Seattlebaby
-
Posts
30 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by Seattlebaby
-
-
6 minutes ago, Malwarebytes said:
***This is an automated reply***
Hi,
Thanks for posting in the Malwarebytes for Windows Help forum.
If you are having technical issues with our Windows product, please do the following:
Malwarebytes Support Tool - Advanced Options
This feature is designed for the following reasons:
- For use when you are on the forums and need to provide logs for assistance
- For use when you don't need or want to create a ticket with Malwarebytes
- For use when you want to perform local troubleshooting on your own
How to use the Advanced Options:
- Download Malwarebytes Support Tool
-
Double-click mb-support-X.X.X.XXXX.exe to run the program
- You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
- Place a checkmark next to Accept License Agreement and click Next
- Navigate to the Advanced tab
-
The Advanced menu page contains four categories:
- Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand.
- Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot.
- Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent.
- Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program.
- To provide logs for review click the Gather Logs button
- Upon completion, click OK
- A file named mbst-grab-results.zip will be saved to your Desktop
- Please attach the file in your next reply.
- To uninstall all Malwarebytes Products, click the Clean button.
- Click the Yes button to proceed.
- Save all your work and click OK when you are ready to reboot.
- After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows.
- Select Yes to install Malwarebytes.
- Malwarebytes for Windows will open once the installation completes successfully.
Screenshots:
If you are having licensing issues, please do the following:
For any of these issues:
- Renewals
- Refunds (including double billing)
- Cancellations
- Update Billing Info
- Multiple Transactions
- Consumer Purchases
- Transaction Receipt
Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help
If you need help looking up your license details, please head here: Find my premium license keyThanks in advance for your patience.
-The Malwarebytes Forum Team
Here's the file for support
-
If you turn it off it seems to stop doing it, however not sure if thats the right thing to do. Also wondering if its a false positive in the update I just got. Running the software to see whats happening.
-
Not sure what's going on but its blocking and many other play.google ect. Also Reddit other social media works.
-
I just tried to reinstall my malware bytes, and it shows my license is blacklisted. I went to the page where it shows you can deactivate the devices on this account, and it showed 2. Strange I only have it on one PC. Also I got a strange call from some guy asking is my PC Okay! Its working fine. I'm using it now I thought to myself, and said I don't own a PC. He hung up! Well im thinking now they've been in my email and got my license. number. I need help with this blacklisted issue is my first step.
I did run CC Cleaner and RKill and Hitman Pro after RKill first, and then CC Cleaner last. Rkill killed something off! Also I did a support ticket. Hope that helps speed things along.
Rkill 2.8.4 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2019 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.htmlProgram started at: 10/03/2019 04:38:29 AM in x64 mode.
Windows Version: Windows 7 Ultimate Service Pack 1Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* C:\Users\BUYNSE~1\AppData\Local\Temp\92bf00bd-1215-4b01-bea5-adc4885bdb37\setup.exe (PID: 30176) [T-HEUR]
1 proccess terminated!
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* Windows Defender Disabled
[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001Checking Windows Service Integrity:
* Windows Defender (WinDefend) is not Running.
Startup Type set to: Manual* TBS [Missing Service]
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* No issues found.
Program finished at: 10/03/2019 04:38:52 AM
Execution time: 0 hours(s), 0 minute(s), and 23 seconds(s) -
Hello,
Please update your DB, this has been unblocked.
Andres
Just did will update if it happens again..
-
This is showing up as a Malicious website.
-
Everything that didn't delete I also went in and removed it. Thank you for the Help Ma Good Man.
-
# DelFix v10.8 - Logfile created 21/09/2014 at 22:32:16# Updated 29/07/2014 by Xplode# Username : Mathematics - MATHEMATICS-PC# Operating System : Windows Vista Ultimate Service Pack 2 (64 bits)~ Removing disinfection tools ...Deleted : C:\QooboxDeleted : C:\FRSTDeleted : C:\AdwCleanerDeleted : C:\ComboFix.txtDeleted : C:\JavaRa.logDeleted : C:\Users\Mathematics\Desktop\AdwCleaner[s0].txtDeleted : C:\Users\Mathematics\Desktop\JRT.txtDeleted : C:\Users\Mathematics\Desktop\JavaRa.logDeleted : C:\Users\Mathematics\Desktop\Rkill.txtDeleted : C:\Users\Mathematics\Desktop\RKreport_SCN_09152014_005949.logDeleted : C:\Users\Mathematics\Downloads\Addition.txtDeleted : C:\Users\Mathematics\Downloads\AdwCleaner (1).exeDeleted : C:\Users\Mathematics\Downloads\adwcleaner.exeDeleted : C:\Users\Mathematics\Downloads\esetsmartinstaller_enu.exeDeleted : C:\Users\Mathematics\Downloads\FRST.txtDeleted : C:\Users\Mathematics\Downloads\FRST64 (1).exeDeleted : C:\Users\Mathematics\Downloads\FRST64.exeDeleted : C:\Users\Mathematics\Downloads\JRT (1).exeDeleted : C:\Users\Mathematics\Downloads\JRT.exeDeleted : C:\Users\Mathematics\Downloads\JavaRa-1.16-28-5-13.zipDeleted : C:\Users\Mathematics\Downloads\MiniToolBox (1).exeDeleted : C:\Users\Mathematics\Downloads\MiniToolBox.exeDeleted : C:\Users\Mathematics\Downloads\Result.txtDeleted : C:\Users\Mathematics\Downloads\rkill (1).exeDeleted : C:\Users\Mathematics\Downloads\rkill (2).exeDeleted : C:\Users\Mathematics\Downloads\rkill.exeDeleted : C:\Users\Mathematics\Downloads\RogueKillerX64.exeDeleted : C:\Users\Mathematics\Downloads\SecurityCheck.exeDeleted : C:\Users\Mathematics\Downloads\TFC.exeDeleted : C:\Windows\grep.exeDeleted : C:\Windows\PEV.exeDeleted : C:\Windows\NIRCMD.exeDeleted : C:\Windows\MBR.exeDeleted : C:\Windows\SED.exeDeleted : C:\Windows\SWREG.exeDeleted : C:\Windows\SWSC.exeDeleted : C:\Windows\SWXCACLS.exeDeleted : C:\Windows\Zip.exeDeleted : HKLM\SOFTWARE\AdwCleanerDeleted : HKLM\SOFTWARE\Swearware
-
Well looks like everything is fine now. I did thrown in a ipconfig/dnsflush command also but I can log in. Thank You very much for the Help and I appreciate you working with me. We got rid of a lot of garbage and speed my computer up considerably.
Thank You Sir
-
MiniToolBox by Farbar Version: 21-07-2014Ran by Mathematics (administrator) on 20-09-2014 at 02:54:30Running from "C:\Users\Mathematics\Downloads"Microsoft® Windows Vista™ Ultimate Service Pack 2 (X64)Boot Mode: Normal***************************************************************************========================= Flush DNS: ===================================Windows IP ConfigurationSuccessfully flushed the DNS Resolver Cache.========================= IE Proxy Settings: ==============================Proxy is not enabled.No Proxy Server is set."Reset IE Proxy Settings": IE Proxy Settings were reset.========================= FF Proxy Settings: =============================="Reset FF Proxy Settings": Firefox Proxy settings were reset.========================= Hosts content: =================================127.0.0.1 localhost========================= IP Configuration: ================================Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller = Local Area Connection (Connected)# ----------------------------------# IPv4 Configuration# ----------------------------------pushd interface ipv4resetset global icmpredirects=enabledpopd# End of IPv4 configurationWindows IP ConfigurationHost Name . . . . . . . . . . . . : Mathematics-PCPrimary Dns Suffix . . . . . . . :Node Type . . . . . . . . . . . . : HybridIP Routing Enabled. . . . . . . . : NoWINS Proxy Enabled. . . . . . . . : NoEthernet adapter Local Area Connection:Connection-specific DNS Suffix . :Description . . . . . . . . . . . : Marvell Yukon 88E8056 PCI-E Gigabit Ethernet ControllerPhysical Address. . . . . . . . . : 00-24-8C-1B-6C-EBDHCP Enabled. . . . . . . . . . . : YesAutoconfiguration Enabled . . . . : YesLink-local IPv6 Address . . . . . : fe80::80dd:c4c5:9061:ed1e%10(Preferred)IPv4 Address. . . . . . . . . . . : 192.168.1.4(Preferred)Subnet Mask . . . . . . . . . . . : 255.255.255.0Lease Obtained. . . . . . . . . . : Friday, September 19, 2014 4:06:27 PMLease Expires . . . . . . . . . . : Sunday, September 21, 2014 2:43:07 AMDefault Gateway . . . . . . . . . : 192.168.1.1DHCP Server . . . . . . . . . . . : 192.168.1.1DHCPv6 IAID . . . . . . . . . . . : 251667596DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-D7-3F-BD-00-24-8C-1B-6C-EBDNS Servers . . . . . . . . . . . : 208.67.222.222208.67.220.220NetBIOS over Tcpip. . . . . . . . : EnabledTunnel adapter Local Area Connection* 6:Media State . . . . . . . . . . . : Media disconnectedConnection-specific DNS Suffix . :Description . . . . . . . . . . . : isatap.{D6BB94D4-3AE7-4D49-A776-6393D96E8307}Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0DHCP Enabled. . . . . . . . . . . : NoAutoconfiguration Enabled . . . . : YesTunnel adapter Local Area Connection* 7:Media State . . . . . . . . . . . : Media disconnectedConnection-specific DNS Suffix . :Description . . . . . . . . . . . : Teredo Tunneling Pseudo-InterfacePhysical Address. . . . . . . . . : 02-00-54-55-4E-01DHCP Enabled. . . . . . . . . . . : NoAutoconfiguration Enabled . . . . : YesServer: resolver1.opendns.comAddress: 208.67.222.222Name: google.comAddresses: 2607:f8b0:4000:80a::1008173.194.115.102173.194.115.104173.194.115.97173.194.115.103173.194.115.98173.194.115.100173.194.115.96173.194.115.110173.194.115.105173.194.115.99173.194.115.101Pinging google.com [173.194.115.96] with 32 bytes of data:General failure.Reply from 173.194.115.96: bytes=32 time=16ms TTL=51Ping statistics for 173.194.115.96:Packets: Sent = 2, Received = 1, Lost = 1 (50% loss),Approximate round trip times in milli-seconds:Minimum = 16ms, Maximum = 16ms, Average = 16msServer: resolver1.opendns.comAddress: 208.67.222.222Name: yahoo.comAddresses: 98.138.253.109206.190.36.4598.139.183.24Pinging yahoo.com [206.190.36.45] with 32 bytes of data:General failure.Reply from 206.190.36.45: bytes=32 time=76ms TTL=43Ping statistics for 206.190.36.45:Packets: Sent = 2, Received = 1, Lost = 1 (50% loss),Approximate round trip times in milli-seconds:Minimum = 76ms, Maximum = 76ms, Average = 76msPinging 127.0.0.1 with 32 bytes of data:Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Ping statistics for 127.0.0.1:Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds:Minimum = 0ms, Maximum = 0ms, Average = 0ms===========================================================================Interface List10 ...00 24 8c 1b 6c eb ...... Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller1 ........................... Software Loopback Interface 112 ...00 00 00 00 00 00 00 e0 isatap.{D6BB94D4-3AE7-4D49-A776-6393D96E8307}11 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface===========================================================================IPv4 Route Table===========================================================================Active Routes:Network Destination Netmask Gateway Interface Metric0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.4 10127.0.0.0 255.0.0.0 On-link 127.0.0.1 306127.0.0.1 255.255.255.255 On-link 127.0.0.1 306127.255.255.255 255.255.255.255 On-link 127.0.0.1 306192.168.1.0 255.255.255.0 On-link 192.168.1.4 266192.168.1.4 255.255.255.255 On-link 192.168.1.4 266192.168.1.255 255.255.255.255 On-link 192.168.1.4 266224.0.0.0 240.0.0.0 On-link 127.0.0.1 306224.0.0.0 240.0.0.0 On-link 192.168.1.4 266255.255.255.255 255.255.255.255 On-link 127.0.0.1 306255.255.255.255 255.255.255.255 On-link 192.168.1.4 266===========================================================================Persistent Routes:NoneIPv6 Route Table===========================================================================Active Routes:If Metric Network Destination Gateway1 306 ::1/128 On-link10 266 fe80::/64 On-link10 266 fe80::80dd:c4c5:9061:ed1e/128On-link1 306 ff00::/8 On-link10 266 ff00::/8 On-link===========================================================================Persistent Routes:None========================= Winsock entries =====================================Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [48128] (Microsoft Corporation)Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [50176] (Microsoft Corporation)Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [62464] (Microsoft Corporation)Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [62464] (Microsoft Corporation)Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [19968] (Microsoft Corporation)Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [61440] (Microsoft Corporation)x64-Catalog5 02 C:\Windows\System32\napinsp.dll [62976] (Microsoft Corporation)x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [78848] (Microsoft Corporation)x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [78848] (Microsoft Corporation)x64-Catalog5 05 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog5 06 C:\Windows\System32\winrnr.dll [27648] (Microsoft Corporation)x64-Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)x64-Catalog9 01 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 02 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 03 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 04 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 05 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 06 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 07 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 08 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 09 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 10 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)========================= Event log errors: ===============================Application errors:==================Error: (09/20/2014 02:15:27 AM) (Source: Bonjour Service) (User: )Description: Task Scheduling Error: m->NextScheduledSPRetry 5008Error: (09/20/2014 02:15:27 AM) (Source: Bonjour Service) (User: )Description: Task Scheduling Error: m->NextScheduledEvent 5008Error: (09/20/2014 02:15:27 AM) (Source: Bonjour Service) (User: )Description: Task Scheduling Error: Continuously busy for more than a secondError: (09/20/2014 02:15:26 AM) (Source: Bonjour Service) (User: )Description: Task Scheduling Error: m->NextScheduledSPRetry 4009Error: (09/20/2014 02:15:26 AM) (Source: Bonjour Service) (User: )Description: Task Scheduling Error: m->NextScheduledEvent 4009Error: (09/20/2014 02:15:26 AM) (Source: Bonjour Service) (User: )Description: Task Scheduling Error: Continuously busy for more than a secondError: (09/20/2014 02:15:25 AM) (Source: Bonjour Service) (User: )Description: Task Scheduling Error: m->NextScheduledSPRetry 3011Error: (09/20/2014 02:15:25 AM) (Source: Bonjour Service) (User: )Description: Task Scheduling Error: m->NextScheduledEvent 3011Error: (09/20/2014 02:15:25 AM) (Source: Bonjour Service) (User: )Description: Task Scheduling Error: Continuously busy for more than a secondError: (09/20/2014 02:15:24 AM) (Source: Bonjour Service) (User: )Description: Task Scheduling Error: m->NextScheduledSPRetry 2013System errors:=============Error: (09/20/2014 02:43:01 AM) (Source: Service Control Manager) (User: )Description: 30000NetmanError: (09/20/2014 00:04:05 AM) (Source: bowser) (User: )Description: The master browser has received a server announcement from the computer MATHEMATICIA-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{D6BB94D4-3AE7-4D49-A776-6393D96E8307}.The master browser is stopping or an election is being forced.Error: (09/19/2014 06:32:43 PM) (Source: bowser) (User: )Description: The master browser has received a server announcement from the computer MATHEMATICIA-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{D6BB94D4-3AE7-4D49-A776-6393D96E8307}.The master browser is stopping or an election is being forced.Error: (09/19/2014 05:33:19 PM) (Source: bowser) (User: )Description: The master browser has received a server announcement from the computer MATHEMATICIA-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{D6BB94D4-3AE7-4D49-A776-6393D96E8307}.The master browser is stopping or an election is being forced.Error: (09/19/2014 04:10:57 PM) (Source: bowser) (User: )Description: The master browser has received a server announcement from the computer MATHEMATICIA-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{D6BB94D4-3AE7-4D49-A776-6393D96E8307}.The master browser is stopping or an election is being forced.Error: (09/19/2014 04:07:53 PM) (Source: Service Control Manager) (User: )Description: Windows Media Player Network Sharing Service%%1053Error: (09/19/2014 04:07:53 PM) (Source: Service Control Manager) (User: )Description: 30000Windows Media Player Network Sharing ServiceError: (09/19/2014 04:07:53 PM) (Source: Service Control Manager) (User: )Description: BeepError: (09/19/2014 04:07:30 PM) (Source: DCOM) (User: NT AUTHORITY)Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)Error: (09/18/2014 04:55:23 PM) (Source: bowser) (User: )Description: The master browser has received a server announcement from the computer MATHEMATICIA-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{D6BB94D4-3AE7-4D49-A776-6393D96E8307}.The master browser is stopping or an election is being forced.Microsoft Office Sessions:=========================CodeIntegrity Errors:===================================Date: 2014-09-20 02:53:43.093Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-20 02:53:42.796Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-20 02:53:42.522Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-20 02:53:42.244Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-20 02:48:16.062Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-20 02:48:15.778Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-20 02:48:15.493Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-20 02:48:15.222Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-20 02:43:57.001Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT64x86.SYS because the set of per-page image hashes could not be found on the system.Date: 2014-09-20 02:43:56.725Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT64x86.SYS because the set of per-page image hashes could not be found on the system.=========================== Installed Programs ============================64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden64 Bit HP CIO Components Installer (x32 Version: 7.2.8 - Hewlett-Packard) HiddenApple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)Apple Mobile Device Support (HKLM-x32\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)Bonjour (HKLM-x32\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)Garmin Communicator Plugin x64 (HKLM\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)Garmin Communicator Plugin x64 (HKLM-x32\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)HP Customer Participation Program 14.0 (HKLM-x32\...\HPExtendedCapabilities) (Version: 14.0 - HP)HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)HP Imaging Device Functions 14.0 (HKLM-x32\...\HP Imaging Device Functions) (Version: 14.0 - HP)HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{14BC6853-A74E-4874-B50D-679889D1544D}) (Version: 14.0 - HP)HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{DBC1DE57-B55A-4D57-9769-1DB9BE506AF7}) (Version: 14.0 - HP)HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM-x32\...\{14BC6853-A74E-4874-B50D-679889D1544D}) (Version: 14.0 - HP)HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM-x32\...\{DBC1DE57-B55A-4D57-9769-1DB9BE506AF7}) (Version: 14.0 - HP)HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)HP Smart Web Printing 4.60 (HKLM-x32\...\HP Smart Web Printing) (Version: 4.60 - HP)HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)HP Solution Center 14.0 (HKLM-x32\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)iTunes (HKLM\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)iTunes (HKLM-x32\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)Juniper Networks Host Checker (HKCU\...\Neoteris_Host_Checker) (Version: 7.0.0.18107 - Juniper Networks)Juniper Networks Host Checker (HKCU-x32\...\Neoteris_Host_Checker) (Version: 7.0.0.18107 - Juniper Networks)Juniper Networks Setup Client (HKCU\...\Juniper_Setup_Client) (Version: 2.2.5.9755 - Juniper Networks)Juniper Networks Setup Client (HKCU-x32\...\Juniper_Setup_Client) (Version: 2.2.5.9755 - Juniper Networks)Logitech Gaming Software (Version: 8.40.83 - Logitech Inc.) HiddenLogitech Gaming Software (x32 Version: 8.40.83 - Logitech Inc.) HiddenLogitech Gaming Software 8.40 (HKLM\...\Logitech Gaming Software) (Version: 8.40.83 - Logitech Inc.)Logitech Gaming Software 8.40 (HKLM-x32\...\Logitech Gaming Software) (Version: 8.40.83 - Logitech Inc.)Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)Microsoft .NET Framework 3.5 SP1 (HKLM-x32\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) HiddenMicrosoft .NET Framework 3.5 SP1 (x32 Version: 3.5.30729 - Microsoft Corporation) HiddenMicrosoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)Microsoft .NET Framework 4.5.1 (HKLM-x32\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) HiddenMicrosoft .NET Framework 4.5.1 (x32 Version: 4.5.50938 - Microsoft Corporation) HiddenMicrosoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) HiddenMicrosoft Application Error Reporting (x32 Version: 12.0.6015.5000 - Microsoft Corporation) HiddenMicrosoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Office 64-bit Components 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM-x32\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM-x32\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM-x32\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) HiddenMSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) HiddenNetwork64 (Version: 140.0.215.000 - Hewlett-Packard) HiddenNetwork64 (x32 Version: 140.0.215.000 - Hewlett-Packard) HiddenNVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)NVIDIA 3D Vision Controller Driver 340.50 (HKLM-x32\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)NVIDIA Control Panel 340.52 (Version: 340.52 - NVIDIA Corporation) HiddenNVIDIA Control Panel 340.52 (x32 Version: 340.52 - NVIDIA Corporation) HiddenNVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)NVIDIA GeForce Experience 2.1.1 (HKLM-x32\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)NVIDIA Graphics Driver 340.52 (HKLM-x32\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)NVIDIA HD Audio Driver 1.3.18.0 (HKLM-x32\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) HiddenNVIDIA Install Application (x32 Version: 2.1002.157.1165 - NVIDIA Corporation) HiddenNVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA LED Visualizer 1.0 (x32 Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA Network Service (x32 Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)NVIDIA PhysX System Software 9.13.1220 (HKLM-x32\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)NVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) HiddenNVIDIA Update 15.3.33 (x32 Version: 15.3.33 - NVIDIA Corporation) HiddenNVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) HiddenNVIDIA Update Core (x32 Version: 15.3.33 - NVIDIA Corporation) HiddenShop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)Shop for HP Supplies (HKLM-x32\...\Shop for HP Supplies) (Version: 14.0 - HP)Vegas Pro 12.0 (64-bit) (HKLM\...\{BD422D00-5232-11E3-A6F3-F04DA23A5C58}) (Version: 12.0.770 - Sony)Vegas Pro 12.0 (64-bit) (HKLM-x32\...\{BD422D00-5232-11E3-A6F3-F04DA23A5C58}) (Version: 12.0.770 - Sony)Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM-x32\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) HiddenWindows Live ID Sign-in Assistant (x32 Version: 7.250.4232.0 - Microsoft Corporation) HiddenWindows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) HiddenWindows Live Language Selector (x32 Version: 15.4.3555.0308 - Microsoft Corporation) Hidden========================= Devices: ================================Name: HP Photosmart D110Description: HP Photosmart D110Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}Manufacturer: Hewlett-PackardService: StillCamProblem: : This device is disabled. (Code 22)Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.Name: Photosmart D110 seriesDescription: Photosmart D110 seriesClass Guid: {4d36e971-e325-11ce-bfc1-08002be10318}Manufacturer: HPService:Problem: : This device is disabled. (Code 22)Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.========================= Memory info: ===================================Percentage of memory in use: 35%Total physical RAM: 8190.36 MBAvailable physical RAM: 5254.9 MBTotal Pagefile: 16569.25 MBAvailable Pagefile: 13449.84 MBTotal Virtual: 4095.88 MBAvailable Virtual: 3997.05 MB========================= Partitions: =====================================2 Drive c: () (Fixed) (Total:139.73 GB) (Free:20.63 GB) NTFS3 Drive d: (New Volume) (Fixed) (Total:279.46 GB) (Free:175.76 GB) NTFS5 Drive f: () (Fixed) (Total:232.88 GB) (Free:154.9 GB) NTFS========================= Users: ========================================User accounts for \\MATHEMATICS-PCAdministrator Guest Mathematics========================= Minidump Files ==================================C:\Windows\Minidump\Mini021014-01.dmpC:\Windows\Minidump\Mini043014-01.dmpC:\Windows\Minidump\Mini060614-01.dmpC:\Windows\Minidump\Mini062013-01.dmpC:\Windows\Minidump\Mini070413-01.dmpC:\Windows\Minidump\Mini071013-01.dmpC:\Windows\Minidump\Mini071413-01.dmpC:\Windows\Minidump\Mini071513-01.dmpC:\Windows\Minidump\Mini071613-01.dmpC:\Windows\Minidump\Mini071713-01.dmpC:\Windows\Minidump\Mini071713-02.dmpC:\Windows\Minidump\Mini071813-01.dmpC:\Windows\Minidump\Mini072013-01.dmpC:\Windows\Minidump\Mini072013-02.dmpC:\Windows\Minidump\Mini072013-03.dmpC:\Windows\Minidump\Mini072213-01.dmpC:\Windows\Minidump\Mini072313-01.dmpC:\Windows\Minidump\Mini072413-01.dmpC:\Windows\Minidump\Mini072413-02.dmpC:\Windows\Minidump\Mini072713-01.dmpC:\Windows\Minidump\Mini072813-01.dmpC:\Windows\Minidump\Mini072813-02.dmpC:\Windows\Minidump\Mini073013-01.dmpC:\Windows\Minidump\Mini073013-02.dmpC:\Windows\Minidump\Mini073113-01.dmpC:\Windows\Minidump\Mini073113-02.dmpC:\Windows\Minidump\Mini080213-01.dmpC:\Windows\Minidump\Mini080213-02.dmpC:\Windows\Minidump\Mini080613-01.dmpC:\Windows\Minidump\Mini080713-01.dmpC:\Windows\Minidump\Mini080713-02.dmpC:\Windows\Minidump\Mini080713-03.dmpC:\Windows\Minidump\Mini080713-04.dmpC:\Windows\Minidump\Mini080713-05.dmpC:\Windows\Minidump\Mini080913-01.dmpC:\Windows\Minidump\Mini081013-01.dmpC:\Windows\Minidump\Mini081313-01.dmpC:\Windows\Minidump\Mini081413-01.dmpC:\Windows\Minidump\Mini082113-01.dmpC:\Windows\Minidump\Mini082113-02.dmpC:\Windows\Minidump\Mini082513-01.dmpC:\Windows\Minidump\Mini082513-02.dmpC:\Windows\Minidump\Mini082513-03.dmpC:\Windows\Minidump\Mini082813-01.dmpC:\Windows\Minidump\Mini083013-01.dmpC:\Windows\Minidump\Mini090513-01.dmpC:\Windows\Minidump\Mini090513-02.dmp**** End of log ****
-
All Browsers.
-
Yeah the computer is running real smooth and I go to the website and I enter my log in information and I get the same server answer.Then if I open the webpage in another tab for myfico dot com it shows I'm log into the site; then when I click on the member center tab it says in Google Chrome.
The server at secure.myfico.com can't be found, because the DNS lookup failed. DNS is the network service that translates a website's name to its Internet address. This error is most often caused by having no connection to the Internet or a misconfigured network. It can also be caused by an unresponsive DNS server or a firewall preventing Google Chrome from accessing the network.Error code: DNS_PROBE_FINISHED_NXDOMAINMSN Shows this when I go to open the browser immediately. Its asking me to allow Adobe Flash to operate outside of protected mode. As far as the website of myfico dot com it does the same strange enough.Fire Fox Image I see in that browser when I type myfico I see this and its different.http://i57.tinypic.com/2i5hco.jpg (This is the screenie from typing in myfico)http://i60.tinypic.com/29lxs86.jpg (this is the screenie after typing in username and password)Now after I do this I can go to the site and it shows I'm log into the website; but if I click on Member Center Tab it shows the screen that the dns error.. I can go anywhere on there site and it works fine; just that secure tab give me trouble. -
See anything in the logs thus far by the way?
Mini Tool Box Log
MiniToolBox by Farbar Version: 21-07-2014Ran by Mathematics (administrator) on 18-09-2014 at 21:17:01Running from "C:\Users\Mathematics\Downloads"Microsoft® Windows Vista™ Ultimate Service Pack 2 (X64)Boot Mode: Normal***************************************************************************========================= Flush DNS: ===================================Windows IP ConfigurationSuccessfully flushed the DNS Resolver Cache.========================= IE Proxy Settings: ==============================Proxy is not enabled.No Proxy Server is set."Reset IE Proxy Settings": IE Proxy Settings were reset.========================= FF Proxy Settings: =============================="Reset FF Proxy Settings": Firefox Proxy settings were reset.========================= Hosts content: =================================127.0.0.1 localhost========================= IP Configuration: ================================Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller = Local Area Connection (Connected)# ----------------------------------# IPv4 Configuration# ----------------------------------pushd interface ipv4resetset global icmpredirects=enabledpopd# End of IPv4 configurationWindows IP ConfigurationHost Name . . . . . . . . . . . . : Mathematics-PCPrimary Dns Suffix . . . . . . . :Node Type . . . . . . . . . . . . : HybridIP Routing Enabled. . . . . . . . : NoWINS Proxy Enabled. . . . . . . . : NoEthernet adapter Local Area Connection:Connection-specific DNS Suffix . :Description . . . . . . . . . . . : Marvell Yukon 88E8056 PCI-E Gigabit Ethernet ControllerPhysical Address. . . . . . . . . : 00-24-8C-1B-6C-EBDHCP Enabled. . . . . . . . . . . : YesAutoconfiguration Enabled . . . . : YesLink-local IPv6 Address . . . . . : fe80::80dd:c4c5:9061:ed1e%10(Preferred)IPv4 Address. . . . . . . . . . . : 192.168.1.4(Preferred)Subnet Mask . . . . . . . . . . . : 255.255.255.0Lease Obtained. . . . . . . . . . : Thursday, September 18, 2014 1:28:56 PMLease Expires . . . . . . . . . . : Friday, September 19, 2014 1:28:55 PMDefault Gateway . . . . . . . . . : 192.168.1.1DHCP Server . . . . . . . . . . . : 192.168.1.1DHCPv6 IAID . . . . . . . . . . . : 251667596DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-D7-3F-BD-00-24-8C-1B-6C-EBDNS Servers . . . . . . . . . . . : 208.67.222.222208.67.220.220NetBIOS over Tcpip. . . . . . . . : EnabledTunnel adapter Local Area Connection* 6:Media State . . . . . . . . . . . : Media disconnectedConnection-specific DNS Suffix . :Description . . . . . . . . . . . : isatap.{D6BB94D4-3AE7-4D49-A776-6393D96E8307}Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0DHCP Enabled. . . . . . . . . . . : NoAutoconfiguration Enabled . . . . : YesTunnel adapter Local Area Connection* 7:Media State . . . . . . . . . . . : Media disconnectedConnection-specific DNS Suffix . :Description . . . . . . . . . . . : Teredo Tunneling Pseudo-InterfacePhysical Address. . . . . . . . . : 02-00-54-55-4E-01DHCP Enabled. . . . . . . . . . . : NoAutoconfiguration Enabled . . . . : YesServer: resolver1.opendns.comAddress: 208.67.222.222Name: google.comAddresses: 2607:f8b0:4000:800::100574.125.227.10574.125.227.9774.125.227.10474.125.227.10274.125.227.10074.125.227.11074.125.227.10174.125.227.9874.125.227.9674.125.227.10374.125.227.99Pinging google.com [74.125.227.97] with 32 bytes of data:Reply from 74.125.227.97: bytes=32 time=27ms TTL=51Reply from 74.125.227.97: bytes=32 time=16ms TTL=51Ping statistics for 74.125.227.97:Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds:Minimum = 16ms, Maximum = 27ms, Average = 21msServer: resolver1.opendns.comAddress: 208.67.222.222Name: yahoo.comAddresses: 98.138.253.109206.190.36.4598.139.183.24Pinging yahoo.com [206.190.36.45] with 32 bytes of data:Reply from 206.190.36.45: bytes=32 time=67ms TTL=44Reply from 206.190.36.45: bytes=32 time=90ms TTL=44Ping statistics for 206.190.36.45:Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds:Minimum = 67ms, Maximum = 90ms, Average = 78msPinging 127.0.0.1 with 32 bytes of data:Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Ping statistics for 127.0.0.1:Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds:Minimum = 0ms, Maximum = 0ms, Average = 0ms===========================================================================Interface List10 ...00 24 8c 1b 6c eb ...... Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller1 ........................... Software Loopback Interface 112 ...00 00 00 00 00 00 00 e0 isatap.{D6BB94D4-3AE7-4D49-A776-6393D96E8307}11 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface===========================================================================IPv4 Route Table===========================================================================Active Routes:Network Destination Netmask Gateway Interface Metric0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.4 10127.0.0.0 255.0.0.0 On-link 127.0.0.1 306127.0.0.1 255.255.255.255 On-link 127.0.0.1 306127.255.255.255 255.255.255.255 On-link 127.0.0.1 306192.168.1.0 255.255.255.0 On-link 192.168.1.4 266192.168.1.4 255.255.255.255 On-link 192.168.1.4 266192.168.1.255 255.255.255.255 On-link 192.168.1.4 266224.0.0.0 240.0.0.0 On-link 127.0.0.1 306224.0.0.0 240.0.0.0 On-link 192.168.1.4 266255.255.255.255 255.255.255.255 On-link 127.0.0.1 306255.255.255.255 255.255.255.255 On-link 192.168.1.4 266===========================================================================Persistent Routes:NoneIPv6 Route Table===========================================================================Active Routes:If Metric Network Destination Gateway1 306 ::1/128 On-link10 266 fe80::/64 On-link10 266 fe80::80dd:c4c5:9061:ed1e/128On-link1 306 ff00::/8 On-link10 266 ff00::/8 On-link===========================================================================Persistent Routes:None========================= Winsock entries =====================================Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [48128] (Microsoft Corporation)Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [50176] (Microsoft Corporation)Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [62464] (Microsoft Corporation)Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [62464] (Microsoft Corporation)Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [19968] (Microsoft Corporation)Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [223232] (Microsoft Corporation)x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [61440] (Microsoft Corporation)x64-Catalog5 02 C:\Windows\System32\napinsp.dll [62976] (Microsoft Corporation)x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [78848] (Microsoft Corporation)x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [78848] (Microsoft Corporation)x64-Catalog5 05 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog5 06 C:\Windows\System32\winrnr.dll [27648] (Microsoft Corporation)x64-Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)x64-Catalog9 01 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 02 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 03 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 04 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 05 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 06 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 07 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 08 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 09 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)x64-Catalog9 10 C:\Windows\System32\mswsock.dll [304128] (Microsoft Corporation)========================= Event log errors: ===============================Application errors:==================Error: (09/18/2014 01:30:21 PM) (Source: WinMgmt) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (09/18/2014 01:29:47 PM) (Source: Bonjour Service) (User: )Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 22 4.1.168.192.in-addr.arpa. PTR Mathematics-PC.local.Error: (09/18/2014 01:29:47 PM) (Source: Bonjour Service) (User: )Description: mDNSCoreReceiveResponse: Received from 192.168.1.4:5353 24 4.1.168.192.in-addr.arpa. PTR Mathematics-PC-2.local.Error: (09/18/2014 01:29:04 PM) (Source: SideBySide) (User: )Description: Activation context generation failed for "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".Dependent Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" could not be found.Please use sxstrace.exe for detailed diagnosis.Error: (09/18/2014 05:39:17 AM) (Source: SideBySide) (User: )Description: Activation context generation failed for "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".Dependent Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" could not be found.Please use sxstrace.exe for detailed diagnosis.Error: (09/18/2014 05:39:17 AM) (Source: SideBySide) (User: )Description: Activation context generation failed for "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".Dependent Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" could not be found.Please use sxstrace.exe for detailed diagnosis.Error: (09/18/2014 05:35:20 AM) (Source: Bonjour Service) (User: )Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 22 4.1.168.192.in-addr.arpa. PTR Mathematics-PC.local.Error: (09/18/2014 05:35:20 AM) (Source: Bonjour Service) (User: )Description: mDNSCoreReceiveResponse: Received from 192.168.1.4:5353 24 4.1.168.192.in-addr.arpa. PTR Mathematics-PC-2.local.Error: (09/18/2014 05:35:10 AM) (Source: WinMgmt) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (09/18/2014 05:34:28 AM) (Source: SideBySide) (User: )Description: Activation context generation failed for "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".Dependent Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" could not be found.Please use sxstrace.exe for detailed diagnosis.System errors:=============Error: (09/18/2014 04:55:23 PM) (Source: bowser) (User: )Description: The master browser has received a server announcement from the computer MATHEMATICIA-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{D6BB94D4-3AE7-4D49-A776-6393D96E8307}.The master browser is stopping or an election is being forced.Error: (09/18/2014 02:41:16 PM) (Source: bowser) (User: )Description: The master browser has received a server announcement from the computer MATHEMATICIA-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{D6BB94D4-3AE7-4D49-A776-6393D96E8307}.The master browser is stopping or an election is being forced.Error: (09/18/2014 02:34:57 PM) (Source: bowser) (User: )Description: The master browser has received a server announcement from the computer MATHEMATICIA-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{D6BB94D4-3AE7-4D49-A776-6393D96E8307}.The master browser is stopping or an election is being forced.Error: (09/18/2014 02:24:55 PM) (Source: bowser) (User: )Description: The master browser has received a server announcement from the computer MATHEMATICIA-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{D6BB94D4-3AE7-4D49-A776-6393D96E8307}.The master browser is stopping or an election is being forced.Error: (09/18/2014 01:30:21 PM) (Source: Service Control Manager) (User: )Description: BeepError: (09/18/2014 01:29:58 PM) (Source: DCOM) (User: NT AUTHORITY)Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)Error: (09/18/2014 05:35:10 AM) (Source: Service Control Manager) (User: )Description: BeepError: (09/18/2014 05:34:51 AM) (Source: DCOM) (User: NT AUTHORITY)Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)Error: (09/18/2014 05:32:01 AM) (Source: PlugPlayManager) (User: )Description: The device Root\LEGACY_NPF\0000 disappeared from the system without first being prepared for removal.Error: (09/18/2014 05:31:52 AM) (Source: Service Control Manager) (User: )Description: PEVSystemStartMicrosoft Office Sessions:=========================CodeIntegrity Errors:===================================Date: 2014-09-18 14:21:48.553Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-18 14:21:48.385Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-18 14:21:48.215Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-18 14:21:47.950Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-18 13:29:32.705Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-18 05:34:16.871Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-18 05:31:23.299Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.Date: 2014-09-18 05:31:23.131Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.Date: 2014-09-18 05:25:10.750Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT64x86.SYS because the set of per-page image hashes could not be found on the system.Date: 2014-09-18 05:25:10.493Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT64x86.SYS because the set of per-page image hashes could not be found on the system.=========================== Installed Programs ============================64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden64 Bit HP CIO Components Installer (x32 Version: 7.2.8 - Hewlett-Packard) HiddenApple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)Apple Mobile Device Support (HKLM-x32\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)Bonjour (HKLM-x32\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)Garmin Communicator Plugin x64 (HKLM\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)Garmin Communicator Plugin x64 (HKLM-x32\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)HP Customer Participation Program 14.0 (HKLM-x32\...\HPExtendedCapabilities) (Version: 14.0 - HP)HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)HP Imaging Device Functions 14.0 (HKLM-x32\...\HP Imaging Device Functions) (Version: 14.0 - HP)HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{14BC6853-A74E-4874-B50D-679889D1544D}) (Version: 14.0 - HP)HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{DBC1DE57-B55A-4D57-9769-1DB9BE506AF7}) (Version: 14.0 - HP)HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM-x32\...\{14BC6853-A74E-4874-B50D-679889D1544D}) (Version: 14.0 - HP)HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM-x32\...\{DBC1DE57-B55A-4D57-9769-1DB9BE506AF7}) (Version: 14.0 - HP)HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)HP Smart Web Printing 4.60 (HKLM-x32\...\HP Smart Web Printing) (Version: 4.60 - HP)HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)HP Solution Center 14.0 (HKLM-x32\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)iTunes (HKLM\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)iTunes (HKLM-x32\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)Juniper Networks Host Checker (HKCU\...\Neoteris_Host_Checker) (Version: 7.0.0.18107 - Juniper Networks)Juniper Networks Host Checker (HKCU-x32\...\Neoteris_Host_Checker) (Version: 7.0.0.18107 - Juniper Networks)Juniper Networks Setup Client (HKCU\...\Juniper_Setup_Client) (Version: 2.2.5.9755 - Juniper Networks)Juniper Networks Setup Client (HKCU-x32\...\Juniper_Setup_Client) (Version: 2.2.5.9755 - Juniper Networks)Logitech Gaming Software (Version: 8.40.83 - Logitech Inc.) HiddenLogitech Gaming Software (x32 Version: 8.40.83 - Logitech Inc.) HiddenLogitech Gaming Software 8.40 (HKLM\...\Logitech Gaming Software) (Version: 8.40.83 - Logitech Inc.)Logitech Gaming Software 8.40 (HKLM-x32\...\Logitech Gaming Software) (Version: 8.40.83 - Logitech Inc.)Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)Microsoft .NET Framework 3.5 SP1 (HKLM-x32\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) HiddenMicrosoft .NET Framework 3.5 SP1 (x32 Version: 3.5.30729 - Microsoft Corporation) HiddenMicrosoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)Microsoft .NET Framework 4.5.1 (HKLM-x32\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) HiddenMicrosoft .NET Framework 4.5.1 (x32 Version: 4.5.50938 - Microsoft Corporation) HiddenMicrosoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) HiddenMicrosoft Application Error Reporting (x32 Version: 12.0.6015.5000 - Microsoft Corporation) HiddenMicrosoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Office 64-bit Components 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM-x32\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM-x32\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM-x32\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) HiddenMSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) HiddenNetwork64 (Version: 140.0.215.000 - Hewlett-Packard) HiddenNetwork64 (x32 Version: 140.0.215.000 - Hewlett-Packard) HiddenNVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)NVIDIA 3D Vision Controller Driver 340.50 (HKLM-x32\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)NVIDIA Control Panel 340.52 (Version: 340.52 - NVIDIA Corporation) HiddenNVIDIA Control Panel 340.52 (x32 Version: 340.52 - NVIDIA Corporation) HiddenNVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)NVIDIA GeForce Experience 2.1.1 (HKLM-x32\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)NVIDIA Graphics Driver 340.52 (HKLM-x32\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)NVIDIA HD Audio Driver 1.3.18.0 (HKLM-x32\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) HiddenNVIDIA Install Application (x32 Version: 2.1002.157.1165 - NVIDIA Corporation) HiddenNVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA LED Visualizer 1.0 (x32 Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA Network Service (x32 Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)NVIDIA PhysX System Software 9.13.1220 (HKLM-x32\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)NVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) HiddenNVIDIA Update 15.3.33 (x32 Version: 15.3.33 - NVIDIA Corporation) HiddenNVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) HiddenNVIDIA Update Core (x32 Version: 15.3.33 - NVIDIA Corporation) HiddenShop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)Shop for HP Supplies (HKLM-x32\...\Shop for HP Supplies) (Version: 14.0 - HP)Vegas Pro 12.0 (64-bit) (HKLM\...\{BD422D00-5232-11E3-A6F3-F04DA23A5C58}) (Version: 12.0.770 - Sony)Vegas Pro 12.0 (64-bit) (HKLM-x32\...\{BD422D00-5232-11E3-A6F3-F04DA23A5C58}) (Version: 12.0.770 - Sony)Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM-x32\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) HiddenWindows Live ID Sign-in Assistant (x32 Version: 7.250.4232.0 - Microsoft Corporation) HiddenWindows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) HiddenWindows Live Language Selector (x32 Version: 15.4.3555.0308 - Microsoft Corporation) Hidden========================= Devices: ================================Name: HP Photosmart D110Description: HP Photosmart D110Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}Manufacturer: Hewlett-PackardService: StillCamProblem: : This device is disabled. (Code 22)Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.Name: Photosmart D110 seriesDescription: Photosmart D110 seriesClass Guid: {4d36e971-e325-11ce-bfc1-08002be10318}Manufacturer: HPService:Problem: : This device is disabled. (Code 22)Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.========================= Memory info: ===================================Percentage of memory in use: 34%Total physical RAM: 8190.36 MBAvailable physical RAM: 5342.57 MBTotal Pagefile: 16561.25 MBAvailable Pagefile: 13265.14 MBTotal Virtual: 4095.88 MBAvailable Virtual: 3997.03 MB========================= Partitions: =====================================2 Drive c: () (Fixed) (Total:139.73 GB) (Free:21.43 GB) NTFS3 Drive d: (New Volume) (Fixed) (Total:279.46 GB) (Free:175.81 GB) NTFS5 Drive f: () (Fixed) (Total:232.88 GB) (Free:154.9 GB) NTFS========================= Users: ========================================User accounts for \\MATHEMATICS-PCAdministrator Guest Mathematics========================= Minidump Files ==================================C:\Windows\Minidump\Mini021014-01.dmpC:\Windows\Minidump\Mini043014-01.dmpC:\Windows\Minidump\Mini060614-01.dmpC:\Windows\Minidump\Mini062013-01.dmpC:\Windows\Minidump\Mini070413-01.dmpC:\Windows\Minidump\Mini071013-01.dmpC:\Windows\Minidump\Mini071413-01.dmpC:\Windows\Minidump\Mini071513-01.dmpC:\Windows\Minidump\Mini071613-01.dmpC:\Windows\Minidump\Mini071713-01.dmpC:\Windows\Minidump\Mini071713-02.dmpC:\Windows\Minidump\Mini071813-01.dmpC:\Windows\Minidump\Mini072013-01.dmpC:\Windows\Minidump\Mini072013-02.dmpC:\Windows\Minidump\Mini072013-03.dmpC:\Windows\Minidump\Mini072213-01.dmpC:\Windows\Minidump\Mini072313-01.dmpC:\Windows\Minidump\Mini072413-01.dmpC:\Windows\Minidump\Mini072413-02.dmpC:\Windows\Minidump\Mini072713-01.dmpC:\Windows\Minidump\Mini072813-01.dmpC:\Windows\Minidump\Mini072813-02.dmpC:\Windows\Minidump\Mini073013-01.dmpC:\Windows\Minidump\Mini073013-02.dmpC:\Windows\Minidump\Mini073113-01.dmpC:\Windows\Minidump\Mini073113-02.dmpC:\Windows\Minidump\Mini080213-01.dmpC:\Windows\Minidump\Mini080213-02.dmpC:\Windows\Minidump\Mini080613-01.dmpC:\Windows\Minidump\Mini080713-01.dmpC:\Windows\Minidump\Mini080713-02.dmpC:\Windows\Minidump\Mini080713-03.dmpC:\Windows\Minidump\Mini080713-04.dmpC:\Windows\Minidump\Mini080713-05.dmpC:\Windows\Minidump\Mini080913-01.dmpC:\Windows\Minidump\Mini081013-01.dmpC:\Windows\Minidump\Mini081313-01.dmpC:\Windows\Minidump\Mini081413-01.dmpC:\Windows\Minidump\Mini082113-01.dmpC:\Windows\Minidump\Mini082113-02.dmpC:\Windows\Minidump\Mini082513-01.dmpC:\Windows\Minidump\Mini082513-02.dmpC:\Windows\Minidump\Mini082513-03.dmpC:\Windows\Minidump\Mini082813-01.dmpC:\Windows\Minidump\Mini083013-01.dmpC:\Windows\Minidump\Mini090513-01.dmpC:\Windows\Minidump\Mini090513-02.dmp**** End of log **** -
ComboFix 14-09-18.01 - Mathematics 09/18/2014 5:24.1.4 - x64
Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1252.1.1033.18.8190.5080 [GMT -5:00]
Running from: c:\users\Mathematics\Downloads\ComboFix.exe
AV: Norton 360 Premier Edition *Disabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
FW: Norton 360 Premier Edition *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
SP: Norton 360 Premier Edition *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Amazon.ico
c:\programdata\Booking.ico
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\wpcap.dll
F:\install.exe
F:\setup.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_NPF
.
.
((((((((((((((((((((((((( Files Created from 2014-08-18 to 2014-09-18 )))))))))))))))))))))))))))))))
.
.
2014-09-18 10:31 . 2014-09-18 10:31 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-09-17 20:18 . 2014-09-17 20:18 -------- d-----w- c:\windows\system32\appmgmt
2014-09-17 07:32 . 2014-09-17 07:32 -------- d-----w- c:\program files (x86)\ESET
2014-09-17 06:37 . 2014-09-17 06:37 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-09-17 06:05 . 2014-09-17 06:32 -------- d-----w- C:\AdwCleaner
2014-09-17 05:43 . 2014-09-17 05:43 -------- d-----w- c:\windows\ERUNT
2014-09-15 05:53 . 2014-09-15 05:53 36456 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-09-15 05:53 . 2014-09-15 05:53 -------- d-----w- c:\programdata\RogueKiller
2014-09-15 05:27 . 2014-09-18 10:34 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-09-15 05:26 . 2014-09-15 05:26 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-09-15 05:26 . 2014-09-15 05:26 -------- d-----w- c:\programdata\Malwarebytes
2014-09-15 05:26 . 2014-05-12 12:26 64216 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-09-15 05:26 . 2014-05-12 12:26 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-09-15 05:26 . 2014-05-12 12:25 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-09-15 03:40 . 2014-09-15 03:41 -------- d-----w- c:\program files (x86)\ERUNT
2014-09-12 21:23 . 2014-09-17 09:26 -------- d-----w- C:\FRST
2014-09-09 23:26 . 2014-09-09 23:26 10036224 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-09-04 12:50 . 2014-09-04 12:50 188304 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
2014-08-28 08:00 . 2014-08-23 01:05 304128 ----a-w- c:\windows\SysWow64\gdi32.dll
2014-08-28 08:00 . 2014-08-23 00:42 390144 ----a-w- c:\windows\system32\gdi32.dll
2014-08-28 08:00 . 2014-08-22 23:38 2782208 ----a-w- c:\windows\system32\win32k.sys
2014-08-25 18:26 . 2014-08-25 18:26 -------- d-----w- c:\users\Mathematics\AppData\Local\Adobe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-17 20:49 . 2013-03-17 15:07 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2014-09-12 08:00 . 2006-11-02 12:35 101694776 ----a-w- c:\windows\system32\mrt.exe
2014-09-09 23:26 . 2013-04-12 18:24 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-09-09 23:26 . 2013-04-12 18:24 701104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-08-24 03:39 . 2013-03-17 16:11 369168 ----a-w- c:\windows\system32\wpcap.dll
2014-08-24 03:39 . 2013-03-17 16:11 35344 ----a-w- c:\windows\system32\drivers\npf.sys
2014-08-24 03:39 . 2013-03-17 16:11 106000 ----a-w- c:\windows\system32\packet.dll
2014-08-22 18:01 . 2011-03-29 00:36 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-07-25 07:35 . 2014-07-25 07:35 875688 ----a-w- c:\windows\SysWow64\msvcr120_clr0400.dll
2014-07-25 04:47 . 2014-07-25 04:47 869544 ----a-w- c:\windows\system32\msvcr120_clr0400.dll
2014-07-23 06:52 . 2014-07-23 06:52 122584 ----a-w- c:\windows\system32\drivers\48230029.sys
2014-07-08 01:12 . 2014-08-16 19:01 2048 ----a-w- c:\windows\system32\tzres.dll
2014-07-08 00:46 . 2014-08-16 19:01 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2014-07-02 20:48 . 2014-08-14 06:10 18626304 ----a-w- c:\windows\system32\nvwgf2umx.dll
2014-07-02 20:48 . 2014-08-14 06:10 16122344 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2014-07-02 20:48 . 2014-08-14 06:10 13922752 ----a-w- c:\windows\system32\nvopencl.dll
2014-07-02 20:48 . 2014-08-14 06:10 11283344 ----a-w- c:\windows\SysWow64\nvopencl.dll
2014-07-02 20:48 . 2014-08-14 06:10 24196896 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2014-07-02 20:48 . 2014-08-14 06:10 12866008 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-07-02 20:48 . 2014-08-14 06:10 1890080 ----a-w- c:\windows\system32\nvdispco6434052.dll
2014-07-02 20:48 . 2014-08-14 06:10 1539928 ----a-w- c:\windows\system32\nvdispgenco6434052.dll
2014-07-02 20:48 . 2014-08-14 06:10 4247000 ----a-w- c:\windows\system32\nvcuvid.dll
2014-07-02 20:48 . 2014-08-14 06:10 3989960 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2014-07-02 20:48 . 2014-08-14 06:10 13835208 ----a-w- c:\windows\system32\nvcuda.dll
2014-07-02 20:48 . 2014-08-14 06:10 11222048 ----a-w- c:\windows\SysWow64\nvcuda.dll
2014-07-02 20:48 . 2014-08-14 06:10 2814656 ----a-w- c:\windows\SysWow64\nvapi.dll
2014-07-02 20:48 . 2014-08-14 06:10 22994208 ----a-w- c:\windows\system32\nvcompiler.dll
2014-07-02 20:48 . 2014-08-14 06:10 15294296 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2014-07-02 20:48 . 2014-01-29 22:39 17555104 ----a-w- c:\windows\system32\nvd3dumx.dll
2014-07-02 20:48 . 2013-03-17 14:58 75040 ----a-w- c:\windows\system32\OpenCL.dll
2014-07-02 20:48 . 2013-03-17 14:58 61912 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-07-02 20:48 . 2013-03-17 14:58 3196816 ----a-w- c:\windows\system32\nvapi64.dll
2014-07-02 20:48 . 2013-03-17 14:58 31512520 ----a-w- c:\windows\system32\nvoglv64.dll
2014-07-02 20:48 . 2013-03-17 14:58 14498552 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-07-02 18:55 . 2013-03-17 14:59 6783776 ----a-w- c:\windows\system32\nvcpl.dll
2014-07-02 18:55 . 2013-03-17 14:59 3522392 ----a-w- c:\windows\system32\nvsvc64.dll
2014-07-02 18:55 . 2013-03-17 14:59 935368 ----a-w- c:\windows\system32\nvvsvc.exe
2014-07-02 18:55 . 2013-03-17 14:59 62808 ----a-w- c:\windows\system32\nvshext.dll
2014-07-02 18:55 . 2013-03-17 14:59 386520 ----a-w- c:\windows\system32\nvmctray.dll
2014-07-02 10:14 . 2014-04-14 08:14 3826628 ----a-w- c:\windows\system32\nvcoproc.bin
2014-06-26 22:17 . 2014-08-16 20:29 8848 ----a-w- c:\windows\system32\icardres.dll
2014-06-26 22:17 . 2014-08-16 20:29 171152 ----a-w- c:\windows\system32\infocardapi.dll
2014-06-26 22:17 . 2014-08-16 20:29 1389200 ----a-w- c:\windows\system32\icardagt.exe
2014-06-26 22:17 . 2014-08-16 20:29 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
2014-06-26 22:17 . 2014-08-16 20:29 8856 ----a-w- c:\windows\SysWow64\icardres.dll
2014-06-26 22:17 . 2014-08-16 20:29 619664 ----a-w- c:\windows\SysWow64\icardagt.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1555968]
"PCShowServer"="c:\users\Mathematics\AppData\Local\DIRECTV Player\PCShowServerPMWrapper.exe" [2012-10-15 525240]
"GarminExpressTrayApp"="c:\program files (x86)\Garmin\Express Tray\ExpressTray.exe" [2013-11-08 1095000]
"NETGEARGenie"="c:\program files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe" [2014-06-11 596480]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-08-27 22041192]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"P17RunE"="P17RunE.dll" [2008-03-28 14848]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2012-09-13 204136]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-07-03 43816]
"SoundTray"="c:\program files (x86)\Analog Devices\SoundMAX\SoundTray.exe" [2008-03-26 143360]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]
"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" [2013-09-07 295512]
"SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2013-03-21 1302528]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-01-17 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-07-08 152392]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2013-05-30 96056]
.
c:\users\Mathematics\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
ERUNT AutoBackup.lnk - c:\program files (x86)\ERUNT\AUTOBACK.EXE %SystemRoot%\ERDNT\AutoBackup\#Date# /noconfirmdelete /noprogresswindow [2005-10-20 38912]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - MBAMSWISSARMY
*NewlyCreated* - NPF
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
Themes
.
Contents of the 'Scheduled Tasks' folder
.
2014-09-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-12 23:26]
.
2014-09-16 c:\windows\Tasks\ReclaimerUpdateFiles_Mathematics.job
- c:\users\Mathematics\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-12 23:38]
.
2014-09-18 c:\windows\Tasks\ReclaimerUpdateXML_Mathematics.job
- c:\users\Mathematics\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-12 23:38]
.
2014-09-18 c:\windows\Tasks\RNUpgradeHelperLogonPrompt_Mathematics.job
- c:\users\Mathematics\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-12 23:38]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-11-29 7406392]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-07-25 2403104]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{D6BB94D4-3AE7-4D49-A776-6393D96E8307}: NameServer = 208.67.222.222,208.67.220.220
FF - ProfilePath - c:\users\Mathematics\AppData\Roaming\Mozilla\Firefox\Profiles\1i6zdklg.default-1411032952408\
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-WMPNSCFG - c:\program files (x86)\Windows Media Player\WMPNSCFG.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM-Run-Nvtmru - c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
AddRemove-{A7E19604-93AF-4611-8C9F-CE509C2B286F}_is1 - c:\program files (x86)\Free YouTube Downloader\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\N360.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\System32\Drivers\N360x64\1505000.013\SYMTDIV.SYS"
"TrustedImagePaths"="c:\program files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19;c:\program files (x86)\Norton 360 Premier Edition\Engine64\21.5.0.19"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_152_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_152_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_152_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_152_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.15"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\DirecTV\DirecTV\Kernel\DMP\CLDTVHNService.exe
c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
c:\program files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\N360.exe
c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
c:\program files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\N360.exe
c:\program files (x86)\Malwarebytes Anti-Malware\mbam.exe
c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe
c:\users\Mathematics\AppData\Local\DIRECTV Player\NDSPCShowServer.exe
c:\windows\SysWOW64\rundll32.exe
c:\program files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
c:\program files (x86)\NETGEAR Genie\bin\genie2_tray.exe
c:\windows\SysWOW64\DllHost.exe
.
**************************************************************************
.
Completion time: 2014-09-18 05:39:06 - machine was rebooted
ComboFix-quarantined-files.txt 2014-09-18 10:39
.
Pre-Run: 25,034,764,288 bytes free
Post-Run: 24,479,625,216 bytes free
.
- - End Of File - - 1A56C9EC6FD481690D9A5931E6D18178
5C616939100B85E558DA92B899A0FC36
-
okay I going to start running it.
-
Tried to download that link but its being detected by Nortons as
Suspicious.Cloud.7.EP -
Well its no longer doing the download this when I go to websites so its helped alot.
I do however have a question or 2.. When I did the scan my computer from ESET for unwanted things I didn't check the auto fix. So Those two Items that it marked should they be removed is my first question.
Second I go to myfico.com and I log in with my password and stuff and I get this in google chrome browser or it won't connect on this computer. Now I can log in from my other pc's in the house; but not this pc. This is one of the reasons I though maybe I was infected with some virus or malware.
It says this
This webpage is not availableThe server at secure.myfico.com can't be found, because the DNS lookup failed. DNS is the network service that translates a website's name to its Internet address. This error is most often caused by having no connection to the Internet or a misconfigured network. It can also be caused by an unresponsive DNS server or a firewall preventing Google Chrome from accessing the network.Error code: DNS_PROBE_FINISHED_NXDOMAINWhy is it doing this? -
JavaRa 1.16 Removal Log.Report follows after line.------------------------------------The JavaRa removal process was started on Wed Sep 17 15:24:00 2014Found and removed: C:\Users\Mathematics\AppData\LocalLow\Sun\Java\jre1.7.0_17_x64Found and removed: C:\Users\Mathematics\AppData\LocalLow\Sun\Java\jre1.7.0_21Found and removed: C:\Users\Mathematics\AppData\LocalLow\Sun\Java\jre1.7.0_25Found and removed: C:\Users\Mathematics\AppData\LocalLow\Sun\Java\jre1.7.0_45Found and removed: C:\Users\Mathematics\AppData\LocalLow\Sun\Java\jre1.7.0_51Found and removed: C:\Users\Mathematics\AppData\LocalLow\Sun\Java\jre1.7.0_55Found and removed: SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}Found and removed: SOFTWARE\Classes\CLSID\{5852F5ED-8BF4-11D4-A245-0080C6F74284}Found and removed: SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}Found and removed: SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}Found and removed: SOFTWARE\Classes\Interface\{5852F5EC-8BF4-11D4-A245-0080C6F74284}Found and removed: SOFTWARE\Classes\MIME\Database\Content Type\application/java-deployment-toolkitFound and removed: SOFTWARE\Classes\MIME\Database\Content Type\application/x-java-appletFound and removed: SOFTWARE\Classes\MIME\Database\Content Type\application/x-java-jnlp-fileFound and removed: SOFTWARE\Classes\TypeLib\{5852F5E0-8BF4-11D4-A245-0080C6F74284}Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalledFound and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.7.0.0Found and removed: SOFTWARE\JavaSoftFound and removed: SOFTWARE\JreMetricsFound and removed: SOFTWARE\MozillaPluginsResults of screen317's Security Check version 0.99.87Windows Vista Service Pack 2 x64 (UAC is enabled)Internet Explorer 9Internet Explorer 8``````````````Antivirus/Firewall Check:``````````````Windows Firewall Disabled!Norton 360 Premier EditionWMI entry may not exist for antivirus; attempting automatic update.`````````Anti-malware/Other Utilities Check:`````````Adobe Flash Player 15.0.0.152Adobe Reader 10.1.11 Adobe Reader out of Date!Mozilla Firefox (32.0.1)Google Chrome 37.0.2062.103Google Chrome 37.0.2062.120````````Process Check: objlist.exe by Laurent````````Malwarebytes Anti-Malware mbamservice.exeMalwarebytes Anti-Malware mbam.exeMalwarebytes Anti-Malware mbamscheduler.exe`````````````````System Health check`````````````````Total Fragmentation on Drive C: 7 % Defragment your hard drive soon! (Do NOT defrag if SSD!)````````````````````End of Log``````````````````````
-
FRST.TXT ScanScan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014Ran by Mathematics (administrator) on MATHEMATICS-PC on 17-09-2014 04:25:45Running from C:\Users\Mathematics\DownloadsPlatform: Windows Vista Ultimate Service Pack 2 (X64) OS Language: English (United States)Internet Explorer Version 9Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe(Microsoft Corporation) C:\Windows\System32\SLsvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe() C:\Program Files (x86)\DirecTV\DirecTV\Kernel\DMP\CLDTVHNService.exe(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe(Symantec Corporation) C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\n360.exe(NETGEAR) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe(Symantec Corporation) C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\n360.exe() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe(NDS Technologies) C:\Users\Mathematics\AppData\Local\DIRECTV Player\PCShowServerPMWrapper.exe() C:\Users\Mathematics\AppData\Local\DIRECTV Player\NDSPCShowServer.exe(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe(NETGEAR Inc.) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe(Sonic Focus, Inc.) C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe() C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Windows\splwow64.exe(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Farbar) C:\Users\Mathematics\Downloads\FRST64 (1).exe==================== Registry (Whitelisted) ==================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-20] (Microsoft Corporation)HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-28] (Logitech Inc.)HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)HKLM-x32\...\Run: [P17RunE] => RunDll32 P17RunE.dll,RunDLLEntryHKLM-x32\...\Run: [updReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-03] (Apple Inc.)HKLM-x32\...\Run: [soundTray] => C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe [143360 2008-03-26] (Sonic Focus, Inc.)HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-07] (RealNetworks, Inc.)HKLM-x32\...\Run: [soundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1302528 2013-03-20] (Analog Devices, Inc.)HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)HKLM-x32\...\Run: [] => [X]HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenterHKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenterHKU\S-1-5-21-3870556266-1924480524-164372810-1000\...\Run: [PCShowServer] => C:\Users\Mathematics\AppData\Local\DIRECTV Player\PCShowServerPMWrapper.exe [525240 2012-10-15] (NDS Technologies)HKU\S-1-5-21-3870556266-1924480524-164372810-1000\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1095000 2013-11-08] (Garmin Ltd or its subsidiaries)HKU\S-1-5-21-3870556266-1924480524-164372810-1000\...\Run: [NETGEARGenie] => C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe [596480 2014-06-11] (NETGEAR Inc.)HKU\S-1-5-21-3870556266-1924480524-164372810-1000\...\Run: [WMPNSCFG] => C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exeHKU\S-1-5-21-3870556266-1924480524-164372810-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)Startup: C:\Users\Mathematics\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnkShortcutTarget: ERUNT AutoBackup.lnk -> C:\Program Files (x86)\ERUNT\AUTOBACK.EXE ()ShellIconOverlayIdentifiers: OverlayExcluded -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.5.0.19\buShell.dll (Symantec Corporation)ShellIconOverlayIdentifiers: OverlayPending -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.5.0.19\buShell.dll (Symantec Corporation)ShellIconOverlayIdentifiers: OverlayProtected -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.5.0.19\buShell.dll (Symantec Corporation)==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehpHKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4AB3B96A8B07CF01HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-usStartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exeBHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation)BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\IPS\IPSBHO.DLL (Symantec Corporation)BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation)DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://access.halliburton.com/dana-cached/sc/JuniperSetupClient.cabHandler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)Tcpip\Parameters: [DhcpNameServer] 192.168.1.1Tcpip\..\Interfaces\{D6BB94D4-3AE7-4D49-A776-6393D96E8307}: [NameServer] 208.67.222.222,208.67.220.220FireFox:========FF ProfilePath: C:\Users\Mathematics\AppData\Roaming\Mozilla\Firefox\Profiles\sp1a18b1.defaultFF Homepage: hxxp://www.google.com/FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)FF Plugin HKCU: @nds.com/PCShowPlugin -> C:\Users\Mathematics\AppData\Local\DIRECTV Player\npPCShowPlugin.dll No FileFF Plugin HKCU: @nds.com/PlayerPlugin -> C:\Users\Mathematics\AppData\Local\DIRECTV Player\npPlayerPlugin.dll (NDS)FF Plugin HKCU: NDS.com/PlayerPlugin -> C:\Users\Mathematics\AppData\Local\DIRECTV Player\npPlayerPlugin.dll (NDS)FF SearchPlugin: C:\Users\Mathematics\AppData\Roaming\Mozilla\Firefox\Profiles\sp1a18b1.default\searchplugins\safesearch.xmlFF Extension: Flash and Video Download - C:\Users\Mathematics\AppData\Roaming\Mozilla\Firefox\Profiles\sp1a18b1.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-08-20]FF Extension: BetterPrivacy - C:\Users\Mathematics\AppData\Roaming\Mozilla\Firefox\Profiles\sp1a18b1.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-03-02]FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-15]FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-15]FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtensionFF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-03-17]FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgnFF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn [2014-09-17]FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\ExtFF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-07]FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\ExtFF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-12-12]FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3Chrome:=======CHR HomePage: Default ->CHR DefaultSearchKeyword: Default -> 39F6DCD6BA445C1FEC40DB13CB94E6BEDD062C9035E26114DDCA048CE0C7C71CCHR DefaultSearchURL: Default -> 45066797DCC0F711A27401EAB819D88C6F0347579502D90E8BAA0302B0DDC532CHR Profile: C:\Users\Mathematics\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Mathematics\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-08]CHR Extension: (Google Wallet) - C:\Users\Mathematics\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-08-06]==================== Services (Whitelisted) =================(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [89600 2013-03-20] (Andrea Electronics Corporation)R2 CLDTVHNService; C:\Program Files (x86)\DirecTV\DirecTV\Kernel\DMP\CLDTVHNService.exe [75048 2009-09-17] ()S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-03-17] (Creative Labs) [File not signed]R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [File not signed]R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250712 2013-11-08] (Garmin Ltd or its subsidiaries)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)R2 N360; C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\N360.exe [265040 2014-07-31] (Symantec Corporation)R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]R2 NETGEARGenieDaemon; C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe [225792 2014-03-23] (NETGEAR) [File not signed]R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()==================== Drivers (Whitelisted) ====================(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)R1 BHDrvx64; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20140912.003\BHDrvx64.sys [1586904 2014-09-12] (Symantec Corporation)R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1505000.013\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-09] (Symantec Corporation)R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-09] (Symantec Corporation)R1 IDSVia64; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20140916.001\IDSvia64.sys [633560 2014-08-29] (Symantec Corporation)R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66360 2012-10-02] (Logitech Inc.)R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-17] (Malwarebytes Corporation)R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)R0 mrdd; C:\Windows\System32\DRIVERS\mrdd.sys [22568 2008-11-12] (Marvell Semiconductor, Inc.)R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [176680 2009-02-08] (Marvell Semiconductor, Inc.)R3 NAVENG; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20140916.006\ENG64.SYS [129752 2014-09-01] (Symantec Corporation)R3 NAVEX15; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20140916.006\EX64.SYS [2137304 2014-09-01] (Symantec Corporation)R2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2014-08-23] (CACE Technologies, Inc.)R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1505000.013\SRTSP64.SYS [875736 2014-02-12] (Symantec Corporation)R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1505000.013\SRTSPX64.SYS [36952 2013-09-09] (Symantec Corporation)R0 SymDS; C:\Windows\System32\drivers\N360x64\1505000.013\SYMDS64.SYS [493656 2013-09-09] (Symantec Corporation)R0 SymEFA; C:\Windows\System32\drivers\N360x64\1505000.013\SYMEFA64.SYS [1148120 2014-03-03] (Symantec Corporation)R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-01-01] (Symantec Corporation)R1 SymIRON; C:\Windows\system32\drivers\N360x64\1505000.013\Ironx64.SYS [264280 2013-09-26] (Symantec Corporation)R1 SYMTDIv; C:\Windows\System32\Drivers\N360x64\1505000.013\SYMTDIV.SYS [510168 2014-02-17] (Symantec Corporation)S3 IpInIp; system32\DRIVERS\ipinip.sys [X]S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]==================== NetSvcs (Whitelisted) ===================(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)==================== One Month Created Files and Folders ========(If an entry is included in the fixlist, the file\folder will be moved.)2014-09-17 04:25 - 2014-09-17 04:25 - 02105856 _____ (Farbar) C:\Users\Mathematics\Downloads\FRST64 (1).exe2014-09-17 04:24 - 2014-09-17 04:24 - 00000281 _____ () C:\Users\Mathematics\Desktop\ESET Scan.txt2014-09-17 02:32 - 2014-09-17 02:32 - 00000000 ____D () C:\Program Files (x86)\ESET2014-09-17 02:31 - 2014-09-17 02:31 - 02347384 _____ (ESET) C:\Users\Mathematics\Downloads\esetsmartinstaller_enu.exe2014-09-17 01:37 - 2014-09-17 01:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype2014-09-17 01:35 - 2014-09-17 01:35 - 00001886 _____ () C:\Users\Mathematics\Desktop\AdwCleaner[s0].txt2014-09-17 01:05 - 2014-09-17 01:32 - 00000000 ____D () C:\AdwCleaner2014-09-17 01:04 - 2014-09-17 01:04 - 01373475 _____ () C:\Users\Mathematics\Downloads\AdwCleaner (1).exe2014-09-17 00:52 - 2014-09-17 00:52 - 00014397 _____ () C:\Users\Mathematics\Desktop\JRT.txt2014-09-17 00:43 - 2014-09-17 00:43 - 00000000 ____D () C:\Windows\ERUNT2014-09-17 00:42 - 2014-09-17 00:42 - 01016035 _____ (Thisisu) C:\Users\Mathematics\Downloads\JRT (1).exe2014-09-16 06:24 - 2014-09-16 06:24 - 01016261 _____ (Thisisu) C:\Users\Mathematics\Downloads\JRT.exe2014-09-15 17:16 - 2014-09-16 06:09 - 00003364 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3870556266-1924480524-164372810-10002014-09-15 02:12 - 2014-09-15 02:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox2014-09-15 01:01 - 2014-09-15 01:01 - 00005533 _____ () C:\Users\Mathematics\Desktop\RKreport_SCN_09152014_005949.log2014-09-15 00:53 - 2014-09-15 00:53 - 00036456 _____ () C:\Windows\system32\Drivers\TrueSight.sys2014-09-15 00:53 - 2014-09-15 00:53 - 00000000 ____D () C:\ProgramData\RogueKiller2014-09-15 00:52 - 2014-09-15 00:52 - 05429848 _____ () C:\Users\Mathematics\Downloads\RogueKillerX64.exe2014-09-15 00:27 - 2014-09-17 02:57 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys2014-09-15 00:26 - 2014-09-15 00:26 - 00000941 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-09-15 00:26 - 2014-09-15 00:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-09-15 00:26 - 2014-09-15 00:26 - 00000000 ____D () C:\ProgramData\Malwarebytes2014-09-15 00:26 - 2014-09-15 00:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-09-15 00:26 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys2014-09-15 00:26 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys2014-09-15 00:26 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys2014-09-15 00:25 - 2014-09-15 00:25 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mathematics\Downloads\mbam-setup-2.0.2.1012 (1).exe2014-09-15 00:23 - 2014-09-15 00:24 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Mathematics\Downloads\rkill (2).exe2014-09-14 23:09 - 2014-09-14 23:09 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Mathematics\Downloads\mbam-clean-2.1.1.1001 (1).exe2014-09-14 23:07 - 2014-09-14 23:07 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Mathematics\Downloads\mbam-clean-2.1.1.1001.exe2014-09-14 22:41 - 2014-09-14 22:41 - 00000000 ____D () C:\Windows\ERDNT2014-09-14 22:40 - 2014-09-14 22:41 - 00000000 ____D () C:\Program Files (x86)\ERUNT2014-09-14 22:40 - 2014-09-14 22:40 - 00791393 _____ (Lars Hederer ) C:\Users\Mathematics\Downloads\erunt-setup.exe2014-09-14 22:40 - 2014-09-14 22:40 - 00000763 _____ () C:\Users\Mathematics\Desktop\NTREGOPT.lnk2014-09-14 22:40 - 2014-09-14 22:40 - 00000744 _____ () C:\Users\Mathematics\Desktop\ERUNT.lnk2014-09-14 22:40 - 2014-09-14 22:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT2014-09-14 22:37 - 2014-09-14 22:37 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Mathematics\Downloads\rkill (1).exe2014-09-12 19:28 - 2014-09-17 01:35 - 00000400 _____ () C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Mathematics.job2014-09-12 19:28 - 2014-09-16 22:58 - 00002918 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateXML_Mathematics2014-09-12 19:28 - 2014-09-16 22:58 - 00000390 _____ () C:\Windows\Tasks\ReclaimerUpdateXML_Mathematics.job2014-09-12 19:28 - 2014-09-16 17:30 - 00002922 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateFiles_Mathematics2014-09-12 19:28 - 2014-09-16 17:30 - 00000394 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Mathematics.job2014-09-12 19:28 - 2014-09-12 19:28 - 00003562 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Mathematics2014-09-12 19:28 - 2014-09-12 19:28 - 00002626 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperLogonPrompt_Mathematics2014-09-12 16:24 - 2014-09-17 04:25 - 00025295 _____ () C:\Users\Mathematics\Downloads\FRST.txt2014-09-12 16:24 - 2014-09-12 16:25 - 00044099 _____ () C:\Users\Mathematics\Downloads\Addition.txt2014-09-12 16:23 - 2014-09-17 04:25 - 00000000 ____D () C:\FRST2014-09-12 16:22 - 2014-09-12 16:22 - 02105856 _____ (Farbar) C:\Users\Mathematics\Downloads\FRST64.exe2014-09-12 16:09 - 2014-09-12 16:09 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mathematics\Downloads\mbam-setup-2.0.2.1012.exe2014-09-12 03:20 - 2014-08-15 10:48 - 17868288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2014-09-12 03:20 - 2014-08-15 10:36 - 10920960 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2014-09-12 03:20 - 2014-08-15 10:35 - 02339328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2014-09-12 03:20 - 2014-08-15 10:31 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2014-09-12 03:20 - 2014-08-15 10:31 - 01384960 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2014-09-12 03:20 - 2014-08-15 10:30 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2014-09-12 03:20 - 2014-08-15 10:30 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2014-09-12 03:20 - 2014-08-15 10:30 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2014-09-12 03:20 - 2014-08-15 10:29 - 02156032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2014-09-12 03:20 - 2014-08-15 10:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll2014-09-12 03:20 - 2014-08-15 10:28 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2014-09-12 03:20 - 2014-08-15 10:28 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2014-09-12 03:20 - 2014-08-15 10:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe2014-09-12 03:20 - 2014-08-15 10:28 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe2014-09-12 03:20 - 2014-08-15 09:51 - 12363264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2014-09-12 03:20 - 2014-08-15 09:42 - 09739776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2014-09-12 03:20 - 2014-08-15 09:42 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2014-09-12 03:20 - 2014-08-15 09:37 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2014-09-12 03:20 - 2014-08-15 09:37 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2014-09-12 03:20 - 2014-08-15 09:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2014-09-12 03:20 - 2014-08-15 09:35 - 01802240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe2014-09-12 03:20 - 2014-08-15 09:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll2014-09-12 03:20 - 2014-08-15 09:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb2014-09-12 03:20 - 2014-08-15 09:34 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll2014-09-12 03:20 - 2014-08-15 09:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2014-09-12 03:20 - 2014-08-15 09:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe2014-09-12 03:20 - 2014-08-15 09:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe2014-09-11 18:27 - 2014-09-11 18:27 - 00016687 _____ () C:\Users\Mathematics\Downloads\AUX TRACKER.xlsx2014-09-09 18:26 - 2014-09-09 18:26 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe2014-09-03 14:08 - 2014-09-03 14:08 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (5).asx2014-08-31 15:47 - 2014-08-31 15:47 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (4).asx2014-08-31 14:28 - 2014-09-17 01:34 - 00003386 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3870556266-1924480524-164372810-10002014-08-31 14:28 - 2014-09-17 01:34 - 00003264 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3870556266-1924480524-164372810-10002014-08-31 03:15 - 2014-08-31 03:15 - 00066302 _____ () C:\Users\Mathematics\Downloads\SilverCalculator.xlsx2014-08-30 12:55 - 2014-09-16 06:09 - 00003242 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3870556266-1924480524-164372810-10002014-08-30 04:39 - 2014-08-30 04:39 - 27841136 _____ (NETGEAR Inc.) C:\Users\Mathematics\Downloads\NETGEARGenie-install (2).exe2014-08-29 11:39 - 2014-08-29 11:40 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (3).asx2014-08-28 03:00 - 2014-08-22 20:05 - 00304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll2014-08-28 03:00 - 2014-08-22 19:42 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll2014-08-28 03:00 - 2014-08-22 18:38 - 02782208 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2014-08-25 14:54 - 2014-08-25 14:54 - 00118149 _____ () C:\Users\Mathematics\Desktop\wmpChrome.crx2014-08-25 14:53 - 2014-08-25 14:53 - 00118149 _____ () C:\Users\Mathematics\Downloads\wmpChrome.crx2014-08-25 13:26 - 2014-08-25 13:26 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\Adobe2014-08-22 03:14 - 2014-08-22 03:14 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (2).asx2014-08-19 01:43 - 2014-08-19 01:43 - 01356107 _____ () C:\Users\Mathematics\Downloads\adwcleaner.exe2014-08-18 13:15 - 2014-08-18 13:15 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Juniper Networks2014-08-18 12:04 - 2014-08-18 12:04 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (1).asx==================== One Month Modified Files and Folders =======(If an entry is included in the fixlist, the file\folder will be moved.)2014-09-17 04:26 - 2014-09-12 16:24 - 00025295 _____ () C:\Users\Mathematics\Downloads\FRST.txt2014-09-17 04:26 - 2013-05-25 01:00 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job2014-09-17 04:25 - 2014-09-17 04:25 - 02105856 _____ (Farbar) C:\Users\Mathematics\Downloads\FRST64 (1).exe2014-09-17 04:25 - 2014-09-12 16:23 - 00000000 ____D () C:\FRST2014-09-17 04:24 - 2014-09-17 04:24 - 00000281 _____ () C:\Users\Mathematics\Desktop\ESET Scan.txt2014-09-17 04:18 - 2013-03-17 09:53 - 00000908 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2014-09-17 04:05 - 2013-03-17 10:52 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\Skype2014-09-17 03:34 - 2006-11-02 10:21 - 00004096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A02014-09-17 03:34 - 2006-11-02 10:21 - 00004096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A02014-09-17 03:00 - 2008-01-20 20:53 - 01300313 _____ () C:\Windows\WindowsUpdate.log2014-09-17 02:57 - 2014-09-15 00:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys2014-09-17 02:32 - 2014-09-17 02:32 - 00000000 ____D () C:\Program Files (x86)\ESET2014-09-17 02:31 - 2014-09-17 02:31 - 02347384 _____ (ESET) C:\Users\Mathematics\Downloads\esetsmartinstaller_enu.exe2014-09-17 02:22 - 2013-05-24 22:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service2014-09-17 02:03 - 2013-06-21 00:21 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\DIRECTV Player2014-09-17 01:41 - 2006-11-02 07:46 - 00759542 _____ () C:\Windows\system32\PerfStringBackup.INI2014-09-17 01:37 - 2014-09-17 01:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype2014-09-17 01:37 - 2014-03-01 20:40 - 00001890 _____ () C:\Users\Public\Desktop\Skype.lnk2014-09-17 01:37 - 2013-06-26 00:37 - 00000000 ___RD () C:\Program Files (x86)\Skype2014-09-17 01:37 - 2013-03-17 10:52 - 00000000 ____D () C:\ProgramData\Skype2014-09-17 01:35 - 2014-09-17 01:35 - 00001886 _____ () C:\Users\Mathematics\Desktop\AdwCleaner[s0].txt2014-09-17 01:35 - 2014-09-12 19:28 - 00000400 _____ () C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Mathematics.job2014-09-17 01:34 - 2014-08-31 14:28 - 00003386 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3870556266-1924480524-164372810-10002014-09-17 01:34 - 2014-08-31 14:28 - 00003264 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3870556266-1924480524-164372810-10002014-09-17 01:34 - 2013-03-17 09:53 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2014-09-17 01:34 - 2006-11-02 10:40 - 00000006 ____H () C:\Windows\Tasks\SA.DAT2014-09-17 01:34 - 2006-11-02 10:39 - 00623032 _____ () C:\Windows\PFRO.log2014-09-17 01:33 - 2006-11-02 10:40 - 00032542 _____ () C:\Windows\Tasks\SCHEDLGU.TXT2014-09-17 01:32 - 2014-09-17 01:05 - 00000000 ____D () C:\AdwCleaner2014-09-17 01:04 - 2014-09-17 01:04 - 01373475 _____ () C:\Users\Mathematics\Downloads\AdwCleaner (1).exe2014-09-17 00:52 - 2014-09-17 00:52 - 00014397 _____ () C:\Users\Mathematics\Desktop\JRT.txt2014-09-17 00:43 - 2014-09-17 00:43 - 00000000 ____D () C:\Windows\ERUNT2014-09-17 00:42 - 2014-09-17 00:42 - 01016035 _____ (Thisisu) C:\Users\Mathematics\Downloads\JRT (1).exe2014-09-16 22:58 - 2014-09-12 19:28 - 00002918 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateXML_Mathematics2014-09-16 22:58 - 2014-09-12 19:28 - 00000390 _____ () C:\Windows\Tasks\ReclaimerUpdateXML_Mathematics.job2014-09-16 17:30 - 2014-09-12 19:28 - 00002922 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateFiles_Mathematics2014-09-16 17:30 - 2014-09-12 19:28 - 00000394 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Mathematics.job2014-09-16 06:24 - 2014-09-16 06:24 - 01016261 _____ (Thisisu) C:\Users\Mathematics\Downloads\JRT.exe2014-09-16 06:09 - 2014-09-15 17:16 - 00003364 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3870556266-1924480524-164372810-10002014-09-16 06:09 - 2014-08-30 12:55 - 00003242 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3870556266-1924480524-164372810-10002014-09-15 15:53 - 2013-03-26 20:07 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\Microsoft Games2014-09-15 02:12 - 2014-09-15 02:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox2014-09-15 01:01 - 2014-09-15 01:01 - 00005533 _____ () C:\Users\Mathematics\Desktop\RKreport_SCN_09152014_005949.log2014-09-15 00:53 - 2014-09-15 00:53 - 00036456 _____ () C:\Windows\system32\Drivers\TrueSight.sys2014-09-15 00:53 - 2014-09-15 00:53 - 00000000 ____D () C:\ProgramData\RogueKiller2014-09-15 00:52 - 2014-09-15 00:52 - 05429848 _____ () C:\Users\Mathematics\Downloads\RogueKillerX64.exe2014-09-15 00:27 - 2014-08-14 01:54 - 00002860 _____ () C:\Users\Mathematics\Desktop\Rkill.txt2014-09-15 00:26 - 2014-09-15 00:26 - 00000941 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-09-15 00:26 - 2014-09-15 00:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-09-15 00:26 - 2014-09-15 00:26 - 00000000 ____D () C:\ProgramData\Malwarebytes2014-09-15 00:26 - 2014-09-15 00:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-09-15 00:25 - 2014-09-15 00:25 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mathematics\Downloads\mbam-setup-2.0.2.1012 (1).exe2014-09-15 00:24 - 2014-09-15 00:23 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Mathematics\Downloads\rkill (2).exe2014-09-14 23:09 - 2014-09-14 23:09 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Mathematics\Downloads\mbam-clean-2.1.1.1001 (1).exe2014-09-14 23:07 - 2014-09-14 23:07 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Mathematics\Downloads\mbam-clean-2.1.1.1001.exe2014-09-14 22:41 - 2014-09-14 22:41 - 00000000 ____D () C:\Windows\ERDNT2014-09-14 22:41 - 2014-09-14 22:40 - 00000000 ____D () C:\Program Files (x86)\ERUNT2014-09-14 22:40 - 2014-09-14 22:40 - 00791393 _____ (Lars Hederer ) C:\Users\Mathematics\Downloads\erunt-setup.exe2014-09-14 22:40 - 2014-09-14 22:40 - 00000763 _____ () C:\Users\Mathematics\Desktop\NTREGOPT.lnk2014-09-14 22:40 - 2014-09-14 22:40 - 00000744 _____ () C:\Users\Mathematics\Desktop\ERUNT.lnk2014-09-14 22:40 - 2014-09-14 22:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT2014-09-14 22:39 - 2013-03-17 11:11 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\CrashDumps2014-09-14 22:37 - 2014-09-14 22:37 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Mathematics\Downloads\rkill (1).exe2014-09-12 21:22 - 2013-03-17 09:54 - 00002025 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2014-09-12 21:11 - 2014-01-30 15:06 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\Juniper Networks2014-09-12 19:28 - 2014-09-12 19:28 - 00003562 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Mathematics2014-09-12 19:28 - 2014-09-12 19:28 - 00002626 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperLogonPrompt_Mathematics2014-09-12 16:25 - 2014-09-12 16:24 - 00044099 _____ () C:\Users\Mathematics\Downloads\Addition.txt2014-09-12 16:22 - 2014-09-12 16:22 - 02105856 _____ (Farbar) C:\Users\Mathematics\Downloads\FRST64.exe2014-09-12 16:09 - 2014-09-12 16:09 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mathematics\Downloads\mbam-setup-2.0.2.1012.exe2014-09-12 11:56 - 2014-07-15 01:58 - 00000000 ____D () C:\Program Files (x86)\iTunes2014-09-12 04:14 - 2013-03-17 11:11 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\NETGEARGenie2014-09-12 03:19 - 2013-06-21 11:44 - 00752854 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI2014-09-12 03:18 - 2013-08-14 22:25 - 00000000 ____D () C:\Windows\system32\MRT2014-09-12 03:00 - 2006-11-02 07:35 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe2014-09-11 18:27 - 2014-09-11 18:27 - 00016687 _____ () C:\Users\Mathematics\Downloads\AUX TRACKER.xlsx2014-09-10 08:06 - 2013-03-17 00:45 - 00000000 ____D () C:\Users\Mathematics2014-09-09 18:26 - 2014-09-09 18:26 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe2014-09-09 18:26 - 2013-05-25 01:00 - 00003682 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater2014-09-09 18:26 - 2013-04-12 13:24 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe2014-09-09 18:26 - 2013-04-12 13:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl2014-09-06 13:01 - 2013-03-21 15:20 - 00090624 _____ () C:\Users\Mathematics\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini2014-09-04 02:43 - 2014-08-07 01:49 - 00000982 _____ () C:\Users\Mathematics\Desktop\Octobers Bills.txt2014-09-03 14:08 - 2014-09-03 14:08 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (5).asx2014-09-03 02:31 - 2013-03-18 22:11 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\Audacity2014-09-01 19:26 - 2013-07-23 22:14 - 00012793 _____ () C:\Users\Mathematics\Desktop\Finacial Statment for Household.xlsx2014-09-01 17:36 - 2014-05-13 18:18 - 00000000 ____D () C:\Users\Mathematics\Documents\Silver2014-08-31 15:47 - 2014-08-31 15:47 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (4).asx2014-08-31 03:15 - 2014-08-31 03:15 - 00066302 _____ () C:\Users\Mathematics\Downloads\SilverCalculator.xlsx2014-08-30 21:53 - 2013-03-21 11:43 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\Screencast-O-Matic2014-08-30 04:39 - 2014-08-30 04:39 - 27841136 _____ (NETGEAR Inc.) C:\Users\Mathematics\Downloads\NETGEARGenie-install (2).exe2014-08-29 11:40 - 2014-08-29 11:39 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (3).asx2014-08-29 00:28 - 2013-11-07 18:21 - 00000000 ____D () C:\Users\Mathematics\Documents\Halliburton2014-08-28 04:29 - 2006-11-02 10:21 - 00276568 _____ () C:\Windows\system32\FNTCACHE.DAT2014-08-25 14:54 - 2014-08-25 14:54 - 00118149 _____ () C:\Users\Mathematics\Desktop\wmpChrome.crx2014-08-25 14:53 - 2014-08-25 14:53 - 00118149 _____ () C:\Users\Mathematics\Downloads\wmpChrome.crx2014-08-25 13:26 - 2014-08-25 13:26 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\Adobe2014-08-23 22:40 - 2014-08-14 01:48 - 00001897 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR Genie.lnk2014-08-23 22:40 - 2014-08-14 01:48 - 00001885 _____ () C:\Users\Public\Desktop\NETGEAR Genie.lnk2014-08-23 22:39 - 2013-03-17 11:11 - 00369168 _____ (CACE Technologies, Inc.) C:\Windows\system32\wpcap.dll2014-08-23 22:39 - 2013-03-17 11:11 - 00281104 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\wpcap.dll2014-08-23 22:39 - 2013-03-17 11:11 - 00106000 _____ (CACE Technologies, Inc.) C:\Windows\system32\packet.dll2014-08-23 22:39 - 2013-03-17 11:11 - 00096784 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\packet.dll2014-08-23 22:39 - 2013-03-17 11:11 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys2014-08-22 20:05 - 2014-08-28 03:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll2014-08-22 19:42 - 2014-08-28 03:00 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll2014-08-22 18:42 - 2013-03-17 12:32 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\HpUpdate2014-08-22 18:38 - 2014-08-28 03:00 - 02782208 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2014-08-22 03:14 - 2014-08-22 03:14 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (2).asx2014-08-19 01:43 - 2014-08-19 01:43 - 01356107 _____ () C:\Users\Mathematics\Downloads\adwcleaner.exe2014-08-18 13:15 - 2014-08-18 13:15 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Juniper Networks2014-08-18 12:04 - 2014-08-18 12:04 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (1).asxSome content of TEMP:====================C:\Users\Mathematics\AppData\Local\Temp\CTPBSeq.exeC:\Users\Mathematics\AppData\Local\Temp\MSN21D2.exeC:\Users\Mathematics\AppData\Local\Temp\Quarantine.exe==================== Bamital & volsnap Check =================(There is no automatic fix for files that do not pass verification.)C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\SysWOW64\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2014-09-17 01:40==================== End Of Log ============================
ESET Scan.Txt Threats Found
C:\Users\Mathematics\Downloads\cbsidlm-cbsi188-Vegas_Pro_12_64bit-SEO-203975.exe a variant of Win32/CNETInstaller.B potentially unwanted applicationF:\Vista Backup Files\Users\Users\BuyNselleverything\Downloads\speedupmypc.exe Win32/SpeedUpMyPC potentially unwanted applicationJRT Scan
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Junkware Removal Tool (JRT) by ThisisuVersion: 6.1.5 (09.16.2014:1)OS: Windows Vista Ultimate x64Ran by Mathematics on Wed 09/17/2014 at 0:43:26.10~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Services~~~ Registry Values~~~ Registry KeysSuccessfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{43DCFD57-EC13-459C-87C9-0F376A955453}Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"~~~ Files~~~ FoldersSuccessfully deleted: [Folder] "C:\Users\Mathematics\AppData\Roaming\drivercure"Successfully deleted: [Folder] "C:\Program Files (x86)\coupons"Successfully deleted: [Folder] "C:\Program Files (x86)\free youtube downloader"Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{008718CA-14DD-44E2-A8BF-9FD6C1E1297D}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{0665F6A9-E984-4A56-A7D2-2D50B5E04ECB}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{088967C0-116D-4E69-90DD-84F459826682}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{09EFF977-E1B7-4FF0-A382-2E5680243AC6}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{0BCD15D5-2B9F-460D-8F40-4B2352556072}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{0C795CD8-61CE-4AA3-9132-2A183E6EA2A4}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{0CCAE1D5-E75B-4F19-8A3F-634EB7FB76F9}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{0E0EDF0F-4522-4E6D-85B1-0D761707B68F}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{0FE270FA-CB4A-4619-AC81-FBF1B89ECE61}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{14FE4768-19AB-4FBA-8830-04F756AA3B5D}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{1AC286DF-F731-42B8-88F9-50F136BD02D9}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{1BDDB9E4-0132-4BD5-A1B1-29605E39DC8C}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{1E3CCC65-23E6-4CCA-89E1-C826DCA229A8}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{1E85E662-C070-481E-BFAA-C688D7026135}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{22B33929-2CFC-481C-874A-97B7CD87DBCD}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{2317CCB3-BE65-476E-A732-84C9566276D3}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{270D221E-70FB-4E2C-B3A7-A62B2585B287}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{27637D0F-06B1-4AF6-A71B-7D10CECCBC81}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{2ACAF10F-5D91-46B8-9959-DA29104A9F53}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{2B1D6C5C-AC75-410C-9AED-2FC0A812E908}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{2C4C27B7-3E60-489C-9C81-EA0029FB6616}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{2D0E1A6D-A117-4D1B-B9F1-90EFB2BCC0BA}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{2F8D06BB-148A-476C-A343-C165705C2491}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{34E6F525-3D38-4CC8-A5E5-0539181A57B4}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{456F3C7D-6FB5-44E7-80C6-1ECF2E64115E}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{4650E802-DA36-4BA9-A2A0-3301EEA30B79}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{474CB175-09B6-4736-8800-D9815373012C}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{48E99E3B-1C08-4868-A12D-B275474E7C89}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{4A4B6A9A-49BC-4F37-978E-4DBE4F548A22}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{4BA3FF9C-54B1-4DEE-909C-00EC05925B1A}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{4EFD0AEA-00C7-4E49-B610-F4515AF3D03E}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{501FA6AA-1B5A-47B2-B725-D16A7E0149A9}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{5440668F-FBE5-4A58-8A5A-04638D209988}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{54F14DE7-CCDA-41BD-8ACC-A62F8D74B092}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{5511CF52-5BF6-4685-AFED-65DEA81BE796}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{56B039F1-8D26-4A87-9645-D773C0194E7E}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{57EC6CDE-ED2D-47EB-954C-70F9E5FC992C}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{59F2FB4A-91D1-4F5B-A030-BBCBD19A2B09}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{5A27BCAE-039E-4763-8D4D-846AF5C566D9}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{5AFD5BE4-3A68-47D4-A27D-C6BC6B4F378B}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{5B31A22A-0471-4730-AB53-97D2C1BACF02}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{5BC347E4-A878-4327-B7CA-3D6F35B72DD8}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{606D4FF7-1114-44BA-8C82-C74D9201687E}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{62ED8E2D-E6CB-4724-8B2A-9249646CCC8A}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{630973E4-F2E3-48D6-A440-E6C5231AC15E}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{64032F9C-1136-4108-87CA-4684B37D9431}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{64A35B6C-C3FE-48B1-88A6-323EB9240B11}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{65A82C81-4DF7-4CFA-9E6A-A8185AFCAF1A}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{662C97B1-12CB-41AF-9818-2B9EE6E51E0D}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{666F6F91-A836-420B-97DF-0851627B8C23}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{66F68193-56EC-4981-BCD2-5D227D209AEE}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{68149F54-87C9-44E4-BEC2-86CBBC5B55BB}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{6831F019-2797-4B78-B6FF-B936D1E29B99}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{68E25FE0-8A91-4921-94C2-10D28814D9C2}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{68F8BEF3-E480-4B56-B6BD-2005735995CA}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{6958DB4D-C6CA-4BC3-B5E9-EBACE8EA0510}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{6B712BAD-B923-4EC2-B594-470D9C7C5097}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{6C0A31EF-E02C-440E-948F-B85ACBD01217}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{6F6DDB79-04B1-455B-9B48-F58A31F706B8}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{6F8E5F99-77AC-4BC4-A8F4-682555543218}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{72875BE8-BE95-4A91-AAD2-FD77E040D799}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{75B18370-4C46-4964-B959-C91165FF8F0A}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{782F7058-A6B6-4170-B1E3-3599EBE2292C}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{79EFD21A-A538-4978-9687-79890C60F69E}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{7AADB189-AFDA-43B9-B8FB-FE84B7E48F04}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{7EB776AA-BBC0-4C65-BDD1-E0B836193A5A}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{7F6D3FDA-612F-431C-B9D9-A6379B6ECFB6}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{80B940F4-1A44-41F6-8BEA-24070E7591F3}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{81483136-0053-458F-8CC6-E38ADE58CE73}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{820262D5-8A60-427D-95C0-4511993ABC7C}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{8491B17E-0C5E-4675-BBF8-BC725E96D61E}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{877E1EAF-6A64-4ADD-9670-61D9B44D5301}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{898AE860-2612-4B58-9638-920FAEC747CF}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{89F52DB2-CB40-4074-88AA-2E2635F152F7}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{8C98C65C-7909-4D07-8DE1-21CC6CB92EAF}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{8EA20468-5406-4D9F-A84A-01C1D125D108}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{9142EBF7-223C-4BA1-8767-09CF338B6FC3}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{9723E05D-550C-4D5A-8077-69D7FD0B1AB9}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{9B070D8A-F8AD-4D85-A0F1-6D4701EB36C3}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{A86008A3-9B0A-4EC2-85E2-AF4D5DA8989B}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{A98A7BBD-3483-441C-94EE-B2A1B8135D41}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{AE3A9254-7A70-4FF7-A636-0F585DB091BA}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{B2A46922-ECD6-4122-BAB4-79B013795E15}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{BC2B5759-1A0E-4864-BF54-23F0F3643108}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{C1BB97B0-4D46-4658-A70A-7B5671DFF1CE}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{C33CB60C-110B-4EC4-9F8A-20019E1E09DF}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{C536B1A8-685C-4227-A7C8-7718EB87807A}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{C81B33F2-550D-412C-81CC-30BEC0DF9C52}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{C8F2C025-BD74-4FED-BF2E-4C930D67CDA2}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{C946228A-A921-4766-A310-05D862D7174D}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{C9532563-C646-40FD-BC0C-2D450D04D1A8}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{CF895A8F-2AD6-40C4-A0AB-7E3CE6BB8015}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{D4189692-E943-4213-9731-097E15F44848}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{D53896B9-D885-4F92-851C-C83DC6DC198D}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{D60B42FA-8C85-4141-863E-7335B37C6B57}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{DBC8613C-EB4B-4670-A657-73B292AB52C2}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{DC9D385E-3E5C-42B6-BB6D-9EF49840B7DC}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{DCD67BB9-918B-45BA-B942-EA59A369D85A}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{DD5CE6CE-FFDD-4277-9EE4-07F7BFAB604A}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{DFCF8E10-F307-40FB-8368-A4849C75D7DB}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{E194A89C-D684-4ECB-B024-4C093BBB0298}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{E9789AB5-93B0-4670-9700-E7F0FB11E65C}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{E9947F25-F089-4F7D-B1DB-2B95C427807F}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{F07E2F0E-CC27-4E90-8024-CDDD844E5274}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{F30806E0-98C6-4D4C-ACD1-E91CEC131AB9}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{F3AB62DE-744B-48C9-80E8-106056964944}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{F3CEA48B-F982-4807-9453-DA3C2D166574}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{F3FCB41F-0879-4D77-9DFA-0326534A5F38}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{F50B5027-2C54-4B99-920D-13902132878D}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{F5B68445-2F69-40A0-968E-AC3BE0E0D6DD}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{F6A56A10-DC74-4707-AB3F-C3E968B43F25}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{F968DF06-2C3C-4B75-8334-3BD51893BD15}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{FAD38907-13FE-43AF-BE07-84F8B973EC25}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{FB1BCAD8-0821-4EF3-8804-1F91CD9A9DE6}Successfully deleted: [Empty Folder] C:\Users\Mathematics\appdata\local\{FEB1F724-E10A-48ED-BF16-6573A9A79DC3}~~~ FireFoxSuccessfully deleted: [File] C:\Users\Mathematics\AppData\Roaming\mozilla\firefox\profiles\sp1a18b1.default\searchplugins\safesearch.xmlEmptied folder: C:\Users\Mathematics\AppData\Roaming\mozilla\firefox\profiles\sp1a18b1.default\minidumps [52 files]~~~ Event Viewer Logs were cleared~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Scan was completed on Wed 09/17/2014 at 0:52:38.90End of JRT log~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~AdwCleaner Scan
# AdwCleaner v3.310 - Report created 17/09/2014 at 01:32:04# Updated 12/09/2014 by Xplode# Operating System : Windows Vista Ultimate Service Pack 2 (64 bits)# Username : Mathematics - MATHEMATICS-PC# Running from : C:\Users\Mathematics\Downloads\AdwCleaner (1).exe# Option : Clean***** [ Services ] ********** [ Files / Folders ] *****[!] Folder Deleted : C:\ProgramData\ParetoLogic[!] Folder Deleted : C:\Users\Mathematics\AppData\Roaming\ParetoLogic***** [ Scheduled Tasks ] ********** [ Shortcuts ] ********** [ Registry ] *****Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmkKey Deleted : HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC}Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}Key Deleted : HKCU\Software\ParetoLogicKey Deleted : HKLM\SOFTWARE\ParetoLogicKey Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.0Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Coupon Printer for Windows5.0.0.0***** [ Browsers ] *****-\\ Internet Explorer v9.0.8112.16575-\\ Mozilla Firefox v31.0 (x86 en-US)[ File : C:\Users\Mathematics\AppData\Roaming\Mozilla\Firefox\Profiles\sp1a18b1.default\prefs.js ]-\\ Google Chrome v37.0.2062.120[ File : C:\Users\Mathematics\AppData\Local\Google\Chrome\User Data\Default\preferences ]Deleted [Extension] : mkfokfffehpeedafpekjeddnmnjhmcmk*************************AdwCleaner[R0].txt - [1840 octets] - [17/09/2014 01:28:32]AdwCleaner[s0].txt - [1746 octets] - [17/09/2014 01:32:04]########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [1806 octets] ##########Malwarebytes Scan
Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 9/17/2014Scan Time: 1:39:19 AMLogfile:Administrator: YesVersion: 2.00.2.1012Malware Database: v2014.09.17.02Rootkit Database: v2014.09.15.01License: PremiumMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows Vista Service Pack 2CPU: x64File System: NTFSUser: MathematicsScan Type: Threat ScanResult: CompletedObjects Scanned: 318009Time Elapsed: 11 min, 28 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 0(No malicious items detected)Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 0(No malicious items detected)Files: 0(No malicious items detected)Physical Sectors: 0(No malicious items detected)(end) -
Thanks Ron for helping me out with this. I can't log onto myfico.com and stuff lately from this computer; but can from my other computer. So I figured it was a bug or something. Plus there is the misdirects to get me to download something. That was a big eye opener.
MalwareBytes Scan
Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 9/15/2014Scan Time: 12:40:36 AMLogfile:Administrator: YesVersion: 2.00.2.1012Malware Database: v2014.09.15.03Rootkit Database: v2014.09.13.01License: PremiumMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows Vista Service Pack 2CPU: x64File System: NTFSUser: MathematicsScan Type: Threat ScanResult: CompletedObjects Scanned: 326419Time Elapsed: 9 min, 40 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 0(No malicious items detected)Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 0(No malicious items detected)Files: 0(No malicious items detected)Physical Sectors: 0(No malicious items detected)(end)RogueKiller ReportRogueKiller V9.2.10.0 (x64) [Jul 11 2014] by Adlice SoftwareFeedback : http://forum.adlice.comBlog : http://www.adlice.comOperating System : Windows Vista (6.0.6002 Service Pack 2) 64 bits versionStarted in : Normal modeUser : Mathematics [Admin rights]Mode : Scan -- Date : 09/15/2014 00:59:54¤¤¤ Bad processes : 2 ¤¤¤[suspicious.Path] PCShowServerPMWrapper.exe -- C:\Users\Mathematics\AppData\Local\DIRECTV Player\PCShowServerPMWrapper.exe[7] -> KILLED [TermProc][suspicious.Path] NDSPCShowServer.exe -- C:\Users\Mathematics\AppData\Local\DIRECTV Player\NDSPCShowServer.exe[7] -> KILLED [TermThr]¤¤¤ Registry Entries : 16 ¤¤¤[suspicious.Path] (X64) HKEY_USERS\S-1-5-21-3870556266-1924480524-164372810-1000\Software\Microsoft\Windows\CurrentVersion\Run | PCShowServer : "C:\Users\Mathematics\AppData\Local\DIRECTV Player\PCShowServerPMWrapper.exe" -> FOUND[suspicious.Path] (X86) HKEY_USERS\S-1-5-21-3870556266-1924480524-164372810-1000\Software\Microsoft\Windows\CurrentVersion\Run | PCShowServer : "C:\Users\Mathematics\AppData\Local\DIRECTV Player\PCShowServerPMWrapper.exe" -> FOUND[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_F_3650\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 24.143.124.6 24.143.124.7 -> FOUND[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_F_3650\ControlSet003\Services\Tcpip\Parameters | DhcpNameServer : 24.143.124.6 24.143.124.7 -> FOUND[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_F_3650\ControlSet001\Services\Tcpip\Parameters\Interfaces\{FC7AFC34-9CFA-40C5-8835-5ABD083CBADD} | DhcpNameServer : 24.143.124.6 24.143.124.7 -> FOUND[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_F_3650\ControlSet003\Services\Tcpip\Parameters\Interfaces\{FC7AFC34-9CFA-40C5-8835-5ABD083CBADD} | DhcpNameServer : 24.143.124.6 24.143.124.7 -> FOUND[PUM.SysRestore] (X64) HKEY_LOCAL_MACHINE\RK_Software_ON_F_DDC2\Microsoft\Windows NT\CurrentVersion\SystemRestore | DisableSR : 1 -> FOUND[PUM.SysRestore] (X86) HKEY_LOCAL_MACHINE\RK_Software_ON_F_DDC2\Microsoft\Windows NT\CurrentVersion\SystemRestore | DisableSR : 1 -> FOUND[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\RK_Software_ON_F_DDC2\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> FOUND[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\RK_Software_ON_F_DDC2\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> FOUND[PUM.SearchPage] (X64) HKEY_USERS\RK_Controverzy_ON_F_C38D\Software\Microsoft\Internet Explorer\Main | Search Page : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> FOUND[PUM.SearchPage] (X86) HKEY_USERS\RK_Controverzy_ON_F_C38D\Software\Microsoft\Internet Explorer\Main | Search Page : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> FOUND¤¤¤ Scheduled tasks : 0 ¤¤¤¤¤¤ Files : 0 ¤¤¤¤¤¤ HOSTS File : 2 ¤¤¤[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost[C:\Windows\System32\drivers\etc\hosts] ::1 localhost¤¤¤ Antirootkit : 4 (Driver: LOADED) ¤¤¤[Filter(Kernel.Filter)] \Driver\atapi @ \Device\Ide\IdeDeviceP1T1L0-6 : \Driver\disk @ \Device\Harddisk1\DR1 (\SystemRoot\system32\DRIVERS\mrdd.sys)[Filter(Kernel.Filter)] \Driver\atapi @ \Device\Ide\IdeDeviceP0T0L0-0 : \Driver\disk @ \Device\Harddisk0\DR0 (\SystemRoot\system32\DRIVERS\mrdd.sys)[EAT:Addr] (explorer.exe) SYNCENG.dll - DllCanUnloadNow : C:\Windows\system32\twext.dll @ 0x7fef3ef6180[EAT:Addr] (explorer.exe) SYNCENG.dll - DllGetClassObject : C:\Windows\system32\twext.dll @ 0x7fef3ef60c0¤¤¤ Web browsers : 0 ¤¤¤¤¤¤ MBR Check : ¤¤¤+++++ PhysicalDrive0: WDC WD1500HLFS-01G6U0 ATA Device +++++--- User ---[MBR] d6e7cc5b2ea0549e2e4023d7e6fff691[bSP] a84225821515d5419030800f52946f76 : HP MBR CodePartition table:0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 143087 MBUser = LL1 ... OKUser = LL2 ... OK+++++ PhysicalDrive1: WDC WD3000GLFS-01F8U0 ATA Device +++++--- User ---[MBR] b4a21395f54d337099cc97d3f29c0183[bSP] 7b5f0f7d3b02d88fd325948ed76d9c7b : Windows Vista/7/8 MBR CodePartition table:0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 286166 MBUser = LL1 ... OKUser = LL2 ... OK+++++ PhysicalDrive2: ST325062 0A USB Device +++++--- User ---[MBR] 190e127b13a9f25960b1b3df9ef0b9c8[bSP] 42cb70b9a5b2b6fb161bb278a80c4dc5 : Windows XP MBR CodePartition table:0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 238464 MBUser = LL1 ... OKError reading LL2 MBR! ([32] The request is not supported. ) -
back too the top
-
Let me add my Malwarebytes shows Runtime Errors even after trying to re-install and I'm a lifetime member
-
Addition FileAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 12-09-2014Ran by Mathematics at 2014-09-12 16:24:51Running from C:\Users\Mathematics\DownloadsBoot Mode: Normal============================================================================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV: Norton 360 Premier Edition (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}AS: Norton 360 Premier Edition (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}FW: Norton 360 Premier Edition (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}==================== Installed Programs ======================(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) HiddenAdobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)Adobe Reader X (10.1.11) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated)Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)Apple Application Support (HKLM-x32\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)Bing Bar (HKLM-x32\...\{449CE12D-E2C7-4B97-B19E-55D163EA9435}) (Version: 7.0.619.0 - Microsoft Corporation)Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) HiddenCameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) HiddenCanon MF Drivers (HKLM-x32\...\{01B93B3A-283F-411B-A648-69CABCACC986}) (Version: - )Canon MF Toolbox 4.9.1.1.mf15 (HKLM-x32\...\{6767DFEE-8909-453A-B553-C7693912B2EB}) (Version: 4.9.1.1.mf15 - CANON INC.)Coupon Printer for Windows (HKLM-x32\...\Coupon Printer for Windows5.0.0.0) (Version: 5.0.0.0 - Coupons.com Incorporated)Creative Audio Control Panel (HKLM-x32\...\AudioCS) (Version: 2.56 - Creative Technology Limited)Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.41 - Creative Technology Limited)Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: - )Creative System Information (HKLM-x32\...\SysInfo) (Version: - )D110 (x32 Version: 140.0.283.000 - Hewlett-Packard) HiddenD3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) HiddenDestinations (x32 Version: 140.0.77.000 - Hewlett-Packard) HiddenDeviceDiscovery (x32 Version: 140.0.212.000 - Hewlett-Packard) HiddenDIRECTV Player (HKLM-x32\...\{43D1B973-3D12-42ba-9E6E-56A8FEFF5250}) (Version: 8.0 - DIRECTV)DIRECTV2PC Playback Advisor (HKLM-x32\...\InstallShield_{479F8C12-576B-4A58-AB78-4B70F7012AA8}) (Version: 1.0 - CyberLink Corp.)DIRECTV2PC Playback Advisor (x32 Version: 1.0 - CyberLink Corp.) HiddenDIRECTV2PC (HKLM-x32\...\InstallShield_{E9B10AA5-E5F6-4DEF-A435-FB20704AF1E8}) (Version: 2.0.7507 - CyberLink Corp.)DIRECTV2PC (x32 Version: 2.0.7507 - CyberLink Corp.) HiddenElevated Installer (x32 Version: 2.3.16.0 - Garmin Ltd or its subsidiaries) HiddenerLT (x32 Version: 1.20.138.34 - Logitech, Inc.) HiddenFree YouTube Downloader 3.5.152 (HKLM-x32\...\{A7E19604-93AF-4611-8C9F-CE509C2B286F}_is1) (Version: - HOW Inc.)Garmin Communicator Plugin (HKLM-x32\...\{647BB978-2876-487B-9B0E-FDB73F0EA4A2}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)Garmin Communicator Plugin x64 (HKLM\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)Garmin Express (HKLM-x32\...\{6f60b921-2ae3-43fe-a6fb-ad849bd91451}) (Version: 2.3.16.0 - Garmin Ltd or its subsidiaries)Garmin Express (x32 Version: 2.3.16.0 - Garmin Ltd or its subsidiaries) HiddenGarmin Express Tray (x32 Version: 2.3.16.0 - Garmin Ltd or its subsidiaries) HiddenGarmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) HiddenGPBaseService2 (x32 Version: 140.0.211.000 - Hewlett-Packard) HiddenHost OpenAL (ADI) (HKLM-x32\...\Host OpenAL (ADI)) (Version: - )HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{14BC6853-A74E-4874-B50D-679889D1544D}) (Version: 14.0 - HP)HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{DBC1DE57-B55A-4D57-9769-1DB9BE506AF7}) (Version: 14.0 - HP)HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)HPAppStudio (x32 Version: 140.0.95.000 - Hewlett-Packard) HiddenHPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) HiddenHPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) HiddenHPProductAssistant (x32 Version: 140.0.212.000 - Hewlett-Packard) HiddenHPSSupply (x32 Version: 140.0.211.000 - Hewlett-Packard) HiddeniTunes (HKLM\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) HiddenJuniper Networks Host Checker (HKCU\...\Neoteris_Host_Checker) (Version: 7.0.0.18107 - Juniper Networks)Juniper Networks Setup Client (HKCU\...\Juniper_Setup_Client) (Version: 2.2.5.9755 - Juniper Networks)LADSPA_plugins-win-0.4.15 (HKLM-x32\...\LADSPA_plugins-win_is1) (Version: - Audacity Team)Logitech Gaming Software (Version: 8.40.83 - Logitech Inc.) HiddenLogitech Gaming Software 8.40 (HKLM\...\Logitech Gaming Software) (Version: 8.40.83 - Logitech Inc.)Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)LWS Facebook (x32 Version: 13.50.854.0 - Logitech) HiddenLWS Gallery (x32 Version: 13.51.827.0 - Logitech) HiddenLWS Help_main (x32 Version: 13.51.828.0 - Logitech) HiddenLWS Launcher (x32 Version: 13.51.828.0 - Logitech) HiddenLWS Motion Detection (x32 Version: 13.51.815.0 - Logitech) HiddenLWS Pictures And Video (x32 Version: 13.51.815.0 - Logitech) HiddenLWS Twitter (x32 Version: 13.30.1346.0 - Logitech) HiddenLWS Webcam Software (x32 Version: 13.51.815.0 - Logitech) HiddenLWS WLM Plugin (x32 Version: 1.30.1201.0 - Logitech) HiddenLWS YouTube Plugin (x32 Version: 13.31.1038.0 - Logitech) HiddenMalwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hiddenmarvell 61xx (HKLM-x32\...\mv61xxDriver) (Version: 1.2.0.68 - Marvell)Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) HiddenMicrosoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) HiddenMicrosoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) HiddenMicrosoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) HiddenMicrosoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) HiddenMicrosoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) HiddenMicrosoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) HiddenMicrosoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Mozilla Firefox 31.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 en-US)) (Version: 31.0 - Mozilla)Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) HiddenMSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) HiddenMSXML 4.0 SP2 (KB927978) (HKLM-x32\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)NETGEAR Genie (HKLM-x32\...\NETGEAR Genie) (Version: 2.3.1.25 - NETGEAR Inc.)NETGEAR Live Parental Controls User Utility 2.1.6 (HKLM-x32\...\NETGEAR Live Parental Controls User Utility) (Version: 2.1.6 - )Network64 (Version: 140.0.215.000 - Hewlett-Packard) HiddenNorton 360 (HKLM-x32\...\N360) (Version: 21.5.0.19 - Symantec Corporation)NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)NVIDIA Control Panel 340.52 (Version: 340.52 - NVIDIA Corporation) HiddenNVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) HiddenNVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) HiddenNVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)NVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) HiddenNVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) HiddenOrigin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)PS_AIO_07_D110_SW_Min (x32 Version: 140.0.142.000 - Hewlett-Packard) HiddenQuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)QuickTransfer (x32 Version: 140.0.98.000 - Hewlett-Packard) HiddenRealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) HiddenRealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) HiddenRealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) HiddenRealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) HiddenScan (x32 Version: 140.0.80.000 - Hewlett-Packard) HiddenSegoe UI (x32 Version: 15.4.2271.0615 - Microsoft Corp) HiddenShop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.11.13307 - Skype Technologies S.A.)Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) HiddenSolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) HiddenSound Blaster Audigy (HKLM-x32\...\{C5828861-B97B-4037-995C-C65E9CC13A3B}) (Version: 1.0 - )SoundMAX (HKLM-x32\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.2.6480 - Analog Devices)Status (x32 Version: 140.0.256.000 - Hewlett-Packard) HiddenswMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) HiddenToolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) HiddenTrayApp (x32 Version: 140.0.212.000 - Hewlett-Packard) HiddenUpdate for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM-x32\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version: - Microsoft)Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version: - Microsoft)Update for Microsoft Office OneNote 2007 Help (KB963670) (HKLM-x32\...\{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2744EF05-38E1-4D5D-B333-E021EDAEA245}) (Version: - Microsoft)Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version: - Microsoft)Update for Microsoft Office Script Editor Help (KB963671) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version: - Microsoft)Update for Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version: - Microsoft)Vegas Pro 12.0 (64-bit) (HKLM\...\{BD422D00-5232-11E3-A6F3-F04DA23A5C58}) (Version: 12.0.770 - Sony)WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) HiddenWindows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenWindows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenWindows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) HiddenWindows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenWindows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) HiddenWindows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenWindows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenWindows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenWindows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) HiddenWindows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenWindows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenWindows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenWindows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden==================== Custom CLSID (selected items): ==========================(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)CustomCLSID: HKU\S-1-5-21-3870556266-1924480524-164372810-1000_Classes\CLSID\{32C15893-74C0-4478-879B-FE14EB684AB4}\InprocServer32 -> C:\Users\Mathematics\AppData\Local\Microsoft\Windows Sidebar\Gadgets\HPPhoto.gadget\x64\hpqgps01.dll (Hewlett-Packard Co.)CustomCLSID: HKU\S-1-5-21-3870556266-1924480524-164372810-1000_Classes\CLSID\{39C26CEE-9070-4B47-9261-6743499AFBF7}\InprocServer32 -> C:\Users\Mathematics\AppData\Local\Microsoft\Windows Sidebar\Gadgets\HPPhoto.gadget\x64\hpqgutil.dll (Hewlett-Packard Co.)CustomCLSID: HKU\S-1-5-21-3870556266-1924480524-164372810-1000_Classes\CLSID\{9CC1FE07-02F9-49A6-A3F4-63AD8BAE9E49}\InprocServer32 -> C:\Users\Mathematics\AppData\Local\Microsoft\Windows Sidebar\Gadgets\HPPhoto.gadget\x64\hpqgps01.dll (Hewlett-Packard Co.)==================== Restore Points =========================24-08-2014 06:37:51 Scheduled Checkpoint28-08-2014 08:00:11 Windows Update29-08-2014 22:48:58 Scheduled Checkpoint01-09-2014 14:40:30 Scheduled Checkpoint12-09-2014 08:00:12 Windows Update==================== Hosts content: ==========================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2006-11-02 07:34 - 2006-09-18 16:37 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts127.0.0.1 localhost::1 localhost==================== Scheduled Tasks (whitelisted) =============(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)Task: {050FF11B-01EB-4A9D-82BC-8F8E7D244DB9} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3870556266-1924480524-164372810-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)Task: {0A17293B-E9CC-4646-A69B-C640DDF2C636} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-09] (Adobe Systems Incorporated)Task: {12BB3520-E374-48D1-9C30-6FF9089F5DB6} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3870556266-1924480524-164372810-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)Task: {2773EEEE-FDBB-44A3-9FBE-20634B407D46} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3870556266-1924480524-164372810-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)Task: {4B3F067C-F38F-4069-BF95-160FE3F72F6F} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\SymErr.exe [2014-01-30] (Symantec Corporation)Task: {5AEE26D5-58F0-4161-BD1F-19FB8266C304} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-17] (Google Inc.)Task: {7340A742-DA31-432D-97D7-CF503612C276} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)Task: {85FC2E48-FF4B-4B99-B374-65C3FEE90FD0} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\SymErr.exe [2014-01-30] (Symantec Corporation)Task: {9475DD97-BB54-4FD8-A31A-032B4833F6AA} - System32\Tasks\Microsoft\Windows\MobilePC\TMMTask: {9A441CE9-6C4F-4991-954B-EDCB9256D04F} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => Rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntriesTask: {AA105019-BFFB-4713-B627-81B47F4419F0} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPagesTask: {C0B38178-CA76-4475-90EB-B2F41221156B} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UITask: {C216FADE-BB6A-49B8-8C32-86F02132D406} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\WSCStub.exe [2014-07-31] (Symantec Corporation)Task: {C28278BF-1ABF-4595-BB2A-15201DDF25E3} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-20] ()Task: {C41E9FD5-A5DB-4DEF-9715-E4F7BAFEE730} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-20] (Microsoft Corporation)Task: {C5C6BCC3-2DCA-46B1-80EB-740F276D1D51} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3870556266-1924480524-164372810-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)Task: {D1A74DDB-B251-4CF7-911E-B9D39EAE0526} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3870556266-1924480524-164372810-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)Task: {F7307BCE-6C17-4D52-A9E4-9CE3F3D01F76} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-17] (Google Inc.)Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe==================== Loaded Modules (whitelisted) =============2009-09-17 18:40 - 2009-09-17 18:40 - 00075048 ____N () C:\Program Files (x86)\DirecTV\DirecTV\Kernel\DMP\CLDTVHNService.exe2013-08-14 15:19 - 2013-08-14 15:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe2012-10-15 15:37 - 2012-10-15 15:37 - 06442920 _____ () C:\Users\Mathematics\AppData\Local\DIRECTV Player\NDSPCShowServer.exe2012-09-13 00:38 - 2012-09-13 00:38 - 00264040 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe2014-06-11 02:40 - 2014-06-11 02:40 - 00098816 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll2012-10-15 15:38 - 2012-10-15 15:38 - 00273824 _____ () C:\Users\Mathematics\AppData\Local\DIRECTV Player\ndsLogStore.dll2012-10-15 15:37 - 2012-10-15 15:37 - 02203048 _____ () C:\Users\Mathematics\AppData\Local\DIRECTV Player\DrmSingleton.dll2012-10-15 15:37 - 2012-10-15 15:37 - 07123880 _____ () C:\Users\Mathematics\AppData\Local\DIRECTV Player\gsttspplugin.dll2012-10-15 15:38 - 2012-10-15 15:38 - 00688560 _____ () C:\Users\Mathematics\AppData\Local\DIRECTV Player\libgstreamer-0.10.dll2012-10-15 15:38 - 2012-10-15 15:38 - 01402784 _____ () C:\Users\Mathematics\AppData\Local\DIRECTV Player\libxml2-2.dll2012-10-15 15:39 - 2012-10-15 15:39 - 00091536 _____ () C:\Users\Mathematics\AppData\Local\DIRECTV Player\z.dll2013-09-28 20:14 - 2013-09-28 20:14 - 03369922 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\icuin51.dll2013-09-28 20:13 - 2013-09-28 20:13 - 00544817 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libgcc_s_dw2-1.dll2013-09-28 20:13 - 2013-09-28 20:13 - 00989805 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libstdc++-6.dll2013-09-28 20:14 - 2013-09-28 20:14 - 01978690 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\icuuc51.dll2013-09-28 20:14 - 2013-09-28 20:14 - 22378434 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\icudt51.dll2013-09-28 20:14 - 2013-09-28 20:14 - 01233408 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\platforms\qwindows.dll2014-06-11 02:40 - 2014-06-11 02:40 - 00523776 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\Genie.dll2014-06-11 02:09 - 2014-06-11 02:09 - 01554944 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\SvtNetworkTool.dll2014-06-11 02:10 - 2014-06-11 02:10 - 00192512 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Airprint.dll2014-06-11 02:11 - 2014-06-11 02:11 - 00632832 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Internet.dll2014-06-11 02:59 - 2014-06-11 02:59 - 05992960 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Map.dll2014-03-23 22:33 - 2014-03-23 22:33 - 00068608 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\QRCode.dll2014-06-11 02:30 - 2014-06-11 02:30 - 00427520 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll2014-03-23 22:33 - 2014-03-23 22:33 - 00144896 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DragonNetTool.dll2014-06-11 02:29 - 2014-06-11 02:29 - 01175552 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll2014-06-11 02:31 - 2014-06-11 02:31 - 10063872 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Resource.dll2014-06-13 02:39 - 2014-06-13 02:39 - 01361920 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll2014-06-11 02:35 - 2014-06-11 02:35 - 00200192 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Statistics.dll2014-06-11 02:36 - 2014-06-11 02:36 - 00885248 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Ui.dll2014-06-11 02:38 - 2014-06-11 02:38 - 00427520 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Wireless.dll2013-09-28 20:13 - 2013-09-28 20:13 - 00051200 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qgif.dll2013-09-28 20:13 - 2013-09-28 20:13 - 00052224 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qico.dll2013-09-28 20:13 - 2013-09-28 20:13 - 00261120 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qjpeg.dll2013-09-28 20:13 - 2013-09-28 20:13 - 00046080 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qsvg.dll2014-04-08 03:07 - 2014-04-08 03:07 - 00081408 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DiagnosePlugin.dll2014-04-08 03:06 - 2014-04-08 03:06 - 00143360 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DiagnoseDll.dll2012-11-29 04:56 - 2012-11-29 04:56 - 03332720 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\drivers\libntgr_api.dll2014-03-23 22:31 - 2014-03-23 22:31 - 00072192 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\SVTUtils.dll2014-03-23 22:31 - 2014-03-23 22:31 - 00074240 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\NetcardApi.dll2014-03-23 22:31 - 2014-03-23 22:31 - 00136704 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\airprintdll.dll2014-06-11 02:36 - 2014-06-11 02:36 - 00642048 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\InnerPlugin_Update.dll2014-06-11 02:38 - 2014-06-11 02:38 - 00458752 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll2014-03-23 23:08 - 2014-03-23 23:08 - 00046080 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\WSetupApiPlugin.dll2014-03-23 22:31 - 2014-03-23 22:31 - 00066560 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\WSetupDll.dll2013-09-28 20:13 - 2013-09-28 20:13 - 00040960 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll2013-03-17 01:13 - 2009-02-06 19:52 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL2013-03-17 01:13 - 2009-07-10 10:07 - 00166912 _____ () C:\Windows\SysWOW64\APOMngr.DLL2012-09-13 00:38 - 2012-09-13 00:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll2012-09-13 00:38 - 2012-09-13 00:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll2012-09-13 00:39 - 2012-09-13 00:39 - 00336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll2014-09-03 22:24 - 2014-08-29 21:49 - 08577864 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\pdf.dll2014-09-03 22:24 - 2014-08-29 21:49 - 00331592 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll2014-09-03 22:24 - 2014-08-29 21:49 - 01660232 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\ffmpegsumo.dll2014-04-11 15:09 - 2014-02-10 13:44 - 04592128 _____ () C:\Users\Mathematics\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll2014-04-11 15:09 - 2014-02-10 13:44 - 00112128 _____ () C:\Users\Mathematics\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll==================== Alternate Data Streams (whitelisted) =========(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)==================== Safe Mode (whitelisted) ===================(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)==================== EXE Association (whitelisted) =============(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)==================== MSCONFIG/TASK MANAGER disabled items =========(Currently there is no automatic fix for this section.)MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartupMSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background==================== Faulty Device Manager Devices =============Name: HP Photosmart D110Description: HP Photosmart D110Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}Manufacturer: Hewlett-PackardService: StillCamProblem: : This device is disabled. (Code 22)Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.Name: Photosmart D110 seriesDescription: Photosmart D110 seriesClass Guid: {4d36e971-e325-11ce-bfc1-08002be10318}Manufacturer: HPService:Problem: : This device is disabled. (Code 22)Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.==================== Event log errors: =========================Application errors:==================Error: (09/12/2014 04:21:27 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application mbam.exe, version 1.0.0.532, time stamp 0x53518532, faulting module MSVCR100.dll, version 10.0.40219.325, time stamp 0x4df2be1e, exception code 0x40000015, fault offset 0x0008d6fd,process id 0x1310, application start time 0xmbam.exe0.Error: (09/12/2014 04:20:42 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application mbam.exe, version 1.0.0.532, time stamp 0x53518532, faulting module MSVCR100.dll, version 10.0.40219.325, time stamp 0x4df2be1e, exception code 0x40000015, fault offset 0x0008d6fd,process id 0x658, application start time 0xmbam.exe0.Error: (09/12/2014 04:17:00 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (09/12/2014 04:16:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 22 4.1.168.192.in-addr.arpa. PTR Mathematics-PC.local.Error: (09/12/2014 04:16:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )Description: mDNSCoreReceiveResponse: Received from 192.168.1.4:5353 24 4.1.168.192.in-addr.arpa. PTR Mathematics-PC-2.local.Error: (09/12/2014 04:15:42 PM) (Source: SideBySide) (EventID: 33) (User: )Description: Activation context generation failed for "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".Dependent Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" could not be found.Please use sxstrace.exe for detailed diagnosis.Error: (09/12/2014 04:10:06 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application mbam.exe, version 1.0.0.532, time stamp 0x53518532, faulting module MSVCR100.dll, version 10.0.40219.325, time stamp 0x4df2be1e, exception code 0x40000015, fault offset 0x0008d6fd,process id 0x77c, application start time 0xmbam.exe0.Error: (09/12/2014 04:08:59 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application mbam.exe, version 1.0.0.532, time stamp 0x53518532, faulting module MSVCR100.dll, version 10.0.40219.325, time stamp 0x4df2be1e, exception code 0x40000015, fault offset 0x0008d6fd,process id 0x3d8, application start time 0xmbam.exe0.Error: (09/12/2014 04:08:48 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application mbam.exe, version 1.0.0.532, time stamp 0x53518532, faulting module MSVCR100.dll, version 10.0.40219.325, time stamp 0x4df2be1e, exception code 0x40000015, fault offset 0x0008d6fd,process id 0x7e4, application start time 0xmbam.exe0.Error: (09/12/2014 04:08:13 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application mbam.exe, version 1.0.0.532, time stamp 0x53518532, faulting module MSVCR100.dll, version 10.0.40219.325, time stamp 0x4df2be1e, exception code 0x40000015, fault offset 0x0008d6fd,process id 0xe54, application start time 0xmbam.exe0.System errors:=============Error: (09/12/2014 04:16:36 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)Error: (09/12/2014 04:06:32 PM) (Source: bowser) (EventID: 8003) (User: )Description: The master browser has received a server announcement from the computer MATHEMATICIA-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{D6BB94D4-3AE7-4D49-A776-6393D96E8307}.The master browser is stopping or an election is being forced.Error: (09/12/2014 04:05:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: MBAMService1Error: (09/12/2014 04:05:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: MBAMScheduler%%1053Error: (09/12/2014 04:05:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: )Description: 30000MBAMSchedulerError: (09/12/2014 04:05:37 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)Error: (09/12/2014 04:04:35 PM) (Source: EventLog) (EventID: 6008) (User: )Description: The previous system shutdown at 3:57:34 PM on 9/12/2014 was unexpected.Error: (09/12/2014 10:40:06 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: MBAMService1Error: (09/12/2014 10:40:06 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: MBAMScheduler%%1053Error: (09/12/2014 10:40:06 AM) (Source: Service Control Manager) (EventID: 7009) (User: )Description: 30000MBAMSchedulerMicrosoft Office Sessions:=========================CodeIntegrity Errors:===================================Date: 2014-09-12 16:24:47.444Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-12 16:24:47.267Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-12 16:24:47.079Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-12 16:24:46.904Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-12 16:24:46.643Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-12 16:24:46.397Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-12 16:24:46.211Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-12 16:24:46.036Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-11 06:53:59.918Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.Date: 2014-09-11 06:53:59.750Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.==================== Memory info ===========================Processor: AMD Phenom II X4 940 ProcessorPercentage of memory in use: 33%Total physical RAM: 8190.36 MBAvailable physical RAM: 5406.31 MBTotal Pagefile: 16435.25 MBAvailable Pagefile: 13572.36 MBTotal Virtual: 8192 MBAvailable Virtual: 8191.83 MB==================== Drives ================================Drive c: () (Fixed) (Total:139.73 GB) (Free:23.25 GB) NTFS ==>[Drive with boot components (obtained from BCD)]Drive d: (New Volume) (Fixed) (Total:279.46 GB) (Free:176.36 GB) NTFSDrive f: () (Fixed) (Total:232.88 GB) (Free:154.35 GB) NTFS==================== MBR & Partition Table ==========================================================================Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 139.7 GB) (Disk ID: 01566953)Partition 1: (Active) - (Size=139.7 GB) - (Type=07 NTFS)========================================================Disk: 1 (MBR Code: Windows 7 or 8) (Size: 279.5 GB) (Disk ID: E0039EB9)Partition 1: (Not Active) - (Size=279.5 GB) - (Type=07 NTFS)========================================================Disk: 2 (MBR Code: Windows XP) (Size: 232.9 GB) (Disk ID: 4F7A4F79)Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)==================== End Of Log ============================
-
Followed the steps to get here to see if I'm infected...
FRST FILE
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014Ran by Mathematics (administrator) on MATHEMATICS-PC on 12-09-2014 16:24:06Running from C:\Users\Mathematics\DownloadsPlatform: Windows Vista Ultimate Service Pack 2 (X64) OS Language: English (United States)Internet Explorer Version 9Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe(Microsoft Corporation) C:\Windows\System32\SLsvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe() C:\Program Files (x86)\DirecTV\DirecTV\Kernel\DMP\CLDTVHNService.exe(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe(Symantec Corporation) C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\n360.exe(NETGEAR) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE(Symantec Corporation) C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\n360.exe(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe(NDS Technologies) C:\Users\Mathematics\AppData\Local\DIRECTV Player\PCShowServerPMWrapper.exe(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe() C:\Users\Mathematics\AppData\Local\DIRECTV Player\NDSPCShowServer.exe(NETGEAR Inc.) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe(Sonic Focus, Inc.) C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe() C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe(Microsoft Corporation) C:\Windows\splwow64.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe==================== Registry (Whitelisted) ==================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-20] (Microsoft Corporation)HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-28] (Logitech Inc.)HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)HKLM-x32\...\Run: [P17RunE] => RunDll32 P17RunE.dll,RunDLLEntryHKLM-x32\...\Run: [updReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-03] (Apple Inc.)HKLM-x32\...\Run: [soundTray] => C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe [143360 2008-03-26] (Sonic Focus, Inc.)HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-07] (RealNetworks, Inc.)HKLM-x32\...\Run: [soundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1302528 2013-03-20] (Analog Devices, Inc.)HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)HKLM-x32\...\Run: [] => [X]HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenterHKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenterHKU\S-1-5-21-3870556266-1924480524-164372810-1000\...\Run: [PCShowServer] => C:\Users\Mathematics\AppData\Local\DIRECTV Player\PCShowServerPMWrapper.exe [525240 2012-10-15] (NDS Technologies)HKU\S-1-5-21-3870556266-1924480524-164372810-1000\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1095000 2013-11-08] (Garmin Ltd or its subsidiaries)HKU\S-1-5-21-3870556266-1924480524-164372810-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)HKU\S-1-5-21-3870556266-1924480524-164372810-1000\...\Run: [NETGEARGenie] => C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe [596480 2014-06-11] (NETGEAR Inc.)HKU\S-1-5-21-3870556266-1924480524-164372810-1000\...\Run: [WMPNSCFG] => C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exeShellIconOverlayIdentifiers: OverlayExcluded -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.5.0.19\buShell.dll (Symantec Corporation)ShellIconOverlayIdentifiers: OverlayPending -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.5.0.19\buShell.dll (Symantec Corporation)ShellIconOverlayIdentifiers: OverlayProtected -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360 Premier Edition\Engine64\21.5.0.19\buShell.dll (Symantec Corporation)==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehpHKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4AB3B96A8B07CF01HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-usStartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exeSearchScopes: HKCU - DefaultScope {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=360&chn=retail&geo=US&ver=20&locale=en_US&gct=sb&qsrc=2869SearchScopes: HKCU - {43DCFD57-EC13-459C-87C9-0F376A955453} URL = www.buenosearch.com?babsrc=ext_WinjNw&affID=123486&q={searchTerms}SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=360&chn=retail&geo=US&ver=20&locale=en_US&gct=sb&qsrc=2869BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation)BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\IPS\IPSBHO.DLL (Symantec Corporation)BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation)DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://access.halliburton.com/dana-cached/sc/JuniperSetupClient.cabHandler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)Tcpip\Parameters: [DhcpNameServer] 192.168.1.1Tcpip\..\Interfaces\{D6BB94D4-3AE7-4D49-A776-6393D96E8307}: [NameServer] 208.67.222.222,208.67.220.220FireFox:========FF ProfilePath: C:\Users\Mathematics\AppData\Roaming\Mozilla\Firefox\Profiles\sp1a18b1.defaultFF Homepage: hxxp://www.google.com/FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)FF Plugin HKCU: @nds.com/PCShowPlugin -> C:\Users\Mathematics\AppData\Local\DIRECTV Player\npPCShowPlugin.dll No FileFF Plugin HKCU: @nds.com/PlayerPlugin -> C:\Users\Mathematics\AppData\Local\DIRECTV Player\npPlayerPlugin.dll (NDS)FF Plugin HKCU: NDS.com/PlayerPlugin -> C:\Users\Mathematics\AppData\Local\DIRECTV Player\npPlayerPlugin.dll (NDS)FF SearchPlugin: C:\Users\Mathematics\AppData\Roaming\Mozilla\Firefox\Profiles\sp1a18b1.default\searchplugins\safesearch.xmlFF Extension: Flash and Video Download - C:\Users\Mathematics\AppData\Roaming\Mozilla\Firefox\Profiles\sp1a18b1.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-08-20]FF Extension: BetterPrivacy - C:\Users\Mathematics\AppData\Roaming\Mozilla\Firefox\Profiles\sp1a18b1.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-03-02]FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-08-01]FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-08-01]FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtensionFF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-03-17]FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgnFF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn [2014-09-12]FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\ExtFF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-07]FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\ExtFF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-12-12]FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3Chrome:=======CHR HomePage: Default -> F8D907812BF2226C499F54EE544148CF71A815450759663E3475F79D1993FB8CCHR DefaultSearchKeyword: Default -> 39F6DCD6BA445C1FEC40DB13CB94E6BEDD062C9035E26114DDCA048CE0C7C71CCHR DefaultSearchURL: Default -> 45066797DCC0F711A27401EAB819D88C6F0347579502D90E8BAA0302B0DDC532CHR Profile: C:\Users\Mathematics\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Mathematics\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-08]CHR Extension: (Google Wallet) - C:\Users\Mathematics\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-08-06]CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\Exts\Chrome.crx [2014-08-06]==================== Services (Whitelisted) =================(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [89600 2013-03-20] (Andrea Electronics Corporation)R2 CLDTVHNService; C:\Program Files (x86)\DirecTV\DirecTV\Kernel\DMP\CLDTVHNService.exe [75048 2009-09-17] ()S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-03-17] (Creative Labs) [File not signed]R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [File not signed]R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250712 2013-11-08] (Garmin Ltd or its subsidiaries)R2 N360; C:\Program Files (x86)\Norton 360 Premier Edition\Engine\21.5.0.19\N360.exe [265040 2014-07-31] (Symantec Corporation)R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]R2 NETGEARGenieDaemon; C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe [225792 2014-03-23] (NETGEAR) [File not signed]R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()==================== Drivers (Whitelisted) ====================(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)R1 BHDrvx64; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20140821.007\BHDrvx64.sys [1588016 2014-08-18] (Symantec Corporation)R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1505000.013\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-09] (Symantec Corporation)R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-09] (Symantec Corporation)R1 IDSVia64; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20140911.001\IDSvia64.sys [633560 2014-08-29] (Symantec Corporation)R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66360 2012-10-02] (Logitech Inc.)R0 mrdd; C:\Windows\System32\DRIVERS\mrdd.sys [22568 2008-11-12] (Marvell Semiconductor, Inc.)R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [176680 2009-02-08] (Marvell Semiconductor, Inc.)R3 NAVENG; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20140911.035\ENG64.SYS [129752 2014-09-01] (Symantec Corporation)R3 NAVEX15; C:\Program Files (x86)\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20140911.035\EX64.SYS [2137304 2014-09-01] (Symantec Corporation)R2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2014-08-23] (CACE Technologies, Inc.)R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1505000.013\SRTSP64.SYS [875736 2014-02-12] (Symantec Corporation)R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1505000.013\SRTSPX64.SYS [36952 2013-09-09] (Symantec Corporation)R0 SymDS; C:\Windows\System32\drivers\N360x64\1505000.013\SYMDS64.SYS [493656 2013-09-09] (Symantec Corporation)R0 SymEFA; C:\Windows\System32\drivers\N360x64\1505000.013\SYMEFA64.SYS [1148120 2014-03-03] (Symantec Corporation)R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-01-01] (Symantec Corporation)R1 SymIRON; C:\Windows\system32\drivers\N360x64\1505000.013\Ironx64.SYS [264280 2013-09-26] (Symantec Corporation)R1 SYMTDIv; C:\Windows\System32\Drivers\N360x64\1505000.013\SYMTDIV.SYS [510168 2014-02-17] (Symantec Corporation)S3 IpInIp; system32\DRIVERS\ipinip.sys [X]S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]==================== NetSvcs (Whitelisted) ===================(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)==================== One Month Created Files and Folders ========(If an entry is included in the fixlist, the file\folder will be moved.)2014-09-12 16:24 - 2014-09-12 16:24 - 00024641 _____ () C:\Users\Mathematics\Downloads\FRST.txt2014-09-12 16:23 - 2014-09-12 16:24 - 00000000 ____D () C:\FRST2014-09-12 16:22 - 2014-09-12 16:22 - 02105856 _____ (Farbar) C:\Users\Mathematics\Downloads\FRST64.exe2014-09-12 16:20 - 2014-09-12 16:21 - 00000941 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-09-12 16:20 - 2014-09-12 16:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-09-12 16:20 - 2014-09-12 16:21 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-09-12 16:20 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys2014-09-12 16:20 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys2014-09-12 16:20 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys2014-09-12 16:09 - 2014-09-12 16:09 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mathematics\Downloads\mbam-setup-2.0.2.1012.exe2014-09-12 03:20 - 2014-08-15 10:48 - 17868288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2014-09-12 03:20 - 2014-08-15 10:36 - 10920960 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2014-09-12 03:20 - 2014-08-15 10:35 - 02339328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2014-09-12 03:20 - 2014-08-15 10:31 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2014-09-12 03:20 - 2014-08-15 10:31 - 01384960 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2014-09-12 03:20 - 2014-08-15 10:30 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2014-09-12 03:20 - 2014-08-15 10:30 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2014-09-12 03:20 - 2014-08-15 10:30 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2014-09-12 03:20 - 2014-08-15 10:29 - 02156032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2014-09-12 03:20 - 2014-08-15 10:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2014-09-12 03:20 - 2014-08-15 10:29 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll2014-09-12 03:20 - 2014-08-15 10:28 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2014-09-12 03:20 - 2014-08-15 10:28 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2014-09-12 03:20 - 2014-08-15 10:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe2014-09-12 03:20 - 2014-08-15 10:28 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe2014-09-12 03:20 - 2014-08-15 09:51 - 12363264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2014-09-12 03:20 - 2014-08-15 09:42 - 09739776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2014-09-12 03:20 - 2014-08-15 09:42 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2014-09-12 03:20 - 2014-08-15 09:37 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2014-09-12 03:20 - 2014-08-15 09:37 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2014-09-12 03:20 - 2014-08-15 09:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2014-09-12 03:20 - 2014-08-15 09:35 - 01802240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe2014-09-12 03:20 - 2014-08-15 09:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll2014-09-12 03:20 - 2014-08-15 09:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll2014-09-12 03:20 - 2014-08-15 09:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb2014-09-12 03:20 - 2014-08-15 09:34 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll2014-09-12 03:20 - 2014-08-15 09:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2014-09-12 03:20 - 2014-08-15 09:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe2014-09-12 03:20 - 2014-08-15 09:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe2014-09-11 18:27 - 2014-09-11 18:27 - 00016687 _____ () C:\Users\Mathematics\Downloads\AUX TRACKER.xlsx2014-09-09 18:26 - 2014-09-09 18:26 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe2014-09-06 13:02 - 2014-09-06 13:02 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{1BDDB9E4-0132-4BD5-A1B1-29605E39DC8C}2014-09-05 16:54 - 2014-09-05 16:54 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{81483136-0053-458F-8CC6-E38ADE58CE73}2014-09-03 14:08 - 2014-09-03 14:08 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (5).asx2014-08-31 16:19 - 2014-08-31 16:19 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{B2A46922-ECD6-4122-BAB4-79B013795E15}2014-08-31 15:47 - 2014-08-31 15:47 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (4).asx2014-08-31 14:28 - 2014-09-12 16:15 - 00003386 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3870556266-1924480524-164372810-10002014-08-31 14:28 - 2014-09-12 16:15 - 00003264 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3870556266-1924480524-164372810-10002014-08-31 04:18 - 2014-08-31 04:18 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{E194A89C-D684-4ECB-B024-4C093BBB0298}2014-08-31 03:15 - 2014-08-31 03:15 - 00066302 _____ () C:\Users\Mathematics\Downloads\SilverCalculator.xlsx2014-08-30 16:16 - 2014-08-30 16:16 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{66F68193-56EC-4981-BCD2-5D227D209AEE}2014-08-30 12:55 - 2014-09-06 04:09 - 00003364 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3870556266-1924480524-164372810-10002014-08-30 12:55 - 2014-09-06 04:09 - 00003242 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3870556266-1924480524-164372810-10002014-08-30 04:39 - 2014-08-30 04:39 - 27841136 _____ (NETGEAR Inc.) C:\Users\Mathematics\Downloads\NETGEARGenie-install (2).exe2014-08-29 11:39 - 2014-08-29 11:40 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (3).asx2014-08-28 16:00 - 2014-08-28 16:00 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{34E6F525-3D38-4CC8-A5E5-0539181A57B4}2014-08-28 03:00 - 2014-08-22 20:05 - 00304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll2014-08-28 03:00 - 2014-08-22 19:42 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll2014-08-28 03:00 - 2014-08-22 18:38 - 02782208 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2014-08-27 15:13 - 2014-08-28 03:14 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{62ED8E2D-E6CB-4724-8B2A-9249646CCC8A}2014-08-25 23:08 - 2014-08-25 23:08 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{782F7058-A6B6-4170-B1E3-3599EBE2292C}2014-08-25 14:54 - 2014-08-25 14:54 - 00118149 _____ () C:\Users\Mathematics\Desktop\wmpChrome.crx2014-08-25 14:53 - 2014-08-25 14:53 - 00118149 _____ () C:\Users\Mathematics\Downloads\wmpChrome.crx2014-08-25 13:26 - 2014-08-25 13:26 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\Adobe2014-08-22 03:14 - 2014-08-22 03:14 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (2).asx2014-08-20 19:32 - 2014-08-20 19:32 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{4650E802-DA36-4BA9-A2A0-3301EEA30B79}2014-08-19 01:43 - 2014-08-19 01:43 - 01356107 _____ () C:\Users\Mathematics\Downloads\adwcleaner.exe2014-08-18 13:15 - 2014-08-18 13:15 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Juniper Networks2014-08-18 12:04 - 2014-08-18 12:04 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (1).asx2014-08-17 14:07 - 2014-08-17 14:07 - 04991400 _____ (Adobe Systems Inc.) C:\Users\Mathematics\Downloads\Shockwave_Installer_Slim.exe2014-08-17 14:02 - 2014-08-17 14:02 - 01057176 _____ (Adobe) C:\Users\Mathematics\Downloads\install_flashplayer14x32_mssd_aaa_aih.exe2014-08-17 13:05 - 2014-08-17 13:05 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (15).asx2014-08-16 15:34 - 2009-06-03 18:56 - 00877912 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll2014-08-16 15:34 - 2009-06-03 18:56 - 00675152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll2014-08-16 15:29 - 2014-06-26 17:17 - 01389200 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe2014-08-16 15:29 - 2014-06-26 17:17 - 00619664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe2014-08-16 15:29 - 2014-06-26 17:17 - 00171152 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll2014-08-16 15:29 - 2014-06-26 17:17 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll2014-08-16 15:29 - 2014-06-26 17:17 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll2014-08-16 15:29 - 2014-06-26 17:17 - 00008848 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll2014-08-16 15:29 - 2014-06-05 23:29 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe2014-08-16 15:29 - 2014-06-05 23:28 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe2014-08-16 14:01 - 2014-07-07 20:12 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll2014-08-16 14:01 - 2014-07-07 19:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll2014-08-16 14:01 - 2014-06-13 19:56 - 00901568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys2014-08-16 14:01 - 2014-06-13 19:51 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll2014-08-16 14:01 - 2014-06-02 16:30 - 03137536 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll2014-08-16 14:01 - 2014-06-02 16:30 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll2014-08-16 14:01 - 2014-06-02 16:29 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll2014-08-16 14:01 - 2014-06-02 16:29 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll2014-08-16 14:01 - 2014-06-02 15:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe2014-08-16 14:01 - 2014-06-02 05:31 - 02263552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll2014-08-16 14:01 - 2014-06-02 05:31 - 00332800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll2014-08-16 14:01 - 2014-06-02 05:30 - 01993728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll2014-08-14 02:11 - 2014-08-14 02:11 - 27841136 _____ (NETGEAR Inc.) C:\Users\Mathematics\Downloads\NETGEARGenie-install (1).exe2014-08-14 01:54 - 2014-08-14 01:55 - 00002860 _____ () C:\Users\Mathematics\Desktop\Rkill.txt2014-08-14 01:54 - 2014-08-14 01:54 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Mathematics\Downloads\rkill.exe2014-08-14 01:48 - 2014-08-23 22:40 - 00001897 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR Genie.lnk2014-08-14 01:48 - 2014-08-23 22:40 - 00001885 _____ () C:\Users\Public\Desktop\NETGEAR Genie.lnk2014-08-14 01:48 - 2014-08-14 01:48 - 00000000 ____D () C:\Program Files (x86)\NETGEAR Genie2014-08-14 01:46 - 2014-08-14 01:46 - 27841136 _____ (NETGEAR Inc.) C:\Users\Mathematics\Downloads\NETGEARGenie-install.exe2014-08-14 01:10 - 2014-07-02 15:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll2014-08-14 01:10 - 2014-07-02 15:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll2014-08-14 01:10 - 2014-07-02 15:48 - 18626304 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll2014-08-14 01:10 - 2014-07-02 15:48 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll2014-08-14 01:10 - 2014-07-02 15:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll2014-08-14 01:10 - 2014-07-02 15:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll2014-08-14 01:10 - 2014-07-02 15:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll2014-08-14 01:10 - 2014-07-02 15:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys2014-08-14 01:10 - 2014-07-02 15:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll2014-08-14 01:10 - 2014-07-02 15:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll2014-08-14 01:10 - 2014-07-02 15:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll2014-08-14 01:10 - 2014-07-02 15:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll2014-08-14 01:10 - 2014-07-02 15:48 - 02814656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll2014-08-14 01:10 - 2014-07-02 15:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll2014-08-14 01:10 - 2014-07-02 15:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll==================== One Month Modified Files and Folders =======(If an entry is included in the fixlist, the file\folder will be moved.)2014-09-12 16:24 - 2014-09-12 16:24 - 00024641 _____ () C:\Users\Mathematics\Downloads\FRST.txt2014-09-12 16:24 - 2014-09-12 16:23 - 00000000 ____D () C:\FRST2014-09-12 16:22 - 2014-09-12 16:22 - 02105856 _____ (Farbar) C:\Users\Mathematics\Downloads\FRST64.exe2014-09-12 16:21 - 2014-09-12 16:20 - 00000941 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-09-12 16:21 - 2014-09-12 16:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-09-12 16:21 - 2014-09-12 16:20 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-09-12 16:21 - 2013-03-17 11:11 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\CrashDumps2014-09-12 16:21 - 2006-11-02 07:46 - 00759542 _____ () C:\Windows\system32\PerfStringBackup.INI2014-09-12 16:19 - 2008-01-20 20:53 - 01182780 _____ () C:\Windows\WindowsUpdate.log2014-09-12 16:18 - 2013-03-17 09:53 - 00000908 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2014-09-12 16:16 - 2013-03-17 10:52 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\Skype2014-09-12 16:15 - 2014-08-31 14:28 - 00003386 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3870556266-1924480524-164372810-10002014-09-12 16:15 - 2014-08-31 14:28 - 00003264 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3870556266-1924480524-164372810-10002014-09-12 16:15 - 2013-03-17 09:53 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2014-09-12 16:15 - 2006-11-02 10:40 - 00000006 ____H () C:\Windows\Tasks\SA.DAT2014-09-12 16:15 - 2006-11-02 10:39 - 00597246 _____ () C:\Windows\PFRO.log2014-09-12 16:15 - 2006-11-02 10:21 - 00004096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A02014-09-12 16:15 - 2006-11-02 10:21 - 00004096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A02014-09-12 16:11 - 2006-11-02 10:40 - 00032542 _____ () C:\Windows\Tasks\SCHEDLGU.TXT2014-09-12 16:09 - 2014-09-12 16:09 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mathematics\Downloads\mbam-setup-2.0.2.1012.exe2014-09-12 15:26 - 2013-05-25 01:00 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job2014-09-12 11:56 - 2014-07-15 01:58 - 00000000 ____D () C:\Program Files (x86)\iTunes2014-09-12 04:14 - 2013-03-17 11:11 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\NETGEARGenie2014-09-12 03:19 - 2013-06-21 11:44 - 00752854 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI2014-09-12 03:18 - 2013-08-14 22:25 - 00000000 ____D () C:\Windows\system32\MRT2014-09-12 03:00 - 2006-11-02 07:35 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe2014-09-11 18:27 - 2014-09-11 18:27 - 00016687 _____ () C:\Users\Mathematics\Downloads\AUX TRACKER.xlsx2014-09-10 08:06 - 2013-03-17 00:45 - 00000000 ____D () C:\Users\Mathematics2014-09-09 18:26 - 2014-09-09 18:26 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe2014-09-09 18:26 - 2013-05-25 01:00 - 00003682 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater2014-09-09 18:26 - 2013-04-12 13:24 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe2014-09-09 18:26 - 2013-04-12 13:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl2014-09-06 13:02 - 2014-09-06 13:02 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{1BDDB9E4-0132-4BD5-A1B1-29605E39DC8C}2014-09-06 13:01 - 2013-03-21 15:20 - 00090624 _____ () C:\Users\Mathematics\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini2014-09-06 04:09 - 2014-08-30 12:55 - 00003364 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3870556266-1924480524-164372810-10002014-09-06 04:09 - 2014-08-30 12:55 - 00003242 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3870556266-1924480524-164372810-10002014-09-05 16:54 - 2014-09-05 16:54 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{81483136-0053-458F-8CC6-E38ADE58CE73}2014-09-04 02:43 - 2014-08-07 01:49 - 00000982 _____ () C:\Users\Mathematics\Desktop\Octobers Bills.txt2014-09-03 22:24 - 2013-03-17 09:54 - 00002025 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2014-09-03 14:08 - 2014-09-03 14:08 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (5).asx2014-09-03 02:31 - 2013-03-18 22:11 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\Audacity2014-09-01 20:39 - 2013-06-21 00:21 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\DIRECTV Player2014-09-01 19:26 - 2013-07-23 22:14 - 00012793 _____ () C:\Users\Mathematics\Desktop\Finacial Statment for Household.xlsx2014-09-01 17:36 - 2014-05-13 18:18 - 00000000 ____D () C:\Users\Mathematics\Documents\Silver2014-08-31 16:19 - 2014-08-31 16:19 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{B2A46922-ECD6-4122-BAB4-79B013795E15}2014-08-31 15:47 - 2014-08-31 15:47 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (4).asx2014-08-31 04:18 - 2014-08-31 04:18 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{E194A89C-D684-4ECB-B024-4C093BBB0298}2014-08-31 03:15 - 2014-08-31 03:15 - 00066302 _____ () C:\Users\Mathematics\Downloads\SilverCalculator.xlsx2014-08-30 21:53 - 2013-03-21 11:43 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\Screencast-O-Matic2014-08-30 16:16 - 2014-08-30 16:16 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{66F68193-56EC-4981-BCD2-5D227D209AEE}2014-08-30 04:39 - 2014-08-30 04:39 - 27841136 _____ (NETGEAR Inc.) C:\Users\Mathematics\Downloads\NETGEARGenie-install (2).exe2014-08-29 11:40 - 2014-08-29 11:39 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (3).asx2014-08-29 00:28 - 2013-11-07 18:21 - 00000000 ____D () C:\Users\Mathematics\Documents\Halliburton2014-08-28 16:00 - 2014-08-28 16:00 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{34E6F525-3D38-4CC8-A5E5-0539181A57B4}2014-08-28 04:29 - 2006-11-02 10:21 - 00276568 _____ () C:\Windows\system32\FNTCACHE.DAT2014-08-28 03:14 - 2014-08-27 15:13 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{62ED8E2D-E6CB-4724-8B2A-9249646CCC8A}2014-08-25 23:08 - 2014-08-25 23:08 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{782F7058-A6B6-4170-B1E3-3599EBE2292C}2014-08-25 14:54 - 2014-08-25 14:54 - 00118149 _____ () C:\Users\Mathematics\Desktop\wmpChrome.crx2014-08-25 14:53 - 2014-08-25 14:53 - 00118149 _____ () C:\Users\Mathematics\Downloads\wmpChrome.crx2014-08-25 13:26 - 2014-08-25 13:26 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\Adobe2014-08-23 22:40 - 2014-08-14 01:48 - 00001897 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR Genie.lnk2014-08-23 22:40 - 2014-08-14 01:48 - 00001885 _____ () C:\Users\Public\Desktop\NETGEAR Genie.lnk2014-08-23 22:39 - 2013-03-17 11:11 - 00369168 _____ (CACE Technologies, Inc.) C:\Windows\system32\wpcap.dll2014-08-23 22:39 - 2013-03-17 11:11 - 00281104 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\wpcap.dll2014-08-23 22:39 - 2013-03-17 11:11 - 00106000 _____ (CACE Technologies, Inc.) C:\Windows\system32\packet.dll2014-08-23 22:39 - 2013-03-17 11:11 - 00096784 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\packet.dll2014-08-23 22:39 - 2013-03-17 11:11 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys2014-08-22 20:05 - 2014-08-28 03:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll2014-08-22 19:42 - 2014-08-28 03:00 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll2014-08-22 18:42 - 2013-03-17 12:32 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\HpUpdate2014-08-22 18:38 - 2014-08-28 03:00 - 02782208 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2014-08-22 03:14 - 2014-08-22 03:14 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (2).asx2014-08-20 19:32 - 2014-08-20 19:32 - 00000000 ____D () C:\Users\Mathematics\AppData\Local\{4650E802-DA36-4BA9-A2A0-3301EEA30B79}2014-08-19 01:43 - 2014-08-19 01:43 - 01356107 _____ () C:\Users\Mathematics\Downloads\adwcleaner.exe2014-08-18 13:15 - 2014-08-18 13:15 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Juniper Networks2014-08-18 13:14 - 2014-01-30 15:06 - 00000000 ____D () C:\Users\Mathematics\AppData\Roaming\Juniper Networks2014-08-18 12:04 - 2014-08-18 12:04 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (1).asx2014-08-17 21:09 - 2014-07-21 20:05 - 00001413 _____ () C:\Users\Mathematics\Desktop\September Bills.txt2014-08-17 14:07 - 2014-08-17 14:07 - 04991400 _____ (Adobe Systems Inc.) C:\Users\Mathematics\Downloads\Shockwave_Installer_Slim.exe2014-08-17 14:02 - 2014-08-17 14:02 - 01057176 _____ (Adobe) C:\Users\Mathematics\Downloads\install_flashplayer14x32_mssd_aaa_aih.exe2014-08-17 13:05 - 2014-08-17 13:05 - 00000954 _____ () C:\Users\Mathematics\Downloads\infowars (15).asx2014-08-16 23:33 - 2006-11-02 08:33 - 00000000 ____D () C:\Windows\rescache2014-08-16 15:38 - 2013-03-22 13:20 - 00000000 ____D () C:\ProgramData\Microsoft Help2014-08-15 10:48 - 2014-09-12 03:20 - 17868288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2014-08-15 10:36 - 2014-09-12 03:20 - 10920960 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2014-08-15 10:35 - 2014-09-12 03:20 - 02339328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2014-08-15 10:31 - 2014-09-12 03:20 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2014-08-15 10:31 - 2014-09-12 03:20 - 01384960 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2014-08-15 10:30 - 2014-09-12 03:20 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2014-08-15 10:30 - 2014-09-12 03:20 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2014-08-15 10:30 - 2014-09-12 03:20 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2014-08-15 10:29 - 2014-09-12 03:20 - 02156032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2014-08-15 10:29 - 2014-09-12 03:20 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2014-08-15 10:29 - 2014-09-12 03:20 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2014-08-15 10:29 - 2014-09-12 03:20 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2014-08-15 10:29 - 2014-09-12 03:20 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll2014-08-15 10:29 - 2014-09-12 03:20 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2014-08-15 10:29 - 2014-09-12 03:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2014-08-15 10:29 - 2014-09-12 03:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2014-08-15 10:29 - 2014-09-12 03:20 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll2014-08-15 10:28 - 2014-09-12 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2014-08-15 10:28 - 2014-09-12 03:20 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2014-08-15 10:28 - 2014-09-12 03:20 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe2014-08-15 10:28 - 2014-09-12 03:20 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe2014-08-15 09:51 - 2014-09-12 03:20 - 12363264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2014-08-15 09:42 - 2014-09-12 03:20 - 09739776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2014-08-15 09:42 - 2014-09-12 03:20 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2014-08-15 09:37 - 2014-09-12 03:20 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2014-08-15 09:37 - 2014-09-12 03:20 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2014-08-15 09:36 - 2014-09-12 03:20 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2014-08-15 09:35 - 2014-09-12 03:20 - 01802240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2014-08-15 09:35 - 2014-09-12 03:20 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2014-08-15 09:35 - 2014-09-12 03:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2014-08-15 09:35 - 2014-09-12 03:20 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2014-08-15 09:35 - 2014-09-12 03:20 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll2014-08-15 09:35 - 2014-09-12 03:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll2014-08-15 09:35 - 2014-09-12 03:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2014-08-15 09:35 - 2014-09-12 03:20 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe2014-08-15 09:35 - 2014-09-12 03:20 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll2014-08-15 09:35 - 2014-09-12 03:20 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll2014-08-15 09:34 - 2014-09-12 03:20 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb2014-08-15 09:34 - 2014-09-12 03:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll2014-08-15 09:34 - 2014-09-12 03:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2014-08-15 09:34 - 2014-09-12 03:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe2014-08-15 09:34 - 2014-09-12 03:20 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe2014-08-14 02:11 - 2014-08-14 02:11 - 27841136 _____ (NETGEAR Inc.) C:\Users\Mathematics\Downloads\NETGEARGenie-install (1).exe2014-08-14 01:55 - 2014-08-14 01:54 - 00002860 _____ () C:\Users\Mathematics\Desktop\Rkill.txt2014-08-14 01:54 - 2014-08-14 01:54 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Mathematics\Downloads\rkill.exe2014-08-14 01:48 - 2014-08-14 01:48 - 00000000 ____D () C:\Program Files (x86)\NETGEAR Genie2014-08-14 01:46 - 2014-08-14 01:46 - 27841136 _____ (NETGEAR Inc.) C:\Users\Mathematics\Downloads\NETGEARGenie-install.exe2014-08-14 01:16 - 2013-03-17 09:55 - 00000000 ____D () C:\ProgramData\NVIDIA2014-08-14 01:13 - 2013-03-17 09:57 - 00000000 ____D () C:\Program Files\NVIDIA Corporation2014-08-13 14:48 - 2014-05-15 16:41 - 00000000 ____D () C:\ProgramData\OriginSome content of TEMP:====================C:\Users\Mathematics\AppData\Local\Temp\CTPBSeq.exeC:\Users\Mathematics\AppData\Local\Temp\MSN21D2.exe==================== Bamital & volsnap Check =================(There is no automatic fix for files that do not pass verification.)C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\SysWOW64\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2014-09-12 16:22==================== End Of Log ============================
False positive: "challenges.cloudflare.com"
in Firefox
Posted
Yeah and I can't even get passed it except in incognito or private mode.