Jump to content

PUP.optional.superfish.A Resistant to removal

sparent27
 Share

Recommended Posts

sparent27

sparent27

Posted
Posted

Hi,

 

My old mom computer's is infected by PUP.optional.superfish.A. I tried removing it with MBAM and ESET without success. It disappear, but as soon as Chrome is used, it comes back. I tried deleting the individual files (in the Chrome Appdata folder) and deleting all history, cookies, etc, without success. Removing it is safe mode is not better.

 

Your support is highly appreciated.

 

Thank you!
 
Stephane

 

Here are the MBAM and FRST reports:

 

 

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 2014-07-16
Scan Time: 16:46:42
Logfile: 
Administrator: Yes
 
Version: 2.00.2.1012
Malware Database: v2014.07.16.08
Rootkit Database: v2014.07.14.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Francine
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 286812
Time Elapsed: 24 min, 12 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 0
(No malicious items detected)
 
Registry Values: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Folders: 0
(No malicious items detected)
 
Files: 2
PUP.Optional.Superfish.A, C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, Quarantined, [f87c6e3117642b0b068bc904c53d5ba5], 
PUP.Optional.Superfish.A, C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, Quarantined, [d59f2976265586b068292aa3877b7b85], 
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-07-2014 01
Ran by Francine (administrator) on FRANCINE-HP on 16-07-2014 19:01:40
Running from C:\Users\Francine\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Français (France)
Internet Explorer Version 11
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(Trusteer Ltd.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Trusteer Ltd.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Micro Application) C:\Program Files (x86)\Micro Application\LauncherMA.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [sysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-02-15] (IDT, Inc.)
HKLM-x32\...\Run: [iAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-12] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-21] (AVAST Software)
HKLM-x32\...\Run: [Magic Desktop for HP notification] => C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-21] (Easybits)
HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-2003476506-1543607467-2904163087-1000\...\Run: [Google Update] => C:\Users\Francine\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-09-18] (Google Inc.)
HKU\S-1-5-21-2003476506-1543607467-2904163087-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [24477056 2014-06-27] (Google)
HKU\S-1-5-21-2003476506-1543607467-2904163087-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2003476506-1543607467-2904163087-1000\...\MountPoints2: F - F:\laucher.exe
HKU\S-1-5-21-2003476506-1543607467-2904163087-1000\...\MountPoints2: {035a5ec3-cc5d-11e1-bd5e-78e3b54f6a7d} - F:\laucher.exe
HKU\S-1-5-21-2003476506-1543607467-2904163087-1000\...\MountPoints2: {5e3391a3-5a0c-11e3-9687-78e3b54f6a7d} - F:\DPFMate.exe
HKU\S-1-5-21-2003476506-1543607467-2904163087-1000\...\MountPoints2: {5e3391a5-5a0c-11e3-9687-78e3b54f6a7d} - F:\DPFMate.exe
Startup: C:\Users\Francine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Lanceur.lnk
ShortcutTarget: Lanceur.lnk -> C:\Program Files (x86)\Micro Application\LauncherMA.exe (Micro Application)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPCON/4
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchTerms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://qc.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://fr.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchTerms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://qc.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://fr.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {6AEE0B70-51F3-4257-9C75-26A6ADE6D157} URL = 
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://qc.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://fr.wikipedia.org/wiki/Special:Search?search={searchTerms}
BHO: avast! Online Security -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)
BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-04-18] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 216.239.64.154 216.239.64.155
 
FireFox:
========
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\13\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Francine\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Francine\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Francine\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Francine\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Francine\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Francine\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
 
Chrome: 
=======
CHR HomePage: hxxp://ca.msn.com/defaultf.aspx?pc=UP97&ocid=UP97DHP&dt=072413
CHR StartupUrls: "hxxp://google.ca/"
CHR NewTab: "chrome-extension://mgmiemnjjchgkmgbeljfocdjjnpjnmcg/ntp.html"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\Francine\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Francine\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Java Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (WildTangent Games App Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\5\NP_wtapp.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll No File
CHR Extension: (Google Drive) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-07]
CHR Extension: (Dark Vibe) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkckeanhmkjaechlhllmapjaaglgpcbj [2013-02-09]
CHR Extension: (MagicScroll eBook Reader) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgnmgfdoiplfmhgghbmlphanpfmjble [2014-05-31]
CHR Extension: (AdBlock) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-25]
CHR Extension: (Cut the Rope) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkddaofiamhgfjmaccfcfpfolpgbeomj [2013-02-09]
CHR Extension: (Digital Clock Widget [ANTP]) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikimcdcgajipgcoehakmgloecbaacmoj [2013-02-09]
CHR Extension: (Lettre Compte Triple) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjeddnjjfojmepmehcknfgdlefcolomp [2013-02-09]
CHR Extension: (Youtube search widget [aNTP]) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjiebkkdnganciijgjbfnbbdiblkaaii [2013-02-09]
CHR Extension: (Skype Click to Call) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-08-25]
CHR Extension: (Awesome New Tab Page™) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg [2013-02-09]
CHR Extension: (Google Wallet) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25]
CHR Extension: (Wikipedia [ANTP]) - C:\Users\Francine\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaibilkkobkbfklppblhbglnfdebpip [2013-02-09]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Francine\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-11-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-10-19]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
 
==================== Services (Whitelisted) =================
 
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-21] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [File not signed]
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-02-01] (WildTangent)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2375168 2011-03-07] (Realsil Microelectronics Inc.) [File not signed]
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [581568 2014-03-27] (RealNetworks, Inc.)
R2 RapportMgmtService; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1886488 2014-06-23] (Trusteer Ltd.)
 
==================== Drivers (Whitelisted) ====================
 
R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-03-06] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-21] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-21] ()
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-16] (Malwarebytes Corporation)
R1 RapportCerberus_69108; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_69108.sys [631128 2014-07-15] ()
R1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [299736 2014-06-23] (Trusteer Ltd.)
R0 RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [358616 2014-06-23] (Trusteer Ltd.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-07-16 19:01 - 2014-07-16 19:02 - 00024211 _____ () C:\Users\Francine\Desktop\FRST.txt
2014-07-16 19:01 - 2014-07-16 19:01 - 00000000 ____D () C:\FRST
2014-07-16 17:01 - 2014-07-16 17:01 - 01348263 _____ () C:\Users\Francine\Desktop\adwcleaner_3.215.exe
2014-07-16 16:44 - 2014-07-16 16:44 - 00266288 _____ () C:\Windows\Minidump\071614-23634-01.dmp
2014-07-16 16:28 - 2014-07-16 16:28 - 00001431 _____ () C:\Users\Francine\Desktop\july 16.txt
2014-07-16 16:26 - 2014-07-16 16:26 - 02086912 _____ (Farbar) C:\Users\Francine\Desktop\FRST64.exe
2014-07-16 03:18 - 2014-01-08 22:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-07-16 03:18 - 2014-01-03 18:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-07-15 21:00 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-15 21:00 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-15 21:00 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-15 21:00 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-15 20:59 - 2014-07-15 21:00 - 00004251 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-15 20:54 - 2013-10-01 22:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-07-15 20:54 - 2013-10-01 22:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-07-15 20:54 - 2013-10-01 22:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-07-15 20:54 - 2013-10-01 21:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-07-15 20:54 - 2013-10-01 21:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-07-15 20:54 - 2013-10-01 21:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-07-15 20:54 - 2013-10-01 21:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-07-15 20:54 - 2013-10-01 20:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-07-15 20:54 - 2013-10-01 20:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-07-15 20:54 - 2013-10-01 20:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-07-15 20:54 - 2013-10-01 20:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-07-15 20:54 - 2013-10-01 20:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-07-15 20:54 - 2013-10-01 19:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-07-15 20:54 - 2013-10-01 19:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-07-15 20:54 - 2013-10-01 19:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-07-15 20:54 - 2013-10-01 18:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-07-15 20:53 - 2013-09-24 22:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-07-15 20:53 - 2013-09-24 21:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-07-15 08:52 - 2014-06-29 22:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-15 08:51 - 2014-06-29 22:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-15 08:51 - 2014-06-17 22:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-15 08:51 - 2014-06-17 21:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-15 08:51 - 2014-06-17 21:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-15 08:51 - 2014-06-06 06:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-15 08:51 - 2014-06-06 05:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-15 08:51 - 2014-05-30 02:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-15 08:49 - 2014-05-30 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-15 08:49 - 2014-05-30 04:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-15 08:49 - 2014-05-30 04:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-15 08:49 - 2014-05-30 04:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-15 08:49 - 2014-05-30 04:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-15 08:49 - 2014-05-30 04:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-15 08:49 - 2014-05-30 04:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-15 08:49 - 2014-05-30 03:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-15 08:49 - 2014-05-30 03:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-15 08:49 - 2014-05-30 03:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-15 08:49 - 2014-05-30 03:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-15 08:49 - 2014-05-30 03:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-15 08:49 - 2014-05-30 03:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-15 08:49 - 2014-05-30 03:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-15 08:48 - 2014-06-20 16:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-15 08:48 - 2014-06-20 15:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-15 08:48 - 2014-06-18 21:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-15 08:48 - 2014-06-18 21:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-15 08:48 - 2014-06-18 21:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-15 08:48 - 2014-06-18 20:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-15 08:48 - 2014-06-18 20:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-15 08:48 - 2014-06-18 20:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-15 08:48 - 2014-06-18 20:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-15 08:48 - 2014-06-18 20:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-15 08:48 - 2014-06-18 20:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-15 08:48 - 2014-06-18 20:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-15 08:48 - 2014-06-18 20:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-15 08:48 - 2014-06-18 20:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-15 08:48 - 2014-06-18 20:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-15 08:48 - 2014-06-18 20:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-15 08:48 - 2014-06-18 20:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-15 08:48 - 2014-06-18 20:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-15 08:48 - 2014-06-18 20:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-15 08:48 - 2014-06-18 19:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-15 08:48 - 2014-06-18 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-15 08:48 - 2014-06-18 19:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-15 08:48 - 2014-06-18 19:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-15 08:48 - 2014-06-18 19:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-15 08:48 - 2014-06-18 19:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-15 08:48 - 2014-06-18 19:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-15 08:48 - 2014-06-18 19:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-15 08:48 - 2014-06-18 19:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-15 08:48 - 2014-06-18 19:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-15 08:48 - 2014-06-18 19:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-15 08:48 - 2014-06-18 19:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-15 08:48 - 2014-06-18 19:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-15 08:48 - 2014-06-18 19:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-15 08:48 - 2014-06-18 19:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-15 08:48 - 2014-06-18 19:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-15 08:48 - 2014-06-18 19:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-15 08:48 - 2014-06-18 19:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-15 08:48 - 2014-06-18 19:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-15 08:48 - 2014-06-18 19:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-15 08:48 - 2014-06-18 19:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-15 08:48 - 2014-06-18 19:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-15 08:48 - 2014-06-18 18:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-15 08:48 - 2014-06-18 18:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-15 08:48 - 2014-06-18 18:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-15 08:48 - 2014-06-18 18:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-15 08:48 - 2014-06-18 18:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-15 08:48 - 2014-06-18 18:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-15 08:48 - 2014-06-18 18:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-15 08:48 - 2014-06-18 18:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-15 08:48 - 2014-06-18 18:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-15 08:48 - 2014-06-18 18:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-15 08:48 - 2014-06-18 18:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-15 08:48 - 2014-06-18 18:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-15 08:48 - 2014-06-18 18:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-15 08:44 - 2014-06-05 10:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-15 08:43 - 2014-06-05 10:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-15 08:43 - 2014-06-05 10:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-15 08:18 - 2014-07-16 16:46 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-15 08:18 - 2014-07-15 08:18 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-15 08:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-15 08:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-15 08:18 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-14 23:29 - 2014-07-14 23:29 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-14 21:53 - 2014-07-15 08:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-14 21:52 - 2014-07-15 08:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-14 21:52 - 2014-07-14 21:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-13 20:25 - 2014-06-18 19:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-13 20:25 - 2014-06-18 18:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-12 21:32 - 2014-07-12 21:32 - 00000000 ____D () C:\Program Files (x86)\NirSoft
2014-07-12 12:18 - 2014-07-12 12:18 - 00000000 ____D () C:\Users\Francine\AppData\Local\{F26AE192-85F4-4553-BD08-A8E3DBCA081C}
2014-07-11 14:29 - 2014-07-11 14:29 - 00000000 ____D () C:\Users\Francine\AppData\Local\{A8BF0DA8-90BC-4DEB-BBC5-9769326C038E}
2014-07-10 11:21 - 2014-07-10 11:21 - 00000000 ____D () C:\Users\Francine\AppData\Local\{8588FD6D-5650-45EF-978F-6A2AD410C56C}
2014-07-10 10:14 - 2014-07-10 10:14 - 00000000 ____D () C:\Users\Francine\AppData\Local\{7DA823F8-296A-4380-9D9B-CA560E79087B}
2014-07-09 17:18 - 2014-07-09 17:18 - 00000000 ____D () C:\Users\Francine\AppData\Local\{1BD2729E-93C9-4575-B02B-189D9CCD7214}
2014-07-08 10:04 - 2014-07-08 10:05 - 00000000 ____D () C:\Users\Francine\AppData\Local\{B3D09261-7266-46F8-A734-60EA124FE8DA}
2014-07-07 13:41 - 2014-07-07 13:41 - 00000000 ____D () C:\Users\Francine\AppData\Local\{3D6D7D57-3169-4524-B697-3EE3F7D5699A}
2014-07-06 21:25 - 2014-07-06 21:26 - 00000000 ____D () C:\Users\Francine\AppData\Local\{E73468B3-CF6E-4B69-8DCA-67B845639EA1}
2014-07-06 14:34 - 2014-07-06 14:34 - 00000000 ____D () C:\Users\Francine\AppData\Local\{79E8C406-66C0-41AC-8D85-29AD9AE336ED}
2014-07-05 22:40 - 2014-07-05 22:40 - 00000000 ____D () C:\Users\Francine\AppData\Local\{1858E43E-15EA-4A85-9801-AB1C17D19E32}
2014-07-05 09:07 - 2014-07-05 09:07 - 00000000 ____D () C:\Users\Francine\AppData\Local\{20A93AE6-1EDF-414E-95C9-1BE053E4FC89}
2014-07-04 10:44 - 2014-07-04 10:44 - 00000000 ____D () C:\Users\Francine\AppData\Local\{E4AEE383-0967-44E8-BD6B-3F0E7BF5FC12}
2014-07-04 09:21 - 2014-07-04 09:21 - 00000000 ____D () C:\Users\Francine\AppData\Local\{DDC21C75-9A35-4482-B4A5-9E4A8DD45A26}
2014-07-03 08:11 - 2014-07-03 08:12 - 00000000 ____D () C:\Users\Francine\AppData\Local\{E76E2C00-09DF-4417-9DB1-4316581EA8A7}
2014-07-02 07:56 - 2014-07-02 07:57 - 00000000 ____D () C:\Users\Francine\AppData\Local\{8960ED1F-C84E-4F41-9A3A-60B2F8AA8B9F}
2014-07-01 15:34 - 2014-07-01 15:34 - 00000000 ____D () C:\Users\Francine\AppData\Local\{40CC7CBC-80A8-4176-8DF5-9F2BDA11FFD9}
2014-07-01 13:33 - 2014-07-01 13:33 - 00000000 ____D () C:\Users\Francine\AppData\Local\{6B1EFECF-C6A5-4550-B27A-D415CAC00F97}
2014-07-01 10:16 - 2014-07-01 10:16 - 00000000 ____D () C:\Users\Francine\AppData\Local\{C732D388-18A6-4216-BF4B-5FEE98F4F3BB}
2014-07-01 09:14 - 2014-07-01 09:15 - 00266288 _____ () C:\Windows\Minidump\070114-27206-01.dmp
2014-06-30 12:21 - 2014-06-30 12:21 - 00000000 ____D () C:\Users\Francine\AppData\Local\{67FCB70D-5607-4981-B43F-8258E85F2206}
2014-06-29 20:41 - 2014-06-29 20:41 - 00000000 ____D () C:\Users\Francine\AppData\Local\{26FD0B9C-9F52-4318-9370-A6E73D2D6415}
2014-06-29 16:34 - 2014-07-15 08:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiskCheckup
2014-06-29 16:34 - 2014-07-15 08:10 - 00000000 ____D () C:\Program Files (x86)\DiskCheckup
2014-06-29 14:05 - 2014-06-29 14:05 - 00266288 _____ () C:\Windows\Minidump\062914-24694-01.dmp
2014-06-29 08:58 - 2014-06-29 08:58 - 00266288 _____ () C:\Windows\Minidump\062914-36036-01.dmp
2014-06-29 08:56 - 2014-06-29 08:56 - 00000000 _____ () C:\Users\Francine\AppData\Local\{D7A78D8F-1D8F-40AF-B83A-6B2328EF8DAD}
2014-06-28 21:56 - 2014-06-28 21:56 - 00000000 ____D () C:\Users\Francine\AppData\Local\{DB97CFFC-3DCF-473D-8CD2-62C961D6B148}
2014-06-28 09:42 - 2014-06-28 09:42 - 00000000 ____D () C:\Users\Francine\AppData\Local\{EE7794F2-F710-49E0-9A7F-5147D9D7F0F5}
2014-06-27 17:19 - 2014-06-27 17:19 - 00000245 _____ () C:\Users\Francine\Downloads\Tours_Amérique_-_1er_juillet_2014.vcf
2014-06-27 12:43 - 2014-06-27 12:43 - 00000000 ____D () C:\Users\Francine\AppData\Local\{77DB333B-BFFA-499D-9C27-2553A0B6A26C}
2014-06-27 08:46 - 2014-06-27 08:46 - 00000000 ____D () C:\Users\Francine\AppData\Local\{C9BCD333-4D2D-4D9D-BB9F-900180AEDC98}
2014-06-26 17:52 - 2014-06-26 17:53 - 00000000 ____D () C:\Users\Francine\AppData\Local\{81F35A24-FCF4-4233-90C2-6B96172667CA}
2014-06-25 21:47 - 2014-07-15 08:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-25 21:47 - 2014-07-15 08:06 - 00000000 ____D () C:\Users\Francine\AppData\Local\Skype
2014-06-25 21:47 - 2014-06-25 21:47 - 00002515 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-25 08:54 - 2014-06-25 08:54 - 00000000 ____D () C:\Users\Francine\AppData\Local\{436472E0-95A3-489E-8FD8-38E1D8E427C0}
2014-06-24 09:46 - 2014-06-24 09:46 - 00000000 ____D () C:\Users\Francine\AppData\Local\{C9927DBF-5C2B-4986-950E-6F941947C694}
2014-06-23 08:21 - 2014-06-23 08:21 - 00000000 ____D () C:\Users\Francine\AppData\Local\{2B5DE1FB-E9E0-4A95-849C-80EC43F99FDE}
2014-06-22 08:09 - 2014-06-22 08:09 - 00000000 ____D () C:\Users\Francine\AppData\Local\{F50E640B-F4DE-437A-8518-3DA569B53998}
2014-06-21 17:45 - 2014-06-21 17:45 - 00000000 ____D () C:\Users\Francine\AppData\Local\{05255A05-B9D1-4133-9BB7-1310AB27AC2B}
2014-06-20 12:09 - 2014-06-20 12:09 - 00000000 ____D () C:\Users\Francine\AppData\Local\{3C28DFDB-6193-4C32-87B3-559FA1E55099}
2014-06-19 07:27 - 2014-06-19 07:27 - 00000000 ____D () C:\Users\Francine\AppData\Local\{0182282A-FD2B-45C5-9B6A-D64C3B47BE3F}
2014-06-19 00:15 - 2014-06-19 00:15 - 00000000 ____D () C:\Users\Francine\AppData\Local\{1D9E4F90-BA50-487A-80EF-FB497DC2960D}
2014-06-18 17:53 - 2014-06-18 17:53 - 00000000 ____D () C:\Users\Francine\AppData\Local\{36579151-36AF-4EC7-A305-690F3B0821A6}
2014-06-17 11:34 - 2014-06-17 11:34 - 00000000 ____D () C:\Users\Francine\AppData\Local\{61A25814-695C-4F2A-A80A-D9C9D250998D}
2014-06-16 12:20 - 2014-06-16 12:20 - 00000000 ____D () C:\Users\Francine\AppData\Local\{6B5867F2-6853-4DE3-9499-5F01EE8EF8AA}
 
==================== One Month Modified Files and Folders =======
 
2014-07-16 19:02 - 2014-07-16 19:01 - 00024211 _____ () C:\Users\Francine\Desktop\FRST.txt
2014-07-16 19:01 - 2014-07-16 19:01 - 00000000 ____D () C:\FRST
2014-07-16 18:51 - 2011-09-18 15:27 - 00000000 ____D () C:\Users\Francine\AppData\Roaming\Skype
2014-07-16 18:50 - 2011-09-18 15:07 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003476506-1543607467-2904163087-1000UA.job
2014-07-16 18:45 - 2013-04-13 18:00 - 00001002 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-16 18:37 - 2011-10-01 20:52 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-16 18:11 - 2013-07-07 17:10 - 00003960 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A4291E50-323A-4D8F-9461-13A475194F6A}
2014-07-16 17:53 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2014-07-16 17:50 - 2011-09-18 15:07 - 00001038 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003476506-1543607467-2904163087-1000Core.job
2014-07-16 17:01 - 2014-07-16 17:01 - 01348263 _____ () C:\Users\Francine\Desktop\adwcleaner_3.215.exe
2014-07-16 16:54 - 2009-07-14 00:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-16 16:54 - 2009-07-14 00:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-16 16:48 - 2011-06-02 12:56 - 01960362 _____ () C:\Windows\WindowsUpdate.log
2014-07-16 16:46 - 2014-07-15 08:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-16 16:46 - 2013-11-30 20:44 - 00000000 ___RD () C:\Users\Francine\Google Drive
2014-07-16 16:44 - 2014-07-16 16:44 - 00266288 _____ () C:\Windows\Minidump\071614-23634-01.dmp
2014-07-16 16:44 - 2011-10-05 20:15 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-07-16 16:44 - 2011-10-01 20:52 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-16 16:44 - 2011-09-05 19:02 - 00000000 ____D () C:\Windows\Minidump
2014-07-16 16:44 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-16 16:44 - 2009-07-14 00:51 - 00055543 _____ () C:\Windows\setupact.log
2014-07-16 16:44 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\tracing
2014-07-16 16:43 - 2011-09-05 19:01 - 548330068 _____ () C:\Windows\MEMORY.DMP
2014-07-16 16:43 - 2010-11-20 23:47 - 00460002 _____ () C:\Windows\PFRO.log
2014-07-16 16:37 - 2009-07-13 23:20 - 00000000 __RSD () C:\Windows\Media
2014-07-16 16:28 - 2014-07-16 16:28 - 00001431 _____ () C:\Users\Francine\Desktop\july 16.txt
2014-07-16 16:26 - 2014-07-16 16:26 - 02086912 _____ (Farbar) C:\Users\Francine\Desktop\FRST64.exe
2014-07-15 23:01 - 2012-09-03 09:15 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-15 22:34 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\security
2014-07-15 21:01 - 2013-12-21 19:53 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-15 21:00 - 2014-07-15 20:59 - 00004251 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-15 21:00 - 2013-07-06 19:06 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-15 20:04 - 2009-07-14 00:45 - 00276904 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-15 20:02 - 2014-05-01 15:29 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-15 20:02 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-15 20:02 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-15 19:58 - 2013-07-16 19:05 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-15 19:55 - 2011-08-19 18:27 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-15 18:32 - 2013-09-12 08:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trusteer Sécurité des points d'accès
2014-07-15 12:59 - 2011-11-20 16:59 - 00003204 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForFrancine
2014-07-15 12:59 - 2011-11-20 16:59 - 00000344 _____ () C:\Windows\Tasks\HPCeeScheduleForFrancine.job
2014-07-15 08:47 - 2013-04-13 18:00 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-15 08:47 - 2013-04-13 18:00 - 00003940 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-15 08:47 - 2011-09-18 15:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-15 08:43 - 2013-11-30 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-07-15 08:19 - 2013-04-02 03:28 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-15 08:18 - 2014-07-15 08:18 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-15 08:18 - 2014-07-14 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-15 08:18 - 2014-07-14 21:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-15 08:12 - 2014-06-29 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiskCheckup
2014-07-15 08:12 - 2011-08-06 15:46 - 00000000 ____D () C:\Users\Francine
2014-07-15 08:10 - 2014-06-29 16:34 - 00000000 ____D () C:\Program Files (x86)\DiskCheckup
2014-07-15 08:10 - 2014-06-25 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-15 08:10 - 2013-10-19 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-07-15 08:10 - 2012-04-05 16:48 - 00000000 ____D () C:\Windows\system32\Macromed
2014-07-15 08:10 - 2011-09-18 15:27 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-15 08:10 - 2011-09-18 15:00 - 00000000 ____D () C:\ProgramData\Skype
2014-07-15 08:10 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-15 08:10 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-07-15 08:10 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\AppCompat
2014-07-15 08:10 - 2009-07-13 23:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-15 08:09 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\registration
2014-07-15 08:06 - 2014-06-25 21:47 - 00000000 ____D () C:\Users\Francine\AppData\Local\Skype
2014-07-14 23:29 - 2014-07-14 23:29 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-14 22:20 - 2011-09-04 19:27 - 00000000 ____D () C:\Users\Francine\AppData\Local\CrashDumps
2014-07-14 21:52 - 2014-07-14 21:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-13 16:46 - 2011-06-02 13:50 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-07-12 21:32 - 2014-07-12 21:32 - 00000000 ____D () C:\Program Files (x86)\NirSoft
2014-07-12 12:18 - 2014-07-12 12:18 - 00000000 ____D () C:\Users\Francine\AppData\Local\{F26AE192-85F4-4553-BD08-A8E3DBCA081C}
2014-07-11 14:29 - 2014-07-11 14:29 - 00000000 ____D () C:\Users\Francine\AppData\Local\{A8BF0DA8-90BC-4DEB-BBC5-9769326C038E}
2014-07-11 03:02 - 2014-07-15 21:00 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-11 02:56 - 2014-07-15 21:00 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-11 02:56 - 2014-07-15 21:00 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-11 02:55 - 2014-07-15 21:00 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-10 11:21 - 2014-07-10 11:21 - 00000000 ____D () C:\Users\Francine\AppData\Local\{8588FD6D-5650-45EF-978F-6A2AD410C56C}
2014-07-10 10:14 - 2014-07-10 10:14 - 00000000 ____D () C:\Users\Francine\AppData\Local\{7DA823F8-296A-4380-9D9B-CA560E79087B}
2014-07-09 17:18 - 2014-07-09 17:18 - 00000000 ____D () C:\Users\Francine\AppData\Local\{1BD2729E-93C9-4575-B02B-189D9CCD7214}
2014-07-08 10:05 - 2014-07-08 10:04 - 00000000 ____D () C:\Users\Francine\AppData\Local\{B3D09261-7266-46F8-A734-60EA124FE8DA}
2014-07-07 13:41 - 2014-07-07 13:41 - 00000000 ____D () C:\Users\Francine\AppData\Local\{3D6D7D57-3169-4524-B697-3EE3F7D5699A}
2014-07-06 21:26 - 2014-07-06 21:25 - 00000000 ____D () C:\Users\Francine\AppData\Local\{E73468B3-CF6E-4B69-8DCA-67B845639EA1}
2014-07-06 14:34 - 2014-07-06 14:34 - 00000000 ____D () C:\Users\Francine\AppData\Local\{79E8C406-66C0-41AC-8D85-29AD9AE336ED}
2014-07-05 22:40 - 2014-07-05 22:40 - 00000000 ____D () C:\Users\Francine\AppData\Local\{1858E43E-15EA-4A85-9801-AB1C17D19E32}
2014-07-05 09:07 - 2014-07-05 09:07 - 00000000 ____D () C:\Users\Francine\AppData\Local\{20A93AE6-1EDF-414E-95C9-1BE053E4FC89}
2014-07-04 10:44 - 2014-07-04 10:44 - 00000000 ____D () C:\Users\Francine\AppData\Local\{E4AEE383-0967-44E8-BD6B-3F0E7BF5FC12}
2014-07-04 10:23 - 2011-10-01 16:58 - 00000000 ____D () C:\Users\Francine\AppData\Local\Windows Live
2014-07-04 09:21 - 2014-07-04 09:21 - 00000000 ____D () C:\Users\Francine\AppData\Local\{DDC21C75-9A35-4482-B4A5-9E4A8DD45A26}
2014-07-03 08:12 - 2014-07-03 08:11 - 00000000 ____D () C:\Users\Francine\AppData\Local\{E76E2C00-09DF-4417-9DB1-4316581EA8A7}
2014-07-02 07:57 - 2014-07-02 07:56 - 00000000 ____D () C:\Users\Francine\AppData\Local\{8960ED1F-C84E-4F41-9A3A-60B2F8AA8B9F}
2014-07-01 15:34 - 2014-07-01 15:34 - 00000000 ____D () C:\Users\Francine\AppData\Local\{40CC7CBC-80A8-4176-8DF5-9F2BDA11FFD9}
2014-07-01 13:33 - 2014-07-01 13:33 - 00000000 ____D () C:\Users\Francine\AppData\Local\{6B1EFECF-C6A5-4550-B27A-D415CAC00F97}
2014-07-01 10:16 - 2014-07-01 10:16 - 00000000 ____D () C:\Users\Francine\AppData\Local\{C732D388-18A6-4216-BF4B-5FEE98F4F3BB}
2014-07-01 09:15 - 2014-07-01 09:14 - 00266288 _____ () C:\Windows\Minidump\070114-27206-01.dmp
2014-06-30 19:43 - 2011-04-18 15:17 - 00748362 _____ () C:\Windows\system32\perfh00C.dat
2014-06-30 19:43 - 2011-04-18 15:17 - 00150596 _____ () C:\Windows\system32\perfc00C.dat
2014-06-30 19:43 - 2009-07-14 01:13 - 01671208 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-30 12:21 - 2014-06-30 12:21 - 00000000 ____D () C:\Users\Francine\AppData\Local\{67FCB70D-5607-4981-B43F-8258E85F2206}
2014-06-29 22:09 - 2014-07-15 08:52 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-29 22:04 - 2014-07-15 08:51 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-29 20:41 - 2014-06-29 20:41 - 00000000 ____D () C:\Users\Francine\AppData\Local\{26FD0B9C-9F52-4318-9370-A6E73D2D6415}
2014-06-29 14:05 - 2014-06-29 14:05 - 00266288 _____ () C:\Windows\Minidump\062914-24694-01.dmp
2014-06-29 08:58 - 2014-06-29 08:58 - 00266288 _____ () C:\Windows\Minidump\062914-36036-01.dmp
2014-06-29 08:56 - 2014-06-29 08:56 - 00000000 _____ () C:\Users\Francine\AppData\Local\{D7A78D8F-1D8F-40AF-B83A-6B2328EF8DAD}
2014-06-28 21:56 - 2014-06-28 21:56 - 00000000 ____D () C:\Users\Francine\AppData\Local\{DB97CFFC-3DCF-473D-8CD2-62C961D6B148}
2014-06-28 09:42 - 2014-06-28 09:42 - 00000000 ____D () C:\Users\Francine\AppData\Local\{EE7794F2-F710-49E0-9A7F-5147D9D7F0F5}
2014-06-27 17:19 - 2014-06-27 17:19 - 00000245 _____ () C:\Users\Francine\Downloads\Tours_Amérique_-_1er_juillet_2014.vcf
2014-06-27 12:43 - 2014-06-27 12:43 - 00000000 ____D () C:\Users\Francine\AppData\Local\{77DB333B-BFFA-499D-9C27-2553A0B6A26C}
2014-06-27 08:46 - 2014-06-27 08:46 - 00000000 ____D () C:\Users\Francine\AppData\Local\{C9BCD333-4D2D-4D9D-BB9F-900180AEDC98}
2014-06-26 17:53 - 2014-06-26 17:52 - 00000000 ____D () C:\Users\Francine\AppData\Local\{81F35A24-FCF4-4233-90C2-6B96172667CA}
2014-06-25 21:47 - 2014-06-25 21:47 - 00002515 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-25 08:54 - 2014-06-25 08:54 - 00000000 ____D () C:\Users\Francine\AppData\Local\{436472E0-95A3-489E-8FD8-38E1D8E427C0}
2014-06-24 09:46 - 2014-06-24 09:46 - 00000000 ____D () C:\Users\Francine\AppData\Local\{C9927DBF-5C2B-4986-950E-6F941947C694}
2014-06-23 12:15 - 2012-03-16 21:27 - 00358616 _____ (Trusteer Ltd.) C:\Windows\system32\Drivers\RapportKE64.sys
2014-06-23 08:21 - 2014-06-23 08:21 - 00000000 ____D () C:\Users\Francine\AppData\Local\{2B5DE1FB-E9E0-4A95-849C-80EC43F99FDE}
2014-06-22 08:09 - 2014-06-22 08:09 - 00000000 ____D () C:\Users\Francine\AppData\Local\{F50E640B-F4DE-437A-8518-3DA569B53998}
2014-06-21 17:45 - 2014-06-21 17:45 - 00000000 ____D () C:\Users\Francine\AppData\Local\{05255A05-B9D1-4133-9BB7-1310AB27AC2B}
2014-06-21 17:45 - 2011-09-18 15:07 - 00004066 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003476506-1543607467-2904163087-1000UA
2014-06-21 17:45 - 2011-09-18 15:07 - 00003670 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003476506-1543607467-2904163087-1000Core
2014-06-20 16:14 - 2014-07-15 08:48 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-20 15:39 - 2014-07-15 08:48 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-20 12:09 - 2014-06-20 12:09 - 00000000 ____D () C:\Users\Francine\AppData\Local\{3C28DFDB-6193-4C32-87B3-559FA1E55099}
2014-06-20 07:32 - 2011-10-01 20:52 - 00004068 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-20 07:32 - 2011-10-01 20:52 - 00003816 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-19 07:27 - 2014-06-19 07:27 - 00000000 ____D () C:\Users\Francine\AppData\Local\{0182282A-FD2B-45C5-9B6A-D64C3B47BE3F}
2014-06-19 00:15 - 2014-06-19 00:15 - 00000000 ____D () C:\Users\Francine\AppData\Local\{1D9E4F90-BA50-487A-80EF-FB497DC2960D}
2014-06-18 21:39 - 2014-07-15 08:48 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-18 21:06 - 2014-07-15 08:48 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-18 21:06 - 2014-07-15 08:48 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-18 20:48 - 2014-07-15 08:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-18 20:42 - 2014-07-15 08:48 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-18 20:42 - 2014-07-15 08:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-18 20:41 - 2014-07-15 08:48 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-06-18 20:41 - 2014-07-15 08:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-18 20:32 - 2014-07-15 08:48 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-18 20:31 - 2014-07-15 08:48 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-18 20:26 - 2014-07-15 08:48 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-18 20:24 - 2014-07-15 08:48 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-18 20:24 - 2014-07-15 08:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-18 20:23 - 2014-07-15 08:48 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-18 20:16 - 2014-07-15 08:48 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-18 20:14 - 2014-07-15 08:48 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-18 20:09 - 2014-07-15 08:48 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-18 19:59 - 2014-07-15 08:48 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 19:56 - 2014-07-13 20:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-18 19:53 - 2014-07-15 08:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-18 19:51 - 2014-07-15 08:48 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-18 19:50 - 2014-07-15 08:48 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-18 19:48 - 2014-07-15 08:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-18 19:39 - 2014-07-15 08:48 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-18 19:38 - 2014-07-15 08:48 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-18 19:37 - 2014-07-15 08:48 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-18 19:36 - 2014-07-15 08:48 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-18 19:35 - 2014-07-15 08:48 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-06-18 19:33 - 2014-07-15 08:48 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-18 19:32 - 2014-07-15 08:48 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-18 19:28 - 2014-07-15 08:48 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-18 19:28 - 2014-07-15 08:48 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-18 19:27 - 2014-07-15 08:48 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-18 19:27 - 2014-07-15 08:48 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-18 19:25 - 2014-07-15 08:48 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-18 19:23 - 2014-07-15 08:48 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-18 19:22 - 2014-07-15 08:48 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-18 19:12 - 2014-07-15 08:48 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-18 19:06 - 2014-07-15 08:48 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-18 19:01 - 2014-07-15 08:48 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-18 18:59 - 2014-07-15 08:48 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-18 18:58 - 2014-07-15 08:48 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-18 18:58 - 2014-07-15 08:48 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-18 18:52 - 2014-07-15 08:48 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-18 18:51 - 2014-07-15 08:48 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-18 18:49 - 2014-07-15 08:48 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-18 18:46 - 2014-07-15 08:48 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-18 18:45 - 2014-07-15 08:48 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-18 18:35 - 2014-07-15 08:48 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-18 18:34 - 2014-07-15 08:48 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-18 18:15 - 2014-07-15 08:48 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-18 18:13 - 2014-07-15 08:48 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-18 18:09 - 2014-07-15 08:48 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-18 18:07 - 2014-07-13 20:25 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-18 17:53 - 2014-06-18 17:53 - 00000000 ____D () C:\Users\Francine\AppData\Local\{36579151-36AF-4EC7-A305-690F3B0821A6}
2014-06-17 22:18 - 2014-07-15 08:51 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-06-17 21:51 - 2014-07-15 08:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-06-17 21:10 - 2014-07-15 08:51 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-17 11:34 - 2014-06-17 11:34 - 00000000 ____D () C:\Users\Francine\AppData\Local\{61A25814-695C-4F2A-A80A-D9C9D250998D}
2014-06-16 12:20 - 2014-06-16 12:20 - 00000000 ____D () C:\Users\Francine\AppData\Local\{6B5867F2-6853-4DE3-9499-5F01EE8EF8AA}
 
Some content of TEMP:
====================
C:\Users\Francine\AppData\Local\Temp\ApnStub.exe
C:\Users\Francine\AppData\Local\Temp\Extract.exe
C:\Users\Francine\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe
C:\Users\Francine\AppData\Local\Temp\install_reader10_fr_gtbp_mssa_aih.exe
C:\Users\Francine\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\Francine\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\Francine\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\Francine\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Francine\AppData\Local\Temp\jre-6u38-windows-i586-iftw.exe
C:\Users\Francine\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe
C:\Users\Francine\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Francine\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Francine\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Francine\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Francine\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Francine\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Francine\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Francine\AppData\Local\Temp\NEWC41D.tmp.exe
C:\Users\Francine\AppData\Local\Temp\Resource.exe
C:\Users\Francine\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\Francine\AppData\Local\Temp\setup.exe
C:\Users\Francine\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Francine\AppData\Local\Temp\SP53794.exe
C:\Users\Francine\AppData\Local\Temp\sp54373.exe
C:\Users\Francine\AppData\Local\Temp\sp54620.exe
C:\Users\Francine\AppData\Local\Temp\SP54714.exe
C:\Users\Francine\AppData\Local\Temp\SP56221.exe
C:\Users\Francine\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Francine\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\Francine\AppData\Local\Temp\uxpqik-d.dll
C:\Users\Francine\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Francine\AppData\Local\Temp\zkoja3yq.dll
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2014-07-15 09:35
 
==================== End Of Log ============================
 
 
Link to post
Share on other sites
  • 2 weeks later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.