Jump to content

Need help with VuuPC Installer Removal


Recommended Posts

  Hi,

 

I recently got a new laptop, and it's been upgraded to Windows 8.1.

 

I'm not that great with Computers, but i've had the dreaded VuuPC Pop Up Problem.

 

I've used the guides given in various threads on these forums on how to remove VuuPC but i have no idea what i'm doing.

 

I guess it's best get an expert to take a look at the logs?

 

I've used Malware Bytes and Avast! and the problem went till I restarted my computer.

 

I would really appreciate any help you can provide me with. 

 

Thanks very much, 

 

Observer

Link to post
Share on other sites

Hello and post-32477-1261866970.gif

 

P2P/Piracy Warning:

 

   

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

Download Farbar Recovery Scan Tool and save it to your desktop.

 

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.


Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

Kevin...

Link to post
Share on other sites

Hey,

 

FRST.txt is as follows (On TWO Posts)

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-04-2014 03

Ran by M (administrator) on MAB on 26-04-2014 19:21:55
Running from C:\Users\M\Downloads
Windows 8.1 (Update 1) (X64) OS Language: English(UK)
Internet Explorer Version 11
Boot Mode: Normal
 
The only official download link for FRST:
Download link for 32-Bit version:
Download link for 64-Bit Version:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(AMD) C:\WINDOWS\system32\atiesrxx.exe
(AMD) C:\WINDOWS\system32\atieclxx.exe
(Hewlett-Packard Company) C:\WINDOWS\system32\Hpservice.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Hewlett-Packard Development Company, L.P.) c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
() C:\Users\M\AppData\Roaming\InstallW\IWsrv.exe
() C:\Program Files (x86)\NetTock\updateNetTock.exe
() C:\Program Files (x86)\NetTock\bin\utilNetTock.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-06-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-04-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-05-22] (CyberLink Corp.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-24] (AVAST Software)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [1045304 2013-12-25] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-07-24] (Hewlett-Packard Company)
HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] - "c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\NCPluginUpdater.exe" Update [21720 2014-04-22] (Hewlett-Packard)
HKU\S-1-5-21-1532226299-423207067-3883143593-1002\...\Run: [Power2GoExpress8] => C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe [1713416 2013-08-05] (CyberLink Corp.)
HKU\S-1-5-21-1532226299-423207067-3883143593-1002\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55360 2014-04-11] (Raptr, Inc)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPNOT13/2
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPNOT13/2
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM - {9F569FEB-78EB-4001-89DA-E9896F39210D} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/710-29550-11896-25/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=cmi_14_17_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDtCtD0A0EyCtB0AzyyBtAtN0D0Tzu0SzzyEyDtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StC0BtDyD0B0A0AyDtGtDtCtCyEtGyDtDyByCtGtB0DyB0CtGtBtCtAyB0B0BzytA0B0E0D0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDzytBzz0BtAyByCtG0F0CtCzztGtA0D0FyCtGzy0BzyzztGtCzyzyyEtDtC0DyEtD0E0F0B2Q&cr=1977682060&ir=
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=cmi_14_17_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDtCtD0A0EyCtB0AzyyBtAtN0D0Tzu0SzzyEyDtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StC0BtDyD0B0A0AyDtGtDtCtCyEtGyDtDyByCtGtB0DyB0CtGtBtCtAyB0B0BzytA0B0E0D0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDzytBzz0BtAyByCtG0F0CtCzztGtA0D0FyCtGzy0BzyzztGtCzyzyyEtDtC0DyEtD0E0F0B2Q&cr=1977682060&ir=
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: NetTock - {3cfaf932-a9cb-4e59-99a0-fe04e9df9328} - C:\Program Files (x86)\NetTock\NetTockbho.dll No File
BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100
 
FireFox:
========
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
Chrome: 
=======
CHR DefaultSearchKeyword: google.co.uk
CHR Extension: (Google Docs) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-24]
CHR Extension: (Google Drive) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-24]
CHR Extension: (YouTube) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-24]
CHR Extension: (Adblock Plus) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-24]
CHR Extension: (Google Search) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-24]
CHR Extension: (avast! Online Security) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-04-24]
CHR Extension: (TinEye Reverse Image Search) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl [2014-04-24]
CHR Extension: (Allow Right-Click) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\hompjdfbfmmmgflfjdlnkohcplmboaeo [2014-04-24]
CHR Extension: (Google Wallet) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-24]
CHR Extension: (Gmail) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-24]
CHR Extension: (Lonely Tree, Colorful Sky) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnamgjfnfbmklnbfkklbmaliddkehejf [2014-04-24]
CHR HKLM\...\Chrome\Extension: [iagcajndpnfncplednpbnkahadegklfa] - C:\Users\M\AppData\Local\speedial.crx [2014-04-24]
CHR HKCU\...\Chrome\Extension: [iagcajndpnfncplednpbnkahadegklfa] - C:\Users\M\AppData\Local\speedial.crx [2014-04-24]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-24]
CHR HKLM-x32\...\Chrome\Extension: [iagcajndpnfncplednpbnkahadegklfa] - C:\Users\M\AppData\Local\speedial.crx [2014-04-24]
 
==================== Services (Whitelisted) =================
 
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-17] (Advanced Micro Devices, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-24] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2211000 2014-03-30] (Microsoft Corporation)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-09-05] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [298760 2013-09-05] (CyberLink)
R2 HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [1039160 2013-12-25] (Hewlett-Packard Development Company, L.P.)
R2 iwsr; C:\Users\M\AppData\Roaming\InstallW\IWsrv.exe [355328 2014-04-23] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-19] (Realtek Semiconductor)
R2 Update NetTock; C:\Program Files (x86)\NetTock\updateNetTock.exe [350488 2014-04-24] ()
R2 Util NetTock; C:\Program Files (x86)\NetTock\bin\utilNetTock.exe [350488 2014-04-24] ()
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-24] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
 
==================== Drivers (Whitelisted) ====================
 
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [37472 2013-02-14] (Advanced Micro Devices, Inc.)
S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-24] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-04-24] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-24] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-24] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-24] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-24] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-24] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-04-24] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-24] ()
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3880448 2013-11-13] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98744 2013-04-24] (Advanced Micro Devices)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows ® Win 7 DDK provider)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-18] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-26] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-03-18] (Microsoft Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [290008 2014-04-25] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-18] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29424 2013-06-05] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [33008 2013-06-05] (Synaptics Incorporated)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2014-03-18] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-04-24] (Microsoft Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-04-26 19:21 - 2014-04-26 19:22 - 00022371 _____ () C:\Users\M\Downloads\FRST.txt
2014-04-26 19:21 - 2014-04-26 19:21 - 00000000 ____D () C:\FRST
2014-04-26 19:20 - 2014-04-26 19:20 - 02061824 _____ (Farbar) C:\Users\M\Downloads\FRST64.exe
2014-04-26 12:06 - 2014-04-26 12:06 - 00001081 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-26 12:06 - 2014-04-26 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-04-26 12:06 - 2014-04-26 12:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-26 12:06 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-26 12:06 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-26 12:06 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-04-26 12:02 - 2014-04-26 12:02 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\M\Downloads\mbam-setup-2.0.1.1004 (1).exe
2014-04-26 11:24 - 2014-04-26 11:24 - 00000000 ____D () C:\Users\M\AppData\Roaming\CyberLink
2014-04-26 11:21 - 2014-04-26 11:21 - 00000410 _____ () C:\WINDOWS\PFRO.log
2014-04-25 20:40 - 2014-04-26 19:03 - 00000000 ____D () C:\Users\M\AppData\Roaming\TS3Client
2014-04-25 20:40 - 2014-04-25 20:40 - 00000986 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-04-25 20:40 - 2014-04-25 20:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-04-25 20:40 - 2014-04-25 20:40 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-04-25 20:39 - 2014-04-25 20:39 - 29498592 _____ (TeamSpeak Systems GmbH) C:\Users\M\Downloads\TeamSpeak3-Client-win64-3.0.14.exe
2014-04-25 20:33 - 2014-04-25 20:33 - 01007930 _____ () C:\Users\M\Downloads\amddriverdownload_installer (2).exe
2014-04-25 20:28 - 2014-04-25 20:28 - 00000000 ____D () C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2014-04-25 20:28 - 2014-04-25 20:28 - 00000000 ____D () C:\Users\M\AppData\Roaming\library_dir
2014-04-25 20:27 - 2014-04-26 11:24 - 00000000 ____D () C:\Users\M\AppData\Roaming\Raptr
2014-04-25 20:27 - 2014-04-25 20:28 - 01007930 _____ () C:\Users\M\Downloads\amddriverdownload_installer (1).exe
2014-04-25 20:27 - 2014-04-25 20:28 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-04-25 20:26 - 2014-04-25 20:27 - 01007930 _____ () C:\Users\M\Downloads\amddriverdownload_installer.exe
2014-04-25 20:24 - 2014-04-25 20:24 - 00000000 ____D () C:\Users\M\Documents\My Games
2014-04-25 20:24 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-04-25 20:24 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-04-25 20:24 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-04-25 20:24 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-04-25 20:24 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-04-25 20:24 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-04-25 20:24 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-04-25 20:24 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-04-25 20:24 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-04-25 20:24 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-04-25 20:24 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-04-25 20:24 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-04-25 20:24 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-04-25 20:24 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-04-25 20:24 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-04-25 20:24 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-04-25 20:24 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-04-25 20:24 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-04-25 20:24 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-04-25 20:24 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-04-25 20:24 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-04-25 20:24 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-04-25 20:24 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-04-25 20:24 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-04-25 20:24 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-04-25 20:24 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2014-04-25 20:24 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-04-25 20:24 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-04-25 20:24 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-04-25 20:24 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-04-25 20:24 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-04-25 20:24 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-04-25 20:24 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-04-25 20:24 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-04-25 20:24 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-04-25 20:24 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-04-25 20:24 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2014-04-25 20:24 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2014-04-25 20:24 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-04-25 20:24 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-04-25 20:24 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-04-25 20:24 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-04-25 20:24 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-04-25 20:24 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-04-25 20:24 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-04-25 20:24 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-04-25 20:24 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-04-25 20:24 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-04-25 20:24 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2014-04-25 20:24 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2014-04-25 20:24 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-04-25 20:24 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-04-25 20:24 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-04-25 20:24 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-04-25 20:24 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-04-25 20:24 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-04-25 20:24 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-04-25 20:24 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-04-25 20:24 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2014-04-25 20:24 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-04-25 20:24 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-04-25 20:24 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-04-25 20:24 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-04-25 20:24 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-04-25 20:24 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-04-25 20:24 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-04-25 20:24 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-04-25 20:24 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-04-25 20:24 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-04-25 20:24 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2014-04-25 20:24 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2014-04-25 20:24 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-04-25 20:24 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-04-25 20:24 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-04-25 20:24 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-04-25 20:24 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-04-25 20:24 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-04-25 20:24 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-04-25 20:24 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-04-25 20:24 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-04-25 20:24 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-04-25 20:24 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2014-04-25 20:24 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2014-04-25 20:24 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-04-25 20:24 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-04-25 20:24 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-04-25 20:24 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-04-25 20:24 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-04-25 20:24 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-04-25 20:23 - 2014-04-25 20:24 - 00010021 _____ () C:\WINDOWS\DirectX.log
2014-04-25 20:23 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2014-04-25 20:23 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2014-04-25 20:23 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-04-25 20:23 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-04-25 20:23 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2014-04-25 20:23 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2014-04-25 20:23 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-04-25 20:23 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-04-25 20:23 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-04-25 20:23 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-04-25 20:23 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-04-25 20:23 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-04-25 20:23 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2014-04-25 20:23 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2014-04-25 20:23 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-04-25 20:23 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-04-25 20:23 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-04-25 20:23 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-04-25 20:23 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2014-04-25 20:23 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-04-25 20:23 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2014-04-25 20:23 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2014-04-25 20:23 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-04-25 20:23 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-04-25 20:23 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-04-25 20:23 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-04-25 20:23 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-04-25 20:23 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-04-25 20:23 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-04-25 20:23 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-04-25 20:23 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-04-25 20:23 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2014-04-25 20:23 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2014-04-25 20:23 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2014-04-25 20:23 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-04-25 20:23 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-04-25 20:23 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-04-25 20:23 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-04-25 20:23 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-04-25 20:23 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-04-25 20:23 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-04-25 20:23 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-04-25 20:23 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-04-25 20:23 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-04-25 20:23 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-04-25 20:23 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-04-25 20:23 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-04-25 20:23 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-04-25 20:23 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-04-25 20:23 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-04-25 20:23 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-04-25 20:23 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-04-25 20:23 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-04-25 20:23 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-04-25 20:23 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-04-25 20:23 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-04-25 20:23 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-04-25 20:23 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-04-25 20:23 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-04-25 20:23 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-04-25 20:23 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-04-25 20:23 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-04-25 20:23 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-04-25 20:23 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-04-25 20:23 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-04-25 20:23 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-04-25 20:23 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-04-25 20:23 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-04-25 20:23 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-04-25 20:23 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-04-25 20:23 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-04-25 20:23 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-04-25 20:23 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-04-25 20:23 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-04-25 18:52 - 2014-04-26 19:17 - 00000000 ____D () C:\Users\M\AppData\Roaming\Skype
2014-04-25 18:52 - 2014-04-25 18:52 - 00002713 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-04-25 18:52 - 2014-04-25 18:52 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-25 18:52 - 2014-04-25 18:52 - 00000000 ____D () C:\Users\M\AppData\Local\Skype
2014-04-25 18:52 - 2014-04-25 18:52 - 00000000 ____D () C:\ProgramData\Skype
2014-04-25 18:52 - 2014-04-25 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-04-25 18:51 - 2014-04-25 18:51 - 01678496 _____ (Skype Technologies S.A.) C:\Users\M\Downloads\SkypeSetup.exe
2014-04-25 16:08 - 2014-04-25 16:08 - 00626688 _____ () C:\Users\M\Downloads\Detection.msi
2014-04-25 16:06 - 2014-04-25 16:06 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-04-25 16:06 - 2014-04-25 16:06 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-04-25 16:06 - 2014-04-25 16:06 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-04-25 16:06 - 2014-04-25 16:06 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-04-25 16:06 - 2014-04-25 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-25 16:06 - 2014-04-25 16:06 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-25 16:03 - 2014-04-25 16:03 - 00921512 _____ (Oracle Corporation) C:\Users\M\Downloads\chromeinstall-7u55 (2).exe
2014-04-25 16:00 - 2014-04-25 16:08 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-04-25 16:00 - 2014-04-25 16:00 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab
2014-04-25 15:58 - 2014-04-25 15:58 - 00921512 _____ (Oracle Corporation) C:\Users\M\Downloads\chromeinstall-7u55 (1).exe
2014-04-25 15:58 - 2014-04-25 15:58 - 00000000 ____D () C:\Users\M\AppData\Roaming\Oracle
2014-04-25 15:57 - 2014-04-25 15:57 - 00000000 ____D () C:\Users\M\AppData\Local\MediaServer
2014-04-25 15:53 - 2014-04-25 15:53 - 00000000 ____D () C:\Users\M\AppData\Local\Downloaded Installations
2014-04-25 15:37 - 2014-04-25 15:37 - 00000296 _____ () C:\WINDOWS\setupact.log
2014-04-25 15:37 - 2014-04-25 15:37 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-04-25 15:37 - 2014-04-25 15:37 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-04-25 15:36 - 2014-04-25 15:37 - 00007004 _____ () C:\WINDOWS\DPINST.LOG
2014-04-25 15:36 - 2014-04-25 15:37 - 00001332 _____ () C:\WINDOWS\Synaptics.log
2014-04-25 15:36 - 2014-04-25 15:36 - 01795952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2014-04-25 15:36 - 2014-04-25 15:36 - 00722160 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2014-04-25 15:36 - 2014-04-25 15:36 - 00524016 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2014-04-25 15:36 - 2014-04-25 15:36 - 00421616 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo19.dll
2014-04-25 15:36 - 2014-04-25 15:36 - 00400112 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2014-04-25 15:36 - 2014-04-25 15:36 - 00251632 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2014-04-25 15:36 - 2014-04-25 15:36 - 00169712 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynTPCom.dll
2014-04-25 15:32 - 2014-04-25 15:31 - 00830680 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2014-04-25 15:32 - 2014-04-25 15:31 - 00074456 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2014-04-25 15:30 - 2014-04-25 16:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-25 15:30 - 2014-04-25 15:30 - 00000000 ____D () C:\ProgramData\Sun
2014-04-25 15:29 - 2014-04-25 15:29 - 00921512 _____ (Oracle Corporation) C:\Users\M\Downloads\chromeinstall-7u55.exe
2014-04-25 11:45 - 2014-04-26 11:32 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2014-04-25 11:45 - 2014-04-26 11:32 - 00000000 _____ () C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-04-25 11:43 - 2014-04-26 19:20 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-04-25 11:43 - 2014-04-25 11:43 - 01141680 _____ () C:\Users\M\Downloads\SteamSetup.exe
2014-04-25 11:43 - 2014-04-25 11:43 - 00000942 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-04-25 11:43 - 2014-04-25 11:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-04-24 22:30 - 2014-04-24 22:30 - 00000000 ___RD () C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-24 22:26 - 2014-04-24 22:26 - 00000000 ____D () C:\Users\M\AppData\Roaming\LolClient
2014-04-24 21:38 - 2014-04-26 16:54 - 00376184 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-24 21:07 - 2014-04-24 21:07 - 04746120 _____ (Piriform Ltd) C:\Users\M\Downloads\ccsetup413pro.exe
2014-04-24 21:05 - 2014-04-26 19:18 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-24 21:05 - 2014-04-24 21:05 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-24 21:04 - 2014-04-24 21:04 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\M\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-24 20:07 - 2014-04-24 20:07 - 00008704 ___SH () C:\Users\M\Desktop\Thumbs.db
2014-04-24 18:49 - 2014-04-24 18:49 - 00000000 ____D () C:\Users\M\AppData\Roaming\SUPERAntiSpyware.com
2014-04-24 18:47 - 2014-04-26 12:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-04-24 18:47 - 2014-04-24 18:47 - 00001827 _____ () C:\Users\Public\Desktop\SUPER Anti-Spyware.lnk
2014-04-24 18:46 - 2014-04-24 18:46 - 18795304 _____ (SUPERAntiSpyware) C:\Users\M\Downloads\SUPERAntiSpyware.exe
2014-04-24 18:46 - 2014-04-24 18:46 - 01039096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00423240 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-04-24 18:46 - 2014-04-24 18:46 - 00208416 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00085328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00079184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-24 18:46 - 2014-04-24 18:46 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-04-24 18:46 - 2014-04-24 18:46 - 00001987 _____ () C:\Users\Public\Desktop\avast!.lnk
2014-04-24 18:46 - 2014-04-24 18:46 - 00000000 ____D () C:\Users\M\AppData\Roaming\AVAST Software
2014-04-24 18:46 - 2014-04-24 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-24 18:46 - 2014-04-24 18:45 - 00028184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2014-04-24 18:44 - 2014-04-24 18:44 - 00000000 ____D () C:\Program Files\AVAST Software
2014-04-24 18:43 - 2014-04-24 18:43 - 04768528 _____ (AVAST Software) C:\Users\M\Downloads\avast_pro_antivirus_setup_online.exe
2014-04-24 18:43 - 2014-04-24 18:43 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-04-24 18:43 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-04-24 18:43 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-04-24 18:43 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2014-04-24 18:43 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-04-24 18:43 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-04-24 18:42 - 2014-04-24 18:42 - 00001625 _____ () C:\Users\Public\Desktop\League of Legends.lnk
2014-04-24 18:42 - 2014-04-24 18:42 - 00000000 __SHD () C:\WINDOWS\SysWOW64\AI_RecycleBin
2014-04-24 18:42 - 2014-04-24 18:42 - 00000000 ____D () C:\Riot Games
2014-04-24 18:42 - 2014-04-24 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-04-24 18:41 - 2014-04-25 22:49 - 00000000 ____D () C:\Users\M\AppData\Local\PMB Files
2014-04-24 18:41 - 2014-04-25 22:49 - 00000000 ____D () C:\ProgramData\PMB Files
2014-04-24 18:41 - 2014-04-24 18:41 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-04-24 18:40 - 2014-04-24 18:40 - 00000000 ____D () C:\Users\M\AppData\Roaming\Riot Games
2014-04-24 18:38 - 2014-04-24 18:38 - 34888568 _____ (Riot Games) C:\Users\M\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe
2014-04-24 18:34 - 2014-04-24 18:34 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-04-24 18:27 - 2014-04-24 18:27 - 00000000 ___RD () C:\Users\M\SkyDrive
2014-04-24 18:21 - 2014-04-24 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-04-24 18:20 - 2014-04-26 11:38 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-04-24 18:07 - 2014-04-24 18:07 - 00462192 _____ () C:\Users\M\Downloads\Setup (2).exe
2014-04-24 18:07 - 2014-04-24 18:07 - 00462192 _____ () C:\Users\M\Downloads\Setup (1).exe
2014-04-24 18:07 - 2014-04-24 18:07 - 00358193 _____ () C:\Users\M\AppData\Local\speedial.crx
2014-04-24 18:06 - 2014-04-26 18:48 - 00000000 ____D () C:\Users\M\AppData\Roaming\InstallW
2014-04-24 18:05 - 2014-04-24 18:05 - 00462192 _____ () C:\Users\M\Downloads\Setup.exe
2014-04-24 17:48 - 2014-04-26 19:00 - 00000896 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-24 17:48 - 2014-04-24 19:45 - 00002170 _____ () C:\Users\Public\Desktop\Chrome.lnk
2014-04-24 17:48 - 2014-04-24 17:55 - 00003868 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-24 17:48 - 2014-04-24 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-24 17:47 - 2014-04-26 18:00 - 00000892 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-24 17:47 - 2014-04-24 17:55 - 00003632 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-24 17:47 - 2014-04-24 17:48 - 00000000 ____D () C:\Users\M\AppData\Local\Google
2014-04-24 17:47 - 2014-04-24 17:48 - 00000000 ____D () C:\Program Files (x86)\Google
2014-04-24 17:47 - 2014-04-24 17:47 - 00000000 ____D () C:\Users\M\AppData\Local\Deployment
2014-04-24 17:47 - 2014-04-24 17:47 - 00000000 ____D () C:\Users\M\AppData\Local\Apps\2.0
2014-04-24 17:43 - 2014-04-25 15:44 - 00000000 ____D () C:\Users\M\AppData\Roaming\hpqlog
2014-04-24 17:38 - 2014-04-24 15:31 - 01089760 _____ (AnyProtect.com) C:\Users\M\AppData\Local\AnyProtectScannerSetup.exe
2014-04-24 17:35 - 2013-08-22 07:57 - 00002143 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser Choice.lnk
2014-04-24 17:33 - 2014-04-24 17:35 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-24 17:31 - 2014-04-25 18:11 - 00000378 _____ () C:\WINDOWS\Tasks\APSnotifierPP2.job
2014-04-24 17:31 - 2014-04-24 19:43 - 00000378 _____ () C:\WINDOWS\Tasks\APSnotifierPP3.job
2014-04-24 17:31 - 2014-04-24 18:31 - 00000380 _____ () C:\WINDOWS\Tasks\APSnotifierPP1.job
2014-04-24 17:31 - 2014-04-24 18:11 - 00002802 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP1
2014-04-24 17:31 - 2014-04-24 18:11 - 00002800 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP3
2014-04-24 17:31 - 2014-04-24 18:11 - 00002800 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP2
2014-04-24 17:31 - 2014-04-24 18:11 - 00000330 _____ () C:\Users\M\AppData\Roaming\aps.uninstall.scan.results
2014-04-24 17:30 - 2014-04-24 17:30 - 01107304 _____ (AnyProtect.com) C:\Users\M\AppData\Local\nsnC9A4.tmp
2014-04-24 17:27 - 2014-04-24 18:17 - 00000258 __RSH () C:\ProgramData\ntuser.pol
2014-04-24 17:27 - 2014-04-24 17:43 - 00000000 ____D () C:\Users\M\AppData\Local\VisualBeeExe
2014-04-24 17:27 - 2014-04-24 17:27 - 00000000 ____D () C:\Users\M\AppData\Local\emaze
2014-04-24 17:27 - 2014-04-24 17:27 - 00000000 ____D () C:\ProgramData\VisualBee
2014-04-24 17:26 - 2014-04-26 12:45 - 00000000 ____D () C:\Program Files (x86)\NetTock
2014-04-24 17:25 - 2014-04-24 17:44 - 00000000 ____D () C:\Users\M\AppData\Local\WeatherAlerts
2014-04-24 17:22 - 2014-04-24 17:22 - 00000000 __SHD () C:\Users\M\AppData\Local\EmieUserList
2014-04-24 17:22 - 2014-04-24 17:22 - 00000000 __SHD () C:\Users\M\AppData\Local\EmieSiteList
2014-04-24 17:21 - 2014-04-24 17:21 - 00000000 ____D () C:\Users\M\AppData\Local\HP Quick Start
2014-04-24 17:11 - 2014-04-26 11:23 - 00000000 __RDO () C:\Users\M\OneDrive
2014-04-24 17:08 - 2014-04-24 17:08 - 00000020 ___SH () C:\Users\M\ntuser.ini
2014-04-24 14:32 - 2014-04-25 15:51 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-24 14:32 - 2014-04-24 14:32 - 00000000 __SHD () C:\Recovery
2014-04-24 14:31 - 2014-04-24 14:31 - 03408896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-24 14:31 - 2014-04-24 14:31 - 01705984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-24 14:31 - 2014-04-24 14:31 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-24 14:31 - 2014-04-24 14:31 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-24 14:31 - 2014-04-24 14:31 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 21232792 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 16875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 13286400 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 08653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 06641152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 04268544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02519384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01466864 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01339240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01129472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01066496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-24 14:30 - 2014-04-24 14:30 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00958464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-24 14:30 - 2014-04-24 14:30 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00492256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-24 14:30 - 2014-04-24 14:30 - 00467504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00463264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-24 14:30 - 2014-04-24 14:30 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-24 14:30 - 2014-04-24 14:30 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-24 14:30 - 2014-04-24 14:30 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-04-24 14:30 - 2014-04-24 14:30 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00244888 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-24 14:28 - 2014-04-24 14:28 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-24 14:26 - 2014-04-24 14:26 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2014-04-24 14:26 - 2014-04-24 14:26 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2014-04-24 14:26 - 2014-04-24 14:26 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-24 14:26 - 2014-04-24 14:26 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-24 14:26 - 2014-04-24 14:26 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-04-24 14:26 - 2014-04-24 14:26 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-04-24 14:26 - 2014-04-24 14:26 - 00000000 ____D () C:\inetpub
2014-04-24 14:26 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-04-24 14:26 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-24 14:26 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-04-24 14:26 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-04-24 14:26 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-04-24 14:26 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-04-24 13:51 - 2014-04-24 13:51 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-24 13:48 - 2014-04-24 13:49 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2014-04-24 13:45 - 2014-04-24 13:45 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-24 13:45 - 2014-04-24 13:45 - 00000000 ____D () C:\Users\Default\Documents\hp.system.package.metadata
2014-04-24 13:45 - 2014-04-24 13:45 - 00000000 ____D () C:\Users\Default User\Documents\hp.system.package.metadata
2014-04-24 13:42 - 2014-04-24 13:42 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-24 13:41 - 2014-04-24 18:27 - 00000000 ____D () C:\Users\M
2014-04-24 13:41 - 2014-04-24 13:51 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-04-24 13:41 - 2014-04-24 13:51 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-04-24 13:38 - 2014-04-24 13:38 - 00922144 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-04-24 13:35 - 2014-04-24 13:35 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-04-24 13:35 - 2014-04-24 13:35 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2014-04-24 13:35 - 2014-04-24 13:35 - 00000000 ____D () C:\Program Files\Realtek
2014-04-24 13:35 - 2014-04-24 13:35 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-04-24 13:35 - 2014-04-24 13:35 - 00000000 ____D () C:\AMD
2014-04-24 13:34 - 2014-04-24 13:34 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-04-24 13:34 - 2014-04-24 13:34 - 00000000 ____D () C:\Program Files\Synaptics
2014-04-24 13:34 - 2014-04-24 13:34 - 00000000 ____D () C:\Program Files\AMD
2014-04-24 12:44 - 2014-04-24 17:36 - 00003532 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2014-04-24 12:20 - 2014-04-24 12:20 - 00000000 ____D () C:\MediaServer
2014-04-24 10:53 - 2013-05-04 05:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs
2014-04-24 10:53 - 2013-05-04 05:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2014-04-24 10:48 - 2014-04-24 10:48 - 00000000 ____D () C:\Users\M\AppData\Roaming\Macromedia
2014-04-24 10:34 - 2014-04-24 10:36 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-24 10:34 - 2014-03-31 03:51 - 90655440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-04-24 10:24 - 2014-04-24 10:24 - 00004006 _____ () C:\WINDOWS\System32\Tasks\HPGenoobeReminder
2014-04-24 10:11 - 2014-04-26 18:29 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1532226299-423207067-3883143593-1002
2014-04-24 10:05 - 2014-04-26 11:24 - 00000000 ____D () C:\Users\M\Documents\Youcam
2014-04-24 10:05 - 2014-04-25 16:00 - 00000000 ____D () C:\Users\M\AppData\Local\CyberLink
2014-04-24 10:05 - 2014-04-24 10:05 - 00000000 ____D () C:\Users\M\AppData\Roaming\ATI
2014-04-24 10:05 - 2014-04-24 10:05 - 00000000 ____D () C:\Users\M\AppData\Local\ATI
2014-04-24 10:05 - 2014-04-24 10:05 - 00000000 ____D () C:\Users\M\AppData\Local\AMD
2014-04-24 10:04 - 2014-04-24 10:04 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-04-24 10:04 - 2014-04-24 10:04 - 00000000 ____D () C:\Users\M\AppData\Roaming\Hewlett-Packard
2014-04-24 10:03 - 2014-04-26 19:10 - 00003890 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{474E9186-2431-45D9-8887-835F3F77DDFF}
2014-04-24 10:03 - 2014-04-24 10:03 - 00000000 ____D () C:\Users\M\AppData\Roaming\Adobe
2014-04-24 10:02 - 2014-04-24 13:46 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shopping and Services
2014-04-24 10:01 - 2014-04-24 17:43 - 00000000 ____D () C:\Users\M\AppData\Local\Hewlett-Packard
2014-04-24 10:01 - 2014-04-24 10:01 - 00000000 ____D () C:\Users\M\AppData\Roaming\Synaptics
2014-04-24 10:01 - 2014-04-24 10:01 - 00000000 ____D () C:\Users\M\AppData\Local\Power2Go8
2014-04-24 10:00 - 2014-04-25 15:35 - 00000000 ____D () C:\Users\M\AppData\Local\Packages
2014-04-24 10:00 - 2014-04-24 18:21 - 00000000 ____D () C:\Users\M\AppData\Local\VirtualStore
2014-04-24 10:00 - 2013-07-24 18:54 - 00000000 ___HD () C:\Users\M\Documents\hp.system.package.metadata
 
 
Link to post
Share on other sites

FRST.txt Continued:

 

 

==================== One Month Modified Files and Folders =======
 
2014-04-26 19:22 - 2014-04-26 19:21 - 00022371 _____ () C:\Users\M\Downloads\FRST.txt
2014-04-26 19:21 - 2014-04-26 19:21 - 00000000 ____D () C:\FRST
2014-04-26 19:20 - 2014-04-26 19:20 - 02061824 _____ (Farbar) C:\Users\M\Downloads\FRST64.exe
2014-04-26 19:20 - 2014-04-25 11:43 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-04-26 19:18 - 2014-04-24 21:05 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-26 19:17 - 2014-04-25 18:52 - 00000000 ____D () C:\Users\M\AppData\Roaming\Skype
2014-04-26 19:10 - 2014-04-24 10:03 - 00003890 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{474E9186-2431-45D9-8887-835F3F77DDFF}
2014-04-26 19:03 - 2014-04-25 20:40 - 00000000 ____D () C:\Users\M\AppData\Roaming\TS3Client
2014-04-26 19:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-26 19:00 - 2014-04-24 17:48 - 00000896 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-26 18:48 - 2014-04-24 18:06 - 00000000 ____D () C:\Users\M\AppData\Roaming\InstallW
2014-04-26 18:29 - 2014-04-24 10:11 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1532226299-423207067-3883143593-1002
2014-04-26 18:00 - 2014-04-24 17:47 - 00000892 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-26 16:54 - 2014-04-24 21:38 - 00376184 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-26 12:45 - 2014-04-24 17:26 - 00000000 ____D () C:\Program Files (x86)\NetTock
2014-04-26 12:43 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-04-26 12:19 - 2014-04-24 18:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-04-26 12:06 - 2014-04-26 12:06 - 00001081 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-26 12:06 - 2014-04-26 12:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-04-26 12:06 - 2014-04-26 12:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-26 12:02 - 2014-04-26 12:02 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\M\Downloads\mbam-setup-2.0.1.1004 (1).exe
2014-04-26 11:38 - 2014-04-24 18:20 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-04-26 11:32 - 2014-04-25 11:45 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2014-04-26 11:32 - 2014-04-25 11:45 - 00000000 _____ () C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-04-26 11:24 - 2014-04-26 11:24 - 00000000 ____D () C:\Users\M\AppData\Roaming\CyberLink
2014-04-26 11:24 - 2014-04-25 20:27 - 00000000 ____D () C:\Users\M\AppData\Roaming\Raptr
2014-04-26 11:24 - 2014-04-24 10:05 - 00000000 ____D () C:\Users\M\Documents\Youcam
2014-04-26 11:24 - 2014-03-21 16:05 - 00000000 ____D () C:\Users\Public\CyberLink
2014-04-26 11:23 - 2014-04-24 17:11 - 00000000 __RDO () C:\Users\M\OneDrive
2014-04-26 11:21 - 2014-04-26 11:21 - 00000410 _____ () C:\WINDOWS\PFRO.log
2014-04-26 11:21 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-26 11:21 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-25 22:49 - 2014-04-24 18:41 - 00000000 ____D () C:\Users\M\AppData\Local\PMB Files
2014-04-25 22:49 - 2014-04-24 18:41 - 00000000 ____D () C:\ProgramData\PMB Files
2014-04-25 20:40 - 2014-04-25 20:40 - 00000986 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-04-25 20:40 - 2014-04-25 20:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-04-25 20:40 - 2014-04-25 20:40 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-04-25 20:39 - 2014-04-25 20:39 - 29498592 _____ (TeamSpeak Systems GmbH) C:\Users\M\Downloads\TeamSpeak3-Client-win64-3.0.14.exe
2014-04-25 20:33 - 2014-04-25 20:33 - 01007930 _____ () C:\Users\M\Downloads\amddriverdownload_installer (2).exe
2014-04-25 20:28 - 2014-04-25 20:28 - 00000000 ____D () C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2014-04-25 20:28 - 2014-04-25 20:28 - 00000000 ____D () C:\Users\M\AppData\Roaming\library_dir
2014-04-25 20:28 - 2014-04-25 20:27 - 01007930 _____ () C:\Users\M\Downloads\amddriverdownload_installer (1).exe
2014-04-25 20:28 - 2014-04-25 20:27 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-04-25 20:27 - 2014-04-25 20:26 - 01007930 _____ () C:\Users\M\Downloads\amddriverdownload_installer.exe
2014-04-25 20:24 - 2014-04-25 20:24 - 00000000 ____D () C:\Users\M\Documents\My Games
2014-04-25 20:24 - 2014-04-25 20:23 - 00010021 _____ () C:\WINDOWS\DirectX.log
2014-04-25 18:52 - 2014-04-25 18:52 - 00002713 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-04-25 18:52 - 2014-04-25 18:52 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-25 18:52 - 2014-04-25 18:52 - 00000000 ____D () C:\Users\M\AppData\Local\Skype
2014-04-25 18:52 - 2014-04-25 18:52 - 00000000 ____D () C:\ProgramData\Skype
2014-04-25 18:52 - 2014-04-25 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-04-25 18:51 - 2014-04-25 18:51 - 01678496 _____ (Skype Technologies S.A.) C:\Users\M\Downloads\SkypeSetup.exe
2014-04-25 18:11 - 2014-04-24 17:31 - 00000378 _____ () C:\WINDOWS\Tasks\APSnotifierPP2.job
2014-04-25 16:08 - 2014-04-25 16:08 - 00626688 _____ () C:\Users\M\Downloads\Detection.msi
2014-04-25 16:08 - 2014-04-25 16:00 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-04-25 16:06 - 2014-04-25 16:06 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-04-25 16:06 - 2014-04-25 16:06 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-04-25 16:06 - 2014-04-25 16:06 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-04-25 16:06 - 2014-04-25 16:06 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-04-25 16:06 - 2014-04-25 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-25 16:06 - 2014-04-25 16:06 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-25 16:06 - 2014-04-25 15:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-25 16:05 - 2013-07-24 18:56 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2014-04-25 16:04 - 2012-08-04 01:02 - 00000000 ____D () C:\SWSetup
2014-04-25 16:03 - 2014-04-25 16:03 - 00921512 _____ (Oracle Corporation) C:\Users\M\Downloads\chromeinstall-7u55 (2).exe
2014-04-25 16:00 - 2014-04-25 16:00 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab
2014-04-25 16:00 - 2014-04-24 10:05 - 00000000 ____D () C:\Users\M\AppData\Local\CyberLink
2014-04-25 15:58 - 2014-04-25 15:58 - 00921512 _____ (Oracle Corporation) C:\Users\M\Downloads\chromeinstall-7u55 (1).exe
2014-04-25 15:58 - 2014-04-25 15:58 - 00000000 ____D () C:\Users\M\AppData\Roaming\Oracle
2014-04-25 15:57 - 2014-04-25 15:57 - 00000000 ____D () C:\Users\M\AppData\Local\MediaServer
2014-04-25 15:54 - 2013-07-24 18:54 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-04-25 15:53 - 2014-04-25 15:53 - 00000000 ____D () C:\Users\M\AppData\Local\Downloaded Installations
2014-04-25 15:51 - 2014-04-24 14:32 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-25 15:44 - 2014-04-24 17:43 - 00000000 ____D () C:\Users\M\AppData\Roaming\hpqlog
2014-04-25 15:40 - 2014-03-21 15:54 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros
2014-04-25 15:37 - 2014-04-25 15:37 - 00000296 _____ () C:\WINDOWS\setupact.log
2014-04-25 15:37 - 2014-04-25 15:37 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-04-25 15:37 - 2014-04-25 15:37 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-04-25 15:37 - 2014-04-25 15:36 - 00007004 _____ () C:\WINDOWS\DPINST.LOG
2014-04-25 15:37 - 2014-04-25 15:36 - 00001332 _____ () C:\WINDOWS\Synaptics.log
2014-04-25 15:37 - 2014-03-21 15:49 - 00002990 _____ () C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements
2014-04-25 15:36 - 2014-04-25 15:36 - 01795952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2014-04-25 15:36 - 2014-04-25 15:36 - 00722160 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2014-04-25 15:36 - 2014-04-25 15:36 - 00524016 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2014-04-25 15:36 - 2014-04-25 15:36 - 00421616 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo19.dll
2014-04-25 15:36 - 2014-04-25 15:36 - 00400112 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2014-04-25 15:36 - 2014-04-25 15:36 - 00251632 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2014-04-25 15:36 - 2014-04-25 15:36 - 00169712 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynTPCom.dll
2014-04-25 15:35 - 2014-04-24 10:00 - 00000000 ____D () C:\Users\M\AppData\Local\Packages
2014-04-25 15:34 - 2014-03-21 15:50 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-04-25 15:34 - 2014-03-21 15:49 - 09889352 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RtsP2StorIcon.dll
2014-04-25 15:34 - 2014-03-21 15:49 - 00290008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsP2Stor.sys
2014-04-25 15:34 - 2013-07-24 19:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-25 15:32 - 2014-03-21 15:49 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-04-25 15:31 - 2014-04-25 15:32 - 00830680 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2014-04-25 15:31 - 2014-04-25 15:32 - 00074456 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2014-04-25 15:30 - 2014-04-25 15:30 - 00000000 ____D () C:\ProgramData\Sun
2014-04-25 15:30 - 2014-03-21 15:54 - 00000000 ____D () C:\WINDOWS\Hewlett-Packard
2014-04-25 15:29 - 2014-04-25 15:29 - 00921512 _____ (Oracle Corporation) C:\Users\M\Downloads\chromeinstall-7u55.exe
2014-04-25 11:45 - 2013-07-24 18:58 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-04-25 11:43 - 2014-04-25 11:43 - 01141680 _____ () C:\Users\M\Downloads\SteamSetup.exe
2014-04-25 11:43 - 2014-04-25 11:43 - 00000942 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-04-25 11:43 - 2014-04-25 11:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-04-24 22:30 - 2014-04-24 22:30 - 00000000 ___RD () C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-24 22:26 - 2014-04-24 22:26 - 00000000 ____D () C:\Users\M\AppData\Roaming\LolClient
2014-04-24 21:07 - 2014-04-24 21:07 - 04746120 _____ (Piriform Ltd) C:\Users\M\Downloads\ccsetup413pro.exe
2014-04-24 21:05 - 2014-04-24 21:05 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-24 21:04 - 2014-04-24 21:04 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\M\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-24 20:07 - 2014-04-24 20:07 - 00008704 ___SH () C:\Users\M\Desktop\Thumbs.db
2014-04-24 19:45 - 2014-04-24 17:48 - 00002170 _____ () C:\Users\Public\Desktop\Chrome.lnk
2014-04-24 19:43 - 2014-04-24 17:31 - 00000378 _____ () C:\WINDOWS\Tasks\APSnotifierPP3.job
2014-04-24 19:42 - 2013-08-22 15:44 - 00484248 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-24 18:49 - 2014-04-24 18:49 - 00000000 ____D () C:\Users\M\AppData\Roaming\SUPERAntiSpyware.com
2014-04-24 18:47 - 2014-04-24 18:47 - 00001827 _____ () C:\Users\Public\Desktop\SUPER Anti-Spyware.lnk
2014-04-24 18:46 - 2014-04-24 18:46 - 18795304 _____ (SUPERAntiSpyware) C:\Users\M\Downloads\SUPERAntiSpyware.exe
2014-04-24 18:46 - 2014-04-24 18:46 - 01039096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00423240 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-04-24 18:46 - 2014-04-24 18:46 - 00208416 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00085328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00079184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-24 18:46 - 2014-04-24 18:46 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-24 18:46 - 2014-04-24 18:46 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-04-24 18:46 - 2014-04-24 18:46 - 00001987 _____ () C:\Users\Public\Desktop\avast!.lnk
2014-04-24 18:46 - 2014-04-24 18:46 - 00000000 ____D () C:\Users\M\AppData\Roaming\AVAST Software
2014-04-24 18:46 - 2014-04-24 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-24 18:45 - 2014-04-24 18:46 - 00028184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2014-04-24 18:44 - 2014-04-24 18:44 - 00000000 ____D () C:\Program Files\AVAST Software
2014-04-24 18:43 - 2014-04-24 18:43 - 04768528 _____ (AVAST Software) C:\Users\M\Downloads\avast_pro_antivirus_setup_online.exe
2014-04-24 18:43 - 2014-04-24 18:43 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-04-24 18:42 - 2014-04-24 18:42 - 00001625 _____ () C:\Users\Public\Desktop\League of Legends.lnk
2014-04-24 18:42 - 2014-04-24 18:42 - 00000000 __SHD () C:\WINDOWS\SysWOW64\AI_RecycleBin
2014-04-24 18:42 - 2014-04-24 18:42 - 00000000 ____D () C:\Riot Games
2014-04-24 18:42 - 2014-04-24 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-04-24 18:41 - 2014-04-24 18:41 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-04-24 18:40 - 2014-04-24 18:40 - 00000000 ____D () C:\Users\M\AppData\Roaming\Riot Games
2014-04-24 18:38 - 2014-04-24 18:38 - 34888568 _____ (Riot Games) C:\Users\M\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe
2014-04-24 18:34 - 2014-04-24 18:34 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-04-24 18:31 - 2014-04-24 17:31 - 00000380 _____ () C:\WINDOWS\Tasks\APSnotifierPP1.job
2014-04-24 18:27 - 2014-04-24 18:27 - 00000000 ___RD () C:\Users\M\SkyDrive
2014-04-24 18:27 - 2014-04-24 13:41 - 00000000 ____D () C:\Users\M
2014-04-24 18:23 - 2014-04-24 18:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-04-24 18:21 - 2014-04-24 10:00 - 00000000 ____D () C:\Users\M\AppData\Local\VirtualStore
2014-04-24 18:17 - 2014-04-24 17:27 - 00000258 __RSH () C:\ProgramData\ntuser.pol
2014-04-24 18:11 - 2014-04-24 17:31 - 00002802 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP1
2014-04-24 18:11 - 2014-04-24 17:31 - 00002800 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP3
2014-04-24 18:11 - 2014-04-24 17:31 - 00002800 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP2
2014-04-24 18:11 - 2014-04-24 17:31 - 00000330 _____ () C:\Users\M\AppData\Roaming\aps.uninstall.scan.results
2014-04-24 18:07 - 2014-04-24 18:07 - 00462192 _____ () C:\Users\M\Downloads\Setup (2).exe
2014-04-24 18:07 - 2014-04-24 18:07 - 00462192 _____ () C:\Users\M\Downloads\Setup (1).exe
2014-04-24 18:07 - 2014-04-24 18:07 - 00358193 _____ () C:\Users\M\AppData\Local\speedial.crx
2014-04-24 18:05 - 2014-04-24 18:05 - 00462192 _____ () C:\Users\M\Downloads\Setup.exe
2014-04-24 17:55 - 2014-04-24 17:48 - 00003868 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-24 17:55 - 2014-04-24 17:47 - 00003632 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-24 17:52 - 2014-03-21 16:15 - 00000000 ____D () C:\ProgramData\Norton
2014-04-24 17:51 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-04-24 17:51 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-04-24 17:48 - 2014-04-24 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-24 17:48 - 2014-04-24 17:47 - 00000000 ____D () C:\Users\M\AppData\Local\Google
2014-04-24 17:48 - 2014-04-24 17:47 - 00000000 ____D () C:\Program Files (x86)\Google
2014-04-24 17:47 - 2014-04-24 17:47 - 00000000 ____D () C:\Users\M\AppData\Local\Deployment
2014-04-24 17:47 - 2014-04-24 17:47 - 00000000 ____D () C:\Users\M\AppData\Local\Apps\2.0
2014-04-24 17:44 - 2014-04-24 17:25 - 00000000 ____D () C:\Users\M\AppData\Local\WeatherAlerts
2014-04-24 17:43 - 2014-04-24 17:27 - 00000000 ____D () C:\Users\M\AppData\Local\VisualBeeExe
2014-04-24 17:43 - 2014-04-24 10:01 - 00000000 ____D () C:\Users\M\AppData\Local\Hewlett-Packard
2014-04-24 17:42 - 2014-03-18 16:26 - 00956412 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-24 17:41 - 2013-07-24 19:13 - 00000000 ____D () C:\ProgramData\WildTangent
2014-04-24 17:41 - 2013-07-24 19:13 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-04-24 17:36 - 2014-04-24 12:44 - 00003532 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2014-04-24 17:35 - 2014-04-24 17:33 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-24 17:30 - 2014-04-24 17:30 - 01107304 _____ (AnyProtect.com) C:\Users\M\AppData\Local\nsnC9A4.tmp
2014-04-24 17:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-24 17:27 - 2014-04-24 17:27 - 00000000 ____D () C:\Users\M\AppData\Local\emaze
2014-04-24 17:27 - 2014-04-24 17:27 - 00000000 ____D () C:\ProgramData\VisualBee
2014-04-24 17:27 - 2013-08-22 16:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2014-04-24 17:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy
2014-04-24 17:22 - 2014-04-24 17:22 - 00000000 __SHD () C:\Users\M\AppData\Local\EmieUserList
2014-04-24 17:22 - 2014-04-24 17:22 - 00000000 __SHD () C:\Users\M\AppData\Local\EmieSiteList
2014-04-24 17:21 - 2014-04-24 17:21 - 00000000 ____D () C:\Users\M\AppData\Local\HP Quick Start
2014-04-24 17:21 - 2014-03-21 15:59 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-04-24 17:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-04-24 17:08 - 2014-04-24 17:08 - 00000020 ___SH () C:\Users\M\ntuser.ini
2014-04-24 15:31 - 2014-04-24 17:38 - 01089760 _____ (AnyProtect.com) C:\Users\M\AppData\Local\AnyProtectScannerSetup.exe
2014-04-24 14:32 - 2014-04-24 14:32 - 00000000 __SHD () C:\Recovery
2014-04-24 14:31 - 2014-04-24 14:31 - 03408896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-24 14:31 - 2014-04-24 14:31 - 01705984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-24 14:31 - 2014-04-24 14:31 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-24 14:31 - 2014-04-24 14:31 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-24 14:31 - 2014-04-24 14:31 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-24 14:31 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-04-24 14:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\inetsrv
2014-04-24 14:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\inetsrv
2014-04-24 14:30 - 2014-04-24 14:30 - 21232792 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 16875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 13286400 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 08653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 06641152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 04268544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02519384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01466864 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01339240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01129472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01066496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-24 14:30 - 2014-04-24 14:30 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00958464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-24 14:30 - 2014-04-24 14:30 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00565536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00492256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-24 14:30 - 2014-04-24 14:30 - 00467504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00463264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-24 14:30 - 2014-04-24 14:30 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-24 14:30 - 2014-04-24 14:30 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-24 14:30 - 2014-04-24 14:30 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-04-24 14:30 - 2014-04-24 14:30 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00244888 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-24 14:30 - 2014-04-24 14:30 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-24 14:30 - 2014-04-24 14:30 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-04-24 14:30 - 2014-04-24 14:30 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-24 14:30 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-04-24 14:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2014-04-24 14:28 - 2014-04-24 14:28 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-24 14:26 - 2014-04-24 14:26 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2014-04-24 14:26 - 2014-04-24 14:26 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2014-04-24 14:26 - 2014-04-24 14:26 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2014-04-24 14:26 - 2014-04-24 14:26 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-24 14:26 - 2014-04-24 14:26 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-24 14:26 - 2014-04-24 14:26 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-04-24 14:26 - 2014-04-24 14:26 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-04-24 14:26 - 2014-04-24 14:26 - 00000000 ____D () C:\inetpub
2014-04-24 13:53 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-04-24 13:52 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-04-24 13:51 - 2014-04-24 13:51 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-24 13:51 - 2014-04-24 13:41 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-04-24 13:51 - 2014-04-24 13:41 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-04-24 13:49 - 2014-04-24 13:48 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2014-04-24 13:49 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-04-24 13:49 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-04-24 13:46 - 2014-04-24 10:02 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shopping and Services
2014-04-24 13:46 - 2014-03-21 16:03 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat
2014-04-24 13:46 - 2014-03-21 15:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
2014-04-24 13:46 - 2014-03-18 15:58 - 00000000 ____D () C:\WINDOWS\en-GB
2014-04-24 13:46 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-04-24 13:46 - 2013-07-24 19:14 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-04-24 13:46 - 2013-07-24 19:11 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2014-04-24 13:45 - 2014-04-24 13:45 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-24 13:45 - 2014-04-24 13:45 - 00000000 ____D () C:\Users\Default\Documents\hp.system.package.metadata
2014-04-24 13:45 - 2014-04-24 13:45 - 00000000 ____D () C:\Users\Default User\Documents\hp.system.package.metadata
2014-04-24 13:45 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2014-04-24 13:44 - 2014-03-18 15:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-04-24 13:44 - 2014-03-18 15:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-04-24 13:44 - 2014-03-18 15:58 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-04-24 13:44 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\en-GB
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\en-GB
2014-04-24 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-04-24 13:44 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-04-24 13:44 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-04-24 13:44 - 2013-07-24 19:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-04-24 13:44 - 2013-07-24 18:58 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
2014-04-24 13:44 - 2012-08-03 23:29 - 00000000 ____D () C:\ProgramData\PRICache
2014-04-24 13:42 - 2014-04-24 13:42 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-24 13:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-04-24 13:38 - 2014-04-24 13:38 - 00922144 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-04-24 13:35 - 2014-04-24 13:35 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-04-24 13:35 - 2014-04-24 13:35 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2014-04-24 13:35 - 2014-04-24 13:35 - 00000000 ____D () C:\Program Files\Realtek
2014-04-24 13:35 - 2014-04-24 13:35 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-04-24 13:35 - 2014-04-24 13:35 - 00000000 ____D () C:\AMD
2014-04-24 13:34 - 2014-04-24 13:34 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-04-24 13:34 - 2014-04-24 13:34 - 00000000 ____D () C:\Program Files\Synaptics
2014-04-24 13:34 - 2014-04-24 13:34 - 00000000 ____D () C:\Program Files\AMD
2014-04-24 13:33 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-04-24 12:20 - 2014-04-24 12:20 - 00000000 ____D () C:\MediaServer
2014-04-24 10:48 - 2014-04-24 10:48 - 00000000 ____D () C:\Users\M\AppData\Roaming\Macromedia
2014-04-24 10:36 - 2014-04-24 10:34 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-24 10:24 - 2014-04-24 10:24 - 00004006 _____ () C:\WINDOWS\System32\Tasks\HPGenoobeReminder
2014-04-24 10:05 - 2014-04-24 10:05 - 00000000 ____D () C:\Users\M\AppData\Roaming\ATI
2014-04-24 10:05 - 2014-04-24 10:05 - 00000000 ____D () C:\Users\M\AppData\Local\ATI
2014-04-24 10:05 - 2014-04-24 10:05 - 00000000 ____D () C:\Users\M\AppData\Local\AMD
2014-04-24 10:04 - 2014-04-24 10:04 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-04-24 10:04 - 2014-04-24 10:04 - 00000000 ____D () C:\Users\M\AppData\Roaming\Hewlett-Packard
2014-04-24 10:03 - 2014-04-24 10:03 - 00000000 ____D () C:\Users\M\AppData\Roaming\Adobe
2014-04-24 10:03 - 2013-07-24 19:07 - 00000000 ___RD () C:\Program Files\Online Services
2014-04-24 10:03 - 2013-07-24 19:07 - 00000000 ___RD () C:\Program Files (x86)\Online Services
2014-04-24 10:02 - 2012-08-04 01:02 - 00000000 ___HD () C:\SYSTEM.SAV
2014-04-24 10:01 - 2014-04-24 10:01 - 00000000 ____D () C:\Users\M\AppData\Roaming\Synaptics
2014-04-24 10:01 - 2014-04-24 10:01 - 00000000 ____D () C:\Users\M\AppData\Local\Power2Go8
2014-04-03 09:51 - 2014-04-26 12:06 - 00088280 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-26 12:06 - 00063192 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-26 12:06 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-03-31 22:23 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-03-31 22:23 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-31 03:51 - 2014-04-24 10:34 - 90655440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
 
Some content of TEMP:
====================
C:\Users\M\AppData\Local\Temp\Extract.exe
C:\Users\M\AppData\Local\Temp\ICReinstall_Full_Setup.exe
C:\Users\M\AppData\Local\Temp\information.exe
C:\Users\M\AppData\Local\Temp\raptrpatch.exe
C:\Users\M\AppData\Local\Temp\Re-Markable_2040-4041.exe
C:\Users\M\AppData\Local\Temp\SendMsg.dll
C:\Users\M\AppData\Local\Temp\SP63285.exe
C:\Users\M\AppData\Local\Temp\SP63341.exe
C:\Users\M\AppData\Local\Temp\SP63599.exe
C:\Users\M\AppData\Local\Temp\SP63752.exe
C:\Users\M\AppData\Local\Temp\SP63786.exe
C:\Users\M\AppData\Local\Temp\SP64109.exe
C:\Users\M\AppData\Local\Temp\SP64223.exe
C:\Users\M\AppData\Local\Temp\SP64225.exe
C:\Users\M\AppData\Local\Temp\SP64226.exe
C:\Users\M\AppData\Local\Temp\SP64854.exe
C:\Users\M\AppData\Local\Temp\SP65428.exe
C:\Users\M\AppData\Local\Temp\SP65792.exe
C:\Users\M\AppData\Local\Temp\SRLDetectionLibrary4319653336137917800.dll
C:\Users\M\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\M\AppData\Local\Temp\vbmz13.exe
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2014-04-24 13:33
 
==================== End Of Log ============================
Link to post
Share on other sites

Addition.txt is as follows:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-04-2014 03
Ran by M at 2014-04-26 19:23:23
Running from C:\Users\M\Downloads
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 
==================== Installed Programs ======================
 
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
AMD Accelerated Video Transcoding (Version: 12.10.100.30416 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{DEC772E6-D0C7-9964-5D30-DEC57EF1B26F}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2013.0416.2338.40605 - Advanced Micro Devices, Inc.) Hidden
avast! Pro Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2018 - Avast Software)
ccc-utility64 (Version: 2013.0416.2338.40605 - Advanced Micro Devices, Inc.) Hidden
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version:  - Relic Entertainment)
CyberLink Media Suite 10 (HKLM-x32\...\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 10.0.5.3606 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.5.3606 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\{2A87D48D-3FDF-41FD-97CD-A1E370EFFFE2}) (Version: 8.0.4.3202 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.4.3202 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2.3305 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2.3305 - CyberLink Corp.)
DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM-x32\...\{07F6DC37-0857-4B68-A675-4E35989E85E3}) (Version: 6.0.15.1 - Hewlett-Packard Company)
HP CoolSense (HKLM-x32\...\{394B14EA-B072-4440-9510-87797CB12371}) (Version: 2.20.21 - Hewlett-Packard Company)
HP Postscript Converter (Version: 4.0.4100 - Hewlett-Packard) Hidden
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6838.4521 - Hewlett-Packard)
HP System Event Utility (HKLM-x32\...\{F35EE4BC-95E1-4417-BA36-7C32FF24A59A}) (Version: 1.0.11 - Hewlett-Packard Company)
HP Utility Center (HKLM\...\{A48BD764-CFDF-40A5-A07A-710908044F5D}) (Version: 2.2.2 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Malwarebytes Anti-Malware version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 15.0.4605.1003 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version:  - )
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.40820 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40825 - Microsoft Corporation) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4605.1003 - Microsoft Corporation) Hidden
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
Qualcomm Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Qualcomm Atheros)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.29068 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.2 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
 
==================== Restore Points  =========================
 
24-04-2014 16:17:29 Removed Bonjour
25-04-2014 19:22:16 Installed DirectX
 
==================== Hosts content: ==========================
 
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {087F23A9-D346-4C7B-A2DC-E7811C933AF7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-06-07] (Hewlett-Packard Company)
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {16F19AAD-263E-415E-81DE-49244035B9C1} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-12] (CyberLink Corp.)
Task: {1A41F736-A641-4B27-B9B8-591AF5FB1B33} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-03-21] (Hewlett-Packard)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C93705A-F644-459A-8E90-8A9118250D5B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-24] (Google Inc.)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {451E7FCD-4E9A-41AF-894D-B91378B46A80} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-03-21] (Hewlett-Packard)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {5CFE1E2C-C530-4834-BD86-53CDB88ABD71} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-03-30] (Microsoft Corporation)
Task: {6898ED81-2281-4E76-AF9A-891D08596815} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2014-04-25] (Synaptics Incorporated)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77D7A11D-2E58-43EF-94EB-5C1C2A1D1266} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-24] (Google Inc.)
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9656EDC4-EF82-4239-8B75-5D4A72AAA3B4} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {970427D9-C88E-491E-89B6-0244B1DD0C7A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A409CA1B-73A6-4798-BAFF-A2C4C3152E5A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-12-12] (Hewlett-Packard Company)
Task: {A4881CF6-5DE5-4FBB-BF73-990C25E9546E} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {ABD8F07B-B47A-4CF3-B2A9-63326F42E3DD} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {B4C27A7D-8D77-4556-9D9C-7DF216FB7208} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-24] (AVAST Software)
Task: {BB539ADE-6878-4821-ABF7-53D03E55EF50} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {C27A85F4-E93B-4340-9829-6DD3DC3E1A3D} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {C5F47178-5C3B-40CA-B3AA-400BF76EE744} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-06-07] (Hewlett-Packard Company)
Task: {C82EF18A-C469-4A70-B583-36569C982710} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {C83404B2-DB63-49AA-A3AA-8BAB9F07F99F} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-09-10] (Hewlett-Packard Development Company, L.P.)
Task: {C8FEB759-BC89-4841-8D71-2F6D4853EC62} - System32\Tasks\HPGenoobeReminder => C:\Program Files (x86)\Hewlett-Packard\HP Registration Service\HP GenOOBE\HPGenOOBE.exe [2013-06-20] ()
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E28D1D53-B646-48DC-812A-D3C8DFE849B9} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05] (CyberLink)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {F4882A27-2D4D-464C-B965-7F861D5977BF} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-04-24] (Microsoft Corporation)
Task: C:\WINDOWS\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\WINDOWS\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\WINDOWS\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) =============
 
2013-04-17 00:50 - 2013-04-17 00:50 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-23 15:04 - 2014-04-23 15:04 - 00355328 _____ () C:\Users\M\AppData\Roaming\InstallW\IWsrv.exe
2014-04-24 00:42 - 2014-04-24 00:42 - 00350488 ____N () C:\Program Files (x86)\NetTock\updateNetTock.exe
2014-04-24 18:30 - 2014-04-24 18:30 - 00350488 ____N () C:\Program Files (x86)\NetTock\bin\utilNetTock.exe
2014-04-24 20:33 - 2014-04-24 20:33 - 08884904 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2014-04-26 11:37 - 2013-10-31 18:13 - 00102568 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-04-24 18:20 - 2014-03-25 13:21 - 00629928 _____ () C:\Program Files\Microsoft Office 15\ClientX64\StreamServer.dll
2014-04-25 18:57 - 2014-04-25 18:57 - 02252800 _____ () C:\Program Files\AVAST Software\Avast\defs\14042501\algo.dll
2014-04-26 17:41 - 2014-04-26 17:41 - 02252800 _____ () C:\Program Files\AVAST Software\Avast\defs\14042601\algo.dll
2014-03-21 16:06 - 2013-08-05 08:49 - 00627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-03-12 23:53 - 2013-03-12 23:53 - 00015424 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2014-04-24 18:45 - 2014-04-24 18:45 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2010-11-22 23:56 - 2010-11-22 23:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-02-21 23:32 - 2014-02-21 23:32 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-02-21 23:32 - 2014-02-21 23:32 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-02-21 23:32 - 2014-02-21 23:32 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-02-21 23:32 - 2014-02-21 23:32 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-22 23:56 - 2010-11-22 23:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00124928 _____ () C:\Program Files (x86)\Raptr\_elementtree.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2012-02-06 21:28 - 2012-02-06 21:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd
2012-02-06 21:28 - 2012-02-06 21:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd
2012-02-06 21:28 - 2012-02-06 21:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd
2011-05-10 20:01 - 2011-05-10 20:01 - 00030208 _____ () C:\Program Files (x86)\Raptr\simplejson._speedups.pyd
2014-02-21 23:32 - 2014-02-21 23:32 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 19:17 - 2011-02-15 19:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-22 23:56 - 2010-11-22 23:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-22 23:57 - 2010-11-22 23:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2013-11-21 01:05 - 2013-11-21 01:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2010-11-22 23:56 - 2010-11-22 23:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2012-10-27 08:53 - 2012-10-27 08:53 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 19:17 - 2011-02-15 19:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 00:06 - 2010-11-23 00:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 00:52 - 2013-05-10 00:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 00:52 - 2013-05-10 00:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 00:52 - 2013-05-10 00:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 19:56 - 2013-05-03 19:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 19:56 - 2013-05-03 19:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 19:56 - 2013-05-03 19:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2014-04-24 17:48 - 2014-04-02 02:57 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\chrome_elf.dll
2014-04-24 17:48 - 2014-04-02 02:57 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\libglesv2.dll
2014-04-24 17:48 - 2014-04-02 02:57 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\libegl.dll
2014-04-24 17:48 - 2014-04-02 02:57 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\pdf.dll
2014-04-24 17:48 - 2014-04-02 02:58 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll
2014-04-24 17:48 - 2014-04-02 02:57 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\ffmpegsumo.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
AlternateDataStreams: C:\ProgramData\Temp:10894A2E
AlternateDataStreams: C:\Users\M\OneDrive:ms-properties
 
==================== Safe Mode (whitelisted) ===================
 
 
==================== Disabled items from MSCONFIG ==============
 
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (04/26/2014 11:25:45 AM) (Source: Application Error) (User: )
Description: Faulting application name: CCC.exe, version: 3.5.0.0, time stamp: 0x4f8350e0
Faulting module name: KERNELBASE.dll, version: 6.3.9600.17055, time stamp: 0x532954fb
Exception code: 0xe0434352
Fault offset: 0x0000000000005bf8
Faulting process ID: 0x17e4
Faulting application start time: 0xCCC.exe0
Faulting application path: CCC.exe1
Faulting module path: CCC.exe2
Report ID: CCC.exe3
Faulting package full name: CCC.exe4
Faulting package-relative application ID: CCC.exe5
 
Error: (04/26/2014 11:25:44 AM) (Source: .NET Runtime) (User: )
Description: Application: CCC.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.ObjectDisposedException
Stack:
   at System.Threading.TimerQueueTimer.Change(UInt32, UInt32)
   at ATI.ACE.CCC.Implementation.CCC_Main.CCCNewThreadBegin(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   at System.Threading.ThreadHelper.ThreadStart(System.Object)
 
Error: (04/25/2014 04:06:29 PM) (Source: MsiInstaller) (User: MAB)
Description: Product: Java 7 Update 55 -- Error 1500.Another installation is in progress. You must complete that installation before continuing this one.
 
Error: (04/25/2014 03:59:14 PM) (Source: Application Error) (User: )
Description: Faulting application name: chromeinstall-7u55 (1).exe, version: 7.0.550.14, time stamp: 0x534cb50f
Faulting module name: chromeinstall-7u55 (1).exe, version: 7.0.550.14, time stamp: 0x534cb50f
Exception code: 0xc0000409
Fault offset: 0x000130c6
Faulting process ID: 0x1174
Faulting application start time: 0xchromeinstall-7u55 (1).exe0
Faulting application path: chromeinstall-7u55 (1).exe1
Faulting module path: chromeinstall-7u55 (1).exe2
Report ID: chromeinstall-7u55 (1).exe3
Faulting package full name: chromeinstall-7u55 (1).exe4
Faulting package-relative application ID: chromeinstall-7u55 (1).exe5
 
Error: (04/25/2014 03:47:56 PM) (Source: Microsoft-Windows-RestartManager) (User: MAB)
Description: Application or service 'HPWMISVC' could not be restarted.
 
Error: (04/25/2014 03:30:34 PM) (Source: Application Error) (User: )
Description: Faulting application name: chrome.exe, version: 34.0.1847.116, time stamp: 0x533b63bd
Faulting module name: chrome.dll, version: 34.0.1847.116, time stamp: 0x533b5e41
Exception code: 0x80000003
Fault offset: 0x0042860b
Faulting process ID: 0x1ab4
Faulting application start time: 0xchrome.exe0
Faulting application path: chrome.exe1
Faulting module path: chrome.exe2
Report ID: chrome.exe3
Faulting package full name: chrome.exe4
Faulting package-relative application ID: chrome.exe5
 
Error: (04/25/2014 11:42:49 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: MAB)
Description: Activation of application DefaultBrowser_NOPUBLISHERID!Chrome failed with error: -2147418113 See the Microsoft-Windows-TWinUI/Operational log for additional information.
 
Error: (04/24/2014 10:31:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: MAB)
Description: Activation of application 4DF9E0F8.Netflix_mcm4njqhnhss8!App failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.
 
Error: (04/24/2014 10:31:38 PM) (Source: Application Hang) (User: )
Description: The program Netflix.exe version 2.5.0.14 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 8d4
 
Start Time: 01cf600485c140f8
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\4DF9E0F8.Netflix_2.5.0.14_x64__mcm4njqhnhss8\Netflix.exe
 
Report Id: ccef2811-cbf7-11e3-be7e-a0481c1ef596
 
Faulting package full name: 4DF9E0F8.Netflix_2.5.0.14_x64__mcm4njqhnhss8
 
Faulting package-relative application ID: App
 
Error: (04/24/2014 10:31:31 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: MAB)
Description: App 4DF9E0F8.Netflix_2.5.0.14_x64__mcm4njqhnhss8+App did not launch within its allotted time.
 
 
System errors:
=============
Error: (04/26/2014 05:41:43 PM) (Source: Service Control Manager) (User: )
Description: The avast! HardwareID service failed to start due to the following error: 
%%127
 
Error: (04/26/2014 00:48:22 PM) (Source: Service Control Manager) (User: )
Description: The CyberLink PowerDVD 12 Media Server Service service terminated unexpectedly. It has done this 1 time(s).
 
Error: (04/26/2014 11:55:30 AM) (Source: Service Control Manager) (User: )
Description: The avast! HardwareID service failed to start due to the following error: 
%%127
 
Error: (04/26/2014 11:22:26 AM) (Source: Service Control Manager) (User: )
Description: The avast! HardwareID service failed to start due to the following error: 
%%127
 
Error: (04/26/2014 11:22:16 AM) (Source: Service Control Manager) (User: )
Description: The avast! HardwareID service failed to start due to the following error: 
%%127
 
Error: (04/26/2014 11:21:57 AM) (Source: Service Control Manager) (User: )
Description: The avast! HardwareID service failed to start due to the following error: 
%%127
 
Error: (04/26/2014 02:11:02 AM) (Source: Service Control Manager) (User: )
Description: The CyberLink PowerDVD 12 Media Server Service service terminated unexpectedly. It has done this 3 time(s).
 
Error: (04/25/2014 07:17:47 PM) (Source: Service Control Manager) (User: )
Description: The CyberLink PowerDVD 12 Media Server Service service terminated unexpectedly. It has done this 2 time(s).
 
Error: (04/25/2014 06:57:55 PM) (Source: Service Control Manager) (User: )
Description: The avast! HardwareID service failed to start due to the following error: 
%%127
 
Error: (04/25/2014 05:17:21 PM) (Source: Service Control Manager) (User: )
Description: The CyberLink PowerDVD 12 Media Server Service service terminated unexpectedly. It has done this 1 time(s).
 
 
Microsoft Office Sessions:
=========================
Error: (04/26/2014 11:25:45 AM) (Source: Application Error)(User: )
Description: CCC.exe3.5.0.04f8350e0KERNELBASE.dll6.3.9600.17055532954fbe04343520000000000005bf817e401cf6139a03f1b23C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exeC:\WINDOWS\system32\KERNELBASE.dll1fe8d70c-cd2d-11e3-be7f-a0481c1ef596
 
Error: (04/26/2014 11:25:44 AM) (Source: .NET Runtime)(User: )
Description: Application: CCC.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.ObjectDisposedException
Stack:
   at System.Threading.TimerQueueTimer.Change(UInt32, UInt32)
   at ATI.ACE.CCC.Implementation.CCC_Main.CCCNewThreadBegin(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   at System.Threading.ThreadHelper.ThreadStart(System.Object)
 
Error: (04/25/2014 04:06:29 PM) (Source: MsiInstaller)(User: MAB)
Description: Product: Java 7 Update 55 -- Error 1500.Another installation is in progress. You must complete that installation before continuing this one.(NULL)(NULL)(NULL)(NULL)(NULL)
 
Error: (04/25/2014 03:59:14 PM) (Source: Application Error)(User: )
Description: chromeinstall-7u55 (1).exe7.0.550.14534cb50fchromeinstall-7u55 (1).exe7.0.550.14534cb50fc0000409000130c6117401cf6096d9df4b49C:\Users\M\Downloads\chromeinstall-7u55 (1).exeC:\Users\M\Downloads\chromeinstall-7u55 (1).exe29ee908c-cc8a-11e3-be7e-a0481c1ef596
 
Error: (04/25/2014 03:47:56 PM) (Source: Microsoft-Windows-RestartManager)(User: MAB)
Description: 0C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exeHPWMISVC03026217820080
 
Error: (04/25/2014 03:30:34 PM) (Source: Application Error)(User: )
Description: chrome.exe34.0.1847.116533b63bdchrome.dll34.0.1847.116533b5e41800000030042860b1ab401cf60731a682c5aC:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\chrome.dll291affdc-cc86-11e3-be7e-a0481c1ef596
 
Error: (04/25/2014 11:42:49 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: MAB)
Description: DefaultBrowser_NOPUBLISHERID!Chrome-2147418113
 
Error: (04/24/2014 10:31:38 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: MAB)
Description: 4DF9E0F8.Netflix_mcm4njqhnhss8!App-2144927142
 
Error: (04/24/2014 10:31:38 PM) (Source: Application Hang)(User: )
Description: Netflix.exe2.5.0.148d401cf600485c140f84294967295C:\Program Files\WindowsApps\4DF9E0F8.Netflix_2.5.0.14_x64__mcm4njqhnhss8\Netflix.execcef2811-cbf7-11e3-be7e-a0481c1ef5964DF9E0F8.Netflix_2.5.0.14_x64__mcm4njqhnhss8App
 
Error: (04/24/2014 10:31:31 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: MAB)
Description: 4DF9E0F8.Netflix_2.5.0.14_x64__mcm4njqhnhss8+App
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 32%
Total physical RAM: 7366.26 MB
Available physical RAM: 4983.52 MB
Total Pagefile: 9222.26 MB
Available Pagefile: 6161.79 MB
Total Virtual: 131072 MB
Available Virtual: 131071.81 MB
 
==================== Drives ================================
 
Drive c: (Windows) (Fixed) (Total:907.75 GB) (Free:856.15 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:22.55 GB) (Free:2.28 GB) NTFS ==>[system with boot components (obtained from reading drive)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 9F7494F2)
 
Partition: GPT Partition Type.
 
==================== End Of Log ============================
Link to post
Share on other sites

Download attached fixlist.txt file and save it to the Desktop, or the folder you saved FRST into.

NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

 

Run FRST and press the Fix button just once and wait.

The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

Next,

 

Run Malwarebytes:

 


On the Dashboard, click the 'Update Now >>' link
After the update completes, click the 'Scan Now >>' button.
Or, on the Dashboard, click the Scan Now >> button.
If an update is available, click the Update Now button.
A Threat Scan will begin.
When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
In most cases, a restart will be required.
Wait for the prompt to restart the computer to appear, then click on Yes.

 

How to get logs:

(Export log to save as txt)

 


After the restart once you are back at your desktop, open MBAM once more.
Click on the History tab > Application Logs.
Double click on the scan log which shows the Date and time of the scan just performed.
Click 'Export'.
Click 'Text file (*.txt)'
In the Save File dialog box which appears, click on Desktop.
In the File name: box type a name for your scan log.
A message box named 'File Saved' should appear stating "Your file has been successfully exported".
Click Ok
Attach that saved log to your next reply.

 

Next,

 

Download AdwCleaner by Xplode onto your Desktop.


Double click on Adwcleaner.exe to run the tool.
Click on Scan
Once the scan is done, click on the Clean button.
You will get a prompt asking to close all programs. Click OK.
Click OK again to reboot your computer.
A text file will open after the restart. Please post the content of that logfile in your reply.
You can also find the logfile at C:\AdwCleaner[sn].txt.

 

Next,

 

thisisujrt.gif Please download Junkware Removal Tool to your desktop.


Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

 

Let me see those logs...

 

Kevin

 

 

fixlist.txt

Link to post
Share on other sites

FIXLOG is as follows: (I'll attach the MBAM log shortly)

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-04-2014 03

Ran by M at 2014-04-26 20:03:08 Run:1

Running from C:\Users\M\Downloads

Boot Mode: Normal

==============================================

 

Content of fixlist:

*****************

Start

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearc...=1977682060&ir=

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearc...=1977682060&ir=

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearc...=1977682060&ir=

SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://start.mysearc...ults.php?f=4&q={searchTerms}&a=cmi_14_17_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDtCtD0A0EyCtB0AzyyBtAtN0D0Tzu0SzzyEyDtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StC0BtDyD0B0A0AyDtGtDtCtCyEtGyDtDyByCtGtB0DyB0CtGtBtCtAyB0B0BzytA0B0E0D0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDzytBzz0BtAyByCtG0F0CtCzztGtA0D0FyCtGzy0BzyzztGtCzyzyyEtDtC0DyEtD0E0F0B2Q&cr=1977682060&ir=

SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://start.mysearc...ults.php?f=4&q={searchTerms}&a=cmi_14_17_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDtCtD0A0EyCtB0AzyyBtAtN0D0Tzu0SzzyEyDtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StC0BtDyD0B0A0AyDtGtDtCtCyEtGyDtDyByCtGtB0DyB0CtGtBtCtAyB0B0BzytA0B0E0D0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDzytBzz0BtAyByCtG0F0CtCzztGtA0D0FyCtGzy0BzyzztGtCzyzyyEtDtC0DyEtD0E0F0B2Q&cr=1977682060&ir=

Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

CHR HKLM-x32\...\Chrome\Extension: [iagcajndpnfncplednpbnkahadegklfa] - C:\Users\M\AppData\Local\speedial.crx [2014-04-24]

C:\Users\M\AppData\Local\speedial.crx

2014-04-24 17:38 - 2014-04-24 15:31 - 01089760 _____ (AnyProtect.com) C:\Users\M\AppData\Local\AnyProtectScannerSetup.exe

2014-04-24 17:31 - 2014-04-25 18:11 - 00000378 _____ () C:\WINDOWS\Tasks\APSnotifierPP2.job

2014-04-24 17:31 - 2014-04-24 19:43 - 00000378 _____ () C:\WINDOWS\Tasks\APSnotifierPP3.job

2014-04-24 17:31 - 2014-04-24 18:31 - 00000380 _____ () C:\WINDOWS\Tasks\APSnotifierPP1.job

2014-04-24 17:31 - 2014-04-24 18:11 - 00002802 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP1

2014-04-24 17:31 - 2014-04-24 18:11 - 00002800 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP3

2014-04-24 17:31 - 2014-04-24 18:11 - 00002800 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP2

2014-04-24 17:31 - 2014-04-24 18:11 - 00000330 _____ () C:\Users\M\AppData\Roaming\aps.uninstall.scan.results

2014-04-24 17:30 - 2014-04-24 17:30 - 01107304 _____ (AnyProtect.com) C:\Users\M\AppData\Local\nsnC9A4.tmp

C:\Users\M\AppData\Local\Temp\Extract.exe

C:\Users\M\AppData\Local\Temp\ICReinstall_Full_Setup.exe

C:\Users\M\AppData\Local\Temp\information.exe

C:\Users\M\AppData\Local\Temp\raptrpatch.exe

C:\Users\M\AppData\Local\Temp\Re-Markable_2040-4041.exe

C:\Users\M\AppData\Local\Temp\SendMsg.dll

C:\Users\M\AppData\Local\Temp\SP63285.exe

C:\Users\M\AppData\Local\Temp\SP63341.exe

C:\Users\M\AppData\Local\Temp\SP63599.exe

C:\Users\M\AppData\Local\Temp\SP63752.exe

C:\Users\M\AppData\Local\Temp\SP63786.exe

C:\Users\M\AppData\Local\Temp\SP64109.exe

C:\Users\M\AppData\Local\Temp\SP64223.exe

C:\Users\M\AppData\Local\Temp\SP64225.exe

C:\Users\M\AppData\Local\Temp\SP64226.exe

C:\Users\M\AppData\Local\Temp\SP64854.exe

C:\Users\M\AppData\Local\Temp\SP65428.exe

C:\Users\M\AppData\Local\Temp\SP65792.exe

C:\Users\M\AppData\Local\Temp\SRLDetectionLibrary4319653336137917800.dll

C:\Users\M\AppData\Local\Temp\swt-win32-3349.dll

C:\Users\M\AppData\Local\Temp\vbmz13.exe

Task: {A4881CF6-5DE5-4FBB-BF73-990C25E9546E} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: {ABD8F07B-B47A-4CF3-B2A9-63326F42E3DD} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: {C27A85F4-E93B-4340-9829-6DD3DC3E1A3D} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: C:\WINDOWS\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe

Task: C:\WINDOWS\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe

Task: C:\WINDOWS\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe

C:\Program Files (x86)\AnyProtectEx

AlternateDataStreams: C:\ProgramData\Temp:10894A2E

AlternateDataStreams: C:\Users\M\OneDrive:ms-properties

End

*****************

 

HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.

HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key deleted successfully.

HKCR\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key not found.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} => Value deleted successfully.

HKCR\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => Key deleted successfully.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} => Value deleted successfully.

HKCR\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => Key deleted successfully.

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully.

HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.

HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\iagcajndpnfncplednpbnkahadegklfa => Key deleted successfully.

C:\Users\M\AppData\Local\speedial.crx => Moved successfully.

"C:\Users\M\AppData\Local\speedial.crx" => File/Directory not found.

C:\Users\M\AppData\Local\AnyProtectScannerSetup.exe => Moved successfully.

C:\WINDOWS\Tasks\APSnotifierPP2.job => Moved successfully.

C:\WINDOWS\Tasks\APSnotifierPP3.job => Moved successfully.

C:\WINDOWS\Tasks\APSnotifierPP1.job => Moved successfully.

C:\WINDOWS\System32\Tasks\APSnotifierPP1 => Moved successfully.

C:\WINDOWS\System32\Tasks\APSnotifierPP3 => Moved successfully.

C:\WINDOWS\System32\Tasks\APSnotifierPP2 => Moved successfully.

C:\Users\M\AppData\Roaming\aps.uninstall.scan.results => Moved successfully.

C:\Users\M\AppData\Local\nsnC9A4.tmp => Moved successfully.

C:\Users\M\AppData\Local\Temp\Extract.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\ICReinstall_Full_Setup.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\information.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\raptrpatch.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\Re-Markable_2040-4041.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SendMsg.dll => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP63285.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP63341.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP63599.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP63752.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP63786.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP64109.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP64223.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP64225.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP64226.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP64854.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP65428.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SP65792.exe => Moved successfully.

C:\Users\M\AppData\Local\Temp\SRLDetectionLibrary4319653336137917800.dll => Moved successfully.

C:\Users\M\AppData\Local\Temp\swt-win32-3349.dll => Moved successfully.

C:\Users\M\AppData\Local\Temp\vbmz13.exe => Moved successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4881CF6-5DE5-4FBB-BF73-990C25E9546E} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4881CF6-5DE5-4FBB-BF73-990C25E9546E} => Key deleted successfully.

C:\Windows\System32\Tasks\APSnotifierPP2 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP2 => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ABD8F07B-B47A-4CF3-B2A9-63326F42E3DD} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ABD8F07B-B47A-4CF3-B2A9-63326F42E3DD} => Key deleted successfully.

C:\Windows\System32\Tasks\APSnotifierPP1 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP1 => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C27A85F4-E93B-4340-9829-6DD3DC3E1A3D} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C27A85F4-E93B-4340-9829-6DD3DC3E1A3D} => Key deleted successfully.

C:\Windows\System32\Tasks\APSnotifierPP3 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP3 => Key deleted successfully.

C:\WINDOWS\Tasks\APSnotifierPP1.job not found.

C:\WINDOWS\Tasks\APSnotifierPP2.job not found.

C:\WINDOWS\Tasks\APSnotifierPP3.job not found.

"C:\Program Files (x86)\AnyProtectEx" => File/Directory not found.

C:\ProgramData\Temp => ":10894A2E" ADS removed successfully.

"C:\Users\M\OneDrive" => ":ms-properties" ADS not found.

 

==== End of Fixlog ====
Link to post
Share on other sites

ADW Cleaner log file.

 

# AdwCleaner v3.203 - Report created 26/04/2014 at 20:36:10

# Updated 26/04/2014 by Xplode

# Operating System : Windows 8.1  (64 bits)

# Username : M - MAB

# Running from : C:\Users\M\Downloads\AdwCleaner.exe

# Option : Clean

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

Folder Deleted : C:\ProgramData\VisualBee

Folder Deleted : C:\WINDOWS\SysWOW64\AI_RecycleBin

Folder Deleted : C:\Users\M\AppData\Local\emaze

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522032268}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544034468}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}

Key Deleted : HKCU\Software\AnyProtect

Key Deleted : HKCU\Software\SmartBar

Key Deleted : HKCU\Software\visualbee

Key Deleted : HKCU\Software\AppDataLow\Software\blockAndSurf

Key Deleted : HKLM\Software\visualbee

 

***** [ Browsers ] *****

 

-\\ Internet Explorer v11.0.9600.17037

 

 

-\\ Google Chrome v34.0.1847.116

 

[ File : C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\preferences ]

 

Deleted [Extension] : fgboogeaaklojbicocbcepgdjjfbmgli

Deleted [Extension] : iagcajndpnfncplednpbnkahadegklfa

 

*************************

 

AdwCleaner[R0].txt - [2354 octets] - [26/04/2014 20:33:18]

AdwCleaner[s0].txt - [2079 octets] - [26/04/2014 20:36:10]

 

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [2139 octets] ##########
Link to post
Share on other sites

And lastly, 

 

The Junkware Log.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by M on 26/04/2014 at 20:41:22.21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26/04/2014 at 21:04:46.66
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Link to post
Share on other sites

We need to run an online AV scan to ensure there are no remnants of any infection left on your system that may have been missed. This scan is very thorough and well worth running, it can take several hours please be patient and let it complete:

 

Run Eset Online Scanner

 

**Note** You will need to use Internet explorer for this scan - Vista and Windows 7/8 right click on IE shortcut and run as admin

 

Go to Eset web page http://www.eset.com/us/online-scanner/ to run an online scan from ESET.

 


Turn off the real time scanner of any existing antivirus program while performing the online scan
click on the Run ESET Online Scanner button
Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the add/on to be installed
Click Start
Make sure that the option "Remove found threats"  is UNticked
Click on Advanced Settings, ensure the options
Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
Click Scan
wait for the virus definitions to be downloaded
Wait for the scan to finish

 

When the scan is complete

 


If no threats were found
put a checkmark in "Uninstall application on close"
close program
report to me that nothing was found

 

If threats were found

 


click on "list of threats found"
click on "export to text file" and save it as ESET SCAN and save to the desktop
Click on back
put a checkmark in "Uninstall application on close"
click on finish

 

close program

 

Copy and paste the report in next reply.

 

Thanks,

 

Kevin.....

Link to post
Share on other sites

Ok thanks for the update, post ESET log when ready. Also can you tell what exactly is going on when the popup happens, are you online surfing, do you only normally use the same browser, or more than one. Can you post a screen shot of the popup if possible....

 

Thanks,

 

Kevin

Link to post
Share on other sites

Sometimes whilst using Google Chrome, sometimes whilst playing something on STEAM.

 

I'll take a SS next time it comes.

 

ESET SCAN is as follows:

 

C:\FRST\Quarantine\C\Users\M\AppData\Local\AnyProtectScannerSetup.exe.xBAD Win32/AnyProtect.D potentially unwanted application
C:\FRST\Quarantine\C\Users\M\AppData\Local\nsnC9A4.tmp.xBAD Win32/AnyProtect.D potentially unwanted application
C:\FRST\Quarantine\C\Users\M\AppData\Local\Temp\ICReinstall_Full_Setup.exe.xBAD Win32/InstallCore.NH potentially unwanted application
C:\FRST\Quarantine\C\Users\M\AppData\Local\Temp\Re-Markable_2040-4041.exe.xBAD probably a variant of Win32/AdWare.AddLyrics.AJ application
C:\Users\M\AppData\Local\Microsoft\Windows\INetCache\IE\CUP8K5IN\Setup[1].exe Win32/InstallCore.NH potentially unwanted application
C:\Users\M\AppData\Local\Temp\nsnC9A4.tmp Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\1015846_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\109632_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\150043_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\1627618_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\1870149_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\1871149_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\1895002_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\2237780_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\2836492_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\2926188_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Local\Temp\is45637729\838628_stp\AnyProtectScannerSetup.exe Win32/AnyProtect.D potentially unwanted application
C:\Users\M\AppData\Roaming\InstallW\Full_Setup.exe Win32/InstallCore.NH potentially unwanted application
C:\Users\M\AppData\Roaming\InstallW\IWsrv.exe Win32/VOPackage.D potentially unwanted application
C:\Users\M\AppData\Roaming\InstallW\Resume.exe Win32/VOPackage.D potentially unwanted application
C:\Users\M\Downloads\ccsetup413pro.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application
C:\Users\M\Downloads\Setup (1).exe Win32/VOPackage.D potentially unwanted application
C:\Users\M\Downloads\Setup (2).exe Win32/VOPackage.D potentially unwanted application
C:\Users\M\Downloads\Setup.exe Win32/VOPackage.D potentially unwanted application
Link to post
Share on other sites

Download OTM from either of the following links and save to your Desktop: (If your security alerts to OTM, either accept the alert or turn off security to allow OTM to run)

http://oldtimer.geekstogo.com/OTM.exe.
http://www.itxassociates.com/OT-Tools/OTM.com
http://www.itxassociates.com/OT-Tools/OTM.exe  

Double click OTM.exe to start the tool. Vista or Windows 7 users accepy UAC alert. Be aware all processes will be stopped during run, also Desktop will disappear, this will be put back on completion.... If your security alerts to OTM either, accept the alert or turn off security until OTM completes...

  • Copy the text from the code box belowbelow to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy). Ensure to start with and include the colon before Files :Files

    :Filesipconfig /flushdns /cC:\Users\M\AppData\Local\Microsoft\Windows\INetCache\IE\CUP8K5IN\Setup[1].exeC:\Users\M\AppData\Local\Temp\nsnC9A4.tmp Win32/AnyProtect.DC:\Users\M\AppData\Local\Temp\is45637729\1015846_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\109632_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\150043_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\1627618_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\1870149_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\1871149_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\1895002_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\2237780_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\2836492_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\2926188_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\838628_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Roaming\InstallW\Full_Setup.exeC:\Users\M\AppData\Roaming\InstallW\IWsrv.exeC:\Users\M\AppData\Roaming\InstallW\Resume.exeC:\Users\M\Downloads\ccsetup413pro.exeC:\Users\M\Downloads\Setup (1).exeC:\Users\M\Downloads\Setup (2).exeC:\Users\M\Downloads\Setup.exe:Commands[EmptyTemp]
  • Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  • Click the red btnmoveit.png button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTM


Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

If the machine reboots, the Results log can be found here:

c:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log

Where mmddyyyy_hhmmss is the date of the tool run.

Next,

Please download SystemLook from the following link below and save it to your Desktop. Use the correct version 32bit or 64bit.





  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:

    :regfindAnyProtectScanner*AnyProtectScanner*AnyProtectScanner.*VuuPC*VuuPC*VuuPC.*
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

 

Thanks,

 

Kevin

Link to post
Share on other sites

What error do you get with OTM, maybe your security affects its actions, Turn off security, also disconnect from internet, run OTM again..

 

Regarding Vuu, there appears to be a shortcut on your Desktop, see image below. Right click on that Shortcut and select "Properties" in the new window what is the target of that shortcut?

post-3601-0-02928500-1398635463_thumb.jp

Link to post
Share on other sites

First time i did it it crashed saying "Invalid time Flag!" Numerical value [Any protect.D] or something, and computer had to restart. Same thing  Happened again but it didnt restart.

 

All processes killed
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\M\Downloads\cmd.bat deleted successfully.
C:\Users\M\Downloads\cmd.txt deleted successfully.
File/Folder C:\Users\M\AppData\Local\Microsoft\Windows\INetCache\IE\CUP8K5IN\Setup[1].exe not found.
Link to post
Share on other sites

See if the following will run.....

 

Open Notepad, select "Format" from the menu bar, make sure "Word Wrap" is not checked. Copy the text from the code box below to Notepad.

@echo offdel /f /s /q "C:\Users\M\AppData\Local\Temp\ICReinstall_Full_Setup.exe"  del %0

Save the Notepad file on your desktop...as delfile.bat... save type as "All Files"
It should look like this: batfileicon.gif<--XP vista_bat_icon.png <--vista or windows 7/8
Double click on delfile.bat to execute it.
A black CMD window will flash, then disappear...this is normal.
The file, if found...will have been deleted and the "delfile.bat" file will also be deleted.

Next,

I want you to run OTM again, this time i`ve made a slight adjustment to the script....

Double click OTM.exe to start the tool. Vista or Windows 7 users accepy UAC alert. Be aware all processes will be stopped during run, also Desktop will disappear, this will be put back on completion.... If your security alerts to OTM either, accept the alert or turn off security until OTM completes...
  • Copy the text from the code box belowbelow to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy). Ensure to start with and include the colon before Files :Files

    :FilesC:\Users\M\AppData\Local\Microsoft\Windows\INetCache\IE\CUP8K5IN\Setup[1].exeC:\Users\M\AppData\Local\Temp\nsnC9A4.tmpC:\Users\M\AppData\Local\Temp\is45637729\1015846_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\109632_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\150043_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\1627618_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\1870149_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\1871149_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\1895002_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\2237780_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\2836492_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\2926188_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Local\Temp\is45637729\838628_stp\AnyProtectScannerSetup.exeC:\Users\M\AppData\Roaming\InstallW\Full_Setup.exeC:\Users\M\AppData\Roaming\InstallW\IWsrv.exeC:\Users\M\AppData\Roaming\InstallW\Resume.exeC:\Users\M\Downloads\ccsetup413pro.exeC:\Users\M\Downloads\Setup (1).exeC:\Users\M\Downloads\Setup (2).exeC:\Users\M\Downloads\Setup.exe:Commands[EmptyTemp]
  • Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  • Click the red btnmoveit.png button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTM


Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

If the machine reboots, the Results log can be found here:

c:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log

Where mmddyyyy_hhmmss is the date of the tool run.

 

Kevin...
 

Link to post
Share on other sites

  • Root Admin

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.