Jump to content

comp_noob

Members
  • Posts

    3
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Hi, Kevin Everything went smoothly, Fernando sent me an instruction to follow and the malware is scanning/ working well. Thanks a lot.
  2. Thanks Kevin, then I will access the Customer Support help desk to get help.
  3. I have a registered Malware premium that I previously downloaded, activated the license and was running. Then today the kids worked on their library summer reading and before shutting down the computer I opted to run the malware but nothing happens after I click the desktop icon. I decided to uninstall and download again the exe file, as soon as I hit the run an error message comes out as "runtime error". I have attached FRST.txt and the Addition.txt as per instructions int he help section, I appreciate any help in getting this fix done. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-06-2014Ran by Imran (administrator) on IMRAN on 18-06-2014 19:33:27Running from C:\Users\deser_000\DownloadsPlatform: Windows 8 (X64) OS Language: English (United States)Internet Explorer Version 10Boot Mode: Normal The only official download link for FRST:Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated.See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe(AMD) C:\Windows\System32\atieclxx.exe() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Windows\System32\msiexec.exe(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188040 2013-04-23] (Realtek Semiconductor)HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-03] (Adobe Systems Incorporated)HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-07-08] (ASUSTek Computer Inc.)HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkeyHKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-04-10] (Advanced Micro Devices, Inc.)HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)HKU\S-1-5-21-3374758749-3495921600-8313889-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-04-10] (AMD) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus13.msn.comHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.comSearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JSSearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JSSearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JSSearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JSSearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox:========FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) Chrome: =======CHR Extension: (Google Docs) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-01]CHR Extension: (Google Drive) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-01]CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-06-01]CHR Extension: (YouTube) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-01]CHR Extension: (Google Search) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-01]CHR Extension: (Google Wallet) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-01]CHR Extension: (Gmail) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-01] ==================== Services (Whitelisted) ================= R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed]R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-04-25] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98744 2013-04-23] (Advanced Micro Devices)R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek ) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-18 19:33 - 2014-06-18 19:33 - 00008859 _____ () C:\Users\deser_000\Downloads\FRST.txt2014-06-18 19:33 - 2014-06-18 19:33 - 00000000 ____D () C:\FRST2014-06-18 19:32 - 2014-06-18 19:32 - 02082304 _____ (Farbar) C:\Users\deser_000\Downloads\FRST64.exe2014-06-18 19:22 - 2014-06-18 19:22 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\deser_000\Downloads\mbam-setup-2.0.2.1012.exe2014-06-18 19:13 - 2014-06-18 19:13 - 00000564 _____ () C:\WINDOWS\PFRO.log2014-06-18 19:12 - 2014-06-18 19:31 - 00371996 _____ () C:\WINDOWS\WindowsUpdate.log2014-06-18 18:59 - 2014-06-18 18:59 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk2014-06-18 18:59 - 2014-06-18 18:59 - 00000000 ____D () C:\Program Files\CCleaner2014-06-18 18:58 - 2014-06-18 18:58 - 04748896 _____ (Piriform Ltd) C:\Users\deser_000\Downloads\ccsetup414.exe2014-06-18 18:10 - 2014-05-30 23:16 - 00703992 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe2014-06-18 18:10 - 2014-05-30 23:16 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl2014-06-18 17:58 - 2013-08-09 23:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll2014-06-18 17:58 - 2013-08-09 23:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll2014-06-18 17:58 - 2013-08-09 21:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll2014-06-18 17:58 - 2013-08-03 00:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll2014-06-18 17:58 - 2013-08-03 00:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll2014-06-18 17:58 - 2013-08-03 00:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx2014-06-18 17:58 - 2013-08-02 23:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx2014-06-18 17:58 - 2013-08-02 23:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll2014-06-18 17:58 - 2013-08-02 23:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll2014-06-18 17:58 - 2013-08-02 00:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll2014-06-18 17:58 - 2013-08-02 00:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll2014-06-18 17:58 - 2013-08-01 23:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll2014-06-18 17:58 - 2013-08-01 23:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll2014-06-18 17:58 - 2013-07-24 17:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll2014-06-18 17:58 - 2013-07-24 17:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll2014-06-18 17:58 - 2013-04-11 00:40 - 06987528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe2014-06-18 17:58 - 2013-04-09 17:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll2014-06-18 17:58 - 2013-04-09 16:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll2014-06-18 17:58 - 2013-03-02 02:23 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncInfo.dll2014-06-18 17:57 - 2014-04-19 03:39 - 00628024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe2014-06-18 17:57 - 2014-04-19 02:45 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll2014-06-18 17:57 - 2013-08-06 23:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll2014-06-18 17:56 - 2014-04-19 02:45 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll2014-06-18 17:56 - 2014-04-19 00:57 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll2014-06-18 17:56 - 2014-04-19 00:57 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll2014-06-18 17:56 - 2014-01-30 18:48 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll2014-06-18 17:56 - 2013-08-15 23:21 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll2014-06-14 12:36 - 2014-06-14 12:37 - 00000000 ____D () C:\WINDOWS\system32\MRT2014-06-14 12:36 - 2014-06-01 17:17 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe2014-06-14 12:33 - 2013-10-01 17:37 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll2014-06-14 12:33 - 2013-10-01 17:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll2014-06-14 12:33 - 2013-08-02 00:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll2014-06-14 12:33 - 2013-08-01 23:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll2014-06-14 12:33 - 2013-03-02 04:39 - 00069864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys2014-06-14 12:33 - 2013-03-01 20:43 - 02146304 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll2014-06-13 20:37 - 2014-05-23 20:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe2014-06-13 20:37 - 2014-05-23 20:47 - 02239488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll2014-06-13 20:37 - 2014-05-23 20:47 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll2014-06-13 20:37 - 2014-05-23 20:47 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll2014-06-13 20:37 - 2014-05-23 20:47 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll2014-06-13 20:37 - 2014-05-23 20:46 - 19290112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll2014-06-13 20:37 - 2014-05-23 20:46 - 15368704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll2014-06-13 20:37 - 2014-05-23 20:46 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll2014-06-13 20:37 - 2014-05-23 20:46 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll2014-06-13 20:37 - 2014-05-23 20:46 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll2014-06-13 20:37 - 2014-05-23 20:46 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll2014-06-13 20:37 - 2014-05-23 20:46 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll2014-06-13 20:37 - 2014-05-23 20:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll2014-06-13 20:37 - 2014-05-23 20:46 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll2014-06-13 20:37 - 2014-05-23 20:46 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll2014-06-13 20:37 - 2014-05-23 20:45 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl2014-06-13 20:37 - 2014-05-23 20:45 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll2014-06-13 20:37 - 2014-05-23 20:45 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll2014-06-13 20:37 - 2014-05-23 19:26 - 01766400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll2014-06-13 20:37 - 2014-05-23 19:26 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll2014-06-13 20:37 - 2014-05-23 19:26 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll2014-06-13 20:37 - 2014-05-23 19:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll2014-06-13 20:37 - 2014-05-23 19:26 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll2014-06-13 20:37 - 2014-05-23 19:25 - 13731328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll2014-06-13 20:37 - 2014-05-23 19:25 - 01440768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl2014-06-13 20:37 - 2014-05-23 19:25 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll2014-06-13 20:37 - 2014-05-23 19:25 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll2014-06-13 20:37 - 2014-05-23 19:25 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll2014-06-13 20:37 - 2014-05-23 19:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll2014-06-13 20:37 - 2014-05-23 19:25 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll2014-06-13 20:37 - 2014-05-23 19:25 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll2014-06-13 20:37 - 2014-05-23 19:09 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb2014-06-13 20:37 - 2014-05-23 19:03 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb2014-06-13 20:37 - 2014-05-23 16:37 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll2014-06-13 20:37 - 2014-05-02 23:47 - 03246592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll2014-06-13 20:37 - 2014-05-02 21:34 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll2014-06-13 20:37 - 2014-04-29 16:32 - 01301504 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll2014-06-13 20:37 - 2014-04-29 16:22 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll2014-06-13 20:37 - 2014-04-03 05:19 - 00328024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys2014-06-13 20:37 - 2014-04-02 21:44 - 00619008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys2014-06-13 20:37 - 2014-03-31 16:08 - 00387268 _____ () C:\WINDOWS\system32\ApnDatabase.xml2014-06-13 20:37 - 2014-03-24 17:42 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe2014-06-13 20:37 - 2014-03-24 16:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe2014-06-13 20:36 - 2014-05-23 20:46 - 03958784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll2014-06-13 20:36 - 2014-05-23 20:46 - 02650112 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll2014-06-13 20:36 - 2014-05-23 19:26 - 14365696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll2014-06-13 20:36 - 2014-05-23 19:26 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll2014-06-13 20:36 - 2014-05-23 19:25 - 02862080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll2014-06-13 20:36 - 2014-05-23 19:25 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll2014-06-13 20:36 - 2014-05-23 19:25 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll2014-06-13 20:35 - 2014-03-06 18:47 - 01419264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll2014-06-13 20:35 - 2014-03-06 18:08 - 01845760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll2014-06-13 20:35 - 2014-01-19 01:33 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe2014-06-13 20:34 - 2014-04-03 05:22 - 02233176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys2014-06-13 20:34 - 2013-03-02 03:59 - 00411880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS2014-06-01 17:45 - 2013-10-31 23:38 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll2014-06-01 17:45 - 2013-10-31 21:49 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll2014-06-01 16:40 - 2014-06-01 16:40 - 00000000 ____D () C:\ProgramData\Malwarebytes2014-06-01 16:34 - 2014-06-14 13:40 - 00002190 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2014-06-01 16:34 - 2014-06-01 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome2014-06-01 16:33 - 2014-06-18 19:23 - 00000904 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job2014-06-01 16:33 - 2014-06-18 18:38 - 00000908 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job2014-06-01 16:33 - 2014-06-01 16:34 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Google2014-06-01 16:33 - 2014-06-01 16:34 - 00000000 ____D () C:\Program Files (x86)\Google2014-06-01 16:33 - 2014-06-01 16:33 - 00003880 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA2014-06-01 16:33 - 2014-06-01 16:33 - 00003644 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore2014-06-01 16:33 - 2014-03-01 03:47 - 01258496 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll2014-06-01 16:33 - 2014-03-01 03:47 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll2014-06-01 16:33 - 2014-03-01 02:07 - 01075200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll2014-06-01 16:33 - 2014-03-01 00:59 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll2014-06-01 16:33 - 2014-02-26 17:40 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll2014-06-01 16:33 - 2014-02-26 17:21 - 00668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll2014-06-01 16:33 - 2014-02-26 17:18 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys2014-06-01 16:33 - 2014-02-26 17:18 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys2014-06-01 16:33 - 2014-02-26 17:18 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys2014-06-01 16:33 - 2014-02-14 22:15 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys2014-06-01 16:33 - 2013-11-25 17:17 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys2014-06-01 16:33 - 2013-06-28 21:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys2014-06-01 16:33 - 2013-05-03 22:48 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys2014-06-01 16:32 - 2014-06-01 16:33 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Deployment2014-06-01 16:32 - 2014-06-01 16:32 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Apps\2.02014-06-01 16:19 - 2014-06-01 17:07 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3374758749-3495921600-8313889-10012014-06-01 16:18 - 2014-06-01 16:18 - 00000000 _____ () C:\WINDOWS\SysWOW64\Drivers\1043_ASUSTeK_M11BB.alu2014-06-01 16:16 - 2014-06-01 16:16 - 00000000 ____D () C:\Program Files\ASUS2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\ATI2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\Users\deser_000\AppData\Local\ATI2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\ProgramData\ATI2014-06-01 16:14 - 2014-06-01 16:14 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD2014-06-01 16:14 - 2014-06-01 16:14 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\ASUS WebStorage2014-06-01 16:13 - 2014-06-01 16:13 - 00001433 _____ () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk2014-06-01 16:12 - 2014-06-01 16:12 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\Macromedia2014-06-01 16:12 - 2014-06-01 16:12 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\Adobe2014-06-01 16:11 - 2014-06-01 17:01 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Packages2014-06-01 16:11 - 2014-06-01 16:11 - 00000000 ____D () C:\Users\deser_000\AppData\Local\VirtualStore2014-06-01 16:09 - 2014-06-01 16:13 - 00000000 ____D () C:\Users\deser_0002014-06-01 16:09 - 2014-06-01 16:09 - 00000020 ___SH () C:\Users\deser_000\ntuser.ini2014-06-01 16:09 - 2013-07-08 04:52 - 00002102 _____ () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk2014-06-01 16:09 - 2013-04-25 04:45 - 00000000 ___RD () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools2014-06-01 16:09 - 2012-07-26 02:13 - 00000000 ___RD () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories2014-06-01 16:09 - 2012-07-26 02:13 - 00000000 ___RD () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility2014-06-01 16:09 - 2012-07-26 02:13 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance2014-06-01 14:21 - 2014-06-01 14:21 - 00000000 __SHD () C:\Recovery2014-06-01 14:21 - 2014-06-01 14:21 - 00000000 _____ () C:\Recovery.txt ==================== One Month Modified Files and Folders ======= 2014-06-18 19:33 - 2014-06-18 19:33 - 00008859 _____ () C:\Users\deser_000\Downloads\FRST.txt2014-06-18 19:33 - 2014-06-18 19:33 - 00000000 ____D () C:\FRST2014-06-18 19:32 - 2014-06-18 19:32 - 02082304 _____ (Farbar) C:\Users\deser_000\Downloads\FRST64.exe2014-06-18 19:31 - 2014-06-18 19:12 - 00371996 _____ () C:\WINDOWS\WindowsUpdate.log2014-06-18 19:29 - 2012-07-26 01:59 - 00000000 ____D () C:\WINDOWS\CbsTemp2014-06-18 19:27 - 2013-04-25 08:30 - 00449178 _____ () C:\WINDOWS\system32\prfh0404.dat2014-06-18 19:27 - 2013-04-25 08:30 - 00136372 _____ () C:\WINDOWS\system32\prfc0404.dat2014-06-18 19:27 - 2013-04-25 08:23 - 00434858 _____ () C:\WINDOWS\system32\prfh0804.dat2014-06-18 19:27 - 2013-04-25 08:23 - 00136372 _____ () C:\WINDOWS\system32\prfc0804.dat2014-06-18 19:27 - 2013-04-25 08:17 - 00788710 _____ () C:\WINDOWS\system32\prfh0816.dat2014-06-18 19:27 - 2013-04-25 08:17 - 00163794 _____ () C:\WINDOWS\system32\prfc0816.dat2014-06-18 19:27 - 2013-04-25 08:12 - 00797566 _____ () C:\WINDOWS\system32\perfh013.dat2014-06-18 19:27 - 2013-04-25 08:12 - 00162406 _____ () C:\WINDOWS\system32\perfc013.dat2014-06-18 19:27 - 2013-04-25 08:05 - 00792992 _____ () C:\WINDOWS\system32\perfh010.dat2014-06-18 19:27 - 2013-04-25 08:05 - 00156428 _____ () C:\WINDOWS\system32\perfc010.dat2014-06-18 19:27 - 2013-04-25 07:59 - 00802038 _____ () C:\WINDOWS\system32\perfh00C.dat2014-06-18 19:27 - 2013-04-25 07:59 - 00158904 _____ () C:\WINDOWS\system32\perfc00C.dat2014-06-18 19:27 - 2013-04-25 07:52 - 00799962 _____ () C:\WINDOWS\system32\perfh00A.dat2014-06-18 19:27 - 2013-04-25 07:52 - 00166174 _____ () C:\WINDOWS\system32\perfc00A.dat2014-06-18 19:27 - 2013-04-25 07:42 - 00553808 _____ () C:\WINDOWS\system32\perfh008.dat2014-06-18 19:27 - 2013-04-25 07:42 - 00092678 _____ () C:\WINDOWS\system32\perfc008.dat2014-06-18 19:27 - 2013-04-25 07:36 - 00753816 _____ () C:\WINDOWS\system32\perfh007.dat2014-06-18 19:27 - 2013-04-25 07:36 - 00159180 _____ () C:\WINDOWS\system32\perfc007.dat2014-06-18 19:27 - 2012-07-26 01:28 - 08207714 _____ () C:\WINDOWS\system32\PerfStringBackup.INI2014-06-18 19:23 - 2014-06-01 16:33 - 00000904 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job2014-06-18 19:23 - 2012-07-26 01:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT2014-06-18 19:22 - 2014-06-18 19:22 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\deser_000\Downloads\mbam-setup-2.0.2.1012.exe2014-06-18 19:13 - 2014-06-18 19:13 - 00000564 _____ () C:\WINDOWS\PFRO.log2014-06-18 19:13 - 2013-07-08 04:42 - 00000000 ____D () C:\Program Files\mcafee2014-06-18 19:13 - 2013-07-08 04:42 - 00000000 ____D () C:\Program Files\Common Files\mcafee2014-06-18 19:13 - 2013-07-08 04:41 - 00000000 ____D () C:\ProgramData\McAfee2014-06-18 19:12 - 2012-07-26 02:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP2014-06-18 19:00 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\system32\sru2014-06-18 18:59 - 2014-06-18 18:59 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk2014-06-18 18:59 - 2014-06-18 18:59 - 00000000 ____D () C:\Program Files\CCleaner2014-06-18 18:58 - 2014-06-18 18:58 - 04748896 _____ (Piriform Ltd) C:\Users\deser_000\Downloads\ccsetup414.exe2014-06-18 18:38 - 2014-06-01 16:33 - 00000908 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job2014-06-18 18:23 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent2014-06-18 18:10 - 2012-07-25 23:37 - 00000000 ____D () C:\WINDOWS\servicing2014-06-18 18:09 - 2012-07-25 23:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM2014-06-18 18:08 - 2012-07-25 23:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI2014-06-18 18:07 - 2012-07-26 02:12 - 00000000 ___RD () C:\WINDOWS\ToastData2014-06-18 18:07 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\WinStore2014-06-18 18:06 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\en-GB2014-06-18 18:06 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\system32\en-GB2014-06-18 18:05 - 2012-07-25 23:38 - 00000000 ____D () C:\WINDOWS\system32\oobe2014-06-14 13:40 - 2014-06-01 16:34 - 00002190 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2014-06-14 12:37 - 2014-06-14 12:36 - 00000000 ____D () C:\WINDOWS\system32\MRT2014-06-01 17:27 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\rescache2014-06-01 17:17 - 2014-06-14 12:36 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe2014-06-01 17:07 - 2014-06-01 16:19 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3374758749-3495921600-8313889-10012014-06-01 17:01 - 2014-06-01 16:11 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Packages2014-06-01 16:40 - 2014-06-01 16:40 - 00000000 ____D () C:\ProgramData\Malwarebytes2014-06-01 16:34 - 2014-06-01 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome2014-06-01 16:34 - 2014-06-01 16:33 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Google2014-06-01 16:34 - 2014-06-01 16:33 - 00000000 ____D () C:\Program Files (x86)\Google2014-06-01 16:33 - 2014-06-01 16:33 - 00003880 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA2014-06-01 16:33 - 2014-06-01 16:33 - 00003644 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore2014-06-01 16:33 - 2014-06-01 16:32 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Deployment2014-06-01 16:32 - 2014-06-01 16:32 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Apps\2.02014-06-01 16:26 - 2013-07-08 03:17 - 00353320 _____ () C:\WINDOWS\system32\FNTCACHE.DAT2014-06-01 16:18 - 2014-06-01 16:18 - 00000000 _____ () C:\WINDOWS\SysWOW64\Drivers\1043_ASUSTeK_M11BB.alu2014-06-01 16:16 - 2014-06-01 16:16 - 00000000 ____D () C:\Program Files\ASUS2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\ATI2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\Users\deser_000\AppData\Local\ATI2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\ProgramData\ATI2014-06-01 16:14 - 2014-06-01 16:14 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD2014-06-01 16:14 - 2014-06-01 16:14 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\ASUS WebStorage2014-06-01 16:13 - 2014-06-01 16:13 - 00001433 _____ () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk2014-06-01 16:13 - 2014-06-01 16:09 - 00000000 ____D () C:\Users\deser_0002014-06-01 16:13 - 2013-07-08 04:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\OEM2014-06-01 16:12 - 2014-06-01 16:12 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\Macromedia2014-06-01 16:12 - 2014-06-01 16:12 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\Adobe2014-06-01 16:11 - 2014-06-01 16:11 - 00000000 ____D () C:\Users\deser_000\AppData\Local\VirtualStore2014-06-01 16:11 - 2012-07-26 02:12 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel2014-06-01 16:09 - 2014-06-01 16:09 - 00000020 ___SH () C:\Users\deser_000\ntuser.ini2014-06-01 14:22 - 2013-07-08 04:16 - 00000000 ____D () C:\WINDOWS\Panther2014-06-01 14:21 - 2014-06-01 14:21 - 00000000 __SHD () C:\Recovery2014-06-01 14:21 - 2014-06-01 14:21 - 00000000 _____ () C:\Recovery.txt2014-06-01 14:21 - 2012-07-26 02:13 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template2014-05-30 23:16 - 2014-06-18 18:10 - 00703992 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe2014-05-30 23:16 - 2014-06-18 18:10 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl2014-05-23 20:48 - 2014-06-13 20:37 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe2014-05-23 20:47 - 2014-06-13 20:37 - 02239488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll2014-05-23 20:47 - 2014-06-13 20:37 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll2014-05-23 20:47 - 2014-06-13 20:37 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll2014-05-23 20:47 - 2014-06-13 20:37 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll2014-05-23 20:46 - 2014-06-13 20:37 - 19290112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll2014-05-23 20:46 - 2014-06-13 20:37 - 15368704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll2014-05-23 20:46 - 2014-06-13 20:37 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll2014-05-23 20:46 - 2014-06-13 20:37 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll2014-05-23 20:46 - 2014-06-13 20:37 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll2014-05-23 20:46 - 2014-06-13 20:37 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll2014-05-23 20:46 - 2014-06-13 20:37 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll2014-05-23 20:46 - 2014-06-13 20:37 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll2014-05-23 20:46 - 2014-06-13 20:37 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll2014-05-23 20:46 - 2014-06-13 20:37 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll2014-05-23 20:46 - 2014-06-13 20:36 - 03958784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll2014-05-23 20:46 - 2014-06-13 20:36 - 02650112 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll2014-05-23 20:45 - 2014-06-13 20:37 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl2014-05-23 20:45 - 2014-06-13 20:37 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll2014-05-23 20:45 - 2014-06-13 20:37 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll2014-05-23 19:26 - 2014-06-13 20:37 - 01766400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll2014-05-23 19:26 - 2014-06-13 20:37 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll2014-05-23 19:26 - 2014-06-13 20:37 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll2014-05-23 19:26 - 2014-06-13 20:37 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll2014-05-23 19:26 - 2014-06-13 20:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll2014-05-23 19:26 - 2014-06-13 20:36 - 14365696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll2014-05-23 19:26 - 2014-06-13 20:36 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll2014-05-23 19:25 - 2014-06-13 20:37 - 13731328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll2014-05-23 19:25 - 2014-06-13 20:37 - 01440768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl2014-05-23 19:25 - 2014-06-13 20:37 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll2014-05-23 19:25 - 2014-06-13 20:37 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll2014-05-23 19:25 - 2014-06-13 20:37 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll2014-05-23 19:25 - 2014-06-13 20:37 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll2014-05-23 19:25 - 2014-06-13 20:37 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll2014-05-23 19:25 - 2014-06-13 20:37 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll2014-05-23 19:25 - 2014-06-13 20:36 - 02862080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll2014-05-23 19:25 - 2014-06-13 20:36 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll2014-05-23 19:25 - 2014-06-13 20:36 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll2014-05-23 19:09 - 2014-06-13 20:37 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb2014-05-23 19:03 - 2014-06-13 20:37 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb2014-05-23 16:37 - 2014-06-13 20:37 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-14 12:27 ==================== End Of Log ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-06-2014Ran by Imran at 2014-06-18 19:34:05Running from C:\Users\deser_000\DownloadsBoot Mode: Normal========================================================== ==================== Security Center ======================== AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.01.05 - ASUSTeK Computer Inc.)AMD Accelerated Video Transcoding (Version: 12.10.100.30409 - Advanced Micro Devices, Inc.) HiddenAMD Catalyst Install Manager (HKLM\...\{377C9C44-398B-6CBD-9138-F6B4AB951839}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)AMD VISION Engine Control Center (x32 Version: 2013.0409.2219.38230 - Advanced Micro Devices, Inc.) HiddenASUS Easy Update 2 (HKLM-x32\...\{E7AA854E-6756-424E-84C2-4E47D5729AFF}) (Version: 3.00.06 - ASUSTeK Computer Inc.)ASUS Music Maker (HKLM-x32\...\MAGIX_{AB515018-7F9D-4047-B0C0-F26BAC30F3E1}) (Version: 18.0.3.3 - MAGIX AG)ASUS Music Maker (Version: 18.0.3.3 - MAGIX AG) HiddenASUS MX Suite (HKLM-x32\...\MAGIX_{CFA9C800-9B0B-42E3-92E7-08B5AF2E192E}) (Version: 1.13.0.121 - MAGIX AG)ASUS MX Suite (Version: 1.13.0.121 - MAGIX AG) HiddenASUS Video easy (HKLM-x32\...\MAGIX_{E3185090-8796-46FB-A27F-6C844F106DAC}) (Version: 4.0.1.90 - MAGIX AG)ASUS Video easy (Version: 4.0.1.90 - MAGIX AG) HiddenASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.18.159 - ASUS Cloud Corporation)ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4127.52 - CyberLink Corp.)ASUSDVD (x32 Version: 10.0.4127.52 - CyberLink Corp.) HiddenAsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK)Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) HiddenCatalyst Control Center InstallProxy (x32 Version: 2013.0409.2219.38230 - Advanced Micro Devices, Inc.) HiddenCatalyst Control Center Localization All (x32 Version: 2013.0409.2219.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Chinese Standard (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Chinese Traditional (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Czech (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Danish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Dutch (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help English (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Finnish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help French (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help German (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Greek (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Hungarian (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Italian (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Japanese (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Korean (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Norwegian (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Polish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Portuguese (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Russian (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Spanish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Swedish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Thai (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) HiddenCCC Help Turkish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hiddenccc-utility64 (Version: 2013.0409.2219.38230 - Advanced Micro Devices, Inc.) HiddenCCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) HiddeneManual (HKLM-x32\...\{0C84E634-EB68-4A54-B21E-A05EC87A4CC5}) (Version: 1.00.06 - ASUSTeK Computer Inc.)Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenGaleria de Fotografias (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenGalería de fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenGalerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenGoogle Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) HiddenHydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) HiddenMicrosoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) HiddenMicrosoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenMSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) HiddenMSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) HiddenMSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) HiddenMSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)OEM Application Profile (HKLM-x32\...\{769E695A-F93F-803E-3763-9A00A0E38786}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenPhoto Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenRaccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenRalink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.40 - Ralink)Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.10.1226.2012 - Realtek)Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6890 - Realtek Semiconductor Corp.)Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)Why ASUS PC (HKLM-x32\...\{5648F9D9-299E-408C-AC1F-59DC75894A1F}) (Version: 1.00.02 - ASUSTeK Computer Inc.)Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live 程式集 (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenWindows Live 软件包 (x32 Version: 16.4.3505.0912 - Microsoft Corporation) HiddenΣυλλογή φωτογραφιών (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden影像中心 (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden照片库 (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 01-06-2014 23:17:20 Language Pack Removal14-06-2014 18:27:26 Windows Modules Installer18-06-2014 23:44:12 Windows Update ==================== Hosts content: ========================== 2012-07-25 23:26 - 2012-07-25 23:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0DAEBF49-17B1-4CDB-9E6F-F7754206186E} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)Task: {0E73362F-0F97-4B99-AF8D-49B2342DE896} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-06-01] (Microsoft Corporation)Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTaskTask: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsListTask: {9ADBBA26-9754-465C-B9F2-A42FDA0D88E9} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2012-09-27] ()Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensingTask: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryStateTask: {D0D32384-04C8-4FCC-B85D-D3D7BFF7F69A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-01] (Google Inc.)Task: {D0DD818A-DF5F-420D-99A0-FE95FA4DD33B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-01] (Google Inc.)Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTaskTask: {EF5A316F-7C15-43D2-AC4C-BC271A3F7B9A} - System32\Tasks\ASUS\ASUS Easy Update 2 => C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [2013-04-01] (ASUSTeK Computer Inc.)Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-07-08 04:35 - 2012-06-01 03:42 - 00920736 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe2012-12-19 00:10 - 2012-12-19 00:10 - 00072192 _____ () C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe2013-02-12 17:05 - 2013-02-12 17:05 - 00430080 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingNet4.dll2013-02-12 17:05 - 2013-02-12 17:05 - 00032768 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResourcesNet4.dll2013-07-08 04:35 - 2014-06-18 19:23 - 00026112 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll2013-07-08 04:35 - 2010-06-28 20:58 - 00104448 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll2014-06-14 13:40 - 2014-06-05 07:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll2014-06-14 13:40 - 2014-06-05 07:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll2014-06-14 13:40 - 2014-06-05 07:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll2014-06-14 13:40 - 2014-06-05 07:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll2014-06-14 13:40 - 2014-06-05 07:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors:==================Error: (06/18/2014 07:20:39 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x880Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3Faulting package full name: mbam.exe4Faulting package-relative application ID: mbam.exe5 Error: (06/18/2014 07:20:26 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0xdc8Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3Faulting package full name: mbam.exe4Faulting package-relative application ID: mbam.exe5 Error: (06/18/2014 06:57:55 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x1098Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3Faulting package full name: mbam.exe4Faulting package-relative application ID: mbam.exe5 Error: (06/18/2014 06:55:12 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x13a0Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3Faulting package full name: mbam.exe4Faulting package-relative application ID: mbam.exe5 Error: (06/18/2014 06:52:27 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x12a8Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3Faulting package full name: mbam.exe4Faulting package-relative application ID: mbam.exe5 Error: (06/18/2014 06:51:32 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x1214Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3Faulting package full name: mbam.exe4Faulting package-relative application ID: mbam.exe5 Error: (06/18/2014 06:51:11 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0xf04Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3Faulting package full name: mbam.exe4Faulting package-relative application ID: mbam.exe5 Error: (06/18/2014 06:50:47 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x1314Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3Faulting package full name: mbam.exe4Faulting package-relative application ID: mbam.exe5 Error: (06/18/2014 06:50:34 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x37cFaulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3Faulting package full name: mbam.exe4Faulting package-relative application ID: mbam.exe5 Error: (06/18/2014 06:16:22 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: delegate_execute.exe, version: 35.0.1916.153, time stamp: 0x538faf86Faulting module name: delegate_execute.exe, version: 35.0.1916.153, time stamp: 0x538faf86Exception code: 0xc0000005Fault offset: 0x000461ccFaulting process id: 0x10e8Faulting application start time: 0xdelegate_execute.exe0Faulting application path: delegate_execute.exe1Faulting module path: delegate_execute.exe2Report Id: delegate_execute.exe3Faulting package full name: delegate_execute.exe4Faulting package-relative application ID: delegate_execute.exe5 System errors:=============Error: (06/18/2014 07:11:38 PM) (Source: DCOM) (EventID: 10010) (User: Imran)Description: {209500FC-6B45-4693-8871-6296C4843751} Error: (06/18/2014 07:11:08 PM) (Source: DCOM) (EventID: 10010) (User: Imran)Description: {209500FC-6B45-4693-8871-6296C4843751} Error: (06/18/2014 06:56:39 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)Description: {209500FC-6B45-4693-8871-6296C4843751} Error: (06/18/2014 06:13:05 PM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The MBAMService service terminated unexpectedly. It has done this 1 time(s). Error: (06/18/2014 06:12:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The MBAMScheduler service failed to start due to the following error: %%1053 Error: (06/18/2014 06:12:37 PM) (Source: Service Control Manager) (EventID: 7009) (User: )Description: A timeout was reached (30000 milliseconds) while waiting for the MBAMScheduler service to connect. Error: (06/18/2014 06:10:10 PM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)Description: A corruption was discovered in the file system structure on volume C:. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x3000000048e13. The name of the file is "\Windows\Logs\CBS\CBS.log". Error: (06/18/2014 06:10:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The MBAMService service terminated unexpectedly. It has done this 1 time(s). Error: (06/18/2014 06:09:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The MBAMScheduler service failed to start due to the following error: %%1053 Error: (06/18/2014 06:09:35 PM) (Source: Service Control Manager) (EventID: 7009) (User: )Description: A timeout was reached (30000 milliseconds) while waiting for the MBAMScheduler service to connect. Microsoft Office Sessions:=========================Error: (06/18/2014 07:20:39 PM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd88001cf8b5cae4762dfC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllec01d4f6-f74f-11e3-be78-d850e6c23359 Error: (06/18/2014 07:20:26 PM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fddc801cf8b5ca6093382C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dlle40bcb9f-f74f-11e3-be78-d850e6c23359 Error: (06/18/2014 06:57:55 PM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd109801cf8b5980bb23c6C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllbeea3caa-f74c-11e3-be77-d850e6c23359 Error: (06/18/2014 06:55:12 PM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd13a001cf8b591fbad9bcC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll5e178afc-f74c-11e3-be77-d850e6c23359 Error: (06/18/2014 06:52:27 PM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd12a801cf8b58bde99165C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllfbab8aae-f74b-11e3-be77-d850e6c23359 Error: (06/18/2014 06:51:32 PM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd121401cf8b589d31aa62C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dlldaf13e8a-f74b-11e3-be77-d850e6c23359 Error: (06/18/2014 06:51:11 PM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdf0401cf8b5890280562C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllcde9fea4-f74b-11e3-be77-d850e6c23359 Error: (06/18/2014 06:50:47 PM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd131401cf8b58823fa87aC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllc0040157-f74b-11e3-be77-d850e6c23359 Error: (06/18/2014 06:50:34 PM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd37c01cf8b587a42fc3bC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllb8472d59-f74b-11e3-be77-d850e6c23359 Error: (06/18/2014 06:16:22 PM) (Source: Application Error) (EventID: 1000) (User: )Description: delegate_execute.exe35.0.1916.153538faf86delegate_execute.exe35.0.1916.153538faf86c0000005000461cc10e801cf8b53b227f8b3C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\delegate_execute.exeC:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\delegate_execute.exef153c1ee-f746-11e3-be77-d850e6c23359 ==================== Memory info =========================== Percentage of memory in use: 22%Total physical RAM: 11464.29 MBAvailable physical RAM: 8907.13 MBTotal Pagefile: 13128.29 MBAvailable Pagefile: 10403.76 MBTotal Virtual: 8192 MBAvailable Virtual: 8191.77 MB ==================== Drives ================================ Drive c: (Windows) (Fixed) (Total:149.66 GB) (Free:101.06 GB) NTFSDrive d: (Data) (Fixed) (Total:761.33 GB) (Free:761.14 GB) NTFS ==================== MBR & Partition Table ================== ========================================================Disk: 0 (Size: 932 GB) (Disk ID: 710B350F) Partition: GPT Partition Type. ==================== End Of Log ============================
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.