Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Windows failed to start - MBAMSwissArmy.sys


  • This topic is locked This topic is locked

#1
chuck95

chuck95

    New Member

  • Member
  • Pip
  • 3 posts

Hi all, it looks like I"m having the same problem as many other here. (Using Windows 7)

This morning, Malwarebytes reported that it wasn't protecting my computer, so I tried to turn it back on, but it wouldn't work.

At the same time, I had downloaded the latest Windows Update fixes and was awaiting reboot. 
So I restarted the computer but it wouldn't not boot to WIndows, saying:

 

     File: \Windows\system32\drivers\MBAMSwissArmy.sys

     Status: 0xc0000225

     Info: Windows failed to load because a critical system driver is missing, or corrupt.

 

I've copied and pasted my FRST.txt log, hoping someone can help me get back into WIndows.

Thanks so much for your help!

 

 

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-09-2017 02
Ran by SYSTEM on MININT-0DL658G (23-09-2017 11:17:27)
Running from g:\
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery
Default: ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1909032 2010-01-14] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-01-20] (IDT, Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [361632 2009-11-12] (Acronis)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-04-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-12-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Monitor] => C:\Program Files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe [103936 2013-07-23] (LeapFrog Enterprises, Inc.)
HKLM-x32\...\Run: [Desktop Disc Tool] => C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [498160 2009-12-15] ()
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-10-27] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5106904 2009-11-12] (Acronis)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll [X]
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2010-07-19]
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2010-07-19]
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\STUDIO 1749 USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk [2010-10-21]
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe ()

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2255064 2013-10-28] (Broadcom Corporation.)
S2 kmttg; C:\kmttg 2.0m\service\win32\bin\wrapper.exe [217088 2015-09-26] ()
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
S3 NETGEARGenieDaemon; C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe [232192 2015-08-26] (NETGEAR)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
S2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [417456 2017-08-23] ()
S2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [3446224 2015-02-23] (Paramount Software UK Ltd)
S2 rpcld; C:\ProgramData\Rpcnet\Bin\rpcld.exe [179120 2011-09-28] (Absolute Software Corp.)
S2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\STacSV64.exe [244736 2010-01-20] (IDT, Inc.)
S4 TivoBeacon2; C:\Program Files (x86)\TiVo\Desktop\TiVoBeacon.exe [1104656 2010-05-17] (TiVo Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [60288 2009-07-13] (Microsoft Corporation)
S5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170712 2013-10-28] (Broadcom Corporation.)
S3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [32352 2016-10-13] (Dell Inc.)
S3 DellProf; C:\Windows\System32\drivers\DellProf.sys [32952 2016-10-13] (Dell Computer Corporation)
S3 easytether; C:\Windows\System32\DRIVERS\easytthr.sys [20752 2011-05-22] (Mobile Stream)
S1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-08-24] ()
S3 FlyUsb; C:\Windows\System32\DRIVERS\FlyUsb.sys [24576 2008-04-01] (LeapFrog)
S0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2012-12-21] (GFI Software)
S2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [192960 2017-09-03] (Malwarebytes)
S3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [101824 2017-09-19] (Malwarebytes)
S0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [0 2017-09-22] () <==== ATTENTION (zero byte File/Folder)
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
S1 MpKsl0b0a32a9; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{0C0CCCBE-FBF1-4117-AF65-19747A67742C}\MpKsl0b0a32a9.sys [44928 2017-09-22] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2015-10-12] (CACE Technologies, Inc.)
S3 PSMounterEx; C:\Windows\system32\drivers\psmounterex.sys [169480 2015-02-23] (Windows ® Win 7 DDK provider)
S3 PSVolAcc; C:\Windows\System32\Drivers\PSVolAcc.sys [12760 2014-07-21] (Paramount Software UK Ltd)
S3 tapnordvpn; C:\Windows\System32\DRIVERS\tapnordvpn.sys [75088 2017-03-29] (The OpenVPN Project)
S0 tdrpman258; C:\Windows\System32\DRIVERS\tdrpm258.sys [1477728 2014-01-19] (Acronis)
S2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-11] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-22 21:09 - 2017-09-22 21:09 - 000000000 _____ C:\Windows\System32\Drivers\6BDA4B75.sys
2017-09-20 16:28 - 2017-08-19 07:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2017-09-20 16:28 - 2017-08-19 07:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2017-09-20 16:28 - 2017-08-16 07:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\System32\usp10.dll
2017-09-20 16:28 - 2017-08-16 07:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-09-20 16:28 - 2017-08-16 06:57 - 003224576 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2017-09-20 16:28 - 2017-08-15 17:10 - 000395976 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2017-09-20 16:28 - 2017-08-15 16:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-09-20 16:28 - 2017-08-15 07:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2017-09-20 16:28 - 2017-08-15 07:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\System32\ExplorerFrame.dll
2017-09-20 16:28 - 2017-08-15 07:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-09-20 16:28 - 2017-08-15 07:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-09-20 16:28 - 2017-08-15 06:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2017-09-20 16:28 - 2017-08-15 06:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-09-20 16:28 - 2017-08-15 06:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-09-20 16:28 - 2017-08-15 06:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-09-20 16:28 - 2017-08-15 05:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-09-20 16:28 - 2017-08-14 09:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\System32\mmcndmgr.dll
2017-09-20 16:28 - 2017-08-14 09:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
2017-09-20 16:28 - 2017-08-14 09:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\System32\mmcbase.dll
2017-09-20 16:28 - 2017-08-14 09:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll
2017-09-20 16:28 - 2017-08-14 09:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
2017-09-20 16:28 - 2017-08-14 09:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\System32\mmcshext.dll
2017-09-20 16:28 - 2017-08-14 09:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll
2017-09-20 16:28 - 2017-08-14 09:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\System32\cic.dll
2017-09-20 16:28 - 2017-08-13 13:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\System32\mmc.exe
2017-09-20 16:28 - 2017-08-13 13:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2017-09-20 16:28 - 2017-08-13 10:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2017-09-20 16:28 - 2017-08-13 09:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2017-09-20 16:28 - 2017-08-13 09:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2017-09-20 16:28 - 2017-08-13 09:06 - 000066560 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2017-09-20 16:28 - 2017-08-13 09:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2017-09-20 16:28 - 2017-08-13 09:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2017-09-20 16:28 - 2017-08-13 09:05 - 000088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2017-09-20 16:28 - 2017-08-13 09:05 - 000048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2017-09-20 16:28 - 2017-08-13 09:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2017-09-20 16:28 - 2017-08-13 08:56 - 000054784 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2017-09-20 16:28 - 2017-08-13 08:55 - 000034304 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2017-09-20 16:28 - 2017-08-13 08:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-09-20 16:28 - 2017-08-13 08:52 - 000615936 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2017-09-20 16:28 - 2017-08-13 08:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2017-09-20 16:28 - 2017-08-13 08:51 - 000144384 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2017-09-20 16:28 - 2017-08-13 08:51 - 000116224 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2017-09-20 16:28 - 2017-08-13 08:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2017-09-20 16:28 - 2017-08-13 08:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2017-09-20 16:28 - 2017-08-13 08:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-09-20 16:28 - 2017-08-13 08:41 - 000968704 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2017-09-20 16:28 - 2017-08-13 08:38 - 000489984 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2017-09-20 16:28 - 2017-08-13 08:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-09-20 16:28 - 2017-08-13 08:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-09-20 16:28 - 2017-08-13 08:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-09-20 16:28 - 2017-08-13 08:29 - 000087552 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2017-09-20 16:28 - 2017-08-13 08:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2017-09-20 16:28 - 2017-08-13 08:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-09-20 16:28 - 2017-08-13 08:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-09-20 16:28 - 2017-08-13 08:27 - 000107520 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2017-09-20 16:28 - 2017-08-13 08:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-09-20 16:28 - 2017-08-13 08:24 - 000199680 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2017-09-20 16:28 - 2017-08-13 08:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2017-09-20 16:28 - 2017-08-13 08:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-09-20 16:28 - 2017-08-13 08:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-09-20 16:28 - 2017-08-13 08:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2017-09-20 16:28 - 2017-08-13 08:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-09-20 16:28 - 2017-08-13 08:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2017-09-20 16:28 - 2017-08-13 08:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-09-20 16:28 - 2017-08-13 08:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-09-20 16:28 - 2017-08-13 08:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-09-20 16:28 - 2017-08-13 08:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2017-09-20 16:28 - 2017-08-13 08:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2017-09-20 16:28 - 2017-08-13 08:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2017-09-20 16:28 - 2017-08-13 08:02 - 001359360 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2017-09-20 16:28 - 2017-08-13 08:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2017-09-20 16:28 - 2017-08-13 08:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-09-20 16:28 - 2017-08-13 08:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-09-20 16:28 - 2017-08-13 08:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-09-20 16:28 - 2017-08-13 07:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-09-20 16:28 - 2017-08-13 07:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-09-20 16:28 - 2017-08-13 07:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-09-20 16:28 - 2017-08-13 07:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-09-20 16:28 - 2017-08-13 07:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-09-20 16:28 - 2017-08-13 07:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-09-20 16:28 - 2017-08-13 07:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-09-20 16:28 - 2017-08-13 07:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2017-09-20 16:28 - 2017-08-13 07:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2017-09-20 16:28 - 2017-08-13 07:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2017-09-20 16:28 - 2017-08-13 07:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-09-20 16:28 - 2017-08-13 07:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-09-20 16:28 - 2017-08-13 07:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-09-20 16:28 - 2017-08-10 22:42 - 000631176 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi
2017-09-20 16:28 - 2017-08-10 22:38 - 005547752 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2017-09-20 16:28 - 2017-08-10 22:38 - 000706792 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi
2017-09-20 16:28 - 2017-08-10 22:38 - 000154856 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2017-09-20 16:28 - 2017-08-10 22:38 - 000095464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2017-09-20 16:28 - 2017-08-10 22:36 - 001732864 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\System32\ole32.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 001212928 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\System32\rpcss.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\System32\ntprint.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000345600 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\System32\Wldap32.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000215552 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000210432 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000190464 _____ (Microsoft Corporation) C:\Windows\System32\rpchttp.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000135680 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000086528 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000063488 _____ (Microsoft Corporation) C:\Windows\System32\setbcdlocale.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000028672 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\System32\oleres.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\System32\nsisvc.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\System32\winnsi.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2017-09-20 16:28 - 2017-08-10 22:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\System32\nsi.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 001460736 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 001163264 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\System32\localspl.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000731648 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000690688 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000463872 _____ (Microsoft Corporation) C:\Windows\System32\certcli.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000419840 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000316928 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000312320 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\System32\inetpp.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000123904 _____ (Microsoft Corporation) C:\Windows\System32\bcrypt.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000059904 _____ (Microsoft Corporation) C:\Windows\System32\appidapi.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000044032 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000043520 _____ (Microsoft Corporation) C:\Windows\System32\cryptbase.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000034816 _____ (Microsoft Corporation) C:\Windows\System32\appidsvc.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\System32\inetppui.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\System32\comcat.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-09-20 16:28 - 2017-08-10 22:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-09-20 16:28 - 2017-08-10 22:21 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-09-20 16:28 - 2017-08-10 22:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\System32\ntprint.exe
2017-09-20 16:28 - 2017-08-10 22:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\System32\wpnpinst.exe
2017-09-20 16:28 - 2017-08-10 22:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 22:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\System32\netbtugc.exe
2017-09-20 16:28 - 2017-08-10 22:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2017-09-20 16:28 - 2017-08-10 22:07 - 000148480 _____ (Microsoft Corporation) C:\Windows\System32\appidpolicyconverter.exe
2017-09-20 16:28 - 2017-08-10 22:07 - 000062464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\appid.sys
2017-09-20 16:28 - 2017-08-10 22:07 - 000017920 _____ (Microsoft Corporation) C:\Windows\System32\appidcertstorecheck.exe
2017-09-20 16:28 - 2017-08-10 22:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe
2017-09-20 16:28 - 2017-08-10 22:03 - 000338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2017-09-20 16:28 - 2017-08-10 22:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2017-09-20 16:28 - 2017-08-10 22:02 - 000296960 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2017-09-20 16:28 - 2017-08-10 22:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2017-09-20 16:28 - 2017-08-10 22:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netbt.sys
2017-09-20 16:28 - 2017-08-10 22:00 - 000159744 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2017-09-20 16:28 - 2017-08-10 22:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-09-20 16:28 - 2017-08-10 21:59 - 000460800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv.sys
2017-09-20 16:28 - 2017-08-10 21:59 - 000405504 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys
2017-09-20 16:28 - 2017-08-10 21:59 - 000291328 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2017-09-20 16:28 - 2017-08-10 21:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys
2017-09-20 16:28 - 2017-08-10 21:59 - 000129536 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2017-09-20 16:28 - 2017-08-10 21:58 - 000112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2017-09-20 16:28 - 2017-08-10 21:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2017-09-20 16:28 - 2017-08-10 21:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\nsiproxy.sys
2017-09-20 16:28 - 2017-08-10 21:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-09-20 16:28 - 2017-08-10 21:56 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-09-20 16:28 - 2017-08-10 21:56 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-09-20 16:28 - 2017-08-10 21:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-09-20 16:28 - 2017-08-10 21:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-09-20 16:28 - 2017-08-10 21:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 21:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 21:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-09-20 16:28 - 2017-08-10 21:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-09-20 16:28 - 2017-07-07 07:29 - 001143296 _____ (Microsoft Corporation) C:\Windows\System32\DXPTaskRingtone.dll
2017-09-20 16:28 - 2017-07-07 07:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll
2017-09-05 16:26 - 2017-09-22 13:22 - 000000000 ____D C:\Users\STUDIO 1749 USER\AppData\Roaming\qBittorrent
2017-09-05 16:26 - 2017-09-05 16:26 - 000000000 ____D C:\Users\STUDIO 1749 USER\AppData\Local\qBittorrent
2017-09-05 16:25 - 2017-09-05 16:25 - 000000850 _____ C:\Users\Public\Desktop\qBittorrent.lnk
2017-09-05 16:25 - 2017-09-05 16:25 - 000000000 ____D C:\Program Files\qBittorrent
2017-09-05 16:24 - 2017-09-05 16:24 - 019759665 _____ (The qBittorrent project) C:\Users\STUDIO 1749 USER\Downloads\qbittorrent_3.3.15_x64_setup.exe
2017-09-04 17:40 - 2017-09-04 17:40 - 000039223 _____ C:\Users\STUDIO 1749 USER\Downloads\lakeland 2017-2018 Calendar Final Approved 3-16-17 (1).pdf
2017-09-03 18:23 - 2017-09-03 18:25 - 000192960 _____ (Malwarebytes) C:\Windows\System32\Drivers\MBAMChameleon.sys
2017-09-03 18:22 - 2017-09-22 21:09 - 000000000 _____ C:\Windows\System32\Drivers\mwac.sys
2017-09-03 18:22 - 2017-09-22 21:09 - 000000000 _____ C:\Windows\System32\Drivers\MBAMSwissArmy.sys
2017-09-03 18:22 - 2017-09-22 21:09 - 000000000 _____ C:\Windows\System32\Drivers\mbam.sys
2017-09-03 18:22 - 2017-09-19 14:47 - 000101824 _____ (Malwarebytes) C:\Windows\System32\Drivers\farflt.sys
2017-09-03 18:21 - 2017-09-03 18:21 - 000001869 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-09-03 18:21 - 2017-09-03 18:21 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-09-03 18:21 - 2017-09-03 18:21 - 000000000 ____D C:\Program Files\Malwarebytes
2017-09-03 18:21 - 2017-08-24 07:27 - 000077440 _____ C:\Windows\System32\Drivers\mbae64.sys
2017-09-03 18:19 - 2017-09-03 18:19 - 066347240 _____ (Malwarebytes ) C:\Users\STUDIO 1749 USER\Downloads\mb3-setup-consumer-3.2.2.2018.exe
2017-09-03 18:05 - 2017-09-03 18:05 - 000566128 _____ (Malwarebytes) C:\Users\STUDIO 1749 USER\Downloads\mbam-clean-2.3.0.1001.exe
2017-09-03 14:41 - 2017-09-03 14:41 - 000224816 _____ C:\Users\STUDIO 1749 USER\Downloads\cornucopia 350732099000.pdf
2017-09-03 14:32 - 2017-09-03 14:32 - 000422318 _____ C:\Users\STUDIO 1749 USER\Downloads\blaze tickets 350722099000.pdf
2017-09-03 14:24 - 2017-09-03 14:24 - 000105069 _____ C:\Users\STUDIO 1749 USER\Downloads\historic hudson valley 350715099000.pdf
2017-09-01 18:39 - 2017-09-01 18:39 - 000150425 _____ C:\Users\STUDIO 1749 USER\Downloads\whitaker garage door PARKER 680 QUOTE 8742.pdf
2017-09-01 18:38 - 2017-09-01 18:39 - 000151323 _____ C:\Users\STUDIO 1749 USER\Downloads\whitaker garage door PARKER 4050 QUOTE 8741.pdf
2017-09-01 04:00 - 2017-09-03 18:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-08-31 10:29 - 2017-08-31 10:29 - 000000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2017-08-31 07:54 - 2017-08-31 07:54 - 004422739 _____ C:\Users\STUDIO 1749 USER\Downloads\chris gee cookie monster.psd
2017-08-31 05:33 - 2017-08-31 05:33 - 000064125 _____ C:\Users\STUDIO 1749 USER\Downloads\Contract-LAUREN-FENNING-EASTCHESTER-HS-REUNION-Mulinos-at-Lake-Isle_original.pdf
2017-08-30 09:23 - 2017-08-30 09:23 - 000993632 _____ (Microsoft Corporation) C:\Windows\System32\msvcr120_clr0400.dll
2017-08-30 09:23 - 2017-08-30 09:23 - 000987840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2017-08-30 09:23 - 2017-08-30 09:23 - 000690008 _____ (Microsoft Corporation) C:\Windows\System32\msvcp120_clr0400.dll
2017-08-30 09:23 - 2017-08-30 09:23 - 000485576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2017-08-28 17:55 - 2017-08-28 17:55 - 000001915 _____ C:\Users\Public\Desktop\NordVPN.lnk
2017-08-28 17:54 - 2017-08-28 17:54 - 000000000 ____D C:\Program Files (x86)\NordVPN
2017-08-28 14:34 - 2017-08-28 14:34 - 000081181 _____ C:\Users\STUDIO 1749 USER\Desktop\mb-check-results.zip
2017-08-28 14:27 - 2017-08-28 14:32 - 000061072 _____ C:\Users\STUDIO 1749 USER\Downloads\Addition.txt
2017-08-28 14:24 - 2017-08-28 14:25 - 002326984 _____ (Malwarebytes Corporation) C:\Users\STUDIO 1749 USER\Downloads\mb-check-3.1.7.1002.exe
2017-08-28 14:21 - 2017-09-23 11:17 - 000000000 ____D C:\FRST
2017-08-28 14:21 - 2017-08-28 14:32 - 000085921 _____ C:\Users\STUDIO 1749 USER\Downloads\FRST.txt
2017-08-28 14:18 - 2017-08-28 14:19 - 002395648 _____ (Farbar) C:\Users\STUDIO 1749 USER\Downloads\FRST64.exe
2017-08-27 17:11 - 2017-08-27 17:11 - 000002174 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-23 03:49 - 2015-09-09 19:00 - 000000000 ____D C:\kmttg 2.0m
2017-09-23 03:45 - 2015-09-09 20:14 - 000001379 _____ C:\Users\STUDIO 1749 USER\kmttg_settings_v2
2017-09-23 00:00 - 2009-07-13 20:45 - 000014240 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-09-23 00:00 - 2009-07-13 20:45 - 000014240 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-09-22 16:16 - 2010-08-15 18:05 - 000003994 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{FC9B194F-565D-4416-A3E9-6F40D907323B}
2017-09-22 13:18 - 2012-10-03 11:07 - 000000000 ____D C:\Users\STUDIO 1749 USER\Downloads\torrents
2017-09-21 16:16 - 2013-07-18 17:59 - 000000000 ____D C:\Users\STUDIO 1749 USER\Downloads\tor
2017-09-20 16:48 - 2013-07-13 05:42 - 000000000 ____D C:\Windows\System32\MRT
2017-09-20 16:40 - 2010-08-18 17:01 - 138202976 ____C (Microsoft Corporation) C:\Windows\System32\MRT.exe
2017-09-20 16:31 - 2010-07-27 17:17 - 000776078 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-09-20 16:31 - 2009-07-13 21:13 - 000776078 _____ C:\Windows\System32\PerfStringBackup.INI
2017-09-20 16:31 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\inf
2017-09-19 22:00 - 2014-06-15 05:38 - 000000000 ____D C:\Users\STUDIO 1749 USER\AppData\Local\Adobe
2017-09-19 14:44 - 2009-07-13 21:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-18 03:54 - 2012-03-04 11:11 - 000000000 ____D C:\Users\STUDIO 1749 USER\AppData\Roaming\vlc
2017-09-14 11:29 - 2012-08-06 17:35 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-09-14 11:29 - 2012-08-06 17:35 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-09-14 11:29 - 2012-08-06 17:35 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-09-14 11:29 - 2011-12-03 17:24 - 000000000 ____D C:\Windows\System32\Macromed
2017-09-14 11:29 - 2010-07-19 00:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-09-03 18:12 - 2012-05-31 17:14 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-09-03 17:34 - 2010-12-13 19:21 - 000000000 ____D C:\Users\STUDIO 1749 USER\AppData\Roaming\uTorrent
2017-09-01 19:57 - 2016-11-23 20:37 - 000000000 ____D C:\Users\STUDIO 1749 USER\AppData\LocalLow\Mozilla
2017-08-31 10:34 - 2013-04-08 16:34 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-08-28 17:56 - 2017-08-12 08:00 - 000000000 ____D C:\Users\STUDIO 1749 USER\AppData\Roaming\NordVPN
2017-08-27 17:11 - 2013-11-06 14:24 - 000000000 ____D C:\Program Files (x86)\Google

Some files in TEMP:
====================
2013-06-21 17:58 - 2013-06-21 17:58 - 000903080 _____ (Oracle Corporation) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
2013-10-08 10:27 - 2013-10-08 10:27 - 000915368 _____ (Oracle Corporation) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
2013-12-19 09:06 - 2013-12-19 09:06 - 000921512 _____ (Oracle Corporation) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
2014-04-15 12:50 - 2014-04-15 12:50 - 000921512 _____ (Oracle Corporation) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
2014-07-14 11:01 - 2014-07-14 11:01 - 000918952 _____ (Oracle Corporation) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
2014-07-27 21:15 - 2014-07-27 21:15 - 000918440 _____ (Oracle Corporation) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
2015-02-13 04:50 - 2015-02-13 04:50 - 000641448 _____ (Oracle Corporation) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\jre-8u31-windows-au.exe
2015-09-09 19:02 - 2015-09-09 19:02 - 000585824 _____ (Oracle Corporation) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\jre-8u60-windows-au.exe
2013-11-01 17:55 - 2013-11-01 17:55 - 000009216 _____ () C:\Users\STUDIO 1749 USER\AppData\Local\Temp\obe5225w.dll
2015-06-28 10:26 - 2015-06-28 10:26 - 042038736 _____ (Paramount Software UK Ltd) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\reflectPatch.exe
2015-06-21 15:13 - 2015-06-21 15:13 - 000192512 _____ () C:\Users\STUDIO 1749 USER\AppData\Local\Temp\sfamcc00001.dll
2015-06-21 15:13 - 2015-06-21 15:13 - 000158720 _____ () C:\Users\STUDIO 1749 USER\AppData\Local\Temp\sfareca00001.dll
2015-02-10 09:56 - 2015-02-10 09:56 - 000105984 _____ () C:\Users\STUDIO 1749 USER\AppData\Local\Temp\sfextra.dll
2014-09-23 02:29 - 2014-09-23 02:29 - 001419856 _____ (BitTorrent Inc.) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\uttCF9A.tmp.exe
2014-08-30 17:47 - 2014-08-30 17:48 - 024743106 _____ () C:\Users\STUDIO 1749 USER\AppData\Local\Temp\vlc-2.1.5-win32.exe
2015-08-04 09:21 - 2015-08-04 09:21 - 028849904 _____ () C:\Users\STUDIO 1749 USER\AppData\Local\Temp\vlc-2.2.1-win32.exe
2012-08-16 01:34 - 2012-08-16 01:34 - 000455600 ____R (Macrovision Corporation) C:\Users\STUDIO 1749 USER\AppData\Local\Temp\_is5610.exe

==================== Known DLLs (Whitelisted) =========================


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2017-09-20 16:28] - [2017-08-10 22:35] - 000512000 _____ (Microsoft Corporation) 3F1A199859B4F3F8357B2A0AF5666A54

C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Association (Whitelisted) =============


==================== Restore Points =========================


==================== Memory info ===========================

Percentage of memory in use: 11%
Total physical RAM: 8052.54 MB
Available physical RAM: 7165.51 MB
Total Virtual: 8050.69 MB
Available Virtual: 7167.89 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:698.64 GB) (Free:6.91 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (OS from 1737) (Fixed) (Total:445.49 GB) (Free:29.91 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (RECOVERY) (Fixed) (Total:19.99 GB) (Free:14.82 GB) NTFS
Drive f: (GRMCULXFRER_EN_DVD) (CDROM) (Total:3 GB) (Free:0 GB) UDF
Drive g: (USB DISK) (Removable) (Total:7.46 GB) (Free:7.39 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 1326B6B0)
Partition 1: (Active) - (Size=698.6 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: B6649336)
Partition 1: (Not Active) - (Size=282 MB) - (Type=DE)
Partition 2: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=445.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 7.5 GB) (Disk ID: ADEF6293)
Partition 1: (Not Active) - (Size=7.5 GB) - (Type=07 NTFS)

LastRegBack: 2017-09-19 20:07

==================== End of FRST.txt ============================


  • 0

Advertisements


#2
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,668 posts
Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions! :)


A few items to fix

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Open notepad (Start =>All Programs => Accessories => Notepad).
Copy/Paste the contents of the code box below into Notepad.

S0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [0 2017-09-22] () <==== ATTENTION (zero byte File/Folder)
Emptytemp:
  • Click Format and ensure Wordwrap is unchecked.
  • Save as Fixlist.txt to your Desktop (Must be in this location)
  • Run FRST/FRST64 and press the Fix button just once and wait.
  • If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
  • The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.
Note: If the tool warns you about the version you're using being an outdated version please download and run the updated version.
  • 0

#3
chuck95

chuck95

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts

Thanks so much! I neglected to mention that I was using the command prompt through the windows recovery disk, so I put your fixlist onto my flash drive (not the desktop) and ran the fix. Now I'm back into Windows!

 

So here's the fixlog.txt

 

 

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 23-09-2017 02
Ran by SYSTEM (23-09-2017 16:27:52) Run:1
Running from g:\
Boot Mode: Recovery
==============================================
 
fixlist content:
*****************
S0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [0 2017-09-22] () <==== ATTENTION (zero byte File/Folder)
Emptytemp:
*****************
 
HKLM\System\ControlSet001\Services\MBAMSwissArmy => key removed successfully
MBAMSwissArmy => service removed successfully
Emptytemp: => Error: This directive works only outside recovery mode.
 
==== End of Fixlog 16:27:52 ====

  • 0

#4
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,668 posts
Sorry about that my directions should have said save to g:\

Any other issues ?
  • 0

#5
chuck95

chuck95

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts

So far so good! Thanks so much for your help. 
Do you have any idea what might have caused this? Anything I should do to keep it from happening again? Or is it just a fluke?
Thanks again.


  • 0

#6
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,668 posts
Hello,

I'm not sure Chuck. I believe it's currently under investigation.
  • 0

#7
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,668 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP