need help with removing malware.

hatethiscomputer · September 15, 2014

i have tried junkware removal tool,adware cleaner, eset nod,hitmanpro and malware byte. i still can't get rid of this malware. it's some type of malware that makes about 20-30 dllhost.exe show up in taskmngr and the computer and internet go slow. it also keeps making some virus called datamngr show up. i used malware bytes a couple days ago after eset and hitman pro both failed,and i thought it got rid of it,but nope. so i tried malware bytes again,and now it keeps getting stuck on heuristic analysis so i can't even use malware bytes now. please help

hatethiscomputer · September 16, 2014

here are my farbar recovery logs and addition logs:

Farbar:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014

Ran by Victoria (administrator) on VICTORIA-PC on 15-09-2014 21:49:48

Running from C:\Users\Victoria\Desktop\New folder (7)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe

(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE

(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE

( ) C:\Windows\System32\lxddcoms.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe

() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe

(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe

() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe

(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

() C:\Program Files (x86)\Lexmark 2500 Series\lxddmon.exe

() C:\Program Files (x86)\Lexmark 2500 Series\lxddamon.exe

(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe

(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(PC Drivers Headquarters) C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe

(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe

() C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\taskmgr.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Mine) C:\ProgramData\Windows Genuine Advantage\{838DDB36-BAB4-47D1-9508-78FA20CB9780}\msiexec.exe

(Microsoft Corporation) C:\Windows\System32\prevhost.exe

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Farbar) C:\Users\Victoria\Desktop\New folder (7)\FRST64 (2).exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [lxddmon.exe] => C:\Program Files (x86)\Lexmark 2500 Series\lxddmon.exe [291496 2009-04-27] ()

HKLM\...\Run: [lxddamon] => C:\Program Files (x86)\Lexmark 2500 Series\lxddamon.exe [25256 2009-04-27] ()

HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\btvstack.exe [1023104 2013-02-06] (Atheros Commnucations)

HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\athbttray.exe [801920 2013-02-06] (Atheros Commnucations)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-03] (Adobe Systems Incorporated)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671640 1999-12-31] (Realtek Semiconductor)

HKLM-x32\...\Run: [sDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] => C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe [560128 2011-09-26] (Dell)

Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll [X]

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\.DEFAULT\...\RunOnce: [spUninstallDeleteDir] => rmdir /s /q "\SearchProtect"

HKU\S-1-5-21-2698232268-2154043033-3228781758-1000\...\Run: [DriverBoost] => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [3979632 2013-10-24] (PC Drivers Headquarters)

HKU\S-1-5-21-2698232268-2154043033-3228781758-1000\...\Run: [.tluafed** <*>] => C:\Users\Victoria\Application Data\{00007DD8-641C-73CB-7D97-6695673F7C6A}.ex <===== ATTENTION (Value Name with invalid characters)

HKU\S-1-5-21-2698232268-2154043033-3228781758-1000\...\Run: [Loumkeobosude] => "C:\Users\Victoria\AppData\Roaming\Emnaky\igyqow.exe"

HKU\S-1-5-21-2698232268-2154043033-3228781758-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_38_ActiveX.exe [840072 2014-01-20] (Adobe Systems Incorporated)

HKU\S-1-5-21-2698232268-2154043033-3228781758-1000\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 239 more characters). <==== Poweliks!

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-11-29] (Google Inc.)

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [EPSON NX410 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFCA.EXE [223232 2008-10-01] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272624 2013-02-05] (Microsoft Corporation)

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [4527424 2011-08-17] (DT Soft Ltd)

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [DriverFinder] => C:\Program Files (x86)\DriverFinder\DriverFinder.exe [7151816 2011-07-18] ()

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [sUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6563096 2014-01-03] (SUPERAntiSpyware)

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [PC Speed Maximizer] => "C:\Program Files (x86)\PC Speed Maximizer\SPMStarter.exe"

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [sPMTray] => "C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe"

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [Free Download Manager] => "C:\Program Files (x86)\Free Download Manager\fdm.exe" -autorun

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [DownloadAccelerator] => C:\Program Files (x86)\DAP\DAP.EXE [3774680 2012-07-22] (Speedbit Ltd.)

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [steam] => "C:\Program Files (x86)\Steam\Steam.exe" -silent

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\Run: [DriverBoost] => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [3979632 2013-10-24] (PC Drivers Headquarters)

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-11-29] (Google Inc.)

HKU\S-1-5-21-2698232268-2154043033-3228781758-501\...\MountPoints2: {a5b16509-4ed2-11e2-b331-842b2baf6f10} - I:\Install.exe

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (McAfee, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v2 Smart Wizard..lnk

ShortcutTarget: NETGEAR WG111v2 Smart Wizard..lnk -> C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v2 Smart Wizard.lnk

ShortcutTarget: NETGEAR WG111v2 Smart Wizard.lnk -> C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk

ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.)

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk

ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk

ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

Startup: C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk

ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

Startup: C:\Users\TheGuest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk

ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

Startup: C:\Users\Victoria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\start.lnk

ShortcutTarget: start.lnk -> C:\Users\Victoria\31ifp7kidvc849\ozds.vbs ()

BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1

URLSearchHook: HKCU - YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)

SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

SearchScopes: HKCU - Backup.Old.DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

SearchScopes: HKCU - {3B240033-DC49-4933-8B91-D9D2EA8C3D99} URL =

SearchScopes: HKCU - {7D96684E-D63B-4FA3-B32B-07F83D4CCE67} URL = http://search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,136,0_0,Search,20120415,17118,0,18,0

SearchScopes: HKCU - {CC7EA43B-A8BD-43C4-AFDB-260AD0A8FD6E} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=599486&p={searchTerms}

BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: FreePriceAlerts -> {A7C0A55C-300E-4193-8FB5-5DB8E6533D35} -> C:\Program Files (x86)\FreePriceAlerts\win64\vbobho.dll No File

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Ad Nuker -> {459CAF0F-CA9F-4d69-A1A9-B0699D07AB8A} -> C:\Windows\SysWow64\NukerBand.dll ()

BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: SpeedBit Link Verification Helper -> {D5974A72-C81C-4DC3-BE77-A8A7BBC8864E} -> C:\Program Files (x86)\DAP\LinkVerifier.dll (Speedbit Ltd.)

BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Ad Nuker - {459CAF0F-CA9F-4d69-A1A9-B0699D07AB8A} - C:\Windows\SysWow64\NukerBand.dll ()

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File

Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

DPF: HKLM-x32 {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.4.26.0.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:

========

FF ProfilePath: C:\Users\Victoria\AppData\Roaming\Mozilla\Firefox\Profiles\pslr2j3b.default

FF DefaultSearchEngine: Yahoo!

FF SelectedSearchEngine: Yahoo!

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)

FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=17.0.11.0 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.11 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.11 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.11 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=17.0.11.0 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\6\NP_wtapp.dll ()

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Victoria\AppData\Roaming\Mozilla\Firefox\Profiles\pslr2j3b.default\searchplugins\yahoo_ff.xml

FF Extension: ClipConverter Desktop - C:\Users\Victoria\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\desktop@clipconverter.cc.xpi [2013-10-20]

FF Extension: Ziftr Alerts - formerly FreePriceAlerts.com - C:\Users\Victoria\AppData\Roaming\Mozilla\Firefox\Profiles\pslr2j3b.default\Extensions\extension@freepricealerts.com [2013-06-01]

FF Extension: SaveSense - C:\Users\Victoria\AppData\Roaming\Mozilla\Firefox\Profiles\pslr2j3b.default\Extensions\{2fab2e94-d6f9-42de-8839-3510cef6424b} [2014-02-03]

FF Extension: DownTango Launcher - C:\Users\Victoria\AppData\Roaming\Mozilla\Firefox\Profiles\pslr2j3b.default\Extensions\{411beae9-8c58-477c-8903-201536f61512} [2012-12-01]

FF Extension: Universal Downloader - C:\Users\Victoria\AppData\Roaming\Mozilla\Firefox\Profiles\pslr2j3b.default\Extensions\{9051303c-7e41-4311-a783-d6fe5ef2832d}.xpi [2013-04-04]

FF Extension: Adblock Plus - C:\Users\Victoria\AppData\Roaming\Mozilla\Firefox\Profiles\pslr2j3b.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-20]

FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

FF HKLM-x32\...\Firefox\Extensions: [daplinkchecker@speedbit.com] - C:\Program Files (x86)\DAP\daplinkchecker

FF Extension: DAP Link Checker - C:\Program Files (x86)\DAP\daplinkchecker [2012-07-22]

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-06-30]

FF HKLM-x32\...\Firefox\Extensions: [{1DD9AC48-0855-4AE7-9934-159B4377FFA2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

FF HKCU\...\Firefox\Extensions: [{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08}] - C:\Program Files (x86)\DAP\DAPFireFox

FF Extension: Download Accelerator Plus (DAP) extension - C:\Program Files (x86)\DAP\DAPFireFox [2012-07-22]

Chrome:

=======

CHR HomePage: Default ->

CHR DefaultSearchKeyword: Default -> AF95F7E612630FA95B465DC5ACD3D91476418306986A906DF7DECEFA9F0F19F4

CHR DefaultSearchURL: Default -> 33E9012285D7C5E5480B8D3AB8D6AD2BE038570B16B498E5E25BE1A7B9B6E202

CHR Profile: C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-03]

CHR Extension: (Google Drive) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-03]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-22]

CHR Extension: (YouTube) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-03]

CHR Extension: (DAP Link Checker) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodfdknjhecmadheclfjkhhiofeagdbh [2013-08-13]

CHR Extension: (Adblock Plus) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-08-13]

CHR Extension: (Google Search) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-03]

CHR Extension: (Video Downloader professional) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2014-01-03]

CHR Extension: (Download Accelerator Plus (DAP)) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb [2013-08-13]

CHR Extension: (RealPlayer Downloader) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-04-25]

CHR Extension: (FVD Downloader) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2014-07-06]

CHR Extension: (Google Wallet) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]

CHR Extension: (Gmail) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-03]

CHR Profile: C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Profile 3

CHR Extension: (No Name) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd [2012-12-08]

CHR Extension: (No Name) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb [2012-07-22]

CHR Extension: (No Name) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg [2012-12-08]

CHR Extension: (No Name) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp [2013-02-02]

CHR Extension: (No Name) - C:\Users\Victoria\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ngifmmghggmgbhdohdfjpaklhflocdad [2013-01-02]

CHR HKLM\...\Chrome\Extension: [geggofhlfbcmanadhknllmlajiafopoh] - C:\Program Files\PrivacySafeGuard\pschrome_adk-c1_1_0.crx [2012-04-11]

CHR HKLM-x32\...\Chrome\Extension: [bodfdknjhecmadheclfjkhhiofeagdbh] - C:\Program Files (x86)\DAP\daplinkchecker.crx [2012-07-22]

CHR HKLM-x32\...\Chrome\Extension: [ffdcfjdljhbehggjdkdioajnknjcpbjb] - C:\Program Files (x86)\DAP\DAPChrome\DAPChrome6.crx [2012-07-22]

CHR HKLM-x32\...\Chrome\Extension: [gladcbhcbkdeddbidiblppadjdjalidb] - C:\Program Files (x86)\DownTangoFTToolbar\chrome\DownTangoFTToolbar.crx [2012-07-22]

CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-06-10]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-10-11] (SUPERAntiSpyware.com) [File not signed]

R2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-25] (Adobe Systems Incorporated)

S3 BRSptSvc; C:\programdata\bitraider\BRSptSvc.exe [938776 2013-05-18] (BitRaider, LLC)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-04] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-04] (BlueStack Systems, Inc.)

R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2009-06-09] (Stardock Corporation) [File not signed]

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]

R2 lxdd_device; C:\Windows\system32\lxddcoms.exe [567216 2007-05-25] ( )

R2 lxdd_device; C:\Windows\SysWOW64\lxddcoms.exe [537520 2007-05-25] ( )

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [158832 2011-03-13] (McAfee, Inc.)

S3 MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation) [File not signed]

S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [32568 2014-05-02] (The OpenVPN Project)

S3 PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] () [File not signed]

R2 RapportMgmtService; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1919256 2014-07-31] (IBM Corp.)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-06-10] ()

R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-06-30] (RealNetworks, Inc.)

R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-06-10] () [File not signed]

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

S3 SonicStage Back-End Service; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeSvc.exe [112184 2007-02-05] (Sony Corporation)

S3 SPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation) [File not signed]

S3 SSScsiSV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SSScsiSV.exe [75320 2007-02-05] (Sony Corporation)

R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [77824 2012-04-22] (Atheros) [File not signed]

S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [312480 2013-03-24] ()

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-11] (AVG Technologies)

S3 BRDriver64; C:\programdata\bitraider\BRDriver64.sys [74024 2013-04-25] (BitRaider)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-04] (BlueStack Systems)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [271424 2011-10-15] (DT Soft Ltd)

S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2014-09-15] ()

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2013-03-24] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

U4 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-15] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [156792 2011-03-13] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [639216 2011-03-13] (McAfee, Inc.)

S3 NPF; C:\Windows\SysWOW64\drivers\npf.sys [32512 2005-08-02] (CACE Technologies) [File not signed]

R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)

R1 RapportCerberus_80049; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_80049.sys [768184 2014-09-02] ()

R1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [444184 2014-07-31] (IBM Corp.)

R0 RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [536984 2014-07-31] (IBM Corp.)

R1 RapportPG64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [562136 2014-07-31] (IBM Corp.)

R3 RTL8187; C:\Windows\System32\DRIVERS\wg111v2.sys [450048 2010-04-06] (NETGEAR Inc.)

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)

R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-11] (Synaptics Incorporated)

S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-09-09] ()

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-03-19] (Anchorfree Inc.)

R3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2013-05-28] (Spotflux, Inc.)

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()

S3 HWiNFO32; \??\C:\Users\Victoria\AppData\Local\Temp\HWiNFO64A.SYS [X]

S3 RTHDMIAzAudService; system32\drivers\RtHDMIVX.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-15 21:37 - 2014-09-15 21:37 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage

2014-09-15 20:47 - 2014-09-15 20:47 - 02105856 _____ (Farbar) C:\Users\Victoria\Downloads\FRST64 (2).exe

2014-09-15 20:38 - 2014-09-15 21:49 - 00000000 ____D () C:\Users\Victoria\Desktop\New folder (7)

2014-09-15 20:36 - 2014-09-15 20:36 - 02105856 _____ (Farbar) C:\Users\Victoria\Downloads\FRST64 (1).exe

2014-09-15 20:18 - 2014-09-15 20:18 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-09-15 20:17 - 2014-09-15 20:22 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-09-15 20:17 - 2014-09-15 20:20 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-09-15 20:17 - 2014-09-15 20:17 - 00001357 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk

2014-09-15 20:17 - 2014-09-15 20:17 - 00001345 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2014-09-15 20:17 - 2014-09-15 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2

2014-09-15 20:17 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe

2014-09-15 20:14 - 2014-09-15 20:16 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Victoria\Downloads\spybot-2.4.exe

2014-09-15 20:03 - 2014-09-15 21:32 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-15 20:03 - 2014-09-15 20:03 - 00001068 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-09-15 20:03 - 2014-09-15 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-15 20:03 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-09-15 20:03 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-09-15 20:03 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-09-15 20:02 - 2014-09-15 20:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-15 20:00 - 2014-09-15 20:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Victoria\Downloads\mbam-setup-2.0.2.1012 (3).exe

2014-09-15 19:58 - 2014-09-15 19:58 - 00003246 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2698232268-2154043033-3228781758-1000

2014-09-15 19:57 - 2014-09-15 19:57 - 00003374 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2698232268-2154043033-3228781758-1000

2014-09-15 19:45 - 2014-09-15 20:37 - 00083374 _____ () C:\Users\Victoria\Downloads\FRST.txt

2014-09-15 19:44 - 2014-09-15 21:49 - 00000000 ____D () C:\FRST

2014-09-15 19:43 - 2014-09-15 19:44 - 02105856 _____ (Farbar) C:\Users\Victoria\Downloads\FRST64.exe

2014-09-15 19:06 - 2014-09-15 19:06 - 00000000 ____D () C:\Users\TheGuest\Desktop\Passwords

2014-09-15 18:39 - 2014-09-15 18:39 - 00189480 _____ () C:\Users\Victoria\Desktop\lol.rar

2014-09-15 18:34 - 2014-09-15 18:34 - 00000000 ____D () C:\Users\TheGuest\Desktop\Settings

2014-09-15 18:34 - 2014-09-15 18:34 - 00000000 ____D () C:\Users\TheGuest\Desktop\Plugins

2014-09-15 18:33 - 2014-09-15 18:33 - 00085504 _____ () C:\Users\TheGuest\Desktop\PluginCompiler.exe

2014-09-15 18:33 - 2014-09-15 18:33 - 00018432 _____ () C:\Users\TheGuest\Desktop\ServerPlugin.dll

2014-09-15 18:33 - 2014-09-15 18:33 - 00016384 _____ () C:\Users\TheGuest\Desktop\ClientPlugin.dll

2014-09-15 18:33 - 2014-09-15 18:33 - 00009216 _____ () C:\Users\TheGuest\Desktop\LZLoader.dll

2014-09-15 18:33 - 2014-09-15 18:33 - 00000229 _____ () C:\Users\TheGuest\Desktop\Readme.txt

2014-09-15 18:33 - 2014-09-15 18:33 - 00000030 _____ () C:\Users\TheGuest\Desktop\8C1A0000.log

2014-09-15 18:33 - 2014-09-15 18:33 - 00000000 ____D () C:\Users\TheGuest\Desktop\Resources

2014-09-15 18:30 - 2014-09-15 18:30 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No-IP DUC

2014-09-15 18:30 - 2014-09-15 18:30 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\Vitalwerks

2014-09-15 18:29 - 2014-09-15 18:29 - 00000000 __SHD () C:\Users\TheGuest\AppData\Roaming\Eziriz

2014-09-15 18:17 - 2014-09-15 18:17 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\ESET

2014-09-15 17:09 - 2014-09-15 17:09 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys

2014-09-15 16:00 - 2014-09-15 15:59 - 00000962 _____ () C:\Users\Victoria\Desktop\JRT.txt

2014-09-15 15:34 - 2014-09-15 15:36 - 01373475 _____ () C:\Users\Victoria\Downloads\AdwCleaner (1).exe

2014-09-15 15:10 - 2014-09-15 15:10 - 01016261 _____ (Thisisu) C:\Users\Victoria\Downloads\JRT (2).exe

2014-09-15 14:23 - 2014-09-15 19:10 - 00003352 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2698232268-2154043033-3228781758-1000

2014-09-15 14:23 - 2014-09-15 19:10 - 00003224 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2698232268-2154043033-3228781758-1000

2014-09-15 14:15 - 2014-09-15 14:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Victoria\Downloads\mbam-setup-2.0.2.1012 (2).exe

2014-09-14 22:24 - 2014-09-14 22:27 - 00007986 _____ () C:\Users\Victoria\Documents\Uninstall Dragon Age Origins.log

2014-09-14 13:49 - 2014-09-14 13:49 - 00000000 ____D () C:\Users\Victoria\AppData\Local\ESET

2014-09-14 12:30 - 2014-09-14 20:27 - 00000000 ____D () C:\Users\Victoria\AppData\Roaming\Emnaky

2014-09-14 12:27 - 2014-09-14 12:27 - 01696192 _____ (ESET) C:\Users\Victoria\Downloads\eset_nod32_antivirus_live_installer (2).exe

2014-09-14 12:26 - 2014-09-14 12:27 - 01696192 _____ (ESET) C:\Users\Victoria\Downloads\eset_nod32_antivirus_live_installer (1).exe

2014-09-14 12:25 - 2014-09-14 12:27 - 01696192 _____ (ESET) C:\Users\Victoria\Downloads\eset_nod32_antivirus_live_installer.exe

2014-09-14 03:49 - 2014-09-14 03:49 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-09-14 03:37 - 2014-09-14 03:38 - 02347384 _____ (ESET) C:\Users\Victoria\Desktop\esetsmartinstaller_enu.exe

2014-09-14 03:14 - 2014-09-15 17:07 - 00005074 _____ () C:\Windows\system32\.crusader

2014-09-14 02:23 - 2014-09-15 17:06 - 00000000 ____D () C:\ProgramData\HitmanPro

2014-09-14 02:23 - 2014-09-14 02:24 - 11194928 _____ (SurfRight B.V.) C:\Users\Victoria\Downloads\HitmanPro_x64.exe

2014-09-14 02:22 - 2014-09-14 02:23 - 10280824 _____ (SurfRight B.V.) C:\Users\Victoria\Downloads\HitmanPro.exe

2014-09-14 01:30 - 2014-09-14 01:30 - 01373475 _____ () C:\Users\Victoria\Downloads\AdwCleaner.exe

2014-09-14 00:34 - 2014-09-14 00:35 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Victoria\Downloads\mbam-setup-2.0.2.1012 (1).exe

2014-09-14 00:15 - 2014-09-14 00:15 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Victoria\Downloads\mbam-clean-2.1.1.1001.exe

2014-09-13 20:46 - 2014-09-13 20:47 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Victoria\Downloads\mbam-setup-2.0.2.1012.exe

2014-09-13 19:33 - 2014-09-15 04:12 - 00000000 ____D () C:\Users\Victoria\Desktop\lol

2014-09-13 18:51 - 2014-09-15 21:23 - 00000000 ____D () C:\Users\Victoria\Desktop\Bytes Protection

2014-09-13 15:22 - 2014-09-13 15:22 - 01016261 _____ (Thisisu) C:\Users\Victoria\Downloads\JRT (1).exe

2014-09-13 05:46 - 2014-09-13 05:46 - 00000000 ____D () C:\Users\Victoria\AppData\Roaming\Yxenpeb

2014-09-13 01:38 - 2014-09-13 01:53 - 00000000 ____D () C:\Users\Victoria\Desktop\9000+ Icon Pack

2014-09-13 00:58 - 2014-09-13 01:32 - 475068837 _____ () C:\Users\Victoria\Downloads\9000+ Icon Pack.rar

2014-09-11 05:48 - 2014-09-11 05:48 - 16487046 _____ () C:\Users\Victoria\Downloads\Protect your Bytes.rar

2014-09-10 18:29 - 2014-09-15 21:26 - 00000000 ____D () C:\Users\Victoria\Desktop\IM3

2014-09-10 16:46 - 2014-09-10 16:46 - 00007168 __RSH () C:\Users\Victoria\AppData\Roaming\{00007DD8-641C-73CB-7D97-6695673F7C6A}.exe

2014-09-10 15:24 - 2014-09-10 15:24 - 00323696 _____ (Dropbox, Inc.) C:\Users\Victoria\Downloads\DropboxInstaller (3).exe

2014-09-10 14:53 - 2014-09-10 14:53 - 01016261 _____ (Thisisu) C:\Users\Victoria\Downloads\JRT.exe

2014-09-10 14:53 - 2014-09-10 14:53 - 00000000 ____D () C:\Windows\ERUNT

2014-09-09 17:34 - 2014-09-09 17:34 - 00001168 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn Disc Burning Software.lnk

2014-09-09 17:34 - 2014-09-09 17:34 - 00001112 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video Editor.lnk

2014-09-09 17:33 - 2014-09-09 17:33 - 01563200 _____ (NCH Software) C:\Users\Victoria\Downloads\debutsetup.exe

2014-09-09 17:33 - 2014-09-09 17:33 - 00001202 _____ () C:\Users\Public\Desktop\NCH Suite.lnk

2014-09-09 17:33 - 2014-09-09 17:33 - 00001076 _____ () C:\Users\Public\Desktop\Debut Video Capture Software.lnk

2014-09-09 16:10 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-09-09 16:06 - 2014-09-15 16:06 - 00000000 ____D () C:\AdwCleaner

2014-09-09 16:06 - 2014-09-09 16:06 - 01370467 _____ () C:\Users\Victoria\Downloads\adwcleaner_3.309.exe

2014-09-07 17:41 - 2014-09-07 17:41 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\WinRAR

2014-09-07 17:40 - 2014-09-14 17:21 - 00000000 ____D () C:\Users\TheGuest\Desktop\BC

2014-09-07 17:40 - 2014-09-07 17:40 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\WinZip

2014-09-07 17:38 - 2014-09-07 17:38 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\Dell

2014-09-07 17:37 - 2014-09-07 17:37 - 00087632 _____ () C:\Users\TheGuest\AppData\Local\GDIPFONTCACHEV1.DAT

2014-09-07 17:37 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\DAEMON Tools Pro

2014-09-07 17:37 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\ATI

2014-09-07 17:37 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\Atheros

2014-09-07 17:37 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\Apple Computer

2014-09-07 17:37 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\Wondershare

2014-09-07 17:37 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\Stardock_Corporation

2014-09-07 17:37 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\ATI

2014-09-07 17:37 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\antiphishing-vmninternethelper1_1dn

2014-09-07 17:37 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\Adobe

2014-09-07 17:36 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\Real

2014-09-07 17:36 - 2014-09-07 17:37 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\VirtualStore

2014-09-07 17:36 - 2014-09-07 17:36 - 00001472 _____ () C:\Users\TheGuest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-09-07 17:36 - 2014-09-07 17:36 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\Adobe

2014-09-07 17:36 - 2014-09-07 17:36 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\Google

2014-09-07 17:35 - 2014-09-15 18:07 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\SoftThinks

2014-09-07 17:35 - 2014-09-07 17:36 - 00000000 ____D () C:\Users\TheGuest

2014-09-07 17:35 - 2014-09-07 17:35 - 00000020 ___SH () C:\Users\TheGuest\ntuser.ini

2014-09-07 17:35 - 2014-04-17 03:21 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\Microsoft Help

2014-09-07 17:35 - 2013-05-18 08:51 - 00002066 _____ () C:\Users\TheGuest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk

2014-09-07 17:35 - 2011-09-26 18:09 - 00000000 ____D () C:\Users\TheGuest\AppData\Local\Trusteer

2014-09-07 17:35 - 2011-07-05 17:11 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\Trusteer

2014-09-07 17:35 - 2010-11-29 20:58 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\Macromedia

2014-09-07 17:35 - 2009-07-14 00:54 - 00000000 ___RD () C:\Users\TheGuest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-09-07 17:35 - 2009-07-14 00:49 - 00000000 ___RD () C:\Users\TheGuest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-09-07 13:39 - 2014-09-07 13:39 - 00000000 ____D () C:\Users\Victoria\Desktop\Settings

2014-09-07 13:37 - 2014-09-10 21:18 - 00000467 _____ () C:\Users\Victoria\Desktop\8C1A0000.log

2014-09-07 13:37 - 2014-09-07 13:37 - 00009216 _____ () C:\Users\Victoria\Desktop\LZLoader.dll

2014-09-07 13:23 - 2014-09-15 19:54 - 00167374 _____ () C:\Windows\PFRO.log

2014-09-06 18:02 - 2014-09-06 18:02 - 00018432 _____ () C:\Users\Victoria\Downloads\ServerPlugin.dll

2014-09-06 18:02 - 2014-09-06 18:02 - 00000000 ____D () C:\Users\Victoria\Downloads\Plugins

2014-09-06 18:01 - 2014-09-06 18:01 - 00016384 _____ () C:\Users\Victoria\Downloads\ClientPlugin.dll

2014-09-06 15:02 - 2014-09-15 19:55 - 00000840 _____ () C:\Windows\setupact.log

2014-09-06 15:02 - 2014-09-06 15:02 - 00000000 _____ () C:\Windows\setuperr.log

2014-09-03 14:58 - 2014-09-03 14:58 - 00000286 _____ () C:\Windows\wininit.ini

2014-09-02 21:58 - 2014-09-02 22:19 - 00000164 _____ () C:\Users\Victoria\Desktop\ss.txt

2014-09-01 16:23 - 2014-09-01 16:33 - 00000008 _____ () C:\Users\Victoria\Desktop\settings.bin

2014-09-01 16:22 - 2014-09-01 16:33 - 00004656 _____ () C:\Users\Victoria\Desktop\server.log

2014-09-01 16:22 - 2014-09-01 16:25 - 00001103 _____ () C:\Users\Victoria\Desktop\builder.log

2014-09-01 16:22 - 2014-09-01 16:23 - 00000112 _____ () C:\Users\Victoria\Desktop\plugins.bin

2014-09-01 16:22 - 2014-09-01 16:22 - 00000048 _____ () C:\Users\Victoria\Desktop\public.bin

2014-09-01 16:21 - 2014-09-07 13:38 - 00000000 ____D () C:\Users\Victoria\Desktop\Plugins

2014-09-01 16:21 - 2014-09-01 16:33 - 00000000 ____D () C:\Users\Victoria\Desktop\Databases

2014-09-01 16:20 - 2014-09-15 19:24 - 00000000 ____D () C:\Users\Victoria\Desktop\x86

2014-09-01 16:20 - 2014-09-07 13:37 - 00018432 _____ () C:\Users\Victoria\Desktop\ServerPlugin.dll

2014-09-01 16:20 - 2014-09-07 13:37 - 00016384 _____ () C:\Users\Victoria\Desktop\ClientPlugin.dll

2014-09-01 16:20 - 2014-09-07 13:37 - 00000000 ____D () C:\Users\Victoria\Desktop\Resources

2014-09-01 16:20 - 2014-09-01 16:20 - 00262144 _____ (http://system.data.sqlite.org/) C:\Users\Victoria\Desktop\System.Data.SQLite.dll

2014-09-01 16:20 - 2014-09-01 16:20 - 00026197 _____ () C:\Users\Victoria\Desktop\ServerPlugin.xml

2014-09-01 16:20 - 2014-09-01 16:20 - 00008366 _____ () C:\Users\Victoria\Desktop\ClientPlugin.xml

2014-09-01 16:20 - 2014-09-01 16:20 - 00000028 _____ () C:\Users\Victoria\Desktop\E8250000.log

2014-09-01 16:20 - 2014-09-01 16:20 - 00000000 ____D () C:\Users\Victoria\Desktop\x64

2014-09-01 15:32 - 2014-09-11 05:52 - 00000000 ____D () C:\Users\Victoria\Desktop\Data Protector V2

2014-08-31 19:24 - 2014-08-31 19:24 - 00000017 _____ () C:\Users\Victoria\Desktop\Password.txt

2014-08-31 18:56 - 2014-08-31 18:59 - 08536806 _____ () C:\Users\Victoria\Desktop\download.mp4

2014-08-31 18:47 - 2014-08-31 18:47 - 00160789 _____ () C:\Users\Victoria\Downloads\n-west-w-1776.zip

2014-08-31 17:37 - 2014-08-31 21:17 - 00000057 _____ () C:\Users\Victoria\Desktop\96380000.log

2014-08-29 17:13 - 2014-08-29 17:13 - 00000000 __SHD () C:\Users\Victoria\AppData\Roaming\Eziriz

2014-08-29 17:09 - 2014-08-29 17:09 - 00001530 _____ () C:\Users\Victoria\Desktop\info1.txt

2014-08-29 15:29 - 2014-08-29 15:47 - 00409600 _____ () C:\database.mdb

2014-08-29 15:29 - 2014-08-29 15:47 - 00000000 ____D () C:\Maps

2014-08-29 15:28 - 2014-08-29 15:28 - 00000000 ____D () C:\Users\Victoria\AppData\Local\IsolatedStorage

2014-08-29 14:53 - 2014-08-29 15:26 - 00000174 _____ () C:\Users\Victoria\Desktop\D4300000.log

2014-08-26 10:34 - 2014-09-15 21:31 - 00000376 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rmv.job

2014-08-26 10:34 - 2014-09-15 21:31 - 00000376 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rel.job

2014-08-26 10:34 - 2014-08-26 10:34 - 00002670 _____ () C:\Windows\System32\Tasks\AVG-Secure-Search-Update_0814tb_rmv

2014-08-26 10:34 - 2014-08-26 10:34 - 00002668 _____ () C:\Windows\System32\Tasks\AVG-Secure-Search-Update_0814tb_rel

2014-08-26 10:34 - 2014-08-26 10:34 - 00000000 ____D () C:\ProgramData\Avg_Update_0814tb

2014-08-25 19:09 - 2014-09-14 03:14 - 00000000 ____D () C:\Users\Victoria\Desktop\Icon

2014-08-25 04:16 - 2014-08-25 04:16 - 00664064 _____ () C:\Users\Victoria\Downloads\VPN Installer (4).exe

2014-08-16 18:50 - 2014-09-15 15:06 - 00000000 _RSHD () C:\Users\Victoria\247r33h

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-15 21:49 - 2014-09-15 20:38 - 00000000 ____D () C:\Users\Victoria\Desktop\New folder (7)

2014-09-15 21:49 - 2014-09-15 19:44 - 00000000 ____D () C:\FRST

2014-09-15 21:44 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\tracing

2014-09-15 21:37 - 2014-09-15 21:37 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage

2014-09-15 21:34 - 2014-09-15 18:13 - 00000000 ____D () C:\Users\TheGuest\AppData\Roaming\uTorrent

2014-09-15 21:32 - 2014-09-15 20:03 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-15 21:32 - 2010-11-29 20:57 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-15 21:31 - 2014-08-26 10:34 - 00000376 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rmv.job

2014-09-15 21:31 - 2014-08-26 10:34 - 00000376 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rel.job

2014-09-15 21:31 - 2010-11-18 19:14 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup

2014-09-15 21:26 - 2014-09-10 18:29 - 00000000 ____D () C:\Users\Victoria\Desktop\IM3

2014-09-15 21:23 - 2014-09-13 18:51 - 00000000 ____D () C:\Users\Victoria\Desktop\Bytes Protection

2014-09-15 21:20 - 2012-04-11 21:38 - 00000000 ____D () C:\Program Files (x86)\Shop to Win 24

2014-09-15 21:19 - 2010-11-29 20:57 - 00000902 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-15 21:03 - 2012-04-29 15:08 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-09-15 20:58 - 2014-06-11 01:45 - 00000000 ____D () C:\Users\Victoria\Desktop\NetRevenue E-Book

2014-09-15 20:47 - 2014-09-15 20:47 - 02105856 _____ (Farbar) C:\Users\Victoria\Downloads\FRST64 (2).exe

2014-09-15 20:37 - 2014-09-15 19:45 - 00083374 _____ () C:\Users\Victoria\Downloads\FRST.txt

2014-09-15 20:36 - 2014-09-15 20:36 - 02105856 _____ (Farbar) C:\Users\Victoria\Downloads\FRST64 (1).exe

2014-09-15 20:22 - 2014-09-15 20:17 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-09-15 20:20 - 2014-09-15 20:17 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-09-15 20:18 - 2014-09-15 20:18 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-09-15 20:17 - 2014-09-15 20:17 - 00001357 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk

2014-09-15 20:17 - 2014-09-15 20:17 - 00001345 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2014-09-15 20:17 - 2014-09-15 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2

2014-09-15 20:16 - 2014-09-15 20:14 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Victoria\Downloads\spybot-2.4.exe

2014-09-15 20:16 - 2011-05-08 17:20 - 00000000 ____D () C:\Users\Victoria\AppData\Roaming\BitTorrent

2014-09-15 20:09 - 2009-07-14 00:45 - 00014240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-15 20:09 - 2009-07-14 00:45 - 00014240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-15 20:03 - 2014-09-15 20:03 - 00001068 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-09-15 20:03 - 2014-09-15 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-15 20:03 - 2014-09-15 20:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-09-15 20:02 - 2014-09-15 20:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Victoria\Downloads\mbam-setup-2.0.2.1012 (3).exe

2014-09-15 20:02 - 2012-05-04 16:45 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-09-15 20:02 - 2009-07-14 01:10 - 01902294 _____ () C:\Windows\WindowsUpdate.log

2014-09-15 19:58 - 2014-09-15 19:58 - 00003246 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2698232268-2154043033-3228781758-1000

2014-09-15 19:57 - 2014-09-15 19:57 - 00003374 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2698232268-2154043033-3228781758-1000

2014-09-15 19:55 - 2014-09-06 15:02 - 00000840 _____ () C:\Windows\setupact.log

2014-09-15 19:55 - 2011-03-23 11:24 - 00065536 _____ () C:\Windows\system32\Ikeext.etl

2014-09-15 19:55 - 2010-11-18 19:35 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks

2014-09-15 19:55 - 2010-11-18 19:35 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks

2014-09-15 19:55 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-15 19:54 - 2014-09-07 13:23 - 00167374 _____ () C:\Windows\PFRO.log

2014-09-15 19:44 - 2014-09-15 19:43 - 02105856 _____ (Farbar) C:\Users\Victoria\Downloads\FRST64.exe

2014-09-15 19:29 - 2012-01-15 20:06 - 00000000 ____D () C:\Users\Victoria\AppData\Local\CrashDumps

2014-09-15 19:24 - 2014-09-01 16:20 - 00000000 ____D () C:\Users\Victoria\Desktop\x86

2014-09-15 19:10 - 2014-09-15 14:23 - 00003352 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2698232268-2154043033-3228781758-1000

2014-09-15 19:10 - 2014-09-15 14:23 - 00003224 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2698232268-2154043033-3228781758-1000