Jump to content

Malware exe file does not run

comp_noob
 Share

Recommended Posts

comp_noob

comp_noob

Posted
Posted

I have a registered Malware premium that I previously downloaded, activated the license and was running. Then today the kids worked on their library summer reading and before shutting down the computer I opted to run the malware but nothing happens after I click the desktop icon. I decided to uninstall and download again the exe file, as soon as I hit the run an error message comes out as "runtime error".

 

I have attached FRST.txt and the Addition.txt as per instructions int he help section, I appreciate any help in getting this fix done.

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-06-2014
Ran by Imran (administrator) on IMRAN on 18-06-2014 19:33:27
Running from C:\Users\deser_000\Downloads
Platform: Windows 8 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188040 2013-04-23] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-07-08] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-04-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKU\S-1-5-21-3374758749-3495921600-8313889-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-04-10] (AMD)
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 
FireFox:
========
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-01]
CHR Extension: (Google Drive) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-01]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-06-01]
CHR Extension: (YouTube) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-01]
CHR Extension: (Google Search) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-01]
CHR Extension: (Google Wallet) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-01]
CHR Extension: (Gmail) - C:\Users\deser_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-01]
 
==================== Services (Whitelisted) =================
 
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed]
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-04-25] (Microsoft Corporation)
 
==================== Drivers (Whitelisted) ====================
 
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98744 2013-04-23] (Advanced Micro Devices)
R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek                                            )
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-06-18 19:33 - 2014-06-18 19:33 - 00008859 _____ () C:\Users\deser_000\Downloads\FRST.txt
2014-06-18 19:33 - 2014-06-18 19:33 - 00000000 ____D () C:\FRST
2014-06-18 19:32 - 2014-06-18 19:32 - 02082304 _____ (Farbar) C:\Users\deser_000\Downloads\FRST64.exe
2014-06-18 19:22 - 2014-06-18 19:22 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\deser_000\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-18 19:13 - 2014-06-18 19:13 - 00000564 _____ () C:\WINDOWS\PFRO.log
2014-06-18 19:12 - 2014-06-18 19:31 - 00371996 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-18 18:59 - 2014-06-18 18:59 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-18 18:59 - 2014-06-18 18:59 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-18 18:58 - 2014-06-18 18:58 - 04748896 _____ (Piriform Ltd) C:\Users\deser_000\Downloads\ccsetup414.exe
2014-06-18 18:10 - 2014-05-30 23:16 - 00703992 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-06-18 18:10 - 2014-05-30 23:16 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-18 17:58 - 2013-08-09 23:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2014-06-18 17:58 - 2013-08-09 23:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2014-06-18 17:58 - 2013-08-09 21:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2014-06-18 17:58 - 2013-08-03 00:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2014-06-18 17:58 - 2013-08-03 00:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2014-06-18 17:58 - 2013-08-03 00:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2014-06-18 17:58 - 2013-08-02 23:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2014-06-18 17:58 - 2013-08-02 23:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2014-06-18 17:58 - 2013-08-02 23:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2014-06-18 17:58 - 2013-08-02 00:28 - 19758080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-06-18 17:58 - 2013-08-02 00:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2014-06-18 17:58 - 2013-08-01 23:08 - 17561088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-06-18 17:58 - 2013-08-01 23:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2014-06-18 17:58 - 2013-07-24 17:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2014-06-18 17:58 - 2013-07-24 17:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2014-06-18 17:58 - 2013-04-11 00:40 - 06987528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-06-18 17:58 - 2013-04-09 17:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2014-06-18 17:58 - 2013-04-09 16:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2014-06-18 17:58 - 2013-03-02 02:23 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncInfo.dll
2014-06-18 17:57 - 2014-04-19 03:39 - 00628024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe
2014-06-18 17:57 - 2014-04-19 02:45 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-06-18 17:57 - 2013-08-06 23:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2014-06-18 17:56 - 2014-04-19 02:45 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-18 17:56 - 2014-04-19 00:57 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-06-18 17:56 - 2014-04-19 00:57 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-18 17:56 - 2014-01-30 18:48 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2014-06-18 17:56 - 2013-08-15 23:21 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-06-14 12:36 - 2014-06-14 12:37 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-14 12:36 - 2014-06-01 17:17 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-14 12:33 - 2013-10-01 17:37 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-06-14 12:33 - 2013-10-01 17:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-06-14 12:33 - 2013-08-02 00:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-06-14 12:33 - 2013-08-01 23:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-06-14 12:33 - 2013-03-02 04:39 - 00069864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-06-14 12:33 - 2013-03-01 20:43 - 02146304 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-06-13 20:37 - 2014-05-23 20:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-13 20:37 - 2014-05-23 20:47 - 02239488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-13 20:37 - 2014-05-23 20:47 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-13 20:37 - 2014-05-23 20:47 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-06-13 20:37 - 2014-05-23 20:47 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-06-13 20:37 - 2014-05-23 20:46 - 19290112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-13 20:37 - 2014-05-23 20:46 - 15368704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-13 20:37 - 2014-05-23 20:46 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-06-13 20:37 - 2014-05-23 20:46 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-13 20:37 - 2014-05-23 20:46 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-13 20:37 - 2014-05-23 20:46 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-06-13 20:37 - 2014-05-23 20:46 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-13 20:37 - 2014-05-23 20:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-13 20:37 - 2014-05-23 20:46 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-06-13 20:37 - 2014-05-23 20:46 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-13 20:37 - 2014-05-23 20:45 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-13 20:37 - 2014-05-23 20:45 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-13 20:37 - 2014-05-23 20:45 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-13 20:37 - 2014-05-23 19:26 - 01766400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-13 20:37 - 2014-05-23 19:26 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-13 20:37 - 2014-05-23 19:26 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-13 20:37 - 2014-05-23 19:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-13 20:37 - 2014-05-23 19:26 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-06-13 20:37 - 2014-05-23 19:25 - 13731328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-13 20:37 - 2014-05-23 19:25 - 01440768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-13 20:37 - 2014-05-23 19:25 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-13 20:37 - 2014-05-23 19:25 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-13 20:37 - 2014-05-23 19:25 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-06-13 20:37 - 2014-05-23 19:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-06-13 20:37 - 2014-05-23 19:25 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-13 20:37 - 2014-05-23 19:25 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-13 20:37 - 2014-05-23 19:09 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-06-13 20:37 - 2014-05-23 19:03 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-06-13 20:37 - 2014-05-23 16:37 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2014-06-13 20:37 - 2014-05-02 23:47 - 03246592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-06-13 20:37 - 2014-05-02 21:34 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-06-13 20:37 - 2014-04-29 16:32 - 01301504 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-06-13 20:37 - 2014-04-29 16:22 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-06-13 20:37 - 2014-04-03 05:19 - 00328024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-06-13 20:37 - 2014-04-02 21:44 - 00619008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-06-13 20:37 - 2014-03-31 16:08 - 00387268 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-06-13 20:37 - 2014-03-24 17:42 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-06-13 20:37 - 2014-03-24 16:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-06-13 20:36 - 2014-05-23 20:46 - 03958784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-13 20:36 - 2014-05-23 20:46 - 02650112 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-13 20:36 - 2014-05-23 19:26 - 14365696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-13 20:36 - 2014-05-23 19:26 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-13 20:36 - 2014-05-23 19:25 - 02862080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-13 20:36 - 2014-05-23 19:25 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-13 20:36 - 2014-05-23 19:25 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-06-13 20:35 - 2014-03-06 18:47 - 01419264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-06-13 20:35 - 2014-03-06 18:08 - 01845760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-06-13 20:35 - 2014-01-19 01:33 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-06-13 20:34 - 2014-04-03 05:22 - 02233176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-06-13 20:34 - 2013-03-02 03:59 - 00411880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-06-01 17:45 - 2013-10-31 23:38 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-06-01 17:45 - 2013-10-31 21:49 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-06-01 16:40 - 2014-06-01 16:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-01 16:34 - 2014-06-14 13:40 - 00002190 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-01 16:34 - 2014-06-01 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-01 16:33 - 2014-06-18 19:23 - 00000904 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-01 16:33 - 2014-06-18 18:38 - 00000908 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-01 16:33 - 2014-06-01 16:34 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Google
2014-06-01 16:33 - 2014-06-01 16:34 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-01 16:33 - 2014-06-01 16:33 - 00003880 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-01 16:33 - 2014-06-01 16:33 - 00003644 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-01 16:33 - 2014-03-01 03:47 - 01258496 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-06-01 16:33 - 2014-03-01 03:47 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2014-06-01 16:33 - 2014-03-01 02:07 - 01075200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2014-06-01 16:33 - 2014-03-01 00:59 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-06-01 16:33 - 2014-02-26 17:40 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-06-01 16:33 - 2014-02-26 17:21 - 00668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-06-01 16:33 - 2014-02-26 17:18 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-06-01 16:33 - 2014-02-26 17:18 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-06-01 16:33 - 2014-02-26 17:18 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-06-01 16:33 - 2014-02-14 22:15 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-06-01 16:33 - 2013-11-25 17:17 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-06-01 16:33 - 2013-06-28 21:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2014-06-01 16:33 - 2013-05-03 22:48 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-06-01 16:32 - 2014-06-01 16:33 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Deployment
2014-06-01 16:32 - 2014-06-01 16:32 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Apps\2.0
2014-06-01 16:19 - 2014-06-01 17:07 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3374758749-3495921600-8313889-1001
2014-06-01 16:18 - 2014-06-01 16:18 - 00000000 _____ () C:\WINDOWS\SysWOW64\Drivers\1043_ASUSTeK_M11BB.alu
2014-06-01 16:16 - 2014-06-01 16:16 - 00000000 ____D () C:\Program Files\ASUS
2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\ATI
2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\Users\deser_000\AppData\Local\ATI
2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\ProgramData\ATI
2014-06-01 16:14 - 2014-06-01 16:14 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-06-01 16:14 - 2014-06-01 16:14 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\ASUS WebStorage
2014-06-01 16:13 - 2014-06-01 16:13 - 00001433 _____ () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-01 16:12 - 2014-06-01 16:12 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\Macromedia
2014-06-01 16:12 - 2014-06-01 16:12 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\Adobe
2014-06-01 16:11 - 2014-06-01 17:01 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Packages
2014-06-01 16:11 - 2014-06-01 16:11 - 00000000 ____D () C:\Users\deser_000\AppData\Local\VirtualStore
2014-06-01 16:09 - 2014-06-01 16:13 - 00000000 ____D () C:\Users\deser_000
2014-06-01 16:09 - 2014-06-01 16:09 - 00000020 ___SH () C:\Users\deser_000\ntuser.ini
2014-06-01 16:09 - 2013-07-08 04:52 - 00002102 _____ () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk
2014-06-01 16:09 - 2013-04-25 04:45 - 00000000 ___RD () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-01 16:09 - 2012-07-26 02:13 - 00000000 ___RD () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-01 16:09 - 2012-07-26 02:13 - 00000000 ___RD () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-01 16:09 - 2012-07-26 02:13 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-01 14:21 - 2014-06-01 14:21 - 00000000 __SHD () C:\Recovery
2014-06-01 14:21 - 2014-06-01 14:21 - 00000000 _____ () C:\Recovery.txt
 
==================== One Month Modified Files and Folders =======
 
2014-06-18 19:33 - 2014-06-18 19:33 - 00008859 _____ () C:\Users\deser_000\Downloads\FRST.txt
2014-06-18 19:33 - 2014-06-18 19:33 - 00000000 ____D () C:\FRST
2014-06-18 19:32 - 2014-06-18 19:32 - 02082304 _____ (Farbar) C:\Users\deser_000\Downloads\FRST64.exe
2014-06-18 19:31 - 2014-06-18 19:12 - 00371996 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-18 19:29 - 2012-07-26 01:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-06-18 19:27 - 2013-04-25 08:30 - 00449178 _____ () C:\WINDOWS\system32\prfh0404.dat
2014-06-18 19:27 - 2013-04-25 08:30 - 00136372 _____ () C:\WINDOWS\system32\prfc0404.dat
2014-06-18 19:27 - 2013-04-25 08:23 - 00434858 _____ () C:\WINDOWS\system32\prfh0804.dat
2014-06-18 19:27 - 2013-04-25 08:23 - 00136372 _____ () C:\WINDOWS\system32\prfc0804.dat
2014-06-18 19:27 - 2013-04-25 08:17 - 00788710 _____ () C:\WINDOWS\system32\prfh0816.dat
2014-06-18 19:27 - 2013-04-25 08:17 - 00163794 _____ () C:\WINDOWS\system32\prfc0816.dat
2014-06-18 19:27 - 2013-04-25 08:12 - 00797566 _____ () C:\WINDOWS\system32\perfh013.dat
2014-06-18 19:27 - 2013-04-25 08:12 - 00162406 _____ () C:\WINDOWS\system32\perfc013.dat
2014-06-18 19:27 - 2013-04-25 08:05 - 00792992 _____ () C:\WINDOWS\system32\perfh010.dat
2014-06-18 19:27 - 2013-04-25 08:05 - 00156428 _____ () C:\WINDOWS\system32\perfc010.dat
2014-06-18 19:27 - 2013-04-25 07:59 - 00802038 _____ () C:\WINDOWS\system32\perfh00C.dat
2014-06-18 19:27 - 2013-04-25 07:59 - 00158904 _____ () C:\WINDOWS\system32\perfc00C.dat
2014-06-18 19:27 - 2013-04-25 07:52 - 00799962 _____ () C:\WINDOWS\system32\perfh00A.dat
2014-06-18 19:27 - 2013-04-25 07:52 - 00166174 _____ () C:\WINDOWS\system32\perfc00A.dat
2014-06-18 19:27 - 2013-04-25 07:42 - 00553808 _____ () C:\WINDOWS\system32\perfh008.dat
2014-06-18 19:27 - 2013-04-25 07:42 - 00092678 _____ () C:\WINDOWS\system32\perfc008.dat
2014-06-18 19:27 - 2013-04-25 07:36 - 00753816 _____ () C:\WINDOWS\system32\perfh007.dat
2014-06-18 19:27 - 2013-04-25 07:36 - 00159180 _____ () C:\WINDOWS\system32\perfc007.dat
2014-06-18 19:27 - 2012-07-26 01:28 - 08207714 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-06-18 19:23 - 2014-06-01 16:33 - 00000904 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-18 19:23 - 2012-07-26 01:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-18 19:22 - 2014-06-18 19:22 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\deser_000\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-18 19:13 - 2014-06-18 19:13 - 00000564 _____ () C:\WINDOWS\PFRO.log
2014-06-18 19:13 - 2013-07-08 04:42 - 00000000 ____D () C:\Program Files\mcafee
2014-06-18 19:13 - 2013-07-08 04:42 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-06-18 19:13 - 2013-07-08 04:41 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-18 19:12 - 2012-07-26 02:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-06-18 19:00 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-06-18 18:59 - 2014-06-18 18:59 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-18 18:59 - 2014-06-18 18:59 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-18 18:58 - 2014-06-18 18:58 - 04748896 _____ (Piriform Ltd) C:\Users\deser_000\Downloads\ccsetup414.exe
2014-06-18 18:38 - 2014-06-01 16:33 - 00000908 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-18 18:23 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-06-18 18:10 - 2012-07-25 23:37 - 00000000 ____D () C:\WINDOWS\servicing
2014-06-18 18:09 - 2012-07-25 23:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-06-18 18:08 - 2012-07-25 23:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-06-18 18:07 - 2012-07-26 02:12 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-06-18 18:07 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\WinStore
2014-06-18 18:06 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\en-GB
2014-06-18 18:06 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\system32\en-GB
2014-06-18 18:05 - 2012-07-25 23:38 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-06-14 13:40 - 2014-06-01 16:34 - 00002190 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-14 12:37 - 2014-06-14 12:36 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-01 17:27 - 2012-07-26 02:12 - 00000000 ____D () C:\WINDOWS\rescache
2014-06-01 17:17 - 2014-06-14 12:36 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-01 17:07 - 2014-06-01 16:19 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3374758749-3495921600-8313889-1001
2014-06-01 17:01 - 2014-06-01 16:11 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Packages
2014-06-01 16:40 - 2014-06-01 16:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-01 16:34 - 2014-06-01 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-01 16:34 - 2014-06-01 16:33 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Google
2014-06-01 16:34 - 2014-06-01 16:33 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-01 16:33 - 2014-06-01 16:33 - 00003880 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-01 16:33 - 2014-06-01 16:33 - 00003644 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-01 16:33 - 2014-06-01 16:32 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Deployment
2014-06-01 16:32 - 2014-06-01 16:32 - 00000000 ____D () C:\Users\deser_000\AppData\Local\Apps\2.0
2014-06-01 16:26 - 2013-07-08 03:17 - 00353320 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-06-01 16:18 - 2014-06-01 16:18 - 00000000 _____ () C:\WINDOWS\SysWOW64\Drivers\1043_ASUSTeK_M11BB.alu
2014-06-01 16:16 - 2014-06-01 16:16 - 00000000 ____D () C:\Program Files\ASUS
2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\ATI
2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\Users\deser_000\AppData\Local\ATI
2014-06-01 16:15 - 2014-06-01 16:15 - 00000000 ____D () C:\ProgramData\ATI
2014-06-01 16:14 - 2014-06-01 16:14 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-06-01 16:14 - 2014-06-01 16:14 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\ASUS WebStorage
2014-06-01 16:13 - 2014-06-01 16:13 - 00001433 _____ () C:\Users\deser_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-01 16:13 - 2014-06-01 16:09 - 00000000 ____D () C:\Users\deser_000
2014-06-01 16:13 - 2013-07-08 04:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\OEM
2014-06-01 16:12 - 2014-06-01 16:12 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\Macromedia
2014-06-01 16:12 - 2014-06-01 16:12 - 00000000 ____D () C:\Users\deser_000\AppData\Roaming\Adobe
2014-06-01 16:11 - 2014-06-01 16:11 - 00000000 ____D () C:\Users\deser_000\AppData\Local\VirtualStore
2014-06-01 16:11 - 2012-07-26 02:12 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-06-01 16:09 - 2014-06-01 16:09 - 00000020 ___SH () C:\Users\deser_000\ntuser.ini
2014-06-01 14:22 - 2013-07-08 04:16 - 00000000 ____D () C:\WINDOWS\Panther
2014-06-01 14:21 - 2014-06-01 14:21 - 00000000 __SHD () C:\Recovery
2014-06-01 14:21 - 2014-06-01 14:21 - 00000000 _____ () C:\Recovery.txt
2014-06-01 14:21 - 2012-07-26 02:13 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-05-30 23:16 - 2014-06-18 18:10 - 00703992 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-05-30 23:16 - 2014-06-18 18:10 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-23 20:48 - 2014-06-13 20:37 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-05-23 20:47 - 2014-06-13 20:37 - 02239488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-05-23 20:47 - 2014-06-13 20:37 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-05-23 20:47 - 2014-06-13 20:37 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-05-23 20:47 - 2014-06-13 20:37 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-05-23 20:46 - 2014-06-13 20:37 - 19290112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-23 20:46 - 2014-06-13 20:37 - 15368704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-05-23 20:46 - 2014-06-13 20:37 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-05-23 20:46 - 2014-06-13 20:37 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-05-23 20:46 - 2014-06-13 20:37 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-05-23 20:46 - 2014-06-13 20:37 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-05-23 20:46 - 2014-06-13 20:37 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-23 20:46 - 2014-06-13 20:37 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-05-23 20:46 - 2014-06-13 20:37 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-05-23 20:46 - 2014-06-13 20:37 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-05-23 20:46 - 2014-06-13 20:36 - 03958784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-05-23 20:46 - 2014-06-13 20:36 - 02650112 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-05-23 20:45 - 2014-06-13 20:37 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-05-23 20:45 - 2014-06-13 20:37 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-05-23 20:45 - 2014-06-13 20:37 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-05-23 19:26 - 2014-06-13 20:37 - 01766400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-05-23 19:26 - 2014-06-13 20:37 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-05-23 19:26 - 2014-06-13 20:37 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-05-23 19:26 - 2014-06-13 20:37 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-05-23 19:26 - 2014-06-13 20:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-05-23 19:26 - 2014-06-13 20:36 - 14365696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-23 19:26 - 2014-06-13 20:36 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-05-23 19:25 - 2014-06-13 20:37 - 13731328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-05-23 19:25 - 2014-06-13 20:37 - 01440768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-05-23 19:25 - 2014-06-13 20:37 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-05-23 19:25 - 2014-06-13 20:37 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-05-23 19:25 - 2014-06-13 20:37 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-05-23 19:25 - 2014-06-13 20:37 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-05-23 19:25 - 2014-06-13 20:37 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-05-23 19:25 - 2014-06-13 20:37 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-05-23 19:25 - 2014-06-13 20:36 - 02862080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-05-23 19:25 - 2014-06-13 20:36 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-05-23 19:25 - 2014-06-13 20:36 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-05-23 19:09 - 2014-06-13 20:37 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-23 19:03 - 2014-06-13 20:37 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-23 16:37 - 2014-06-13 20:37 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2014-06-14 12:27
 
==================== End Of Log ============================
 
 
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-06-2014
Ran by Imran at 2014-06-18 19:34:05
Running from C:\Users\deser_000\Downloads
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)
AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.01.05 - ASUSTeK Computer Inc.)
AMD Accelerated Video Transcoding (Version: 12.10.100.30409 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{377C9C44-398B-6CBD-9138-F6B4AB951839}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD VISION Engine Control Center (x32 Version: 2013.0409.2219.38230 - Advanced Micro Devices, Inc.) Hidden
ASUS Easy Update 2 (HKLM-x32\...\{E7AA854E-6756-424E-84C2-4E47D5729AFF}) (Version: 3.00.06 - ASUSTeK Computer Inc.)
ASUS Music Maker (HKLM-x32\...\MAGIX_{AB515018-7F9D-4047-B0C0-F26BAC30F3E1}) (Version: 18.0.3.3 - MAGIX AG)
ASUS Music Maker (Version: 18.0.3.3 - MAGIX AG) Hidden
ASUS MX Suite (HKLM-x32\...\MAGIX_{CFA9C800-9B0B-42E3-92E7-08B5AF2E192E}) (Version: 1.13.0.121 - MAGIX AG)
ASUS MX Suite (Version: 1.13.0.121 - MAGIX AG) Hidden
ASUS Video easy (HKLM-x32\...\MAGIX_{E3185090-8796-46FB-A27F-6C844F106DAC}) (Version: 4.0.1.90 - MAGIX AG)
ASUS Video easy (Version: 4.0.1.90 - MAGIX AG) Hidden
ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.18.159 - ASUS Cloud Corporation)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4127.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4127.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0409.2219.38230 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0409.2219.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0409.2218.38230 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0409.2219.38230 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
eManual (HKLM-x32\...\{0C84E634-EB68-4A54-B21E-A05EC87A4CC5}) (Version: 1.00.06 - ASUSTeK Computer Inc.)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galeria de Fotografias (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
OEM Application Profile (HKLM-x32\...\{769E695A-F93F-803E-3763-9A00A0E38786}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.40 - Ralink)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.10.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6890 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Why ASUS PC (HKLM-x32\...\{5648F9D9-299E-408C-AC1F-59DC75894A1F}) (Version: 1.00.02 - ASUSTeK Computer Inc.)
Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live 软件包 (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Συλλογή φωτογραφιών (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
影像中心 (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
照片库 (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
 
==================== Restore Points  =========================
 
01-06-2014 23:17:20 Language Pack Removal
14-06-2014 18:27:26 Windows Modules Installer
18-06-2014 23:44:12 Windows Update
 
==================== Hosts content: ==========================
 
2012-07-25 23:26 - 2012-07-25 23:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
Task: {0DAEBF49-17B1-4CDB-9E6F-F7754206186E} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)
Task: {0E73362F-0F97-4B99-AF8D-49B2342DE896} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-06-01] (Microsoft Corporation)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {9ADBBA26-9754-465C-B9F2-A42FDA0D88E9} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2012-09-27] ()
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {D0D32384-04C8-4FCC-B85D-D3D7BFF7F69A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-01] (Google Inc.)
Task: {D0DD818A-DF5F-420D-99A0-FE95FA4DD33B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-01] (Google Inc.)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {EF5A316F-7C15-43D2-AC4C-BC271A3F7B9A} - System32\Tasks\ASUS\ASUS Easy Update 2 => C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [2013-04-01] (ASUSTeK Computer Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) =============
 
2013-07-08 04:35 - 2012-06-01 03:42 - 00920736 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
2012-12-19 00:10 - 2012-12-19 00:10 - 00072192 _____ () C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
2013-02-12 17:05 - 2013-02-12 17:05 - 00430080 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingNet4.dll
2013-02-12 17:05 - 2013-02-12 17:05 - 00032768 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResourcesNet4.dll
2013-07-08 04:35 - 2014-06-18 19:23 - 00026112 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll
2013-07-08 04:35 - 2010-06-28 20:58 - 00104448 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll
2014-06-14 13:40 - 2014-06-05 07:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-14 13:40 - 2014-06-05 07:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-14 13:40 - 2014-06-05 07:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-14 13:40 - 2014-06-05 07:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-14 13:40 - 2014-06-05 07:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
 
==================== Safe Mode (whitelisted) ===================
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
 
==================== EXE Association (whitelisted) =============
 
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (06/18/2014 07:20:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0x880
Faulting application start time: 0xmbam.exe0
Faulting application path: mbam.exe1
Faulting module path: mbam.exe2
Report Id: mbam.exe3
Faulting package full name: mbam.exe4
Faulting package-relative application ID: mbam.exe5
 
Error: (06/18/2014 07:20:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0xdc8
Faulting application start time: 0xmbam.exe0
Faulting application path: mbam.exe1
Faulting module path: mbam.exe2
Report Id: mbam.exe3
Faulting package full name: mbam.exe4
Faulting package-relative application ID: mbam.exe5
 
Error: (06/18/2014 06:57:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0x1098
Faulting application start time: 0xmbam.exe0
Faulting application path: mbam.exe1
Faulting module path: mbam.exe2
Report Id: mbam.exe3
Faulting package full name: mbam.exe4
Faulting package-relative application ID: mbam.exe5
 
Error: (06/18/2014 06:55:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0x13a0
Faulting application start time: 0xmbam.exe0
Faulting application path: mbam.exe1
Faulting module path: mbam.exe2
Report Id: mbam.exe3
Faulting package full name: mbam.exe4
Faulting package-relative application ID: mbam.exe5
 
Error: (06/18/2014 06:52:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0x12a8
Faulting application start time: 0xmbam.exe0
Faulting application path: mbam.exe1
Faulting module path: mbam.exe2
Report Id: mbam.exe3
Faulting package full name: mbam.exe4
Faulting package-relative application ID: mbam.exe5
 
Error: (06/18/2014 06:51:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0x1214
Faulting application start time: 0xmbam.exe0
Faulting application path: mbam.exe1
Faulting module path: mbam.exe2
Report Id: mbam.exe3
Faulting package full name: mbam.exe4
Faulting package-relative application ID: mbam.exe5
 
Error: (06/18/2014 06:51:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0xf04
Faulting application start time: 0xmbam.exe0
Faulting application path: mbam.exe1
Faulting module path: mbam.exe2
Report Id: mbam.exe3
Faulting package full name: mbam.exe4
Faulting package-relative application ID: mbam.exe5
 
Error: (06/18/2014 06:50:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0x1314
Faulting application start time: 0xmbam.exe0
Faulting application path: mbam.exe1
Faulting module path: mbam.exe2
Report Id: mbam.exe3
Faulting package full name: mbam.exe4
Faulting package-relative application ID: mbam.exe5
 
Error: (06/18/2014 06:50:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0x37c
Faulting application start time: 0xmbam.exe0
Faulting application path: mbam.exe1
Faulting module path: mbam.exe2
Report Id: mbam.exe3
Faulting package full name: mbam.exe4
Faulting package-relative application ID: mbam.exe5
 
Error: (06/18/2014 06:16:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: delegate_execute.exe, version: 35.0.1916.153, time stamp: 0x538faf86
Faulting module name: delegate_execute.exe, version: 35.0.1916.153, time stamp: 0x538faf86
Exception code: 0xc0000005
Fault offset: 0x000461cc
Faulting process id: 0x10e8
Faulting application start time: 0xdelegate_execute.exe0
Faulting application path: delegate_execute.exe1
Faulting module path: delegate_execute.exe2
Report Id: delegate_execute.exe3
Faulting package full name: delegate_execute.exe4
Faulting package-relative application ID: delegate_execute.exe5
 
 
System errors:
=============
Error: (06/18/2014 07:11:38 PM) (Source: DCOM) (EventID: 10010) (User: Imran)
Description: {209500FC-6B45-4693-8871-6296C4843751}
 
Error: (06/18/2014 07:11:08 PM) (Source: DCOM) (EventID: 10010) (User: Imran)
Description: {209500FC-6B45-4693-8871-6296C4843751}
 
Error: (06/18/2014 06:56:39 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {209500FC-6B45-4693-8871-6296C4843751}
 
Error: (06/18/2014 06:13:05 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The MBAMService service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (06/18/2014 06:12:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The MBAMScheduler service failed to start due to the following error: 
%%1053
 
Error: (06/18/2014 06:12:37 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the MBAMScheduler service to connect.
 
Error: (06/18/2014 06:10:10 PM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
Description: A corruption was discovered in the file system structure on volume C:.
 
The Master File Table (MFT) contains a corrupted file record.  The file reference number is 0x3000000048e13.  The name of the file is "\Windows\Logs\CBS\CBS.log".
 
Error: (06/18/2014 06:10:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The MBAMService service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (06/18/2014 06:09:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The MBAMScheduler service failed to start due to the following error: 
%%1053
 
Error: (06/18/2014 06:09:35 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the MBAMScheduler service to connect.
 
 
Microsoft Office Sessions:
=========================
Error: (06/18/2014 07:20:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd88001cf8b5cae4762dfC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllec01d4f6-f74f-11e3-be78-d850e6c23359
 
Error: (06/18/2014 07:20:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fddc801cf8b5ca6093382C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dlle40bcb9f-f74f-11e3-be78-d850e6c23359
 
Error: (06/18/2014 06:57:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd109801cf8b5980bb23c6C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllbeea3caa-f74c-11e3-be77-d850e6c23359
 
Error: (06/18/2014 06:55:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd13a001cf8b591fbad9bcC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll5e178afc-f74c-11e3-be77-d850e6c23359
 
Error: (06/18/2014 06:52:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd12a801cf8b58bde99165C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllfbab8aae-f74b-11e3-be77-d850e6c23359
 
Error: (06/18/2014 06:51:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd121401cf8b589d31aa62C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dlldaf13e8a-f74b-11e3-be77-d850e6c23359
 
Error: (06/18/2014 06:51:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdf0401cf8b5890280562C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllcde9fea4-f74b-11e3-be77-d850e6c23359
 
Error: (06/18/2014 06:50:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd131401cf8b58823fa87aC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllc0040157-f74b-11e3-be77-d850e6c23359
 
Error: (06/18/2014 06:50:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd37c01cf8b587a42fc3bC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllb8472d59-f74b-11e3-be77-d850e6c23359
 
Error: (06/18/2014 06:16:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: delegate_execute.exe35.0.1916.153538faf86delegate_execute.exe35.0.1916.153538faf86c0000005000461cc10e801cf8b53b227f8b3C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\delegate_execute.exeC:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\delegate_execute.exef153c1ee-f746-11e3-be77-d850e6c23359
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 22%
Total physical RAM: 11464.29 MB
Available physical RAM: 8907.13 MB
Total Pagefile: 13128.29 MB
Available Pagefile: 10403.76 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB
 
==================== Drives ================================
 
Drive c: (Windows) (Fixed) (Total:149.66 GB) (Free:101.06 GB) NTFS
Drive d: (Data) (Fixed) (Total:761.33 GB) (Free:761.14 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 710B350F)
 
Partition: GPT Partition Type.
 
==================== End Of Log ============================
 
Link to post
Share on other sites
  • 2 weeks later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.

  I accept