Jump to content

Mistergabbon

Members
  • Posts

    6
  • Joined

  • Last visited

Everything posted by Mistergabbon

  1. Here is the additional aswell,i couldnt work out how to attach it Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-10-2014 01Ran by Matthew at 2014-10-19 13:12:13Running from C:\Users\Matthew\DownloadsBoot Mode: Normal========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) clear.fi SDK - Video 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden clear.fi SDK- Movie 2 (x32 Version: 2.1.2606 - CyberLink Corp.) HiddenAcer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3012 - Acer Incorporated)Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.2008 - Acer Incorporated)AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.2021 - Acer Incorporated)Apple Application Support (HKLM-x32\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)Arma 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive)Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version: - )Blood Bowl: Chaos Edition (HKLM-x32\...\Steam App 216890) (Version: - Cyanide Studios)Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)Broadcom Wireless Utility (HKLM\...\{4CDA59B9-7AD3-4283-9F5C-BC469FF975B6}) (Version: 6.30.59.104 - Broadcom Corporation)clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.2012 - Acer Incorporated)clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.2012 - Acer Incorporated)Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse)CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3729_45993 - CyberLink Corp.)CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3729_45993 - CyberLink Corp.) HiddenDawngate (HKLM-x32\...\{278BC5C3-8CFB-48F3-8670-85AD8757CFB0}) (Version: 189.44.60.0 - Electronic Arts, Inc.)Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)Dritek Radio Controller (HKLM-x32\...\RadioController) (Version: 2.02.2001.0803 - Dritek System Inc.)Dungeon Defenders Eternity (HKLM-x32\...\Steam App 302270) (Version: - Nom Nom Games)EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)EPSON XP-215 217 Series Printer Uninstall (HKLM\...\EPSON XP-215 217 Series) (Version: - SEIKO EPSON Corporation)Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.104 - Google Inc.)Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) HiddenHalf-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve)Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)HID Monitor (HKLM-x32\...\{14374776-78CF-4D6A-BFBF-16FD4E0E90F0}) (Version: 1.1.5 - Acer Incorporated)Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - Dennaton Games)Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) HiddeniTunes (HKLM\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)Killing Floor (HKLM-x32\...\Steam App 1250) (Version: - Tripwire Interactive)Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.12 - Acer Inc.)Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3007 - Acer Incorporated)Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4659.1001 - Microsoft Corporation)Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual Studio 2005 Tools for Office Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) HiddenNorton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.2.3.51r2 - Symantec Corporation)Norton Online Backup ARA (x32 Version: 4.1.0.14 - Symantec Corporation) HiddenNVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4659.1001 - Microsoft Corporation) HiddenOffice 15 Click-to-Run Licensing Component (Version: 15.0.4659.1001 - Microsoft Corporation) HiddenOffice 15 Click-to-Run Localization Component (x32 Version: 15.0.4659.1001 - Microsoft Corporation) HiddenOffice Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer)PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.15.20888 - Razer Inc.)Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6833 - Realtek Semiconductor Corp.)Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.27028 - Realtek Semiconductor Corp.)RIFT™ (HKLM-x32\...\Steam App 39120) (Version: - Trion Worlds)Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.)Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION)Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - )Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.4.5 - Synaptics Incorporated)Synergy (HKLM-x32\...\Steam App 17520) (Version: - Synergy Team)TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)Tom Clancy's Ghost Recon Phantoms - EU (HKLM-x32\...\Steam App 272350) (Version: - Ubisoft Singapore)Velvet Sundown (HKLM-x32\...\Steam App 307290) (Version: - Tribe Studios)Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) HiddenVisual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.5100 - Broadcom Corporation)World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - Firaxis Games) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-3542506957-340128613-3862573702-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)CustomCLSID: HKU\S-1-5-21-3542506957-340128613-3862573702-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Matthew\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)CustomCLSID: HKU\S-1-5-21-3542506957-340128613-3862573702-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Matthew\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)CustomCLSID: HKU\S-1-5-21-3542506957-340128613-3862573702-1001_Classes\CLSID\{c8491fae-8b3b-46b1-8777-a90bd9f9c1c2}\InprocServer32 -> C:\WINDOWS\system32\dfshim.dll (Microsoft Corporation)CustomCLSID: HKU\S-1-5-21-3542506957-340128613-3862573702-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Matthew\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)CustomCLSID: HKU\S-1-5-21-3542506957-340128613-3862573702-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Matthew\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation) ==================== Restore Points ========================= 16-10-2014 22:34:36 Installed DirectX18-10-2014 20:41:29 Removed Nero BackItUp 12 Essentials OEM.a01. ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTaskTask: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsListTask: {0E56C185-F15A-49FE-B1A8-938679F39EE0} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-01-22] ()Task: {1CDA2A42-A5BF-49BE-A412-AA73C5E683FF} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\SymErr.exeTask: {1F98F802-1B1F-4DB0-A06B-C2D8002C843E} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\WSCStub.exeTask: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTaskTask: {2C298F22-7A67-45D8-91FC-5E6C8EFFC039} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-01-18] (Acer Incorporated)Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulateTask: {2D6FD16C-E619-42E7-9C82-A061F071E3DE} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-01-17] (Synaptics Incorporated)Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalanceTask: {53AB1E87-E97D-4216-8351-DBB7D6600987} - System32\Tasks\EPSON XP-215 217 Series Update {D37FD914-FC51-4D82-9DCA-73560EC7B22F} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)Task: {65D44F51-1586-4F4F-833E-12423B5A5E5D} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2013-02-08] (CyberLink)Task: {6932484A-2410-4E8D-8A14-567B7D2C5A5B} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-10-15] (Microsoft Corporation)Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play CleanupTask: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance TaskTask: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTaskTask: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryStateTask: {8255121F-ACAC-47E9-92A6-EA2605709A76} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUploadTask: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance TaskTask: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTaskTask: {8EEE7F70-1392-410B-A7B6-93F92049A9D9} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)Task: {93693B6A-C18C-491F-90B6-F84855F855B2} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\SymErr.exeTask: {93993F63-EC45-4AEF-AF3F-74DAFB3ACEAC} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()Task: {9656EDC4-EF82-4239-8B75-5D4A72AAA3B4} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-ValidationTask: {970427D9-C88E-491E-89B6-0244B1DD0C7A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance WorkTask: {A18AD522-C578-4D8F-9559-1FEEFF290138} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-09-25] (Microsoft Corporation)Task: {BB539ADE-6878-4821-ABF7-53D03E55EF50} - System32\Tasks\Microsoft\Windows\DiskFootprint\DiagnosticsTask: {BDFA698C-A2F8-4770-BB93-9539D23CE7CE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-27] (Google Inc.)Task: {C82EF18A-C469-4A70-B583-36569C982710} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-ManagementTask: {C97D7D35-B52E-4350-9724-C7427662A30B} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauservTask: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTaskTask: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensingTask: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon SynchronizationTask: {E383A0CE-23AB-4258-97E1-532603DF316D} - System32\Tasks\HIDMonitor => C:\Program Files\Acer Incorporated\HID Monitor\HIDMonitor.exeTask: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRETask: {ED914949-AF14-43FE-8B42-E1EF10E433F1} - System32\Tasks\Dolby Selector => C:\Dolby PCEE4\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)Task: {F34B46C6-F732-4E23-B4CC-90A06F29B8BE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-27] (Google Inc.)Task: {F74577EF-F77D-441E-8124-881479DCBC8C} - System32\Tasks\EPSON XP-215 217 Series Invitation {D37FD914-FC51-4D82-9DCA-73560EC7B22F} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)Task: C:\WINDOWS\Tasks\EPSON XP-215 217 Series Invitation {D37FD914-FC51-4D82-9DCA-73560EC7B22F}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXETask: C:\WINDOWS\Tasks\EPSON XP-215 217 Series Update {D37FD914-FC51-4D82-9DCA-73560EC7B22F}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXETask: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ==================== Loaded Modules (whitelisted) ============= 2013-01-08 15:51 - 2013-01-08 15:51 - 00049368 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btwleapi.dll2014-06-28 11:11 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll2014-10-18 12:17 - 2014-09-09 15:59 - 08896160 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll2012-08-23 14:02 - 2012-08-23 14:02 - 00030640 _____ () C:\Program Files (x86)\Acer Incorporated\HID Monitor\HIDMonitor.exe2013-07-12 07:37 - 2013-02-20 22:58 - 00111176 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll2014-09-10 02:42 - 2014-09-10 02:42 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\ErrorReporting.dll2014-07-03 13:20 - 2014-07-03 13:20 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll2014-07-03 13:19 - 2014-07-03 13:19 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll2013-07-12 07:00 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll2013-01-04 16:19 - 2013-01-04 16:19 - 00035336 _____ () C:\Program Files (x86)\Acer Incorporated\HID Monitor\ElanTPAPI.dll2014-08-30 00:37 - 2014-08-21 19:15 - 01171456 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll2014-08-30 00:37 - 2014-08-21 19:15 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll2014-08-30 00:37 - 2014-08-21 19:15 - 00442368 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll2014-06-27 21:45 - 2014-09-03 20:28 - 00774656 _____ () C:\Program Files (x86)\Steam\SDL2.dll2014-06-27 21:45 - 2014-09-23 05:32 - 02226880 _____ () C:\Program Files (x86)\Steam\video.dll2014-08-30 00:37 - 2014-08-21 19:15 - 00403968 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll2014-08-30 00:37 - 2014-08-21 19:15 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll2014-06-27 21:45 - 2014-09-23 05:32 - 00679616 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL2013-07-12 07:37 - 2013-02-20 22:58 - 00089672 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll2014-10-17 21:29 - 2014-10-10 03:03 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\libglesv2.dll2014-10-17 21:29 - 2014-10-10 03:03 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\libegl.dll2014-10-17 21:29 - 2014-10-10 03:04 - 08910664 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\pdf.dll2014-10-17 21:29 - 2014-10-10 03:03 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\ffmpegsumo.dll2014-10-08 17:21 - 2014-10-08 17:21 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\libcef.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\libGLESv2.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00905216 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\platforms\qwindows.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\libEGL.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00020992 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\imageformats\qgif.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00020992 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\imageformats\qico.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00205312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\imageformats\qjpeg.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00225792 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\imageformats\qmng.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00312832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\imageformats\qtiff.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\qml\QtQuick.2\qtquick2plugin.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00054272 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\qml\QtQuick\Layouts\qquicklayoutsplugin.dll2014-10-08 17:21 - 2014-10-08 17:21 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5134\qml\QtQml\Models.2\modelsplugin.dll2014-06-27 21:45 - 2014-09-05 00:29 - 34589376 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll2014-08-15 00:49 - 2014-09-05 00:29 - 00837824 _____ () C:\Program Files (x86)\Steam\bin\ffmpegsumo.dll2014-10-17 21:29 - 2014-10-10 03:04 - 14902600 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Matthew\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) HKCU\...\StartupApproved\Run: => "puush" ========================= Accounts: ========================== Administrator (S-1-5-21-3542506957-340128613-3862573702-500 - Administrator - Disabled)Guest (S-1-5-21-3542506957-340128613-3862573702-501 - Limited - Disabled)Matthew (S-1-5-21-3542506957-340128613-3862573702-1001 - Administrator - Enabled) => C:\Users\Matthew ==================== Faulty Device Manager Devices ============= Name: Bluetooth Device (Personal Area Network)Description: Bluetooth Device (Personal Area Network)Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: BthPanProblem: : This device is disabled. (Code 22)Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors:==================Error: (10/19/2014 10:56:44 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 Error: (10/19/2014 00:13:47 AM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program LiveComm.exe version 17.5.9600.20605 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1b98 Start Time: 01cfeb2874ac21e2 Termination Time: 4294967295 Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe Report Id: 688d488b-571c-11e4-be8d-3065ec0a8545 Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 Error: (10/18/2014 11:43:51 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program LiveComm.exe version 17.5.9600.20605 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 634 Start Time: 01cfeb2443d25394 Termination Time: 4294967295 Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe Report Id: 392ab24f-5718-11e4-be8d-3065ec0a8545 Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 Error: (10/18/2014 10:43:50 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program LiveComm.exe version 17.5.9600.20605 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 8dc Start Time: 01cfeb1be20ee9f7 Termination Time: 4294967295 Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe Report Id: d6d71485-570f-11e4-be8d-3065ec0a8545 Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 Error: (10/18/2014 01:13:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )Description: Task Scheduling Error: m->NextScheduledSPRetry 13218 Error: (10/18/2014 01:13:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )Description: Task Scheduling Error: m->NextScheduledEvent 13218 Error: (10/18/2014 01:13:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )Description: Task Scheduling Error: Continuously busy for more than a second Error: (10/17/2014 10:26:31 AM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program Wow-64.exe version 6.0.2.19034 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 17b4 Start Time: 01cfe9ec52e00bb5 Termination Time: 5 Application Path: C:\Program Files (x86)\World of Warcraft\Wow-64.exe Report Id: a7cf1ffd-55df-11e4-be8c-3065ec0a8545 Faulting package full name: Faulting package-relative application ID: Error: (10/15/2014 09:51:26 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program LiveComm.exe version 17.5.9600.20605 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1da8 Start Time: 01cfe8b8b7202784 Termination Time: 4294967295 Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe Report Id: 061c450b-54ad-11e4-be8b-3065ec0a8545 Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 Error: (10/15/2014 05:19:38 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program LiveComm.exe version 17.5.9600.20605 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1984 Start Time: 01cfe892ff5244ac Termination Time: 4294967295 Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe Report Id: f788497d-5486-11e4-be8b-3065ec0a8545 Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 System errors:=============Error: (10/19/2014 01:30:18 AM) (Source: DCOM) (EventID: 10010) (User: MATT-LAPTOP)Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} Error: (10/18/2014 10:22:36 PM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the CCDMonitorService service. Error: (10/14/2014 11:12:34 PM) (Source: volsnap) (EventID: 36) (User: )Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. Error: (10/14/2014 07:14:49 PM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ClickToRunSvc service. Error: (10/14/2014 07:14:12 PM) (Source: DCOM) (EventID: 10010) (User: MATT-LAPTOP)Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39} Error: (10/12/2014 11:37:41 PM) (Source: DCOM) (EventID: 10010) (User: MATT-LAPTOP)Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} Error: (10/10/2014 04:01:17 PM) (Source: disk) (EventID: 7) (User: )Description: The device, \Device\Harddisk1\DR3, has a bad block. Error: (10/10/2014 04:01:06 PM) (Source: disk) (EventID: 7) (User: )Description: The device, \Device\Harddisk1\DR3, has a bad block. Error: (10/10/2014 04:00:46 PM) (Source: disk) (EventID: 7) (User: )Description: The device, \Device\Harddisk1\DR2, has a bad block. Error: (10/10/2014 04:00:36 PM) (Source: disk) (EventID: 7) (User: )Description: The device, \Device\Harddisk1\DR2, has a bad block. Microsoft Office Sessions:=========================Error: (10/19/2014 10:56:44 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 Error: (10/19/2014 00:13:47 AM) (Source: Application Hang) (EventID: 1002) (User: )Description: LiveComm.exe17.5.9600.206051b9801cfeb2874ac21e24294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe688d488b-571c-11e4-be8d-3065ec0a8545microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1 Error: (10/18/2014 11:43:51 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: LiveComm.exe17.5.9600.2060563401cfeb2443d253944294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe392ab24f-5718-11e4-be8d-3065ec0a8545microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1 Error: (10/18/2014 10:43:50 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: LiveComm.exe17.5.9600.206058dc01cfeb1be20ee9f74294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exed6d71485-570f-11e4-be8d-3065ec0a8545microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1 Error: (10/18/2014 01:13:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )Description: Task Scheduling Error: m->NextScheduledSPRetry 13218 Error: (10/18/2014 01:13:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )Description: Task Scheduling Error: m->NextScheduledEvent 13218 Error: (10/18/2014 01:13:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )Description: Task Scheduling Error: Continuously busy for more than a second Error: (10/17/2014 10:26:31 AM) (Source: Application Hang) (EventID: 1002) (User: )Description: Wow-64.exe6.0.2.1903417b401cfe9ec52e00bb55C:\Program Files (x86)\World of Warcraft\Wow-64.exea7cf1ffd-55df-11e4-be8c-3065ec0a8545 Error: (10/15/2014 09:51:26 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: LiveComm.exe17.5.9600.206051da801cfe8b8b72027844294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe061c450b-54ad-11e4-be8b-3065ec0a8545microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1 Error: (10/15/2014 05:19:38 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: LiveComm.exe17.5.9600.20605198401cfe892ff5244ac4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exef788497d-5486-11e4-be8b-3065ec0a8545microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1 CodeIntegrity Errors:=================================== Date: 2014-09-27 18:17:55.499 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-27 18:17:55.323 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-27 18:17:55.024 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-27 18:17:54.793 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-27 18:17:54.554 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-27 18:17:54.371 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-27 18:17:53.931 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-27 18:17:53.794 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-27 18:17:53.618 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-27 18:17:53.450 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== Processor: Intel® Core i5-3337U CPU @ 1.80GHzPercentage of memory in use: 48%Total physical RAM: 5939.6 MBAvailable physical RAM: 3051.65 MBTotal Pagefile: 7091.6 MBAvailable Pagefile: 3617.41 MBTotal Virtual: 131072 MBAvailable Virtual: 131071.84 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:683.47 GB) (Free:453.71 GB) NTFS ==================== MBR & Partition Table ================== ========================================================Disk: 0 (Size: 698.6 GB) (Disk ID: 3B023D53) Partition: GPT Partition Type. ==================== End Of Log ============================
  2. Here it is Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-10-2014 01Ran by Matthew (administrator) on MATT-LAPTOP on 19-10-2014 13:10:44Running from C:\Users\Matthew\DownloadsLoaded Profile: Matthew (Available profiles: Matthew)Platform: Windows 8.1 (X64) OS Language: English (United Kingdom)Internet Explorer Version 11Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe(Dritek System INC.) C:\Windows\RfBtnSvc64.exe(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Intel Corporation) C:\Windows\System32\igfxEM.exe(Intel Corporation) C:\Windows\System32\igfxHK.exe(Intel Corporation) C:\Windows\System32\igfxTray.exe(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe(Intel Corporation) C:\Windows\System32\igfxext.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe() C:\Program Files (x86)\Acer Incorporated\HID Monitor\HIDMonitor.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe(Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.5134\Battle.net.exe(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\Bluetooth Headset Helper.exe(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\livecomm.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-29] (Realtek Semiconductor)HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1276488 2013-01-18] (Realtek Semiconductor)HKLM\...\Run: [broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [10592256 2013-07-12] (Broadcom Corporation)HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3010800 2013-01-17] (Synaptics Incorporated)HKLM-x32\...\Run: [LManager] => [X]HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-07-12] (Dritek System Inc.)HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)HKLM-x32\...\Run: [] => [X]HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [585560 2014-06-23] (Razer Inc.)HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-03] (Apple Inc.)HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)Winlogon\Notify\igfxcui: igfxdev.dll [X]HKU\S-1-5-21-3542506957-340128613-3862573702-1001\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [567880 2014-07-08] ()HKU\S-1-5-21-3542506957-340128613-3862573702-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)HKU\S-1-5-21-3542506957-340128613-3862573702-1001\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22027880 2014-08-27] (Skype Technologies S.A.)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnkShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)Startup: C:\Users\Matthew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.comHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.comSearchScopes: HKLM - {098C3D5C-6B93-4778-9F8B-A6084A23561D} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJSSearchScopes: HKLM-x32 - {098C3D5C-6B93-4778-9F8B-A6084A23561D} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJSBHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)Tcpip\Parameters: [DhcpNameServer] 77.244.128.44 77.244.128.45 FireFox:========FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) Chrome: =======CHR HomePage: Default -> hxxp://www.ddlstart.com/?src=startpage&provider=&provider_name=yahoo&provider_code=&partner_id=750&product_id=872&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.5.0&install_country=GB&install_date=20120708&user_guid=5888E49084D840809A08830CEFDA941F&machine_id=8f5976a862f33e61289178c007ae9bfd&browser=CR&os=win&os_version=6.1-x64-SP1CHR StartupUrls: Default -> "hxxp://www.google.com/", "hxxp://www.facebook.com/"CHR Profile: C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Docs) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-27]CHR Extension: (Google Drive) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-27]CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-06]CHR Extension: (YouTube) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-27]CHR Extension: (Google Search) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-27]CHR Extension: (AdBlock) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-27]CHR Extension: (Journey through Middle-earth) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjgkjeheegjnnmheaflhdocglkiegoni [2014-06-27]CHR Extension: (Google Wallet) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-27]CHR Extension: (Battlefield 3) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\pagmklehiaheilihklokljahmoihkjni [2014-10-01]CHR Extension: (Gmail) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-27] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2227992 2012-10-01] (Broadcom Corporation.)S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [345984 2014-06-30] ()R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-19] (Acer Incorporated)R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2436280 2014-09-25] (Microsoft Corporation)R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [660040 2013-01-18] (Acer Incorporated)R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-08-15] (Microsoft Corporation)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-08-15] (Microsoft Corporation)R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-07-12] (Dritek System INC.)S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-08-15] (Microsoft Corporation)R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-08-15] (Microsoft Corporation)R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [6068736 2013-07-12] (Broadcom Corporation) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [169240 2012-10-01] (Broadcom Corporation.)R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-19] (Malwarebytes Corporation)R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-07-12] (Dritek System Inc.)R3 rzdaendpt; C:\Windows\System32\drivers\rzdaendpt.sys [33448 2014-05-19] (Razer Inc)R3 rzvkeyboard; C:\Windows\System32\drivers\rzvkeyboard.sys [31400 2014-05-19] (Razer Inc)R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2013-01-17] (Synaptics Incorporated)R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-08-15] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-19 13:10 - 2014-10-19 13:11 - 00016676 _____ () C:\Users\Matthew\Downloads\FRST.txt2014-10-19 13:09 - 2014-10-19 13:10 - 02112000 _____ (Farbar) C:\Users\Matthew\Downloads\FRST64.exe2014-10-16 18:51 - 2014-10-16 18:51 - 00000000 ____D () C:\Users\Matthew\Documents\RIFT2014-10-16 18:51 - 2014-10-16 18:51 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\RIFT2014-10-15 19:05 - 2014-10-18 14:28 - 00000000 ____D () C:\Users\Matthew\Documents\bloodbowlchaos2014-10-15 13:48 - 2014-09-27 23:25 - 04183040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys2014-10-15 13:47 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll2014-10-15 13:47 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll2014-10-15 13:47 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll2014-10-15 13:47 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll2014-10-15 13:47 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl2014-10-15 13:47 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl2014-10-15 13:47 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll2014-10-15 13:47 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll2014-10-15 13:47 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll2014-10-15 13:47 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll2014-10-15 13:47 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll2014-10-15 13:47 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll2014-10-15 13:47 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll2014-10-15 13:47 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll2014-10-15 13:47 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll2014-10-15 13:47 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll2014-10-15 13:47 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll2014-10-15 13:47 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll2014-10-15 13:47 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll2014-10-15 13:47 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll2014-10-15 13:47 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe2014-10-15 13:47 - 2014-09-19 01:42 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll2014-10-15 13:47 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll2014-10-15 13:47 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll2014-10-15 13:47 - 2014-09-19 01:20 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll2014-10-15 13:47 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll2014-10-15 13:47 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll2014-10-15 13:47 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll2014-10-15 13:47 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll2014-10-15 13:47 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll2014-10-15 13:47 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll2014-10-15 13:47 - 2014-09-04 00:57 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll2014-10-15 13:47 - 2014-09-04 00:49 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll2014-10-15 13:46 - 2014-10-09 23:16 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll2014-10-15 13:46 - 2014-10-08 23:09 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll2014-10-15 13:46 - 2014-09-19 02:24 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll2014-10-15 13:46 - 2014-09-13 07:29 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll2014-10-15 13:46 - 2014-09-13 07:02 - 02779648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll2014-10-15 13:46 - 2014-09-13 06:49 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll2014-10-15 13:46 - 2014-09-13 06:30 - 03117568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll2014-10-15 13:46 - 2014-09-08 04:15 - 00054752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe2014-10-15 13:46 - 2014-09-08 02:46 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll2014-10-15 13:46 - 2014-09-08 02:46 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll2014-10-15 13:46 - 2014-09-08 01:08 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe2014-10-15 13:46 - 2014-09-08 01:07 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll2014-10-15 13:46 - 2014-09-08 01:05 - 03448320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll2014-10-15 13:46 - 2014-09-08 01:04 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll2014-10-15 13:46 - 2014-09-08 01:04 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll2014-10-15 13:46 - 2014-09-08 01:03 - 01702400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll2014-10-15 13:46 - 2014-09-08 01:03 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll2014-10-15 13:46 - 2014-09-08 00:59 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll2014-10-15 13:46 - 2014-09-08 00:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe2014-10-15 13:46 - 2014-09-08 00:56 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll2014-10-15 13:46 - 2014-09-08 00:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll2014-10-15 13:46 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll2014-10-15 13:46 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll2014-10-14 21:00 - 2014-10-14 21:03 - 00000000 ____D () C:\Users\Matthew\Documents\Dawngate2014-10-14 19:00 - 2014-10-14 21:02 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\DawngateData2014-10-14 19:00 - 2014-10-14 19:00 - 00000000 ____D () C:\Users\Matthew\AppData\Local\CrashRpt2014-10-14 18:59 - 2014-10-14 20:59 - 00002182 _____ () C:\Users\Public\Desktop\Dawngate.lnk2014-10-14 18:59 - 2014-10-14 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dawngate2014-10-14 18:59 - 2014-10-14 18:59 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts2014-10-14 18:57 - 2014-10-14 18:58 - 09334784 _____ () C:\Users\Matthew\Downloads\Dawngate_en_us.msi2014-10-04 02:19 - 2014-10-04 02:19 - 13087456 _____ (Microsoft Corporation) C:\Users\Matthew\Downloads\Silverlight_x64.exe2014-09-25 12:41 - 2014-09-25 12:41 - 00000000 ___RD () C:\Program Files (x86)\Skype2014-09-25 12:41 - 2014-09-25 12:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype2014-09-22 16:39 - 2014-09-22 07:42 - 00278152 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe2014-09-22 15:19 - 2014-08-16 05:08 - 21195616 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll2014-09-22 15:19 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll2014-09-22 15:19 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll2014-09-22 15:19 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll2014-09-22 15:19 - 2014-08-16 04:57 - 02498880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys2014-09-22 15:19 - 2014-08-16 04:57 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS2014-09-22 15:19 - 2014-08-16 04:16 - 18722600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll2014-09-22 15:19 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll2014-09-22 15:19 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll2014-09-22 15:19 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll2014-09-22 15:19 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll2014-09-22 15:19 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll2014-09-22 15:19 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll2014-09-22 15:19 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll2014-09-22 15:19 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll2014-09-22 15:19 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll2014-09-22 15:19 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll2014-09-22 15:19 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll2014-09-22 15:19 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll2014-09-22 15:19 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll2014-09-22 15:19 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll2014-09-22 15:19 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll2014-09-22 15:19 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll2014-09-22 15:19 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll2014-09-22 15:19 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll2014-09-22 15:19 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll2014-09-22 15:19 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll2014-09-22 15:19 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll2014-09-22 15:19 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll2014-09-22 15:19 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe2014-09-22 15:19 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll2014-09-22 15:19 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll2014-09-22 15:18 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll2014-09-22 15:18 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll2014-09-22 15:18 - 2014-08-01 00:22 - 00388729 _____ () C:\WINDOWS\system32\ApnDatabase.xml2014-09-22 15:01 - 2014-08-29 02:58 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll2014-09-22 15:01 - 2014-08-29 00:56 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll2014-09-22 15:01 - 2014-08-29 00:47 - 02321920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll2014-09-22 13:00 - 2014-10-19 00:43 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{BD41DA6E-1B53-4ACE-9F1A-00B729AEE7C8}2014-09-22 13:00 - 2014-09-22 13:00 - 00000000 __SHD () C:\Users\Matthew\AppData\Local\EmieUserList2014-09-22 13:00 - 2014-09-22 13:00 - 00000000 __SHD () C:\Users\Matthew\AppData\Local\EmieSiteList2014-09-22 12:59 - 2014-09-22 12:59 - 00000000 ____D () C:\ProgramData\Symantec ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-19 13:10 - 2014-09-17 12:41 - 00000000 ____D () C:\FRST2014-10-19 13:10 - 2014-06-27 21:21 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\Skype2014-10-19 13:07 - 2014-07-22 19:30 - 00000000 ____D () C:\Users\Matthew\AppData\Local\Battle.net2014-10-19 13:02 - 2014-06-27 21:44 - 00000000 ____D () C:\Program Files (x86)\Steam2014-10-19 13:02 - 2014-06-27 21:16 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3542506957-340128613-3862573702-10012014-10-19 13:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru2014-10-19 12:57 - 2014-08-15 13:09 - 00000000 __RDO () C:\Users\Matthew\OneDrive2014-10-19 12:57 - 2014-07-04 14:12 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys2014-10-19 12:57 - 2014-06-27 21:15 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2014-10-19 12:57 - 2014-06-27 21:15 - 00000920 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job2014-10-19 12:22 - 2014-06-27 21:15 - 00000924 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job2014-10-19 12:20 - 2014-07-13 22:20 - 00000943 _____ () C:\WINDOWS\Tasks\EPSON XP-215 217 Series Update {D37FD914-FC51-4D82-9DCA-73560EC7B22F}.job2014-10-19 12:20 - 2014-07-13 22:20 - 00000757 _____ () C:\WINDOWS\Tasks\EPSON XP-215 217 Series Invitation {D37FD914-FC51-4D82-9DCA-73560EC7B22F}.job2014-10-19 12:05 - 2014-08-15 12:30 - 01544959 _____ () C:\WINDOWS\WindowsUpdate.log2014-10-18 23:13 - 2014-07-21 19:27 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\Apple Computer2014-10-18 23:13 - 2013-08-22 15:46 - 00295438 _____ () C:\WINDOWS\setupact.log2014-10-18 22:23 - 2014-08-15 11:59 - 00053284 _____ () C:\WINDOWS\system32\wpbbin.exe2014-10-18 22:23 - 2014-03-18 09:16 - 00160012 _____ () C:\WINDOWS\PFRO.log2014-10-18 22:23 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT2014-10-18 22:22 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI2014-10-18 21:45 - 2013-03-18 11:22 - 00000000 ____D () C:\ProgramData\Nero2014-10-18 12:20 - 2014-06-27 21:13 - 00000000 ____D () C:\Program Files\Microsoft Office 152014-10-18 11:58 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness2014-10-16 23:36 - 2014-06-28 12:11 - 00098395 _____ () C:\WINDOWS\DirectX.log2014-10-16 17:27 - 2014-08-02 15:57 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft2014-10-16 17:21 - 2014-07-22 19:29 - 00000000 ____D () C:\Program Files (x86)\Battle.net2014-10-16 17:12 - 2013-08-22 15:44 - 00371944 _____ () C:\WINDOWS\system32\FNTCACHE.DAT2014-10-15 23:17 - 2014-07-09 17:15 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel2014-10-15 23:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\en-GB2014-10-15 23:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\en-GB2014-10-15 23:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer2014-10-15 23:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager2014-10-15 23:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera2014-10-15 23:00 - 2014-09-13 03:18 - 00000000 ____D () C:\Users\Matthew\AppData\Local\Deployment2014-10-15 14:32 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp2014-10-15 14:28 - 2014-07-01 23:30 - 00000000 ____D () C:\WINDOWS\system32\MRT2014-10-15 14:16 - 2014-07-01 23:29 - 103265616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe2014-10-14 19:15 - 2014-07-04 14:11 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-10-14 19:13 - 2014-07-04 14:12 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-10-14 19:13 - 2014-07-04 14:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-10-10 16:03 - 2014-03-18 16:26 - 00863592 _____ () C:\WINDOWS\system32\PerfStringBackup.INI2014-10-08 20:14 - 2014-07-27 20:37 - 00000000 ____D () C:\Users\Matthew\AppData\Local\CrashDumps2014-10-01 11:11 - 2014-07-04 14:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys2014-10-01 11:11 - 2014-07-04 14:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys2014-10-01 11:11 - 2014-07-04 14:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys2014-09-30 16:41 - 2014-06-27 21:08 - 00000000 ____D () C:\Users\Matthew\AppData\Local\Packages2014-09-29 23:45 - 2014-09-16 11:46 - 00706016 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe2014-09-29 23:45 - 2014-09-16 11:46 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl2014-09-25 12:41 - 2014-06-27 21:21 - 00002531 _____ () C:\Users\Public\Desktop\Skype.lnk2014-09-25 12:41 - 2014-06-27 21:21 - 00000000 ____D () C:\ProgramData\Skype2014-09-23 11:23 - 2014-07-22 19:31 - 00000000 ____D () C:\Program Files (x86)\Hearthstone2014-09-22 16:39 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM2014-09-22 15:35 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData2014-09-22 15:35 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore2014-09-22 14:56 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF2014-09-22 12:57 - 2014-06-27 21:44 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared2014-09-22 12:57 - 2013-07-12 07:32 - 00000000 ____D () C:\ProgramData\Norton Files to move or delete:====================C:\Users\Matthew\jagex_cl_runescape_LIVE.datC:\Users\Matthew\random.dat Some content of TEMP:====================C:\Users\Matthew\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-10-19 11:53 ==================== End Of Log ============================
  3. Hi, Thanks for replying, My computer has been running fine no problems up until now, i had a ad randomly pop-up on google chrome, with the address lp.get-soft.com, after googling it apparently it is malware, but i have checked all of my installed programs, and none of them seem suspicious, im currently performing a scan with malwarebytes, but previous scans have not found anything. Hopefully im not just being paranoid. Matthew
  4. Hi, As the topic title suggests I think I'm infected, it could just be me being paranoid. Recently there have been some strange things going on with my laptop. Anyway, thanks for any help in advance and here are the FRST Logs as requested. Matthew Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014Ran by Matthew (administrator) on MATT-LAPTOP on 17-09-2014 12:41:46Running from C:\Users\Matthew\DownloadsPlatform: Windows 8.1 (X64) OS Language: English (United Kingdom)Internet Explorer Version 11Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\n360.exe(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe(Dritek System INC.) C:\Windows\RfBtnSvc64.exe(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\n360.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe() C:\Program Files (x86)\Acer Incorporated\HID Monitor\HIDMonitor.exe(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe(Intel Corporation) C:\Windows\System32\igfxEM.exe(Intel Corporation) C:\Windows\System32\igfxHK.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Intel Corporation) C:\Windows\System32\igfxTray.exe(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe(Intel Corporation) C:\Windows\System32\igfxext.exe(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe() C:\Program Files (x86)\puush\puush.exe(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe(Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe(Curse) C:\Users\Matthew\AppData\Local\Apps\2.0\XBDPW331.YGV\QMTTZWVX.R55\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b6290e21932c\CurseClient.exe(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe() C:\Program Files (x86)\Acer\Live Updater\updater.exe(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\AppVShNotify.exe(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17200_none_fa7026dd9b04586e\TiWorker.exe(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\Bluetooth Headset Helper.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-29] (Realtek Semiconductor)HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1276488 2013-01-18] (Realtek Semiconductor)HKLM\...\Run: [broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [10592256 2013-07-12] (Broadcom Corporation)HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3010800 2013-01-17] (Synaptics Incorporated)HKLM-x32\...\Run: [LManager] => [X]HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-07-12] (Dritek System Inc.)HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)HKLM-x32\...\Run: [] => [X]HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [585560 2014-06-23] (Razer Inc.)HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-03] (Apple Inc.)HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)Winlogon\Notify\igfxcui: igfxdev.dll [X]HKU\S-1-5-21-3542506957-340128613-3862573702-1001\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21415008 2014-07-25] (Skype Technologies S.A.)HKU\S-1-5-21-3542506957-340128613-3862573702-1001\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [567880 2014-07-08] ()HKU\S-1-5-21-3542506957-340128613-3862573702-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnkShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)Startup: C:\Users\Matthew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()ShellIconOverlayIdentifiers: OverlayExcluded -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360\Engine64\21.5.0.19\buShell.dll (Symantec Corporation)ShellIconOverlayIdentifiers: OverlayPending -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360\Engine64\21.5.0.19\buShell.dll (Symantec Corporation)ShellIconOverlayIdentifiers: OverlayProtected -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360\Engine64\21.5.0.19\buShell.dll (Symantec Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.comHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.comSearchScopes: HKLM - DefaultScope {098C3D5C-6B93-4778-9F8B-A6084A23561D} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJSSearchScopes: HKLM - {098C3D5C-6B93-4778-9F8B-A6084A23561D} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJSSearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://uk.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}SearchScopes: HKLM-x32 - DefaultScope {098C3D5C-6B93-4778-9F8B-A6084A23561D} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJSSearchScopes: HKLM-x32 - {098C3D5C-6B93-4778-9F8B-A6084A23561D} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJSSearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://uk.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://uk.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine64\21.5.0.19\coIEPlg.dll (Symantec Corporation)BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation)BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\IPS\IPSBHO.DLL (Symantec Corporation)Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.5.0.19\coIEPlg.dll (Symantec Corporation)Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation)Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100 FireFox:========FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFFFF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2014-06-27]FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgnFF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn [2014-09-17] Chrome: =======CHR HomePage: Default -> hxxp://www.ddlstart.com/?src=startpage&provider=&provider_name=yahoo&provider_code=&partner_id=750&product_id=872&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.5.0&install_country=GB&install_date=20120708&user_guid=5888E49084D840809A08830CEFDA941F&machine_id=8f5976a862f33e61289178c007ae9bfd&browser=CR&os=win&os_version=6.1-x64-SP1CHR StartupUrls: Default -> "hxxp://www.google.com/", "hxxp://www.facebook.com/"CHR DefaultSearchKeyword: Default -> FC421F17FF84ABA2C603A08A31D4BFD31AAAA2E3CB5DC5F984D11117B33E63CBCHR DefaultSearchURL: Default -> 9FE743AC8FB8D545A9990FE9576E2C79968FDC084AC48CBDB3BC578467C13B06CHR Profile: C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Docs) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-27]CHR Extension: (Google Drive) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-27]CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-06]CHR Extension: (YouTube) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-27]CHR Extension: (Google Search) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-27]CHR Extension: (AdBlock) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-27]CHR Extension: (Journey through Middle-earth) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjgkjeheegjnnmheaflhdocglkiegoni [2014-06-27]CHR Extension: (Hola Better Internet) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2014-07-12]CHR Extension: (Fiery Music) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnmfeiddljnkcdgcfcfhpenipgmaocon [2014-06-27]CHR Extension: (Google Wallet) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-27]CHR Extension: (Gmail) - C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-27]CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\Exts\Chrome.crx [2014-08-08] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2227992 2012-10-01] (Broadcom Corporation.)S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [345984 2014-06-30] ()R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-19] (Acer Incorporated)R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2428088 2014-08-12] (Microsoft Corporation)R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [660040 2013-01-18] (Acer Incorporated)R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-08-15] (Microsoft Corporation)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.5.0.19\N360.exe [265040 2014-07-31] (Symantec Corporation)S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-08-15] (Microsoft Corporation)R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-07-12] (Dritek System INC.)S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-08-15] (Microsoft Corporation)S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-08-15] (Microsoft Corporation)R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [6068736 2013-07-12] (Broadcom Corporation) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [169240 2012-10-01] (Broadcom Corporation.)R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\BASHDefs\20140912.003\BHDrvx64.sys [1586904 2014-09-12] (Symantec Corporation)R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1505000.013\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-09] (Symantec Corporation)R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-09] (Symantec Corporation)R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\IPSDefs\20140916.001\IDSvia64.sys [633560 2014-08-29] (Symantec Corporation)R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-17] (Malwarebytes Corporation)R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140916.020\ENG64.SYS [129752 2014-09-09] (Symantec Corporation)R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140916.020\EX64.SYS [2137304 2014-09-09] (Symantec Corporation)R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-07-12] (Dritek System Inc.)R3 rzdaendpt; C:\Windows\System32\drivers\rzdaendpt.sys [33448 2014-05-19] (Razer Inc)R3 rzvkeyboard; C:\Windows\System32\drivers\rzvkeyboard.sys [31400 2014-05-19] (Razer Inc)R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2013-01-17] (Synaptics Incorporated)R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1505000.013\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1505000.013\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)R0 SymDS; C:\Windows\System32\drivers\N360x64\1505000.013\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)R0 SymEFA; C:\Windows\System32\drivers\N360x64\1505000.013\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)S0 SymELAM; C:\Windows\System32\drivers\N360x64\1505000.013\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-06-27] (Symantec Corporation)R1 SymIRON; C:\Windows\system32\drivers\N360x64\1505000.013\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1505000.013\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-08-15] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-17 12:41 - 2014-09-17 12:41 - 00022402 _____ () C:\Users\Matthew\Downloads\FRST.txt2014-09-17 12:41 - 2014-09-17 12:41 - 00000000 ____D () C:\FRST2014-09-17 12:39 - 2014-09-17 12:39 - 02105856 _____ (Farbar) C:\Users\Matthew\Downloads\FRST64.exe2014-09-16 11:46 - 2014-09-02 21:06 - 00706016 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe2014-09-16 11:46 - 2014-09-02 21:06 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl2014-09-15 13:44 - 2014-08-16 03:40 - 23591424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll2014-09-15 13:44 - 2014-08-16 03:00 - 02793984 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll2014-09-15 13:44 - 2014-08-16 02:56 - 00547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll2014-09-15 13:44 - 2014-08-16 02:54 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll2014-09-15 13:44 - 2014-08-16 02:43 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll2014-09-15 13:44 - 2014-08-16 02:32 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll2014-09-15 13:44 - 2014-08-16 02:25 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll2014-09-15 13:44 - 2014-08-16 02:22 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll2014-09-15 13:44 - 2014-08-16 02:20 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll2014-09-15 13:44 - 2014-08-16 02:19 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll2014-09-15 13:44 - 2014-08-16 02:18 - 02185728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll2014-09-15 13:44 - 2014-08-16 02:18 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll2014-09-15 13:44 - 2014-08-16 02:11 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll2014-09-15 13:44 - 2014-08-16 02:06 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll2014-09-15 13:44 - 2014-08-16 02:05 - 00727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll2014-09-15 13:44 - 2014-08-16 02:05 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe2014-09-15 13:44 - 2014-08-16 02:03 - 02104832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl2014-09-15 13:44 - 2014-08-16 02:03 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll2014-09-15 13:44 - 2014-08-16 01:58 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll2014-09-15 13:44 - 2014-08-16 01:56 - 02310656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll2014-09-15 13:44 - 2014-08-16 01:53 - 13588480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll2014-09-15 13:44 - 2014-08-16 01:53 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll2014-09-15 13:44 - 2014-08-16 01:53 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll2014-09-15 13:44 - 2014-08-16 01:51 - 11769856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll2014-09-15 13:44 - 2014-08-16 01:45 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll2014-09-15 13:44 - 2014-08-16 01:44 - 02014208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl2014-09-15 13:44 - 2014-08-16 01:44 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll2014-09-15 13:44 - 2014-08-16 01:34 - 01447424 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll2014-09-15 13:44 - 2014-08-16 01:20 - 01812992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll2014-09-15 13:44 - 2014-08-16 01:18 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll2014-09-15 13:44 - 2014-08-16 01:14 - 01190400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll2014-09-15 13:44 - 2014-08-16 01:12 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll2014-09-15 13:43 - 2014-08-16 03:04 - 17455104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll2014-09-15 13:43 - 2014-08-16 03:00 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll2014-09-15 13:43 - 2014-08-16 02:45 - 04232704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll2014-09-14 12:02 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe2014-09-14 12:02 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe2014-09-14 12:02 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll2014-09-14 12:02 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll2014-09-14 12:02 - 2014-08-23 05:44 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll2014-09-14 12:02 - 2014-08-23 05:34 - 13423104 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll2014-09-14 12:02 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll2014-09-14 12:02 - 2014-08-23 05:31 - 01038336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll2014-09-14 12:02 - 2014-08-23 05:20 - 11818496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll2014-09-14 12:02 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll2014-09-14 12:02 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmon.dll2014-09-14 12:02 - 2014-07-24 16:20 - 21266336 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll2014-09-14 12:02 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll2014-09-14 12:02 - 2014-07-24 08:39 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll2014-09-14 12:02 - 2014-07-24 08:30 - 02318336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll2014-09-14 12:01 - 2014-07-24 16:28 - 00468288 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS2014-09-14 12:01 - 2014-07-24 16:28 - 00419648 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys2014-09-14 12:01 - 2014-07-24 16:28 - 00412992 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys2014-09-14 12:01 - 2014-07-24 16:28 - 00143680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys2014-09-14 12:01 - 2014-07-24 16:23 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll2014-09-14 12:01 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll2014-09-14 12:01 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL2014-09-14 12:01 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVol.exe2014-09-14 12:01 - 2014-07-24 16:07 - 07424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe2014-09-14 12:01 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys2014-09-14 12:01 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi2014-09-14 12:01 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe2014-09-14 12:01 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi2014-09-14 12:01 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe2014-09-14 12:01 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll2014-09-14 12:01 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll2014-09-14 12:01 - 2014-07-24 16:03 - 00818624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll2014-09-14 12:01 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll2014-09-14 12:01 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll2014-09-14 12:01 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll2014-09-14 12:01 - 2014-07-24 15:57 - 02515264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys2014-09-14 12:01 - 2014-07-24 15:57 - 00475968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys2014-09-14 12:01 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL2014-09-14 12:01 - 2014-07-24 14:46 - 18760328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll2014-09-14 12:01 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll2014-09-14 12:01 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll2014-09-14 12:01 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll2014-09-14 12:01 - 2014-07-24 14:36 - 00674512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll2014-09-14 12:01 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll2014-09-14 12:01 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll2014-09-14 12:01 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys2014-09-14 12:01 - 2014-07-24 12:45 - 00076800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys2014-09-14 12:01 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys2014-09-14 12:01 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys2014-09-14 12:01 - 2014-07-24 12:42 - 01200640 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys2014-09-14 12:01 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys2014-09-14 12:01 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys2014-09-14 12:01 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll2014-09-14 12:01 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll2014-09-14 12:01 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersGPExt.dll2014-09-14 12:01 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll2014-09-14 12:01 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll2014-09-14 12:01 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe2014-09-14 12:01 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll2014-09-14 12:01 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll2014-09-14 12:01 - 2014-07-24 11:06 - 00438272 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll2014-09-14 12:01 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll2014-09-14 12:01 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll2014-09-14 12:01 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll2014-09-14 12:01 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll2014-09-14 12:01 - 2014-07-24 10:23 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll2014-09-14 12:01 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll2014-09-14 12:01 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll2014-09-14 12:01 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe2014-09-14 12:01 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll2014-09-14 12:01 - 2014-07-24 10:09 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll2014-09-14 12:01 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll2014-09-14 12:01 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll2014-09-14 12:01 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll2014-09-14 12:01 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll2014-09-14 12:01 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll2014-09-14 12:01 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll2014-09-14 12:01 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll2014-09-14 12:01 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll2014-09-14 12:01 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll2014-09-14 12:01 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll2014-09-14 12:01 - 2014-07-24 09:27 - 00907776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll2014-09-14 12:01 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll2014-09-14 12:01 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv2014-09-14 12:01 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll2014-09-14 12:01 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll2014-09-14 12:01 - 2014-07-24 09:19 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll2014-09-14 12:01 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe2014-09-14 12:01 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll2014-09-14 12:01 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll2014-09-14 12:01 - 2014-07-24 09:15 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll2014-09-14 12:01 - 2014-07-24 09:10 - 01029632 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll2014-09-14 12:01 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll2014-09-14 12:01 - 2014-07-24 09:10 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll2014-09-14 12:01 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv2014-09-14 12:01 - 2014-07-24 09:04 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll2014-09-14 12:01 - 2014-07-24 09:02 - 03465216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll2014-09-14 12:01 - 2014-07-24 09:01 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll2014-09-14 12:01 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll2014-09-14 12:01 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.dll2014-09-14 12:01 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll2014-09-14 12:01 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll2014-09-14 12:01 - 2014-07-24 08:46 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll2014-09-14 12:01 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.dll2014-09-14 12:01 - 2014-07-24 08:43 - 02696704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll2014-09-14 12:01 - 2014-07-24 08:38 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll2014-09-14 12:01 - 2014-07-24 08:38 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll2014-09-14 12:01 - 2014-07-24 08:33 - 03360768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll2014-09-14 12:01 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll2014-09-14 12:01 - 2014-07-24 05:11 - 00513544 _____ () C:\WINDOWS\SysWOW64\locale.nls2014-09-14 12:01 - 2014-07-24 05:11 - 00513544 _____ () C:\WINDOWS\system32\locale.nls2014-09-14 12:01 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll2014-09-14 12:01 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll2014-09-14 12:01 - 2014-07-12 05:13 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll2014-09-14 12:01 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll2014-09-14 12:01 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll2014-09-14 12:01 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll2014-09-14 12:01 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys2014-09-14 12:01 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll2014-09-14 12:01 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys2014-09-14 12:01 - 2014-06-19 03:13 - 00310080 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys2014-09-14 12:01 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll2014-09-14 12:01 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll2014-09-14 12:01 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys2014-09-14 12:01 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll2014-09-14 12:01 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll2014-09-14 12:01 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll2014-09-14 12:01 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll2014-09-14 12:01 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll2014-09-14 12:01 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll2014-09-14 12:01 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll2014-09-14 12:01 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll2014-09-14 12:01 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll2014-09-14 12:01 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll2014-09-14 12:01 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll2014-09-14 12:00 - 2014-07-24 16:28 - 00280384 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys2014-09-14 12:00 - 2014-07-24 16:25 - 00054752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe2014-09-14 12:00 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll2014-09-14 12:00 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe2014-09-14 12:00 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll2014-09-14 12:00 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVol.exe2014-09-14 12:00 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRUM.DLL2014-09-14 12:00 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYAK.DLL2014-09-14 12:00 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTT102.DLL2014-09-14 12:00 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTAT.DLL2014-09-14 12:00 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU1.DLL2014-09-14 12:00 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBASH.DLL2014-09-14 12:00 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU.DLL2014-09-14 12:00 - 2014-07-24 12:47 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll2014-09-14 12:00 - 2014-07-24 12:41 - 00118272 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys2014-09-14 12:00 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys2014-09-14 12:00 - 2014-07-24 12:33 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll2014-09-14 12:00 - 2014-07-24 12:33 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll2014-09-14 12:00 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll2014-09-14 12:00 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll2014-09-14 12:00 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYAK.DLL2014-09-14 12:00 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTT102.DLL2014-09-14 12:00 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTAT.DLL2014-09-14 12:00 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRUM.DLL2014-09-14 12:00 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU1.DLL2014-09-14 12:00 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBASH.DLL2014-09-14 12:00 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU.DLL2014-09-14 12:00 - 2014-07-24 11:33 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll2014-09-14 12:00 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl2014-09-14 12:00 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll2014-09-14 12:00 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll2014-09-14 12:00 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll2014-09-14 12:00 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll2014-09-14 12:00 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll2014-09-14 12:00 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl2014-09-14 12:00 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll2014-09-14 12:00 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll2014-09-14 12:00 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll2014-09-14 12:00 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe2014-09-14 12:00 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll2014-09-14 12:00 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll2014-09-14 12:00 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll2014-09-14 12:00 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll2014-09-14 12:00 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll2014-09-14 12:00 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll2014-09-14 12:00 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll2014-09-14 12:00 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe2014-09-14 12:00 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll2014-09-14 12:00 - 2014-07-24 09:49 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll2014-09-14 12:00 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll2014-09-14 12:00 - 2014-07-24 09:49 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll2014-09-14 12:00 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll2014-09-14 12:00 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll2014-09-14 12:00 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll2014-09-14 12:00 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll2014-09-14 12:00 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll2014-09-14 12:00 - 2014-07-24 09:24 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll2014-09-14 12:00 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll2014-09-14 12:00 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll2014-09-14 12:00 - 2014-07-24 09:18 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll2014-09-14 12:00 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll2014-09-14 12:00 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll2014-09-14 12:00 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll2014-09-14 12:00 - 2014-07-24 09:12 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll2014-09-14 12:00 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll2014-09-14 12:00 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll2014-09-14 12:00 - 2014-07-24 09:07 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll2014-09-14 12:00 - 2014-07-24 09:06 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll2014-09-14 12:00 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll2014-09-14 12:00 - 2014-07-24 09:01 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll2014-09-14 12:00 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll2014-09-14 12:00 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll2014-09-14 12:00 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll2014-09-14 12:00 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll2014-09-14 12:00 - 2014-07-24 08:50 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll2014-09-14 12:00 - 2014-07-24 08:43 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll2014-09-14 12:00 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll2014-09-14 12:00 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll2014-09-14 12:00 - 2014-07-12 06:23 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll2014-09-14 12:00 - 2014-07-12 05:33 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll2014-09-14 12:00 - 2014-07-10 00:19 - 00387391 _____ () C:\WINDOWS\system32\ApnDatabase.xml2014-09-14 12:00 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys2014-09-14 12:00 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll2014-09-14 12:00 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll2014-09-14 12:00 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll2014-09-14 12:00 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll2014-09-14 12:00 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll2014-09-14 12:00 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll2014-09-14 12:00 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll2014-09-14 12:00 - 2014-05-29 06:20 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll2014-09-14 12:00 - 2014-05-29 05:36 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll2014-09-14 12:00 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll2014-09-14 12:00 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll2014-09-14 12:00 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll2014-09-14 11:50 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys2014-09-13 03:19 - 2014-09-16 11:59 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\Curse Advertising2014-09-13 03:18 - 2014-09-17 12:34 - 00000000 ____D () C:\Users\Matthew\AppData\Local\Deployment2014-09-13 03:18 - 2014-09-13 03:18 - 00000318 _____ () C:\Users\Matthew\Desktop\Curse Client.appref-ms2014-09-13 03:18 - 2014-09-13 03:18 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse2014-09-13 03:16 - 2014-09-13 03:16 - 00402696 _____ () C:\Users\Matthew\Downloads\setup (1).exe2014-09-13 02:30 - 2014-09-13 02:30 - 00402696 _____ () C:\Users\Matthew\Downloads\setup.exe2014-09-11 23:19 - 2014-09-05 03:36 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll2014-09-11 23:19 - 2014-09-05 03:31 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll2014-09-11 23:19 - 2014-09-05 01:48 - 00738816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll2014-09-11 23:18 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll2014-09-11 23:18 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll2014-09-11 23:08 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll2014-08-28 12:35 - 2014-08-23 01:42 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys2014-08-24 17:13 - 2014-08-30 17:22 - 00000024 _____ () C:\Users\Matthew\random.dat2014-08-24 17:13 - 2014-08-30 16:56 - 00000023 _____ () C:\Users\Matthew\jagexappletviewer.preferences2014-08-24 17:13 - 2014-08-30 16:55 - 00000046 _____ () C:\Users\Matthew\jagex_cl_runescape_LIVE.dat2014-08-24 17:13 - 2014-08-24 17:13 - 00000000 ____D () C:\.jagex_cache_322014-08-24 17:12 - 2014-09-14 11:39 - 00000000 ____D () C:\Users\Matthew\jagexcache2014-08-24 17:09 - 2014-08-24 17:11 - 23810048 _____ () C:\Users\Matthew\Downloads\RuneScape.msi2014-08-21 23:44 - 2014-08-21 23:47 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft Beta2014-08-19 00:30 - 2014-08-19 11:12 - 00000000 ___RD () C:\WINDOWS\BrowserChoice ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-17 12:41 - 2014-09-17 12:41 - 00022402 _____ () C:\Users\Matthew\Downloads\FRST.txt2014-09-17 12:41 - 2014-09-17 12:41 - 00000000 ____D () C:\FRST2014-09-17 12:40 - 2014-06-27 21:21 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\Skype2014-09-17 12:39 - 2014-09-17 12:39 - 02105856 _____ (Farbar) C:\Users\Matthew\Downloads\FRST64.exe2014-09-17 12:34 - 2014-09-13 03:18 - 00000000 ____D () C:\Users\Matthew\AppData\Local\Deployment2014-09-17 12:22 - 2014-06-27 21:15 - 00000924 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job2014-09-17 12:20 - 2014-07-13 22:20 - 00000943 _____ () C:\WINDOWS\Tasks\EPSON XP-215 217 Series Update {D37FD914-FC51-4D82-9DCA-73560EC7B22F}.job2014-09-17 12:20 - 2014-07-13 22:20 - 00000757 _____ () C:\WINDOWS\Tasks\EPSON XP-215 217 Series Invitation {D37FD914-FC51-4D82-9DCA-73560EC7B22F}.job2014-09-17 12:09 - 2014-07-08 00:47 - 00000000 ____D () C:\Program Files (x86)\puush2014-09-17 12:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru2014-09-17 11:51 - 2014-06-27 21:13 - 00000000 ____D () C:\Program Files\Microsoft Office 152014-09-17 11:40 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp2014-09-17 11:38 - 2014-03-18 16:26 - 00863592 _____ () C:\WINDOWS\system32\PerfStringBackup.INI2014-09-17 11:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness2014-09-17 11:37 - 2014-08-15 13:09 - 00000000 ___DO () C:\Users\Matthew\OneDrive2014-09-17 11:37 - 2014-08-15 12:30 - 02080837 _____ () C:\WINDOWS\WindowsUpdate.log2014-09-17 11:37 - 2014-06-27 21:16 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3542506957-340128613-3862573702-10012014-09-17 11:36 - 2014-07-04 14:12 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys2014-09-17 11:34 - 2014-06-27 21:15 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2014-09-17 11:33 - 2014-06-27 21:15 - 00000920 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job2014-09-17 11:32 - 2014-08-15 12:11 - 00000000 ____D () C:\Users\Matthew2014-09-17 11:32 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT2014-09-17 11:32 - 2013-08-22 15:44 - 00371944 _____ () C:\WINDOWS\system32\FNTCACHE.DAT2014-09-17 11:31 - 2014-08-15 11:59 - 00053284 _____ () C:\WINDOWS\system32\wpbbin.exe2014-09-17 11:31 - 2014-03-18 09:16 - 00014908 _____ () C:\WINDOWS\PFRO.log2014-09-17 02:45 - 2014-07-22 19:30 - 00000000 ____D () C:\Users\Matthew\AppData\Local\Battle.net2014-09-16 15:57 - 2014-06-27 21:44 - 00000000 ____D () C:\Program Files (x86)\Steam2014-09-16 11:59 - 2014-09-13 03:19 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\Curse Advertising2014-09-16 02:12 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI2014-09-16 02:01 - 2014-07-09 17:15 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel2014-09-16 02:01 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData2014-09-16 02:01 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility2014-09-16 02:01 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility2014-09-16 02:00 - 2014-03-18 16:10 - 00000000 ____D () C:\Program Files\Windows Journal2014-09-16 02:00 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel2014-09-16 02:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore2014-09-16 02:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\setup2014-09-16 02:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\InputMethod2014-09-16 02:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\en-GB2014-09-16 02:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\setup2014-09-16 02:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\en-GB2014-09-16 02:00 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe2014-09-15 13:45 - 2014-08-15 12:54 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll2014-09-15 13:45 - 2014-08-15 12:54 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe2014-09-15 13:45 - 2014-08-15 12:54 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe2014-09-15 13:45 - 2014-08-15 12:54 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe2014-09-15 13:45 - 2014-08-15 12:54 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll2014-09-15 13:45 - 2014-08-15 12:54 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll2014-09-15 13:45 - 2014-08-15 12:54 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll2014-09-15 13:45 - 2014-08-15 12:54 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll2014-09-15 13:45 - 2014-08-15 12:54 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll2014-09-15 13:45 - 2014-08-15 12:54 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll2014-09-15 13:45 - 2014-08-15 12:54 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll2014-09-15 13:45 - 2014-08-15 12:54 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll2014-09-15 13:45 - 2014-08-15 12:40 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb2014-09-15 13:45 - 2014-08-15 12:40 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb2014-09-15 13:44 - 2014-08-15 12:54 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll2014-09-15 13:44 - 2014-08-15 12:54 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll2014-09-14 11:39 - 2014-08-24 17:12 - 00000000 ____D () C:\Users\Matthew\jagexcache2014-09-13 03:20 - 2014-08-02 15:57 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft2014-09-13 03:18 - 2014-09-13 03:18 - 00000318 _____ () C:\Users\Matthew\Desktop\Curse Client.appref-ms2014-09-13 03:18 - 2014-09-13 03:18 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse2014-09-13 03:16 - 2014-09-13 03:16 - 00402696 _____ () C:\Users\Matthew\Downloads\setup (1).exe2014-09-13 03:08 - 2013-03-18 11:25 - 00000000 ____D () C:\Program Files\Acer2014-09-13 03:08 - 2013-03-18 11:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer2014-09-13 03:02 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM2014-09-13 02:30 - 2014-09-13 02:30 - 00402696 _____ () C:\Users\Matthew\Downloads\setup.exe2014-09-12 18:45 - 2014-07-22 19:29 - 00000000 ____D () C:\Program Files (x86)\Battle.net2014-09-06 00:48 - 2014-07-21 19:27 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\Apple Computer2014-09-05 23:43 - 2013-08-22 15:46 - 00292331 _____ () C:\WINDOWS\setupact.log2014-09-05 03:36 - 2014-09-11 23:19 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll2014-09-05 03:31 - 2014-09-11 23:19 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll2014-09-05 01:48 - 2014-09-11 23:19 - 00738816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll2014-09-02 21:06 - 2014-09-16 11:46 - 00706016 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe2014-09-02 21:06 - 2014-09-16 11:46 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl2014-08-30 17:22 - 2014-08-24 17:13 - 00000024 _____ () C:\Users\Matthew\random.dat2014-08-30 16:56 - 2014-08-24 17:13 - 00000023 _____ () C:\Users\Matthew\jagexappletviewer.preferences2014-08-30 16:55 - 2014-08-24 17:13 - 00000046 _____ () C:\Users\Matthew\jagex_cl_runescape_LIVE.dat2014-08-26 12:18 - 2014-06-27 21:21 - 00000000 ____D () C:\ProgramData\Skype2014-08-25 21:54 - 2014-07-22 19:27 - 00000000 ____D () C:\ProgramData\Battle.net2014-08-25 17:44 - 2013-07-12 07:02 - 00118994 _____ () C:\WINDOWS\DPINST.LOG2014-08-24 17:13 - 2014-08-24 17:13 - 00000000 ____D () C:\.jagex_cache_322014-08-24 17:11 - 2014-08-24 17:09 - 23810048 _____ () C:\Users\Matthew\Downloads\RuneScape.msi2014-08-23 19:46 - 2014-07-22 19:30 - 00000000 ____D () C:\Users\Matthew\AppData\Roaming\Battle.net2014-08-23 08:48 - 2014-09-14 12:02 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe2014-08-23 08:13 - 2014-09-14 12:02 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe2014-08-23 07:10 - 2014-09-14 12:02 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll2014-08-23 06:32 - 2014-09-14 12:02 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll2014-08-23 05:44 - 2014-09-14 12:02 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll2014-08-23 05:34 - 2014-09-14 12:02 - 13423104 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll2014-08-23 05:33 - 2014-09-14 12:02 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll2014-08-23 05:31 - 2014-09-14 12:02 - 01038336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll2014-08-23 05:20 - 2014-09-14 12:02 - 11818496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll2014-08-23 01:42 - 2014-08-28 12:35 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys2014-08-21 23:47 - 2014-08-21 23:44 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft Beta2014-08-19 12:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache2014-08-19 11:13 - 2014-06-27 21:08 - 00000000 ____D () C:\Users\Matthew\AppData\Local\Packages2014-08-19 11:12 - 2014-08-19 00:30 - 00000000 ___RD () C:\WINDOWS\BrowserChoice2014-08-19 00:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer2014-08-19 00:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager2014-08-19 00:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera2014-08-18 23:15 - 2014-07-22 19:31 - 00000000 ____D () C:\Program Files (x86)\Hearthstone2014-08-18 19:01 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports2014-08-18 18:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore Files to move or delete:====================C:\Users\Matthew\jagex_cl_runescape_LIVE.datC:\Users\Matthew\random.dat ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-16 19:28 ==================== End Of Log ============================
  5. Thanks for getting back to me, after about an hour and a half it seems to have stopped appearing. In regard to your message, if i was to lose the pro version of malwarebytes, could my system become infected with this malware? Thanks.
  6. Hi, Every 5-10 minutes malwarebytes anti-malware blocks four different outgoing communications, all to exactly the same ip on 4 different ports, its quite worrying. I have been a long time user of skype, this is the first time this has ever happened to me. The ip that has the outgoing communication was aimed at was the same ip every time using an online ip checker i found that the ip was in the netherlands. The ports that it has been using have been increasing over the day, starting at ports of around 59810, currently almost 2 hours later it is at around 62000. This is very worrying and i would greatly appreciate some assistance on this. This is a copy of the protection log for today. Malwarebytes Anti-Malware www.malwarebytes.org Update, 10/07/2014 10:42:30, SYSTEM, LAPTOP, Scheduler, Malware Database, 2014.7.9.12, 2014.7.9.13, Protection, 10/07/2014 10:42:32, SYSTEM, LAPTOP, Protection, Refresh, Starting, Protection, 10/07/2014 10:42:32, SYSTEM, LAPTOP, Protection, Malicious Website Protection, Stopping, Protection, 10/07/2014 10:42:33, SYSTEM, LAPTOP, Protection, Malicious Website Protection, Stopped, Protection, 10/07/2014 10:43:35, SYSTEM, LAPTOP, Protection, Refresh, Success, Protection, 10/07/2014 10:43:36, SYSTEM, LAPTOP, Protection, Malicious Website Protection, Starting, Protection, 10/07/2014 10:43:37, SYSTEM, LAPTOP, Protection, Malicious Website Protection, Started, Update, 10/07/2014 13:37:06, SYSTEM, LAPTOP, Scheduler, Malware Database, 2014.7.9.13, 2014.7.10.3, Protection, 10/07/2014 13:37:16, SYSTEM, LAPTOP, Protection, Refresh, Starting, Protection, 10/07/2014 13:37:17, SYSTEM, LAPTOP, Protection, Malicious Website Protection, Stopping, Protection, 10/07/2014 13:37:18, SYSTEM, LAPTOP, Protection, Malicious Website Protection, Stopped, Protection, 10/07/2014 13:37:44, SYSTEM, LAPTOP, Protection, Refresh, Success, Protection, 10/07/2014 13:37:45, SYSTEM, LAPTOP, Protection, Malicious Website Protection, Starting, Protection, 10/07/2014 13:37:46, SYSTEM, LAPTOP, Protection, Malicious Website Protection, Started, Detection, 10/07/2014 17:09:19, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 59811, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:09:19, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 59811, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:09:20, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 59812, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:09:20, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 59813, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:09:20, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 59814, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:24:09, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 13350, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:29:25, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60228, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:29:25, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60229, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:29:25, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60230, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:29:25, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60231, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:36:39, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60484, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:36:40, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60485, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:36:40, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60486, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:36:40, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60487, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:44:38, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60841, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:44:39, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60841, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:44:39, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60842, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:44:39, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60843, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:44:39, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 60844, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:57:16, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61072, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:57:17, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61072, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:57:17, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61073, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:57:17, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61074, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 17:57:17, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61075, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:02:42, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61202, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:02:42, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61203, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:02:42, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61204, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:02:42, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61205, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:09:58, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61403, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:09:58, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61404, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:09:58, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61405, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:09:58, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61406, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:17:37, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61637, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:17:37, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61638, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:17:37, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61639, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:17:38, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61640, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:27:26, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61919, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:27:27, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61920, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:27:27, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61921, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Detection, 10/07/2014 18:27:27, SYSTEM, LAPTOP, Protection, Malicious Website Protection, IP, 79.142.74.88, 61922, Outbound, C:\Program Files (x86)\Skype\Phone\Skype.exe, Any help would be greatly appreciated. Thanks.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.