Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

High level of outbound internet traffic


  • Please log in to reply

#1
cswen

cswen

    New Member

  • Member
  • Pip
  • 2 posts

Getting a pop-up message from Norton saying that it has detected a high level of outbound internet traffic. This is confirmed by NetWorx. Has been going on only since mid-January. Norton and Malwarebytes sees nothing wrong.

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-02-2016
Ran by Charles (administrator) on CHARLES-PC (13-02-2016 16:17:13)
Running from C:\Users\Charles\Desktop
Loaded Profiles: UpdatusUser & Charles (Available Profiles: UpdatusUser & Charles)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidMonitorSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel® Corporation) C:\Program Files\Intel\CAM\bin\CAMService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\nis.exe
() C:\Windows\SysWOW64\srvany.exe
(TODO: <公司名>) C:\Windows\SysWOW64\SDIOAssist.exe
(Dell Inc.) C:\Program Files\Dell\PPO\poaService.exe
(Dell Inc.) C:\Program Files\Dell\PPO\poaSmSrv.exe
(Dell Inc.) C:\Program Files\Dell\PPO\poaTaServ.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(BayHubTech/O2Micro International) C:\Windows\System32\drivers\o2flash.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Dell Inc.) C:\Program Files\Dell\PPO\DellPoaEvents.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(SoftPerfect) C:\Program Files\NetWorx\networx.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\nis.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Bitsum LLC) C:\Program Files\Process Lasso\ProcessGovernor.exe
(Bitsum LLC) C:\Program Files\Process Lasso\ProcessLasso.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(Irfan Skiljan) C:\Program Files (x86)\IrfanView\i_view32.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [727896 2014-03-13] (Alps Electric Co., Ltd.)
HKLM\...\Run: [DellPoaEvents] => C:\Program Files\Dell\PPO\DellPoaEvents.exe [274936 2013-07-19] (Dell Inc.)
HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4878752 2014-11-19] (Intel® Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7637720 2014-09-23] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1396592 2014-09-01] (Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [608000 2014-10-01] (Waves Audio Ltd.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2498368 2015-03-13] ()
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-06] (Apple Inc.)
HKLM\...\Run: [CucusoftNetGuard] => [X]
HKLM\...\Run: [NetWorx] => C:\Program Files\NetWorx\networx.exe [7907656 2016-02-02] (SoftPerfect)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe [134616 2013-11-13] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-04-10] (Intel Corporation)
HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2622432 2016-01-29] (Malwarebytes Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\Run: [KSS] => "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" autorun
HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\MountPoints2: G - G:\LaunchU3.exe -a
HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\MountPoints2: H - H:\LaunchU3.exe -a
HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\MountPoints2: {3be5ddca-bf28-11e3-8be9-ecf4bb13ceac} - G:\LaunchU3.exe -a
HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\MountPoints2: {603eecaa-b4ed-11e3-84bb-ecf4bb13ceac} - H:\LaunchU3.exe -a
HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\MountPoints2: {ba07fee6-a7ee-11e3-b04e-ecf4bb13ceac} - H:\LaunchU3.exe -a
HKU\S-1-5-21-432269100-1660991625-3719247699-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-20] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [184048 2013-11-01] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156256 2013-11-01] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [DBARFileBackuped] -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DBARFileNotBackuped] -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-432269100-1660991625-3719247699-1001] => localhost:8080
Tcpip\Parameters: [DhcpNameServer] 8.20.201.110 8.8.8.8
Tcpip\..\Interfaces\{DDB0D769-FD6B-4645-B9C0-8D4DA6689A73}: [DhcpNameServer] 8.20.201.110 8.8.8.8

Internet Explorer:
==================
HKU\S-1-5-21-432269100-1660991625-3719247699-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell13.msn.com/?pc=DCJB
HKU\S-1-5-21-432269100-1660991625-3719247699-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-432269100-1660991625-3719247699-1001 -> URL hxxp://search.conduit.com/Results.aspx?ctid=CT3324774&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPA6215460-8214-48AA-A599-31DCB6BD042E&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-432269100-1660991625-3719247699-1001 -> {ECF86036-A1DC-4004-8980-75F33F16B4A3} URL =
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL => No File
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default
FF DefaultSearchEngine: Google
FF DefaultSearchEngine.US: Google
FF Homepage: about:home
FF Session Restore: -> is enabled.
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-09] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-09] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-11-13] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-11-13] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\searchplugins\dictionary.xml [2014-03-25]
FF SearchPlugin: C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\searchplugins\duckduckgo-html.xml [2014-03-25]
FF SearchPlugin: C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\searchplugins\google-images.xml [2014-03-25]
FF SearchPlugin: C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\searchplugins\kickassto.xml [2014-03-25]
FF SearchPlugin: C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\searchplugins\thesaurus---referencecom.xml [2014-03-25]
FF SearchPlugin: C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\searchplugins\youtube-video-search.xml [2014-12-10]
FF SearchPlugin: C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\searchplugins\youtube.xml [2014-10-22]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\extensions\[email protected] [2016-01-18]
FF Extension: EPUBReader - C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2016-01-19]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\Extensions\[email protected] [2015-05-29]
FF Extension: Download YouTube Videos as MP4 - C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2016-01-07]
FF Extension: Adblock Plus - C:\Users\Charles\AppData\Roaming\Mozilla\Firefox\Profiles\sbva7bre.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-19]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon
FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon [2016-01-13]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK => not found

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\Exts\Chrome.crx [2015-12-01]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\Exts\Chrome.crx [2015-12-01]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ApHidMonitorService; C:\Program Files\DellTPad\HidMonitorSvc.exe [87384 2014-03-27] (Alps Electric Co., Ltd.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1060352 2015-06-11] ()
R2 CAMService; C:\Program Files\Intel\CAM\bin\CAMService.exe [1243344 2014-09-03] (Intel® Corporation)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-07-04] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [327432 2013-07-04] (CyberLink)
S3 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2486272 2013-04-30] (Dell Inc.) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel® Corporation) [File not signed]
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel® Corporation)
S3 InvProtectSvc; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectSvc64.exe [2947856 2013-07-30] (Invincea, Inc.)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2013-11-13] (Intel Corporation)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [740832 2016-01-29] (Malwarebytes Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-11-19] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe [282016 2015-11-20] (Symantec Corporation)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [3039376 2015-03-13] ()
R2 O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [65536 2014-03-07] (BayHubTech/O2Micro International)
R2 O2SDIOAssist; C:\Windows\SysWOW64\srvany.exe [8192 2012-03-09] () [File not signed]
R2 poaService; C:\Program Files\Dell\PPO\poaService.exe [641232 2013-07-19] (Dell Inc.)
R2 PoaSMSrv; C:\Program Files\Dell\PPO\poaSmSrv.exe [277712 2013-07-19] (Dell Inc.)
R2 poaTaServ; C:\Program Files\Dell\PPO\poaTaServ.exe [516304 2013-07-19] (Dell Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [291032 2014-08-18] (Realtek Semiconductor)
S3 SboxSvc; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxSvc.exe [124616 2013-07-30] ()
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [1915480 2013-05-23] (SoftThinks SAS)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-02-20] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-11-19] (Intel® Corporation)
S4 CS_SysMsgProxy; C:\Program Files\Cucusoft\NetGuard\SysMsgProxySrvc.sys [X]
R2 Dell.CommandPowerManager.Service; C:\Windows\SysWOW64\dllhost.exe /Processid:{561798A9-7AE1-46C8-BBC6-C1D0050E36E4}

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\BASHDefs\20160125.001\BHDrvx64.sys [1665608 2015-10-08] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1605050.00F\ccSetx64.sys [173808 2015-07-10] (Symantec Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2013-04-29] (Dell Computer Corporation)
S3 DIRECTIO; C:\Program Files\PerformanceTest\DirectIo64.sys [31160 2013-11-26] ()
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-26] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [489752 2014-06-12] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-18] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2015-11-18] (Symantec Corporation)
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [66080 2016-01-29] ()
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-08-28] (Intel Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\IPSDefs\20160213.001\IDSvia64.sys [767224 2016-02-13] (Symantec Corporation)
R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [2638808 2014-10-15] (Realtek Semiconductor Corp.)
S3 InvProtectDrv; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectDrv64.sys [34824 2013-07-30] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-02-13] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-11-13] (Intel Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20160213.001\ENG64.SYS [138488 2015-11-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20160213.001\EX64.SYS [2148080 2015-11-04] (Symantec Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw01.sys [11523584 2014-12-19] (Intel Corporation)
R1 networx; C:\Windows\System32\drivers\networx.sys [72120 2016-01-26] (NetFilterSDK.com)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-11-01] (NVIDIA Corporation)
R3 O2FJ2RDR; C:\Windows\System32\DRIVERS\O2FJ2w7x64.sys [210592 2014-05-14] (BayHubTech/O2Micro )
R3 POADrvr; C:\Windows\System32\drivers\POADrvr.sys [21264 2013-07-19] (Dell Computer Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S3 SboxDrv; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxDrv.sys [202248 2013-07-30] ()
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1605050.00F\SRTSP64.SYS [928496 2015-11-11] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1605050.00F\SRTSPX64.SYS [50936 2015-07-10] (Symantec Corporation)
R3 ST_Accel; C:\Windows\System32\DRIVERS\ST_Accel.sys [75976 2013-08-06] (STMicroelectronics)
R0 SymEFASI; C:\Windows\System32\drivers\NISx64\1605050.00F\SYMEFASI64.SYS [1621232 2015-11-11] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [111344 2015-07-22] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1605050.00F\Ironx64.SYS [297720 2015-07-10] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1605050.00F\SYMNETS.SYS [577768 2015-11-11] (Symantec Corporation)
R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [48024 2013-01-28] (Windows ® Win 7 DDK provider)
S3 wbfcvusbdrv; C:\Windows\System32\Drivers\wbfcvusbdrv.sys [17632 2013-10-10] ()
R3 XHCIPort; C:\Windows\System32\DRIVERS\XHCIPort.sys [194456 2013-01-28] (Windows ® Win 7 DDK provider)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-07-05] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-13 16:17 - 2016-02-13 16:17 - 00026825 _____ C:\Users\Charles\Desktop\FRST.txt
2016-02-13 16:16 - 2016-02-13 16:17 - 00000000 ____D C:\FRST
2016-02-13 16:16 - 2016-02-13 16:16 - 02370560 _____ (Farbar) C:\Users\Charles\Desktop\FRST64.exe
2016-02-13 16:05 - 2016-02-13 16:05 - 00291606 _____ C:\Users\Charles\Downloads\TCPView.zip
2016-02-13 15:09 - 2016-02-13 15:10 - 00243010 _____ C:\TDSSKiller.3.1.0.9_13.02.2016_15.09.08_log.txt
2016-02-13 15:07 - 2016-02-13 15:08 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\Charles\Downloads\tdsskiller.exe
2016-02-12 21:53 - 2016-02-12 21:53 - 14231607 _____ C:\Users\Charles\Downloads\bios.pdf
2016-02-12 09:34 - 2016-02-12 21:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-10 22:02 - 2016-02-10 22:02 - 07067898 _____ C:\Users\Charles\Downloads\Les Fehmi & Jim Robbins - The Open-Focus Brain (2007)(OCR).pdf
2016-02-10 09:22 - 2016-01-06 12:02 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-02-10 09:22 - 2016-01-06 12:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-02-10 09:22 - 2016-01-06 11:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-02-10 09:21 - 2016-02-06 03:48 - 25839104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-10 09:21 - 2016-02-06 03:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-02-10 09:21 - 2016-02-06 03:24 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-02-10 09:21 - 2016-02-06 03:11 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-02-10 09:21 - 2016-02-06 03:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-02-10 09:21 - 2016-02-06 03:01 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-02-10 09:21 - 2016-02-06 02:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-02-10 09:21 - 2016-02-06 02:43 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-02-10 09:21 - 2016-02-06 02:38 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-02-10 09:21 - 2016-02-06 02:37 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-02-10 09:21 - 2016-02-06 02:32 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-10 09:21 - 2016-02-06 02:16 - 12857856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-02-10 09:21 - 2016-02-06 02:09 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-10 09:21 - 2016-02-06 01:54 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-02-10 09:21 - 2016-01-16 12:06 - 00025024 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-02-10 09:21 - 2016-01-16 11:54 - 01162240 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-02-10 09:21 - 2016-01-11 07:08 - 01362944 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-02-10 09:21 - 2016-01-11 07:08 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-02-10 09:21 - 2016-01-11 07:08 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-02-10 09:21 - 2016-01-11 07:08 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-02-10 09:21 - 2016-01-11 07:08 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-02-10 09:19 - 2016-01-22 13:31 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-02-10 09:19 - 2016-01-22 13:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-02-10 09:19 - 2016-01-21 23:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 09:19 - 2016-01-21 23:41 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-02-10 09:19 - 2016-01-21 23:40 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-02-10 09:19 - 2016-01-21 23:40 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-02-10 09:19 - 2016-01-21 23:40 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-02-10 09:19 - 2016-01-21 23:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-02-10 09:19 - 2016-01-21 23:33 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-02-10 09:19 - 2016-01-21 23:32 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-02-10 09:19 - 2016-01-21 23:29 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-10 09:19 - 2016-01-21 23:27 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-02-10 09:19 - 2016-01-21 23:27 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-02-10 09:19 - 2016-01-21 23:27 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-02-10 09:19 - 2016-01-21 23:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 09:19 - 2016-01-21 23:17 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-02-10 09:19 - 2016-01-21 23:09 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 09:19 - 2016-01-21 23:08 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-02-10 09:19 - 2016-01-21 23:05 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-02-10 09:19 - 2016-01-21 23:04 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-02-10 09:19 - 2016-01-21 23:02 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-02-10 09:19 - 2016-01-21 23:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-02-10 09:19 - 2016-01-21 23:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-02-10 09:19 - 2016-01-21 23:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-02-10 09:19 - 2016-01-21 23:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-02-10 09:19 - 2016-01-21 23:00 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-02-10 09:19 - 2016-01-21 23:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-02-10 09:19 - 2016-01-21 22:55 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-02-10 09:19 - 2016-01-21 22:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-02-10 09:19 - 2016-01-21 22:51 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-02-10 09:19 - 2016-01-21 22:51 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-02-10 09:19 - 2016-01-21 22:50 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-02-10 09:19 - 2016-01-21 22:48 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-02-10 09:19 - 2016-01-21 22:47 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-02-10 09:19 - 2016-01-21 22:46 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-02-10 09:19 - 2016-01-21 22:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-02-10 09:19 - 2016-01-21 22:43 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-02-10 09:19 - 2016-01-21 22:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-02-10 09:19 - 2016-01-21 22:38 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-02-10 09:19 - 2016-01-21 22:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-02-10 09:19 - 2016-01-21 22:35 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-02-10 09:19 - 2016-01-21 22:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-02-10 09:19 - 2016-01-21 22:34 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-02-10 09:19 - 2016-01-21 22:33 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-02-10 09:19 - 2016-01-21 22:31 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-10 09:19 - 2016-01-21 22:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-02-10 09:19 - 2016-01-21 22:25 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-02-10 09:19 - 2016-01-21 22:24 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-02-10 09:19 - 2016-01-21 22:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-02-10 09:19 - 2016-01-21 22:08 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-02-10 09:19 - 2016-01-21 22:07 - 02120704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-02-10 09:19 - 2016-01-21 22:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-02-10 09:15 - 2016-01-21 23:27 - 05573056 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-02-10 09:15 - 2016-01-21 23:27 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-02-10 09:15 - 2016-01-21 23:27 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-02-10 09:15 - 2016-01-21 23:24 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-10 09:15 - 2016-01-21 23:20 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-02-10 09:15 - 2016-01-21 23:20 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-02-10 09:15 - 2016-01-21 23:20 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-02-10 09:15 - 2016-01-21 23:20 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-02-10 09:15 - 2016-01-21 23:20 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-02-10 09:15 - 2016-01-21 23:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-02-10 09:15 - 2016-01-21 23:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-02-10 09:15 - 2016-01-21 23:20 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-02-10 09:15 - 2016-01-21 23:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-02-10 09:15 - 2016-01-21 23:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-02-10 09:15 - 2016-01-21 23:19 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-02-10 09:15 - 2016-01-21 23:19 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-02-10 09:15 - 2016-01-21 23:19 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-02-10 09:15 - 2016-01-21 23:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-02-10 09:15 - 2016-01-21 23:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-02-10 09:15 - 2016-01-21 23:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-02-10 09:15 - 2016-01-21 23:18 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-02-10 09:15 - 2016-01-21 23:17 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-02-10 09:15 - 2016-01-21 23:17 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-02-10 09:15 - 2016-01-21 23:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-10 09:15 - 2016-01-21 23:16 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-02-10 09:15 - 2016-01-21 23:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-02-10 09:15 - 2016-01-21 23:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-02-10 09:15 - 2016-01-21 23:15 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-02-10 09:15 - 2016-01-21 23:15 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-02-10 09:15 - 2016-01-21 23:15 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-10 09:15 - 2016-01-21 23:15 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-10 09:15 - 2016-01-21 23:13 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-02-10 09:15 - 2016-01-21 23:13 - 03938752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-02-10 09:15 - 2016-01-21 23:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-02-10 09:15 - 2016-01-21 23:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-02-10 09:15 - 2016-01-21 23:13 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 23:09 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-02-10 09:15 - 2016-01-21 23:06 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-02-10 09:15 - 2016-01-21 23:06 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-02-10 09:15 - 2016-01-21 23:06 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-02-10 09:15 - 2016-01-21 23:06 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-02-10 09:15 - 2016-01-21 23:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-02-10 09:15 - 2016-01-21 23:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-02-10 09:15 - 2016-01-21 23:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-02-10 09:15 - 2016-01-21 23:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-02-10 09:15 - 2016-01-21 23:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-02-10 09:15 - 2016-01-21 23:05 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-02-10 09:15 - 2016-01-21 23:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-02-10 09:15 - 2016-01-21 23:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-02-10 09:15 - 2016-01-21 23:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-02-10 09:15 - 2016-01-21 23:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-02-10 09:15 - 2016-01-21 23:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-02-10 09:15 - 2016-01-21 23:02 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-02-10 09:15 - 2016-01-21 23:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-02-10 09:15 - 2016-01-21 23:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-02-10 09:15 - 2016-01-21 23:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-02-10 09:15 - 2016-01-21 23:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-02-10 09:15 - 2016-01-21 23:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 22:19 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-02-10 09:15 - 2016-01-21 22:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-02-10 09:15 - 2016-01-21 22:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-02-10 09:15 - 2016-01-21 22:07 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-02-10 09:15 - 2016-01-21 22:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-02-10 09:15 - 2016-01-21 22:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-02-10 09:15 - 2016-01-21 21:59 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-02-10 09:15 - 2016-01-21 21:58 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-02-10 09:15 - 2016-01-21 21:58 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-02-10 09:15 - 2016-01-21 21:57 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-02-10 09:15 - 2016-01-21 21:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-02-10 09:15 - 2016-01-21 21:53 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-02-10 09:15 - 2016-01-21 21:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-02-10 09:15 - 2016-01-21 21:53 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-02-10 09:15 - 2016-01-21 21:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-02-10 09:15 - 2016-01-21 21:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-02-10 09:15 - 2016-01-21 21:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 21:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 21:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 09:15 - 2016-01-21 21:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-10 09:15 - 2016-01-16 12:01 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-02-10 09:15 - 2016-01-16 11:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-02-10 09:15 - 2016-01-11 12:05 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-10 09:15 - 2016-01-11 12:05 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-10 09:15 - 2016-01-11 12:05 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-10 09:15 - 2016-01-11 11:52 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-02-10 09:15 - 2016-01-11 11:47 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-02-10 09:15 - 2016-01-11 11:26 - 02610176 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-10 09:15 - 2016-01-11 11:24 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-10 09:15 - 2016-01-11 11:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-10 09:15 - 2016-01-11 11:23 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-10 09:15 - 2016-01-11 11:23 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-10 09:15 - 2016-01-11 11:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-10 09:15 - 2016-01-11 11:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-02-10 09:15 - 2016-01-11 11:14 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-02-10 09:15 - 2016-01-11 11:14 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-02-10 09:15 - 2016-01-11 11:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-02-10 09:15 - 2016-01-11 11:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-02-10 09:15 - 2016-01-07 10:53 - 03211776 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-02-10 09:15 - 2016-01-07 10:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-05 16:05 - 2016-02-05 16:05 - 00070648 _____ C:\Users\Charles\Downloads\practicaljealousy.pdf
2016-02-05 16:05 - 2016-02-05 16:05 - 00070648 _____ C:\Users\Charles\Desktop\practicaljealousy.pdf
2016-02-05 15:30 - 2016-02-05 15:30 - 00031347 _____ C:\Users\Charles\Downloads\[kat.cr]after.fall.winter.2011dvdrip.xvid.s4a.torrent
2016-02-05 15:07 - 2016-02-05 15:07 - 00865976 _____ C:\Users\Charles\Downloads\how_to_get_the_spanking_you_want_2nd_ed.pdf
2016-02-05 15:07 - 2016-02-05 15:07 - 00865976 _____ C:\Users\Charles\Desktop\how_to_get_the_spanking_you_want_2nd_ed.pdf
2016-02-05 15:07 - 2016-02-05 15:06 - 00915716 _____ C:\Users\Charles\Desktop\how_to_give_a_spanking_1st_ed.pdf
2016-02-05 15:06 - 2016-02-05 15:06 - 00915716 _____ C:\Users\Charles\Downloads\how_to_give_a_spanking_1st_ed.pdf
2016-02-05 14:41 - 2016-02-05 14:41 - 00323631 _____ C:\Users\Charles\Downloads\How to Give a Spanking Table of Contents & Sample Pages.pdf
2016-02-05 14:19 - 2016-02-05 14:19 - 00015518 _____ C:\Users\Charles\Downloads\[kat.cr]nina.knows.best.of.series.2.domination.and.submission.2015.dvdrip.torrent
2016-02-05 13:30 - 2016-02-05 13:30 - 00011979 _____ C:\Users\Charles\Downloads\[kat.cr]intimatefilm.der.ultimative.blowjob.web.dl.2010.english.torrent
2016-02-05 12:59 - 2016-02-05 12:59 - 00018399 _____ C:\Users\Charles\Downloads\[kat.cr]intimatefilm.analsex.for.lovers.web.dl.2010.english.torrent
2016-02-05 12:29 - 2016-02-05 12:29 - 00016520 _____ C:\Users\Charles\Downloads\[kat.cr]intimatefilm.techniques.for.natural.[bleep].enlargement.dvdrip.2009.english.torrent
2016-02-05 12:29 - 2016-02-05 12:29 - 00012820 _____ C:\Users\Charles\Downloads\[kat.cr]cunnilingus.fellatio.2008.english.intimatefilm.dvdrip.wmv3.torrent
2016-02-05 09:36 - 2016-02-05 09:36 - 00046412 _____ C:\Users\Charles\Downloads\[kat.cr]lustcinema.be.a.hero.directed.by.erika.lust.hd1080p.update(3).torrent
2016-02-03 08:43 - 2016-01-26 22:42 - 00072120 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\networx.sys
2016-02-03 08:40 - 2016-02-03 08:40 - 04765208 _____ (Softperfect ) C:\Users\Charles\Downloads\networx_setup(2).exe
2016-02-01 19:20 - 2016-02-01 19:20 - 00000000 ____D C:\Users\Charles\Downloads\Dynamic-weather-2-version-0.9.8.4
2016-02-01 19:19 - 2016-02-01 19:19 - 00019087 _____ C:\Users\Charles\Downloads\Dynamic-weather-2-version-0.9.8.4.7z
2016-02-01 14:22 - 2016-02-01 14:22 - 00207424 _____ C:\Users\Charles\Downloads\[kat.cr]wasteland.lily.carter.lily.labeau.elegant.angel.720p.torrent
2016-02-01 13:56 - 2016-02-01 13:56 - 00046412 _____ C:\Users\Charles\Downloads\[kat.cr]lustcinema.be.a.hero.directed.by.erika.lust.hd1080p.update(2).torrent
2016-01-28 22:26 - 2016-01-28 22:26 - 00112338 _____ C:\Users\Charles\Downloads\[kat.cr]wallace.and.gromit.the.complete.collection.mkv.1080p.ac3.multich.torrent
2016-01-28 22:25 - 2016-01-28 22:25 - 00013546 _____ C:\Users\Charles\Downloads\[kat.cr]wallace.and.gromit.the.complete.collection.1080p.bluray.x264.ano.torrent
2016-01-28 22:22 - 2016-01-28 22:22 - 00016231 _____ C:\Users\Charles\Downloads\[kat.cr]the.wrong.mans.s02e02.hdtv.x264.tla.eztv.torrent
2016-01-28 22:22 - 2016-01-28 22:22 - 00015776 _____ C:\Users\Charles\Downloads\[kat.cr]the.wrong.mans.2x01.x.mans.hdtv.x264.fov.eztv.torrent
2016-01-28 10:51 - 2016-01-28 10:51 - 00017127 _____ C:\Users\Charles\Downloads\[kat.cr]lust.cinema.silver.shoes.720p.torrent
2016-01-28 10:49 - 2016-01-28 10:49 - 00067836 _____ C:\Users\Charles\Downloads\[kat.cr]skin.like.sun.xxx.2009.dvdrip.torrent
2016-01-28 10:34 - 2016-01-28 10:34 - 00145034 _____ C:\Users\Charles\Downloads\[kat.cr]educating.reeves.joybear.pictures.xxx.dvdrip.torrent
2016-01-28 10:31 - 2016-01-28 10:31 - 00003495 _____ C:\Users\Charles\Downloads\[kat.cr]sex.mannequin.720p.webrip.mp4.gush.mp4.torrent
2016-01-28 10:20 - 2016-01-28 10:20 - 00019508 _____ C:\Users\Charles\Downloads\The+Pleasure+Professionals+2+1080p+2015+WEB-DL.torrent
2016-01-28 10:19 - 2016-01-28 10:19 - 00114558 _____ C:\Users\Charles\Downloads\The+Pleasure+Professionals+-+DVDRip+%5B.mp4%5D(1).torrent
2016-01-28 10:18 - 2016-01-28 10:18 - 00114558 _____ C:\Users\Charles\Downloads\The+Pleasure+Professionals+-+DVDRip+%5B.mp4%5D.torrent
2016-01-28 10:15 - 2016-01-28 10:15 - 00114559 _____ C:\Users\Charles\Downloads\[kat.cr]the.pleasure.professionals.dvdrip.mp4.torrent
2016-01-28 10:11 - 2016-01-28 10:11 - 00112703 _____ C:\Users\Charles\Downloads\[kat.cr]recipe.for.romance.new.sensations.xxx.dvdrip.torrent
2016-01-28 10:04 - 2016-01-28 10:05 - 00268318 _____ C:\Users\Charles\Downloads\[kat.cr]new.sensations.submission.of.emma.marx.the.dvdrip.torrent
2016-01-28 10:04 - 2016-01-28 10:04 - 00133002 _____ C:\Users\Charles\Downloads\[kat.cr]the.submission.of.emma.marx.boundaries.torrent
2016-01-28 09:54 - 2016-01-28 09:54 - 00089284 _____ C:\Users\Charles\Downloads\[kat.cr]oooooh.xxx.2012.dvdrip.torrent
2016-01-28 09:54 - 2016-01-28 09:54 - 00014222 _____ C:\Users\Charles\Downloads\[kat.cr]oooooh.1080p.webrip.mp4.gush.mp4.torrent
2016-01-28 09:52 - 2016-01-28 09:52 - 00013355 _____ C:\Users\Charles\Downloads\[kat.cr]joybear.lena.2013.web.dl.torrent
2016-01-28 09:51 - 2016-01-28 09:51 - 00117857 _____ C:\Users\Charles\Downloads\[kat.cr]sexology.part.1.the.depths.of.female.pleasure.torrent
2016-01-28 09:49 - 2016-01-28 09:49 - 00015109 _____ C:\Users\Charles\Downloads\[kat.cr]marriage.2.0.2015.webrip.torrent
2016-01-28 09:48 - 2016-01-28 09:48 - 00019508 _____ C:\Users\Charles\Downloads\[kat.cr]the.pleasure.professionals.2.1080p.2015.web.dl.torrent
2016-01-28 09:47 - 2016-01-28 09:47 - 00011949 _____ C:\Users\Charles\Downloads\[kat.cr]life.love.lust.2010.1080p.bluray.x264.hdchina.publichd.torrent
2016-01-28 09:35 - 2016-01-28 09:35 - 00015712 _____ C:\Users\Charles\Downloads\[kat.cr]the.pleasure.professionals.justine.mii.joy.bear.1080p.2013.torrent
2016-01-27 18:20 - 2016-01-27 18:20 - 00046412 _____ C:\Users\Charles\Downloads\[kat.cr]lustcinema.be.a.hero.directed.by.erika.lust.hd1080p.update(1).torrent
2016-01-26 19:39 - 2016-01-26 19:39 - 00046412 _____ C:\Users\Charles\Downloads\[kat.cr]lustcinema.be.a.hero.directed.by.erika.lust.hd1080p.update.torrent
2016-01-26 14:24 - 2016-01-26 14:25 - 00006685 _____ C:\Users\Charles\Downloads\[kat.cr]the.good.girl.erika.lust.torrent
2016-01-26 14:17 - 2016-01-26 14:17 - 00110345 _____ C:\Users\Charles\Downloads\[kat.cr]five.hot.stories.for.her.thagson.xxx.spanish.dvdrip.torrent
2016-01-21 19:01 - 2016-01-21 19:01 - 00030188 _____ C:\Users\Charles\Downloads\[kat.cr]the.opening.of.misty.beethoven.1976.bluray.720p.dts.x264.chd.pu.torrent
2016-01-21 18:52 - 2016-01-21 18:52 - 00053205 _____ C:\Users\Charles\Downloads\[kat.cr]radley.metzger.opening.of.misty.beethoven.xxx.dvdrip.avi.torrent
2016-01-21 18:30 - 2016-01-21 18:30 - 14002097 _____ C:\Users\Charles\Downloads\Williams_Linda_Hard_Core_Power_Pleasure_and_the_Frenzy_of_the_Visible.pdf
2016-01-21 18:30 - 2016-01-21 18:30 - 14002097 _____ C:\Users\Charles\Desktop\Williams_Linda_Hard_Core_Power_Pleasure_and_the_Frenzy_of_the_Visible.pdf
2016-01-21 13:57 - 2016-01-21 13:57 - 00266168 _____ C:\Users\Charles\Downloads\[kat.cr]xconfessions.vol.4.1920x1080.torrent
2016-01-21 13:56 - 2016-01-21 13:56 - 00267828 _____ C:\Users\Charles\Downloads\[kat.cr]xconfessions.vol.5.1920x1080.torrent
2016-01-21 13:54 - 2016-01-21 13:54 - 00020263 _____ C:\Users\Charles\Downloads\[kat.cr]xconfessions.vol.3.720p.webrip.mp4.gush.mp4(2).torrent
2016-01-21 13:54 - 2016-01-21 13:54 - 00020263 _____ C:\Users\Charles\Downloads\[kat.cr]xconfessions.vol.3.720p.webrip.mp4.gush.mp4(1).torrent
2016-01-21 13:53 - 2016-01-21 13:53 - 00020263 _____ C:\Users\Charles\Downloads\[kat.cr]xconfessions.vol.3.720p.webrip.mp4.gush.mp4.torrent
2016-01-21 11:15 - 2016-01-21 11:15 - 00000000 ____D C:\Users\Charles\Downloads\gunkizli-v031
2016-01-20 16:20 - 2016-01-20 16:20 - 00021012 _____ C:\Users\Charles\Downloads\[kat.cr]dirty.diaries.12.shorts.of.feminist.porn.torrent
2016-01-20 16:05 - 2016-01-20 16:05 - 00125470 _____ C:\Users\Charles\Downloads\[kat.cr]xconfessions.vol.2.dvdrip.mp4.torrent
2016-01-20 15:58 - 2016-01-20 15:58 - 00018721 _____ C:\Users\Charles\Downloads\[kat.cr]xconfessions.tiffany.doll.he.was.first.in.my.[bleep].hd.720p.torrent
2016-01-20 15:48 - 2016-01-20 15:48 - 00032135 _____ C:\Users\Charles\Downloads\[kat.cr]xconfessions.vol.1.new.2014.web.dl.mp4.rarbg.torrent
2016-01-20 14:40 - 2016-01-20 14:40 - 00595080 _____ C:\Windows\Minidump\012016-25771-01.dmp
2016-01-19 22:36 - 2016-01-19 22:36 - 11800990 _____ C:\Users\Charles\Downloads\WM3997HWA.pdf
2016-01-17 19:32 - 2016-01-17 19:32 - 00006741 _____ C:\Users\Charles\Downloads\changelog.txt
2016-01-16 22:17 - 2016-01-16 22:17 - 00235014 _____ C:\Users\Charles\Downloads\[kat.cr]american.experience.s28e02.walt.disney.part.2.720p.hdtv.x264.w4f.torrent
2016-01-15 23:03 - 2016-01-27 12:29 - 00000000 ____D C:\Users\Charles\Desktop\New folder
2016-01-14 22:25 - 2016-01-14 22:25 - 00056995 _____ C:\Users\Charles\Downloads\[kat.cr]private.pirate.deluxe.07.tanya.hyde.s.london.calling.avi.torrent
2016-01-14 10:58 - 2016-01-14 11:03 - 93895518 _____ C:\Users\Charles\Downloads\Janelle Monáe - Tightrope [feat. Big Boi] (Video).mp4

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-13 15:22 - 2016-01-07 16:38 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-13 15:19 - 2014-03-05 16:48 - 00000000 ____D C:\The KMPlayer
2016-02-13 15:00 - 2015-01-02 15:27 - 00000000 ____D C:\Users\Charles\AppData\Local\NPE
2016-02-13 14:51 - 2014-05-31 09:46 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-02-13 12:05 - 2014-02-20 17:22 - 00000000 ____D C:\Program Files (x86)\Dell Digital Delivery
2016-02-13 08:58 - 2009-07-13 21:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-13 08:58 - 2009-07-13 21:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-13 08:52 - 2014-02-27 15:28 - 00000000 ____D C:\ProgramData\softthinks
2016-02-13 08:51 - 2014-02-20 17:30 - 00000000 ____D C:\Program Files (x86)\Dell Backup and Recovery
2016-02-13 08:51 - 2009-07-13 22:13 - 00783870 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-13 08:51 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\inf
2016-02-13 08:47 - 2014-02-20 17:08 - 00000000 ___HD C:\Windows\system32\WLANProfiles
2016-02-13 08:46 - 2015-12-09 09:05 - 00000000 ____D C:\Windows\System32\Tasks\Remediation
2016-02-13 08:43 - 2014-02-20 17:00 - 00000000 ____D C:\ProgramData\NVIDIA
2016-02-13 08:43 - 2009-07-13 22:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-13 08:43 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\registration
2016-02-12 23:59 - 2014-12-02 14:34 - 00000000 ____D C:\Program Files (x86)\Steam
2016-02-12 22:22 - 2014-12-25 20:52 - 00000000 ____D C:\Users\Charles\AppData\Local\Arma 3
2016-02-12 21:21 - 2014-03-02 17:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-12 09:42 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\rescache
2016-02-12 08:15 - 2009-07-13 21:45 - 00286616 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-12 08:12 - 2014-12-11 08:04 - 00000000 ____D C:\Windows\system32\appraiser
2016-02-12 08:12 - 2014-05-06 22:10 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-02-12 08:12 - 2010-11-21 00:17 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-12 00:01 - 2014-02-28 19:33 - 00000000 ____D C:\Windows\system32\MRT
2016-02-11 23:56 - 2014-02-28 19:33 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-11 20:06 - 2015-09-30 08:49 - 00000000 ____D C:\Program Files\Process Lasso
2016-02-11 20:06 - 2015-04-09 10:50 - 00000000 ____D C:\Users\Charles\AppData\Roaming\ProcessLasso
2016-02-11 18:59 - 2014-03-23 21:16 - 00000000 ____D C:\Users\Charles\Downloads\Torrents
2016-02-11 18:04 - 2014-06-26 20:26 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2016-02-11 00:10 - 2014-03-05 17:00 - 00000000 ____D C:\Users\Charles\AppData\Roaming\uTorrent
2016-02-09 14:22 - 2016-01-07 16:38 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-02-09 14:22 - 2014-02-20 16:55 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-09 14:22 - 2014-02-20 16:55 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-08 23:34 - 2014-06-26 20:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit
2016-02-06 18:43 - 2014-02-28 17:40 - 00000000 ____D C:\Users\Charles\AppData\Local\CrashDumps
2016-02-03 08:43 - 2015-11-14 13:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetWorx
2016-02-03 08:43 - 2015-11-14 13:13 - 00000000 ____D C:\Program Files\NetWorx
2016-02-01 22:37 - 2015-02-18 18:51 - 00000000 ____D C:\Users\Charles\Desktop\for TIM
2016-02-01 18:36 - 2014-06-26 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2016-02-01 08:20 - 2014-09-25 07:41 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-02-01 08:20 - 2014-09-25 07:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-01-31 22:03 - 2014-09-25 07:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-28 08:58 - 2014-05-31 09:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-01-27 10:53 - 2015-04-16 14:48 - 00000000 ____D C:\Users\Charles\Documents\Anki
2016-01-20 14:40 - 2015-06-24 12:47 - 00000000 ____D C:\Windows\Minidump
2016-01-17 09:57 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\system32\NDF

==================== Files in the root of some directories =======

2015-01-22 13:17 - 2015-07-05 12:36 - 0000290 _____ () C:\Users\Charles\AppData\Roaming\BreakingPoint_Login.ini
2015-01-22 13:19 - 2015-07-05 12:57 - 0001455 _____ () C:\Users\Charles\AppData\Roaming\BreakingPoint_Options.ini
2015-09-21 10:03 - 2015-09-21 10:03 - 0004608 _____ () C:\Users\Charles\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-27 22:20 - 2015-12-10 16:32 - 0007639 _____ () C:\Users\Charles\AppData\Local\Resmon.ResmonCfg
2014-03-22 08:53 - 2014-03-22 08:53 - 0015385 _____ () C:\Users\Charles\AppData\Local\WiDiSetupLog.20140322.095314.wdl
2014-03-24 16:08 - 2014-03-24 16:09 - 0016229 _____ () C:\Users\Charles\AppData\Local\WiDiSetupLog.20140324.170858.wdl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-02-12 09:33

==================== End of FRST.txt ============================

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version:07-02-2016
Ran by Charles (2016-02-13 16:17:34)
Running from C:\Users\Charles\Desktop
Windows 7 Professional Service Pack 1 (X64) (2014-02-27 22:22:36)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-432269100-1660991625-3719247699-500 - Administrator - Disabled)
Charles (S-1-5-21-432269100-1660991625-3719247699-1001 - Administrator - Enabled) => C:\Users\Charles
Guest (S-1-5-21-432269100-1660991625-3719247699-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-432269100-1660991625-3719247699-1004 - Limited - Enabled)
UpdatusUser (S-1-5-21-432269100-1660991625-3719247699-1000 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton Internet Security (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton Internet Security (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\uTorrent) (Version: 3.4.3.40298 - BitTorrent Inc.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Anki (HKLM-x32\...\Anki) (Version:  - )
Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CDisplayEx 1.10.27 (HKLM\...\CDisplayEx_is1) (Version:  - cdisplayex.com)
ChessBase Reader (HKLM-x32\...\{66A0089C-E48C-4979-BB5F-8490880B10E6}) (Version: 12.29.0.0 - ChessBase)
CyberLink PowerDVD 13 (HKLM-x32\...\InstallShield_{3CFDF154-7E60-4E98-A8DF-C693A4F8E6B6}) (Version: 13.0.3105.58 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dell Backup and Recovery - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 1.5.0.0 - Dell Inc.)
Dell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.5.0.0 - Dell Inc.)
Dell Command | Power Manager (HKLM\...\{DDDAF4A7-8B7D-4088-AECC-6F50E594B4F5}) (Version: 2.0.0 - Dell Inc.)
Dell Command | Update (HKLM-x32\...\{EC542D5D-B608-4145-A8F7-749C02BE6D94}) (Version: 2.0.0 - Dell Inc.)
Dell ControlVault Host Components Installer 64 bit (HKLM\...\{00E61C2A-E507-4662-8534-A0FA48F415AE}) (Version: 2.3.415.120 - Broadcom Corporation)
Dell Data Vault (Version: 1.1.0.6 - Dell Inc.) Hidden
Dell Digital Delivery (HKLM-x32\...\{B96348BD-6B0D-42E3-80B1-FA6718067BFE}) (Version: 2.8.1000.0 - Dell Products, LP)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Precision Performance Optimizer (HKLM-x32\...\{D66A3355-FEA4-4F60-8BAF-D6CBEDB396D8}) (Version: 01.07.00 - Dell Inc.)
Dell Protected Workspace (HKLM-x32\...\{E2CAA395-66B3-4772-85E3-6134DBAB244E}) (Version: 2.3.15835 - Invincea, Inc.)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.1206.101.110 - ALPS ELECTRIC CO., LTD.)
Epubor Ultimate (HKLM-x32\...\Epubor Ultimate) (Version: 3.0.4.11 - Epubor Inc.)
Free CBR Reader (HKLM-x32\...\{B9240DAE-EFA1-4A0E-824F-17B3F99194F8}) (Version: 1.0.0 - Free Picture Solutions)
FusionKit (HKLM-x32\...\FusionKitKit) (Version:  - )
H1Z1 (HKLM-x32\...\Steam App 295110) (Version:  - Daybreak Games)
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.12.253 - SurfRight B.V.)
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel® Network Connections 19.2.104.00 (HKLM\...\PROSetDX) (Version: 19.2.104.00 - Intel)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Intel® Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.4.40 - Intel Corporation)
Intel® WiDi (HKLM\...\{62E7C369-64FF-452C-8F46-6BE9B77FF097}) (Version: 4.0.18.0 - Intel Corporation)
Intel® Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
Intel® PROSet/Wireless Software (HKLM-x32\...\{86b6e2d1-a3cb-47e5-bdc7-f5ae12772ba1}) (Version: 17.14.0 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Luxology modo 701_sp4 64-bit build 66614 (HKLM-x32\...\701_sp4_64) (Version:  - )
Luxology modo 801 build 70287 (HKLM-x32\...\801_64) (Version:  - )
Malwarebytes Anti-Exploit version 1.8.1.1189 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.8.1.1189 - Malwarebytes)
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Maxx Audio Installer (x64) (Version: 1.6.4711.73 - Waves Audio Ltd.) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MiniTool Partition Wizard Home Edition 8.1.1 (HKLM-x32\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)
modo 701 content (HKLM-x32\...\modo701_Content) (Version:  - )
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 44.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 44.0.2 (x86 en-US)) (Version: 44.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 44.0.2.5884 - Mozilla)
Mozilla Thunderbird 24.3.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 24.3.0 (x86 en-US)) (Version: 24.3.0 - Mozilla)
Mp3tag v2.69 (HKLM-x32\...\Mp3tag) (Version: v2.69 - Florian Heidenreich)
NetWorx 5.5.1 (HKLM\...\NetWorx_is1) (Version:  - Softperfect)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 22.5.5.15 - Symantec Corporation)
NVIDIA 3D Vision Driver 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA Graphics Driver 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA nView 146.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 146.33 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA WMI 2.20.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVWMI) (Version: 2.20.0 - NVIDIA Corporation)
O2Micro Flash Memory Card Windows Driver (HKLM-x32\...\InstallShield_{C834E5DF-AB21-4142-8234-0C4FA77F3A04}) (Version: 3.0.08.38 - O2Micro International LTD.)
O2Micro Flash Memory Card Windows Driver (x32 Version: 3.0.08.38 - O2Micro International LTD.) Hidden
PerformanceTest v8.0 (HKLM\...\PerformanceTest 8_is1) (Version: 8.0.1030.0 - Passmark Software)
Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 8.9.6.0 - Bitsum)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RAR Password Recovery Professional  (HKLM-x32\...\RAR Password Recovery Professional) (Version:  - SmartKey, Inc.)
Realtek Audio COM Components (HKLM-x32\...\{2355B503-9B11-4449-861D-1C1748B26320}) (Version: 1.0.2 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6053 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Should I Remove It (HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\Should I Remove It 1.0.4) (Version: 1.0.4 - Reason Software Company Inc.)
Should I Remove It (x32 Version: 1.0.4 - Reason Software Company Inc.) Hidden
SpywareBlaster 5.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
ST Microelectronics 3 Axis Digital Accelerometer Solution (HKLM-x32\...\{9C24F411-9CA7-4A8A-91F3-F08A4A38EB31}) (Version: 4.10.0051 - ST Microelectronics)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Substance Plugin for Modo 701 version 1_0_4 (HKLM-x32\...\{F70A6A17-AFB1-4136-85AD-82F0F8681E48}_is1) (Version: 1_0_4 - Allegorithmic)
The Foundry MODO 801_SP4 build 81801 (HKLM-x32\...\801_SP4_64) (Version:  - )
The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.8.0.120 - PandoraTV)
The Walking Dead (HKLM-x32\...\Steam App 207610) (Version:  - )
ULTIMEYES (HKLM-x32\...\{FB212723-6FDB-44DA-9B58-D11561980993}) (Version: 1.101 - Carrot Neurotechnology, Inc.)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
ZBrush 4R7 (HKLM-x32\...\ZBrush 4R7 4R7) (Version: 4R7 - Pixologic)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0D6B5224-9A5B-43A4-AC05-F1F498918C2E} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2016-01-06] (Symantec Corporation)
Task: {16CDFC54-E694-4444-B919-2DC19C2D6BBD} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {1C8253FD-CA8B-47AE-8FDB-0F94F789BC51} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {200E80DF-63B4-485A-A8F9-F7E580F58D55} - System32\Tasks\{CBEB1353-3D6E-4BA5-88FD-781DE9C54A37} => pcalua.exe -a C:\Users\Charles\Downloads\BP_Installer.1.exe -d C:\Users\Charles\Downloads
Task: {20748800-586B-48A7-A0CF-A3427896FA22} - System32\Tasks\{E78FC0FF-B511-40DC-AE76-44549EF2059A} => pcalua.exe -a C:\Users\Charles\Downloads\irfanview_plugins_437_setup.exe -d C:\Users\Charles\Downloads
Task: {20C19F7B-855D-4AC5-9A27-6CC26E0990D1} - System32\Tasks\{A39C7D95-D119-4835-A584-9C491B082E3F} => pcalua.exe -a C:\Users\Charles\Downloads\iview438_setup.exe -d C:\Users\Charles\Downloads
Task: {2B044FAE-3C88-44DB-841A-F4E6D28E090D} - System32\Tasks\{DF42113F-5619-4A8F-8321-2800649A8AB4} => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2016-01-29] (Malwarebytes Corporation)
Task: {35DF9868-00CC-4369-863E-4CD7D6FB11A4} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {39D2BCE8-39CB-44FF-BF47-D460A42E646F} - System32\Tasks\{CB66EDFF-4351-4EB3-9A55-5759CA056E95} => pcalua.exe -a C:\Users\Charles\Downloads\IRST_Driver_Intel_A11_WIN_G29CM_f6flpy-x64-SETUP_ZPE.exe -d C:\Users\Charles\Downloads
Task: {3B41AF2A-4893-4974-8091-D6FB302FA5E1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {49567614-1CCA-4F51-AD26-92FE4C5F52F7} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {4BC3C2F1-982F-43EF-9D81-91DBA30522F7} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {51C7322D-5610-41F4-8957-AC1AEB88ED71} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {5E11A293-220F-48E3-931B-616685A9BC8B} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {799C244B-20EA-48DC-98DB-3D2BDE019D77} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {83ACFA2B-CFC2-4310-9D28-DE4FC41F51D3} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-09-01] (Realtek Semiconductor)
Task: {84F42F01-BF00-43F8-B36C-D9A509FE9F43} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-09] (Adobe Systems Incorporated)
Task: {8675B72E-1B50-4BF0-9BE2-5923983F4E2A} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {9B39FF35-BDDF-4C56-B282-92A49215A004} - System32\Tasks\Process Lasso Core Engine Only => C:\Program Files\Process Lasso\processgovernor.exe [2016-02-02] (Bitsum LLC)
Task: {B02D6D24-636B-40BF-A22A-EB26C5D06442} - System32\Tasks\{50B883FA-2FDD-4B88-9F2A-D5C8CEB6E1F8} => pcalua.exe -a C:\Users\Charles\Downloads\jxpiinstall(2).exe -d C:\Users\Charles\Downloads
Task: {D3E4FF13-35D9-4CE4-9091-360A6C09915A} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\WSCStub.exe [2016-01-06] (Symantec Corporation)
Task: {D7464DEB-EA1E-4481-916B-BACCB3D316AF} - System32\Tasks\Process Lasso Management Console (GUI) => C:\Program Files\Process Lasso\processlasso.exe [2016-02-02] (Bitsum LLC)
Task: {D9A2AB29-DC16-45A4-943D-A604536CC1E0} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {E1E78F23-1A6B-46E9-ADF5-9E014C526BA5} - System32\Tasks\{F31C71D2-803E-4850-BF47-CC1D276BD341} => pcalua.exe -a "C:\Program Files (x86)\QuickTime\QTSystem\QuickTime.cpl" -c QuickTime
Task: {F48B3C7A-4656-4D4F-B3E8-D21E128779F0} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2014-02-20 17:01 - 2015-03-13 12:41 - 03039376 _____ () C:\Windows\system32\nvwmi64.exe
2014-02-20 17:00 - 2015-03-13 09:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-02-25 10:04 - 2012-03-09 09:27 - 00008192 _____ () C:\Windows\SysWOW64\srvany.exe
2014-02-20 17:31 - 2013-04-19 14:51 - 00020256 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayIcon.dll
2014-02-20 17:31 - 2013-04-19 14:52 - 00049440 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\STCommonShellIntegration.dll
2014-02-20 17:31 - 2013-04-19 14:51 - 00019232 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayNotBackuped.dll
2014-02-20 17:00 - 2015-03-13 12:41 - 00714048 _____ () C:\Program Files\NVIDIA Corporation\nview\nvshell.dll
2014-02-20 17:31 - 2013-04-19 14:51 - 00034080 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRShellExtension.dll
2015-11-14 13:13 - 2016-01-21 12:32 - 00807936 _____ () C:\Program Files\NetWorx\sqlite.dll
2014-02-20 17:31 - 2013-04-19 14:51 - 00023328 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
2013-11-12 09:04 - 2013-11-12 09:04 - 00110088 _____ () c:\Program Files (x86)\Dell Digital Delivery\ServiceTagPlusPlus.dll
2015-02-25 11:06 - 2013-11-13 12:23 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll
2014-02-20 17:30 - 2013-05-02 15:01 - 01813792 _____ () C:\Program Files (x86)\Dell Backup and Recovery\OLCoreWrapper.dll
2016-02-09 14:22 - 2016-02-09 14:22 - 17891008 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3204
AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3252
AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3353
AlternateDataStreams: C:\ProgramData\Temp:5C321E34

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR430 => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\sony.com -> sony.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-432269100-1660991625-3719247699-1001\...\1001movie.com -> 1001movie.com

There are 6091 more sites.


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 19:34 - 2014-05-31 09:41 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-432269100-1660991625-3719247699-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Charles\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.20.201.110 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{5C386DD0-2947-4656-98B1-2959D54FF2C1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{53CD6E19-B467-43C2-A2E3-8F2D92AD8CE1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{FF1B897B-5A67-466E-A7F0-8B7A30C88E05}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{04BA44B4-1362-4057-AAC2-630B8107B2E1}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{E6CE3201-907B-48C9-AC39-6C99E35549B4}] => (Allow) LPort=2869
FirewallRules: [{8742E118-3239-418E-9DD5-01CF3421DC29}] => (Allow) LPort=1900
FirewallRules: [{F66C0F09-7572-49FF-9D8C-DB8751A2E79B}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{85CFA71B-D1FE-4AE3-B45F-3E48BCC03068}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{70936248-C214-4B93-BF8B-A5D5FB233414}] => (Block) C:\Program Files\Luxology\modo\701_sp4\modo.exe
FirewallRules: [{AE29AA7C-12F4-4593-B6BE-702B553BBC36}] => (Block) C:\Program Files\Luxology\modo\701_sp4\modo.exe
FirewallRules: [{0382444B-6F6E-4535-A976-CA0CA3586E33}] => (Allow) C:\Users\Charles\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1EB949DF-B9A4-453F-B571-F307FE407157}] => (Allow) C:\Users\Charles\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2975E541-6F8A-47E2-8AD8-992910F15D4A}] => (Block) C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13.exe
FirewallRules: [{3B31DF80-3317-445A-B396-29830E87BC44}] => (Block) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMR\PowerDVD13DMREngine.exe
FirewallRules: [{1273A283-B7EB-47F8-BFA9-B25EA4357C34}] => (Block) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
FirewallRules: [{4BF2B14A-DB63-4C96-8D8C-A6E49FBE6EEA}] => (Block) C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe
FirewallRules: [{A62248D5-9C2A-4592-9E7F-EDFD0F2D8FBE}] => (Block) C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13ML.exe
FirewallRules: [{C7DF20DB-43D8-49D2-B675-CE9D5BD81430}] => (Block) C:\Program Files (x86)\CyberLink\PowerDVD13\Movie\PowerDVD.exe
FirewallRules: [{EE2B767A-8016-45A7-A01B-041BE835F627}] => (Block) C:\Program Files (x86)\CyberLink\PowerDVD13\Movie\PowerDVD Cinema\PowerDVDCinema13.exe
FirewallRules: [TCP Query User{C4C83E42-1B8D-4A15-9337-65B46232E6F1}C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe
FirewallRules: [UDP Query User{6A994E53-5A39-4174-B4EF-AC1B5601953F}C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe
FirewallRules: [{9C0B9B90-DF00-401D-A121-5B5214B60086}] => (Allow) C:\Users\Charles\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{919C6400-5215-4140-8704-0B502C0B9E20}] => (Allow) C:\Users\Charles\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0FCBB2DC-26DA-44D6-9A41-EB013FD46676}] => (Allow) C:\Program Files\Luxology\modo\801\modo.exe
FirewallRules: [{3EF96432-4B16-48D4-8A74-6D4BCFEFC03B}] => (Allow) C:\Program Files\Luxology\modo\801\modo.exe
FirewallRules: [{4F480CD0-F379-4F2F-9FF8-4471F42EF9CE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{96924599-A666-4A72-BB45-671E34401699}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{43A222DD-FC94-4E3F-BCD8-3521AF187BFD}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C8BF899A-315E-493D-9495-1498FDBF15C2}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D5106CEE-8F59-4414-8B95-83514F527058}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{61B3676F-0221-49D9-AA00-FE8A99085C0E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{70BD93DC-55F3-4AA0-949B-A65BE9C10EB4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{CF2739C4-3C7E-4320-8514-6EB1DC86DFFE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{66DC7F42-8DEA-472D-9170-DD4905C406AE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{0EB9EB05-D21A-417C-A6FC-2F43121D6363}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C03DDF85-BFE7-4E37-AB82-7E0BFE9B1B8A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
FirewallRules: [{9827CDED-4460-4BD0-92DA-19809C3BB885}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
FirewallRules: [{DAF328E2-7106-4A59-990F-B854D1BCDBCA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{8B735B47-F667-46A4-9CDF-5D7B548459AD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{08240093-959B-433F-9F09-0DB27FD54F97}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{67B5FAB1-6DB7-426C-B560-D119D9273E7A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{53121DC6-B0E1-4F8C-83E5-8D090AC41874}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{F4B100E1-C9DF-4C26-9588-9592ACF44CEB}] => (Allow) C:\Program Files\Luxology\modo\801_SP4\modo.exe
FirewallRules: [{AA642947-611F-4E42-9994-EAC2F56DC6E4}] => (Allow) C:\Program Files\Luxology\modo\801_SP4\modo.exe
FirewallRules: [{E9DDEA20-2778-4DAF-8314-6B6E4831E7D3}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{097BDFCF-DA5F-459D-BF3A-42FD0B11173C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{764DAE6E-40DC-447D-9FD5-8A5F7E10B5AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{15EE1E09-32C5-4B74-83CD-866F4871F472}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{ED24F497-69FB-48B2-B95E-A0B260AADDF8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9208EB06-2564-4B22-8053-BF4185CCB6B4}] => (Allow) C:\Program Files\NetWorx\networx.exe
FirewallRules: [{38A9FC20-6B0C-4F8E-A191-DA16586A5F07}] => (Allow) C:\Program Files\NetWorx\networx.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/13/2016 08:43:57 AM) (Source: NVWMI) (EventID: 3) (User: )
Description: bad pipe name

Error: (02/13/2016 08:43:56 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/12/2016 09:21:42 PM) (Source: NVWMI) (EventID: 3) (User: )
Description: bad pipe name

Error: (02/12/2016 09:21:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/12/2016 08:17:19 AM) (Source: NVWMI) (EventID: 3) (User: )
Description: bad pipe name

Error: (02/12/2016 08:15:55 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/11/2016 07:58:54 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/11/2016 07:58:54 AM) (Source: NVWMI) (EventID: 3) (User: )
Description: bad pipe name

Error: (02/10/2016 08:54:57 AM) (Source: NVWMI) (EventID: 3) (User: )
Description: bad pipe name

Error: (02/10/2016 08:54:57 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (02/13/2016 08:48:52 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.

Error: (02/13/2016 08:48:22 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.

Error: (02/13/2016 08:47:52 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.

Error: (02/13/2016 08:47:13 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.

Error: (02/12/2016 09:49:48 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.

Error: (02/12/2016 09:49:09 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the CAMService service.

Error: (02/12/2016 09:51:30 AM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (02/12/2016 09:28:26 AM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (02/12/2016 08:22:06 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.

Error: (02/11/2016 08:22:12 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.


CodeIntegrity:
===================================
  Date: 2016-01-19 11:34:50.334
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume3\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2016-01-19 11:34:50.330
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume3\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2016-01-19 11:34:50.326
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume3\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2016-01-19 11:34:50.272
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume3\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_f3153036f55ab3f5\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2016-01-19 11:34:50.266
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume3\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_f3153036f55ab3f5\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2016-01-19 11:34:50.262
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume3\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_f3153036f55ab3f5\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2016-01-19 11:34:50.157
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume3\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_a384c5aabe759ea5\wermgr.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2016-01-19 11:34:50.151
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume3\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_a384c5aabe759ea5\wermgr.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2016-01-19 11:34:50.148
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume3\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_a384c5aabe759ea5\wermgr.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2016-01-19 11:34:50.129
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume3\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.


==================== Memory info ===========================

Processor: Intel® Core™ i7-4800MQ CPU @ 2.70GHz
Percentage of memory in use: 28%
Total physical RAM: 16323.18 MB
Available physical RAM: 11738.04 MB
Total Virtual: 32644.57 MB
Available Virtual: 27775.02 MB

==================== Drives ================================

Drive c: (OSDisk) (Fixed) (Total:456.99 GB) (Free:7.99 GB) NTFS
Drive e: (Data) (Fixed) (Total:458.81 GB) (Free:79.82 GB) NTFS
Drive f: (Seagate Backup Plus 5TB) (Fixed) (Total:4657.52 GB) (Free:1345.72 GB) NTFS
Drive g: (Seagate Backup Plus Drive) (Fixed) (Total:2794.51 GB) (Free:6.57 GB) NTFS
Drive y: (RECOVERY) (Fixed) (Total:15.67 GB) (Free:7.29 GB) NTFS ==>[system with boot components (obtained from drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 2DC3210B)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=15.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=457 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=458.8 GB) - (Type=OF Extended)
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 1.
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 2.

==================== End of Addition.txt ============================


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,006 posts
  • MVP
Get tcpview.  http://live.sysinter...com/Tcpview.exe Download, Save and then run it by right clicking and Run As Admin.
 
Then File, Save As (to your desktop), tcp , OK.  This should create a  file tcp.txt on your desktop.  Attach or copy and paste it to a reply.

  • 0

#3
cswen

cswen

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts

[System Process]    0    TCP    charles-pc    61208    104.28.29.94    http    TIME_WAIT                                        
[System Process]    0    TCP    charles-pc    61209    104.28.29.94    http    TIME_WAIT                                        
[System Process]    0    TCP    charles-pc    61210    104.28.29.94    http    TIME_WAIT                                        
[System Process]    0    TCP    charles-pc    61211    104.28.29.94    http    TIME_WAIT                                        
[System Process]    0    TCP    charles-pc    61162    108.177.10.95    http    TIME_WAIT                                        
[System Process]    0    TCP    charles-pc    61163    108.177.10.95    http    TIME_WAIT                                        
[System Process]    0    TCP    charles-pc    61173    108.177.10.95    http    TIME_WAIT                                        
[System Process]    0    TCP    charles-pc    61147    dfw06s47-in-f14.1e100.net    http    TIME_WAIT                                        
[System Process]    0    TCP    charles-pc    61152    dfw06s47-in-f14.1e100.net    http    TIME_WAIT                                        
[System Process]    0    TCP    charles-pc    61187    live.sysinternals.com    http    TIME_WAIT                                        
AppleMobileDeviceService.exe    2132    TCP    Charles-PC    27015    Charles-PC    0    LISTENING                                        
AppleMobileDeviceService.exe    2132    TCP    Charles-PC    27015    localhost    49205    ESTABLISHED                                        
AppleMobileDeviceService.exe    2132    TCP    Charles-PC    49155    localhost    5354    ESTABLISHED                                        
AppleMobileDeviceService.exe    2132    TCP    Charles-PC    49156    localhost    5354    ESTABLISHED                                        
AppleMobileDeviceService.exe    2132    UDP    Charles-PC    49152    *    *                                            
AppleMobileDeviceService.exe    2132    UDP    Charles-PC    49153    *    *                                            
CLMSServerPDVD13.exe    2364    TCP    Charles-PC    2554    Charles-PC    0    LISTENING                                        
CLMSServerPDVD13.exe    2364    TCP    Charles-PC    26905    Charles-PC    0    LISTENING                                        
CLMSServerPDVD13.exe    2364    TCP    Charles-PC    56902    Charles-PC    0    LISTENING                                        
CLMSServerPDVD13.exe    2364    UDP    Charles-PC    ssdp    *    *                80    21,988                        
CLMSServerPDVD13.exe    2364    UDP    charles-pc    ssdp    *    *                                            
CLMSServerPDVD13.exe    2364    UDP    Charles-PC    49156    *    *                                            
CLMSServerPDVD13.exe    2364    UDP    Charles-PC    49157    *    *                                            
daemonu.exe    1956    TCP    Charles-PC    2559    Charles-PC    0    LISTENING                                        
daemonu.exe    1956    UDP    Charles-PC    48000    *    *                                            
firefox.exe    6492    TCP    charles-pc    61158    edge-star-mini-shv-01-dfw1.facebook.com    https    ESTABLISHED    2    92    2    92                        
firefox.exe    6492    TCP    charles-pc    61160    xx-fbcdn-shv-01-dfw1.fbcdn.net    https    ESTABLISHED    2    92    2    92                        
firefox.exe    6492    TCP    charles-pc    61172    104.28.29.94    https    ESTABLISHED    2    92    2    92                        
firefox.exe    6492    TCP    Charles-PC    62552    localhost    62553    ESTABLISHED    167    167                                
firefox.exe    6492    TCP    Charles-PC    62553    localhost    62552    ESTABLISHED            167    167                        
iTunesHelper.exe    5936    TCP    Charles-PC    49205    localhost    27015    ESTABLISHED                                        
iTunesHelper.exe    5936    UDP    Charles-PC    49162    *    *                                            
iTunesHelper.exe    5936    UDP    Charles-PC    49163    *    *                                            
jhi_service.exe    5036    TCPV6    [0:0:0:0:0:0:0:1]    49161    charles-pc    0    LISTENING                                        
LMS.exe    3772    TCP    Charles-PC    623    Charles-PC    0    LISTENING                                        
LMS.exe    3772    TCP    Charles-PC    16992    Charles-PC    0    LISTENING                                        
LMS.exe    3772    TCP    Charles-PC    49162    Charles-PC    0    LISTENING                                        
LMS.exe    3772    TCPV6    charles-pc    623    charles-pc    0    LISTENING                                        
LMS.exe    3772    TCPV6    charles-pc    16992    charles-pc    0    LISTENING                                        
LMS.exe    3772    TCPV6    [0:0:0:0:0:0:0:1]    49163    [0:0:0:0:0:0:0:1]    49165    ESTABLISHED                                        
LMS.exe    3772    TCPV6    [0:0:0:0:0:0:0:1]    49165    [0:0:0:0:0:0:0:1]    49163    ESTABLISHED                                        
lsass.exe    724    TCP    Charles-PC    49157    Charles-PC    0    LISTENING                                        
lsass.exe    724    TCPV6    charles-pc    49157    charles-pc    0    LISTENING                                        
mbam.exe    5256    TCP    charles-pc    62399    ec2-23-23-97-250.compute-1.amazonaws.com    https    CLOSE_WAIT                                        
mbamservice.exe    2248    TCP    Charles-PC    43227    Charles-PC    0    LISTENING                                        
mDNSResponder.exe    2188    TCP    Charles-PC    5354    Charles-PC    0    LISTENING                                        
mDNSResponder.exe    2188    TCP    Charles-PC    5354    localhost    49155    ESTABLISHED                                        
mDNSResponder.exe    2188    TCP    Charles-PC    5354    localhost    49156    ESTABLISHED                                        
mDNSResponder.exe    2188    UDP    charles-pc    5353    *    *                                            
mDNSResponder.exe    2188    UDP    Charles-PC    49154    *    *                                            
mDNSResponder.exe    2188    UDPV6    [0:0:0:0:0:0:0:1]    5353    *    *                                            
mDNSResponder.exe    2188    UDPV6    charles-pc    49155    *    *                                            
networx.exe    6128    UDP    charles-pc    65288    *    *        1    137    1    339                        
nis.exe    2776    TCP    Charles-PC    49159    Charles-PC    0    LISTENING                                        
nis.exe    2776    TCP    charles-pc    49305    143.127.93.123    http    ESTABLISHED                                        
nis.exe    2776    TCP    Charles-PC    49160    Charles-PC    0    LISTENING                                        
nis.exe    2776    TCPV6    charles-pc    49160    charles-pc    0    LISTENING                                        
services.exe    716    TCP    Charles-PC    49158    Charles-PC    0    LISTENING                                        
services.exe    716    TCPV6    charles-pc    49158    charles-pc    0    LISTENING                                        
Steam.exe    8712    TCP    Charles-PC    27036    Charles-PC    0    LISTENING                                        
Steam.exe    8712    UDP    Charles-PC    27036    *    *                                            
Steam.exe    8712    UDP    Charles-PC    51274    *    *        12    960    5    276                        
svchost.exe    376    TCP    Charles-PC    epmap    Charles-PC    0    LISTENING                                        
svchost.exe    424    TCP    Charles-PC    49153    Charles-PC    0    LISTENING                                        
svchost.exe    1108    TCP    Charles-PC    49154    Charles-PC    0    LISTENING                                        
svchost.exe    424    UDP    Charles-PC    bootpc    *    *        13    3,900    1    548                        
svchost.exe    424    UDP    Charles-PC    bootpc    *    *                                            
svchost.exe    1108    UDP    Charles-PC    isakmp    *    *                                            
svchost.exe    1216    UDP    Charles-PC    ssdp    *    *        4    1,792    175    35,867                        
svchost.exe    1216    UDP    charles-pc    ssdp    *    *                                            
svchost.exe    1216    UDP    Charles-PC    ws-discovery    *    *                                            
svchost.exe    1216    UDP    Charles-PC    ws-discovery    *    *                                            
svchost.exe    1072    UDP    Charles-PC    ws-discovery    *    *                                            
svchost.exe    1072    UDP    Charles-PC    ws-discovery    *    *                                            
svchost.exe    1108    UDP    Charles-PC    ipsec-msft    *    *                                            
svchost.exe    1672    UDP    Charles-PC    llmnr    *    *                2    44                        
svchost.exe    1216    UDP    Charles-PC    49158    *    *                                            
svchost.exe    1216    UDP    charles-pc    51280    *    *        18    2,394    18    6,102                        
svchost.exe    1216    UDP    Charles-PC    51281    *    *        18    2,394                                
svchost.exe    1072    UDP    Charles-PC    54612    *    *                                            
svchost.exe    1072    UDP    Charles-PC    59106    *    *                                            
svchost.exe    376    TCPV6    charles-pc    epmap    charles-pc    0    LISTENING                                        
svchost.exe    8068    TCPV6    charles-pc    3587    charles-pc    0    LISTENING                                        
svchost.exe    424    TCPV6    charles-pc    49153    charles-pc    0    LISTENING                                        
svchost.exe    1108    TCPV6    charles-pc    49154    charles-pc    0    LISTENING                                        
svchost.exe    1108    UDPV6    charles-pc    500    *    *                                            
svchost.exe    1216    UDPV6    [0:0:0:0:0:0:0:1]    1900    *    *                                            
svchost.exe    1216    UDPV6    [fe80:0:0:0:3c11:3620:a977:f032]    1900    *    *                                            
svchost.exe    8068    UDPV6    charles-pc    3540    *    *                24    18,738                        
svchost.exe    1216    UDPV6    charles-pc    3702    *    *                                            
svchost.exe    1072    UDPV6    charles-pc    3702    *    *                                            
svchost.exe    1216    UDPV6    charles-pc    3702    *    *                                            
svchost.exe    1072    UDPV6    charles-pc    3702    *    *                                            
svchost.exe    1108    UDPV6    charles-pc    4500    *    *                                            
svchost.exe    1672    UDPV6    charles-pc    5355    *    *                                            
svchost.exe    1216    UDPV6    charles-pc    49159    *    *                                            
svchost.exe    1216    UDPV6    [fe80:0:0:0:3c11:3620:a977:f032]    51278    *    *                                            
svchost.exe    1216    UDPV6    [0:0:0:0:0:0:0:1]    51279    *    *                64    23,808        744        2        
svchost.exe    1072    UDPV6    charles-pc    54613    *    *                                            
svchost.exe    1072    UDPV6    charles-pc    59107    *    *                                            
System    4    TCP    charles-pc    netbios-ssn    Charles-PC    0    LISTENING                                        
System    4    TCP    Charles-PC    microsoft-ds    Charles-PC    0    LISTENING                                        
System    4    TCP    Charles-PC    icslap    Charles-PC    0    LISTENING                                        
System    4    TCP    Charles-PC    wsd    Charles-PC    0    LISTENING                                        
System    4    TCP    Charles-PC    10243    Charles-PC    0    LISTENING                                        
System    4    UDP    charles-pc    netbios-ns    *    *        42    2,100    6    300                        
System    4    UDP    charles-pc    netbios-dgm    *    *                                            
System    4    TCPV6    charles-pc    microsoft-ds    charles-pc    0    LISTENING                                        
System    4    TCPV6    charles-pc    icslap    charles-pc    0    LISTENING                                        
System    4    TCPV6    charles-pc    wsd    charles-pc    0    LISTENING                                        
System    4    TCPV6    charles-pc    10243    charles-pc    0    LISTENING                                        
Toaster.exe    9128    TCP    charles-pc    61129    dfw06s39-in-f4.1e100.net    http    ESTABLISHED    3    123    3    1,956                        
wininit.exe    636    TCP    Charles-PC    49152    Charles-PC    0    LISTENING                                        
wininit.exe    636    TCPV6    charles-pc    49152    charles-pc    0    LISTENING                                        
wmpnetwk.exe    3436    TCP    Charles-PC    rtsp    Charles-PC    0    LISTENING                                        
wmpnetwk.exe    3436    UDP    Charles-PC    5004    *    *                                            
wmpnetwk.exe    3436    UDP    Charles-PC    5005    *    *                                            
wmpnetwk.exe    3436    TCPV6    charles-pc    rtsp    charles-pc    0    LISTENING                                        
wmpnetwk.exe    3436    UDPV6    charles-pc    5004    *    *                                            
wmpnetwk.exe    3436    UDPV6    charles-pc    5005    *    *                                            
 

 

Thanks for your time helping. -C


  • 0

#4
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,006 posts
  • MVP

firefox.exe    6492    TCP    charles-pc    61172    104.28.29.94    https    ESTABLISHED    2    92    2    92  

 

The address is for cloudflare which has a bad rep:

 

 https://www.virustot...94/information/ 

 

Run Firefox in Safe Mode:

 

 https://support.mozi...using-safe-mode

 

At the same time as tcpview and then enable each extension until you find the one that talks to   104.28.29.94

Suspect it's one of your downloader extensions.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP