Jump to content

novemberainx

Honorary Members
 View Profile  See their activity

  • Posts

    21

  • Joined

  • Last visited

Reputation

0 Neutral
  1. novemberainx
    Thank you sooooo much for the lists, I was just about to ask for some tips and you provided them for me! Thank you for all your hard work, and taking me through this step by step. I cannot say that enough. Confirmation that my computer has NO outstanding issues, and I am extremely happy. Have a wonderful day! You are AWESOME!!
  2. novemberainx
    No not at all. It's lightning fast again, my Adfender started to work again. Am I safe now?
  3. novemberainx
    The ESET Scanner came back with no threats being detected, and I saw no prompt to get a log.
  4. novemberainx
    Good morning. Okay here is the Fixlog 11:31 PM 9/25/2014Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-09-2014 01 Ran by Kelsey at 2014-09-25 23:28:46 Run:2 Running from C:\Users\Kelsey\Desktop Loaded Profile: Kelsey (Available profiles: Kelsey) Boot Mode: Normal ============================================== Content of fixlist: ***************** start Tcpip\..\Interfaces\{22E7428A-D459-4ABD-AC59-50051B78086C}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{5930C68C-6818-4556-90A6-F28B141CBA7F}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{DC9548E0-34DC-4B41-BCC4-42F9A6ABB174}: [NameServer] 208.69.150.252,208.69.150.250 EmptyTemp: end ***************** HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{22E7428A-D459-4ABD-AC59-50051B78086C}\\NameServer => value deleted successfully. HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5930C68C-6818-4556-90A6-F28B141CBA7F}\\NameServer => value deleted successfully. HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}\\NameServer => value deleted successfully. HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC9548E0-34DC-4B41-BCC4-42F9A6ABB174}\\NameServer => value deleted successfully. EmptyTemp: => Removed 71 MB temporary data. The system needed a reboot. ==== End of Fixlog ==== I am about to run the second scan now.
  5. novemberainx
    Thank you! I am going to go to sleep, I'll be back tomorrow. Thank you sooo much for your help so far. Already my computer is running 10x better!
  6. novemberainx
    And I looked over the report, but I really couldn't recognize anything.
  7. novemberainx
    Fix log, finally! Sorry for the wait! Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-09-2014 Ran by Kelsey at 2014-09-25 13:56:38 Run:1 Running from C:\Users\Kelsey\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** start File: C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll File: C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll C:\ProgramData\SetStretch.exe C:\ProgramData\SetStretch.VBS CMD: ipconfig /flushdns CMD: netsh winsock reset all CMD: bitsadmin /reset /allusers EmptyTemp: end ***************** ========================= File: C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll ======================== "C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll" not found. ====== End Of File: ====== ========================= File: C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll ======================== "C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll" not found. ====== End Of File: ====== C:\ProgramData\SetStretch.exe => Moved successfully. C:\ProgramData\SetStretch.VBS => Moved successfully. ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= End of CMD: ========= ========= netsh winsock reset all ========= Sucessfully reset the Winsock Catalog. You must restart the computer in order to complete the reset. ========= End of CMD: ========= ========= bitsadmin /reset /allusers ========= BITSADMIN version 3.0 [ 7.7.9600 ] BITS administration utility. © Copyright 2000-2006 Microsoft Corp. BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows. Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets. 0 out of 0 jobs canceled. ========= End of CMD: ========= EmptyTemp: => Removed 996.6 MB temporary data. The system needed a reboot. ==== End of Fixlog ====
  8. novemberainx
    The IP I don't recognize anything, what am I supposed to be looking for? So far my computer seems to be back to normal. I searched something, and my browser didn't switch me to Yahoo. It seems to be faster. The only thing I've noticed is I have Adfender installed on my computer, and it's not blocking ads. Could I have disabled it by mistake?
  9. novemberainx
    Here's the log; Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2014 Ran by Kelsey (administrator) on ROCKET on 25-09-2014 13:29:52 Running from C:\Users\Kelsey\Desktop Platform: Windows 8.1 Connected (X64) OS Language: English (United States) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel® Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHWA.EXE (AOL Inc.) C:\Users\Kelsey\AppData\Local\AOL\AIM\aim.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (AdFender, Inc.) C:\Program Files (x86)\AdFender\AdFender.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSPanel.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-04-18] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-24] () HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-08-01] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1984596698-3233877183-1367041420-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHWA.EXE [239488 2011-04-24] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-1984596698-3233877183-1367041420-1001\...\Run: [AIM for Windows] => C:\Users\Kelsey\AppData\Local\AOL\AIM\aim.exe [1075144 2014-02-04] (AOL Inc.) HKU\S-1-5-21-1984596698-3233877183-1367041420-1001\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk ShortcutTarget: AdFender.lnk -> C:\Program Files (x86)\AdFender\AdFender.exe (AdFender, Inc.) ShellIconOverlayIdentifiers: !AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: !AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: !AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA0793E948FD7CF01 BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{22E7428A-D459-4ABD-AC59-50051B78086C}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{5930C68C-6818-4556-90A6-F28B141CBA7F}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{DC9548E0-34DC-4B41-BCC4-42F9A6ABB174}: [NameServer] 208.69.150.252,208.69.150.250 FireFox: ======== FF ProfilePath: C:\Users\Kelsey\AppData\Roaming\Mozilla\Firefox\Profiles\qxdx0cjx.default-1411642132038 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-24] (ASUS Cloud Corporation) [File not signed] R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-27] (WildTangent) R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel® Corporation) [File not signed] S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel® Corporation) S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-21] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-13] (Microsoft Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-05] (Microsoft Corporation) S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-21] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-21] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-23] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-23] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-06] (Qualcomm Atheros Communications, Inc.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-05] ( ) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-25] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2013-10-27] (Intel Corporation) R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-23] (Microsoft Corporation) S1 MpKslec46e7a9; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BA68BD0B-9EAA-4970-8C89-C4F13587F6FE}\MpKslec46e7a9.sys [X] U0 msahci; system32\drivers\msahci.sys ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-25 13:29 - 2014-09-25 13:29 - 00011886 _____ () C:\Users\Kelsey\Desktop\FRST.txt 2014-09-25 13:29 - 2014-09-25 13:29 - 00000308 _____ () C:\Users\Kelsey\Downloads\fixlist.text 2014-09-25 12:40 - 2014-09-25 12:41 - 00019746 _____ () C:\Users\Kelsey\Downloads\Addition.txt 2014-09-25 12:37 - 2014-09-25 12:41 - 00062185 _____ () C:\Users\Kelsey\Downloads\FRST.txt 2014-09-25 12:36 - 2014-09-25 13:29 - 00000000 ____D () C:\FRST 2014-09-25 12:35 - 2014-09-25 12:35 - 02106880 _____ (Farbar) C:\Users\Kelsey\Desktop\FRST64.exe 2014-09-25 12:32 - 2014-09-25 12:32 - 00001507 _____ () C:\Users\Kelsey\Desktop\JRT.txt 2014-09-25 12:27 - 2014-09-25 12:27 - 00000000 ____D () C:\Windows\ERUNT 2014-09-25 11:58 - 2014-09-25 11:58 - 01024790 _____ (Thisisu) C:\Users\Kelsey\Downloads\JRT.exe 2014-09-25 11:14 - 2014-09-25 11:14 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Kelsey\Downloads\tdsskiller.exe 2014-09-25 01:48 - 2014-09-25 12:19 - 00000000 ____D () C:\AdwCleaner 2014-09-25 01:46 - 2014-09-25 01:46 - 01373475 _____ () C:\Users\Kelsey\Downloads\adwcleaner_3.310.exe 2014-09-25 00:09 - 2014-09-25 00:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-24 23:48 - 2014-09-24 23:48 - 00000000 ____D () C:\Users\Kelsey\Desktop\Old Firefox Data 2014-09-24 10:20 - 2014-09-24 10:20 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Macromedia 2014-09-24 10:19 - 2014-09-25 12:34 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-24 10:19 - 2014-09-24 10:19 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-24 10:19 - 2014-09-24 10:19 - 00000000 ____D () C:\ProgramData\McAfee 2014-09-24 10:18 - 2014-09-24 10:19 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Adobe 2014-09-23 15:56 - 2014-09-25 12:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-23 15:56 - 2014-09-23 15:56 - 00001177 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-23 15:56 - 2014-09-23 15:56 - 00001165 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Mozilla 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Mozilla 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\ProgramData\Mozilla 2014-09-22 07:44 - 2014-09-22 07:44 - 00002259 _____ () C:\Windows\epplauncher.mif 2014-09-22 07:35 - 2014-09-22 07:40 - 14087848 _____ (Microsoft Corporation) C:\Users\Kelsey\Downloads\MSEInstall (1).exe 2014-09-22 07:35 - 2014-09-22 07:37 - 11447608 _____ (Microsoft Corporation) C:\Users\Kelsey\Downloads\MSEInstall.exe 2014-09-21 15:35 - 2014-09-25 12:21 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-21 15:35 - 2014-09-21 15:35 - 00001120 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-09-21 15:35 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-21 15:35 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-21 15:35 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-21 15:33 - 2014-09-21 15:34 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Kelsey\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-21 04:26 - 2014-09-21 04:27 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\ProgramData\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\Program Files (x86)\AdFender 2014-09-21 04:24 - 2014-09-21 04:25 - 02735032 _____ (AdFender, Inc.) C:\Users\Kelsey\Downloads\Setup.exe 2014-09-20 04:57 - 2014-09-20 04:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-09-15 09:43 - 2014-08-22 20:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-09-15 09:43 - 2014-08-22 20:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2014-09-15 09:43 - 2014-08-22 19:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-09-15 09:43 - 2014-08-22 18:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-09-15 09:43 - 2014-08-22 17:44 - 02860032 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2014-09-15 09:43 - 2014-08-22 17:34 - 13423104 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2014-09-15 09:43 - 2014-08-22 17:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2014-09-15 09:43 - 2014-08-22 17:31 - 01038336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2014-09-15 09:43 - 2014-08-22 17:20 - 11818496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2014-09-15 09:43 - 2014-07-29 14:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll 2014-09-15 09:43 - 2014-07-28 18:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll 2014-09-15 09:42 - 2014-07-24 04:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2014-09-15 09:42 - 2014-07-24 04:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-09-15 09:42 - 2014-07-24 04:20 - 21266336 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-09-15 09:42 - 2014-07-24 04:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2014-09-15 09:42 - 2014-07-24 04:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-09-15 09:42 - 2014-07-24 04:07 - 07424320 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-09-15 09:42 - 2014-07-24 04:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-09-15 09:42 - 2014-07-24 04:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2014-09-15 09:42 - 2014-07-24 04:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2014-09-15 09:42 - 2014-07-24 04:03 - 00818624 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2014-09-15 09:42 - 2014-07-24 04:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-09-15 09:42 - 2014-07-24 03:57 - 02515264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-09-15 09:42 - 2014-07-24 03:57 - 00475968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-09-15 09:42 - 2014-07-24 02:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-09-15 09:42 - 2014-07-24 02:46 - 18760328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-09-15 09:42 - 2014-07-24 02:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2014-09-15 09:42 - 2014-07-24 02:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2014-09-15 09:42 - 2014-07-24 02:36 - 00674512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2014-09-15 09:42 - 2014-07-24 02:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2014-09-15 09:42 - 2014-07-24 00:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-09-15 09:42 - 2014-07-24 00:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-09-15 09:42 - 2014-07-24 00:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2014-09-15 09:42 - 2014-07-23 23:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2014-09-15 09:42 - 2014-07-23 23:06 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2014-09-15 09:42 - 2014-07-23 22:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2014-09-15 09:42 - 2014-07-23 22:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll 2014-09-15 09:42 - 2014-07-23 22:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll 2014-09-15 09:42 - 2014-07-23 22:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2014-09-15 09:42 - 2014-07-23 22:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2014-09-15 09:42 - 2014-07-23 21:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2014-09-15 09:42 - 2014-07-23 21:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll 2014-09-15 09:42 - 2014-07-23 21:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2014-09-15 09:42 - 2014-07-23 21:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2014-09-15 09:42 - 2014-07-23 21:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll 2014-09-15 09:42 - 2014-07-23 21:27 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-09-15 09:42 - 2014-07-23 21:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2014-09-15 09:42 - 2014-07-23 21:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2014-09-15 09:42 - 2014-07-23 21:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-09-15 09:42 - 2014-07-23 21:10 - 01029632 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-09-15 09:42 - 2014-07-23 21:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2014-09-15 09:42 - 2014-07-23 21:02 - 03465216 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-09-15 09:42 - 2014-07-23 21:01 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2014-09-15 09:42 - 2014-07-23 21:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-09-15 09:42 - 2014-07-23 20:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2014-09-15 09:42 - 2014-07-23 20:46 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2014-09-15 09:42 - 2014-07-23 20:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll 2014-09-15 09:42 - 2014-07-23 20:43 - 02696704 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2014-09-15 09:42 - 2014-07-23 20:39 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-09-15 09:42 - 2014-07-23 20:38 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-09-15 09:42 - 2014-07-23 20:38 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-09-15 09:42 - 2014-07-23 20:30 - 02318336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-09-15 09:42 - 2014-07-23 20:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2014-09-15 09:42 - 2014-07-03 22:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll 2014-09-15 09:42 - 2014-07-03 22:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll 2014-09-15 09:42 - 2014-06-25 13:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll 2014-09-15 09:42 - 2014-06-18 15:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-09-15 09:42 - 2014-06-13 19:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-15 09:42 - 2014-06-13 18:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-09-15 09:42 - 2014-06-04 23:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll 2014-09-15 09:42 - 2014-06-04 22:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll 2014-09-15 09:42 - 2014-05-05 17:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2014-09-15 09:42 - 2014-05-05 13:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2014-09-15 09:41 - 2014-07-24 04:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2014-09-15 09:41 - 2014-07-24 04:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-09-15 09:41 - 2014-07-24 04:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2014-09-15 09:41 - 2014-07-24 04:25 - 00054752 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-09-15 09:41 - 2014-07-24 04:23 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2014-09-15 09:41 - 2014-07-24 04:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2014-09-15 09:41 - 2014-07-24 04:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe 2014-09-15 09:41 - 2014-07-24 04:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2014-09-15 09:41 - 2014-07-24 04:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2014-09-15 09:41 - 2014-07-24 04:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-09-15 09:41 - 2014-07-24 04:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2014-09-15 09:41 - 2014-07-24 04:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-09-15 09:41 - 2014-07-24 04:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-09-15 09:41 - 2014-07-24 04:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll 2014-09-15 09:41 - 2014-07-24 02:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2014-09-15 09:41 - 2014-07-24 02:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe 2014-09-15 09:41 - 2014-07-24 02:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2014-09-15 09:41 - 2014-07-24 02:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll 2014-09-15 09:41 - 2014-07-24 00:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL 2014-09-15 09:41 - 2014-07-24 00:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-09-15 09:41 - 2014-07-24 00:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-09-15 09:41 - 2014-07-24 00:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-09-15 09:41 - 2014-07-24 00:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-09-15 09:41 - 2014-07-24 00:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2014-09-15 09:41 - 2014-07-24 00:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2014-09-15 09:41 - 2014-07-24 00:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2014-09-15 09:41 - 2014-07-24 00:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys 2014-09-15 09:41 - 2014-07-24 00:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2014-09-15 09:41 - 2014-07-24 00:33 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-09-15 09:41 - 2014-07-24 00:33 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-09-15 09:41 - 2014-07-24 00:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll 2014-09-15 09:41 - 2014-07-24 00:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll 2014-09-15 09:41 - 2014-07-24 00:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-09-15 09:41 - 2014-07-23 23:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL 2014-09-15 09:41 - 2014-07-23 23:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll 2014-09-15 09:41 - 2014-07-23 23:33 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-09-15 09:41 - 2014-07-23 23:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2014-09-15 09:41 - 2014-07-23 23:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll 2014-09-15 09:41 - 2014-07-23 23:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2014-09-15 09:41 - 2014-07-23 23:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2014-09-15 09:41 - 2014-07-23 23:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-09-15 09:41 - 2014-07-23 23:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-09-15 09:41 - 2014-07-23 23:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll 2014-09-15 09:41 - 2014-07-23 23:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-09-15 09:41 - 2014-07-23 23:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll 2014-09-15 09:41 - 2014-07-23 22:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2014-09-15 09:41 - 2014-07-23 22:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2014-09-15 09:41 - 2014-07-23 22:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl 2014-09-15 09:41 - 2014-07-23 22:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll 2014-09-15 09:41 - 2014-07-23 22:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll 2014-09-15 09:41 - 2014-07-23 22:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2014-09-15 09:41 - 2014-07-23 22:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-09-15 09:41 - 2014-07-23 22:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll 2014-09-15 09:41 - 2014-07-23 22:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2014-09-15 09:41 - 2014-07-23 22:23 - 00328704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2014-09-15 09:41 - 2014-07-23 22:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2014-09-15 09:41 - 2014-07-23 22:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll 2014-09-15 09:41 - 2014-07-23 22:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll 2014-09-15 09:41 - 2014-07-23 22:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll 2014-09-15 09:41 - 2014-07-23 22:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-09-15 09:41 - 2014-07-23 22:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2014-09-15 09:41 - 2014-07-23 22:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2014-09-15 09:41 - 2014-07-23 22:09 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2014-09-15 09:41 - 2014-07-23 22:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe 2014-09-15 09:41 - 2014-07-23 22:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-09-15 09:41 - 2014-07-23 21:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll 2014-09-15 09:41 - 2014-07-23 21:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll 2014-09-15 09:41 - 2014-07-23 21:49 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2014-09-15 09:41 - 2014-07-23 21:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll 2014-09-15 09:41 - 2014-07-23 21:49 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2014-09-15 09:41 - 2014-07-23 21:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll 2014-09-15 09:41 - 2014-07-23 21:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2014-09-15 09:41 - 2014-07-23 21:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll 2014-09-15 09:41 - 2014-07-23 21:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll 2014-09-15 09:41 - 2014-07-23 21:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll 2014-09-15 09:41 - 2014-07-23 21:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll 2014-09-15 09:41 - 2014-07-23 21:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll 2014-09-15 09:41 - 2014-07-23 21:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2014-09-15 09:41 - 2014-07-23 21:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2014-09-15 09:41 - 2014-07-23 21:19 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2014-09-15 09:41 - 2014-07-23 21:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2014-09-15 09:41 - 2014-07-23 21:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2014-09-15 09:41 - 2014-07-23 21:15 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-09-15 09:41 - 2014-07-23 21:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll 2014-09-15 09:41 - 2014-07-23 21:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll 2014-09-15 09:41 - 2014-07-23 21:10 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-09-15 09:41 - 2014-07-23 21:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2014-09-15 09:41 - 2014-07-23 21:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2014-09-15 09:41 - 2014-07-23 21:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll 2014-09-15 09:41 - 2014-07-23 21:07 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-09-15 09:41 - 2014-07-23 21:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll 2014-09-15 09:41 - 2014-07-23 21:04 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-09-15 09:41 - 2014-07-23 21:01 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2014-09-15 09:41 - 2014-07-23 20:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2014-09-15 09:41 - 2014-07-23 20:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2014-09-15 09:41 - 2014-07-23 20:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-09-15 09:41 - 2014-07-23 20:50 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-09-15 09:41 - 2014-07-23 20:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2014-09-15 09:41 - 2014-07-23 20:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2014-09-15 09:41 - 2014-07-23 20:43 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-09-15 09:41 - 2014-07-23 20:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2014-09-15 09:41 - 2014-07-23 20:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2014-09-15 09:41 - 2014-07-23 20:33 - 03360768 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-09-15 09:41 - 2014-07-23 17:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls 2014-09-15 09:41 - 2014-07-23 17:11 - 00513544 _____ () C:\Windows\system32\locale.nls 2014-09-15 09:41 - 2014-07-11 18:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll 2014-09-15 09:41 - 2014-07-11 17:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll 2014-09-15 09:41 - 2014-07-11 17:13 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-15 09:41 - 2014-07-04 01:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2014-09-15 09:41 - 2014-07-03 23:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll 2014-09-15 09:41 - 2014-07-03 23:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2014-09-15 09:41 - 2014-07-03 23:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll 2014-09-15 09:41 - 2014-07-03 23:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2014-09-15 09:41 - 2014-06-26 19:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-09-15 09:41 - 2014-06-25 13:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll 2014-09-15 09:41 - 2014-06-19 12:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-09-15 09:41 - 2014-06-07 01:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll 2014-09-15 09:41 - 2014-06-06 23:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll 2014-09-15 09:41 - 2014-06-05 03:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-09-15 09:41 - 2014-05-30 18:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll 2014-09-15 09:41 - 2014-05-30 17:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll 2014-09-15 09:41 - 2014-05-28 19:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2014-09-15 09:41 - 2014-05-28 18:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll 2014-09-15 09:41 - 2014-05-28 18:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-09-15 09:41 - 2014-05-28 17:36 - 00344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-09-15 09:41 - 2014-05-25 20:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2014-09-15 09:41 - 2014-05-09 23:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2014-09-15 09:41 - 2014-05-09 21:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2014-09-15 09:41 - 2014-03-24 15:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll 2014-09-15 09:41 - 2014-03-24 15:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2014-09-15 09:41 - 2014-03-24 14:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll 2014-09-15 09:41 - 2014-03-24 14:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll 2014-09-15 09:40 - 2014-07-24 00:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL 2014-09-15 09:40 - 2014-07-24 00:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-09-15 09:40 - 2014-07-24 00:47 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2014-09-15 09:40 - 2014-07-24 00:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys 2014-09-15 09:40 - 2014-07-24 00:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll 2014-09-15 09:40 - 2014-07-23 23:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-09-15 09:40 - 2014-07-23 23:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL 2014-09-15 09:40 - 2014-07-23 23:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-09-15 09:40 - 2014-07-23 23:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-09-15 09:40 - 2014-07-23 23:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-09-15 09:40 - 2014-07-23 23:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-09-15 09:40 - 2014-07-23 22:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll 2014-09-15 09:40 - 2014-07-23 22:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll 2014-09-15 09:40 - 2014-07-23 21:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll 2014-09-15 09:40 - 2014-07-23 21:24 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-09-15 09:40 - 2014-07-23 21:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2014-09-15 09:40 - 2014-07-23 21:18 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-09-15 09:40 - 2014-07-23 21:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2014-09-15 09:40 - 2014-07-23 21:12 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-09-15 09:40 - 2014-07-23 21:06 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-09-15 09:40 - 2014-07-23 21:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll 2014-09-15 09:40 - 2014-07-11 18:23 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2014-09-15 09:40 - 2014-07-11 17:33 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2014-09-15 09:40 - 2014-07-09 12:19 - 00387391 _____ () C:\Windows\system32\ApnDatabase.xml 2014-09-15 09:32 - 2014-08-14 13:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2014-09-12 13:59 - 2014-08-15 14:56 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-12 13:59 - 2014-08-15 14:54 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-09-12 13:59 - 2014-08-15 14:43 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-09-12 13:59 - 2014-08-15 14:32 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-12 13:59 - 2014-08-15 14:25 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-09-12 13:59 - 2014-08-15 14:22 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-09-12 13:59 - 2014-08-15 14:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-09-12 13:59 - 2014-08-15 14:19 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-12 13:59 - 2014-08-15 14:18 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-12 13:59 - 2014-08-15 14:06 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-12 13:59 - 2014-08-15 14:05 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-12 13:59 - 2014-08-15 14:05 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-12 13:59 - 2014-08-15 14:03 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-09-12 13:59 - 2014-08-15 13:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-09-12 13:59 - 2014-08-15 13:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-09-12 13:59 - 2014-08-15 13:45 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-09-12 13:59 - 2014-08-15 13:44 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-09-12 13:59 - 2014-05-29 22:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-12 13:59 - 2014-05-29 21:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-09-12 13:58 - 2014-08-15 15:40 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-12 13:58 - 2014-08-15 15:04 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-09-12 13:58 - 2014-08-15 15:00 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-12 13:58 - 2014-08-15 15:00 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-12 13:58 - 2014-08-15 14:45 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-09-12 13:58 - 2014-08-15 14:18 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-09-12 13:58 - 2014-08-15 14:11 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-09-12 13:58 - 2014-08-15 14:03 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-12 13:58 - 2014-08-15 13:58 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-09-12 13:58 - 2014-08-15 13:56 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-12 13:58 - 2014-08-15 13:53 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-12 13:58 - 2014-08-15 13:51 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-09-12 13:58 - 2014-08-15 13:44 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-09-12 13:58 - 2014-08-15 13:34 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-12 13:58 - 2014-08-15 13:20 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-09-12 13:58 - 2014-08-15 13:18 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-09-12 13:58 - 2014-08-15 13:14 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-09-12 13:58 - 2014-08-15 13:12 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-09-12 10:32 - 2014-08-01 13:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-09-12 10:31 - 2014-09-04 15:36 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-09-12 10:31 - 2014-09-04 15:31 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-12 10:31 - 2014-09-04 13:48 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-12 10:31 - 2014-07-23 16:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2014-09-12 10:31 - 2014-07-23 16:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2014-09-11 16:39 - 2014-09-11 16:40 - 05238582 _____ () C:\Users\Kelsey\Desktop\pf7-setup-en.exe 2014-09-01 09:58 - 2014-09-01 09:58 - 00235398 _____ () C:\Users\Kelsey\Downloads\iTunes+Library (1).itl 2014-09-01 09:56 - 2014-09-01 09:56 - 00235398 _____ () C:\Users\Kelsey\Downloads\iTunes+Library.itl 2014-09-01 09:02 - 2014-09-01 09:03 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Apple Computer 2014-09-01 09:02 - 2014-09-01 09:02 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-09-01 09:02 - 2014-09-01 09:02 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Apple Computer 2014-09-01 09:02 - 2014-09-01 09:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-09-01 09:02 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2014-09-01 09:01 - 2014-09-01 09:02 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-09-01 09:01 - 2014-09-01 09:02 - 00000000 ____D () C:\Program Files\iTunes 2014-09-01 09:01 - 2014-09-01 09:02 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-09-01 09:01 - 2014-09-01 09:01 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-09-01 09:01 - 2014-09-01 09:01 - 00000000 ____D () C:\Program Files\iPod 2014-09-01 09:00 - 2014-09-01 09:00 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-09-01 08:59 - 2014-09-01 09:00 - 00000000 ____D () C:\ProgramData\Apple 2014-09-01 08:59 - 2014-09-01 08:59 - 00000000 ____D () C:\Program Files\Bonjour 2014-09-01 08:59 - 2014-09-01 08:59 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-09-01 08:57 - 2014-09-01 08:58 - 113492816 _____ (Apple Inc.) C:\Users\Kelsey\Downloads\iTunes64Setup.exe 2014-08-28 00:31 - 2014-08-22 13:42 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-28 00:31 - 2014-08-06 15:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-28 00:31 - 2014-08-01 16:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-25 13:30 - 2014-09-25 13:29 - 00011886 _____ () C:\Users\Kelsey\Desktop\FRST.txt 2014-09-25 13:29 - 2014-09-25 13:29 - 00000308 _____ () C:\Users\Kelsey\Downloads\fixlist.text 2014-09-25 13:29 - 2014-09-25 12:36 - 00000000 ____D () C:\FRST 2014-09-25 13:00 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\system32\sru 2014-09-25 12:41 - 2014-09-25 12:40 - 00019746 _____ () C:\Users\Kelsey\Downloads\Addition.txt 2014-09-25 12:41 - 2014-09-25 12:37 - 00062185 _____ () C:\Users\Kelsey\Downloads\FRST.txt 2014-09-25 12:35 - 2014-09-25 12:35 - 02106880 _____ (Farbar) C:\Users\Kelsey\Desktop\FRST64.exe 2014-09-25 12:35 - 2014-06-10 19:17 - 01220284 _____ () C:\Windows\WindowsUpdate.log 2014-09-25 12:34 - 2014-09-24 10:19 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-25 12:32 - 2014-09-25 12:32 - 00001507 _____ () C:\Users\Kelsey\Desktop\JRT.txt 2014-09-25 12:27 - 2014-09-25 12:27 - 00000000 ____D () C:\Windows\ERUNT 2014-09-25 12:22 - 2014-08-16 07:05 - 00000000 ___DO () C:\Users\Kelsey\OneDrive 2014-09-25 12:22 - 2014-08-16 07:03 - 00000074 _____ () C:\Users\Kelsey\AppData\Roaming\sp_data.sys 2014-09-25 12:21 - 2014-09-21 15:35 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-25 12:20 - 2014-09-23 15:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-25 12:20 - 2014-03-17 22:39 - 00007834 _____ () C:\Windows\PFRO.log 2014-09-25 12:20 - 2013-08-22 03:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-25 12:20 - 2013-08-22 02:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-09-25 12:19 - 2014-09-25 01:48 - 00000000 ____D () C:\AdwCleaner 2014-09-25 11:58 - 2014-09-25 11:58 - 01024790 _____ (Thisisu) C:\Users\Kelsey\Downloads\JRT.exe 2014-09-25 11:38 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-09-25 11:14 - 2014-09-25 11:14 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Kelsey\Downloads\tdsskiller.exe 2014-09-25 07:39 - 2014-08-16 07:43 - 00003922 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{099FC3AF-D0CB-4CC8-A360-C9E99D3D5F45} 2014-09-25 04:09 - 2014-08-16 14:47 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Skype 2014-09-25 01:46 - 2014-09-25 01:46 - 01373475 _____ () C:\Users\Kelsey\Downloads\adwcleaner_3.310.exe 2014-09-25 00:10 - 2014-09-25 00:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-24 23:48 - 2014-09-24 23:48 - 00000000 ____D () C:\Users\Kelsey\Desktop\Old Firefox Data 2014-09-24 14:46 - 2013-08-22 04:20 - 00000000 ____D () C:\Windows\CbsTemp 2014-09-24 14:44 - 2014-08-16 07:07 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1984596698-3233877183-1367041420-1001 2014-09-24 10:20 - 2014-09-24 10:20 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Macromedia 2014-09-24 10:19 - 2014-09-24 10:19 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-24 10:19 - 2014-09-24 10:19 - 00000000 ____D () C:\ProgramData\McAfee 2014-09-24 10:19 - 2014-09-24 10:18 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Adobe 2014-09-23 16:00 - 2014-08-16 07:48 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Google 2014-09-23 16:00 - 2014-08-16 07:48 - 00000000 ____D () C:\Program Files (x86)\Google 2014-09-23 15:56 - 2014-09-23 15:56 - 00001177 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-23 15:56 - 2014-09-23 15:56 - 00001165 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Mozilla 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Mozilla 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\ProgramData\Mozilla 2014-09-22 14:02 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\rescache 2014-09-22 07:44 - 2014-09-22 07:44 - 00002259 _____ () C:\Windows\epplauncher.mif 2014-09-22 07:40 - 2014-09-22 07:35 - 14087848 _____ (Microsoft Corporation) C:\Users\Kelsey\Downloads\MSEInstall (1).exe 2014-09-22 07:37 - 2014-09-22 07:35 - 11447608 _____ (Microsoft Corporation) C:\Users\Kelsey\Downloads\MSEInstall.exe 2014-09-22 07:07 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\Registration 2014-09-22 06:43 - 2014-03-17 22:47 - 00863592 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-22 06:41 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\AppReadiness 2014-09-21 19:42 - 2014-08-16 07:28 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-09-21 15:35 - 2014-09-21 15:35 - 00001120 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-09-21 15:34 - 2014-09-21 15:33 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Kelsey\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-21 04:36 - 2013-08-22 03:44 - 00337808 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-09-21 04:27 - 2014-09-21 04:26 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\ProgramData\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\Program Files (x86)\AdFender 2014-09-21 04:25 - 2014-09-21 04:24 - 02735032 _____ (AdFender, Inc.) C:\Users\Kelsey\Downloads\Setup.exe 2014-09-20 04:57 - 2014-09-20 04:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-09-20 04:57 - 2014-08-16 14:47 - 00002531 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-09-20 04:57 - 2014-08-16 14:47 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-09-20 04:57 - 2014-08-16 14:47 - 00000000 ____D () C:\ProgramData\Skype 2014-09-20 04:50 - 2014-03-17 22:33 - 00000000 ____D () C:\Program Files\Windows Journal 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ___RD () C:\Windows\ToastData 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\WinStore 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\SysWOW64\setup 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\system32\setup 2014-09-20 04:50 - 2013-08-22 02:36 - 00000000 ____D () C:\Windows\system32\oobe 2014-09-20 02:08 - 2014-08-18 10:59 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-20 02:01 - 2014-08-18 10:59 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-18 05:34 - 2014-08-24 09:16 - 00000000 ____D () C:\Program Files (x86)\Origin 2014-09-14 15:39 - 2014-08-21 10:45 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-12 13:59 - 2014-04-18 12:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-09-12 13:59 - 2014-04-18 12:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-12 13:59 - 2014-04-18 12:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-12 13:59 - 2014-04-18 12:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-09-12 13:59 - 2014-04-18 12:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-09-12 13:59 - 2014-04-18 12:43 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-09-11 16:40 - 2014-09-11 16:39 - 05238582 _____ () C:\Users\Kelsey\Desktop\pf7-setup-en.exe 2014-09-07 15:30 - 2014-08-24 09:16 - 00000000 ____D () C:\ProgramData\Origin 2014-09-07 15:29 - 2014-08-24 09:19 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Origin 2014-09-04 15:36 - 2014-09-12 10:31 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-09-04 15:31 - 2014-09-12 10:31 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-04 13:48 - 2014-09-12 10:31 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-02 09:06 - 2014-08-21 10:52 - 00706016 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-02 09:06 - 2014-08-21 10:52 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-01 09:58 - 2014-09-01 09:58 - 00235398 _____ () C:\Users\Kelsey\Downloads\iTunes+Library (1).itl 2014-09-01 09:56 - 2014-09-01 09:56 - 00235398 _____ () C:\Users\Kelsey\Downloads\iTunes+Library.itl 2014-09-01 09:03 - 2014-09-01 09:02 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Apple Computer 2014-09-01 09:02 - 2014-09-01 09:02 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-09-01 09:02 - 2014-09-01 09:02 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Apple Computer 2014-09-01 09:02 - 2014-09-01 09:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-09-01 09:02 - 2014-09-01 09:01 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-09-01 09:02 - 2014-09-01 09:01 - 00000000 ____D () C:\Program Files\iTunes 2014-09-01 09:02 - 2014-09-01 09:01 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-09-01 09:01 - 2014-09-01 09:01 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-09-01 09:01 - 2014-09-01 09:01 - 00000000 ____D () C:\Program Files\iPod 2014-09-01 09:00 - 2014-09-01 09:00 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-09-01 09:00 - 2014-09-01 08:59 - 00000000 ____D () C:\ProgramData\Apple 2014-09-01 08:59 - 2014-09-01 08:59 - 00000000 ____D () C:\Program Files\Bonjour 2014-09-01 08:59 - 2014-09-01 08:59 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-09-01 08:58 - 2014-09-01 08:57 - 113492816 _____ (Apple Inc.) C:\Users\Kelsey\Downloads\iTunes64Setup.exe Files to move or delete: ==================== C:\ProgramData\SetStretch.exe C:\ProgramData\SetStretch.VBS Some content of TEMP: ==================== C:\Users\Kelsey\AppData\Local\Temp\Quarantine.exe C:\Users\Kelsey\AppData\Local\Temp\SpOrder.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-21 06:11 ==================== End Of Log ============================
  10. novemberainx
    And thank you for the clarification on Sqlite.
  11. novemberainx
    Sorry!!!!! Here is the whole log. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2014 Ran by Kelsey (administrator) on ROCKET on 25-09-2014 12:37:11 Running from C:\Users\Kelsey\Downloads Platform: Windows 8.1 Connected (X64) OS Language: English (United States) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel® Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHWA.EXE (AOL Inc.) C:\Users\Kelsey\AppData\Local\AOL\AIM\aim.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (AdFender, Inc.) C:\Program Files (x86)\AdFender\AdFender.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSPanel.exe (Thisisu) C:\Users\Kelsey\Downloads\JRT.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-04-18] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-24] () HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-08-01] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1984596698-3233877183-1367041420-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHWA.EXE [239488 2011-04-24] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-1984596698-3233877183-1367041420-1001\...\Run: [AIM for Windows] => C:\Users\Kelsey\AppData\Local\AOL\AIM\aim.exe [1075144 2014-02-04] (AOL Inc.) HKU\S-1-5-21-1984596698-3233877183-1367041420-1001\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk ShortcutTarget: AdFender.lnk -> C:\Program Files (x86)\AdFender\AdFender.exe (AdFender, Inc.) ShellIconOverlayIdentifiers: !AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: !AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: !AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA0793E948FD7CF01 BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{22E7428A-D459-4ABD-AC59-50051B78086C}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{5930C68C-6818-4556-90A6-F28B141CBA7F}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{DC9548E0-34DC-4B41-BCC4-42F9A6ABB174}: [NameServer] 208.69.150.252,208.69.150.250 FireFox: ======== FF ProfilePath: C:\Users\Kelsey\AppData\Roaming\Mozilla\Firefox\Profiles\qxdx0cjx.default-1411642132038 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-24] (ASUS Cloud Corporation) [File not signed] R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-27] (WildTangent) R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel® Corporation) [File not signed] S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel® Corporation) S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-21] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-13] (Microsoft Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-05] (Microsoft Corporation) S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-21] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-21] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-23] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-23] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-06] (Qualcomm Atheros Communications, Inc.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-05] ( ) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-25] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2013-10-27] (Intel Corporation) R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-23] (Microsoft Corporation) S1 MpKslec46e7a9; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BA68BD0B-9EAA-4970-8C89-C4F13587F6FE}\MpKslec46e7a9.sys [X] U0 msahci; system32\drivers\msahci.sys ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-25 12:37 - 2014-09-25 12:38 - 00011933 _____ () C:\Users\Kelsey\Downloads\FRST.txt 2014-09-25 12:36 - 2014-09-25 12:37 - 00000000 ____D () C:\FRST 2014-09-25 12:35 - 2014-09-25 12:35 - 02106880 _____ (Farbar) C:\Users\Kelsey\Downloads\FRST64.exe 2014-09-25 12:32 - 2014-09-25 12:32 - 00001507 _____ () C:\Users\Kelsey\Desktop\JRT.txt 2014-09-25 12:27 - 2014-09-25 12:27 - 00000000 ____D () C:\Windows\ERUNT 2014-09-25 11:58 - 2014-09-25 11:58 - 01024790 _____ (Thisisu) C:\Users\Kelsey\Downloads\JRT.exe 2014-09-25 11:14 - 2014-09-25 11:14 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Kelsey\Downloads\tdsskiller.exe 2014-09-25 01:48 - 2014-09-25 12:19 - 00000000 ____D () C:\AdwCleaner 2014-09-25 01:46 - 2014-09-25 01:46 - 01373475 _____ () C:\Users\Kelsey\Downloads\adwcleaner_3.310.exe 2014-09-25 00:09 - 2014-09-25 00:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-24 23:48 - 2014-09-24 23:48 - 00000000 ____D () C:\Users\Kelsey\Desktop\Old Firefox Data 2014-09-24 10:20 - 2014-09-24 10:20 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Macromedia 2014-09-24 10:19 - 2014-09-25 12:34 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-24 10:19 - 2014-09-24 10:19 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-24 10:19 - 2014-09-24 10:19 - 00000000 ____D () C:\ProgramData\McAfee 2014-09-24 10:18 - 2014-09-24 10:19 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Adobe 2014-09-23 15:56 - 2014-09-25 12:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-23 15:56 - 2014-09-23 15:56 - 00001177 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-23 15:56 - 2014-09-23 15:56 - 00001165 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Mozilla 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Mozilla 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\ProgramData\Mozilla 2014-09-22 07:44 - 2014-09-22 07:44 - 00002259 _____ () C:\Windows\epplauncher.mif 2014-09-22 07:35 - 2014-09-22 07:40 - 14087848 _____ (Microsoft Corporation) C:\Users\Kelsey\Downloads\MSEInstall (1).exe 2014-09-22 07:35 - 2014-09-22 07:37 - 11447608 _____ (Microsoft Corporation) C:\Users\Kelsey\Downloads\MSEInstall.exe 2014-09-21 15:35 - 2014-09-25 12:21 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-21 15:35 - 2014-09-21 15:35 - 00001120 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-09-21 15:35 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-21 15:35 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-21 15:35 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-21 15:33 - 2014-09-21 15:34 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Kelsey\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-21 04:26 - 2014-09-21 04:27 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\ProgramData\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\Program Files (x86)\AdFender 2014-09-21 04:24 - 2014-09-21 04:25 - 02735032 _____ (AdFender, Inc.) C:\Users\Kelsey\Downloads\Setup.exe 2014-09-20 04:57 - 2014-09-20 04:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-09-15 09:43 - 2014-08-22 20:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-09-15 09:43 - 2014-08-22 20:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2014-09-15 09:43 - 2014-08-22 19:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-09-15 09:43 - 2014-08-22 18:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-09-15 09:43 - 2014-08-22 17:44 - 02860032 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2014-09-15 09:43 - 2014-08-22 17:34 - 13423104 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2014-09-15 09:43 - 2014-08-22 17:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2014-09-15 09:43 - 2014-08-22 17:31 - 01038336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2014-09-15 09:43 - 2014-08-22 17:20 - 11818496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2014-09-15 09:43 - 2014-07-29 14:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll 2014-09-15 09:43 - 2014-07-28 18:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll 2014-09-15 09:42 - 2014-07-24 04:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2014-09-15 09:42 - 2014-07-24 04:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-09-15 09:42 - 2014-07-24 04:20 - 21266336 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-09-15 09:42 - 2014-07-24 04:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2014-09-15 09:42 - 2014-07-24 04:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-09-15 09:42 - 2014-07-24 04:07 - 07424320 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-09-15 09:42 - 2014-07-24 04:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-09-15 09:42 - 2014-07-24 04:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2014-09-15 09:42 - 2014-07-24 04:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2014-09-15 09:42 - 2014-07-24 04:03 - 00818624 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2014-09-15 09:42 - 2014-07-24 04:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-09-15 09:42 - 2014-07-24 03:57 - 02515264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-09-15 09:42 - 2014-07-24 03:57 - 00475968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-09-15 09:42 - 2014-07-24 02:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-09-15 09:42 - 2014-07-24 02:46 - 18760328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-09-15 09:42 - 2014-07-24 02:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2014-09-15 09:42 - 2014-07-24 02:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2014-09-15 09:42 - 2014-07-24 02:36 - 00674512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2014-09-15 09:42 - 2014-07-24 02:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2014-09-15 09:42 - 2014-07-24 00:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-09-15 09:42 - 2014-07-24 00:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-09-15 09:42 - 2014-07-24 00:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2014-09-15 09:42 - 2014-07-23 23:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2014-09-15 09:42 - 2014-07-23 23:06 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2014-09-15 09:42 - 2014-07-23 22:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2014-09-15 09:42 - 2014-07-23 22:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll 2014-09-15 09:42 - 2014-07-23 22:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll 2014-09-15 09:42 - 2014-07-23 22:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2014-09-15 09:42 - 2014-07-23 22:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2014-09-15 09:42 - 2014-07-23 21:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2014-09-15 09:42 - 2014-07-23 21:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll 2014-09-15 09:42 - 2014-07-23 21:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2014-09-15 09:42 - 2014-07-23 21:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2014-09-15 09:42 - 2014-07-23 21:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll 2014-09-15 09:42 - 2014-07-23 21:27 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-09-15 09:42 - 2014-07-23 21:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2014-09-15 09:42 - 2014-07-23 21:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2014-09-15 09:42 - 2014-07-23 21:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-09-15 09:42 - 2014-07-23 21:10 - 01029632 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-09-15 09:42 - 2014-07-23 21:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2014-09-15 09:42 - 2014-07-23 21:02 - 03465216 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-09-15 09:42 - 2014-07-23 21:01 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2014-09-15 09:42 - 2014-07-23 21:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-09-15 09:42 - 2014-07-23 20:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2014-09-15 09:42 - 2014-07-23 20:46 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2014-09-15 09:42 - 2014-07-23 20:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll 2014-09-15 09:42 - 2014-07-23 20:43 - 02696704 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2014-09-15 09:42 - 2014-07-23 20:39 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-09-15 09:42 - 2014-07-23 20:38 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-09-15 09:42 - 2014-07-23 20:38 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-09-15 09:42 - 2014-07-23 20:30 - 02318336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-09-15 09:42 - 2014-07-23 20:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2014-09-15 09:42 - 2014-07-03 22:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll 2014-09-15 09:42 - 2014-07-03 22:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll 2014-09-15 09:42 - 2014-06-25 13:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll 2014-09-15 09:42 - 2014-06-18 15:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-09-15 09:42 - 2014-06-13 19:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-15 09:42 - 2014-06-13 18:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-09-15 09:42 - 2014-06-04 23:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll 2014-09-15 09:42 - 2014-06-04 22:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll 2014-09-15 09:42 - 2014-05-05 17:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2014-09-15 09:42 - 2014-05-05 13:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2014-09-15 09:41 - 2014-07-24 04:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2014-09-15 09:41 - 2014-07-24 04:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-09-15 09:41 - 2014-07-24 04:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2014-09-15 09:41 - 2014-07-24 04:25 - 00054752 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-09-15 09:41 - 2014-07-24 04:23 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2014-09-15 09:41 - 2014-07-24 04:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2014-09-15 09:41 - 2014-07-24 04:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe 2014-09-15 09:41 - 2014-07-24 04:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2014-09-15 09:41 - 2014-07-24 04:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2014-09-15 09:41 - 2014-07-24 04:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-09-15 09:41 - 2014-07-24 04:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2014-09-15 09:41 - 2014-07-24 04:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-09-15 09:41 - 2014-07-24 04:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-09-15 09:41 - 2014-07-24 04:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll 2014-09-15 09:41 - 2014-07-24 02:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2014-09-15 09:41 - 2014-07-24 02:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe 2014-09-15 09:41 - 2014-07-24 02:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2014-09-15 09:41 - 2014-07-24 02:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll 2014-09-15 09:41 - 2014-07-24 00:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL 2014-09-15 09:41 - 2014-07-24 00:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-09-15 09:41 - 2014-07-24 00:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-09-15 09:41 - 2014-07-24 00:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-09-15 09:41 - 2014-07-24 00:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-09-15 09:41 - 2014-07-24 00:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2014-09-15 09:41 - 2014-07-24 00:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2014-09-15 09:41 - 2014-07-24 00:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2014-09-15 09:41 - 2014-07-24 00:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys 2014-09-15 09:41 - 2014-07-24 00:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2014-09-15 09:41 - 2014-07-24 00:33 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-09-15 09:41 - 2014-07-24 00:33 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-09-15 09:41 - 2014-07-24 00:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll 2014-09-15 09:41 - 2014-07-24 00:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll 2014-09-15 09:41 - 2014-07-24 00:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-09-15 09:41 - 2014-07-23 23:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL 2014-09-15 09:41 - 2014-07-23 23:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll 2014-09-15 09:41 - 2014-07-23 23:33 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-09-15 09:41 - 2014-07-23 23:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2014-09-15 09:41 - 2014-07-23 23:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll 2014-09-15 09:41 - 2014-07-23 23:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2014-09-15 09:41 - 2014-07-23 23:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2014-09-15 09:41 - 2014-07-23 23:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-09-15 09:41 - 2014-07-23 23:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-09-15 09:41 - 2014-07-23 23:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll 2014-09-15 09:41 - 2014-07-23 23:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-09-15 09:41 - 2014-07-23 23:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll 2014-09-15 09:41 - 2014-07-23 22:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll 2014-09-15 09:41 - 2014-07-23 22:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2014-09-15 09:41 - 2014-07-23 22:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl 2014-09-15 09:41 - 2014-07-23 22:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll 2014-09-15 09:41 - 2014-07-23 22:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll 2014-09-15 09:41 - 2014-07-23 22:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2014-09-15 09:41 - 2014-07-23 22:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-09-15 09:41 - 2014-07-23 22:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll 2014-09-15 09:41 - 2014-07-23 22:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2014-09-15 09:41 - 2014-07-23 22:23 - 00328704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll 2014-09-15 09:41 - 2014-07-23 22:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2014-09-15 09:41 - 2014-07-23 22:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll 2014-09-15 09:41 - 2014-07-23 22:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll 2014-09-15 09:41 - 2014-07-23 22:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll 2014-09-15 09:41 - 2014-07-23 22:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-09-15 09:41 - 2014-07-23 22:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2014-09-15 09:41 - 2014-07-23 22:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2014-09-15 09:41 - 2014-07-23 22:09 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2014-09-15 09:41 - 2014-07-23 22:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe 2014-09-15 09:41 - 2014-07-23 22:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-09-15 09:41 - 2014-07-23 21:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll 2014-09-15 09:41 - 2014-07-23 21:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll 2014-09-15 09:41 - 2014-07-23 21:49 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2014-09-15 09:41 - 2014-07-23 21:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll 2014-09-15 09:41 - 2014-07-23 21:49 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2014-09-15 09:41 - 2014-07-23 21:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll 2014-09-15 09:41 - 2014-07-23 21:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2014-09-15 09:41 - 2014-07-23 21:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll 2014-09-15 09:41 - 2014-07-23 21:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll 2014-09-15 09:41 - 2014-07-23 21:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll 2014-09-15 09:41 - 2014-07-23 21:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll 2014-09-15 09:41 - 2014-07-23 21:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll 2014-09-15 09:41 - 2014-07-23 21:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2014-09-15 09:41 - 2014-07-23 21:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll 2014-09-15 09:41 - 2014-07-23 21:19 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2014-09-15 09:41 - 2014-07-23 21:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2014-09-15 09:41 - 2014-07-23 21:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2014-09-15 09:41 - 2014-07-23 21:15 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-09-15 09:41 - 2014-07-23 21:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll 2014-09-15 09:41 - 2014-07-23 21:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll 2014-09-15 09:41 - 2014-07-23 21:10 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-09-15 09:41 - 2014-07-23 21:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2014-09-15 09:41 - 2014-07-23 21:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2014-09-15 09:41 - 2014-07-23 21:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll 2014-09-15 09:41 - 2014-07-23 21:07 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-09-15 09:41 - 2014-07-23 21:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll 2014-09-15 09:41 - 2014-07-23 21:04 - 00667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-09-15 09:41 - 2014-07-23 21:01 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2014-09-15 09:41 - 2014-07-23 20:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2014-09-15 09:41 - 2014-07-23 20:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2014-09-15 09:41 - 2014-07-23 20:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-09-15 09:41 - 2014-07-23 20:50 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-09-15 09:41 - 2014-07-23 20:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2014-09-15 09:41 - 2014-07-23 20:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2014-09-15 09:41 - 2014-07-23 20:43 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-09-15 09:41 - 2014-07-23 20:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2014-09-15 09:41 - 2014-07-23 20:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2014-09-15 09:41 - 2014-07-23 20:33 - 03360768 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-09-15 09:41 - 2014-07-23 17:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls 2014-09-15 09:41 - 2014-07-23 17:11 - 00513544 _____ () C:\Windows\system32\locale.nls 2014-09-15 09:41 - 2014-07-11 18:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll 2014-09-15 09:41 - 2014-07-11 17:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll 2014-09-15 09:41 - 2014-07-11 17:13 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-15 09:41 - 2014-07-04 01:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2014-09-15 09:41 - 2014-07-03 23:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll 2014-09-15 09:41 - 2014-07-03 23:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2014-09-15 09:41 - 2014-07-03 23:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll 2014-09-15 09:41 - 2014-07-03 23:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2014-09-15 09:41 - 2014-06-26 19:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-09-15 09:41 - 2014-06-25 13:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll 2014-09-15 09:41 - 2014-06-19 12:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-09-15 09:41 - 2014-06-07 01:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll 2014-09-15 09:41 - 2014-06-06 23:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll 2014-09-15 09:41 - 2014-06-05 03:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-09-15 09:41 - 2014-05-30 18:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll 2014-09-15 09:41 - 2014-05-30 17:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll 2014-09-15 09:41 - 2014-05-28 19:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2014-09-15 09:41 - 2014-05-28 18:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll 2014-09-15 09:41 - 2014-05-28 18:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-09-15 09:41 - 2014-05-28 17:36 - 00344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-09-15 09:41 - 2014-05-25 20:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2014-09-15 09:41 - 2014-05-09 23:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2014-09-15 09:41 - 2014-05-09 21:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2014-09-15 09:41 - 2014-03-24 15:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll 2014-09-15 09:41 - 2014-03-24 15:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2014-09-15 09:41 - 2014-03-24 14:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll 2014-09-15 09:41 - 2014-03-24 14:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll 2014-09-15 09:40 - 2014-07-24 00:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL 2014-09-15 09:40 - 2014-07-24 00:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-09-15 09:40 - 2014-07-24 00:47 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2014-09-15 09:40 - 2014-07-24 00:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys 2014-09-15 09:40 - 2014-07-24 00:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll 2014-09-15 09:40 - 2014-07-23 23:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-09-15 09:40 - 2014-07-23 23:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL 2014-09-15 09:40 - 2014-07-23 23:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-09-15 09:40 - 2014-07-23 23:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-09-15 09:40 - 2014-07-23 23:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-09-15 09:40 - 2014-07-23 23:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-09-15 09:40 - 2014-07-23 22:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll 2014-09-15 09:40 - 2014-07-23 22:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll 2014-09-15 09:40 - 2014-07-23 21:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll 2014-09-15 09:40 - 2014-07-23 21:24 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-09-15 09:40 - 2014-07-23 21:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2014-09-15 09:40 - 2014-07-23 21:18 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-09-15 09:40 - 2014-07-23 21:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2014-09-15 09:40 - 2014-07-23 21:12 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-09-15 09:40 - 2014-07-23 21:06 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-09-15 09:40 - 2014-07-23 21:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll 2014-09-15 09:40 - 2014-07-11 18:23 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2014-09-15 09:40 - 2014-07-11 17:33 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2014-09-15 09:40 - 2014-07-09 12:19 - 00387391 _____ () C:\Windows\system32\ApnDatabase.xml 2014-09-15 09:32 - 2014-08-14 13:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2014-09-12 13:59 - 2014-08-15 14:56 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-12 13:59 - 2014-08-15 14:54 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-09-12 13:59 - 2014-08-15 14:43 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-09-12 13:59 - 2014-08-15 14:32 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-12 13:59 - 2014-08-15 14:25 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-09-12 13:59 - 2014-08-15 14:22 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-09-12 13:59 - 2014-08-15 14:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-09-12 13:59 - 2014-08-15 14:19 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-12 13:59 - 2014-08-15 14:18 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-12 13:59 - 2014-08-15 14:06 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-12 13:59 - 2014-08-15 14:05 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-12 13:59 - 2014-08-15 14:05 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-12 13:59 - 2014-08-15 14:03 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-09-12 13:59 - 2014-08-15 13:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-09-12 13:59 - 2014-08-15 13:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-09-12 13:59 - 2014-08-15 13:45 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-09-12 13:59 - 2014-08-15 13:44 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-09-12 13:59 - 2014-05-29 22:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-12 13:59 - 2014-05-29 21:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-09-12 13:58 - 2014-08-15 15:40 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-12 13:58 - 2014-08-15 15:04 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-09-12 13:58 - 2014-08-15 15:00 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-12 13:58 - 2014-08-15 15:00 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-12 13:58 - 2014-08-15 14:45 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-09-12 13:58 - 2014-08-15 14:18 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-09-12 13:58 - 2014-08-15 14:11 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-09-12 13:58 - 2014-08-15 14:03 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-12 13:58 - 2014-08-15 13:58 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-09-12 13:58 - 2014-08-15 13:56 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-12 13:58 - 2014-08-15 13:53 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-12 13:58 - 2014-08-15 13:51 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-09-12 13:58 - 2014-08-15 13:44 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-09-12 13:58 - 2014-08-15 13:34 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-12 13:58 - 2014-08-15 13:20 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-09-12 13:58 - 2014-08-15 13:18 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-09-12 13:58 - 2014-08-15 13:14 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-09-12 13:58 - 2014-08-15 13:12 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-09-12 10:32 - 2014-08-01 13:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-09-12 10:31 - 2014-09-04 15:36 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-09-12 10:31 - 2014-09-04 15:31 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-12 10:31 - 2014-09-04 13:48 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-12 10:31 - 2014-07-23 16:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2014-09-12 10:31 - 2014-07-23 16:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2014-09-11 16:39 - 2014-09-11 16:40 - 05238582 _____ () C:\Users\Kelsey\Desktop\pf7-setup-en.exe 2014-09-01 09:58 - 2014-09-01 09:58 - 00235398 _____ () C:\Users\Kelsey\Downloads\iTunes+Library (1).itl 2014-09-01 09:56 - 2014-09-01 09:56 - 00235398 _____ () C:\Users\Kelsey\Downloads\iTunes+Library.itl 2014-09-01 09:02 - 2014-09-01 09:03 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Apple Computer 2014-09-01 09:02 - 2014-09-01 09:02 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-09-01 09:02 - 2014-09-01 09:02 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Apple Computer 2014-09-01 09:02 - 2014-09-01 09:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-09-01 09:02 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2014-09-01 09:01 - 2014-09-01 09:02 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-09-01 09:01 - 2014-09-01 09:02 - 00000000 ____D () C:\Program Files\iTunes 2014-09-01 09:01 - 2014-09-01 09:02 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-09-01 09:01 - 2014-09-01 09:01 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-09-01 09:01 - 2014-09-01 09:01 - 00000000 ____D () C:\Program Files\iPod 2014-09-01 09:00 - 2014-09-01 09:00 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-09-01 08:59 - 2014-09-01 09:00 - 00000000 ____D () C:\ProgramData\Apple 2014-09-01 08:59 - 2014-09-01 08:59 - 00000000 ____D () C:\Program Files\Bonjour 2014-09-01 08:59 - 2014-09-01 08:59 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-09-01 08:57 - 2014-09-01 08:58 - 113492816 _____ (Apple Inc.) C:\Users\Kelsey\Downloads\iTunes64Setup.exe 2014-08-28 00:31 - 2014-08-22 13:42 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-28 00:31 - 2014-08-06 15:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-28 00:31 - 2014-08-01 16:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-25 12:38 - 2014-09-25 12:37 - 00011933 _____ () C:\Users\Kelsey\Downloads\FRST.txt 2014-09-25 12:37 - 2014-09-25 12:36 - 00000000 ____D () C:\FRST 2014-09-25 12:35 - 2014-09-25 12:35 - 02106880 _____ (Farbar) C:\Users\Kelsey\Downloads\FRST64.exe 2014-09-25 12:35 - 2014-06-10 19:17 - 01220284 _____ () C:\Windows\WindowsUpdate.log 2014-09-25 12:34 - 2014-09-24 10:19 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-25 12:32 - 2014-09-25 12:32 - 00001507 _____ () C:\Users\Kelsey\Desktop\JRT.txt 2014-09-25 12:27 - 2014-09-25 12:27 - 00000000 ____D () C:\Windows\ERUNT 2014-09-25 12:22 - 2014-08-16 07:05 - 00000000 ___DO () C:\Users\Kelsey\OneDrive 2014-09-25 12:22 - 2014-08-16 07:03 - 00000074 _____ () C:\Users\Kelsey\AppData\Roaming\sp_data.sys 2014-09-25 12:21 - 2014-09-21 15:35 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-25 12:20 - 2014-09-23 15:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-25 12:20 - 2014-03-17 22:39 - 00007834 _____ () C:\Windows\PFRO.log 2014-09-25 12:20 - 2013-08-22 03:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-25 12:20 - 2013-08-22 02:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-09-25 12:19 - 2014-09-25 01:48 - 00000000 ____D () C:\AdwCleaner 2014-09-25 12:00 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\system32\sru 2014-09-25 11:58 - 2014-09-25 11:58 - 01024790 _____ (Thisisu) C:\Users\Kelsey\Downloads\JRT.exe 2014-09-25 11:38 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-09-25 11:14 - 2014-09-25 11:14 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Kelsey\Downloads\tdsskiller.exe 2014-09-25 07:39 - 2014-08-16 07:43 - 00003922 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{099FC3AF-D0CB-4CC8-A360-C9E99D3D5F45} 2014-09-25 04:09 - 2014-08-16 14:47 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Skype 2014-09-25 01:46 - 2014-09-25 01:46 - 01373475 _____ () C:\Users\Kelsey\Downloads\adwcleaner_3.310.exe 2014-09-25 00:10 - 2014-09-25 00:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-24 23:48 - 2014-09-24 23:48 - 00000000 ____D () C:\Users\Kelsey\Desktop\Old Firefox Data 2014-09-24 14:46 - 2013-08-22 04:20 - 00000000 ____D () C:\Windows\CbsTemp 2014-09-24 14:44 - 2014-08-16 07:07 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1984596698-3233877183-1367041420-1001 2014-09-24 10:20 - 2014-09-24 10:20 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Macromedia 2014-09-24 10:19 - 2014-09-24 10:19 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-24 10:19 - 2014-09-24 10:19 - 00000000 ____D () C:\ProgramData\McAfee 2014-09-24 10:19 - 2014-09-24 10:18 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Adobe 2014-09-23 16:00 - 2014-08-16 07:48 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Google 2014-09-23 16:00 - 2014-08-16 07:48 - 00000000 ____D () C:\Program Files (x86)\Google 2014-09-23 15:56 - 2014-09-23 15:56 - 00001177 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-23 15:56 - 2014-09-23 15:56 - 00001165 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Mozilla 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Mozilla 2014-09-23 15:56 - 2014-09-23 15:56 - 00000000 ____D () C:\ProgramData\Mozilla 2014-09-22 14:02 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\rescache 2014-09-22 07:44 - 2014-09-22 07:44 - 00002259 _____ () C:\Windows\epplauncher.mif 2014-09-22 07:40 - 2014-09-22 07:35 - 14087848 _____ (Microsoft Corporation) C:\Users\Kelsey\Downloads\MSEInstall (1).exe 2014-09-22 07:37 - 2014-09-22 07:35 - 11447608 _____ (Microsoft Corporation) C:\Users\Kelsey\Downloads\MSEInstall.exe 2014-09-22 07:07 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\Registration 2014-09-22 06:43 - 2014-03-17 22:47 - 00863592 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-22 06:41 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\AppReadiness 2014-09-21 19:42 - 2014-08-16 07:28 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-09-21 15:35 - 2014-09-21 15:35 - 00001120 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-21 15:35 - 2014-09-21 15:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-09-21 15:34 - 2014-09-21 15:33 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Kelsey\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-21 04:36 - 2013-08-22 03:44 - 00337808 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-09-21 04:27 - 2014-09-21 04:26 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\ProgramData\AdFender 2014-09-21 04:26 - 2014-09-21 04:26 - 00000000 ____D () C:\Program Files (x86)\AdFender 2014-09-21 04:25 - 2014-09-21 04:24 - 02735032 _____ (AdFender, Inc.) C:\Users\Kelsey\Downloads\Setup.exe 2014-09-20 04:57 - 2014-09-20 04:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-09-20 04:57 - 2014-08-16 14:47 - 00002531 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-09-20 04:57 - 2014-08-16 14:47 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-09-20 04:57 - 2014-08-16 14:47 - 00000000 ____D () C:\ProgramData\Skype 2014-09-20 04:50 - 2014-03-17 22:33 - 00000000 ____D () C:\Program Files\Windows Journal 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ___RD () C:\Windows\ToastData 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\WinStore 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\SysWOW64\setup 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod 2014-09-20 04:50 - 2013-08-22 04:36 - 00000000 ____D () C:\Windows\system32\setup 2014-09-20 04:50 - 2013-08-22 02:36 - 00000000 ____D () C:\Windows\system32\oobe 2014-09-20 02:08 - 2014-08-18 10:59 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-20 02:01 - 2014-08-18 10:59 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-18 05:34 - 2014-08-24 09:16 - 00000000 ____D () C:\Program Files (x86)\Origin 2014-09-14 15:39 - 2014-08-21 10:45 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-12 13:59 - 2014-04-18 12:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-09-12 13:59 - 2014-04-18 12:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-12 13:59 - 2014-04-18 12:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-12 13:59 - 2014-04-18 12:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-09-12 13:59 - 2014-04-18 12:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-09-12 13:59 - 2014-04-18 12:43 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-09-12 13:59 - 2014-04-18 12:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-09-11 16:40 - 2014-09-11 16:39 - 05238582 _____ () C:\Users\Kelsey\Desktop\pf7-setup-en.exe 2014-09-07 15:30 - 2014-08-24 09:16 - 00000000 ____D () C:\ProgramData\Origin 2014-09-07 15:29 - 2014-08-24 09:19 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Origin 2014-09-04 15:36 - 2014-09-12 10:31 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-09-04 15:31 - 2014-09-12 10:31 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-04 13:48 - 2014-09-12 10:31 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-02 09:06 - 2014-08-21 10:52 - 00706016 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-02 09:06 - 2014-08-21 10:52 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-01 09:58 - 2014-09-01 09:58 - 00235398 _____ () C:\Users\Kelsey\Downloads\iTunes+Library (1).itl 2014-09-01 09:56 - 2014-09-01 09:56 - 00235398 _____ () C:\Users\Kelsey\Downloads\iTunes+Library.itl 2014-09-01 09:03 - 2014-09-01 09:02 - 00000000 ____D () C:\Users\Kelsey\AppData\Roaming\Apple Computer 2014-09-01 09:02 - 2014-09-01 09:02 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-09-01 09:02 - 2014-09-01 09:02 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Apple Computer 2014-09-01 09:02 - 2014-09-01 09:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-09-01 09:02 - 2014-09-01 09:01 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-09-01 09:02 - 2014-09-01 09:01 - 00000000 ____D () C:\Program Files\iTunes 2014-09-01 09:02 - 2014-09-01 09:01 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-09-01 09:01 - 2014-09-01 09:01 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-09-01 09:01 - 2014-09-01 09:01 - 00000000 ____D () C:\Program Files\iPod 2014-09-01 09:00 - 2014-09-01 09:00 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-09-01 09:00 - 2014-09-01 09:00 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-09-01 09:00 - 2014-09-01 08:59 - 00000000 ____D () C:\ProgramData\Apple 2014-09-01 08:59 - 2014-09-01 08:59 - 00000000 ____D () C:\Program Files\Bonjour 2014-09-01 08:59 - 2014-09-01 08:59 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-09-01 08:58 - 2014-09-01 08:57 - 113492816 _____ (Apple Inc.) C:\Users\Kelsey\Downloads\iTunes64Setup.exe Files to move or delete: ==================== C:\ProgramData\SetStretch.exe C:\ProgramData\SetStretch.VBS Some content of TEMP: ==================== C:\Users\Kelsey\AppData\Local\Temp\Quarantine.exe C:\Users\Kelsey\AppData\Local\Temp\SpOrder.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-21 06:11 ==================== End Of Log ============================
  12. novemberainx
    Additional. Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-09-2014 Ran by Kelsey at 2014-09-25 12:40:12 Running from C:\Users\Kelsey\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) AdFender (HKLM-x32\...\AdFender) (Version: 1.83 - AdFender, Inc.) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) AIM for Windows (HKCU\...\AIM) (Version: - AOL Inc.) Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.2.8 - ASUS) ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.3 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0021 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.9 - ASUS) ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5712.52 - CyberLink Corp.) ASUSDVD (x32 Version: 10.0.5712.52 - CyberLink Corp.) Hidden AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.311 - ASUSTEK) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0031 - ASUS) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) EPSON WorkForce 545 Series Printer Uninstall (HKLM\...\EPSON WorkForce 545 Series) (Version: - SEIKO EPSON Corporation) Game Explorer Categories - casual (HKLM-x32\...\WildTangentGameProvider-asus-casual) (Version: 3.2.0.6 - WildTangent, Inc.) Game Explorer Categories - enthusiast (HKLM-x32\...\WildTangentGameProvider-asus-enthusiast) (Version: 3.2.0.6 - WildTangent, Inc.) Game Explorer Categories - family (HKLM-x32\...\WildTangentGameProvider-asus-family) (Version: 3.2.0.6 - WildTangent, Inc.) Game Explorer Categories - kids (HKLM-x32\...\WildTangentGameProvider-asus-kids) (Version: 3.2.0.6 - WildTangent, Inc.) Game Explorer Categories - touch (HKLM-x32\...\WildTangentGameProvider-asus-touch) (Version: 3.2.0.6 - WildTangent, Inc.) Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3355 - Intel Corporation) Intel® Sideband Fabric Device Driver (HKLM-x32\...\C5A8BC6E-723A-4C0F-96E1-C426D1A4BCA9) (Version: 1.0.0.1002 - Intel Corporation) Intel® Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation) Intel® Trusted Execution Engine (Version: 1.1.1.1 - Intel Corporation) Hidden Intel® Trusted Execution Engine Driver (Version: 1.0.0.1064 - Intel Corporation) Hidden iTunes (HKLM\...\{77DE5105-D05E-448C-96CB-7FA381903753}) (Version: 11.3.1.2 - Apple Inc.) Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 32.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 en-US)) (Version: 32.0.3 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.2 - Mozilla) Origin (HKLM-x32\...\Origin) (Version: 9.4.20.386 - Electronic Arts, Inc.) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7213 - Realtek Semiconductor Corp.) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation) Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.) The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.42.130 - Electronic Arts) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.2.301 - ASUS Cloud Corporation) WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.2 - WildTangent) Windows Driver Package - ASUS (ATP) Mouse (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 11-09-2014 00:52:39 Scheduled Checkpoint 15-09-2014 02:37:53 Windows Update 19-09-2014 14:35:22 Windows Update 25-09-2014 01:44:50 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 02:25 - 2013-08-22 02:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {1DFB4E93-A50C-4368-B841-E397A1CD8A34} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-17] (Microsoft Corporation) Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {2860F7A3-7312-4E33-A49A-C4A482F86B53} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {2D9126DE-032D-49B2-820A-E40F9AFA8D87} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv Task: {2F77C99A-CC26-4B19-9C48-9E056CFD5D78} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-11-04] () Task: {302CC9D7-E9A0-44B2-B6C9-E581565CDE65} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-21] (Microsoft Corporation) Task: {371E8A9F-1C8D-4DD9-8BB2-3273A6978AF8} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-03-20] (Realtek Semiconductor) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {59A6FEA7-9A79-45A6-9DF6-D96B6E748927} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-09-20] (Microsoft Corporation) Task: {61B342AA-9DDF-44FA-9D7D-FB9996356F61} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {690C8AC4-1C09-463B-92C7-FD28CAFAFE8E} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2014-03-11] () Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {738065ED-D60C-41A4-BB79-7210E1F354A9} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {743982EF-54CC-4D89-967C-6867A5EC5FFD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated) Task: {77CEE2AD-C081-4937-ACC6-95927AD5F34D} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-03-30] (Realtek Semiconductor) Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {7CFD618F-80A2-4B79-8910-1B9900ED1089} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-10-07] (ASUSTeK Computer Inc.) Task: {82683EB0-50AD-4E1E-8D81-4D2E8BE195B2} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-10-07] (ASUS) Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {957BC611-1402-4921-B043-B94764421E42} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D66CC15F-8C22-4DE7-8DE7-A0BC65C43F13} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-03-27] (ASUSTek Computer Inc.) Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: {E853A63E-B75E-4E0E-A904-FB83BF55839C} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek) Task: {EAE483F9-F1D4-42F8-A9D1-2340B7CBDB2F} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86) [2014-09-25] () Task: {FB1878DC-8EC1-4F09-A068-B1CC86817D10} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86) [2014-09-25] () Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2014-02-23 23:59 - 2014-02-23 23:59 - 00109056 _____ () C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSHomeCloudAPI.dll 2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-07-31 12:16 - 2014-07-31 12:16 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-10-08 16:41 - 2013-10-08 16:41 - 00037968 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll 2013-09-09 14:23 - 2013-09-09 14:23 - 00162816 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll 2014-02-04 10:47 - 2014-02-04 10:47 - 23782856 _____ () C:\Users\Kelsey\AppData\Local\AOL\AIM\libcef.dll 2014-02-04 08:33 - 2014-02-04 08:33 - 16233864 _____ () C:\Users\Kelsey\AppData\Local\AOL\AIM\npswf32.dll 2014-09-25 00:09 - 2014-09-25 00:09 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Kelsey\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Error: (09/25/2014 00:40:54 PM) (Source: DCOM) (EventID: 10010) (User: ROCKET) Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (09/25/2014 00:40:24 PM) (Source: DCOM) (EventID: 10010) (User: ROCKET) Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (09/25/2014 00:38:35 PM) (Source: DCOM) (EventID: 10010) (User: ROCKET) Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (09/25/2014 00:38:05 PM) (Source: DCOM) (EventID: 10010) (User: ROCKET) Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (09/25/2014 00:37:35 PM) (Source: DCOM) (EventID: 10010) (User: ROCKET) Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (09/25/2014 00:37:05 PM) (Source: DCOM) (EventID: 10010) (User: ROCKET) Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (09/25/2014 00:36:35 PM) (Source: DCOM) (EventID: 10010) (User: ROCKET) Description: {9AA46009-3CE0-458A-A354-715610A075E6} Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2014-09-21 04:38:02.659 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-21 04:38:02.331 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-21 04:36:56.798 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-09-21 04:36:56.517 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-09-20 05:00:57.586 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-20 05:00:57.059 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2014-09-20 04:53:31.990 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-09-20 04:53:31.677 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-09-19 03:38:15.181 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-09-19 03:38:14.957 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. ==================== Memory info =========================== Processor: Intel® Celeron® CPU N2830 @ 2.16GHz Percentage of memory in use: 44% Total physical RAM: 3982.68 MB Available physical RAM: 2209.07 MB Total Pagefile: 4686.68 MB Available Pagefile: 2755.32 MB Total Virtual: 131072 MB Available Virtual: 131071.8 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:444.65 GB) (Free:405.76 GB) NTFS ==>[system with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 3F7852A4) Partition: GPT Partition Type. ==================== End Of Log ============================ When I went to run this program, I noticed something called Sqlite which I've never seen before. Should I be concerned?
  13. novemberainx
    FRST: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2014 Ran by Kelsey (administrator) on ROCKET on 25-09-2014 12:37:11 Running from C:\Users\Kelsey\Downloads Platform: Windows 8.1 Connected (X64) OS Language: English (United States) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel® Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHWA.EXE (AOL Inc.) C:\Users\Kelsey\AppData\Local\AOL\AIM\aim.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (AdFender, Inc.) C:\Program Files (x86)\AdFender\AdFender.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSPanel.exe (Thisisu) C:\Users\Kelsey\Downloads\JRT.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-04-18] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-24] () HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-08-01] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1984596698-3233877183-1367041420-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHWA.EXE [239488 2011-04-24] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-1984596698-3233877183-1367041420-1001\...\Run: [AIM for Windows] => C:\Users\Kelsey\AppData\Local\AOL\AIM\aim.exe [1075144 2014-02-04] (AOL Inc.) HKU\S-1-5-21-1984596698-3233877183-1367041420-1001\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk ShortcutTarget: AdFender.lnk -> C:\Program Files (x86)\AdFender\AdFender.exe (AdFender, Inc.) ShellIconOverlayIdentifiers: !AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: !AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: !AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA0793E948FD7CF01 BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{22E7428A-D459-4ABD-AC59-50051B78086C}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{5930C68C-6818-4556-90A6-F28B141CBA7F}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 208.69.150.252,208.69.150.250 Tcpip\..\Interfaces\{DC9548E0-34DC-4B41-BCC4-42F9A6ABB174}: [NameServer] 208.69.150.252,208.69.150.250 FireFox: ======== FF ProfilePath: C:\Users\Kelsey\AppData\Roaming\Mozilla\Firefox\Profiles\qxdx0cjx.default-1411642132038 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-24] (ASUS Cloud Corporation) [File not signed] R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-27] (WildTangent) R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel® Corporation) [File not signed] S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel® Corporation) S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-21] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-13] (Microsoft Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-05] (Microsoft Corporation) S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-21] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-21] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-23] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-23] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-06] (Qualcomm Atheros Communications, Inc.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-05] ( ) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-25] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2013-10-27] (Intel Corporation) R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-23] (Microsoft Corporation) S1 MpKslec46e7a9; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BA68BD0B-9EAA-4970-8C89-C4F13587F6FE}\MpKslec46e7a9.sys [X] U0 msahci; system32\drivers\msahci.sys ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-25 12:37 - 2014-09-25 12:38 - 00011933 _____ () C:\Users\Kelsey\Downloads\FRST.txt 2014-09-25 12:36 - 2014-09-25 12:37 - 00000000 ____D () C:\FRST 2014-09-25 12:35 - 2014-09-25 12:35 - 02106880 _____ (Farbar) C:\Users\Kelsey\Downloads\FRST64.exe 2014-09-25 12:32 - 2014-09-25 12:32 - 00001507 _____ () C:\Users\Kelsey\Desktop\JRT.txt 2014-09-25 12:27 - 2014-09-25 12:27 - 00000000 ____D () C:\Windows\ERUNT 2014-09-25 11:58 - 2014-09-25 11:58 - 01024790 _____ (Thisisu) C:\Users\Kelsey\Downloads\JRT.exe 2014-09-25 11:14 - 2014-09-25 11:14 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Kelsey\Downloads\tdsskiller.exe 2014-09-25 01:48 - 2014-09-25 12:19 - 00000000 ____D () C:\AdwCleaner 2014-09-25 01:46 - 2014-09-25 01:46 - 01373475 _____ () C:\Users\Kelsey\Downloads\adwcleaner_3.310.exe 2014-09-25 00:09 - 2014-09-25 00:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-24 23:48 - 2014-09-24 23:48 - 00000000 ____D () C:\Users\Kelsey\Desktop\Old Firefox Data 2014-09-24 10:20 - 2014-09-24 10:20 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Macromedia 2014-09-24 10:19 - 2014-09-25 12:34 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-24 10:19 - 2014-09-24 10:19 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-24 10:19 - 2014-09-24 10:19 - 00000000 ____D () C:\ProgramData\McAfee 2014-09-24 10:18 - 2014-09-24 10:19 - 00000000 ____D () C:\Users\Kelsey\AppData\Local\Adobe
  14. novemberainx
    This is for the Junkware Removal Tool ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.2.0 (09.22.2014:1) OS: Windows 8.1 Connected x64 Ran by Kelsey on Thu 09/25/2014 at 12:27:46.62 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1984596698-3233877183-1367041420-1001\Software\Microsoft\Internet Explorer\Main\\Start Page ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\Kelsey\AppData\Roaming\mozilla\firefox\profiles\qxdx0cjx.default-1411642132038\minidumps [1 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Thu 09/25/2014 at 12:32:27.51 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ So far so good. Next is coming the FRS log.
  15. novemberainx
    Here is my log on Adwcleaner # AdwCleaner v3.310 - Report created 25/09/2014 at 12:01:01 # Updated 12/09/2014 by Xplode # Operating System : Windows 8.1 Connected (64 bits) # Username : Kelsey - ROCKET # Running from : C:\Users\Kelsey\Downloads\adwcleaner_3.310.exe # Option : Scan ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Found : C:\Program Files (x86)\Common Files\Software Update Utility ***** [ Scheduled Tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Found : HKCU\Software\Linkey Key Found : HKCU\Software\Softonic Key Found : [x64] HKCU\Software\Linkey Key Found : [x64] HKCU\Software\Softonic Key Found : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1} Key Found : HKLM\SOFTWARE\Classes\AppID\dnu.EXE Key Found : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96} Key Found : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70} Key Found : HKLM\SOFTWARE\Classes\dnUpdate Key Found : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser Key Found : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1 Key Found : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController Key Found : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1 Key Found : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5} Key Found : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90} Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.17278 -\\ Mozilla Firefox v32.0.3 (x86 en-US) [ File : C:\Users\Kelsey\AppData\Roaming\Mozilla\Firefox\Profiles\qxdx0cjx.default-1411642132038\prefs.js ] ************************* AdwCleaner[R0].txt - [2503 octets] - [25/09/2014 01:48:45] AdwCleaner[R1].txt - [2403 octets] - [25/09/2014 12:01:01] ########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [2463 octets] ########## I know that the Linkey and Softsonic are worthy of deleting, but I'm not sure what is legitimate and what isn't. Should I just clear them all?
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.