Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Lenovo B560 won't load after logon screen [Solved]

Started by Shruikan66 , Sep 04 2015 08:42 PM

Lenovo B560 Lenovo wont load black screen cursor

This topic is locked

#1
Shruikan66

Posted 04 September 2015 - 08:42 PM

Member

Member
42 posts

Hello! I've had this problem three times already... but up until now I've been able to correct it by using system restore.

When I start my computer everything behaves normally until I get past the log on screen. I type in my password and then instead of my desktop, it takes me to a blank screen with my cursor. I doesn't matter how long I wait or how much I click and type it will not change. Normally when i click the power button it will go into hibernate mode, but when this happens it won't even do that. My only option is to hold the power button until it shuts off.

However starting up in safe mode is completely fine.

This normally happens after I try to scan my computer with Malwarebytes, as though my laptop were allergic to the software or something. Sure enough, this problem began after I found Malwarebytes on my computer and it automatically updated itself and started scanning. I let it do its thing and it found a couple PUP files which it deleted, and now it's messed up.

here's the FRST file:

~~~~~~~

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-08-2015

Ran by SYSTEM on MININT-BO5SP42 (04-09-2015 12:38:24)

Running from F:\

Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)

Internet Explorer Version 11

Boot Mode: Recovery

Default: ControlSet001

ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [mylbx] => C:\Program Files\My Lockbox\mylbx.exe [2308872 2014-04-14] (FSPro Labs)

HKLM\...\Run: [] => [X]

HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.7.485.8398\AdAwareTray.exe [9549808 2015-06-24] ()

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.)

HKLM-x32\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\EnergyCut\utilty.exe [1581056 2007-04-27] (Lenovo(beijing) Limited)

HKLM-x32\...\Run: [EnergyCut] => C:\Program Files (x86)\Lenovo\EnergyCut\EnergyCut.exe [1167360 2007-03-09] (Lenovo (Beijing) Limited)

HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-02-10] (Oracle Corporation)

HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2620728 2015-07-22] (Malwarebytes Corporation)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-16] (Apple Inc.)

HKLM\...\RunOnce: [NCInstallQueue] => rundll32 netman.dll,ProcessQueue

HKLM Group Policy restriction on software: *.jpg*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %allusersprofile%\*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.pdf*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.docx*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.zip*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.7z*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.pub*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %appdata%\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.ppt*.com <====== ATTENTION

HKLM Group Policy restriction on software: %allusersprofile%\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.xlsx*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.pptx*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.zip*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.docx*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.doc*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.pdf*.com <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.avi*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.mp3*.com <====== ATTENTION

HKLM Group Policy restriction on software: %appdata%\*\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.wma*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.jpeg*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.xls*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.jpeg*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %appdata%\*\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.zip*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.docx*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.wav*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.wav*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.pptx*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.txt*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.avi*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.pdf*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.7z*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.wmv*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.ppt*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.mp3*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.rar*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.jpeg*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.rar*.exe <====== ATTENTION

HKLM Group Policy restriction on software: scsvserv.exe <====== ATTENTION

HKLM Group Policy restriction on software: cipher.exe <====== ATTENTION

HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.gif*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.pdf*.exe <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.pptx*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.divx*.com <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.xls*.scr <====== ATTENTION

HKLM Group Policy restriction on software: ** <====== ATTENTION

HKLM Group Policy restriction on software: *.wma*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.png*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.pub*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.jpg*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.divx*.exe <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.gif*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.txt*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <====== ATTENTION

HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.wav*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.wma*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.xlsx*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.pub*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.jpg*.exe <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.txt*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.mp4*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.png*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.gif*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.jpeg*.exe <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.wma*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.rar*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %appdata%\*\*.com <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.rtf*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.bmp*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.bmp*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.pub*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.mp4*.com <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.xlsx*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.7z*.com <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.rar*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.ppt*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <====== ATTENTION

HKLM Group Policy restriction on software: C:\Users\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.wmv*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.ppt*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *:\$Recycle.Bin <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.doc*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.avi*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.wmv*.com <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.7z*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.xls*.exe <====== ATTENTION

HKLM Group Policy restriction on software: syskey.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.doc*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %appdata%\*\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: lsassw86s.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.wmv*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.txt*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.xlsx*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.mp4*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.wav*.com <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %appdata%\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.mp3*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <====== ATTENTION

HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.docx*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.rtf*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.divx*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.png*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.bmp*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: C:\Users\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.xls*.com <====== ATTENTION

HKLM Group Policy restriction on software: %allusersprofile%\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: C:\Users\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.divx*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: *.rtf*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.rtf*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.pptx*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.avi*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.jpg*.scr <====== ATTENTION

HKLM Group Policy restriction on software: %allusersprofile%\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.doc*.com <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\Appdata\Roaming\Microsoft\Windows\IEUpdate\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: %appdata%\*.exe <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <====== ATTENTION

HKLM Group Policy restriction on software: lsassvrtdbks.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.mp3*.exe <====== ATTENTION

HKLM Group Policy restriction on software: %appdata%\*.com <====== ATTENTION

HKLM Group Policy restriction on software: *.png*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.zip*.com <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <====== ATTENTION

HKLM Group Policy restriction on software: *.mp4*.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.gif*.scr <====== ATTENTION

HKLM Group Policy restriction on software: vssadmin.exe <====== ATTENTION

HKLM Group Policy restriction on software: *.bmp*.pif <====== ATTENTION

HKLM Group Policy restriction on software: %appdata%\bittorrent\bittorrent.exe <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\bittorrent\bittorrent.exe <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\bittorrent\bittorrent.exe <====== ATTENTION

HKLM Group Policy restriction on software: %userprofile%\AppData\Local\bittorrent\bittorrent.exe <====== ATTENTION

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\testy\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3108480 2012-10-23] (DT Soft Ltd)

HKU\testy\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53282944 2015-06-29] (Skype Technologies S.A.)

HKU\testy\...\Run: [GoogleChromeAutoLaunch_A73C9AEE7221095378158091CCE61823] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-08-07] (Google Inc.)

Startup: C:\Users\testy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2015-08-24] ()

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-07] (BlueStack Systems, Inc.)

S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-07] (BlueStack Systems, Inc.)

S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-07] (BlueStack Systems, Inc.)

S2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.7.485.8398\AdAwareService.exe [716664 2015-06-24] ()

S2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [713016 2015-07-22] (Malwarebytes Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-15] (Electronic Arts)

S2 Unchecky; C:\Program Files (x86)\Unchecky\bin\Unchecky_svc.exe [163576 2015-08-04] (RaMMicHaeL)

S2 uvnc_service; C:\Program Files (x86)\uvnc bvba\UltraVNC\winvnc.exe [1795864 2015-05-28] (UltraVNC)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

S2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology, Corp.)

S3 SwitchBoard; "C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-07] (BlueStack Systems)

S1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-06-07] (DT Soft Ltd)

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

S1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2015-07-22] ()

S0 FSProFilter2; C:\Windows\System32\Drivers\FSPFltd2.sys [57648 2011-06-03] (FSPro Labs)

S3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.98.0\gzflt.sys [155912 2015-01-22] (BitDefender LLC)

S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2015-03-26] ()

S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [452040 2015-01-22] (BitDefender S.R.L.)

S3 ute3otkw; C:\Windows\SysWOW64\Drivers\ute3otkw.sys [7168 2015-04-02] ()

S1 vde3otkw; C:\Windows\SysWOW64\Drivers\vde3otkw.sys [13312 2015-04-02] ()

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-04 08:00 - 2015-09-04 08:00 - 02188800 _____ (Farbar) C:\Users\testy\Desktop\FRST64.exe

2015-09-03 22:05 - 2015-09-03 22:05 - 00000000 ____D C:\Users\testy\Desktop\My World

2015-09-03 13:28 - 2015-09-03 13:28 - 10207504 _____ C:\icudtl.dat

2015-09-03 13:28 - 2015-09-03 13:28 - 04487782 _____ C:\devtools_resources.pak

2015-09-03 13:28 - 2015-09-03 13:28 - 02184260 _____ C:\cef.pak

2015-09-03 13:28 - 2015-09-03 13:28 - 00622967 _____ C:\cef_200_percent.pak

2015-09-03 13:28 - 2015-09-03 13:28 - 00468951 _____ C:\cef_100_percent.pak

2015-09-03 13:28 - 2015-09-03 13:28 - 00449780 _____ C:\snapshot_blob.bin

2015-09-03 13:28 - 2015-09-03 13:28 - 00410937 _____ C:\natives_blob.bin

2015-09-03 13:28 - 2015-09-03 13:28 - 00000020 _____ C:\inst_ver.dat

2015-09-03 13:28 - 2015-09-03 13:28 - 00000000 ____D C:\locales

2015-09-03 13:28 - 2015-09-03 13:28 - 00000000 _____ C:\Program1.redir

2015-08-31 17:18 - 2015-09-04 07:28 - 00000000 ____D C:\Users\testy\AppData\Roaming\Spotify

2015-08-31 17:17 - 2015-09-03 13:27 - 00000000 ____D C:\Users\testy\AppData\Local\Spotify

2015-08-31 17:17 - 2015-08-31 17:17 - 00000000 ____D C:\Users\testy\AppData\Local\CEF

2015-08-31 16:47 - 2015-09-04 07:49 - 00000000 ____D C:\Program Files (x86)\Spotify

2015-08-27 21:11 - 2015-08-27 21:11 - 00000000 ____D C:\Users\testy\AppData\Roaming\Sun

2015-08-27 21:11 - 2015-08-27 21:11 - 00000000 ____D C:\Users\testy\.oracle_jre_usage

2015-08-24 23:13 - 2015-08-24 23:14 - 00000000 ___HD C:\Windows\msdownld.tmp

2015-08-24 23:13 - 2015-08-24 23:13 - 00000000 ____D C:\Windows\SysWOW64\directx

2015-08-24 23:09 - 2015-08-24 23:09 - 00000000 ____D C:\Users\testy\AppData\Roaming\Curse

2015-08-24 20:04 - 2015-08-24 20:47 - 00000000 ____D C:\Users\testy\AppData\Roaming\Curse Advertising

2015-08-24 20:04 - 2015-08-24 20:04 - 00000000 ____D C:\Users\testy\Documents\My Curse

2015-08-23 07:32 - 2015-08-23 08:55 - 00000000 ____D C:\Users\testy\Desktop\Naruto

2015-08-13 10:38 - 2015-07-30 05:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll

2015-08-13 10:38 - 2015-07-30 05:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2015-08-12 08:40 - 2015-07-28 12:09 - 00017344 _____ (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe

2015-08-12 08:40 - 2015-07-28 12:05 - 01116672 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll

2015-08-12 08:40 - 2015-07-28 12:05 - 00774656 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll

2015-08-12 08:40 - 2015-07-28 12:05 - 00743424 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll

2015-08-12 08:40 - 2015-07-28 12:05 - 00437760 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll

2015-08-12 08:40 - 2015-07-28 12:05 - 00227328 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll

2015-08-12 08:40 - 2015-07-28 12:05 - 00069120 _____ (Microsoft Corporation) C:\Windows\System32\acmigration.dll

2015-08-12 08:40 - 2015-07-28 11:55 - 01148416 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll

2015-08-12 08:40 - 2015-07-16 11:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2015-08-12 08:40 - 2015-07-16 11:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2015-08-12 08:40 - 2015-07-16 11:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2015-08-12 08:40 - 2015-07-16 11:11 - 07077376 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll

2015-08-12 08:40 - 2015-07-16 11:11 - 01057792 _____ (Microsoft Corporation) C:\Windows\System32\rdvidcrl.dll

2015-08-12 08:40 - 2015-07-16 11:11 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\tsgqec.dll

2015-08-12 08:40 - 2015-07-15 10:15 - 05568960 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2015-08-12 08:40 - 2015-07-15 10:15 - 00155584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys

2015-08-12 08:40 - 2015-07-15 10:15 - 00095680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys

2015-08-12 08:40 - 2015-07-15 10:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mountmgr.sys

2015-08-12 08:40 - 2015-07-15 10:12 - 01730496 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll

2015-08-12 08:40 - 2015-07-15 10:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll

2015-08-12 08:40 - 2015-07-15 10:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll

2015-08-12 08:40 - 2015-07-15 10:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll

2015-08-12 08:40 - 2015-07-15 10:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll

2015-08-12 08:40 - 2015-07-15 10:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\System32\sysmain.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 01461760 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 01163264 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00342016 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe

2015-08-12 08:40 - 2015-07-15 10:10 - 00136192 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe

2015-08-12 08:40 - 2015-07-15 10:10 - 00086528 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00050176 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\System32\cryptbase.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe

2015-08-12 08:40 - 2015-07-15 10:10 - 00029184 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll

2015-08-12 08:40 - 2015-07-15 10:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\System32\msmmsp.dll

2015-08-12 08:40 - 2015-07-15 10:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe

2015-08-12 08:40 - 2015-07-15 10:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe

2015-08-12 08:40 - 2015-07-15 10:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll

2015-08-12 08:40 - 2015-07-15 10:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00686080 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 10:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-08-12 08:40 - 2015-07-15 09:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-08-12 08:40 - 2015-07-15 09:56 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-08-12 08:40 - 2015-07-15 09:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-08-12 08:40 - 2015-07-15 09:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-08-12 08:40 - 2015-07-15 09:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-08-12 08:40 - 2015-07-15 09:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-08-12 08:40 - 2015-07-15 09:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-08-12 08:40 - 2015-07-15 09:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-08-12 08:40 - 2015-07-15 09:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-08-12 08:40 - 2015-07-15 09:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-08-12 08:40 - 2015-07-15 09:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2015-08-12 08:40 - 2015-07-15 09:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-08-12 08:40 - 2015-07-15 09:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-08-12 08:40 - 2015-07-15 09:54 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-08-12 08:40 - 2015-07-15 09:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-08-12 08:40 - 2015-07-15 09:53 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-08-12 08:40 - 2015-07-15 09:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-08-12 08:40 - 2015-07-15 09:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-08-12 08:40 - 2015-07-15 09:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-08-12 08:40 - 2015-07-15 09:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-08-12 08:40 - 2015-07-15 09:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-08-12 08:40 - 2015-07-15 09:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 09:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 08:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys

2015-08-12 08:40 - 2015-07-15 08:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys

2015-08-12 08:40 - 2015-07-15 08:46 - 00129024 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys

2015-08-12 08:40 - 2015-07-15 08:37 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-08-12 08:40 - 2015-07-15 08:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-08-12 08:40 - 2015-07-15 08:34 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 08:34 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 08:34 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-08-12 08:40 - 2015-07-15 08:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-08-12 08:40 - 2015-07-11 05:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\System32\wksprt.exe

2015-08-12 08:39 - 2015-07-20 16:39 - 00389840 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll

2015-08-12 08:39 - 2015-07-20 16:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-08-12 08:39 - 2015-07-16 12:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2015-08-12 08:39 - 2015-07-16 12:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll

2015-08-12 08:39 - 2015-07-16 12:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll

2015-08-12 08:39 - 2015-07-16 12:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2015-08-12 08:39 - 2015-07-16 12:26 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll

2015-08-12 08:39 - 2015-07-16 12:21 - 00114688 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe

2015-08-12 08:39 - 2015-07-16 12:20 - 19870208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-08-12 08:39 - 2015-07-16 12:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-08-12 08:39 - 2015-07-16 12:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll

2015-08-12 08:39 - 2015-07-16 11:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-08-12 08:39 - 2015-07-16 11:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-08-12 08:39 - 2015-07-16 11:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-08-12 08:39 - 2015-07-16 11:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-08-12 08:39 - 2015-07-16 11:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-08-12 08:39 - 2015-07-16 11:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-08-12 08:39 - 2015-07-16 11:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-08-12 08:39 - 2015-07-16 11:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-08-12 08:39 - 2015-07-16 11:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-08-12 08:39 - 2015-07-16 11:35 - 00720384 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2015-08-12 08:39 - 2015-07-16 11:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-08-12 08:39 - 2015-07-16 11:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-08-12 08:39 - 2015-07-16 11:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-08-12 08:39 - 2015-07-16 11:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-08-12 08:39 - 2015-07-16 11:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-08-12 08:39 - 2015-07-16 11:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2015-08-12 08:39 - 2015-07-16 10:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-08-12 08:39 - 2015-07-16 10:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-08-12 08:39 - 2015-07-14 19:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\System32\basesrv.dll

2015-08-12 08:38 - 2015-07-30 10:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll

2015-08-12 08:38 - 2015-07-30 10:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll

2015-08-12 08:38 - 2015-07-30 09:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2015-08-12 08:38 - 2015-07-30 08:56 - 03208192 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys

2015-08-12 08:38 - 2015-07-30 08:52 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll

2015-08-12 08:38 - 2015-07-16 13:14 - 25192448 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2015-08-12 08:38 - 2015-07-16 12:37 - 00066560 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll

2015-08-12 08:38 - 2015-07-16 12:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2015-08-12 08:38 - 2015-07-16 12:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\System32\html.iec

2015-08-12 08:38 - 2015-07-16 12:35 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll

2015-08-12 08:38 - 2015-07-16 12:27 - 00054784 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2015-08-12 08:38 - 2015-07-16 12:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2015-08-12 08:38 - 2015-07-16 12:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll

2015-08-12 08:38 - 2015-07-16 12:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll

2015-08-12 08:38 - 2015-07-16 12:21 - 00814080 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll

2015-08-12 08:38 - 2015-07-16 12:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe

2015-08-12 08:38 - 2015-07-16 12:12 - 00968704 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe

2015-08-12 08:38 - 2015-07-16 12:08 - 00490496 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll

2015-08-12 08:38 - 2015-07-16 11:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll

2015-08-12 08:38 - 2015-07-16 11:54 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2015-08-12 08:38 - 2015-07-16 11:51 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll

2015-08-12 08:38 - 2015-07-16 11:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-08-12 08:38 - 2015-07-16 11:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-08-12 08:38 - 2015-07-16 11:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-08-12 08:38 - 2015-07-16 11:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2015-08-12 08:38 - 2015-07-16 11:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2015-08-12 08:38 - 2015-07-16 11:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll

2015-08-12 08:38 - 2015-07-16 11:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2015-08-12 08:38 - 2015-07-16 11:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-08-12 08:38 - 2015-07-16 11:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-08-12 08:38 - 2015-07-16 11:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-08-12 08:38 - 2015-07-16 11:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll

2015-08-12 08:38 - 2015-07-16 11:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-08-12 08:38 - 2015-07-16 11:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-08-12 08:38 - 2015-07-16 10:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll

2015-08-12 08:38 - 2015-07-16 10:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-08-12 08:38 - 2015-07-09 09:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\System32\notepad.exe

2015-08-12 08:38 - 2015-07-09 09:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe

2015-08-12 08:38 - 2015-07-09 09:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

2015-08-12 08:38 - 2015-07-01 12:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\System32\WebClnt.dll

2015-08-12 08:38 - 2015-07-01 12:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll

2015-08-12 08:38 - 2015-07-01 12:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2015-08-12 08:38 - 2015-07-01 12:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2015-08-12 08:37 - 2015-07-30 10:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll

2015-08-12 08:37 - 2015-07-30 10:06 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll

2015-08-12 08:37 - 2015-07-30 10:06 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll

2015-08-12 08:37 - 2015-07-30 10:06 - 00041984 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll

2015-08-12 08:37 - 2015-07-30 10:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll

2015-08-12 08:37 - 2015-07-30 09:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2015-08-12 08:37 - 2015-07-30 09:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-08-12 08:37 - 2015-07-30 09:57 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-08-12 08:37 - 2015-07-30 09:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-08-12 08:37 - 2015-07-30 09:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-08-12 08:37 - 2015-07-30 08:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-08-12 08:37 - 2015-07-20 10:12 - 03154944 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll

2015-08-12 08:37 - 2015-07-20 10:12 - 02606080 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll

2015-08-12 08:37 - 2015-07-20 10:12 - 00696320 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll

2015-08-12 08:37 - 2015-07-20 10:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll

2015-08-12 08:37 - 2015-07-20 10:12 - 00139776 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe

2015-08-12 08:37 - 2015-07-20 10:12 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll

2015-08-12 08:37 - 2015-07-20 10:12 - 00091136 _____ (Microsoft Corporation) C:\Windows\System32\WinSetupUI.dll

2015-08-12 08:37 - 2015-07-20 10:12 - 00037888 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll

2015-08-12 08:37 - 2015-07-20 10:12 - 00037376 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe

2015-08-12 08:37 - 2015-07-20 10:12 - 00036864 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll

2015-08-12 08:37 - 2015-07-20 10:12 - 00012288 _____ (Microsoft Corporation) C:\Windows\System32\wu.upgrade.ps.dll

2015-08-12 08:37 - 2015-07-20 09:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-08-12 08:37 - 2015-07-20 09:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-08-12 08:37 - 2015-07-20 09:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-08-12 08:37 - 2015-07-20 09:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-08-12 08:37 - 2015-07-20 09:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-08-12 08:37 - 2015-07-14 19:19 - 02004992 _____ (Microsoft Corporation) C:\Windows\System32\msxml6.dll

2015-08-12 08:37 - 2015-07-14 19:19 - 01887232 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll

2015-08-12 08:37 - 2015-07-14 19:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml6r.dll

2015-08-12 08:37 - 2015-07-14 19:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml3r.dll

2015-08-12 08:37 - 2015-07-14 18:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2015-08-12 08:37 - 2015-07-14 18:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-08-12 08:37 - 2015-07-14 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll

2015-08-12 08:37 - 2015-07-14 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-08-12 08:37 - 2015-07-10 09:51 - 14177280 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll

2015-08-12 08:37 - 2015-07-10 09:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-08-12 08:37 - 2015-05-09 10:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\System32\mcupdate_GenuineIntel.dll

2015-08-10 10:19 - 2015-08-10 10:19 - 00000000 ____D C:\ProgramData\Last.fm

2015-08-10 10:18 - 2015-08-31 13:31 - 00000000 ____D C:\Users\testy\AppData\Local\Last.fm

2015-08-10 10:18 - 2015-08-10 10:18 - 00001043 _____ C:\Users\Public\Desktop\Last.fm Scrobbler.lnk

2015-08-10 10:18 - 2015-08-10 10:18 - 00000000 ____D C:\Program Files (x86)\Last.fm

2015-08-08 10:57 - 2015-08-12 09:09 - 00019086 _____ C:\Users\testy\Desktop\Cooler than me.vsqx

2015-08-08 09:06 - 2015-08-08 09:27 - 37918302 _____ C:\Users\testy\Desktop\Cooler Than Me INSTRUMENTAL.wav

2015-08-07 21:59 - 2015-08-12 08:00 - 00000000 ___HD C:\Users\testy\AppData\Local\{ABBDEAEF-5AED-4c34-A22D-057A13C52D1E}

2015-08-07 21:59 - 2015-08-07 21:59 - 00000000 ____D C:\Users\testy\AppData\Roaming\VOCALOID3

2015-08-07 21:59 - 2015-08-07 21:59 - 00000000 ____D C:\Users\testy\AppData\Local\VOCALOID3

2015-08-07 21:58 - 2015-08-07 22:01 - 00000000 ____D C:\Program Files (x86)\VoiceDB

2015-08-07 21:57 - 2015-08-07 21:57 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll

2015-08-07 21:57 - 2015-08-07 21:57 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll

2015-08-07 21:57 - 2015-08-07 21:57 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll

2015-08-07 21:57 - 2015-08-07 21:57 - 00000881 _____ C:\Users\testy\Desktop\Vocaloid3FE.lnk

2015-08-07 21:57 - 2015-08-07 21:57 - 00000000 ____D C:\Program Files (x86)\language

2015-08-07 21:57 - 2013-01-22 18:54 - 00004553 _____ C:\Program Files (x86)\readme.txt

2015-08-07 21:57 - 2012-06-29 06:10 - 00007646 _____ C:\Program Files (x86)\readme_CHT.html

2015-08-07 21:57 - 2012-06-28 16:08 - 00008869 _____ C:\Program Files (x86)\readme_ENG.html

2015-08-07 21:57 - 2012-06-28 16:08 - 00008828 _____ C:\Program Files (x86)\readme_KOR.html

2015-08-07 21:57 - 2012-06-28 16:06 - 00007409 _____ C:\Program Files (x86)\readme_CHS.html

2015-08-07 21:57 - 2012-06-28 16:05 - 00010123 _____ C:\Program Files (x86)\readme_JPN.html

2015-08-07 21:57 - 2011-10-31 06:16 - 00048653 _____ C:\Program Files (x86)\vsq3.xsd

2015-08-07 21:56 - 2015-08-07 21:57 - 00028910 _____ C:\Program Files (x86)\unins000.dat

2015-08-07 21:56 - 2015-08-07 21:57 - 00000000 ____D C:\Program Files (x86)\licenses

2015-08-07 21:56 - 2015-08-07 21:57 - 00000000 ____D C:\Program Files (x86)\JobPlugins

2015-08-07 21:56 - 2015-08-07 21:57 - 00000000 ____D C:\Program Files (x86)\expdbdir

2015-08-07 21:56 - 2015-08-07 21:56 - 00000000 ____D C:\Program Files (x86)\VSTPlugins

2015-08-07 21:56 - 2015-08-07 21:55 - 00723445 _____ C:\Program Files (x86)\unins000.exe

2015-08-07 21:56 - 2013-01-22 20:36 - 00845312 _____ (Yamaha Corporation) C:\Program Files (x86)\VOCALOID3.exe

2015-08-07 21:56 - 2013-01-22 18:24 - 00137728 _____ (Yamaha Corporation) C:\Program Files (x86)\dbm3.dll

2015-08-07 21:56 - 2012-07-15 08:37 - 07962624 _____ (Yamaha Corporation) C:\Program Files (x86)\DSE3.dll

2015-08-07 21:56 - 2012-07-12 07:22 - 00423424 _____ (Yamaha Corporation) C:\Program Files (x86)\DSCL3.dll

2015-08-07 21:56 - 2012-05-21 12:41 - 00124416 _____ (Yamaha Corporation) C:\Program Files (x86)\g2pa3_CHS.dll

2015-08-07 21:56 - 2012-04-24 06:19 - 00624640 _____ (Yamaha Corporation) C:\Program Files (x86)\Vsq3.dll

2015-08-07 21:56 - 2012-04-16 07:02 - 00177152 _____ (Yamaha Corporation) C:\Program Files (x86)\VstHost3.dll

2015-08-07 21:56 - 2012-04-16 07:00 - 00136704 _____ (Yamaha Corporation) C:\Program Files (x86)\vedit3.dll

2015-08-07 21:56 - 2012-04-16 06:58 - 00076288 _____ (Yamaha Corporation) C:\Program Files (x86)\udm3_eng.dll

2015-08-07 21:56 - 2011-11-16 06:46 - 00245248 _____ (Yamaha Corporation) C:\Program Files (x86)\g2pa3_ESP.dll

2015-08-07 21:56 - 2011-11-11 11:23 - 00160256 _____ (Yamaha Corporation) C:\Program Files (x86)\g2pa3_KOR.dll

2015-08-07 21:56 - 2011-11-10 15:56 - 04886528 _____ (Yamaha Corporation) C:\Program Files (x86)\g2pa3_ENG.dll

2015-08-07 21:56 - 2011-10-31 16:34 - 00117760 _____ (Yamaha Corporation) C:\Program Files (x86)\g2pa3_JPN.dll

2015-08-07 21:56 - 2011-10-31 06:16 - 24229376 _____ C:\Program Files (x86)\DSE3_DFT.dll

2015-08-07 21:56 - 2011-10-31 06:16 - 01888256 _____ (Apache Software Foundation) C:\Program Files (x86)\xerces-c_3_1.dll

2015-08-07 21:56 - 2011-10-20 14:00 - 04479832 _____ (Microsoft Corporation) C:\Program Files (x86)\vcredist_x86.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-04 12:38 - 2015-03-26 13:32 - 00000000 ____D C:\FRST

2015-09-04 08:28 - 2015-04-06 18:08 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-09-04 08:28 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-09-04 08:27 - 2009-07-13 20:51 - 00046054 _____ C:\Windows\setupact.log

2015-09-04 08:03 - 2009-07-13 21:13 - 00781298 _____ C:\Windows\System32\PerfStringBackup.INI

2015-09-04 07:53 - 2010-11-20 19:47 - 00049604 _____ C:\Windows\PFRO.log

2015-09-04 07:50 - 2014-05-13 18:25 - 00000000 ____D C:\users\testy

2015-09-04 07:49 - 2015-07-17 07:55 - 00000000 ___SD C:\Windows\System32\GWX

2015-09-04 07:49 - 2015-03-26 04:58 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit

2015-09-04 07:49 - 2015-03-26 04:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-09-04 07:49 - 2015-03-20 09:49 - 00000000 ____D C:\Program Files (x86)\FrostWire

2015-09-04 07:49 - 2015-02-17 05:33 - 00000000 ____D C:\ProgramData\The AdBlocker

2015-09-04 07:49 - 2015-02-16 19:02 - 00000000 ____D C:\Program Files (x86)\Java

2015-09-04 07:49 - 2014-09-15 16:37 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-09-04 07:49 - 2014-07-20 13:15 - 00000000 ____D C:\.jagex_cache_32

2015-09-04 07:49 - 2014-05-15 18:10 - 00000000 ____D C:\Users\testy\AppData\Roaming\Audacity

2015-09-04 07:49 - 2014-05-15 17:46 - 00000000 ____D C:\Users\testy\AppData\Roaming\Skype

2015-09-04 07:49 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\AppCompat

2015-09-04 07:48 - 2014-05-15 19:13 - 00000000 ____D C:\Users\testy\AppData\Roaming\.minecraft

2015-09-04 07:47 - 2015-07-14 07:10 - 00000000 ____D C:\Program Files (x86)\QuickTime

2015-09-04 07:47 - 2015-07-12 12:00 - 00000000 ____D C:\Program Files\Common Files\Lavasoft

2015-09-04 07:47 - 2014-05-15 17:46 - 00000000 ____D C:\ProgramData\Skype

2015-09-03 22:06 - 2009-07-13 20:45 - 00031888 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-09-03 22:06 - 2009-07-13 20:45 - 00031888 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-09-03 21:51 - 2015-03-26 04:58 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit

2015-09-02 07:04 - 2014-05-15 17:32 - 00000000 ____D C:\Users\testy\AppData\Local\Deployment

2015-08-20 19:16 - 2015-04-06 18:08 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-08-20 19:15 - 2014-05-13 18:25 - 01854110 _____ C:\Windows\WindowsUpdate.log

2015-08-17 15:45 - 2015-07-24 02:27 - 00000000 ____D C:\KMPlayer

2015-08-13 19:53 - 2009-07-13 20:45 - 00360904 _____ C:\Windows\System32\FNTCACHE.DAT

2015-08-13 19:50 - 2015-07-17 07:55 - 00000000 ____D C:\Windows\System32\appraiser

2015-08-13 19:50 - 2014-05-14 03:26 - 00000000 ___SD C:\Windows\System32\CompatTel

2015-08-13 19:49 - 2015-07-15 06:50 - 00000448 __RSH C:\ProgramData\ntuser.pol

2015-08-13 10:15 - 2014-05-13 19:13 - 00000000 ____D C:\Windows\System32\MRT

2015-08-13 09:55 - 2014-05-13 19:13 - 132483416 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe

2015-08-12 16:53 - 2014-05-16 15:23 - 00000000 ____D C:\Users\testy\.frostwire5

2015-08-12 15:00 - 2015-04-06 18:09 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-08-11 21:05 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\NDF

2015-08-10 09:33 - 2014-12-30 08:35 - 00000000 ____D C:\Users\testy\Desktop\Animation

2015-08-08 09:04 - 2015-07-22 15:57 - 00000000 ____D C:\Users\testy\Desktop\Servers

2015-08-08 09:04 - 2014-05-22 17:39 - 00000000 ____D C:\Users\testy\Desktop\Games

Files to move or delete:

====================

C:\Users\testy\newjavascript.js

Some files in TEMP:

====================

C:\Users\testy\AppData\Local\Temp\KMPAddedCode_KMP_adpageopen_Step1.exe

==================== Known DLLs (Whitelisted) =========================

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\dnsapi.dll => MD5 is legit

C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points =========================

Restore point date: 2015-08-20 19:16:48

Restore point date: 2015-08-24 23:15:15

Restore point date: 2015-08-28 11:56:07

Restore point date: 2015-09-04 07:22:18

Restore point date: 2015-09-04 07:22:20

Restore point date: 2015-09-04 07:22:22

Restore point date: 2015-09-04 07:22:23

==================== Memory info ===========================

Percentage of memory in use: 12%

Total physical RAM: 5876.51 MB

Available physical RAM: 5170.63 MB

Total Virtual: 5874.71 MB

Available Virtual: 5162.45 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:247.95 GB) NTFS

Drive f: (KINGSTON) (Removable) (Total:7.2 GB) (Free:1.06 GB) FAT32

Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[system with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: B3ACA194)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

========================================================

Disk: 1 (Size: 7.2 GB) (Disk ID: 7D1C5459)

Partition 1: (Active) - (Size=7.2 GB) - (Type=0B)

LastRegBack: 2015-07-14 10:32

==================== End of FRST.txt ============================

#2
emeraldnzl

Posted 06 September 2015 - 07:33 PM

GeekU Instructor

GeekU Moderator
20,051 posts

Hello Shruikan66,

However starting up in safe mode is completely fine.

Please boot into Safe Mode and download and run another scan with FRST. Running FRST from your desktop with the Addition.txt box ticked will give us more information to work with.

Important - We ask that the tools we use be downloaded to your computers desktop.

If you are unsure about how to do that, please press the Show button beside Spoiler below to see guides for the most popular browsers:

Spoiler

Now

Please download Farbar Recovery Scan Tool from here and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Right click to run as administrator. When the tool opens click Yes to disclaimer.
Press Scan button.
It will produce a log called (FRST.txt) in the same directory the tool is run from.
Please copy and paste log back here.
The first time the tool is run, it makes also another log (Addition.txt). Please also paste that into your reply.

#3
Shruikan66

Posted 07 September 2015 - 08:02 AM

Member

Topic Starter
Member
42 posts

Thanks for your reply! Here are the logs asked for, I hope they help.

FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

Ran by testy (administrator) on MISA (07-09-2015 09:56:16)

Running from C:\Users\testy\Desktop

Loaded Profiles: testy (Available Profiles: testy)

Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Safe Mode (with Networking)

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [mylbx] => C:\Program Files\My Lockbox\mylbx.exe [2308872 2014-04-14] (FSPro Labs)

HKLM\...\Run: [] => [X]

HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.7.485.8398\AdAwareTray.exe [9549808 2015-06-24] ()

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.)

HKLM-x32\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\EnergyCut\utilty.exe [1581056 2007-04-27] (Lenovo(beijing) Limited)

HKLM-x32\...\Run: [EnergyCut] => C:\Program Files (x86)\Lenovo\EnergyCut\EnergyCut.exe [1167360 2007-03-09] (Lenovo (Beijing) Limited)

HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-02-10] (Oracle Corporation)

HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2620728 2015-07-22] (Malwarebytes Corporation)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)