dejam Posted July 9, 2015 ID:975138 Share Posted July 9, 2015 Hello TechsI'm new to this online assistance so bear with me if it takes me a minute to catch on. Trying to fix this laptop (Toshiba) running Windows 7 Home Premium. Malwarebytes identified Pum.Bad.Proxy. I "quarantined and deleted" it. But it keeps coming back. I've scanned in Safe mode with an without networking, Run Roguekiller, AdwCleaner, Windows all-in-one repair tool, Hitmanpro, Uunk Removal Software Tool, and even tried to hunt the devil down in the registry (following other online instructions) to no avail. How do I get rid of this joker permanently? Standing by for your expertise. Link to post Share on other sites More sharing options...
Maniac Posted July 9, 2015 ID:975145 Share Posted July 9, 2015 Hello dejam and ! My name is Borislav and I will be glad to help you solve your malware problem. Please note:If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.Make sure you read all of the instructions and fixes thoroughly before continuing with them.Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.Please follow the instructions here and then post your log files in a new reply in this thread: https://forums.malwarebytes.org/index.php?/topic/9573-im-infected-what-do-i-do-now/ Link to post Share on other sites More sharing options...
dejam Posted July 9, 2015 Author ID:975268 Share Posted July 9, 2015 Borislav or other Expert I ran Malwarebytes Premium in Safe mode and it didn't pick up the Pum.Bad.Proxy. It did when I ran it in Normal mode. Had to post separate logs....Standing by. FRST.txt Log Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-07-2015Ran by Ms.MiaJay (administrator) on THEBEST on 09-07-2015 18:06:43Running from C:\Users\Ms.MiaJay\DesktopLoaded Profiles: Ms.MiaJay (Available Profiles: Ms.MiaJay)Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)Internet Explorer Version 11 (Default browser: IE)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgfws.exe(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe(Malwarebytes Corporation) C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE\mbamscheduler.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe(Intel Corporation) C:\Windows\System32\hkcmd.exe(Intel Corporation) C:\Windows\System32\igfxpers.exe(Intel Corporation) C:\Windows\System32\igfxsrvc.exe(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe(Malwarebytes Corporation) C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE\mbamservice.exe(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe(Intel Corporation) C:\Windows\System32\igfxext.exe(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\rselect\RSelSvc.exe(Malwarebytes Corporation) C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE\mbam.exe(AdFender, Inc.) C:\Program Files (x86)\AdFender\AdFender.exe(CyberLink) C:\Program Files (x86)\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMLSvc.exe(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerCinema for TOSHIBA\PCMAgent.exe(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_18_0_0_203_ActiveX.exe(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe==================== Registry (Whitelisted) ==================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2009-03-18] (Synaptics Incorporated)HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1451520 2009-04-14] (TOSHIBA Corporation)HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe [1123840 2009-03-24] (TOSHIBA Corporation)HKLM\...\Run: [TPCHWMsg] => C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe [613232 2009-04-09] (TOSHIBA Corporation)HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [497504 2009-08-21] (TOSHIBA Corporation)HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)HKLM\...\Run: [smoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [508216 2009-07-28] (TOSHIBA Corporation)HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [909624 2009-08-05] (TOSHIBA Corporation)HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-06-29] (Apple Inc.)HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMLSvc.exe [196608 2009-02-16] (CyberLink)HKLM-x32\...\Run: [PCMAgent] => C:\Program Files (x86)\CyberLink\PowerCinema for TOSHIBA\PCMAgent.exe [143360 2009-02-16] (CyberLink Corp.)HKLM-x32\...\Run: [TUSBSleepChargeSrv] => C:\Program Files (x86)\TOSHIBA\TOSHIBA USB Sleep and Charge Utility\TUSBSleepChargeSrv.exe [252288 2009-03-28] (TOSHIBA)HKLM-x32\...\Run: [TWebCamera] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2513472 2009-04-16] (TOSHIBA)HKLM-x32\...\Run: [iJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [124256 2010-01-18] (CANON INC.)HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.)HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3730344 2015-06-30] (AVG Technologies CZ, s.r.o.)HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2621752 2015-07-07] (Malwarebytes Corporation)Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)HKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [163328 2010-11-20] (Microsoft Corporation)HKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)HKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)HKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)HKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\MountPoints2: {3f372bce-08c1-11e1-abd6-001e33ce643e} - G:\TL-Bootstrap.exeHKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\MountPoints2: {a6cb30f4-c772-11e0-b342-001e33ce643e} - E:\TL-Bootstrap.exeHKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\MountPoints2: {b3e91acf-a310-11de-b044-001e33ce643e} - E:\LaunchU3.exe -aHKU\S-1-5-21-1571504606-35610335-4001555038-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-20] (Microsoft Corporation)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk [2015-07-07]ShortcutTarget: AdFender.lnk -> C:\Program Files (x86)\AdFender\AdFender.exe (AdFender, Inc.)BootExecute: autocheck autochk * bootdelete==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabledHKU\S-1-5-21-1571504606-35610335-4001555038-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htmHKU\S-1-5-21-1571504606-35610335-4001555038-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/SearchScopes: HKLM -> {1BA66D3C-8ACF-4F34-A3D5-697EC7951D62} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSHBSearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSHBSearchScopes: HKLM-x32 -> {7CC94BCA-8E5E-4FAD-ACE5-798C208642BC} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKU\S-1-5-21-1571504606-35610335-4001555038-1000 -> DefaultScope {9D7B5883-089B-43CF-BFFB-3D22667CC31E} URL = https://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}SearchScopes: HKU\S-1-5-21-1571504606-35610335-4001555038-1000 -> {1BA66D3C-8ACF-4F34-A3D5-697EC7951D62} URL =SearchScopes: HKU\S-1-5-21-1571504606-35610335-4001555038-1000 -> {7CC94BCA-8E5E-4FAD-ACE5-798C208642BC} URL =SearchScopes: HKU\S-1-5-21-1571504606-35610335-4001555038-1000 -> {9D7B5883-089B-43CF-BFFB-3D22667CC31E} URL = https://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-05-19] (Microsoft Corporation)BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-05-28] (Microsoft Corporation)BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-05-28] (Microsoft Corporation)BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-22] (Oracle Corporation)BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-05-28] (Microsoft Corporation)Toolbar: HKU\S-1-5-21-1571504606-35610335-4001555038-1000 -> No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No FileDPF: HKLM-x32 {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files%20(x86)/THE%20GAME%20OF%20LIFE%20by%20Hasbro/Images/stg_drm.ocxDPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cabDPF: HKLM-x32 {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} http://zone.msn.com/bingame/zpagames/GAME_UNO1.cab60096.cabDPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cabDPF: HKLM-x32 {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cabDPF: HKLM-x32 {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files%20(x86)/THE%20GAME%20OF%20LIFE%20by%20Hasbro/Images/armhelper.ocxDPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabHandler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)Hosts: 127.0.0.1 localhostTcpip\Parameters: [DhcpNameServer] 192.168.1.1Tcpip\..\Interfaces\{A681811C-98A7-41ED-8420-335A519FDDB9}: [DhcpNameServer] 192.168.1.1FireFox:========FF ProfilePath: C:\Users\Ms.MiaJay\AppData\Roaming\Mozilla\Firefox\Profiles\vusfol4v.defaultFF Keyword.URL:FF Plugin: @microsoft.com/GENUINE -> disabled No FileFF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()FF Plugin-x32: @google.com/npPicasa2,version=2.0.0 -> C:\Program Files (x86)\Picasa2\npPicasa2.dll [2008-08-20] (Google, Inc.)FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Picasa2\npPicasa3.dll [2011-04-13] (Google, Inc.)FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-01-22] (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-01-22] (Oracle Corporation)FF Plugin-x32: @microsoft.com/GENUINE -> disabled No FileFF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-08-13] (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2014-11-14] ()FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtensionFF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-16]FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found]Chrome:=======CHR Profile: C:\Users\Ms.MiaJay\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (No Name) - C:\Users\Ms.MiaJay\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhgoncokajlafhnhjmccgcmgggiehjm [2010-09-05]==================== Services (Whitelisted) =================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)R2 avgfws; C:\Program Files (x86)\AVG\AVG2015\avgfws.exe [1528432 2015-06-30] (AVG Technologies CZ, s.r.o.)R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3518376 2015-06-30] (AVG Technologies CZ, s.r.o.)R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [314304 2015-06-30] (AVG Technologies CZ, s.r.o.)R2 camsvc; C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe [20544 2009-04-16] (TOSHIBA)R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2736824 2015-04-07] (Microsoft Corporation)S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [61440 2006-10-19] (Hewlett-Packard Company) [File not signed]R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [712504 2015-07-07] (Malwarebytes Corporation)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]R2 RSELSVC; C:\Program Files\TOSHIBA\rselect\RSelSvc.exe [55808 2009-02-19] (TOSHIBA Corporation) [File not signed]R2 TNaviSrv; C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [83312 2009-03-30] (TOSHIBA Corporation)R2 TODDSrv; C:\Windows\system32\TODDSrv.exe [135168 2007-11-21] (TOSHIBA Corporation) [File not signed]R2 TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [251392 2009-04-14] (TOSHIBA Corporation) [File not signed]R2 TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [84480 2009-03-17] (TOSHIBA Corporation) [File not signed]S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)==================== Drivers (Whitelisted) ====================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [67552 2015-04-14] (AVG Technologies CZ, s.r.o.)R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [293296 2015-06-26] (AVG Technologies CZ, s.r.o.)R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [253408 2015-05-12] (AVG Technologies CZ, s.r.o.)R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [259040 2015-06-16] (AVG Technologies CZ, s.r.o.)R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [226784 2015-06-10] (AVG Technologies CZ, s.r.o.)R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [281568 2015-05-12] (AVG Technologies CZ, s.r.o.)R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-05-09] (AVG Technologies)R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2015-07-07] ()S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [52832 2012-09-21] (http://libusb-win32.sourceforge.net)R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [109272 2015-06-18] (Malwarebytes Corporation)R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [113880 2015-07-09] (Malwarebytes Corporation)R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [767648 2014-10-08] (Microsoft Corporation)R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2014-10-08] (Microsoft Corporation)R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29864 2014-10-08] (Microsoft Corporation)R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2014-10-08] (Microsoft Corporation)U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [37624 2015-07-09] ()S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [File not signed]==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-07-09 18:06 - 2015-07-09 18:07 - 00021982 _____ C:\Users\Ms.MiaJay\Desktop\FRST.txt2015-07-09 18:06 - 2015-07-09 18:06 - 00000000 ____D C:\FRST2015-07-09 17:31 - 2015-07-09 17:31 - 02112512 _____ (Farbar) C:\Users\Ms.MiaJay\Desktop\FRST64.exe2015-07-09 14:11 - 2015-07-09 14:11 - 00000819 _____ C:\Users\Public\Desktop\RogueKiller.lnk2015-07-09 14:11 - 2015-07-09 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller2015-07-09 14:11 - 2015-07-09 14:11 - 00000000 ____D C:\Program Files\RogueKiller2015-07-09 00:49 - 2015-07-09 15:49 - 00000168 _____ C:\Windows\setupact.log2015-07-09 00:49 - 2015-07-09 00:49 - 00000000 _____ C:\Windows\setuperr.log2015-07-09 00:25 - 2015-07-09 00:25 - 00000207 _____ C:\Windows\tweaking.com-regbackup-THEBEST-Windows-7-Home-Premium-(64-bit).dat2015-07-08 21:40 - 2015-07-08 21:42 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit2015-07-08 21:40 - 2015-07-08 21:40 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit2015-07-08 13:57 - 2015-07-08 13:57 - 00066779 _____ C:\Users\Ms.MiaJay\Desktop\remove proxy in Internet Explorer.htm2015-07-08 13:57 - 2015-07-08 13:57 - 00000000 ____D C:\Users\Ms.MiaJay\Desktop\remove proxy in Internet Explorer_files2015-07-07 17:39 - 2015-07-09 17:58 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job2015-07-07 17:39 - 2015-07-08 20:04 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe2015-07-07 17:39 - 2015-07-08 20:04 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl2015-07-07 17:39 - 2015-07-08 20:04 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater2015-07-07 17:13 - 2013-10-11 22:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx2015-07-07 17:13 - 2013-10-11 22:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll2015-07-07 17:13 - 2013-10-11 22:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx2015-07-07 17:13 - 2013-10-11 22:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll2015-07-07 17:13 - 2013-10-11 21:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe2015-07-07 17:13 - 2013-10-11 21:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe2015-07-07 17:13 - 2013-10-11 21:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe2015-07-07 17:13 - 2013-10-11 21:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe2015-07-07 03:10 - 2015-07-07 03:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdFender2015-07-07 02:39 - 2015-07-09 14:11 - 00037624 _____ C:\Windows\system32\Drivers\TrueSight.sys2015-07-07 02:32 - 2015-07-07 02:33 - 00000000 ___HD C:\Windows\AxInstSV2015-07-07 02:13 - 2015-07-07 02:14 - 02244096 _____ C:\Users\Ms.MiaJay\Desktop\AdwCleaner.exe2015-07-06 19:51 - 2015-07-06 19:51 - 00000000 ____D C:\RegBackup2015-07-06 18:42 - 2015-07-06 18:42 - 00000000 ____D C:\Program Files (x86)\Tweaking.com2015-07-05 14:32 - 2015-07-09 01:03 - 00000000 ____D C:\AdwCleaner2015-07-02 20:03 - 2015-07-07 03:10 - 00000000 ____D C:\Program Files (x86)\AdFender2015-07-02 20:03 - 2015-07-02 20:03 - 00000000 ____D C:\ProgramData\AdFender2015-07-02 17:51 - 2015-07-07 02:39 - 00000000 ____D C:\ProgramData\RogueKiller2015-07-02 06:19 - 2015-07-02 06:19 - 00281320 _____ C:\Users\Ms.MiaJay\AppData\Local\census.cache2015-07-02 06:19 - 2015-07-02 06:19 - 00190692 _____ C:\Users\Ms.MiaJay\AppData\Local\ars.cache2015-07-02 02:06 - 2015-07-02 12:40 - 00000010 _____ C:\Users\Ms.MiaJay\AppData\Local\sponge.last.runtime.cache2015-07-02 01:44 - 2015-07-02 01:44 - 00000036 _____ C:\Users\Ms.MiaJay\AppData\Local\housecall.guid.cache2015-07-01 23:34 - 2015-07-01 23:34 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Local\GWX2015-07-01 21:48 - 2015-05-08 23:27 - 03147776 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll2015-07-01 21:48 - 2015-05-08 23:27 - 02589184 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll2015-07-01 21:48 - 2015-05-08 23:27 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll2015-07-01 21:48 - 2015-05-08 23:27 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll2015-07-01 21:48 - 2015-05-08 23:27 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll2015-07-01 21:48 - 2015-05-08 23:27 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll2015-07-01 21:48 - 2015-05-08 23:27 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll2015-07-01 21:48 - 2015-05-08 23:26 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe2015-07-01 21:48 - 2015-05-08 23:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll2015-07-01 21:48 - 2015-05-08 23:26 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe2015-07-01 21:48 - 2015-05-08 23:26 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll2015-07-01 21:48 - 2015-05-08 23:14 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll2015-07-01 21:48 - 2015-05-08 23:14 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll2015-07-01 21:48 - 2015-05-08 23:14 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll2015-07-01 21:48 - 2015-05-08 23:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll2015-07-01 21:48 - 2015-05-08 23:13 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe2015-07-01 21:21 - 2015-07-01 21:21 - 00000000 ____D C:\Intel2015-07-01 20:51 - 2015-04-27 15:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll2015-07-01 20:51 - 2015-04-27 15:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll2015-07-01 20:51 - 2015-04-27 15:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll2015-07-01 20:51 - 2015-04-27 15:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll2015-07-01 20:51 - 2015-04-27 15:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll2015-07-01 20:51 - 2015-04-27 15:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll2015-07-01 20:51 - 2015-04-27 15:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll2015-07-01 20:51 - 2015-04-27 15:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll2015-07-01 20:51 - 2015-03-13 23:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll2015-07-01 20:51 - 2015-03-13 23:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll2015-07-01 20:51 - 2015-03-13 23:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll2015-07-01 20:51 - 2015-03-13 23:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll2015-07-01 20:49 - 2015-05-09 14:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll2015-07-01 20:21 - 2015-05-25 14:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe2015-07-01 20:21 - 2015-05-25 14:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys2015-07-01 20:21 - 2015-05-25 14:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys2015-07-01 20:21 - 2015-05-25 14:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll2015-07-01 20:21 - 2015-05-25 14:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll2015-07-01 20:21 - 2015-05-25 14:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll2015-07-01 20:21 - 2015-05-25 14:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll2015-07-01 20:21 - 2015-05-25 14:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll2015-07-01 20:21 - 2015-05-25 14:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll2015-07-01 20:21 - 2015-05-25 14:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe2015-07-01 20:21 - 2015-05-25 14:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe2015-07-01 20:21 - 2015-05-25 14:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe2015-07-01 20:21 - 2015-05-25 14:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe2015-07-01 20:21 - 2015-05-25 14:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe2015-07-01 20:21 - 2015-05-25 14:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe2015-07-01 20:21 - 2015-05-25 14:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe2015-07-01 20:21 - 2015-05-25 14:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll2015-07-01 20:21 - 2015-05-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe2015-07-01 20:21 - 2015-05-25 14:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe2015-07-01 20:21 - 2015-05-25 14:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll2015-07-01 20:21 - 2015-05-25 14:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe2015-07-01 20:21 - 2015-05-25 14:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll2015-07-01 20:21 - 2015-05-25 14:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 14:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe2015-07-01 20:21 - 2015-05-25 14:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe2015-07-01 20:21 - 2015-05-25 14:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll2015-07-01 20:21 - 2015-05-25 14:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll2015-07-01 20:21 - 2015-05-25 14:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe2015-07-01 20:21 - 2015-05-25 14:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe2015-07-01 20:21 - 2015-05-25 14:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe2015-07-01 20:21 - 2015-05-25 14:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe2015-07-01 20:21 - 2015-05-25 14:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe2015-07-01 20:21 - 2015-05-25 14:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe2015-07-01 20:21 - 2015-05-25 14:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe2015-07-01 20:21 - 2015-05-25 13:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll2015-07-01 20:21 - 2015-05-25 13:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll2015-07-01 20:21 - 2015-05-25 13:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll2015-07-01 20:21 - 2015-05-25 13:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll2015-07-01 20:21 - 2015-05-25 13:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll2015-07-01 20:21 - 2015-05-25 13:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 13:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2015-07-01 20:21 - 2015-05-25 13:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll2015-07-01 20:21 - 2015-05-25 12:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe2015-07-01 20:21 - 2015-05-25 12:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe2015-07-01 20:21 - 2015-05-25 12:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 12:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 12:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll2015-07-01 20:21 - 2015-05-25 12:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll2015-07-01 20:21 - 2015-05-22 14:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll2015-07-01 20:21 - 2015-05-22 14:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll2015-07-01 20:21 - 2015-05-22 14:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll2015-07-01 20:21 - 2015-05-22 14:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll2015-07-01 20:21 - 2015-05-22 14:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll2015-07-01 20:21 - 2015-05-22 14:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll2015-07-01 20:21 - 2015-05-22 14:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll2015-07-01 20:21 - 2015-05-21 09:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll2015-07-01 20:21 - 2015-04-29 14:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll2015-07-01 20:21 - 2015-04-29 14:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll2015-07-01 20:21 - 2015-04-29 14:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx2015-07-01 20:21 - 2015-04-29 14:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll2015-07-01 20:21 - 2015-04-29 14:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL2015-07-01 20:21 - 2015-04-29 14:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll2015-07-01 20:21 - 2015-04-29 14:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll2015-07-01 20:21 - 2015-04-29 14:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx2015-07-01 20:21 - 2015-04-29 14:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll2015-07-01 20:21 - 2015-04-29 14:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL2015-07-01 20:20 - 2015-04-24 14:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll2015-07-01 20:20 - 2015-04-24 13:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll2015-07-01 20:19 - 2015-06-01 15:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll2015-07-01 20:19 - 2015-06-01 14:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll2015-07-01 20:19 - 2015-05-27 10:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2015-07-01 20:19 - 2015-05-27 10:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2015-07-01 20:19 - 2015-05-22 23:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb2015-07-01 20:19 - 2015-05-22 23:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2015-07-01 20:19 - 2015-05-22 23:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll2015-07-01 20:19 - 2015-05-22 23:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll2015-07-01 20:19 - 2015-05-22 23:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec2015-07-01 20:19 - 2015-05-22 23:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll2015-07-01 20:19 - 2015-05-22 23:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2015-07-01 20:19 - 2015-05-22 23:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll2015-07-01 20:19 - 2015-05-22 23:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll2015-07-01 20:19 - 2015-05-22 23:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll2015-07-01 20:19 - 2015-05-22 23:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2015-07-01 20:19 - 2015-05-22 23:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe2015-07-01 20:19 - 2015-05-22 23:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll2015-07-01 20:19 - 2015-05-22 22:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll2015-07-01 20:19 - 2015-05-22 22:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll2015-07-01 20:19 - 2015-05-22 22:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll2015-07-01 20:19 - 2015-05-22 22:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2015-07-01 20:19 - 2015-05-22 22:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2015-07-01 20:19 - 2015-05-22 22:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2015-07-01 20:19 - 2015-05-22 22:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2015-07-01 20:19 - 2015-05-22 22:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2015-07-01 20:19 - 2015-05-22 22:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll2015-07-01 20:19 - 2015-05-22 22:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2015-07-01 20:19 - 2015-05-22 22:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2015-07-01 20:19 - 2015-05-22 22:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2015-07-01 20:19 - 2015-05-22 22:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll2015-07-01 20:19 - 2015-05-22 15:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2015-07-01 20:19 - 2015-05-22 15:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll2015-07-01 20:19 - 2015-05-22 15:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll2015-07-01 20:19 - 2015-05-22 15:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2015-07-01 20:19 - 2015-05-22 15:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2015-07-01 20:19 - 2015-05-22 15:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec2015-07-01 20:19 - 2015-05-22 15:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll2015-07-01 20:19 - 2015-05-22 14:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll2015-07-01 20:19 - 2015-05-22 14:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2015-07-01 20:19 - 2015-05-22 14:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2015-07-01 20:19 - 2015-05-22 14:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll2015-07-01 20:19 - 2015-05-22 14:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2015-07-01 20:19 - 2015-05-22 14:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2015-07-01 20:19 - 2015-05-22 14:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll2015-07-01 20:19 - 2015-05-22 14:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2015-07-01 20:19 - 2015-05-22 14:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe2015-07-01 20:19 - 2015-05-22 14:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe2015-07-01 20:19 - 2015-05-22 14:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2015-07-01 20:19 - 2015-05-22 14:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll2015-07-01 20:19 - 2015-05-22 14:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll2015-07-01 20:19 - 2015-05-22 14:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2015-07-01 20:19 - 2015-05-22 14:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2015-07-01 20:19 - 2015-05-22 14:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe2015-07-01 20:19 - 2015-05-22 14:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2015-07-01 20:19 - 2015-05-22 14:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2015-07-01 20:19 - 2015-05-22 14:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll2015-07-01 20:19 - 2015-05-22 13:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2015-07-01 20:19 - 2015-05-22 13:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2015-07-01 20:19 - 2015-05-22 13:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2015-07-01 20:19 - 2015-05-22 13:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll2015-07-01 20:19 - 2015-04-10 23:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys2015-07-01 20:18 - 2015-07-06 22:44 - 00000000 ____D C:\Program Files\Common Files\AV2015-07-01 19:15 - 2015-07-01 19:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes2015-07-01 19:14 - 2015-07-06 22:49 - 00000000 ____D C:\Program Files\iTunes2015-07-01 19:14 - 2015-07-06 22:44 - 00000000 ____D C:\Program Files\iPod2015-07-01 19:14 - 2015-07-06 22:44 - 00000000 ____D C:\Program Files (x86)\iTunes2015-07-01 19:03 - 2015-07-01 19:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime2015-07-01 19:02 - 2015-07-06 22:44 - 00000000 ____D C:\Program Files (x86)\QuickTime2015-07-01 13:40 - 2015-07-01 13:40 - 00000000 ____D C:\ProgramData\ESET2015-06-30 21:51 - 2015-06-30 21:51 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Roaming\AVG2015-06-30 21:31 - 2015-06-30 21:55 - 00000000 ____D C:\ProgramData\AVG2015-06-28 23:39 - 2015-06-28 23:39 - 00000000 _____ C:\autoexec.bat2015-06-28 16:44 - 2015-06-28 16:46 - 06565352 _____ (Piriform Ltd) C:\Users\Ms.MiaJay\Downloads\ccsetup507pro_exe2015-06-28 14:43 - 2015-06-28 14:43 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Local\Dropbox2015-06-28 14:43 - 2015-06-28 14:43 - 00000000 ____D C:\ProgramData\Dropbox2015-06-28 14:08 - 2015-07-01 22:14 - 00000000 ____D C:\Windows\erdnt2015-06-28 13:45 - 2015-06-28 13:45 - 00000000 ____D C:\New folder2015-06-26 09:49 - 2015-06-26 09:49 - 00293296 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys2015-06-17 00:23 - 2015-06-17 00:23 - 00094208 _____ (Apple Inc.) C:\Windows\SysWOW64\QuickTimeVR.qtx2015-06-17 00:23 - 2015-06-17 00:23 - 00069632 _____ (Apple Inc.) C:\Windows\SysWOW64\QuickTime.qts2015-06-16 15:55 - 2015-06-16 15:55 - 00259040 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx64.sys2015-06-10 16:38 - 2015-06-10 16:38 - 00226784 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-07-09 17:58 - 2012-02-06 14:33 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E6493B9E-D38A-4DE1-A443-F8E905F03BF4}2015-07-09 17:58 - 2011-04-23 00:12 - 00000000 ____D C:\ProgramData\MFAData2015-07-09 17:43 - 2010-06-16 02:42 - 01453859 _____ C:\Windows\WindowsUpdate.log2015-07-09 16:19 - 2014-07-02 00:49 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys2015-07-09 16:00 - 2010-06-16 02:05 - 00019664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-07-09 16:00 - 2010-06-16 02:05 - 00019664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-07-09 15:49 - 2009-07-14 01:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT2015-07-09 15:40 - 2013-08-28 01:11 - 00000440 _____ C:\Windows\SysWOW64\usergui.cfg2015-07-09 15:40 - 2012-09-21 14:46 - 00006865 _____ C:\Windows\SysWOW64\userawacs.cfg2015-07-09 15:39 - 2014-06-23 23:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG2015-07-07 17:59 - 2009-08-22 17:11 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Roaming\Adobe2015-07-07 17:59 - 2009-05-03 02:56 - 00000000 ____D C:\Program Files (x86)\Adobe2015-07-07 17:54 - 2009-10-11 13:47 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Local\Adobe2015-07-07 17:29 - 2009-05-03 02:57 - 00000000 ____D C:\Windows\SysWOW64\Macromed2015-07-07 01:36 - 2014-12-15 02:28 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk2015-07-06 23:14 - 2010-06-16 14:23 - 00126640 _____ C:\Users\Ms.MiaJay\AppData\Local\GDIPFONTCACHEV1.DAT2015-07-06 22:52 - 2010-06-16 02:06 - 00000000 ____D C:\Users\Ms.MiaJay2015-07-06 22:49 - 2015-04-06 13:42 - 00000000 ___SD C:\Windows\system32\GWX2015-07-06 22:49 - 2014-12-14 20:30 - 00000000 ____D C:\Program Files\CCleaner2015-07-06 22:49 - 2013-07-19 15:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 20132015-07-06 22:49 - 2012-10-10 13:44 - 00000000 ____D C:\Windows\system32\Macromed2015-07-06 22:49 - 2012-06-03 19:24 - 00000000 ____D C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE2015-07-06 22:49 - 2009-08-15 20:56 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Roaming\PowerCinema2015-07-06 22:49 - 2009-07-13 23:20 - 00000000 __RHD C:\Users\Public\Libraries2015-07-06 22:49 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\NDF2015-07-06 22:49 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\AppCompat2015-07-06 22:48 - 2009-07-14 01:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD2015-07-06 22:48 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\registration2015-07-06 22:46 - 2009-07-13 23:20 - 00000000 __RHD C:\Users\Default2015-07-06 22:44 - 2013-04-21 14:17 - 00000000 __RHD C:\MSOCache2015-07-06 22:44 - 2013-04-21 12:55 - 00000000 ____D C:\Program Files\Microsoft Office 152015-07-06 22:44 - 2009-06-22 21:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Office2015-07-02 20:04 - 2015-03-30 17:12 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Local\AdFender2015-07-01 23:10 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\PolicyDefinitions2015-07-01 22:47 - 2014-11-13 15:16 - 00000000 __SHD C:\Users\Ms.MiaJay\AppData\Local\EmieBrowserModeList2015-07-01 22:47 - 2014-04-17 13:26 - 00000000 __SHD C:\Users\Ms.MiaJay\AppData\Local\EmieUserList2015-07-01 22:47 - 2014-04-17 13:26 - 00000000 __SHD C:\Users\Ms.MiaJay\AppData\Local\EmieSiteList2015-07-01 22:14 - 2013-11-10 21:53 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox2015-07-01 22:14 - 2012-11-08 12:47 - 00000000 ____D C:\Windows\SysWOW64\cache2015-07-01 22:14 - 2009-10-11 18:09 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Roaming\Skype2015-07-01 22:14 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\servicing2015-07-01 22:14 - 2009-07-13 23:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared2015-07-01 22:14 - 2009-05-03 03:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon.com2015-07-01 22:14 - 2009-05-03 03:00 - 00000000 ____D C:\ProgramData\WildTangent2015-07-01 22:14 - 2009-05-03 02:48 - 00000000 ____D C:\ProgramData\Temp2015-07-01 22:11 - 2013-11-10 21:52 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox2015-07-01 22:08 - 2014-12-14 22:21 - 00000000 ____D C:\Program Files (x86)\WildTangent Games2015-07-01 22:08 - 2009-12-22 21:02 - 00000000 ____D C:\Program Files (x86)\AVG2015-07-01 21:39 - 2009-07-14 01:13 - 00783464 _____ C:\Windows\system32\PerfStringBackup.INI2015-07-01 21:30 - 2009-07-14 00:45 - 00474264 _____ C:\Windows\system32\FNTCACHE.DAT2015-07-01 21:26 - 2014-12-12 17:31 - 00000000 ____D C:\Windows\system32\appraiser2015-07-01 21:26 - 2014-05-06 03:03 - 00000000 ___SD C:\Windows\system32\CompatTel2015-07-01 21:09 - 2013-08-16 03:03 - 00000000 ____D C:\Windows\system32\MRT2015-07-01 20:56 - 2010-08-23 20:31 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe2015-07-01 19:14 - 2015-06-07 09:23 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A72015-07-01 19:14 - 2009-08-22 17:59 - 00000000 ____D C:\Program Files\Common Files\Apple2015-07-01 19:10 - 2009-11-10 18:38 - 00000000 ____D C:\ProgramData\Yahoo!2015-07-01 19:10 - 2009-11-10 18:38 - 00000000 ____D C:\Program Files (x86)\Yahoo!2015-07-01 19:04 - 2009-11-10 18:42 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Local\Yahoo2015-07-01 18:53 - 2009-10-11 18:09 - 00000000 ____D C:\ProgramData\Skype2015-07-01 18:51 - 2009-05-03 02:35 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information2015-07-01 18:51 - 2009-05-03 02:35 - 00000000 ____D C:\Program Files (x86)\TOSHIBA2015-07-01 18:41 - 2015-05-23 16:34 - 00001073 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2015-07-01 18:41 - 2014-07-02 00:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2015-06-30 23:09 - 2010-06-16 06:00 - 00000000 ____D C:\Windows\Panther2015-06-30 21:36 - 2015-05-24 14:29 - 00000000 ____D C:\Users\Ms.MiaJay\AppData\Local\Avg2015-06-18 08:41 - 2014-07-02 00:49 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys2015-06-18 08:41 - 2014-07-02 00:49 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys2015-06-18 08:41 - 2009-12-22 23:04 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys==================== Files in the root of some directories =======2015-07-02 06:19 - 2015-07-02 06:19 - 0190692 _____ () C:\Users\Ms.MiaJay\AppData\Local\ars.cache2015-07-02 06:19 - 2015-07-02 06:19 - 0281320 _____ () C:\Users\Ms.MiaJay\AppData\Local\census.cache2011-08-08 20:30 - 2012-04-28 11:27 - 0006656 _____ () C:\Users\Ms.MiaJay\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini2015-07-02 01:44 - 2015-07-02 01:44 - 0000036 _____ () C:\Users\Ms.MiaJay\AppData\Local\housecall.guid.cache2011-06-05 03:02 - 2011-06-05 03:02 - 0001328 ___SH () C:\Users\Ms.MiaJay\AppData\Local\k8i3q71q51h81vhjxx5wo4b17xcuc12s0hgfgk3p8i8c82015-07-02 02:06 - 2015-07-02 12:40 - 0000010 _____ () C:\Users\Ms.MiaJay\AppData\Local\sponge.last.runtime.cache2010-06-16 14:48 - 2010-06-16 14:48 - 0000056 ____H () C:\ProgramData\ezsidmv.dat2011-06-05 03:02 - 2011-06-05 03:02 - 0001328 ___SH () C:\ProgramData\k8i3q71q51h81vhjxx5wo4b17xcuc12s0hgfgk3p8i8c8Some files in TEMP:====================C:\Users\Ms.MiaJay\AppData\Local\Temp\dllnt_dump.dllC:\Users\Ms.MiaJay\AppData\Local\Temp\HitmanPro.exe==================== Bamital & volsnap Check =================(There is no automatic fix for files that do not pass verification.)C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\SysWOW64\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2015-06-13 22:21==================== End of log ============================ Link to post Share on other sites More sharing options...
dejam Posted July 9, 2015 Author ID:975269 Share Posted July 9, 2015 Addition Log Additional scan result of Farbar Recovery Scan Tool (x64) Version:09-07-2015Ran by Ms.MiaJay at 2015-07-09 18:08:28Running from C:\Users\Ms.MiaJay\DesktopBoot Mode: Normal============================================================================== Accounts: =============================Administrator (S-1-5-21-1571504606-35610335-4001555038-500 - Administrator - Disabled)Guest (S-1-5-21-1571504606-35610335-4001555038-501 - Limited - Disabled)HomeGroupUser$ (S-1-5-21-1571504606-35610335-4001555038-1003 - Limited - Enabled)Ms.MiaJay (S-1-5-21-1571504606-35610335-4001555038-1000 - Administrator - Enabled) => C:\Users\Ms.MiaJay==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV: AVG Internet Security 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: AVG Internet Security 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}FW: AVG Internet Security 2015 (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}==================== Installed Programs ======================(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)AdFender (HKLM-x32\...\AdFender) (Version: 1.83 - AdFender, Inc.)Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.144 - Adobe Systems Incorporated)Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.203 - Adobe Systems Incorporated)Adobe Reader XI (11.0.11) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)Amazon Links (HKLM-x32\...\{224821ED-CADA-4A8A-AC8D-3734CC0F0931}) (Version: 1.0 - TOSHIBA Corporation)Apple Application Support (32-bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.13 - Audible, Inc.)AudibleManager (HKLM-x32\...\AudibleManager) (Version: 2003513456.48.56.34082026 - Audible, Inc.)AVG 2015 (HKLM\...\AVG) (Version: 2015.0.6081 - AVG Technologies)AVG 2015 (Version: 15.0.4392 - AVG Technologies) HiddenAVG 2015 (Version: 15.0.6081 - AVG Technologies) HiddenBejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) HiddenBig Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.3.0.2 - )Blue Tear (x32 Version: 3.0.2.59 - WildTangent) HiddenBonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)Canon IJ Network Scan Utility (HKLM-x32\...\Canon_IJ_Network_Scan_UTILITY) (Version: - )Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: - )Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version: - )Canon MP620 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP620_series) (Version: - )Canon MP620 series User Registration (HKLM-x32\...\Canon MP620 series User Registration) (Version: - )Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - )Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)Centra Client (HKLM-x32\...\CentraClient) (Version: - )CyberLink PowerCinema for TOSHIBA (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.2616a - CyberLink Corp.)Direct DiscRecorder (x32 Version: 1.00.0000 - Corel Corporation) HiddenDolby Control Center (HKLM\...\{20387B45-18A4-4D48-ABD9-A23D2CBE42B3}) (Version: 2.2.1 - Dolby)Dropbox (HKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)DVD MovieFactory for TOSHIBA (HKLM-x32\...\InstallShield_{50F68032-B5B7-4513-9116-C978DBD8F27A}) (Version: 7.0.0 - Corel Corporation)DVD MovieFactory for TOSHIBA (x32 Version: 7.0.0 - Corel Corporation) Hiddenffdshow [rev 2527] [2008-12-19] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )iCloud (HKLM\...\{709A2D23-C25E-47B5-9268-CB6FEE648504}) (Version: 4.1.1.53 - Apple Inc.)Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation)iTunes (HKLM\...\{4046F74A-28F8-48C6-A5D3-2AFC472574C1}) (Version: 12.2.0.145 - Apple Inc.)Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)Jewel Quest Solitaire 2 (x32 Version: 3.0.2.59 - WildTangent) HiddenLightScribe 1.4.124.1 (x32 Version: 1.4.124.1 - http://www.lightscribe.com) HiddenLSI V92 MOH Application (HKLM\...\LTMOH) (Version: - LSI Corporation)Malwarebytes Anti-Exploit version 1.07.1.1011 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.07.1.1011 - Malwarebytes)Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 15.0.4727.1003 - Microsoft Corporation)Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)Microsoft SkyDrive (HKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\SkyDriveSetup.exe) (Version: 17.0.2003.1112 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)MSXML 4.0 SP2 (KB941833) (HKLM-x32\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4719.1002 - Microsoft Corporation) HiddenOffice 15 Click-to-Run Licensing Component (Version: 15.0.4727.1003 - Microsoft Corporation) HiddenOffice 15 Click-to-Run Localization Component (x32 Version: 15.0.4727.1003 - Microsoft Corporation) HiddenooVoo (HKLM-x32\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 3.6.5001 - ooVoo LLC.)Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.8 - Google, Inc.)PlayReady PC runtime (HKLM\...\{704ABF63-B0B1-446B-9D92-C5D06AFCE7B6}) (Version: 1 - Microsoft Corporation)QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)Realtek 8136 8168 8169 Ethernet Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0004 - Realtek)RICOH R5U230 Media Driver ver.2.02.02.01 (HKLM-x32\...\{022CBB38-CEF0-42BA-906A-A49BEFAE0BEE}) (Version: 2.02.02.01 - RICOH)RogueKiller version 10 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 10 - Adlice Software)swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) HiddenSynaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 12.2.10.0 - Synaptics Incorporated)TOSHIBA Agreement Notification Utility (HKLM-x32\...\InstallShield_{83892653-9EB8-4192-803E-D987A85CDD23}) (Version: 1.0.11.0 - TOSHIBA Corporation)Toshiba Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.0.4 - Toshiba)TOSHIBA Assist (HKLM-x32\...\{1B87C40B-A60B-4EF3-9A68-706CF4B69978}) (Version: 3.00.08 - TOSHIBA)TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.0.1.3 for x64 - TOSHIBA Corporation)TOSHIBA DVD PLAYER (HKLM-x32\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 3.00.1.04-A - TOSHIBA Corporation)TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.0.2.64 - TOSHIBA Corporation)TOSHIBA Extended Tiles for Windows Mobility Center (HKLM-x32\...\InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}) (Version: - )TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.0.4.64 - TOSHIBA Corporation)TOSHIBA Hardware Setup (HKLM-x32\...\{D0387727-C89D-4774-B643-B9333EAA09DE}) (Version: 2.00.03 - TOSHIBA Corporation)TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.0.64.0 - TOSHIBA Corporation)TOSHIBA Internal Modem Region Select Utility (HKLM-x32\...\InstallShield_{89F7D66C-777D-473B-AA11-319C0F190EAC}) (Version: - )TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.3.1.64 - TOSHIBA Corporation)Toshiba Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.001.0000 - Toshiba)TOSHIBA Recovery Disc Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.0.0.2 for x64 - TOSHIBA Corporation)Toshiba Registration (HKLM-x32\...\{C53D16CC-E56F-47B8-906E-70AAF8EABB4F}) (Version: 1.00.0000 - Datalode Inc.)Toshiba Resources Page (HKLM-x32\...\{21526716-DFD8-4B90-86D9-EF9F47057B3E}) (Version: 1.0.2.1 - TOSHIBA Corporation)TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.9 - TOSHIBA)TOSHIBA Software Modem (HKLM\...\TOSHIBA Software Modem) (Version: 2.2.97 - LSI Corporation)TOSHIBA Supervisor Password (HKLM-x32\...\{A208044D-A88B-4ACF-AE95-E4F213E6EDC0}) (Version: 2.00.02 - TOSHIBA Corporation)TOSHIBA Upgrade Assistant (HKLM-x32\...\{41773726-92D0-4265-A0F8-DD980CA1AEC4}) (Version: 1.1.9 - TOSHIBA Corporation)TOSHIBA USB Sleep and Charge Utility (HKLM-x32\...\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}) (Version: 1.2.1.0 - TOSHIBA Corporation)TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.2.28.64 - TOSHIBA Corporation)TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.0.1.8 - TOSHIBA Corporation)Update Installer for WildTangent Games App (x32 Version: - WildTangent) HiddenVerizon V CAST Media Manager (HKLM-x32\...\Verizon V CAST Media Manager) (Version: - Verizon Wireless)Visual C++ 8.0 Runtime Setup Package (x64) (HKLM-x32\...\{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}) (Version: 9.0.0.623 - AVG Technologies CZ, s.r.o.)Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)WildTangent Games (HKLM-x32\...\WildTangent toshiba Master Uninstall) (Version: 1.0.0.66 - WildTangent)WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)WildTangent Games App (Toshiba Games) (x32 Version: 4.0.11.14 - WildTangent) HiddenWindows 7 Upgrade Advisor (HKLM-x32\...\{AB05F2C8-F608-403b-95E1-FD8ADFACD31E}) (Version: 2.0.5000.0 - Microsoft Corporation)Windows Driver Package - TOSHIBA (FwLnk) System (11/19/2006 1.0.0.3) (HKLM\...\D27D7E9318CFA89EDDE8D448B507A8EB725F5A52) (Version: 11/19/2006 1.0.0.3 - TOSHIBA)WModem Driver Installer (HKLM-x32\...\HTC_WModemDriver) (Version: 2.0.6.7 - HTC)Wondershare Dr.Fone(Build 1.0.2.5) (HKLM-x32\...\{BE467978-8B6E-43D4-8E12-1ED9AFF303F7}_is1) (Version: 1.0.2.5 - Wondershare Software Co.,Ltd.)==================== Custom CLSID (Whitelisted): ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\amd64\FileSyncApi64.dll (Microsoft Corporation)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-1571504606-35610335-4001555038-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)==================== Restore Points =========================01-07-2015 18:51:56 Removed Skype™ 7.001-07-2015 18:53:16 Removed Skype Toolbars01-07-2015 20:52:22 Windows Update01-07-2015 21:48:14 Windows Update01-07-2015 22:32:49 Installed Microsoft Fix it 5012301-07-2015 23:21:25 Windows Update01-07-2015 23:43:53 Windows Update07-07-2015 03:00:17 Windows Update07-07-2015 03:17:58 Windows Update07-07-2015 03:22:10 Windows Update07-07-2015 03:28:17 Windows Update07-07-2015 15:27:56 Windows Update07-07-2015 16:42:13 Windows Update07-07-2015 16:47:55 Windows Update07-07-2015 17:13:35 Windows Update08-07-2015 22:27:44 Checkpoint by HitmanPro08-07-2015 22:53:55 Checkpoint by HitmanPro==================== Hosts content: ===============================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2015-07-07 19:24 - 2015-07-07 19:24 - 00000768 RASHOT C:\Windows\system32\Drivers\etc\hosts127.0.0.1 localhost==================== Scheduled Tasks (Whitelisted) =============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)Task: {2BD71E8C-5E75-484F-B4A2-95F52730DDD7} - System32\Tasks\{23BB2A7A-EB31-4F6A-8C82-3BF6F926EAD5} => pcalua.exe -a "C:\Program Files (x86)\ShoppingReport2\Uninst.exe"Task: {38D1C0F3-AA03-44BA-9E95-3A98A76D5CCF} - System32\Tasks\{AF0CB47D-2DA9-47DD-96B0-6E58C18DDF69} => C:\Program Files (x86)\Skype\Phone\Skype.exeTask: {3FA19316-B243-43B9-ADFD-7A26B6BE7DFA} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)Task: {472AEBAC-9B03-4F85-A8ED-75FA296F93FA} - System32\Tasks\{47541460-276F-4153-BBA4-B9CDAE1F616E} => pcalua.exe -a "C:\Users\Ms.MiaJay\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YKBZGMCI\yahoo_toolbar_install_helper[1].exe" -d C:\Users\Ms.MiaJay\DesktopTask: {4D3CFF8B-FE5D-4058-A73E-7FD7660DBAB0} - \Scheduled Update for Ask Toolbar No Task File <==== ATTENTIONTask: {52CF8C49-229B-4BF5-BAC1-04FD8247B36C} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1571504606-35610335-4001555038-1000Task: {549D2690-23E2-40FC-B190-D37B9E3CFE8F} - System32\Tasks\{1881C268-E1B3-4894-A37F-CAA129682097} => pcalua.exe -a "C:\Users\Ms.MiaJay\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BK3RVEDV\ActiveSetupN[1].exe" -d C:\Users\Ms.MiaJay\DesktopTask: {5568F33C-3A1D-474F-85D8-3B798DBF8F8C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-04-14] (Microsoft Corporation)Task: {5F1B18D2-3EE0-4CA8-9A7A-B89E8EC7A06D} - System32\Tasks\{AA3F40CA-D60B-4695-B8BC-5B8158EE23ED} => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [2015-04-26] (Apple Inc.)Task: {712C6861-2B14-4E72-92BA-22B6921FE2B7} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbsTask: {8344FBDF-276B-473A-B90D-DB421CB1C28E} - System32\Tasks\0 => Iexplore.exe <==== ATTENTIONTask: {B1007548-C9DA-44E5-BB94-D5256FDA78DD} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-05-28] (Microsoft Corporation)Task: {DFB37689-FA36-4A34-AD5C-9CE4CB15C77B} - System32\Tasks\{54473A38-1278-42C7-AB63-F0E21C4F51B4} => pcalua.exe -a "C:\Users\Ms.MiaJay\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YKBZGMCI\XvidSetup[1].exe" -d C:\Users\Ms.MiaJay\DesktopTask: {E3809A93-F4A3-4515-A875-8F087C73676F} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-04-14] (Microsoft Corporation)Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbsTask: {F3B1B7BE-D5C7-48F2-8676-6C36F54EB946} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd)Task: {FF204BCB-87C6-413C-933C-0BC3E8A4C24F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-08] (Adobe Systems Incorporated)Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe==================== Loaded Modules (Whitelisted) ==============2015-02-13 05:20 - 2015-02-13 05:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll2015-03-13 05:34 - 2015-01-27 11:29 - 08898720 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll2014-03-30 03:26 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll2009-02-10 15:32 - 2009-02-10 15:32 - 00076288 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll2009-07-16 15:27 - 2009-07-16 15:27 - 07244600 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll2009-07-16 15:27 - 2009-07-16 15:27 - 00051512 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll2009-05-03 02:35 - 2007-04-23 12:09 - 00016896 _____ () C:\Program Files\TOSHIBA\Toshiba Assist\NotifyX.dll2009-03-12 19:08 - 2009-03-12 19:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll2007-04-25 00:47 - 2007-04-25 00:47 - 00012288 _____ () C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll2015-05-04 15:25 - 2015-05-04 15:25 - 00055576 _____ () C:\Program Files\CCleaner\branding.dll2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll2009-02-16 20:09 - 2009-02-16 20:09 - 00868352 _____ () C:\Program Files (x86)\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMediaLibrary.dll2009-02-16 20:09 - 2009-02-16 20:09 - 00007680 _____ () C:\Program Files (x86)\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMLSvcPS.dll==================== Alternate Data Streams (Whitelisted) =========(If an entry is included in the fixlist, only the ADS will be removed.)AlternateDataStreams: C:\ProgramData\Temp:1416AAA6AlternateDataStreams: C:\ProgramData\Temp:2CB9631F==================== Safe Mode (Whitelisted) ===================(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)==================== EXE Association (Whitelisted) ===============(If an entry is included in the fixlist, the registry item will be restored to default or removed.)==================== Internet Explorer trusted/restricted ===============(If an entry is included in the fixlist, it will be removed from the registry.)IE trusted site: HKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\taxslayer.com -> hxxps://www.taxslayer.comIE trusted site: HKU\S-1-5-21-1571504606-35610335-4001555038-1000\...\yahoo.com -> hxxps://www.yahoo.com==================== Other Areas ============================(Currently there is no automatic fix for this section.)HKU\S-1-5-21-1571504606-35610335-4001555038-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ms.MiaJay\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpgDNS Servers: 192.168.1.1==================== MSCONFIG/TASK MANAGER disabled items ==(Currently there is no automatic fix for this section.)MSCONFIG\startupfolder: C:^Users^Ms.MiaJay^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.StartupMSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"MSCONFIG\startupreg: dedrt => "C:\Windows\System32\rundll32.exe" "C:\Users\Ms.MiaJay\AppData\Roaming\dedrt.dll",ReleaseThreadMSCONFIG\startupreg: HLBackupScheduler => C:\Program Files\Verizon V CAST Media Manager\V CAST Backup Scheduler.exeMSCONFIG\startupreg: Messenger (Yahoo!) => "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" -quietMSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottimeMSCONFIG\startupreg: ROC_JAN2013_TB => "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TBMSCONFIG\startupreg: Search Protection => C:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exeMSCONFIG\startupreg: SmartFaceVWatcher => %ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exeMSCONFIG\startupreg: uansy => "C:\Windows\System32\rundll32.exe" "C:\Users\Ms.MiaJay\AppData\Roaming\uansy.dll",_ListMSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Secure Search\vprot.exe"MSCONFIG\startupreg: werext => rundll32.exe "C:\Users\Ms.MiaJay\AppData\Roaming\werext.dll",OpenWFileStreamWithFlagsMSCONFIG\startupreg: YSearchProtection => "C:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exe"==================== FirewallRules (Whitelisted) ===============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [{36F76534-36A8-402D-8EB0-693FD183EB27}] => (Allow) LPort=37675FirewallRules: [{A589C474-4211-4880-B1E6-0B73B026284D}] => (Allow) LPort=37674FirewallRules: [{2609A3B6-A33E-4DE2-B984-4A791FD6A4EE}] => (Allow) LPort=37674FirewallRules: [{796C5D7F-6A88-4EF2-84F8-2CF0DFA8A74A}] => (Allow) LPort=443FirewallRules: [{06B35396-4788-44DB-944D-B6D45237F800}] => (Allow) LPort=443FirewallRules: [uDP Query User{A76C587B-8590-4DE7-A4F9-CEEBB48FB22F}C:\program files (x86)\oovoo\oovoo.exe] => (Block) C:\program files (x86)\oovoo\oovoo.exeFirewallRules: [TCP Query User{0C5D1307-6D7E-4DBB-A627-1FC75943DED3}C:\program files (x86)\oovoo\oovoo.exe] => (Block) C:\program files (x86)\oovoo\oovoo.exeFirewallRules: [uDP Query User{E6474E73-8936-406D-B181-539663E27559}C:\program files (x86)\internet explorer\iexplore.exe] => (Block) C:\program files (x86)\internet explorer\iexplore.exeFirewallRules: [TCP Query User{6C9EFC0D-D835-47C1-AE4B-58AD015AA4DE}C:\program files (x86)\internet explorer\iexplore.exe] => (Block) C:\program files (x86)\internet explorer\iexplore.exeFirewallRules: [{EFE7CF45-1DAA-444A-9D68-63305F72B7B9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerCinema for TOSHIBA\PowerCinema.exeFirewallRules: [{04C6AE3A-6196-4834-A9C7-885DDD093CAF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exeFirewallRules: [{3BF1C62F-4B56-4660-9487-01F961A1F1BC}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exeFirewallRules: [{70BAE18B-088E-4FAA-82A6-AC0FEF03F6E6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exeFirewallRules: [{741D431F-182F-4530-AD59-338A050CE678}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exeFirewallRules: [TCP Query User{7C1A9A22-AB33-454F-BE77-875902D2D376}C:\program files (x86)\oovoo\oovoo.exe] => (Block) C:\program files (x86)\oovoo\oovoo.exeFirewallRules: [uDP Query User{83B99C3E-CE02-4FA9-AD1C-EB5CC25078F7}C:\program files (x86)\oovoo\oovoo.exe] => (Block) C:\program files (x86)\oovoo\oovoo.exeFirewallRules: [TCP Query User{892C48E2-B758-4A2F-90FE-767EDB875EED}C:\program files (x86)\internet explorer\iexplore.exe] => (Block) C:\program files (x86)\internet explorer\iexplore.exeFirewallRules: [uDP Query User{9787A603-A54B-45AD-B5F5-F1AF54339A5C}C:\program files (x86)\internet explorer\iexplore.exe] => (Block) C:\program files (x86)\internet explorer\iexplore.exeFirewallRules: [{2CC3E67B-0EE1-4535-8053-3CE4F412F2C7}] => (Allow) C:\Users\Ms.MiaJay\AppData\Local\Microsoft\SkyDrive\SkyDrive.exeFirewallRules: [{BEAEB0C3-D537-4CD1-B802-0529198AF375}] => (Allow) C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\Dropbox.exeFirewallRules: [{D43FDD65-69F8-4FC1-8044-9E45A55BDBB7}] => (Allow) C:\Users\Ms.MiaJay\AppData\Roaming\Dropbox\bin\Dropbox.exeFirewallRules: [TCP Query User{BDCD08ED-303D-4E4B-8FEF-A9EB29745BEA}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exeFirewallRules: [uDP Query User{D354B795-E0AC-4B39-8F3A-6759EEFA87DA}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exeFirewallRules: [TCP Query User{DCDA87C5-EFE9-4934-83F6-BDE164C1A1DA}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exeFirewallRules: [uDP Query User{54C8F104-E175-4DA8-A943-D68060BE432C}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exeFirewallRules: [{B8A4D068-5621-41D4-AD82-1798619E9B0B}] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exeFirewallRules: [{F6BA4C74-F649-472E-BC0A-DA1E0AA7ABE9}] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exeFirewallRules: [{58F18545-6DE7-4DD1-8BD6-5825953BA026}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exeFirewallRules: [TCP Query User{FA6774BA-A245-4008-8F3C-1A68D0B2C9E8}C:\users\ms.miajay\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\ms.miajay\appdata\roaming\dropbox\bin\dropbox.exeFirewallRules: [uDP Query User{6B3D2DFA-3484-4C47-A02A-809FF496898E}C:\users\ms.miajay\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\ms.miajay\appdata\roaming\dropbox\bin\dropbox.exeFirewallRules: [{5B138A8A-B02F-4B1D-92B5-3E706799C96C}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exeFirewallRules: [{C40041A1-A7A8-42C6-AD31-BC1E32D492A6}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exeFirewallRules: [{CB4BD8B4-1E99-4EAB-A346-CEAADA958679}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exeFirewallRules: [{AD740A14-0D68-44EF-8747-345EBC843D54}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exeFirewallRules: [{A3A42A1E-41D9-49F4-8175-21802D9A151D}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exeFirewallRules: [{667B9563-6684-4980-9702-B625BD635FA3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exeFirewallRules: [{658475D2-9C50-41B8-A45F-76CD2FAADA1D}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exeFirewallRules: [{84F25B43-530F-4A7C-8DBB-20E607396920}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exeFirewallRules: [{D1FE989A-C4AD-4181-AEFE-2B3114230804}] => (Allow) C:\Program Files\iTunes\iTunes.exeFirewallRules: [{A208EC03-6417-402E-BF30-903266878BD1}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exeFirewallRules: [{3E42A32B-1F6A-4416-8AB1-58F907F8A993}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exeFirewallRules: [{8C36D7EB-8A82-4580-AF07-488D960F48C2}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exeFirewallRules: [{DF082FEA-90ED-4B1D-8D6E-036145AA387F}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exeFirewallRules: [{18391FD7-89A5-4637-9A23-5EFC9DE8F916}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exeFirewallRules: [{E6D2FD6B-4158-48DE-87C9-14A7492A70F7}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe==================== Faulty Device Manager Devices ================================= Event log errors: =========================Application errors:==================Error: (07/09/2015 03:51:23 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (07/09/2015 03:51:07 PM) (Source: CVHSVC) (EventID: 100) (User: )Description: Information only.Error: Cannot connect to SoftGrid Service Type: 95::SoftGridConfigurationFailure.Error: (07/09/2015 03:48:03 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: svchost.exe_DiagTrack, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1Faulting module name: ntdll.dll, version: 6.1.7601.18869, time stamp: 0x556366f2Exception code: 0xc000000dFault offset: 0x000000000006ec12Faulting process id: 0x83cFaulting application start time: 0xsvchost.exe_DiagTrack0Faulting application path: svchost.exe_DiagTrack1Faulting module path: svchost.exe_DiagTrack2Report Id: svchost.exe_DiagTrack3Error: (07/09/2015 03:32:41 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (07/09/2015 03:32:30 PM) (Source: CVHSVC) (EventID: 100) (User: )Description: Information only.Error: Cannot connect to SoftGrid Service Type: 95::SoftGridConfigurationFailure.Error: (07/09/2015 02:19:39 AM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (07/09/2015 02:17:00 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: svchost.exe_DiagTrack, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1Faulting module name: ntdll.dll, version: 6.1.7601.18869, time stamp: 0x556366f2Exception code: 0xc000000dFault offset: 0x000000000006ec12Faulting process id: 0x888Faulting application start time: 0xsvchost.exe_DiagTrack0Faulting application path: svchost.exe_DiagTrack1Faulting module path: svchost.exe_DiagTrack2Report Id: svchost.exe_DiagTrack3Error: (07/09/2015 00:53:22 AM) (Source: Windows Search Service) (EventID: 7010) (User: )Description: The index cannot be initialized.Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)Error: (07/09/2015 00:53:22 AM) (Source: Windows Search Service) (EventID: 3058) (User: )Description: The application cannot be initialized.Context: Windows ApplicationDetails: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)Error: (07/09/2015 00:53:22 AM) (Source: Windows Search Service) (EventID: 3028) (User: )Description: The gatherer object cannot be initialized.Context: Windows Application, SystemIndex CatalogDetails: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)System errors:=============Error: (07/09/2015 05:32:13 PM) (Source: bowser) (EventID: 8003) (User: )Description: The master browser has received a server announcement from the computer OWNER-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{A681811C-98A7-41ED-8420-335A519FDDB9}.The master browser is stopping or an election is being forced.Error: (07/09/2015 05:20:52 PM) (Source: BROWSER) (EventID: 8032) (User: )Description: The browser service has failed to retrieve the backup list too many times on transport \Device\NetBT_Tcpip_{A681811C-98A7-41ED-8420-335A519FDDB9}.The backup browser is stopping.Error: (07/09/2015 04:31:22 PM) (Source: bowser) (EventID: 8003) (User: )Description: The master browser has received a server announcement from the computer OWNER-PCthat believes that it is the master browser for the domain on transport NetBT_Tcpip_{A681811C-98A7-41ED-8420-335A519FDDB9}.The master browser is stopping or an election is being forced.Error: (07/09/2015 03:52:32 PM) (Source: Service Control Manager) (EventID: 7022) (User: )Description: The Client Virtualization Handler service hung on starting.Error: (07/09/2015 03:48:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: The Diagnostics Tracking Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.Error: (07/09/2015 03:39:59 PM) (Source: Service Control Manager) (EventID: 7024) (User: )Description: The AVGIDSAgent service terminated with service-specific error %%-536753635.Error: (07/09/2015 03:33:58 PM) (Source: Service Control Manager) (EventID: 7022) (User: )Description: The Client Virtualization Handler service hung on starting.Error: (07/09/2015 03:27:22 PM) (Source: Service Control Manager) (EventID: 7001) (User: )Description: The Computer Browser service depends on the Server service which failed to start because of the following error:%%1068Error: (07/09/2015 03:27:22 PM) (Source: Service Control Manager) (EventID: 7001) (User: )Description: The Computer Browser service depends on the Server service which failed to start because of the following error:%%1068Error: (07/09/2015 03:27:22 PM) (Source: Service Control Manager) (EventID: 7001) (User: )Description: The Computer Browser service depends on the Server service which failed to start because of the following error:%%1068Microsoft Office:=========================Error: (07/09/2015 03:51:23 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (07/09/2015 03:51:07 PM) (Source: CVHSVC) (EventID: 100) (User: )Description: Error: Cannot connect to SoftGrid Service Type: 95::SoftGridConfigurationFailure.Error: (07/09/2015 03:48:03 PM) (Source: Application Error) (EventID: 1000) (User: )Description: svchost.exe_DiagTrack6.1.7600.163854a5bc3c1ntdll.dll6.1.7601.18869556366f2c000000d000000000006ec1283c01d0ba7dc4980ab2C:\Windows\System32\svchost.exeC:\Windows\SYSTEM32\ntdll.dll68e2c037-2673-11e5-9cf3-001e33ce643eError: (07/09/2015 03:32:41 PM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (07/09/2015 03:32:30 PM) (Source: CVHSVC) (EventID: 100) (User: )Description: Error: Cannot connect to SoftGrid Service Type: 95::SoftGridConfigurationFailure.Error: (07/09/2015 02:19:39 AM) (Source: WinMgmt) (EventID: 10) (User: )Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003Error: (07/09/2015 02:17:00 AM) (Source: Application Error) (EventID: 1000) (User: )Description: svchost.exe_DiagTrack6.1.7600.163854a5bc3c1ntdll.dll6.1.7601.18869556366f2c000000d000000000006ec1288801d0ba02bea776d3C:\Windows\System32\svchost.exeC:\Windows\SYSTEM32\ntdll.dll1b8a49e8-2602-11e5-8c9f-001e33ce643eError: (07/09/2015 00:53:22 AM) (Source: Windows Search Service) (EventID: 7010) (User: )Description:Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)Error: (07/09/2015 00:53:22 AM) (Source: Windows Search Service) (EventID: 3058) (User: )Description: Context: Windows ApplicationDetails: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)Error: (07/09/2015 00:53:22 AM) (Source: Windows Search Service) (EventID: 3028) (User: )Description: Context: Windows Application, SystemIndex CatalogDetails: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)CodeIntegrity Errors:=================================== Date: 2015-06-30 22:00:56.970 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-06-30 22:00:56.704 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-06-30 22:00:56.533 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-06-30 22:00:56.408 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-06-30 22:00:55.971 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-06-30 22:00:55.862 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-06-30 22:00:55.425 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-06-30 22:00:55.300 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-06-28 14:26:23.047 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-06-28 14:26:22.902 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.==================== Memory info ===========================Processor: Intel® Core2 Duo CPU T6500 @ 2.10GHzPercentage of memory in use: 71%Total physical RAM: 3963.98 MBAvailable physical RAM: 1120.62 MBTotal Virtual: 7926.18 MBAvailable Virtual: 5538.03 MB==================== Drives ================================Drive c: (TI100343V0F) (Fixed) (Total:286.38 GB) (Free:106.06 GB) NTFS ==>[Drive with boot components (obtained from BCD)]==================== MBR & Partition Table ==========================================================================Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: CC4608EA)Partition 1: (Not Active) - (Size=1.5 GB) - (Type=27)Partition 2: (Active) - (Size=286.4 GB) - (Type=07 NTFS)Partition 3: (Not Active) - (Size=10.2 GB) - (Type=17)==================== End of log ============================ Link to post Share on other sites More sharing options...
dejam Posted July 11, 2015 Author ID:975539 Share Posted July 11, 2015 Am I still waiting for a reply or are you waiting for something from me? I'm seeing new posts with replies and don't know if I did something wrong. Link to post Share on other sites More sharing options...
dejam Posted July 12, 2015 Author ID:975652 Share Posted July 12, 2015 Good Morning Techs As I couldn't wait any longer for a reply, I took a gamble and it paid off. Found some other online historical traffic and tried some of their remedies and "by George I think I've got it!" Had to made some changes to the registry. I was reluctant as I'm not all that comfortable doing that and almost nothing was in the place the path reflected (HKEY...Machine...) but I eventually found what the scans reflected as the culprit, made the appropriate changes, rebooted, scanned with all the previous scanners and that booger is gone! So I guess this topic can be closed. "What good is a gift if it's not used." Thank you for using yours and helping us laypersons out here. God Bless. Link to post Share on other sites More sharing options...
Maniac Posted July 12, 2015 ID:975687 Share Posted July 12, 2015 Sorry for delay! Thanks for letting me know! Some malware prevention tips: https://forums.malwarebytes.org/index.php?/topic/81386-so-how-did-i-get-infected-in-the-first-place/ Safe surfing! Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 31, 2015 Root Admin ID:980415 Share Posted July 31, 2015 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts