09-06 10:12 - 2015-09-06 10:12 - 02870984 _____ (ESET) C:\Users\user\Downloads\esetsmartinstaller_enu.exe

2015-09-06 10:07 - 2015-09-08 10:08 - 00001047 _____ C:\Users\user\Downloads\MalwareBytes.txt

2015-09-06 09:30 - 2015-09-06 09:30 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\user\Downloads\mbam-setup-2.1.8.1057.exe

2015-09-06 09:17 - 2015-09-06 09:17 - 00007164 _____ C:\Users\user\Downloads\WinDefend.reg

2015-09-06 09:17 - 2015-09-06 09:17 - 00007020 _____ C:\Users\user\Downloads\wuauserv.reg

2015-09-06 03:53 - 2015-09-06 03:53 - 00899072 _____ (Farbar) C:\Users\user\Downloads\FSS.exe

2015-09-06 03:52 - 2015-09-06 03:37 - 00000684 _____ C:\Users\user\Downloads\AdwCleaner[C2].txt

2015-09-06 03:52 - 2015-09-03 02:04 - 00000933 _____ C:\Users\user\Downloads\AdwCleaner[C1].txt

2015-09-06 03:00 - 2015-07-31 00:04 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2015-09-06 03:00 - 2015-07-30 23:48 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2015-09-06 02:46 - 2015-07-17 06:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-09-06 02:46 - 2015-07-17 06:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-09-06 02:46 - 2015-07-17 05:53 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2015-09-06 02:46 - 2015-07-17 05:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-09-06 02:46 - 2015-07-17 05:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-09-06 02:46 - 2015-07-17 05:14 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2015-09-06 02:46 - 2015-07-17 04:52 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2015-09-06 02:46 - 2015-07-16 10:29 - 07458648 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-09-06 02:46 - 2015-07-16 10:29 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-09-06 02:46 - 2015-07-16 10:29 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-09-06 02:46 - 2015-07-16 10:28 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-09-06 02:46 - 2015-07-11 03:54 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2015-09-06 02:46 - 2015-07-02 08:19 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2015-09-06 02:46 - 2015-07-02 08:16 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2015-09-06 02:46 - 2015-07-02 07:37 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2015-09-06 02:46 - 2015-07-02 07:35 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2015-09-06 02:46 - 2015-06-10 04:27 - 00411133 _____ C:\Windows\system32\ApnDatabase.xml

2015-09-06 02:45 - 2015-07-30 00:37 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-09-06 02:45 - 2015-07-30 00:30 - 01381888 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-09-06 02:45 - 2015-07-30 00:23 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2015-09-06 02:45 - 2015-07-29 09:24 - 00025776 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2015-09-06 02:45 - 2015-07-29 00:24 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-09-06 02:45 - 2015-07-29 00:24 - 01116160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-09-06 02:45 - 2015-07-29 00:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-09-06 02:45 - 2015-07-29 00:24 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-09-06 02:45 - 2015-07-29 00:24 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-09-06 02:45 - 2015-07-29 00:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-09-06 02:45 - 2015-07-15 07:59 - 01113944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2015-09-06 02:45 - 2015-07-15 07:59 - 00487256 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll

2015-09-06 02:45 - 2015-07-15 07:59 - 00393560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll

2015-09-06 02:45 - 2015-07-14 13:22 - 02529880 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-09-06 02:45 - 2015-07-14 13:21 - 01901776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2015-09-06 02:45 - 2015-07-14 05:46 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-09-06 02:45 - 2015-07-14 05:45 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll

2015-09-06 02:45 - 2015-07-11 04:19 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2015-09-06 02:45 - 2015-07-11 03:42 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-09-06 02:45 - 2015-07-11 03:14 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2015-09-06 02:45 - 2015-07-11 03:13 - 07032320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2015-09-06 02:45 - 2015-07-11 02:47 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-09-06 02:45 - 2015-07-11 02:31 - 06213120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2015-09-06 02:45 - 2015-07-10 03:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe

2015-09-06 02:45 - 2015-07-10 03:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\notepad.exe

2015-09-06 02:45 - 2015-07-10 02:30 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

2015-09-06 02:45 - 2015-07-07 19:40 - 00270168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2015-09-06 02:45 - 2015-07-07 19:40 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys

2015-09-06 02:45 - 2015-07-07 19:40 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2015-09-06 02:45 - 2015-06-13 03:03 - 18823680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2015-09-06 02:45 - 2015-06-13 02:36 - 15159296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2015-09-06 02:45 - 2015-06-12 06:12 - 02476376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2015-09-06 02:45 - 2015-06-12 06:12 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2015-09-06 02:39 - 2015-09-06 02:39 - 01654272 _____ C:\Users\user\Downloads\adwcleaner_5.005.exe

2015-09-06 02:38 - 2015-09-06 02:38 - 00001065 _____ C:\Users\user\Downloads\JRT.txt

2015-09-06 02:30 - 2015-09-06 02:30 - 01799392 _____ (Malwarebytes Corporation) C:\Users\user\Downloads\JRT.exe

2015-09-06 02:20 - 2015-09-10 07:10 - 01866026 _____ C:\Windows\WindowsUpdate.log

2015-09-06 02:17 - 2015-09-06 02:17 - 00000000 ____D C:\Users\user\Downloads\Tweaking.com - Windows Repair

2015-09-06 02:16 - 2015-09-06 02:16 - 18024840 _____ C:\Users\user\Downloads\tweaking.com_windows_repair_aio.zip

2015-09-05 11:58 - 2015-09-05 12:16 - 00000000 ____D C:\ProgramData\RogueKiller

2015-09-05 11:58 - 2015-09-05 11:58 - 00037624 _____ C:\Windows\system32\Drivers\TrueSight.sys

2015-09-03 18:55 - 2015-09-03 18:55 - 00000000 _____ C:\Recovery.txt

2015-09-03 18:52 - 2015-09-03 18:52 - 00262144 _____ C:\Windows\system32\config\userdiff

2015-09-03 12:37 - 2015-09-03 12:38 - 00000000 ____D C:\Program Files\CCleaner

2015-09-03 12:37 - 2015-09-03 12:37 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2015-09-03 08:20 - 2015-09-10 07:15 - 00000000 ____D C:\FRST

2015-09-03 02:24 - 2015-09-03 09:31 - 00043664 _____ C:\Windows\system32\Drivers\hitmanpro37.sys

2015-09-03 02:20 - 2015-09-03 02:24 - 00000000 ____D C:\ProgramData\HitmanPro

2015-09-03 02:16 - 2015-09-03 02:16 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-09-03 01:58 - 2015-09-06 03:37 - 00000000 ____D C:\AdwCleaner

2015-09-03 01:49 - 2015-09-03 01:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-09-03 01:47 - 2015-09-10 06:52 - 00000900 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-09-03 01:47 - 2015-09-10 06:50 - 00000896 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-09-03 01:47 - 2015-09-03 01:47 - 00003872 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-09-03 01:47 - 2015-09-03 01:47 - 00003636 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-09-02 13:19 - 2015-09-02 17:49 - 00000000 __RHD C:\ESD

2015-08-17 02:34 - 2015-09-03 09:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HoMM3 HD

2015-08-16 21:30 - 2015-08-16 21:30 - 00000000 ____D C:\Windows\wb

2015-08-12 15:01 - 2015-09-03 13:23 - 00000000 ____D C:\Windows\Minidump

2015-08-11 13:46 - 2015-08-11 13:46 - 00000000 ____D C:\Users\user\Documents\Ubisoft

2015-08-11 13:46 - 2015-08-11 13:46 - 00000000 ____D C:\Users\user\AppData\Roaming\Steam

2015-08-11 13:33 - 2015-08-16 21:45 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll

2015-08-11 13:33 - 2015-08-16 21:45 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll

2015-08-11 13:33 - 2015-08-16 21:45 - 00122904 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll

2015-08-11 13:33 - 2015-08-16 21:45 - 00109080 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll

2015-08-11 13:33 - 2015-08-11 13:33 - 00000000 ____D C:\Program Files (x86)\OpenAL

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-10 07:14 - 2015-07-17 00:03 - 00000000 ____D C:\Users\user\AppData\Roaming\uTorrent

2015-09-10 06:53 - 2015-03-19 07:18 - 00003898 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{962FEC79-917D-4E82-BD62-17EA45F302FE}

2015-09-10 06:53 - 2014-03-18 19:53 - 00956476 _____ C:\Windows\system32\PerfStringBackup.INI

2015-09-10 06:51 - 2015-03-19 07:20 - 00000000 ____D C:\Users\user\Documents\Youcam

2015-09-10 06:50 - 2015-07-18 17:41 - 00000000 ____D C:\Program Files (x86)\Steam

2015-09-10 06:50 - 2015-07-16 18:48 - 00000000 __RDO C:\Users\user\OneDrive

2015-09-10 06:50 - 2013-08-23 01:36 - 00000000 ____D C:\Windows\system32\sru

2015-09-09 23:59 - 2015-03-19 06:41 - 00065536 _____ C:\Windows\system32\spu_storage.bin

2015-09-09 23:59 - 2013-08-23 00:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-09-09 13:47 - 2015-07-18 18:59 - 00000000 ____D C:\Users\user\AppData\Roaming\vlc

2015-09-09 12:41 - 2013-08-23 01:20 - 00000000 ____D C:\Windows\CbsTemp

2015-09-09 12:32 - 2013-08-23 00:44 - 00383584 _____ C:\Windows\system32\FNTCACHE.DAT

2015-09-09 12:29 - 2013-08-22 23:25 - 00262144 ___SH C:\Windows\system32\config\BBI

2015-09-09 12:27 - 2014-03-18 19:38 - 00000000 ____D C:\Program Files\Windows Journal

2015-09-09 12:27 - 2013-08-23 01:36 - 00000000 ____D C:\Windows\PolicyDefinitions

2015-09-09 10:52 - 2015-03-19 07:23 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-934653896-176862922-3437185597-1002

2015-09-08 12:15 - 2013-08-23 01:36 - 00000000 ____D C:\Windows\rescache

2015-09-08 02:52 - 2013-08-23 01:36 - 00000000 ____D C:\Windows\AppReadiness

2015-09-08 02:45 - 2015-03-19 07:18 - 00000000 ____D C:\Users\user\AppData\Local\Packages

2015-09-06 10:15 - 2015-03-19 06:46 - 00000000 ____D C:\Windows\Options

2015-09-06 09:06 - 2015-07-10 23:39 - 00000000 ___HD C:\$Windows.~BT

2015-09-06 08:48 - 2014-04-02 20:25 - 00000000 ____D C:\Windows\Panther

2015-09-06 03:41 - 2013-08-23 01:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-09-06 03:41 - 2013-08-23 01:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-09-06 03:41 - 2013-08-23 01:36 - 00000000 ____D C:\Program Files\Windows Defender

2015-09-06 03:41 - 2013-08-23 01:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2015-09-06 02:58 - 2015-07-19 23:22 - 00000000 ____D C:\Windows\system32\MRT

2015-09-06 02:53 - 2015-07-19 23:22 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-09-06 02:49 - 2015-08-01 05:15 - 00000000 ____D C:\Windows\system32\appraiser

2015-09-06 02:49 - 2015-07-23 23:30 - 00000000 ___SD C:\Windows\system32\CompatTel

2015-09-06 02:48 - 2013-08-23 01:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-09-06 02:48 - 2013-08-23 01:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-09-05 11:46 - 2013-08-23 01:36 - 00000000 ____D C:\Windows\WinStore

2015-09-03 09:00 - 2013-08-23 01:36 - 00000000 ____D C:\Windows\LiveKernelReports

2015-09-03 01:49 - 2015-07-16 18:36 - 00000000 ____D C:\Program Files (x86)\Google

2015-09-03 01:47 - 2015-07-16 18:33 - 00000000 ____D C:\Users\user\AppData\Local\Deployment

2015-09-02 13:14 - 2015-07-16 18:35 - 00000000 ____D C:\Users\user\AppData\Local\Google

2015-08-31 13:53 - 2014-05-13 18:10 - 00000000 ____D C:\ProgramData\WildTangent

2015-08-31 13:53 - 2014-05-13 18:10 - 00000000 ____D C:\Program Files (x86)\WildTangent Games

2015-08-31 13:51 - 2015-08-07 17:04 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2015-08-16 21:09 - 2015-07-19 17:20 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll

2015-08-16 21:09 - 2015-07-19 17:19 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll

2015-08-16 21:09 - 2015-07-19 17:10 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll

2015-08-16 21:09 - 2015-07-19 17:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe

2015-08-16 21:09 - 2013-08-22 21:22 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll

2015-08-16 21:09 - 2013-08-22 21:22 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe

2015-08-16 21:09 - 2013-08-22 21:17 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll

2015-08-16 21:09 - 2013-08-22 21:17 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll

2015-08-16 21:09 - 2013-08-22 21:17 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll

2015-08-16 21:09 - 2013-08-22 13:56 - 00377856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll

2015-08-16 21:09 - 2013-08-22 13:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe

2015-08-16 21:09 - 2013-08-22 13:51 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll

2015-08-16 21:09 - 2013-08-22 13:51 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll

2015-08-16 21:09 - 2013-08-22 13:51 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll

2015-08-14 18:15 - 2015-07-10 16:02 - 00000000 __SHD C:\Users\user\AppData\Local\EmieUserList

2015-08-14 18:15 - 2015-07-10 16:02 - 00000000 __SHD C:\Users\user\AppData\Local\EmieSiteList

2015-08-14 11:50 - 2015-07-23 18:44 - 00794088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-08-14 11:50 - 2015-07-23 18:44 - 00179688 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-08-11 13:39 - 2015-03-19 06:39 - 00000000 ____D C:\ProgramData\Package Cache

Some files in TEMP:

====================

C:\Users\user\AppData\Local\Temp\ARS.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-09-02 16:27

==================== End of FRST.txt ============================

Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:07-09-2015

Ran by user (2015-09-10 07:17:03)

Running from C:\Users\user\Downloads

Windows 8.1 Connected (X64) (2015-03-18 21:17:56)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-934653896-176862922-3437185597-500 - Administrator - Disabled)

Guest (S-1-5-21-934653896-176862922-3437185597-501 - Limited - Disabled)

user (S-1-5-21-934653896-176862922-3437185597-1002 - Administrator - Enabled) => C:\Users\user

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Panda Free Antivirus (Enabled - Up to date) {AAF74A68-8713-CDF1-004F-30003398BE9E}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Panda Free Antivirus (Enabled - Up to date) {1196AB8C-A129-C27F-3AFF-0B72481FF423}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Panda Firewall (Disabled) {92CCCB4D-CD7C-CCA9-2B10-9935CD4BF9E5}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)

ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.1202.1711.102 - Alps Electric)

AMD Catalyst Install Manager (HKLM\...\{7536C341-2F7D-EFE6-F521-DEBE68B025C5}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

calibre 64bit (HKLM\...\{D4DF4C08-5DCA-4664-8612-1A8511D6F8B4}) (Version: 2.33.0 - Kovid Goyal)

CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)

CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.5.6902 - CyberLink Corp.)

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.5.3416 - CyberLink Corp.)

CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.3709 - CyberLink Corp.)

CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.3.3907 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden

Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.85 - Google Inc.)

Google Update Helper (x32 Version: 1.3.28.13 - Google Inc.) Hidden

HP Documentation (HKLM-x32\...\{3BAA7681-EF42-4FEC-84FC-87BA815492A4}) (Version: 1.2.0.0 - Hewlett-Packard)

HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7372.4698 - Hewlett-Packard)

HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.11 - Hewlett-Packard)

HP System Event Utility (HKLM-x32\...\{C78E8F51-3EAD-4F0C-83F0-EF371075E0B4}) (Version: 1.0.10 - Hewlett-Packard Company)

HP Utility Center (HKLM\...\{891A1782-8B20-4403-8383-458962525926}) (Version: 2.3.4 - Hewlett-Packard Company)

HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)

Inst5675 (Version: 8.01.11 - Softex Inc.) Hidden

Inst5676 (Version: 8.01.11 - Softex Inc.) Hidden

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

OEM Application Profile (HKLM-x32\...\{315F1A48-D883-B234-7C79-15873574ACC1}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)

OpenAL (HKLM-x32\...\OpenAL) (Version: - )

Panda Devices Agent (HKLM-x32\...\Panda Devices Agent) (Version: 1.03.04 - Panda Security)

Panda Devices Agent (x32 Version: 1.05.00 - Panda Security) Hidden

Panda Free Antivirus (HKLM-x32\...\Panda Universal Agent Endpoint) (Version: 15.01.00.0006 - Panda Security)

Panda Free Antivirus (Version: 7.84.00.0000 - Panda Security) Hidden

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.232 - Qualcomm Atheros)

Qualcomm Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Qualcomm Atheros)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.29075 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 8.24.1218.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7164 - Realtek Semiconductor Corp.)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Restore Points =========================

05-09-2015 11:43:49 Restore Point Created by FRST

09-09-2015 08:57:22 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 23:25 - 2013-08-22 23:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1234C257-7477-4E3A-BCF4-F58E62AAE406} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-20] (Piriform Ltd)

Task: {1D1EFFDD-FFEF-41BA-8406-9E014220D816} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)

Task: {439E8759-4791-4EEA-A839-18CE850C33B7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)

Task: {5BAB93B1-05E8-4C35-ADE2-2CE61829406C} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05] (CyberLink)

Task: {77B21F00-F567-45A3-A24A-B61306578DDC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-09-06] (Microsoft Corporation)

Task: {780563C7-45A1-45E2-85FF-2EAFA6B0AC61} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-13] (CyberLink Corp.)

Task: {9DEBB4FD-0592-4742-9E6B-FC814A674E5A} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser

Task: {B1EA828C-2A31-4235-AD2A-081FDBFFB3B7} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2014-03-07] (CyberLink Corp.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2014-03-29 06:31 - 2014-03-29 06:31 - 02110464 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll

2014-03-29 06:27 - 2014-03-29 06:27 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll

2014-03-29 06:27 - 2014-03-29 06:27 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll

2014-03-29 06:27 - 2014-03-29 06:27 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll

2014-03-29 06:48 - 2014-03-29 06:48 - 00367504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll

2014-03-29 06:48 - 2014-03-29 06:48 - 00712080 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll

2014-04-18 08:38 - 2014-04-18 08:38 - 00140288 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe

2014-04-18 08:37 - 2014-04-18 08:37 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll

2014-03-29 06:36 - 2014-03-29 06:36 - 00065024 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe

2015-04-02 05:51 - 2015-04-02 05:51 - 00055576 _____ () C:\Program Files\CCleaner\branding.dll

2013-04-13 03:23 - 2013-04-13 03:23 - 00612664 _____ () C:\Program Files (x86)\Panda Security\Panda Security Protection\SQLite3.dll

2015-03-19 07:02 - 2013-08-05 17:49 - 00627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll

2013-08-06 08:48 - 2013-08-06 08:48 - 00016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll

2015-09-03 01:49 - 2015-08-28 10:17 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libglesv2.dll

2015-09-03 01:49 - 2015-08-28 10:17 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\user\OneDrive:ms-properties

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NanoServiceMain => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSUAService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-934653896-176862922-3437185597-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\user\Downloads\mcgregor.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{8AFB18E9-4724-4191-874C-AC1A694311D6}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{DD25CBE7-1219-4332-9E17-352CA7421165}] => (Allow) LPort=2869

FirewallRules: [{D33D7668-823A-4724-A23E-9462981FB3EC}] => (Allow) LPort=1900

FirewallRules: [{CB52E8B5-73B8-4D8F-9A72-E8906218918A}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe

FirewallRules: [{FA6808E9-1F1D-46F1-AB43-1A2A2478C6F4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe

FirewallRules: [{C1961B59-8682-4FAB-87EF-844C8FB74CFA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe

FirewallRules: [{FEF048D0-8AF0-4429-B551-837CFB201F25}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe

FirewallRules: [{6D3A065B-B583-41A6-B965-BBEAAA99544C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{C7ED0B86-9743-4C29-AE05-79294D5C621A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{C3F230BA-FC6F-41A5-B8D8-C4932A7D0CEA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{99D0FB7B-C336-4B86-AFFA-D99517423845}] => (Allow) C:\Windows\explorer.exe

FirewallRules: [{217031CA-3E9A-4E43-8DEC-ED762874A475}] => (Allow) C:\Windows\system32\rundll32.exe

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (09/10/2015 12:57:28 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: IDTool.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.NullReferenceException

Stack:

at WpfApplication1.MainWindow.DataText_MouseDown(System.Object, System.Windows.Input.MouseButtonEventArgs)

at System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)

at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)

at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)

at System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs)

at System.Windows.Input.InputManager.ProcessStagingArea()

at System.Windows.Input.InputProviderSite.ReportInput(System.Windows.Input.InputReport)

at System.Windows.Interop.HwndMouseInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawMouseActions, Int32, Int32, Int32)

at System.Windows.Interop.HwndMouseInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)

at System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)

at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)

at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)

at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)

at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)

at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)

at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)

at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)

at System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)

at System.Windows.Application.RunInternal(System.Windows.Window)

at System.Windows.Application.Run()

at WpfApplication1.App.Main()

Error: (09/10/2015 12:56:23 AM) (Source: .NET Runtime) (EventID: 1026) (User: )