Please help I do not know what is going on

SableRayven · May 16, 2013

Hello,

Computer is an Acer Aspire 5750 running Windows 7 Home Premium

My maintenence on the computer comprises of running the CC Cleaner and Malwarebytes every other night, and the Defraggler once a week.

Everything was fine until about 3-4 days ago when I ran MalwareBytes and it suddenly froze about 4 minutes in. After that literally everything on my computer froze, I had to do an emergency shut down and ever since my computer has been overheating within an hour of having it on, it can't handle even my normal college workload of playing the media player and MS Word, it takes forever to do anything really. So I'm at a loss and I really don't want to have to reboot. So please help.

I've ran the DDS as you guys have asked and it will be posted next.

Edited May 23, 2013 by Maurice Naggar
emphasis added

SableRayven · May 16, 2013

DDS (Ver_2012-11-20.01) - NTFS_AMD64

Internet Explorer: 9.0.8112.16483 BrowserJavaVersion: 10.17.2

Run by Trinity at 10:58:45 on 2013-05-16

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3948.2181 [GMT -5:00]

.

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Launch Manager\dsiwmis.exe

C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

C:\Program Files (x86)\iWin Games\iWinTrusted.exe

C:\Program Files\Acer\Acer Updater\UpdaterService.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files (x86)\Launch Manager\LMutilps32.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\taskhost.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe

C:\Windows\system32\igfxext.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe

C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe

C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe

C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

C:\DOLBY PCEE4\pcee4.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\Launch Manager\LManager.exe

C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe

C:\Program Files (x86)\Launch Manager\LMworker.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe

C:\Windows\system32\taskeng.exe

C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe

C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Windows\System32\svchost.exe -k secsvcs

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://acer.msn.com

uDefault_Page_URL = hxxp://acer.msn.com

mStart Page = hxxp://acer.msn.com

mDefault_Page_URL = hxxp://acer.msn.com

mWinlogon: Userinit = userinit.exe

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

BHO: IEHlprObj Class: {8CA5ED52-F3FB-4414-A105-2E3491156990} - C:\Program Files (x86)\iWin Games\iWinGamesHookIE.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

mRun: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

mRun: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

mRun: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"

mRun: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d

mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

mRun: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k

mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

mRun: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart

mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

dRunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid}

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

TCP: NameServer = 192.168.1.1

TCP: Interfaces\{35DBCDA7-76D7-4497-93B0-376EA72DE8AF} : DHCPNameServer = 192.168.1.1

TCP: Interfaces\{35DBCDA7-76D7-4497-93B0-376EA72DE8AF}\6427F6E64796562773138373 : DHCPNameServer = 192.168.254.254

TCP: Interfaces\{35DBCDA7-76D7-4497-93B0-376EA72DE8AF}\9667977657563747 : DHCPNameServer = 8.8.8.8

TCP: Interfaces\{EC165E47-7983-45DC-B201-36594D8A9BC9} : DHCPNameServer = 192.168.1.1

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

SSODL: WebCheck - <orphaned>

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-mStart Page = hxxp://acer.msn.com

x64-mDefault_Page_URL = hxxp://acer.msn.com

x64-BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

x64-Run: [igfxTray] C:\Windows\System32\igfxtray.exe

x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe

x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe

x64-Run: [intelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"

x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

x64-Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4

x64-Run: [Power Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe

x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

x64-Notify: igfxcui - igfxdev.dll

x64-SSODL: WebCheck - <orphaned>

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Trinity\AppData\Roaming\Mozilla\Firefox\Profiles\47tlmbdx.default\

FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL

FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\3\NP_wtapp.dll

FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

FF - plugin: C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll

FF - plugin: C:\Windows\SysWOW64\npDeployJava1.dll

FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

.

============= SERVICES / DRIVERS ===============

.

R1 mwlPSDFilter;mwlPSDFilter;C:\Windows\System32\drivers\mwlPSDFilter.sys [2011-4-6 22912]

R1 mwlPSDNServ;mwlPSDNServ;C:\Windows\System32\drivers\mwlPSDNserv.sys [2011-4-6 20328]

R1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\System32\drivers\mwlPSDVDisk.sys [2011-4-6 62584]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2012-1-4 822624]

R2 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-7-1 353360]

R2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2013-3-5 873064]

R2 GREGService;GREGService;C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-1-8 23584]

R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-4-6 13336]

R2 iWinTrusted;iWinTrusted;C:\Program Files (x86)\iWin Games\iWinTrusted.exe [2011-4-8 176848]

R2 Live Updater Service;Live Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2013-4-22 255376]

R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-3-5 418376]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-3-5 701512]

R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-2-15 257344]

R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-1 508776]

R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\System32\drivers\TurboB.sys [2010-10-8 19192]

R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2013-3-5 2656280]

R3 b57xdbd;Broadcom xD Picture Bus Driver Service;C:\Windows\System32\drivers\b57xdbd.sys [2011-1-20 67624]

R3 b57xdmp;Broadcom xD Picture vstorp client drv;C:\Windows\System32\drivers\b57xdmp.sys [2011-1-20 19496]

R3 bScsiMSa;bScsiMSa;C:\Windows\System32\drivers\bScsiMSa.sys [2011-1-19 52264]

R3 bScsiSDa;bScsiSDa;C:\Windows\System32\drivers\bScsiSDa.sys [2011-1-13 85544]

R3 IntcDAud;Intel® Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2011-4-6 317440]

R3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;C:\Windows\System32\drivers\k57nd60a.sys [2011-1-17 412712]

R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-3-5 25928]

R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2010-9-30 80384]

R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2010-9-30 180736]

R3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfslh.sys [2011-10-1 764264]

R3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaylh.sys [2011-10-1 268648]

R3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirlh.sys [2011-10-1 25960]

R3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvollh.sys [2011-10-1 22376]

R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-1 219496]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S3 EgisTec Ticket Service;EgisTec Ticket Service;C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2010-9-27 172912]

S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]

S3 TurboBoost;Intel® Turbo Boost Technology Monitor 2.0;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-10-8 150016]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-3-10 1255736]

S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

.

=============== Created Last 30 ================

.

2013-05-16 15:42:28 -------- d-----w- C:\ProgramData\PrevxCSI

2013-05-16 13:09:37 9460464 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{260B7FEB-9DD9-4BB5-85FF-D08AEF74A49A}\mpengine.dll

2013-05-16 12:38:30 -------- d-----w- C:\18c9759adbc9954f12

2013-05-16 12:38:01 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb

2013-05-16 12:38:01 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

2013-05-15 18:49:50 983400 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys

2013-05-10 14:48:21 -------- d-----w- C:\Users\Trinity\AppData\Roaming\Mobipocket

2013-05-10 14:45:18 -------- d-----w- C:\Program Files (x86)\Mobipocket.com

2013-05-07 19:11:53 -------- d-----w- C:\Users\Trinity\AppData\Local\Macromedia

2013-05-07 19:10:55 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2013-05-07 19:10:55 691592 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2013-05-07 18:55:12 -------- d-----w- C:\Users\Trinity\AppData\Local\{8D8669B4-799C-42F5-81D1-CAF93E46BAA5}

2013-05-07 18:55:11 -------- d-----w- C:\Users\Trinity\AppData\Local\{8A8EA87C-DFC7-48E2-9C22-B4B33EB59B7E}

2013-05-07 18:54:59 -------- d-----w- C:\Users\Trinity\AppData\Roaming\Windows Live Writer

2013-05-07 18:54:59 -------- d-----w- C:\Users\Trinity\AppData\Local\Windows Live Writer

2013-05-04 17:34:23 -------- d-----w- C:\Users\Trinity\AppData\Local\Chromium

2013-05-04 17:31:15 -------- d-----w- C:\Users\Trinity\AppData\Local\The Lord of the Rings Online

2013-05-04 17:19:16 -------- d-----w- C:\Users\Trinity\AppData\Local\Turbine

2013-05-04 17:16:52 235344 ----a-w- C:\Windows\SysWow64\d3dx11_42.dll

2013-05-04 17:16:28 1974616 ----a-w- C:\Windows\SysWow64\D3DCompiler_42.dll

2013-05-04 17:16:26 1892184 ----a-w- C:\Windows\SysWow64\D3DX9_42.dll

2013-05-04 17:16:25 3495784 ----a-w- C:\Windows\SysWow64\d3dx9_33.dll

2013-05-04 17:15:43 -------- d-----w- C:\Users\Trinity\AppData\Local\ApplicationHistory

2013-05-04 17:14:38 -------- d-----w- C:\Windows\SysWow64\URTTEMP

2013-05-04 17:13:03 -------- d-----w- C:\ProgramData\Turbine

2013-05-04 17:12:53 -------- d-----w- C:\ProgramData\HappyCloud

2013-04-28 20:30:03 -------- d-----w- C:\Users\Trinity\AppData\Local\2DBoy

2013-04-28 20:30:03 -------- d-----w- C:\ProgramData\2DBoy

2013-04-24 01:05:58 1656680 ----a-w- C:\Windows\System32\drivers\ntfs.sys

2013-04-23 03:52:36 0 ----a-w- C:\Windows\SysWow64\shoE84B.tmp

2013-04-23 03:30:01 -------- d-----w- C:\Program Files (x86)\Launch Manager

2013-04-23 00:16:47 -------- d-----w- C:\Users\Trinity\AppData\Local\ElevatedDiagnostics

2013-04-22 21:33:13 -------- d-----w- C:\ProgramData\Acer

2013-04-22 19:45:41 -------- d-----w- C:\Users\Trinity\AppData\Roaming\EscapeFromParadise2

2013-04-21 22:23:31 -------- d-----w- C:\Users\Trinity\AppData\Roaming\qBittorrent

2013-04-21 22:23:03 -------- d-----w- C:\Users\Trinity\AppData\Roaming\Easy BitTorrent Client

2013-04-21 22:23:03 -------- d-----w- C:\Users\Trinity\AppData\Local\Easy BitTorrent Client

2013-04-21 12:24:06 163504 ----a-w- C:\ProgramData\Microsoft\Windows\Sqm\Manifest\Sqm10144.bin

2013-04-20 18:13:54 -------- d-----w- C:\Games

2013-04-20 13:01:09 -------- d-----w- C:\Program Files (x86)\iWin.com

2013-04-20 13:00:12 -------- d-----w- C:\ProgramData\iWin Games

2013-04-20 13:00:03 -------- d-----w- C:\Program Files (x86)\iWin Games

2013-04-18 16:45:55 -------- d-----w- C:\Users\Trinity\AppData\Roaming\runic games

2013-04-18 16:38:43 -------- d-----w- C:\Users\Trinity\AppData\Roaming\Namco

2013-04-17 20:19:57 -------- d-----w- C:\Users\Trinity\AppData\Local\Grubby Games

2013-04-17 20:18:31 -------- d-----w- C:\ProgramData\Big Fish Games

2013-04-17 20:17:41 -------- d-----w- C:\BigFishGamesCache

.

==================== Find3M ====================

.

2013-05-02 07:06:08 278800 ------w- C:\Windows\System32\MpSigStub.exe

2013-04-23 03:28:47 281680 ----a-w- C:\Windows\UNINSTLMv4.EXE

2013-04-13 05:49:23 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

2013-04-13 05:49:19 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

2013-04-13 05:49:19 308736 ----a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll

2013-04-13 05:49:19 111104 ----a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll

2013-04-13 04:45:16 474624 ----a-w- C:\Windows\apppatch\AcSpecfc.dll

2013-04-13 04:45:15 2176512 ----a-w- C:\Windows\apppatch\AcGenral.dll

2013-04-10 06:01:54 265064 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys

2013-04-10 03:30:50 3153920 ----a-w- C:\Windows\System32\win32k.sys

2013-04-05 01:08:44 2312704 ----a-w- C:\Windows\System32\jscript9.dll

2013-04-05 01:00:30 1392128 ----a-w- C:\Windows\System32\wininet.dll

2013-04-05 00:59:24 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl

2013-04-05 00:56:16 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

2013-04-05 00:55:47 599040 ----a-w- C:\Windows\System32\vbscript.dll

2013-04-04 22:11:34 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll

2013-04-04 22:02:59 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

2013-04-04 22:02:17 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll

2013-04-04 21:58:51 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

2013-04-04 21:57:45 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll

2013-04-04 18:50:32 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys

2013-03-19 06:04:06 5550424 ----a-w- C:\Windows\System32\ntoskrnl.exe

2013-03-19 05:53:58 48640 ----a-w- C:\Windows\System32\wwanprotdim.dll

2013-03-19 05:53:58 230400 ----a-w- C:\Windows\System32\wwansvc.dll

2013-03-19 05:46:56 43520 ----a-w- C:\Windows\System32\csrsrv.dll

2013-03-19 05:04:13 3968856 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe

2013-03-19 05:04:10 3913560 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe

2013-03-19 04:47:50 6656 ----a-w- C:\Windows\SysWow64\apisetschema.dll

2013-03-19 03:06:33 112640 ----a-w- C:\Windows\System32\smss.exe

2013-03-06 03:51:31 963488 ----a-w- C:\Windows\System32\deployJava1.dll

2013-03-06 03:51:31 1085344 ----a-w- C:\Windows\System32\npDeployJava1.dll

2013-03-06 03:51:31 108448 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll

2013-03-06 03:50:25 95648 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

2013-03-06 03:50:25 861088 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll

2013-03-06 03:50:25 782240 ----a-w- C:\Windows\SysWow64\deployJava1.dll

2013-02-27 06:02:44 111448 ----a-w- C:\Windows\System32\consent.exe

2013-02-27 05:48:00 1930752 ----a-w- C:\Windows\System32\authui.dll

2013-02-27 05:47:10 70144 ----a-w- C:\Windows\System32\appinfo.dll

2013-02-27 04:49:24 1796096 ----a-w- C:\Windows\SysWow64\authui.dll

.

============= FINISH: 10:59:14.15 ===============

SableRayven · May 16, 2013

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume2

Install Date: 3/4/2013 10:39:33 PM

System Uptime: 5/16/2013 10:36:50 AM (0 hours ago)

.

Motherboard: Acer | | JE50_HR

Processor: Intel® Core i7-2630QM CPU @ 2.00GHz | CPU1 | 2001/1333mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 581 GiB total, 522.967 GiB free.

D: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

No restore point in system.

.

==== Installed Programs ======================

.

A Magnetic Adventure

Acer Backup Manager

Acer Crystal Eye Webcam

Acer ePower Management

Acer eRecovery Management

Acer Games

Acer Registration

Acer ScreenSaver

Acer Updater

Acrobat.com

Adobe AIR

Adobe Digital Editions 2.0

Adobe Flash Player 10 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader 9.1 MUI

Agatha Christie - 4:50 from Paddington

Backup Manager V3

Bee Garden

Bejeweled 2 Deluxe

Broadcom Card Reader Driver Installer

Broadcom Gigabit NetLink Controller

Buccaneer

Build-a-lot

Build-a-lot 2

CCleaner

Chuzzle Deluxe

clear.fi

clear.fi Client

Cute Knight

D3DX10

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

Defraggler

Diner Dash 2 Restaurant Rescue

Dolby Advanced Audio v2

Dora's World Adventure

Dream Builder: Amusement Park

Escape from Paradise 2 - A Kingdoms Quest

FATE - The Traitor Soul

Final Drive: Nitro

Galerie de photos Windows Live

Google Chrome

Google Update Helper

Haiku Journey

Happy Cloud Client

Identity Card

Intel® Control Center

Intel® Management Engine Components

Intel® Processor Graphics

Intel® Rapid Storage Technology

Intel® Turbo Boost Technology Monitor 2.0

iWin Games (remove only)

Java 7 Update 17

Java 7 Update 17 (64-bit)

Java Auto Updater

Jewel Quest Heritage

Jojo's Fashion Show World Tour

Junk Mail filter update

K-Lite Codec Pack 8.7.0 (Full)

Launch Manager

Malwarebytes Anti-Malware version 1.75.0.1300

Master of Alchemy

Matches and Matrimony

Mesh Runtime

Microsoft .NET Framework 1.1

Microsoft .NET Framework 4 Client Profile

Microsoft Application Error Reporting

Microsoft Office 2010

Microsoft Office 2010 Service Pack 1 (SP1)

Microsoft Office Access MUI (English) 2010

Microsoft Office Access Setup Metadata MUI (English) 2010

Microsoft Office Click-to-Run 2010

Microsoft Office Excel MUI (English) 2010

Microsoft Office Office 64-bit Components 2010

Microsoft Office OneNote MUI (English) 2010

Microsoft Office Outlook MUI (English) 2010

Microsoft Office PowerPoint MUI (English) 2010

Microsoft Office Professional 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (Spanish) 2010

Microsoft Office Proofing (English) 2010

Microsoft Office Publisher MUI (English) 2010

Microsoft Office Shared 64-bit MUI (English) 2010

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010

Microsoft Office Shared MUI (English) 2010

Microsoft Office Shared Setup Metadata MUI (English) 2010

Microsoft Office Single Image 2010

Microsoft Office Starter 2010 - English

Microsoft Office Word MUI (English) 2010

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Mobipocket Reader 6.2

Mozilla Firefox 20.0.1 (x86 en-US)

Mozilla Maintenance Service

MSVCRT

MSVCRT_amd64

Mystery P.I. - Stolen in San Francisco

MyWinLocker

MyWinLocker 4

MyWinLocker Suite

Namco All-Stars: PAC-MAN

NTI Media Maker 9

Penguins!

Plants vs. Zombies - Game of the Year

Poker Superstars III

Polar Bowler

Polar Golfer

Realtek High Definition Audio Driver

Renesas Electronics USB 3.0 Host Controller Driver

Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition

Security Update for Microsoft Filter Pack 2.0 (KB2553501) 32-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2760406) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553091)

Security Update for Microsoft Office 2010 (KB2553096)

Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition

Security Update for Microsoft OneNote 2010 (KB2760600) 32-Bit Edition

Security Update for Microsoft Publisher 2010 (KB2553147) 32-Bit Edition

Security Update for Microsoft Visio 2010 (KB2810068) 32-Bit Edition

Security Update for Microsoft Visio Viewer 2010 (KB2687505) 32-Bit Edition

Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition

Shaman Odyssey - Tropic Adventure

Shredder

Snapshot Adventures

Speccy

Spellagories

Synaptics Pointing Device Driver

Tasty Planet

Tasty Planet: Back for Seconds

Teddy Factory

The Lord of the Rings Online

Torchlight

Totem Tribe

Tradewinds

Update for Microsoft Office 2010 (KB2553065)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition

Update for Microsoft Office 2010 (KB2566458)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition

Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition

Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition

Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition

Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition

Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition

Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition

Update Installer for WildTangent Games App

VC80CRTRedist - 8.0.50727.6195

Virtual Families

Virtual Families 2

Virtual Villagers 4 - The Tree of Life

Virtual Villagers 5 - New Believers

Welcome Center

WildTangent Games

WildTangent Games App

WildTangent Games App (Acer Games)

Windows Live

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Language Selector

Windows Live Mail

Windows Live Mesh

Windows Live Messenger

Windows Live MIME IFilter

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live Remote Client

Windows Live Remote Client Resources

Windows Live Remote Service

Windows Live Remote Service Resources

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

World of Goo

ZoomBook - The Temple of the Sun

Zuma's Revenge

.

==== Event Viewer Messages From Past Week ========

.

5/9/2013 8:44:15 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MMCSS service.

5/9/2013 8:44:15 AM, Error: Service Control Manager [7000] - The Multimedia Class Scheduler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

5/9/2013 8:43:45 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Schedule service.

5/9/2013 8:43:15 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the wuauserv service.

5/9/2013 8:42:15 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the EapHost service.

5/9/2013 8:41:45 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

5/9/2013 8:40:15 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the BITS service.

5/9/2013 8:39:15 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Appinfo service.

5/16/2013 8:04:41 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008, Server 2008 R2 for x64 (KB2804576).

5/16/2013 7:59:40 AM, Error: volsnap [14] - The shadow copies of volume C: were aborted because of an IO failure on volume C:.

5/16/2013 7:53:53 AM, Error: Service Control Manager [7022] - The Windows Update service hung on starting.

5/10/2013 7:56:46 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR2.

.

==== End Of File ===========================

Maurice Naggar · May 19, 2013

Hello SableR and welcome to MalwareBytes forum.

You appear to have been overlooked because you made 3 successive posts in a row, without waiting for the 1st response from a authorized helper.

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.

For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Disconnect any external storage drives from the computer.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select the Repair your computer menu item.
Select English as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.

OR If you have the Windows o.s. DVD, then To enter System Recovery Options, by using Windows installation disc:

Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select English as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

On the System Recovery Options menu you will get the following options:

- Startup Repair
- System Restore
- Windows Complete PC Restore
- Windows Memory Diagnostic Tool
- Command Prompt

[*]Select Command Prompt

Now, Plug the flashdrive with FRST tool into the PC.

[*]In the command window type in notepad and press Enter.

[*]The notepad opens. Under File menu select Open.

[*]Select "Computer" and find your flash drive letter and close the notepad.

[*]In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter

Note: Replace letter e with the drive letter of your flash drive.

[*]The tool will start to run.

[*]When the tool opens click Yes to disclaimer.

[*]Press Scan button.

[*]It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

Maurice Naggar · May 22, 2013

How is it going? Are you still around ?

If I do not hear back from you very soon, I will then consider this as abandoned & would close this.

SableRayven · May 23, 2013

yes, I'm here. Sorry about that I did not get your email notification until just now. Like I said before my computer is not working very well. I'll follow your instructions on the previous post and get back with you asap.

SableRayven · May 23, 2013

Alright this is what that gave me(not that I understand any of it lol):

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-05-2013 01

Ran by SYSTEM on 23-05-2013 09:59:40

Running from G:\

Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)

Internet Explorer Version 9

Boot Mode: Recovery

The current controlset is ControlSet001

ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [intelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" [4526 2010-10-08] ()

HKLM\...\Run: [synTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)

HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [11785832 2011-03-10] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4 [2189416 2011-03-08] (Realtek Semiconductor)

HKLM\...\Run: [Power Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1796200 2011-02-22] (Acer Incorporated)

HKLM-x32\...\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)

HKLM-x32\...\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [340336 2010-09-27] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe" [407920 2010-09-17] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d [201584 2010-09-17] (Egis Technology Inc.)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [35696 2009-02-27] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k [297280 2011-02-15] (NTI Corporation)

HKLM-x32\...\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [113288 2010-04-26] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart [506712 2011-02-03] (Dolby Laboratories Inc.)

HKLM-x32\...\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM-x32\...\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2013-04-22] (Dritek System Inc.)

HKU\Default\...\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} [x]

HKU\Default User\...\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} [x]

==================== Services (Whitelisted) =================

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2011-02-15] (NTI Corporation)

==================== Drivers (Whitelisted) ====================

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-05-23 09:59 - 2013-05-23 09:59 - 00000000 ____D C:\FRST

2013-05-23 06:46 - 2013-05-23 06:46 - 01878472 ____A (Farbar) C:\Users\Trinity\Downloads\FRST64.exe

2013-05-23 06:37 - 2013-05-23 06:37 - 00295144 ____A C:\Users\Trinity\Downloads\American Harry Prequel 40.htm

2013-05-23 06:36 - 2013-05-23 06:36 - 00000813 ____A C:\Users\Trinity\Downloads\Chapter 25 Temp Review Responses.txt

2013-05-21 04:45 - 2013-05-21 11:56 - 00000000 ____D C:\Users\Trinity\Desktop\Manga

2013-05-20 16:33 - 2013-05-20 16:33 - 01858040 ____A (Coupons.com Incorporated) C:\Users\Trinity\Downloads\CouponPrinter.exe

2013-05-20 04:09 - 2013-05-20 04:11 - 00000000 ____D C:\5c38e8688987a12b88722c5948

2013-05-19 05:02 - 2013-05-19 05:06 - 00000000 ____D C:\d2f3026c5dce386e2deb51

2013-05-16 16:56 - 2013-05-16 16:56 - 00001117 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-05-16 16:56 - 2013-05-16 16:56 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-05-16 16:56 - 2013-04-04 11:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys

2013-05-16 16:55 - 2013-05-16 16:55 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\Trinity\Downloads\mbam-setup-1.75.0.1300.exe

2013-05-16 09:26 - 2013-05-16 09:26 - 00000000 ____D C:\Users\Trinity\AppData\Roaming\dingogames

2013-05-16 09:26 - 2013-05-16 09:26 - 00000000 ____D C:\ProgramData\dingogames

2013-05-16 07:59 - 2013-05-16 07:59 - 00022211 ____A C:\Users\Trinity\Desktop\dds.txt

2013-05-16 07:59 - 2013-05-16 07:59 - 00009745 ____A C:\Users\Trinity\Desktop\attach.txt

2013-05-16 07:57 - 2013-05-16 07:57 - 00688992 ____R (Swearware) C:\Users\Trinity\Desktop\dds.com

2013-05-16 07:42 - 2013-05-16 07:42 - 00945272 ____A (Prevx) C:\Users\Trinity\Downloads\prevxcsibus.exe

2013-05-16 07:42 - 2013-05-16 07:42 - 00945272 ____A (Prevx) C:\Users\Trinity\Downloads\717D47915A5042389969.EXE

2013-05-16 07:42 - 2013-05-16 07:42 - 00000052 ____A C:\Windows\wininit.ini

2013-05-16 07:42 - 2013-05-16 07:42 - 00000000 ____D C:\ProgramData\PrevxCSI

2013-05-16 07:25 - 2013-05-16 16:59 - 00000168 ____A C:\Windows\setupact.log

2013-05-16 07:25 - 2013-05-16 07:25 - 00000000 ____A C:\Windows\setuperr.log

2013-05-16 07:22 - 2013-05-16 07:23 - 00014086 ____A C:\Users\Trinity\Desktop\cc_20130516_102208.reg

2013-05-16 04:38 - 2013-05-16 04:38 - 00000000 ____D C:\18c9759adbc9954f12

2013-05-16 04:38 - 2013-05-05 13:36 - 17818624 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-05-16 04:38 - 2013-05-05 13:16 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-05-16 04:38 - 2013-05-05 11:25 - 12324864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-05-16 04:38 - 2013-05-05 11:12 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-05-16 04:37 - 2013-04-04 17:19 - 10926080 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-05-16 04:37 - 2013-04-04 17:08 - 02312704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-05-16 04:37 - 2013-04-04 17:01 - 01346560 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-05-16 04:37 - 2013-04-04 17:00 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-05-16 04:37 - 2013-04-04 16:59 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2013-05-16 04:37 - 2013-04-04 16:58 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll

2013-05-16 04:37 - 2013-04-04 16:57 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2013-05-16 04:37 - 2013-04-04 16:56 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe

2013-05-16 04:37 - 2013-04-04 16:55 - 00816640 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-05-16 04:37 - 2013-04-04 16:55 - 00599040 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2013-05-16 04:37 - 2013-04-04 16:54 - 02147840 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-05-16 04:37 - 2013-04-04 16:54 - 00729088 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-05-16 04:37 - 2013-04-04 16:51 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2013-05-16 04:37 - 2013-04-04 16:46 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-05-16 04:37 - 2013-04-04 14:11 - 01800704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-05-16 04:37 - 2013-04-04 14:09 - 09738752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-05-16 04:37 - 2013-04-04 14:02 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-05-16 04:37 - 2013-04-04 14:02 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-05-16 04:37 - 2013-04-04 14:02 - 01104384 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-05-16 04:37 - 2013-04-04 14:01 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-05-16 04:37 - 2013-04-04 13:59 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-05-16 04:37 - 2013-04-04 13:58 - 00717824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-05-16 04:37 - 2013-04-04 13:58 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-05-16 04:37 - 2013-04-04 13:57 - 00420864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-05-16 04:37 - 2013-04-04 13:56 - 00607744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-05-16 04:37 - 2013-04-04 13:55 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-05-16 04:37 - 2013-04-04 13:54 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-05-16 04:37 - 2013-04-04 13:50 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-05-15 10:49 - 2013-04-09 22:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys

2013-05-15 10:49 - 2013-04-09 22:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys

2013-05-15 10:49 - 2013-04-09 19:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys

2013-05-15 10:49 - 2013-03-18 21:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll

2013-05-15 10:49 - 2013-03-18 21:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll

2013-05-15 10:49 - 2013-02-26 22:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe

2013-05-15 10:49 - 2013-02-26 21:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll

2013-05-15 10:49 - 2013-02-26 21:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll

2013-05-15 10:49 - 2013-02-26 21:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll

2013-05-15 10:49 - 2013-02-26 21:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll

2013-05-15 10:49 - 2013-02-26 20:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-05-15 10:49 - 2013-02-26 20:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-05-15 10:49 - 2013-02-26 20:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-05-15 10:49 - 2011-02-03 03:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll

2013-05-12 10:08 - 2013-05-12 10:08 - 00004258 ____A C:\Users\School\Downloads\Heather's First Draft

2013-05-10 06:48 - 2013-05-10 07:10 - 00000000 ____D C:\Users\Trinity\AppData\Roaming\Mobipocket

2013-05-10 06:48 - 2013-05-10 06:48 - 00282293 ____A C:\Users\Trinity\Downloads\last mercenary the - diana palmer.mobi

2013-05-10 06:48 - 2013-05-10 06:48 - 00000000 ____D C:\Users\Trinity\Documents\My eBooks

2013-05-10 06:45 - 2013-05-10 06:45 - 00003083 ____A C:\Users\Trinity\Desktop\Mobipocket Reader.lnk

2013-05-10 06:45 - 2013-05-10 06:45 - 00000000 ____D C:\Program Files (x86)\Mobipocket.com

2013-05-10 06:44 - 2013-05-10 06:44 - 05606400 ____A C:\Users\Trinity\Downloads\mobireadersetup.msi

2013-05-10 06:42 - 2013-05-10 06:44 - 23407736 ____A ( ) C:\Users\Trinity\Downloads\setup.exe

2013-05-09 20:31 - 2013-05-13 16:37 - 00000000 ____D C:\Users\Trinity\Documents\New folder

2013-05-09 20:30 - 2013-05-09 20:30 - 00138421 ____A C:\Users\Trinity\Downloads\Next I go to Seven Gates.html

2013-05-09 20:30 - 2013-05-09 20:30 - 00034401 ____A C:\Users\Trinity\Downloads\In the Springtime of His.mobi

2013-05-07 11:11 - 2013-05-07 11:11 - 00000000 ____D C:\Users\Trinity\AppData\Local\Macromedia

2013-05-07 11:10 - 2013-05-07 11:10 - 00691592 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-05-07 11:10 - 2013-05-07 11:10 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-05-07 11:10 - 2013-05-07 11:10 - 00000000 ____D C:\Windows\System32\Macromed

2013-05-07 11:09 - 2013-05-07 11:09 - 00001155 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk

2013-05-07 11:09 - 2013-05-07 11:09 - 00000000 ____D C:\Users\Trinity\AppData\Roaming\Mozilla

2013-05-07 11:09 - 2013-05-07 11:09 - 00000000 ____D C:\Users\Trinity\AppData\Local\Mozilla

2013-05-07 11:09 - 2013-05-07 11:09 - 00000000 ____D C:\ProgramData\Mozilla

2013-05-07 11:09 - 2013-05-07 11:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-05-07 11:09 - 2013-05-07 11:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-05-07 11:08 - 2013-05-07 11:08 - 21036128 ____A (Mozilla) C:\Users\Trinity\Downloads\Firefox Setup 20.0.1.exe

2013-05-07 10:55 - 2013-05-07 10:55 - 00000000 ____D C:\Users\Trinity\AppData\Local\{8D8669B4-799C-42F5-81D1-CAF93E46BAA5}

2013-05-07 10:55 - 2013-05-07 10:55 - 00000000 ____D C:\Users\Trinity\AppData\Local\{8A8EA87C-DFC7-48E2-9C22-B4B33EB59B7E}

2013-05-07 10:54 - 2013-05-07 10:55 - 00000000 ____D C:\Users\Trinity\AppData\Local\Windows Live Writer

2013-05-07 10:54 - 2013-05-07 10:54 - 00000000 ____D C:\Users\Trinity\AppData\Roaming\Windows Live Writer

2013-05-04 09:34 - 2013-05-04 09:34 - 00000000 ____D C:\Users\Trinity\AppData\Local\Chromium

2013-05-04 09:31 - 2013-05-04 09:31 - 00000000 ____D C:\Users\Trinity\AppData\Local\The Lord of the Rings Online

2013-05-04 09:21 - 2013-05-04 09:21 - 00000095 ____A C:\Users\Trinity\AppData\Local\fusioncache.dat

2013-05-04 09:19 - 2013-05-04 15:49 - 00002049 ____A C:\Users\Trinity\Desktop\The Lord of the Rings Online™.lnk

2013-05-04 09:19 - 2013-05-04 09:48 - 00000000 ____D C:\Users\Trinity\Documents\The Lord of the Rings Online

2013-05-04 09:19 - 2013-05-04 09:22 - 00000000 ____D C:\Users\Trinity\AppData\Local\Turbine

2013-05-04 09:16 - 2009-09-04 14:29 - 01974616 ____A (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2013-05-04 09:16 - 2009-09-04 14:29 - 01892184 ____A (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2013-05-04 09:16 - 2009-09-04 14:29 - 00235344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2013-05-04 09:16 - 2007-03-12 13:42 - 03495784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2013-05-04 09:13 - 2013-05-04 09:13 - 00000000 ____D C:\ProgramData\Turbine

2013-05-04 09:12 - 2013-05-13 08:40 - 00000000 ____D C:\ProgramData\HappyCloud

2013-05-04 09:12 - 2013-05-04 09:12 - 04010432 ____A C:\Users\Trinity\Downloads\LOTROProgressive_1.368.exe

2013-05-03 02:55 - 2013-05-03 02:55 - 00000000 ____D C:\Users\School\AppData\Roaming\Malwarebytes

2013-05-02 06:32 - 2013-05-02 06:32 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-05-02 06:32 - 2013-05-02 06:32 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-04-28 18:53 - 2013-04-28 18:53 - 00001650 ____A C:\Users\School\Desktop\URLLink.acsm

2013-04-28 12:30 - 2013-04-28 12:30 - 00000000 ____D C:\Users\Trinity\AppData\Local\2DBoy

2013-04-28 12:30 - 2013-04-28 12:30 - 00000000 ____D C:\ProgramData\2DBoy

2013-04-28 11:44 - 2013-04-28 11:45 - 06640101 ____A C:\Users\School\Desktop\Climate Change-HeatherHeath.pptx

2013-04-27 11:45 - 2013-04-27 11:45 - 00000000 ____D C:\ProgramData\PlayFirst

2013-04-27 10:09 - 2013-04-27 10:09 - 00001392 ____A C:\Users\School\Downloads\AFA2.tmp

2013-04-27 09:45 - 2013-04-28 18:54 - 00000000 ____D C:\Users\School\Documents\My Digital Editions

2013-04-27 09:45 - 2013-04-27 09:45 - 00000000 ____D C:\Users\School\AppData\Local\Adobe_Systems_Incorporate

2013-04-24 12:47 - 2013-04-24 12:47 - 00000000 ____D C:\Users\Trinity\Documents\Master of Alchemy

2013-04-23 17:05 - 2013-04-12 06:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys

==================== One Month Modified Files and Folders =======

2013-05-23 09:59 - 2013-05-23 09:59 - 00000000 ____D C:\FRST

2013-05-23 06:56 - 2013-03-04 21:51 - 01184877 ____A C:\Windows\WindowsUpdate.log

2013-05-23 06:51 - 2009-07-13 20:45 - 00016976 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-05-23 06:51 - 2009-07-13 20:45 - 00016976 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-05-23 06:46 - 2013-05-23 06:46 - 01878472 ____A (Farbar) C:\Users\Trinity\Downloads\FRST64.exe

2013-05-23 06:37 - 2013-05-23 06:37 - 00295144 ____A C:\Users\Trinity\Downloads\American Harry Prequel 40.htm

2013-05-23 06:36 - 2013-05-23 06:36 - 00000813 ____A C:\Users\Trinity\Downloads\Chapter 25 Temp Review Responses.txt

2013-05-23 06:27 - 2013-03-05 14:17 - 00000900 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-05-22 13:58 - 2013-03-04 19:39 - 00000000 ____D C:\Users\Trinity\AppData\Local\Windows Live

2013-05-22 07:07 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache

2013-05-21 11:56 - 2013-05-21 04:45 - 00000000 ____D C:\Users\Trinity\Desktop\Manga

2013-05-21 08:34 - 2009-07-13 21:13 - 00733930 ____A C:\Windows\System32\PerfStringBackup.INI

2013-05-20 18:27 - 2013-03-05 14:17 - 00000896 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-05-20 16:33 - 2013-05-20 16:33 - 01858040 ____A (Coupons.com Incorporated) C:\Users\Trinity\Downloads\CouponPrinter.exe

2013-05-20 04:11 - 2013-05-20 04:09 - 00000000 ____D C:\5c38e8688987a12b88722c5948

2013-05-19 05:06 - 2013-05-19 05:02 - 00000000 ____D C:\d2f3026c5dce386e2deb51

2013-05-16 17:53 - 2013-03-06 14:57 - 00002792 ____A C:\Users\Trinity\Desktop\vba.ini

2013-05-16 17:00 - 2013-03-05 14:16 - 00000000 ____D C:\ProgramData\clear.fi

2013-05-16 16:59 - 2013-05-16 07:25 - 00000168 ____A C:\Windows\setupact.log

2013-05-16 16:59 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT