Infected with PUP.Optional.CrossRider.C

onetwothreee · February 18, 2015

Hi,

Scan shows 57 items of PUP.Optional.CrossRider.C. I've encountered this a few times already and quarantined it before but it keeps coming back so would like to request for help. Thank you very much in advance.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2015 01

Ran by Megan (administrator) on MEGAN-PC on 18-02-2015 18:20:30

Running from C:\Users\Megan\Desktop

Loaded Profiles: Megan (Available profiles: Megan)

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool:

CHR HKU\S-1-5-21-4175754119-1806728938-4148705958-1000\...\Chrome\Extension: [apjkpjchfbckhjhokinlgdbmibpbbjak] - C:\Users\Megan\AppData\Local\CRE\apjkpjchfbckhjhokinlgdbmibpbbjak.crx [Not Found]

CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)

R2 Box for Office Upgrade Service; C:\Program Files (x86)\Box\Box for Office\UpgradeService.exe [25632 2015-01-13] (Box, Inc.)

S3 BoxSyncUpdateService; C:\Program Files\Box\Box Sync\SyncUpdaterService.exe [28696 2014-09-24] (Box, Inc.)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)

R2 ININ Tracing; C:\Program Files (x86)\Interactive Intelligence\ININ Trace Initialization\i3trace_initializer-w32r-1-1.exe [36352 2010-10-26] (Interactive Intelligence, Inc.) [File not signed]

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

R2 XLServicePlatform; C:\Program Files (x86)\Common Files\Thunder Network\ServicePlatform\XLSP.dll [174024 2013-11-19] (ShenZhen Xunlei Networking Technologies,LTD)

S2 OutfoxTvService; C:\Program Files\OutfoxTV\OutfoxTvService.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)

S3 dsNcAdpt; C:\Windows\System32\DRIVERS\dsNcAdpt.sys [32768 2011-04-25] (Juniper Networks) [File not signed]

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] ()

S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [15968 2014-11-18] ()

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] ()

S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] ()

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)

R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)

R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2014-11-20] (Kaspersky Lab ZAO)

R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [818888 2014-11-20] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO)

R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2014-11-20] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-18] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()

S3 athr; system32\DRIVERS\athrx.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-18 18:20 - 2015-02-18 18:20 - 02086912 _____ (Farbar) C:\Users\Megan\Desktop\FRST64.exe

2015-02-18 18:20 - 2015-02-18 18:20 - 00026685 _____ () C:\Users\Megan\Desktop\FRST.txt

2015-02-14 21:29 - 2015-02-14 21:29 - 00000000 ____D () C:\Users\Megan\Desktop\New folder

2015-02-14 19:20 - 2015-02-14 19:20 - 06372800 _____ (Tim Kosse) C:\Users\Megan\Downloads\FileZilla_3.10.1.1_win32-setup.exe

2015-02-13 10:23 - 2015-02-13 10:23 - 00001722 _____ () C:\Users\Public\Desktop\2013 Cantax T1.lnk

2015-02-13 10:23 - 2015-02-13 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cantax

2015-02-13 10:21 - 2015-02-13 10:21 - 00002145 _____ () C:\Users\Public\Desktop\Intro to Fed. Income Tax.lnk

2015-02-13 10:21 - 2015-02-13 10:21 - 00001950 _____ () C:\Users\Public\Desktop\CCH Publications.lnk

2015-02-13 10:21 - 2015-02-13 10:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCH

2015-02-13 10:19 - 2015-02-13 10:21 - 00000000 ____D () C:\Program Files (x86)\CCH Library 4.7

2015-02-13 10:19 - 2015-02-13 10:19 - 00000000 ____D () C:\Users\Public\Documents\CCH Library 4.7

2015-02-12 09:33 - 2015-01-22 23:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-02-12 09:33 - 2015-01-22 23:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-02-12 09:33 - 2015-01-22 22:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-02-12 09:33 - 2015-01-22 22:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-02-11 07:53 - 2015-02-03 22:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-02-11 07:53 - 2015-02-03 22:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-02-11 07:53 - 2015-02-03 22:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-02-11 07:53 - 2015-02-03 22:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-02-11 07:53 - 2015-02-03 22:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-02-11 07:53 - 2015-02-03 22:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-02-11 07:53 - 2015-02-03 22:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-02-11 07:53 - 2015-01-27 18:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-02-11 07:53 - 2015-01-14 00:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-02-11 07:53 - 2015-01-14 00:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-02-11 07:53 - 2015-01-11 22:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-02-11 07:53 - 2015-01-11 22:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-02-11 07:53 - 2015-01-11 22:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-02-11 07:53 - 2015-01-11 21:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-02-11 07:53 - 2015-01-11 21:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-02-11 07:53 - 2015-01-11 21:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-02-11 07:53 - 2015-01-11 21:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-02-11 07:53 - 2015-01-11 21:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-02-11 07:53 - 2015-01-11 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-02-11 07:53 - 2015-01-11 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-02-11 07:53 - 2015-01-11 21:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-02-11 07:53 - 2015-01-11 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-02-11 07:53 - 2015-01-11 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-02-11 07:53 - 2015-01-11 21:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-02-11 07:53 - 2015-01-11 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-02-11 07:53 - 2015-01-11 21:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-02-11 07:53 - 2015-01-11 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-02-11 07:53 - 2015-01-11 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-02-11 07:53 - 2015-01-11 21:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-02-11 07:53 - 2015-01-11 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-02-11 07:53 - 2015-01-11 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-02-11 07:53 - 2015-01-11 21:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-02-11 07:53 - 2015-01-11 21:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-02-11 07:53 - 2015-01-11 21:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-02-11 07:53 - 2015-01-11 21:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-02-11 07:53 - 2015-01-11 21:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-02-11 07:53 - 2015-01-11 21:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-02-11 07:53 - 2015-01-11 20:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-02-11 07:53 - 2015-01-11 20:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-02-11 07:53 - 2015-01-11 20:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-02-11 07:53 - 2015-01-11 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-02-11 07:53 - 2015-01-11 20:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-02-11 07:53 - 2015-01-11 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-02-11 07:53 - 2015-01-11 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-02-11 07:53 - 2015-01-11 20:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-02-11 07:53 - 2015-01-11 20:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-02-11 07:53 - 2015-01-11 20:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-02-11 07:53 - 2015-01-11 20:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-02-11 07:53 - 2015-01-11 20:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-02-11 07:53 - 2015-01-11 20:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-02-11 07:53 - 2015-01-11 20:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-02-11 07:53 - 2015-01-11 20:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-02-11 07:53 - 2015-01-11 20:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-02-11 07:53 - 2015-01-11 20:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-02-11 07:53 - 2015-01-11 20:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-02-11 07:53 - 2015-01-11 20:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-02-11 07:53 - 2015-01-11 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-02-11 07:53 - 2015-01-11 20:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-02-11 07:53 - 2015-01-11 19:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-02-11 07:53 - 2015-01-11 19:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-02-11 07:53 - 2015-01-10 01:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-02-11 07:53 - 2015-01-10 01:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-02-11 07:53 - 2015-01-10 01:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-02-11 07:53 - 2015-01-10 01:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-02-11 07:53 - 2015-01-10 01:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-02-11 07:53 - 2015-01-10 01:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-02-11 07:53 - 2015-01-10 01:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-02-11 07:53 - 2015-01-10 01:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-02-11 07:53 - 2015-01-10 01:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-02-11 07:53 - 2015-01-10 01:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-02-11 07:53 - 2015-01-10 01:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-02-11 07:53 - 2015-01-10 01:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-02-11 07:53 - 2015-01-10 01:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-02-11 07:53 - 2015-01-10 01:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-02-11 07:52 - 2015-01-15 03:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-02-11 07:52 - 2015-01-15 03:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-02-11 07:52 - 2015-01-15 03:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-02-11 07:52 - 2015-01-15 03:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-02-11 07:52 - 2015-01-15 03:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-02-11 07:52 - 2015-01-15 03:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-02-11 07:52 - 2015-01-15 03:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-02-11 07:52 - 2015-01-15 03:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-02-11 07:52 - 2015-01-15 03:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-02-11 07:52 - 2015-01-15 03:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-02-11 07:52 - 2015-01-15 03:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-02-11 07:52 - 2015-01-15 02:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-02-11 07:52 - 2015-01-15 02:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-02-11 07:52 - 2015-01-15 02:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-02-11 07:52 - 2015-01-15 02:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-02-11 07:52 - 2015-01-15 02:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-02-11 07:52 - 2015-01-15 02:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-02-11 07:52 - 2015-01-14 23:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-02-11 07:52 - 2015-01-14 01:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-02-11 07:52 - 2015-01-14 01:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-02-11 07:52 - 2015-01-14 01:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-02-11 07:52 - 2015-01-14 01:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-02-11 07:52 - 2015-01-14 00:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-02-11 07:52 - 2015-01-14 00:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-02-11 07:52 - 2015-01-14 00:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-02-11 07:52 - 2015-01-12 22:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-02-11 07:52 - 2015-01-12 21:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-02-11 07:52 - 2015-01-08 21:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-02-11 07:52 - 2014-12-12 00:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-02-11 07:52 - 2014-12-12 00:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-02-11 07:52 - 2014-12-07 22:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-02-11 07:52 - 2014-12-07 21:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll

2015-02-11 07:52 - 2014-11-25 22:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-02-11 07:52 - 2014-11-25 22:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-02-01 10:53 - 2015-02-03 09:45 - 00000000 ____D () C:\Users\Megan\AppData\Roaming\Steganos VPN

2015-02-01 10:53 - 2015-02-03 09:44 - 00000000 ____D () C:\Users\Megan\AppData\Roaming\Steganos

2015-01-30 22:08 - 2015-01-30 22:08 - 00002141 _____ () C:\Users\Public\Desktop\Google Earth Pro.lnk

2015-01-30 22:08 - 2015-01-30 22:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro

2015-01-28 10:56 - 2015-01-28 10:56 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\13667B71.sys

2015-01-25 10:45 - 2015-01-25 10:45 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2F0E08C0.sys

2015-01-21 10:46 - 2015-01-21 10:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\7FB750DE.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-18 18:20 - 2014-07-26 17:39 - 00000000 ____D () C:\FRST

2015-02-18 18:13 - 2013-05-14 16:41 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-02-18 17:55 - 2014-04-13 19:06 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-02-18 17:41 - 2013-05-14 16:40 - 01105355 _____ () C:\Windows\WindowsUpdate.log

2015-02-18 17:40 - 2013-05-22 12:06 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-02-18 17:30 - 2013-05-23 14:36 - 00000000 ___RD () C:\Users\Megan\Dropbox

2015-02-18 17:30 - 2009-07-13 23:51 - 00115848 _____ () C:\Windows\setupact.log

2015-02-18 09:40 - 2013-05-22 12:06 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-02-18 09:31 - 2013-05-23 09:44 - 00000000 ____D () C:\Users\Megan\AppData\Local\Deployment

2015-02-18 09:19 - 2014-11-22 15:16 - 00004974 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Megan-PC-Megan Megan-PC

2015-02-18 09:14 - 2009-07-13 23:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-02-18 09:14 - 2009-07-13 23:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-02-18 09:09 - 2013-05-23 12:48 - 00000000 ____D () C:\ProgramData\Kaspersky Lab

2015-02-18 09:07 - 2014-01-17 12:16 - 00000000 ____D () C:\Users\Megan\AppData\Local\Box Sync

2015-02-18 09:07 - 2013-05-23 14:35 - 00000000 ____D () C:\Users\Megan\AppData\Roaming\Dropbox

2015-02-18 09:07 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-17 22:18 - 2015-01-16 13:21 - 00000000 ____D () C:\Users\Megan\Desktop\Parks and Recreation

2015-02-14 20:37 - 2014-10-02 15:58 - 00000000 ____D () C:\Users\Megan\AppData\Roaming\Spotify

2015-02-14 20:29 - 2014-11-01 10:55 - 00000000 ____D () C:\Users\Megan\AppData\Roaming\FileZilla

2015-02-14 20:01 - 2014-10-02 15:59 - 00000000 ____D () C:\Users\Megan\AppData\Local\Spotify

2015-02-14 19:20 - 2014-11-01 10:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2015-02-14 19:20 - 2014-11-01 10:54 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2015-02-14 18:34 - 2013-11-07 11:31 - 00000000 ____D () C:\Users\Megan\AppData\Roaming\uTorrent

2015-02-14 17:55 - 2013-05-22 11:48 - 00113008 _____ () C:\Users\Megan\AppData\Local\GDIPFONTCACHEV1.DAT

2015-02-14 17:55 - 2009-07-13 23:45 - 00444440 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-02-13 12:17 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache

2015-02-13 10:23 - 2014-01-14 12:10 - 00000000 ____D () C:\Program Files (x86)\Cantax

2015-02-13 10:21 - 2014-01-14 12:08 - 00000519 _____ () C:\Windows\CCHTXHLP.BAK

2015-02-13 10:21 - 2014-01-14 12:06 - 00000519 _____ () C:\Windows\cchtxhlp.ini

2015-02-13 09:39 - 2013-05-23 14:36 - 00001021 _____ () C:\Users\Megan\Desktop\Dropbox.lnk

2015-02-13 09:39 - 2013-05-23 14:35 - 00000000 ____D () C:\Users\Megan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-02-13 09:38 - 2014-01-17 12:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Box Sync

2015-02-12 09:27 - 2014-12-09 17:43 - 00000000 ____D () C:\Windows\system32\appraiser

2015-02-12 09:27 - 2014-05-06 10:27 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-02-12 09:27 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-02-11 23:01 - 2013-05-23 13:01 - 00000000 ____D () C:\ProgramData\Microsoft Help

2015-02-11 23:00 - 2013-07-12 16:06 - 00000000 ____D () C:\Windows\system32\MRT

2015-02-11 22:57 - 2013-05-23 16:19 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-02-10 13:11 - 2014-06-30 07:08 - 00000000 ____D () C:\Users\Megan\AppData\Roaming\TaobaoProtect

2015-02-07 09:35 - 2013-05-22 12:06 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-02-07 09:35 - 2013-05-22 12:06 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-02-06 09:37 - 2015-01-06 12:27 - 00002185 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-02-04 15:13 - 2013-05-14 16:41 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-02-04 15:13 - 2013-05-14 16:41 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-02-04 15:13 - 2013-05-14 16:41 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-02-02 08:56 - 2010-11-20 22:47 - 00441902 _____ () C:\Windows\PFRO.log

2015-01-30 22:08 - 2013-05-22 12:06 - 00000000 ____D () C:\Program Files (x86)\Google

2015-01-30 20:21 - 2014-01-17 12:16 - 00000000 ___RD () C:\Users\Megan\Box Sync

2015-01-27 18:11 - 2013-05-23 14:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2015-01-25 16:15 - 2014-10-29 14:59 - 00000000 ____D () C:\Program Files\Java

2015-01-25 16:15 - 2014-10-17 17:10 - 00000000 ____D () C:\Program Files (x86)\Java

2015-01-25 16:15 - 2014-01-10 21:25 - 00000000 ____D () C:\ProgramData\Oracle

2015-01-25 16:14 - 2014-10-29 15:01 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2015-01-25 16:14 - 2014-10-17 17:11 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2015-01-25 16:14 - 2014-10-17 17:10 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2015-01-25 16:14 - 2014-10-17 17:10 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2015-01-25 16:14 - 2014-10-17 17:10 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-01-23 15:19 - 2009-07-14 00:13 - 00798066 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-01-20 17:39 - 2014-01-17 12:15 - 00000000 ____D () C:\ProgramData\Package Cache

==================== Files in the root of some directories =======

2013-05-27 09:23 - 2014-06-27 09:25 - 0001078 _____ () C:\Users\Megan\AppData\Roaming\base64.cer

2013-11-19 21:05 - 2013-11-19 21:05 - 0000035 _____ () C:\Users\Megan\AppData\Roaming\CoreAVC.ini

2014-05-24 18:37 - 2014-05-24 18:37 - 0001052 _____ () C:\Users\Megan\AppData\Roaming\Network Meter_Settings.ini

2014-05-24 18:39 - 2014-05-24 18:39 - 0000018 _____ () C:\Users\Megan\AppData\Roaming\Network Meter_Usage.ini

2013-06-04 11:19 - 2013-06-04 11:19 - 0007597 _____ () C:\Users\Megan\AppData\Local\Resmon.ResmonCfg

2013-09-19 16:38 - 2013-10-26 11:38 - 0040306 _____ () C:\ProgramData\log.doc

2013-09-19 16:38 - 2013-10-26 11:38 - 0001317 _____ () C:\ProgramData\updateinfo.txt

Files to move or delete:

====================

C:\Users\Megan\IP_Log_Data.js

Some content of TEMP:

====================

C:\Users\Megan\AppData\Local\Temp\BoxForOffice-4.0.764.0.exe

C:\Users\Megan\AppData\Local\Temp\BoxForOffice.exe

C:\Users\Megan\AppData\Local\Temp\BoxForOfficeUpdater-4.0.765.0.exe

C:\Users\Megan\AppData\Local\Temp\dl_peer_id.dll

C:\Users\Megan\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp16fieg.dll

C:\Users\Megan\AppData\Local\Temp\dsHostCheckerSetup.exe

C:\Users\Megan\AppData\Local\Temp\dsNCInst64.exe

C:\Users\Megan\AppData\Local\Temp\ExPromo.exe

C:\Users\Megan\AppData\Local\Temp\fp_pl_pfs_installer-1.exe

C:\Users\Megan\AppData\Local\Temp\fp_pl_pfs_installer.exe

C:\Users\Megan\AppData\Local\Temp\gtapi.dll

C:\Users\Megan\AppData\Local\Temp\handbrake-setup.exe

C:\Users\Megan\AppData\Local\Temp\Helper.exe

C:\Users\Megan\AppData\Local\Temp\install_flashplayer16x32au_mssd_aaa_aih.exe

C:\Users\Megan\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe

C:\Users\Megan\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe

C:\Users\Megan\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe

C:\Users\Megan\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe

C:\Users\Megan\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe

C:\Users\Megan\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe

C:\Users\Megan\AppData\Local\Temp\jre-8u31-windows-au.exe

C:\Users\Megan\AppData\Local\Temp\log4net.dll

C:\Users\Megan\AppData\Local\Temp\neoNCSetup64.exe

C:\Users\Megan\AppData\Local\Temp\nsdCCCF.tmp.exe

C:\Users\Megan\AppData\Local\Temp\nsisdt.dll

C:\Users\Megan\AppData\Local\Temp\OfficeSetup.exe

C:\Users\Megan\AppData\Local\Temp\ose00000.exe

C:\Users\Megan\AppData\Local\Temp\Quarantine.exe

C:\Users\Megan\AppData\Local\Temp\QzoneMusic.exe

C:\Users\Megan\AppData\Local\Temp\safeguard.exe

C:\Users\Megan\AppData\Local\Temp\Setup.X86.en-US_O365HomePremRetail_86979110-9632-4e8a-810c-ec99599335e0_TX_PR_.exe

C:\Users\Megan\AppData\Local\Temp\SyncRestarter.exe

C:\Users\Megan\AppData\Local\Temp\sync_upgrader.exe

C:\Users\Megan\AppData\Local\Temp\vlc-2.0.7-win32.exe

C:\Users\Megan\AppData\Local\Temp\vlc-2.0.8-win32.exe

C:\Users\Megan\AppData\Local\Temp\vlc-2.1.1-win32.exe

C:\Users\Megan\AppData\Local\Temp\vlc-2.1.2-win32.exe

C:\Users\Megan\AppData\Local\Temp\vlc-2.1.3-win32.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-02-13 12:10

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-02-2015 01

Ran by Megan at 2015-02-18 18:20:49

Running from C:\Users\Megan\Desktop

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}

AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-4175754119-1806728938-4148705958-1000\...\uTorrent) (Version: 3.4.2.37754 - BitTorrent Inc.)

115网盘 (HKLM-x32\...\115网盘云备份) (Version: 3.0.0.37 - 广东一一五科技有限公司)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.2090 - Adobe Systems Incorporated)

Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated)

Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)

Autodesk SketchBook Express 2011 sp2 (HKLM-x32\...\{EB87378B-E64A-4D27-8AB6-0786BAB3AC84}) (Version: 5.20.0000 - Autodesk)

Box for Office (HKLM-x32\...\{1b06df1e-358d-4e08-9339-8028d64a644e}) (Version: 4.0.821.0 - Box, Inc.)

Box for Office (x32 Version: 4.0.821.0 - Box) Hidden

Box Sync (HKLM\...\{2A8F0A4C-490A-4A13-882C-52B672006586}) (Version: 4.0.6073.0 - Box, Inc.)

Box Sync (x32 Version: 4.0.4179.0 - Box Inc.) Hidden

Cantax T1Plus CGA 2013 (HKLM-x32\...\{155BAEBE-EDB7-4F54-9435-7F874C9CCAE2}) (Version: 13.3.0 - Wolters Kluwer Limited)

CCH Publications 4.7 (HKLM-x32\...\{1A3EBE47-BA42-4C64-923E-E29165319E1A}) (Version: 4.7 - CCH Canadian Limited)

CCH Publications 4.7 (x32 Version: 4.7 - CCH Canadian Limited) Hidden

Conexant SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.50.8.0 - Conexant)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)

Dropbox (HKU\S-1-5-21-4175754119-1806728938-4148705958-1000\...\Dropbox) (Version: 3.2.6 - Dropbox, Inc.)

EaseUS Partition Master 10.2 Trial Edition (HKLM-x32\...\EaseUS Partition Master Trial Edition_is1) (Version: - EaseUS)

EPSON NX330 Series Printer Uninstall (HKLM\...\EPSON NX330 Series) (Version: - SEIKO EPSON Corporation)

FileZilla Client 3.10.1.1 (HKLM-x32\...\FileZilla Client) (Version: 3.10.1.1 - Tim Kosse)

FlashGet 1.9.6.1073 (HKLM-x32\...\FlashGet) (Version: 1.9.6.1073 - http://www.FlashGet.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)

Google Drive (HKLM-x32\...\{65EACBB4-B0B8-4A5B-AE46-22DBE15C70B5}) (Version: 1.19.8406.6504 - Google, Inc.)

Google Earth Pro (HKLM-x32\...\{44FC61F0-2F8A-11E3-8CAE-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

HandBrake 0.10.0 (HKLM-x32\...\HandBrake) (Version: 0.10.0 - )

Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)

Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)

Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)

Interaction Center User Applications with su10 (HKLM-x32\...\{B262C4C9-0C49-4C0B-86E2-4B54122B23D7}) (Version: 3.010.11775 - Interactive Intelligence, Inc.)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)

Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)

Kaspersky Internet Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden

Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft AppLocale (HKLM-x32\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)

Microsoft Mathematics Add-in (32-bit) (HKLM-x32\...\{E2C98732-F973-4985-A9C5-DC06178E16EE}) (Version: 2.0.040811.01 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)

Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.31211.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version: - )

MKVToolNix 7.5.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 7.5.0 - Moritz Bunkus)

Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Mozilla Firefox 32.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 en-US)) (Version: 32.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MPC-HC 1.7.6 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.6 - MPC-HC Team)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

Plex Media Server (HKLM-x32\...\{7425d872-d65d-42c9-8c6d-7a8a529a4b50}) (Version: 0.9.1107 - Plex, Inc.)

Plex Media Server (x32 Version: 0.9.1107 - Plex, Inc.) Hidden

Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)

Spotify (HKU\S-1-5-21-4175754119-1806728938-4148705958-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)

System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)

Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)

WinRAR 5.00 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

X Codec Pack (HKLM\...\X Codec Pack) (Version: 2.6.2 - X Codec Pack team)

百度云管家 (HKLM-x32\...\百度云管家) (Version: 4.6.1 - 百度在线网络技术北京有限公司)

腾讯微云 (HKLM-x32\...\weiyundisk) (Version: 2.0 - 腾讯科技(深圳)有限公司)

迅雷7 (HKLM-x32\...\thunder_is1) (Version: - 迅雷网络技术有限公司)

迅雷VIP尊享版 (HKLM-x32\...\thunder_vip_is1) (Version: - 迅雷网络技术有限公司)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Megan\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{092dfa86-5807-5a94-bf3b-5a53ba9e5308}\InprocServer32 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll No File

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{324D60B7-A0E4-45A7-9EA8-A00C315C0688}\InprocServer32 -> C:\Windows\system32\shdocvw.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{679F137C-3162-45da-BE3C-2F9C3D093F64}\InprocServer32 -> C:\Windows\system32\shdocvw.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Megan\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Megan\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Megan\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Megan\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Megan\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Megan\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Megan\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Megan\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4175754119-1806728938-4148705958-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Megan\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points =========================

ATTENTION: System Restore is disabled.

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2014-07-04 11:05 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {10F0BCBC-D755-4448-9FBC-990FE513035C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {16CD8CB3-1F2C-45F4-A8B1-8CA2352570B2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-22] (Google Inc.)

Task: {2D61C0AD-089D-443A-AC28-8A0BFECBEFB3} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-11-11] (Microsoft Corporation)

Task: {30341680-2A01-4EE6-BEE9-F6A5C346AAD2} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Megan-PC-Megan Megan-PC => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-11-04] (Microsoft Corporation)

Task: {3BF62129-1435-4069-99D1-E76C50D7B7A1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)

Task: {6C7FF4A8-32F2-45EA-81A1-5BE90FE38EB6} - System32\Tasks\{72B0A4E5-C02C-4A45-A64A-874FC976D530} => pcalua.exe -a C:\Users\Megan\Desktop\startuplite-setup-1.07.exe -d C:\Users\Megan\Desktop

Task: {76C0BA74-FE40-4FD7-A990-A9F5ACD8B332} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)

Task: {7F71BCDF-4C81-47B7-BECC-26C237024303} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {D9D12AB9-C796-4267-85BA-26FE6C5AD173} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-22] (Google Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-11-22 09:35 - 2014-09-23 08:36 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2014-12-08 05:10 - 2014-12-08 05:10 - 00102176 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2014-03-21 04:48 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2012-04-10 22:30 - 2012-04-10 22:30 - 00471552 _____ () C:\Program Files\Box\Box Sync\_hashlib.pyd

2012-10-27 06:28 - 2012-10-27 06:28 - 00128512 _____ () C:\Program Files\Box\Box Sync\win32api.pyd

2012-10-27 06:27 - 2012-10-27 06:27 - 00137728 _____ () C:\Program Files\Box\Box Sync\pywintypes27.dll

2012-10-27 06:29 - 2012-10-27 06:29 - 00503808 _____ () C:\Program Files\Box\Box Sync\pythoncom27.dll

2012-04-10 22:25 - 2012-04-10 22:25 - 00111616 _____ () C:\Program Files\Box\Box Sync\_ctypes.pyd

2013-10-09 16:05 - 2013-10-09 16:05 - 00003584 _____ () C:\Program Files\Box\Box Sync\clr.pyd

2013-10-09 16:05 - 2013-10-09 16:05 - 00103424 _____ () C:\Program Files\Box\Box Sync\Python.Runtime.dll

2012-04-10 22:24 - 2012-04-10 22:24 - 00046080 _____ () C:\Program Files\Box\Box Sync\_socket.pyd

2012-04-10 22:30 - 2012-04-10 22:30 - 01167360 _____ () C:\Program Files\Box\Box Sync\_ssl.pyd

2012-04-10 22:24 - 2012-04-10 22:24 - 00689664 _____ () C:\Program Files\Box\Box Sync\unicodedata.pyd

2012-04-10 22:24 - 2012-04-10 22:24 - 00058368 _____ () C:\Program Files\Box\Box Sync\_sqlite3.pyd

2012-10-27 06:31 - 2012-10-27 06:31 - 00438784 _____ () C:\Program Files\Box\Box Sync\win32com.shell.shell.pyd

2012-10-27 06:27 - 2012-10-27 06:27 - 00023040 _____ () C:\Program Files\Box\Box Sync\win32event.pyd

2014-11-18 15:12 - 2014-11-18 15:12 - 00027136 _____ () C:\Program Files\Box\Box Sync\ujson.pyd

2014-11-18 15:12 - 2014-11-18 15:12 - 00044544 _____ () C:\Program Files\Box\Box Sync\_psutil_windows.pyd

2012-10-27 06:27 - 2012-10-27 06:27 - 00149504 _____ () C:\Program Files\Box\Box Sync\win32file.pyd

2012-04-10 22:24 - 2012-04-10 22:24 - 00010752 _____ () C:\Program Files\Box\Box Sync\select.pyd

2012-10-27 06:28 - 2012-10-27 06:28 - 00136192 _____ () C:\Program Files\Box\Box Sync\win32security.pyd

2012-10-27 06:27 - 2012-10-27 06:27 - 00044032 _____ () C:\Program Files\Box\Box Sync\win32process.pyd

2012-04-10 22:24 - 2012-04-10 22:24 - 00166912 _____ () C:\Program Files\Box\Box Sync\_elementtree.pyd

2012-04-10 22:24 - 2012-04-10 22:24 - 00164352 _____ () C:\Program Files\Box\Box Sync\pyexpat.pyd

2012-10-27 06:27 - 2012-10-27 06:27 - 00030720 _____ () C:\Program Files\Box\Box Sync\win32cred.pyd

2014-11-18 15:12 - 2014-11-18 15:12 - 00030208 _____ () C:\Program Files\Box\Box Sync\Crypto.Cipher._AES.pyd

2014-11-18 15:13 - 2014-11-18 15:13 - 00008192 _____ () C:\Program Files\Box\Box Sync\Crypto.Util.strxor.pyd

2014-11-18 15:12 - 2014-11-18 15:12 - 00010752 _____ () C:\Program Files\Box\Box Sync\Crypto.Random.OSRNG.winrandom.pyd

2014-11-18 15:13 - 2014-11-18 15:13 - 00011264 _____ () C:\Program Files\Box\Box Sync\Crypto.Util._counter.pyd

2012-04-10 22:24 - 2012-04-10 22:24 - 00031744 _____ () C:\Program Files\Box\Box Sync\_multiprocessing.pyd

2012-10-27 06:28 - 2012-10-27 06:28 - 00053760 _____ () C:\Program Files\Box\Box Sync\win32service.pyd

2014-11-18 15:12 - 2014-11-18 15:12 - 00026112 _____ () C:\Program Files\Box\Box Sync\_yappi.pyd

2012-10-27 06:27 - 2012-10-27 06:27 - 00021504 _____ () C:\Program Files\Box\Box Sync\win32clipboard.pyd

2012-10-27 06:28 - 2012-10-27 06:28 - 00223232 _____ () C:\Program Files\Box\Box Sync\win32gui.pyd

2014-09-09 15:30 - 2014-09-09 15:30 - 00068096 _____ () C:\Program Files\Box\Box Sync\SystemWrapper.dll

2015-02-10 12:28 - 2015-02-10 12:28 - 00030232 _____ () C:\Program Files\Box\Box Sync\BoxSyncMonitor.exe

2015-02-06 09:37 - 2015-02-04 03:53 - 01450312 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libglesv2.dll

2015-02-06 09:37 - 2015-02-04 03:53 - 00205128 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libegl.dll

2015-02-06 09:37 - 2015-02-04 03:53 - 10864456 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\pdf.dll

2014-08-30 16:12 - 2014-08-30 16:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\kpcengine.2.3.dll

2010-10-26 18:06 - 2010-10-26 18:06 - 01126400 _____ () C:\Program Files (x86)\Interactive Intelligence\ININ Trace Initialization\ace-w32r-1-1.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 00072840 _____ () C:\Program Files (x86)\Plex\Plex Media Server\zlib.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 00196232 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libidn.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 00838792 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libxml2.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 00049800 _____ () C:\Program Files (x86)\Plex\Plex Media Server\soci_sqlite3-vc80-3_0.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 00086664 _____ () C:\Program Files (x86)\Plex\Plex Media Server\soci_core-vc80-3_0.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 02092680 _____ () C:\Program Files (x86)\Plex\Plex Media Server\opencv_core249.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 01883272 _____ () C:\Program Files (x86)\Plex\Plex Media Server\opencv_imgproc249.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 00502920 _____ () C:\Program Files (x86)\Plex\Plex Media Server\tag.dll

2015-02-10 16:00 - 2015-02-10 16:00 - 00750080 _____ () C:\Users\Megan\AppData\Roaming\Dropbox\bin\libGLESv2.dll

2015-02-18 09:07 - 2015-02-18 09:07 - 00043008 _____ () c:\users\megan\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp16fieg.dll

2015-02-10 16:00 - 2015-02-10 16:00 - 00047616 _____ () C:\Users\Megan\AppData\Roaming\Dropbox\bin\libEGL.dll

2015-02-10 16:00 - 2015-02-10 16:00 - 00865280 _____ () C:\Users\Megan\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll

2015-02-10 16:00 - 2015-02-10 16:00 - 00200704 _____ () C:\Users\Megan\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll

2013-11-19 20:46 - 2013-11-19 20:45 - 00021504 _____ () c:\program files (x86)\common files\thunder network\serviceplatform\minizip.dll

2013-11-19 20:46 - 2013-11-19 20:45 - 00684032 _____ () c:\program files (x86)\common files\thunder network\serviceplatform\libexpat.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 00044680 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_socket.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00027784 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_ssl.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00018568 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_hashlib.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00034952 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\simplejson\_speedups.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00836232 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\lxml\etree.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00062600 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libexslt.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 00166024 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libxslt.dll

2014-12-21 22:31 - 2014-12-21 22:31 - 00192136 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\lxml\objectify.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00016520 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\select.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00054920 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\OpenSSL\crypto.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00017032 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\OpenSSL\rand.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00043656 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\OpenSSL\SSL.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00081544 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_ctypes.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00111240 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\pyexpat.pyd

2014-12-21 22:31 - 2014-12-21 22:31 - 00689800 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\unicodedata.pyd

2013-05-14 16:52 - 2011-12-16 13:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll

2014-10-15 10:40 - 2014-10-15 10:40 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1eeea3ab8d69ec722bdcb28b8eb8dd75\IsdiInterop.ni.dll

2013-05-14 16:53 - 2012-02-01 16:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4175754119-1806728938-4148705958-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Megan\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.241.137.65 - 104.131.127.184

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== Accounts: =============================

Administrator (S-1-5-21-4175754119-1806728938-4148705958-500 - Administrator - Disabled)

Guest (S-1-5-21-4175754119-1806728938-4148705958-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-4175754119-1806728938-4148705958-1002 - Limited - Enabled)

Megan (S-1-5-21-4175754119-1806728938-4148705958-1000 - Administrator - Enabled) => C:\Users\Megan

==================== Faulty Device Manager Devices =============

Name: Network Controller

Description: Network Controller

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:

==================

Error: (02/18/2015 09:09:24 AM) (Source: WinMgmt) (EventID: 10) (User: )