Jump to content

Search the Community

Showing results for tags 'Trojan.Dorkbot.ED'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 4 results

  1. A Win7 Pro x64 Laptop has become infected over the past couple of days (very slow operation; protected by Malwarebytes & Vipre). Malwarebytes log extracts are appended, with the Trojan identifications including: Trojan.Agent.ED Trojan.Agent.0BGen2 Exploit.Drop.70 Trojan.Dorkbot.ED These files are on the Windows desktop (and elsewhere): HELP_DECRYPT.HTML HELP_DECRYPT.PNG HELP_DECRYPT.TXT HELP_DECRYPT.URL And "The Windows Security Center can't be started" - MicrosoftFixit50981.msi doesn't work, nor can 'Security Center' services be started. Any suggestions would be much appreciated. Dave. Detection, 12/02/2015 11:14:59, XXX, XXX-LAPTOP, Protection, Malware Protection, File, Trojan.Agent.ED, C:\Users\XXX\AppData\Local\Ommics\NmGd3.exe, Quarantine, [b57bf22b385289adefcb79a226dc0bf5] Scan, 12/02/2015 13:38:07, SYSTEM, XXX-LAPTOP, Manual, Start:12/02/2015 13:07:15, Duration:19 min 35 sec, Threat Scan, Completed, 0 Malware Detections, 6 Non-Malware Detections, Detection, 12/02/2015 15:21:49, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 188.165.164.184, ip-addr.es, 49572, Outbound, C:\Windows\SysWOW64\svchost.exe, Detection, 12/02/2015 15:21:55, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 188.165.164.184, ip-addr.es, 49572, Outbound, C:\Windows\SysWOW64\svchost.exe, Detection, 12/02/2015 15:22:01, SYSTEM, XXX-LAPTOP, Protection, Malware Protection, File, Trojan.Agent.0BGen2, C:\Users\XXX\AppData\Local\Temp\3F42.tmp, Quarantine, [ee4261bcf6940f27a6e68685de249b65] Detection, 12/02/2015 15:22:09, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 114.202.247.141, dcmaulmembers.com, 49587, Outbound, C:\Windows\SysWOW64\svchost.exe, Detection, 12/02/2015 15:22:15, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 114.202.247.141, dcmaulmembers.com, 49587, Outbound, C:\Windows\SysWOW64\svchost.exe, Detection, 12/02/2015 15:22:25, XXX, XXX-LAPTOP, Protection, Malware Protection, File, Trojan.Agent.ED, C:\Users\XXX\AppData\Local\Temp\update.exe, Quarantine, [db552bf2e4a63ef818752fef49b949b7] Detection, 12/02/2015 15:24:49, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 188.165.164.184, ip-addr.es, 49791, Outbound, C:\Windows\SysWOW64\svchost.exe, Detection, 12/02/2015 15:26:30, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 166.78.144.80, sksqqagakeicoeso.org, 49859, Outbound, C:\Windows\SysWOW64\regsvr32.exe, Detection, 12/02/2015 15:26:31, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 166.78.144.80, sksqqagakeicoeso.org, 49859, Outbound, C:\Windows\SysWOW64\regsvr32.exe, Update, 12/02/2015 15:27:22, SYSTEM, XXX-LAPTOP, Manual, Malware Database, 2015.2.11.4, 2015.2.12.3, Detection, 12/02/2015 15:27:34, SYSTEM, XXX-LAPTOP, Protection, Malware Protection, File, Exploit.Drop.70, C:\Users\XXX\AppData\Local\Temp\tmpa2d9f912\run.exe, Quarantine, [76ba2af37a101e18265d1658eb1527d9] Detection, 12/02/2015 15:27:50, XXX, XXX-LAPTOP, Protection, Malware Protection, File, Trojan.Dorkbot.ED, C:\Users\XXX\AppData\Local\Temp\tmp2206b12f\new.exe, Quarantine, [7320c15c1575d4624cd9ed99bb46fb05] Detection, 12/02/2015 15:36:12, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 212.117.180.190, search-inter.com, 50834, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 15:45:28, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 5.149.250.194, 51799, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 15:45:34, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 212.117.180.190, search-inter.com, 51800, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 15:49:22, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 216.172.61.83, appsrumors.com, 52584, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 15:49:22, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 212.117.180.190, search-inter.com, 52585, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 15:59:35, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 46.250.111.47, uociwiiqgmqwwmkq.org, 57901, Outbound, C:\Windows\SysWOW64\regsvr32.exe, Detection, 12/02/2015 16:01:24, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 212.117.180.190, search-inter.com, 58133, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 16:25:33, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 216.172.61.83, newslikes.com, 52571, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 16:25:33, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 212.117.180.190, search-inter.com, 52583, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 16:30:03, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 5.149.250.194, 56096, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 16:30:03, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 212.117.180.190, search-inter.com, 56097, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 16:30:20, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 166.78.144.80, sksqqagakeicoeso.org, 56098, Outbound, C:\Windows\SysWOW64\regsvr32.exe, Detection, 12/02/2015 16:30:20, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 166.78.144.80, sksqqagakeicoeso.org, 56098, Outbound, C:\Windows\SysWOW64\regsvr32.exe, Detection, 12/02/2015 16:30:41, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 5.149.250.194, 56107, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 16:30:42, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 212.117.180.190, search-inter.com, 56108, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 16:33:27, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 5.149.250.194, 56162, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 16:33:28, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 212.117.180.190, search-inter.com, 56163, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 16:33:52, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 5.149.250.194, 56169, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 16:33:52, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 212.117.180.190, search-inter.com, 56170, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Scan, 12/02/2015 16:35:10, SYSTEM, XXX-LAPTOP, Manual, Start:12/02/2015 15:27:29, Duration:29 min 50 sec, Threat Scan, Completed, 8 Malware Detections, 0 Non-Malware Detections, Detection, 12/02/2015 16:41:08, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 212.117.180.190, search-inter.com, 49192, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 17:01:26, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 216.172.61.83, appsrumors.com, 56895, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe, Detection, 12/02/2015 17:08:35, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 173.224.248.55, uociwiiqgmqwwmkq.org, 57504, Outbound, C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe, Detection, 12/02/2015 17:13:47, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 31.193.87.88, uociwiiqgmqwwmkq.org, 57732, Outbound, C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe, Detection, 12/02/2015 17:22:08, SYSTEM, XXX-LAPTOP, Protection, Malicious Website Protection, IP, 208.43.117.244, data.rtbfy.com, 58438, Outbound, C:\Program Files (x86)\Internet Explorer\iexplore.exe,
  2. Hi, I downloaded a game called War Thunder a while back from Steam and have been playing this for a while. It has never caused problems before until now, when I started the game after a recent update, Malwarebytes would detect it as a threat. I did a Threat Scan and it found nothing, but when I scanned the War Thunder file specifically in C:/Program Files, then it will detect it. Before this, the launcher would cause the Malicious Website Protection to go off too, usually during updates. So I'm wondering if this is a false positive or this game is a dangerous file? I trust Steam would not put anything malicious in their store, but I know you can get this game without Steam too. It is a F2P game, by the way, and generally highly regarded. Also, unrelated to War Thunder but I've had this "Trojan.Dorkbot.ED" in my quarentine for a while, since December 2013. I don't qite remember what it was and if it was safe or not. Here are the logs... FRST.txt Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:16-06-2014 Ran by Brandon (administrator) on BRANDON-PC on 17-06-2014 14:21:10 Running from C:\Users\Brandon\Desktop Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: English(US) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe (Impulse Point, LLC) C:\Program Files\SafeConnect\scManager.sys (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe (LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (AMD) C:\Windows\System32\atieclxx.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (LSI Corp.) C:\Program Files\ltmoh\ltmoh.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TEco.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Logitech©) C:\Program Files\Logitech\G930\G930.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\Alwil Software\Avast5\avastui.exe (LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Valve Corporation) C:\Program Files\Steam\Steam.exe (Impulse Point, LLC) C:\Program Files\SafeConnect\SCClient.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe (Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe (TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe (LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe (TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe (TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7625248 2009-07-28] (Realtek Semiconductor) HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1545512 2009-07-20] (Synaptics Incorporated) HKLM\...\Run: [LtMoh] => C:\Program Files\ltmoh\Ltmoh.exe [195080 2008-09-25] (LSI Corp.) HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [476512 2009-08-21] (TOSHIBA Corporation) HKLM\...\Run: [smoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [460088 2009-07-28] (TOSHIBA Corporation) HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [738616 2009-08-05] (TOSHIBA Corporation) HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [611672 2009-08-06] (TOSHIBA Corporation) HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1324384 2009-08-11] (TOSHIBA Corporation) HKLM\...\Run: [TWebCamera] => C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2446648 2009-08-11] (TOSHIBA CORPORATION.) HKLM\...\Run: [smartFaceVWatcher] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [163840 2009-07-29] (TOSHIBA Corporation) HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [611672 2009-09-17] (TOSHIBA Corporation) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [Malwarebytes Anti-Malware (reboot)] => "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript HKLM\...\Run: [Logitech G930] => C:\Program Files\Logitech\G930\G930.exe [1516888 2011-03-23] (Logitech©) HKLM\...\Run: [sunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [startCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.) HKLM\...\Run: [AMD AVT] => C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] () HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3890208 2014-06-06] (AVAST Software) HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-05-13] (LogMeIn Inc.) HKU\S-1-5-21-2539973999-1635078157-892821977-1000\...\Run: [steam] => C:\Program Files\Steam\steam.exe [1754816 2014-05-29] (Valve Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SafeConnect.lnk ShortcutTarget: SafeConnect.lnk -> C:\Program Files\SafeConnect\SCClient.exe (Impulse Point, LLC) Startup: C:\Users\Brandon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\Brandon\AppData\Roaming\Mozilla\Firefox\Profiles\osrnedtv.default FF Homepage: about:home FF Keyword.URL: user_pref("keyword.URL", ""); FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @nexon.net/NxGame - C:\ProgramData\NexonUS\NGM\npNxGameUS.dll No File FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Brandon\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll No File FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Extension: Rikaichan Japanese-English Dictionary File - C:\Users\Brandon\AppData\Roaming\Mozilla\Firefox\Profiles\osrnedtv.default\Extensions\rikaichan-jpen@polarcloud.com [2013-07-15] FF Extension: Rikaichan - C:\Users\Brandon\AppData\Roaming\Mozilla\Firefox\Profiles\osrnedtv.default\Extensions\{0AA9101C-D3C1-4129-A9B7-D778C6A17F82} [2012-12-08] FF Extension: WOT - C:\Users\Brandon\AppData\Roaming\Mozilla\Firefox\Profiles\osrnedtv.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-27] FF Extension: Personas Plus - C:\Users\Brandon\AppData\Roaming\Mozilla\Firefox\Profiles\osrnedtv.default\Extensions\personas@christopher.beard.xpi [2013-03-01] FF Extension: Adblock Plus - C:\Users\Brandon\AppData\Roaming\Mozilla\Firefox\Profiles\osrnedtv.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-06-29] FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-08] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-08] ========================== Services (Whitelisted) ================= R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.) [File not signed] R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-05-03] (AVAST Software) R2 cfWiMAXService; C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe [185712 2009-08-10] (TOSHIBA CORPORATION) R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [46448 2009-03-10] (TOSHIBA CORPORATION) S3 GameConsoleService; C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe [250616 2009-05-22] (WildTangent, Inc.) R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1682768 2014-05-13] (LogMeIn Inc.) R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2014-04-15] (LogMeIn, Inc.) R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 RSELSVC; C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe [62832 2009-07-07] (TOSHIBA Corporation) R2 SCManager; C:\Program Files\SafeConnect\scManager.sys [176520 2013-12-16] (Impulse Point, LLC) S3 TMachInfo; C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [54136 2011-02-11] (TOSHIBA Corporation) R2 TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [185712 2009-08-11] (TOSHIBA Corporation) R3 TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [111960 2009-09-17] (TOSHIBA Corporation) R3 TPCHSrv; C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [685424 2009-08-06] (TOSHIBA Corporation) ==================== Drivers (Whitelisted) ==================== R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [45184 2012-03-05] (Advanced Micro Devices) R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24184 2014-05-03] () R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-05-03] (AVAST Software) R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81768 2014-05-03] (AVAST Software) R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2014-05-03] () R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [777488 2014-05-15] (AVAST Software) R1 aswSP; C:\windows\system32\drivers\aswSP.sys [411680 2014-05-15] (AVAST Software) R2 aswStm; C:\windows\system32\drivers\aswStm.sys [68312 2014-05-15] (AVAST Software) R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180632 2014-05-03] () R3 hamachi; C:\windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) S3 LADF_BakerCOnly; C:\windows\System32\DRIVERS\ladfBakerCi386.sys [378568 2011-03-18] (Logitech) S3 LADF_BakerROnly; C:\windows\System32\DRIVERS\ladfBakerRi386.sys [312136 2011-03-18] (Logitech) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-06-17] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation) R3 PGEffect; C:\windows\System32\DRIVERS\pgeffect.sys [24064 2009-06-22] (TOSHIBA Corporation) R3 RTL8187Se; C:\windows\System32\DRIVERS\RTL8187Se.sys [372736 2009-08-13] (Realtek Semiconductor Corporation ) R2 TVALZFL; C:\windows\System32\DRIVERS\TVALZFL.sys [12920 2009-06-19] (TOSHIBA Corporation) U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-13] (Microsoft Corporation) S3 EagleNT; \??\C:\windows\system32\drivers\EagleNT.sys [X] S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [X] S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-17 14:21 - 2014-06-17 14:21 - 00015991 _____ () C:\Users\Brandon\Desktop\FRST.txt 2014-06-17 14:20 - 2014-06-17 14:21 - 00000000 ____D () C:\FRST 2014-06-17 14:11 - 2014-06-17 14:11 - 01072640 _____ (Farbar) C:\Users\Brandon\Desktop\FRST.exe 2014-06-14 03:13 - 2014-06-17 14:01 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-14 03:11 - 2014-06-08 01:48 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll 2014-06-14 03:11 - 2014-06-08 01:43 - 00302592 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll 2014-06-14 03:11 - 2014-05-30 02:18 - 17271296 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-06-14 03:11 - 2014-05-30 02:02 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2014-06-14 03:11 - 2014-05-30 02:02 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-06-14 03:11 - 2014-05-30 01:44 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2014-06-14 03:11 - 2014-05-30 01:43 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-06-14 03:11 - 2014-05-30 01:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-06-14 03:11 - 2014-05-30 01:38 - 02179072 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-06-14 03:11 - 2014-05-30 01:34 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-06-14 03:11 - 2014-05-30 01:33 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-06-14 03:11 - 2014-05-30 01:30 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2014-06-14 03:11 - 2014-05-30 01:28 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-06-14 03:11 - 2014-05-30 01:28 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-06-14 03:11 - 2014-05-30 01:27 - 00592896 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-06-14 03:11 - 2014-05-30 01:21 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2014-06-14 03:11 - 2014-05-30 01:16 - 00368128 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-06-14 03:11 - 2014-05-30 01:10 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2014-06-14 03:11 - 2014-05-30 01:06 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-06-14 03:11 - 2014-05-30 01:04 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-06-14 03:11 - 2014-05-30 01:02 - 00242688 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-06-14 03:11 - 2014-05-30 00:57 - 00595968 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-06-14 03:11 - 2014-05-30 00:56 - 04244992 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-06-14 03:11 - 2014-05-30 00:54 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-06-14 03:11 - 2014-05-30 00:50 - 01068032 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll 2014-06-14 03:11 - 2014-05-30 00:49 - 01964544 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-06-14 03:11 - 2014-05-30 00:40 - 11725312 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-06-14 03:11 - 2014-05-30 00:21 - 01790976 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-06-14 03:11 - 2014-05-30 00:15 - 01143296 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-06-14 03:11 - 2014-05-30 00:13 - 00704512 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-06-14 03:11 - 2014-04-24 19:06 - 00626688 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll 2014-06-14 03:11 - 2014-04-04 19:25 - 01294272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2014-06-14 03:11 - 2014-04-04 19:24 - 00187840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS 2014-06-14 03:11 - 2014-03-26 07:27 - 01389056 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll 2014-06-14 03:11 - 2014-03-26 07:27 - 01237504 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll 2014-06-14 03:11 - 2014-03-26 07:25 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll 2014-06-14 03:11 - 2014-03-26 07:25 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll 2014-06-08 21:32 - 2014-06-08 21:32 - 00000214 _____ () C:\Users\Brandon\Desktop\Garry's Mod.url 2014-05-22 23:05 - 2014-05-22 23:05 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-05-21 23:26 - 2014-05-21 23:49 - 00000000 ____D () C:\ProgramData\Narcissu Side 2nd 2014-05-21 23:26 - 2014-05-21 23:26 - 00000000 ____D () C:\Users\Brandon\AppData\Roaming\Ponscripter 2014-05-21 23:21 - 2014-05-21 23:21 - 00000216 _____ () C:\Users\Brandon\Desktop\Narcissu 1st & 2nd.url 2014-05-19 13:51 - 2014-05-19 13:51 - 00000000 ____D () C:\Users\Brandon\Desktop\Visa paperwork 2014-05-19 13:47 - 2014-05-19 13:47 - 00000000 ____D () C:\Users\Brandon\Desktop\IRS Stuff ==================== One Month Modified Files and Folders ======= 2014-06-17 14:21 - 2014-06-17 14:21 - 00015991 _____ () C:\Users\Brandon\Desktop\FRST.txt 2014-06-17 14:21 - 2014-06-17 14:20 - 00000000 ____D () C:\FRST 2014-06-17 14:21 - 2014-02-06 22:44 - 00000000 ____D () C:\Users\Brandon\AppData\Local\temp 2014-06-17 14:11 - 2014-06-17 14:11 - 01072640 _____ (Farbar) C:\Users\Brandon\Desktop\FRST.exe 2014-06-17 14:11 - 2009-10-08 19:48 - 01505103 _____ () C:\windows\WindowsUpdate.log 2014-06-17 14:01 - 2014-06-14 03:13 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-17 13:59 - 2014-02-16 04:42 - 00000886 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-17 13:46 - 2012-10-19 16:26 - 00034332 _____ () C:\windows\setupact.log 2014-06-17 13:45 - 2014-04-11 01:50 - 00110296 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamswissarmy.sys 2014-06-17 13:45 - 2009-07-13 21:34 - 00015792 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-17 13:45 - 2009-07-13 21:34 - 00015792 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-17 13:41 - 2014-02-16 04:42 - 00000882 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-17 13:41 - 2013-05-31 16:16 - 00000000 ____D () C:\Program Files\Steam 2014-06-17 13:41 - 2012-12-08 16:09 - 00000000 ____D () C:\Program Files\SafeConnect 2014-06-17 13:41 - 2011-04-08 12:55 - 00000000 ____D () C:\Users\Brandon\AppData\Local\LogMeIn Hamachi 2014-06-17 13:40 - 2009-07-13 21:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-06-17 02:26 - 2014-05-06 21:25 - 00000000 ___SD () C:\windows\system32\CompatTel 2014-06-17 02:25 - 2012-05-15 10:50 - 00000000 ____D () C:\Users\Brandon\AppData\Roaming\Skype 2014-06-17 00:05 - 2009-10-08 20:01 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-06-17 00:02 - 2013-07-26 23:26 - 00000000 ____D () C:\windows\system32\MRT 2014-06-16 23:59 - 2009-12-08 15:21 - 92708840 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2014-06-14 03:13 - 2012-04-06 10:16 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe 2014-06-14 03:13 - 2011-07-02 14:27 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl 2014-06-09 23:24 - 2009-09-01 22:32 - 00796094 _____ () C:\windows\system32\PerfStringBackup.INI 2014-06-08 21:32 - 2014-06-08 21:32 - 00000214 _____ () C:\Users\Brandon\Desktop\Garry's Mod.url 2014-06-08 01:48 - 2014-06-14 03:11 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll 2014-06-08 01:43 - 2014-06-14 03:11 - 00302592 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll 2014-06-06 15:10 - 2009-07-13 21:53 - 00032644 _____ () C:\windows\Tasks\SCHEDLGU.TXT 2014-06-06 14:46 - 2009-07-13 19:37 - 00000000 ____D () C:\windows\system32\NDF 2014-06-06 14:30 - 2013-05-31 16:16 - 00000000 ____D () C:\Program Files\Common Files\Steam 2014-06-06 14:25 - 2014-04-11 01:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-06-06 14:25 - 2014-04-11 01:48 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware 2014-06-06 14:25 - 2012-07-28 14:53 - 00001071 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-05-30 02:18 - 2014-06-14 03:11 - 17271296 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-05-30 02:02 - 2014-06-14 03:11 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2014-05-30 02:02 - 2014-06-14 03:11 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-05-30 01:44 - 2014-06-14 03:11 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2014-05-30 01:43 - 2014-06-14 03:11 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-05-30 01:42 - 2014-06-14 03:11 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-05-30 01:38 - 2014-06-14 03:11 - 02179072 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-05-30 01:34 - 2014-06-14 03:11 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-05-30 01:33 - 2014-06-14 03:11 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-05-30 01:30 - 2014-06-14 03:11 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2014-05-30 01:28 - 2014-06-14 03:11 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-05-30 01:28 - 2014-06-14 03:11 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-05-30 01:27 - 2014-06-14 03:11 - 00592896 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-05-30 01:21 - 2014-06-14 03:11 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2014-05-30 01:16 - 2014-06-14 03:11 - 00368128 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-05-30 01:10 - 2014-06-14 03:11 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2014-05-30 01:06 - 2014-06-14 03:11 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-05-30 01:04 - 2014-06-14 03:11 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-05-30 01:02 - 2014-06-14 03:11 - 00242688 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-05-30 00:57 - 2014-06-14 03:11 - 00595968 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-05-30 00:56 - 2014-06-14 03:11 - 04244992 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-05-30 00:54 - 2014-06-14 03:11 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-05-30 00:50 - 2014-06-14 03:11 - 01068032 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll 2014-05-30 00:49 - 2014-06-14 03:11 - 01964544 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-05-30 00:40 - 2014-06-14 03:11 - 11725312 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-05-30 00:21 - 2014-06-14 03:11 - 01790976 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-05-30 00:15 - 2014-06-14 03:11 - 01143296 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-05-30 00:13 - 2014-06-14 03:11 - 00704512 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-05-24 22:49 - 2012-05-15 10:50 - 00000000 ____D () C:\ProgramData\Skype 2014-05-22 23:05 - 2014-05-22 23:05 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-05-22 23:05 - 2014-03-09 01:25 - 00000000 ___RD () C:\Program Files\Skype 2014-05-21 23:49 - 2014-05-21 23:26 - 00000000 ____D () C:\ProgramData\Narcissu Side 2nd 2014-05-21 23:26 - 2014-05-21 23:26 - 00000000 ____D () C:\Users\Brandon\AppData\Roaming\Ponscripter 2014-05-21 23:21 - 2014-05-21 23:21 - 00000216 _____ () C:\Users\Brandon\Desktop\Narcissu 1st & 2nd.url 2014-05-21 22:57 - 2014-04-07 04:00 - 00000000 ____D () C:\Users\Brandon\Desktop\ENGL 198T articles 2014-05-19 13:51 - 2014-05-19 13:51 - 00000000 ____D () C:\Users\Brandon\Desktop\Visa paperwork 2014-05-19 13:47 - 2014-05-19 13:47 - 00000000 ____D () C:\Users\Brandon\Desktop\IRS Stuff Some content of TEMP: ==================== C:\Users\Brandon\AppData\Local\temp\AutoRun.exe C:\Users\Brandon\AppData\Local\temp\AutoRunGUI.dll C:\Users\Brandon\AppData\Local\temp\eauninstall.exe C:\Users\Brandon\AppData\Local\temp\Harry Potter Quidditch World Cup_uninst.exe C:\Users\Brandon\AppData\Local\temp\jre-7u55-windows-i586-iftw.exe ==================== Bamital & volsnap Check ================= C:\windows\explorer.exe => File is digitally signed C:\windows\system32\winlogon.exe => File is digitally signed C:\windows\system32\wininit.exe => File is digitally signed C:\windows\system32\svchost.exe => File is digitally signed C:\windows\system32\services.exe => File is digitally signed C:\windows\system32\User32.dll => File is digitally signed C:\windows\system32\userinit.exe => File is digitally signed C:\windows\system32\rpcss.dll => File is digitally signed C:\windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-05-19 00:08 ==================== End Of Log ============================ Addition.txt Additional scan result of Farbar Recovery Scan Tool (x86) Version:16-06-2014 Ran by Brandon at 2014-06-17 14:22:06 Running from C:\Users\Brandon\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated) Adobe Reader 9.1 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated) Age of Empires II: HD Edition (HKLM\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios) AMD Accelerated Video Transcoding (Version: 12.5.100.30429 - Advanced Micro Devices, Inc.) Hidden AMD APP SDK Runtime (Version: 10.0.937.2 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (HKLM\...\{B448BC74-1CB7-7A57-3313-5E075AFB413E}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.) AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden AMD Fuel (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden AMD Media Foundation Decoders (Version: 1.0.80430.0002 - Advanced Micro Devices, Inc.) Hidden AMD VISION Engine Control Center (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden avast! Free Antivirus (HKLM\...\avast) (Version: 9.0.2018 - Avast Software) Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (Version: 2009.0729.2238.38827 - ATI Technologies, Inc.) Hidden Catalyst Control Center InstallProxy (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help English (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help French (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help German (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden ccc-utility (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform) Combined Community Codec Pack 2011-07-30 (HKLM\...\Combined Community Codec Pack_is1) (Version: 2011.07.30.0 - CCCP Project) Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Garry's Mod (HKLM\...\Steam App 4000) (Version: - Facepunch Studios) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden Katawa Shoujo (HKLM\...\Katawa Shoujo) (Version: - ) Label@Once 1.0 (HKLM\...\{0D795777-9D60-4692-8386-F2B3F2B5E5BF}) (Version: 1.0 - Corel) League of Legends (HKLM\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games) Left 4 Dead 2 (HKLM\...\Steam App 550) (Version: - Valve) Logitech G930 (HKLM\...\{BF247007-01DE-448A-97F6-55F3C81EC7FE}) (Version: 1.0.364 - Logitech) LogMeIn Hamachi (HKLM\...\LogMeIn Hamachi) (Version: 2.2.0.193 - LogMeIn, Inc.) LogMeIn Hamachi (Version: 2.2.0.193 - LogMeIn, Inc.) Hidden LSI V92 MOH Application (HKLM\...\LTMOH) (Version: - LSI Corporation) Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft .NET Framework 1.1 (Version: 1.1.4322 - Microsoft) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation) Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft VC9 runtime libraries (Version: 1.0.0 - AOL LLC) Hidden Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Works (HKLM\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation) Microsoft XNA Framework Redistributable 3.1 (HKLM\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Mozilla Firefox 29.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 29.0.1 (x86 en-US)) (Version: 29.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyToshiba (HKLM\...\{01250B8F-D947-4F8A-9408-FE8E3EE2EC92}) (Version: 2.2.0.3 - Toshiba) Narcissu 1st & 2nd (HKLM\...\Steam App 264380) (Version: - stage-nana) Norton Internet Security (Version: 16.7.0.30 - Symantec Corporation) Hidden OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation) Quickbooks Financial Center (HKLM\...\{3B843B38-04B1-4CE6-8888-586273E0F289}) (Version: 2.02 - TOSHIBA Corporation) Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0008 - Realtek) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5904 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30101 - Realtek Semiconductor Corp.) Realtek WLAN Driver (HKLM\...\{0FB630AB-7BD8-40AE-B223-60397D57C3C9}) (Version: 2.00.0006 - Realtek) SafeConnect (HKLM\...\SafeConnect) (Version: - ) Skype Launcher (HKLM\...\{DA84ECBF-4B79-47F2-B34C-95C38484C058}) (Version: 2.01 - TOSHIBA Corporation) Skype™ 6.16 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.6.1 - Synaptics Incorporated) Toshiba Application and Driver Installer (HKLM\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.0.9 - Toshiba) TOSHIBA Assist (HKLM\...\{12B3A009-A080-4619-9A2A-C6DB151D8D67}) (Version: 2.01.11 - TOSHIBA) TOSHIBA ConfigFree (HKLM\...\{F3529665-D75E-4D6D-98F0-745C78C68E9B}) (Version: 8.0.21 - TOSHIBA Corporation) TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.1 - TOSHIBA Corporation) TOSHIBA DVD PLAYER (HKLM\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 3.01.0.07-A - TOSHIBA Corporation) TOSHIBA eco Utility (HKLM\...\InstallShield_{53536479-DFB0-47ED-9D10-43F3708C222D}) (Version: 1.1.7.0 - TOSHIBA Corporation) TOSHIBA eco Utility (Version: 1.1.7.0 - TOSHIBA Corporation) Hidden TOSHIBA Extended Tiles for Windows Mobility Center (HKLM\...\InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}) (Version: 1.01.00 - TOSHIBA Corporation) TOSHIBA Extended Tiles for Windows Mobility Center (Version: 1.01.00 - TOSHIBA Corporation) Hidden TOSHIBA Face Recognition (HKLM\...\InstallShield_{C730E42C-935A-45BB-A0C5-37E5234D111B}) (Version: 3.1.0.32 - TOSHIBA Corporation) TOSHIBA Face Recognition (Version: 3.1.0.32 - TOSHIBA Corporation) Hidden TOSHIBA Hardware Setup (HKLM\...\{D0387727-C89D-4774-B643-B9333EAA09DE}) (Version: 2.00.11 - TOSHIBA Corporation) TOSHIBA HDD/SSD Alert (HKLM\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.0.2 - TOSHIBA Corporation) TOSHIBA HDD/SSD Alert (Version: 3.1.0.2 - TOSHIBA Corporation) Hidden TOSHIBA Internal Modem Region Select Utility (HKLM\...\InstallShield_{89F7D66C-777D-473B-AA11-319C0F190EAC}) (Version: 2.3.0.01 - TOSHIBA Corporation) TOSHIBA Internal Modem Region Select Utility (Version: 2.3.0.01 - TOSHIBA Corporation) Hidden Toshiba Online Backup (HKLM\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.35 - Toshiba) TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.4.1.0 - TOSHIBA Corporation) Toshiba Quality Application (HKLM\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.001.0000 - Toshiba) TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.2 - TOSHIBA Corporation) TOSHIBA Service Station (HKLM\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.9 - TOSHIBA) TOSHIBA Speech System Applications (HKLM\...\{EE033C1F-443E-41EC-A0E2-559B539A4E4D}) (Version: 1.00.2518 - ) TOSHIBA Speech System SR Engine(U.S.) Version1.0 (HKLM\...\{008D69EB-70FF-46AB-9C75-924620DF191A}) (Version: - ) TOSHIBA Speech System TTS Engine(U.S.) Version1.0 (HKLM\...\{3FBF6F99-8EC6-41B4-8527-0A32241B5496}) (Version: - ) TOSHIBA Supervisor Password (HKLM\...\{A208044D-A88B-4ACF-AE95-E4F213E6EDC0}) (Version: 2.00.09 - TOSHIBA Corporation) TOSHIBA Value Added Package (HKLM\...\InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}) (Version: 1.2.26 - TOSHIBA Corporation) TOSHIBA Value Added Package (Version: 1.2.26 - TOSHIBA Corporation) Hidden TOSHIBA Web Camera Application (HKLM\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.4 - TOSHIBA Corporation) ToshibaRegistration (HKLM\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.3 - Toshiba) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM\...\{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Access 2007 Help (KB963663) (HKLM\...\{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{6B76A18A-AA1E-42AB-A7AD-6C84BBB43987}) (Version: - Microsoft) Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version: - Microsoft) Update for Microsoft Office Infopath 2007 Help (KB963662) (HKLM\...\{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{716B81B8-B13C-41DF-8EAC-7A2F656CAB63}) (Version: - Microsoft) Update for Microsoft Office OneNote 2007 Help (KB963670) (HKLM\...\{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2744EF05-38E1-4D5D-B333-E021EDAEA245}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{ED38F8A3-4F61-494E-8BCA-E3AC7760C924}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{0451F231-E3E3-4943-AB9F-58EB96171784}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2881065) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B7EF38F7-1D58-4085-A9A4-0F6C69A5AA1E}) (Version: - Microsoft) Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version: - Microsoft) Update for Microsoft Office Publisher 2007 Help (KB963667) (HKLM\...\{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2E40DE55-B289-4C8B-8901-5D369B16814F}) (Version: - Microsoft) Update for Microsoft Office Script Editor Help (KB963671) (HKLM\...\{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version: - Microsoft) Update for Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version: - Microsoft) Ventrilo Client (HKLM\...\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.8 - Flagship Industries, Inc.) War Thunder (HKLM\...\Steam App 236390) (Version: - Gaijin Entertainment) WildTangent Games (HKLM\...\WildTangent toshiba Master Uninstall) (Version: 1.0.0.71 - WildTangent) Windows Live Call (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden Windows Live Communications Platform (Version: 14.0.8064.206 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation) Windows Live Essentials (Version: 14.0.8089.726 - Microsoft Corporation) Hidden Windows Live Mail (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live Messenger (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live Photo Gallery (Version: 14.0.8081.709 - Microsoft Corporation) Hidden Windows Live Sign-in Assistant (HKLM\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation) Windows Live Sync (HKLM\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live Upload Tool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) Windows Live Writer (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden WinRAR 4.00 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH) World of Tanks (HKLM\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812NA}_is1) (Version: - Wargaming.net) ==================== Restore Points ========================= 30-05-2014 08:33:09 Windows Update 06-06-2014 21:20:27 Windows Update 14-06-2014 10:05:43 Windows Update 17-06-2014 06:54:00 Windows Update ==================== Hosts content: ========================== 2009-07-13 19:04 - 2014-02-06 22:43 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {08140998-93CE-4051-A80A-8ECC9CB67B57} - System32\Tasks\{561F621B-7B56-4543-9FD0-CA8DE4A880C4} => Firefox.exe http://ui.skype.com/ui/0/6.6.0.106/en/go/help.faq.installer?LastError=1618 Task: {11590910-C861-4791-813A-5A088D25EEA8} - System32\Tasks\{DFD61A5E-2EBA-47D5-866E-E166BDC924D0} => Firefox.exe http://ui.skype.com/ui/0/6.6.0.106/en/go/help.faq.installer?LastError=1618 Task: {67A85225-3F33-43E6-BBFC-7000403824EB} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-14] (Adobe Systems Incorporated) Task: {886DC625-F9C5-49A0-A3F5-6E77AF76B877} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-18] (Google Inc.) Task: {89005DB7-85C2-4788-A71B-758FA4C20F87} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) Task: {9D7464DB-D7B6-4AC9-9B03-1D393A421CB1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-18] (Google Inc.) Task: {A385A306-6583-488B-B302-488FB8A27360} - System32\Tasks\{15550E89-245B-4FD7-8B7B-22511CBA9D1C} => Firefox.exe http://ui.skype.com/ui/0/6.9.0.106/en/go/help.faq.installer?LastError=1618 Task: {AF98DA14-C921-478C-BF6B-C1CDB03878D1} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe [2009-07-13] (TOSHIBA CORPORATION) Task: {CC499296-126B-42DC-ACAF-A6FE4A9C43E5} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2014-05-03] (AVAST Software) Task: {D1FE8D42-F552-4747-9FD8-7C9DB8FEF39D} - System32\Tasks\{551163E0-634A-48D8-A4CB-0D048A251EDA} => Firefox.exe http://ui.skype.com/ui/0/6.6.0.106/en/go/help.faq.installer?LastError=1618 Task: {F81BD0C3-A029-42F9-AFFF-637B794219D5} - System32\Tasks\{40478EA2-1F8C-4BC1-8F80-2A81E7F792C2} => Firefox.exe http://ui.skype.com/ui/0/6.6.0.106/en/go/help.faq.installer?LastError=1618 Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-06-16 23:49 - 2014-06-16 23:49 - 02776064 _____ () C:\Program Files\Alwil Software\Avast5\defs\14061601\algo.dll 2014-06-17 13:42 - 2014-06-17 13:42 - 02776064 _____ () C:\Program Files\Alwil Software\Avast5\defs\14061700\algo.dll 2013-04-29 23:24 - 2013-04-29 23:24 - 00065024 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll 2011-04-08 12:50 - 2011-03-02 12:40 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll 2009-07-16 15:27 - 2009-07-16 15:27 - 07263544 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll 2009-07-16 15:27 - 2009-07-16 15:27 - 00052536 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll 2009-09-01 22:30 - 2009-06-22 15:38 - 00015160 _____ () C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll 2009-03-12 19:08 - 2009-03-12 19:08 - 00049152 _____ () C:\Program Files\Toshiba\PCDiag\NotifyPCD.dll 2009-07-25 11:07 - 2009-07-25 11:07 - 00058704 _____ () C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll 2013-11-24 23:47 - 2013-11-24 23:47 - 19336120 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll 2014-05-21 23:12 - 2014-04-29 17:08 - 01135104 _____ () C:\Program Files\Steam\libavcodec-55.dll 2014-04-22 16:00 - 2014-04-29 17:08 - 00471552 _____ () C:\Program Files\Steam\libavutil-53.dll 2014-05-21 23:12 - 2014-04-29 17:08 - 00404992 _____ () C:\Program Files\Steam\libavformat-55.dll 2014-01-22 01:02 - 2014-04-29 17:08 - 00340992 _____ () C:\Program Files\Steam\libavresample-1.dll 2013-04-23 18:30 - 2014-05-16 18:36 - 00756224 _____ () C:\Program Files\Steam\SDL2.dll 2014-05-21 23:13 - 2014-05-29 10:37 - 02139840 _____ () C:\Program Files\Steam\video.dll 2014-05-21 23:12 - 2014-04-28 17:37 - 00519168 _____ () C:\Program Files\Steam\libswscale-2.dll 2013-05-03 15:35 - 2014-05-29 10:36 - 01116864 _____ () C:\Program Files\Steam\bin\chromehtml.DLL 2013-03-26 16:16 - 2014-05-01 16:35 - 20628160 _____ () C:\Program Files\Steam\bin\libcef.dll 2012-12-11 09:51 - 2013-06-14 16:49 - 01100800 _____ () C:\Program Files\Steam\bin\avcodec-53.dll 2012-12-11 09:51 - 2013-06-14 16:49 - 00124416 _____ () C:\Program Files\Steam\bin\avutil-51.dll 2012-12-11 09:51 - 2013-06-14 16:49 - 00192000 _____ () C:\Program Files\Steam\bin\avformat-53.dll 2013-04-29 23:24 - 2013-04-29 23:24 - 00095232 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll 2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2009-09-17 16:36 - 2009-09-17 16:36 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll 2014-05-12 19:39 - 2014-05-12 19:39 - 03839088 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2014-06-14 03:13 - 2014-06-14 03:13 - 17024688 _____ () C:\windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start MSCONFIG\startupreg: MyTOSHIBA => "C:\Program Files\TOSHIBA\My Toshiba\MyToshiba.exe" /AUTO MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files\TOSHIBA\Toshiba Online Backup\Activation\TobuActivation.exe" UNATTENDED MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: ToshibaServiceStation => "C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60 ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (06/06/2014 02:25:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: mbamservice.exe, version: 3.0.2.0, time stamp: 0x5318d363 Faulting module name: mbamservice.exe, version: 3.0.2.0, time stamp: 0x5318d363 Exception code: 0x40000015 Fault offset: 0x0007da8a Faulting process id: 0xa34 Faulting application start time: 0xmbamservice.exe0 Faulting application path: mbamservice.exe1 Faulting module path: mbamservice.exe2 Report Id: mbamservice.exe3 Error: (05/03/2014 01:34:31 AM) (Source: VSS) (EventID: 8194) (User: ) Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. . This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {ab127595-7616-4302-8cc3-95a295053a89} Error: (04/21/2014 06:24:52 PM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to poke open firewall Error: (04/20/2014 07:20:09 PM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to poke open firewall Error: (04/20/2014 00:49:22 PM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to poke open firewall Error: (04/20/2014 00:15:12 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to poke open firewall Error: (04/18/2014 02:55:16 PM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to poke open firewall Error: (04/17/2014 01:17:44 PM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to poke open firewall Error: (04/17/2014 00:27:27 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to poke open firewall Error: (04/17/2014 00:22:14 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to poke open firewall System errors: ============= Error: (06/16/2014 11:51:36 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: ) Description: WMPNetworkSvc0x80070420 Error: (06/16/2014 11:49:09 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "BRANDON-PC :20" could not be registered on the interface with IP address 10.0.0.23. The computer with the IP address 10.0.0.22 did not allow the name to be claimed by this computer. Error: (06/16/2014 11:49:09 PM) (Source: Server) (EventID: 2505) (User: ) Description: The server could not bind to the transport \Device\NetBT_Tcpip_{39BB13CB-6A22-4B48-A8F9-233FEC078B5C} because another computer on the network has the same name. The server could not start. Error: (06/16/2014 11:48:28 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "BRANDON-PC :0" could not be registered on the interface with IP address 10.0.0.23. The computer with the IP address 10.0.0.22 did not allow the name to be claimed by this computer. Error: (06/14/2014 03:00:56 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {4991D34B-80A1-4291-83B6-3328366B9097} Error: (06/14/2014 02:54:38 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {4991D34B-80A1-4291-83B6-3328366B9097} Error: (06/09/2014 10:11:54 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "BRANDON-PC :20" could not be registered on the interface with IP address 10.0.0.23. The computer with the IP address 10.0.0.22 did not allow the name to be claimed by this computer. Error: (06/09/2014 10:11:54 PM) (Source: Server) (EventID: 2505) (User: ) Description: The server could not bind to the transport \Device\NetBT_Tcpip_{39BB13CB-6A22-4B48-A8F9-233FEC078B5C} because another computer on the network has the same name. The server could not start. Error: (06/09/2014 10:11:17 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "BRANDON-PC :0" could not be registered on the interface with IP address 10.0.0.23. The computer with the IP address 10.0.0.22 did not allow the name to be claimed by this computer. Error: (06/08/2014 09:25:22 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "BRANDON-PC :20" could not be registered on the interface with IP address 10.0.0.23. The computer with the IP address 10.0.0.22 did not allow the name to be claimed by this computer. Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 54% Total physical RAM: 2812.17 MB Available physical RAM: 1287.99 MB Total Pagefile: 5622.63 MB Available Pagefile: 3777.01 MB Total Virtual: 2047.88 MB Available Virtual: 1901.92 MB ==================== Drives ================================ Drive c: (TI103426W0D) (Fixed) (Total:288.71 GB) (Free:166.88 GB) NTFS ==>[system with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 89E6579C) Partition 1: (Active) - (Size=1 GB) - (Type=27) Partition 2: (Not Active) - (Size=289 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=8 GB) - (Type=17) ==================== End Of Log ============================
  3. When ran MW it detected Trojan.dorkbot.ed in C:\PrgroamFiles(x86)Norton Utilities 15\RMScrn.exe. MW quarantined the file so not Norton Utilities won't run anymore. I then deleted and reinstalled Norton Utilities and MWbytes quarantined it again. I also ran MW Anti Rootkit and it found nothing, also ran Norton internet Security Full scan and it didn't find anything. I seems to be in a lop here. Any help 2would be appreciated. It may be unrelated, but I've also had problems with iTunes, right now it won't read DVDs. I reinstalled it and the problem returned there too. I am on a Windows 7 computer. Thanks, Dan
  4. Scan found synaptics file as trojan.dorkbot.ed Attached is the synaptics file in rar and the log per instructions. I hope this helps. Sean SynZMetr.rar MBAM-log-2013-12-18 (19-23-10).txt
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.