Chgoenforcer Posted November 2, 2015 ID:999216 Share Posted November 2, 2015 I have scanned my system and cannot seem to find the cause, I am getting the pop ups saying that there are blocked, here are my logs. Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 11/1/2015Scan Time: 10:15 PMLogfile: malware log 1115.txtAdministrator: YesVersion: 2.2.0.1024Malware Database: v2015.11.01.05Rootkit Database: v2015.10.28.01License: TrialMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: Chuck RogersScan Type: Threat ScanResult: CompletedObjects Scanned: 332248Time Elapsed: 31 min, 29 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 0(No malicious items detected)Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 0(No malicious items detected)Files: 2PUP.Optional.OpenCandy, C:\Users\Chuck Rogers\AppData\Local\Temp\HYD6529.tmp.1446437188\HTA\install.1446437188.zip, Quarantined, [5386ed8b444748ee2be178767f8258a8],PUP.Optional.OpenCandy, C:\Users\Chuck Rogers\AppData\Local\Temp\HYD6529.tmp.1446437188\HTA\3rdparty\OCSetupHlp.dll, Quarantined, [23b65f198308da5cb4e1a8abd82c56aa],Physical Sectors: 0(No malicious items detected)(end) Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015Ran by Chuck Rogers (administrator) on CHUCKROGERS-PC (01-11-2015 23:02:36)Running from C:\Users\Chuck Rogers\DesktopLoaded Profiles: Chuck Rogers (Available Profiles: Chuck Rogers)Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)Internet Explorer Version 11 (Default browser: IE)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(AMD) C:\windows\System32\atiesrxx.exe(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe(AMD) C:\windows\System32\atieclxx.exe(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe(TOSHIBA Corporation) C:\windows\System32\TODDSrv.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE(Seiko Epson Corporation) C:\windows\System32\escsvc64.exe(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE(Microsoft Corporation) C:\windows\System32\GWX\GWX.exe(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE(Microsoft Corporation) C:\windows\System32\rundll32.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe==================== Registry (Whitelisted) ===========================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10134560 2010-03-22] (Realtek Semiconductor)HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [896032 2010-03-22] (Realtek Semiconductor)HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [505696 2009-11-06] (TOSHIBA Corporation)HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)HKLM\...\Run: [smoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [508216 2009-07-28] (TOSHIBA Corporation)HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [913720 2010-03-03] (TOSHIBA Corporation)HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1489760 2010-04-06] (TOSHIBA Corporation)HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [705368 2010-02-23] (TOSHIBA Corporation)HKLM\...\Run: [smartFaceVWatcher] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-10-19] (TOSHIBA Corporation)HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [595816 2010-03-19] (TOSHIBA Corporation)HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [35672 2010-03-03] (TOSHIBA Corporation)HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-15] (Advanced Micro Devices, Inc.)HKLM-x32\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2010-03-04] (TOSHIBA Electronics, Inc.)HKLM-x32\...\Run: [KeNotify] => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2009-12-25] (TOSHIBA CORPORATION)HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1295736 2011-02-11] (TOSHIBA Corporation)HKLM-x32\...\Run: [TWebCamera] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2454840 2010-02-24] (TOSHIBA CORPORATION.)HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-09-24] (AVAST Software)HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058400 2012-01-26] (SEIKO EPSON CORPORATION)HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exeHKU\S-1-5-21-1350101312-2791638396-2936791211-1000\...\Run: [958336810] => regsvr32.exe "C:\Users\Chuck Rogers\AppData\Roaming\WaviGkarv\Cilavx.dll"HKU\S-1-5-21-1350101312-2791638396-2936791211-1000\...\Policies\system: [DisableLockWorkstation] 0HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\windows\System32\SPReview\SPReview.exe [301568 2015-01-14] (Microsoft Corporation)ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-09-24] (AVAST Software)==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)Tcpip\Parameters: [DhcpNameServer] 192.168.10.1Tcpip\..\Interfaces\{B5D1F181-4931-4A02-A483-E4CACDEB210E}: [DhcpNameServer] 192.168.10.1Internet Explorer:==================HKU\S-1-5-21-1350101312-2791638396-2936791211-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/HKU\S-1-5-21-1350101312-2791638396-2936791211-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.toshiba.com/?cid=C001B2YHKU\S-1-5-21-1350101312-2791638396-2936791211-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://start.toshiba.com/g/SearchScopes: HKLM -> DefaultScope {E3F27ECD-647C-48EF-9F5E-C47F1E377E84} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNDSearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKLM -> {E3F27ECD-647C-48EF-9F5E-C47F1E377E84} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNDSearchScopes: HKLM-x32 -> DefaultScope {255C372F-F17A-4C90-9A6D-90F70983833A} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNDSearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKLM-x32 -> {255C372F-F17A-4C90-9A6D-90F70983833A} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNDSearchScopes: HKU\S-1-5-21-1350101312-2791638396-2936791211-1000 -> DefaultScope {E3F27ECD-647C-48EF-9F5E-C47F1E377E84} URL =SearchScopes: HKU\S-1-5-21-1350101312-2791638396-2936791211-1000 -> {255C372F-F17A-4C90-9A6D-90F70983833A} URL =SearchScopes: HKU\S-1-5-21-1350101312-2791638396-2936791211-1000 -> {3F21647E-833D-4C03-9A33-E9F711D8A501} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNDSearchScopes: HKU\S-1-5-21-1350101312-2791638396-2936791211-1000 -> {E3F27ECD-647C-48EF-9F5E-C47F1E377E84} URL =BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-09-24] (AVAST Software)BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)BHO: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll [2012-08-24] (TOSHIBA Corporation)BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21] (Adobe Systems Incorporated)BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-09-24] (AVAST Software)BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-07-22] (Sun Microsystems, Inc.)BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2012-08-24] (TOSHIBA Corporation)FireFox:========FF Plugin: @microsoft.com/GENUINE -> disabled [No File]FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2015-01-11] ()FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-03-30] (Google)FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-01] (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-01] (Google Inc.)FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FFFF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-09-24] [not signed]Chrome:=======CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-06-14]CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-14]==================== Services (Whitelisted) ========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-24] (AVAST Software)R2 EpsonScanSvc; C:\windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [X]===================== Drivers (Whitelisted) ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-09-24] (AVAST Software)R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-09-24] (AVAST Software)R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-09-24] (AVAST Software)R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-09-24] (AVAST Software)R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-09-24] (AVAST Software)R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-09-24] (AVAST Software)R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-09-24] (AVAST Software)R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-09-24] (AVAST Software)S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-11-01] (Malwarebytes)R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [1514568 2013-05-02] (Realtek Semiconductor Corporation )S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-11-01 23:02 - 2015-11-01 23:03 - 00016447 _____ C:\Users\Chuck Rogers\Desktop\FRST.txt2015-11-01 23:02 - 2015-11-01 23:02 - 00000000 ____D C:\FRST2015-11-01 23:01 - 2015-11-01 23:01 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\Chuck Rogers\Desktop\tdsskiller.exe2015-11-01 23:00 - 2015-11-01 23:00 - 02198016 _____ (Farbar) C:\Users\Chuck Rogers\Desktop\FRST64.exe2015-11-01 17:43 - 2015-11-01 22:52 - 00000906 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore1d114ff1e3fd8d2.job2015-11-01 17:43 - 2015-11-01 22:48 - 00000910 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA1d114ff1eb6dd9f.job2015-11-01 17:43 - 2015-11-01 17:43 - 00003906 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA1d114ff1eb6dd9f2015-11-01 17:43 - 2015-11-01 17:43 - 00003654 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore1d114ff1e3fd8d22015-11-01 17:42 - 2015-11-01 17:42 - 00929872 _____ (Google Inc.) C:\Users\Chuck Rogers\Desktop\ChromeSetup.exe2015-11-01 13:27 - 2015-11-01 13:28 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\Fishing2015-11-01 13:26 - 2015-11-01 13:26 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\Samung Tv stuff2015-11-01 13:24 - 2015-11-01 13:28 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\Manuals2015-11-01 13:04 - 2015-11-01 14:44 - 00000000 ____D C:\Users\Chuck Rogers\Downloads\Goosebumps2015-10-31 21:35 - 2015-11-01 18:55 - 00000000 ____D C:\ProgramData\HitmanPro2015-10-31 21:35 - 2015-10-31 21:35 - 00001908 _____ C:\Users\Public\Desktop\HitmanPro.lnk2015-10-31 21:35 - 2015-10-31 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro2015-10-31 21:35 - 2015-10-31 21:35 - 00000000 ____D C:\Program Files\HitmanPro2015-10-31 19:55 - 2015-11-01 22:52 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys2015-10-31 19:54 - 2015-10-31 19:54 - 00001117 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2015-10-31 19:54 - 2015-10-31 19:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2015-10-31 19:54 - 2015-10-31 19:54 - 00000000 ____D C:\ProgramData\Malwarebytes2015-10-31 19:54 - 2015-10-31 19:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware2015-10-31 19:54 - 2015-10-05 08:50 - 00109272 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys2015-10-31 19:54 - 2015-10-05 08:50 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys2015-10-31 19:54 - 2015-10-05 08:50 - 00025816 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys2015-10-31 19:52 - 2015-10-31 19:52 - 00001332 _____ C:\Users\Chuck Rogers\Desktop\JRT.txt2015-10-31 19:36 - 2015-10-31 19:39 - 00000000 ____D C:\AdwCleaner2015-10-31 17:27 - 2015-10-31 19:46 - 00000000 ____D C:\Users\Chuck Rogers\AppData\Roaming\WaviGkarv2015-10-31 17:19 - 2015-11-01 14:44 - 00000000 ____D C:\Users\Chuck Rogers\Downloads\Jurassic World (2015)2015-10-30 17:34 - 2015-10-30 17:34 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\B-BRCME57BSP2015-10-14 17:15 - 2015-10-14 17:15 - 00000000 ____D C:\Users\Chuck Rogers\Downloads\Black Mass2015-10-14 16:13 - 2015-09-18 13:22 - 00025432 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe2015-10-14 16:13 - 2015-09-18 13:19 - 01291264 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll2015-10-14 16:13 - 2015-09-18 13:19 - 00766464 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll2015-10-14 16:13 - 2015-09-18 13:19 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll2015-10-14 16:13 - 2015-09-18 13:19 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll2015-10-14 16:13 - 2015-09-18 13:19 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll2015-10-14 16:13 - 2015-09-18 13:09 - 01163776 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll2015-10-13 16:01 - 2015-08-06 12:04 - 14176768 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll2015-10-13 16:01 - 2015-08-06 12:03 - 01866752 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll2015-10-13 16:01 - 2015-08-06 11:44 - 12875776 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll2015-10-13 16:01 - 2015-08-06 11:44 - 01498624 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll2015-10-13 16:00 - 2015-09-18 13:31 - 00391784 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll2015-10-13 16:00 - 2015-09-18 12:58 - 00345688 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll2015-10-13 16:00 - 2015-09-15 22:48 - 25851904 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll2015-10-13 16:00 - 2015-09-15 22:36 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb2015-10-13 16:00 - 2015-09-15 22:36 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll2015-10-13 16:00 - 2015-09-15 22:22 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll2015-10-13 16:00 - 2015-09-15 22:21 - 02886656 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll2015-10-13 16:00 - 2015-09-15 22:21 - 00585728 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll2015-10-13 16:00 - 2015-09-15 22:21 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec2015-10-13 16:00 - 2015-09-15 22:21 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll2015-10-13 16:00 - 2015-09-15 22:21 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll2015-10-13 16:00 - 2015-09-15 22:14 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll2015-10-13 16:00 - 2015-09-15 22:13 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll2015-10-13 16:00 - 2015-09-15 22:10 - 00616960 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll2015-10-13 16:00 - 2015-09-15 22:09 - 05990912 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll2015-10-13 16:00 - 2015-09-15 22:08 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll2015-10-13 16:00 - 2015-09-15 22:08 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll2015-10-13 16:00 - 2015-09-15 22:08 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe2015-10-13 16:00 - 2015-09-15 22:08 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe2015-10-13 16:00 - 2015-09-15 22:01 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe2015-10-13 16:00 - 2015-09-15 21:58 - 20357632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll2015-10-13 16:00 - 2015-09-15 21:58 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll2015-10-13 16:00 - 2015-09-15 21:50 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll2015-10-13 16:00 - 2015-09-15 21:46 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll2015-10-13 16:00 - 2015-09-15 21:45 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb2015-10-13 16:00 - 2015-09-15 21:45 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll2015-10-13 16:00 - 2015-09-15 21:43 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll2015-10-13 16:00 - 2015-09-15 21:41 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll2015-10-13 16:00 - 2015-09-15 21:33 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll2015-10-13 16:00 - 2015-09-15 21:33 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll2015-10-13 16:00 - 2015-09-15 21:32 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec2015-10-13 16:00 - 2015-09-15 21:32 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll2015-10-13 16:00 - 2015-09-15 21:31 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll2015-10-13 16:00 - 2015-09-15 21:31 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll2015-10-13 16:00 - 2015-09-15 21:29 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll2015-10-13 16:00 - 2015-09-15 21:29 - 00720896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe2015-10-13 16:00 - 2015-09-15 21:28 - 02279936 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll2015-10-13 16:00 - 2015-09-15 21:28 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll2015-10-13 16:00 - 2015-09-15 21:26 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl2015-10-13 16:00 - 2015-09-15 21:26 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll2015-10-13 16:00 - 2015-09-15 21:26 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll2015-10-13 16:00 - 2015-09-15 21:24 - 00480256 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll2015-10-13 16:00 - 2015-09-15 21:23 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe2015-10-13 16:00 - 2015-09-15 21:22 - 14458368 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll2015-10-13 16:00 - 2015-09-15 21:22 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll2015-10-13 16:00 - 2015-09-15 21:22 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll2015-10-13 16:00 - 2015-09-15 21:15 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll2015-10-13 16:00 - 2015-09-15 21:11 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll2015-10-13 16:00 - 2015-09-15 21:10 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll2015-10-13 16:00 - 2015-09-15 21:07 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll2015-10-13 16:00 - 2015-09-15 21:06 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll2015-10-13 16:00 - 2015-09-15 21:05 - 04527616 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll2015-10-13 16:00 - 2015-09-15 21:05 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll2015-10-13 16:00 - 2015-09-15 21:04 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll2015-10-13 16:00 - 2015-09-15 20:59 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll2015-10-13 16:00 - 2015-09-15 20:58 - 12853760 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll2015-10-13 16:00 - 2015-09-15 20:58 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll2015-10-13 16:00 - 2015-09-15 20:56 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll2015-10-13 16:00 - 2015-09-15 20:55 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl2015-10-13 16:00 - 2015-09-15 20:55 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll2015-10-13 16:00 - 2015-09-15 20:48 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll2015-10-13 16:00 - 2015-09-15 20:37 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll2015-10-13 16:00 - 2015-09-15 20:34 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll2015-10-13 16:00 - 2015-09-15 20:32 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll2015-10-13 15:59 - 2015-10-01 12:06 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi2015-10-13 15:59 - 2015-10-01 12:04 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi2015-10-13 15:59 - 2015-10-01 12:00 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe2015-10-13 15:59 - 2015-10-01 12:00 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll2015-10-13 15:59 - 2015-10-01 12:00 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll2015-10-13 15:59 - 2015-10-01 12:00 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll2015-10-13 15:59 - 2015-10-01 12:00 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe2015-10-13 15:59 - 2015-10-01 11:50 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll2015-10-13 15:59 - 2015-10-01 11:00 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys2015-10-13 15:59 - 2015-09-28 21:16 - 05569472 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe2015-10-13 15:59 - 2015-09-28 21:13 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll2015-10-13 15:59 - 2015-09-28 21:10 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll2015-10-13 15:59 - 2015-09-28 21:10 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe2015-10-13 15:59 - 2015-09-28 21:10 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe2015-10-13 15:59 - 2015-09-28 21:10 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll2015-10-13 15:59 - 2015-09-28 21:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe2015-10-13 15:59 - 2015-09-28 21:09 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe2015-10-13 15:59 - 2015-09-28 21:05 - 03990976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe2015-10-13 15:59 - 2015-09-28 21:05 - 03936192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe2015-10-13 15:59 - 2015-09-28 21:05 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll2015-10-13 15:59 - 2015-09-28 21:05 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll2015-10-13 15:59 - 2015-09-28 21:02 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll2015-10-13 15:59 - 2015-09-28 20:58 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe2015-10-13 15:59 - 2015-09-28 20:58 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll2015-10-13 15:59 - 2015-09-28 20:58 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe2015-10-13 15:59 - 2015-09-28 20:58 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll2015-10-13 15:59 - 2015-09-28 20:57 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll2015-10-13 15:59 - 2015-09-28 20:57 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll2015-10-13 15:59 - 2015-09-28 20:57 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll2015-10-13 15:59 - 2015-09-28 20:57 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll2015-10-13 15:59 - 2015-09-28 20:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll2015-10-13 15:59 - 2015-09-28 20:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 19:50 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys2015-10-13 15:59 - 2015-09-28 19:49 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys2015-10-13 15:59 - 2015-09-28 19:49 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys2015-10-13 15:59 - 2015-09-28 19:43 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe2015-10-13 15:59 - 2015-09-28 19:43 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe2015-10-13 15:59 - 2015-09-28 19:40 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 19:40 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 19:40 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 19:40 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll2015-10-13 15:59 - 2015-09-25 12:07 - 03168768 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll2015-10-13 15:59 - 2015-09-25 12:07 - 02607104 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll2015-10-13 15:59 - 2015-09-25 12:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll2015-10-13 15:59 - 2015-09-25 12:07 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll2015-10-13 15:59 - 2015-09-25 12:07 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll2015-10-13 15:59 - 2015-09-25 12:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll2015-10-13 15:59 - 2015-09-25 12:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll2015-10-13 15:59 - 2015-09-25 12:06 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe2015-10-13 15:59 - 2015-09-25 12:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll2015-10-13 15:59 - 2015-09-25 12:06 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe2015-10-13 15:59 - 2015-09-25 12:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll2015-10-13 15:59 - 2015-09-25 11:59 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll2015-10-13 15:59 - 2015-09-25 11:59 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll2015-10-13 15:59 - 2015-09-25 11:59 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll2015-10-13 15:59 - 2015-09-25 11:59 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll2015-10-13 15:59 - 2015-09-25 11:58 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe2015-10-13 15:59 - 2015-09-15 12:17 - 00157016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys2015-10-13 15:59 - 2015-09-15 12:17 - 00097112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys2015-10-13 15:59 - 2015-09-15 12:11 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll2015-10-13 15:59 - 2015-09-15 12:11 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll2015-10-13 15:59 - 2015-09-15 12:11 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll2015-10-13 15:59 - 2015-09-15 12:11 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll2015-10-13 15:59 - 2015-09-15 12:11 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll2015-10-13 15:59 - 2015-09-15 12:11 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll2015-10-13 15:59 - 2015-09-15 12:10 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe2015-10-13 15:59 - 2015-09-15 11:36 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll2015-10-13 15:59 - 2015-09-15 11:36 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll2015-10-13 15:59 - 2015-09-15 11:36 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll2015-10-13 15:59 - 2015-09-15 11:35 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00984448 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00901264 _____ (Microsoft Corporation) C:\windows\SysWOW64\ucrtbase.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00066400 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00063840 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00022368 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00020832 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00019808 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00019808 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00016224 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00016224 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00015712 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00015712 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00013664 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00013664 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-eventing-provider-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-11-01 23:00 - 2009-07-13 22:45 - 00016304 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-11-01 23:00 - 2009-07-13 22:45 - 00016304 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-11-01 22:57 - 2009-07-13 23:13 - 00782476 _____ C:\windows\system32\PerfStringBackup.INI2015-11-01 22:56 - 2015-01-11 23:33 - 01725351 _____ C:\windows\WindowsUpdate.log2015-11-01 22:51 - 2010-07-22 19:15 - 00445196 _____ C:\windows\PFRO.log2015-11-01 22:51 - 2009-07-13 23:08 - 00000006 ____H C:\windows\Tasks\SA.DAT2015-11-01 22:51 - 2009-07-13 22:51 - 00005452 _____ C:\windows\setupact.log2015-11-01 22:50 - 2009-07-13 23:32 - 00000000 ____D C:\windows\Performance2015-11-01 21:39 - 2015-03-21 21:07 - 00000000 ____D C:\Program Files (x86)\DivX2015-11-01 21:30 - 2010-07-22 18:58 - 00000910 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job2015-11-01 21:30 - 2010-07-22 18:58 - 00000906 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job2015-11-01 19:36 - 2015-01-12 00:04 - 00000000 ____D C:\Users\Chuck Rogers\AppData\Local\Google2015-11-01 19:36 - 2010-07-22 18:58 - 00000000 ____D C:\Program Files (x86)\Google2015-11-01 14:42 - 2015-09-26 21:55 - 00000000 ____D C:\Users\Chuck Rogers\Downloads\New folder2015-11-01 13:29 - 2015-03-07 21:12 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\GPS stuff2015-11-01 12:41 - 2015-01-11 23:42 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update2015-10-31 21:30 - 2009-07-13 21:20 - 00000000 ____D C:\windows\PLA2015-10-31 17:11 - 2009-07-13 23:32 - 00000000 ____D C:\windows\system32\FxsTmp2015-10-21 15:39 - 2009-07-13 23:08 - 00032572 _____ C:\windows\Tasks\SCHEDLGU.TXT2015-10-17 11:38 - 2015-01-11 23:59 - 00000000 ___SD C:\windows\system32\CompatTel2015-10-17 11:37 - 2015-01-11 23:59 - 00000000 ____D C:\windows\system32\appraiser2015-10-14 17:43 - 2009-07-13 21:20 - 00000000 ____D C:\windows\rescache2015-10-13 22:47 - 2015-01-11 23:55 - 00000000 ____D C:\windows\system32\MRT2015-10-13 22:41 - 2015-01-11 23:54 - 143481208 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe2015-10-10 07:29 - 2015-04-08 16:26 - 00000000 ___SD C:\windows\system32\GWX2015-10-08 18:20 - 2015-04-08 16:26 - 00000000 ___SD C:\windows\SysWOW64\GWX==================== Files in the root of some directories =======2015-03-04 21:23 - 2015-03-09 17:37 - 0000017 ____H () C:\Users\Chuck Rogers\AppData\Local\19720201.dat2015-03-30 09:02 - 2015-03-30 09:13 - 0000469 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bcSome files in TEMP:====================C:\Users\Chuck Rogers\AppData\Local\Temp\divxe65b.exeC:\Users\Chuck Rogers\AppData\Local\Temp\DivXSetup.exeC:\Users\Chuck Rogers\AppData\Local\Temp\genteert.dllC:\Users\Chuck Rogers\AppData\Local\Temp\sqlite3.dll==================== Bamital & volsnap =================(There is no automatic fix for files that do not pass verification.)C:\windows\system32\winlogon.exe => File is digitally signedC:\windows\system32\wininit.exe => File is digitally signedC:\windows\SysWOW64\wininit.exe => File is digitally signedC:\windows\explorer.exe => File is digitally signedC:\windows\SysWOW64\explorer.exe => File is digitally signedC:\windows\system32\svchost.exe => File is digitally signedC:\windows\SysWOW64\svchost.exe => File is digitally signedC:\windows\system32\services.exe => File is digitally signedC:\windows\system32\User32.dll => File is digitally signedC:\windows\SysWOW64\User32.dll => File is digitally signedC:\windows\system32\userinit.exe => File is digitally signedC:\windows\SysWOW64\userinit.exe => File is digitally signedC:\windows\system32\rpcss.dll => File is digitally signedC:\windows\system32\dnsapi.dll => File is digitally signedC:\windows\SysWOW64\dnsapi.dll => File is digitally signedC:\windows\system32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2015-10-31 12:03==================== End of FRST.txt ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version:31-10-2015Ran by Chuck Rogers (2015-11-01 23:03:39)Running from C:\Users\Chuck Rogers\DesktopWindows 7 Home Premium Service Pack 1 (X64) (2015-01-12 05:09:01)Boot Mode: Normal============================================================================== Accounts: =============================Administrator (S-1-5-21-1350101312-2791638396-2936791211-500 - Administrator - Disabled)Chuck Rogers (S-1-5-21-1350101312-2791638396-2936791211-1000 - Administrator - Enabled) => C:\Users\Chuck RogersGuest (S-1-5-21-1350101312-2791638396-2936791211-501 - Limited - Disabled)==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}==================== Installed Programs ======================(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated)Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.1.53.64 - Adobe Systems Incorporated)Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)Adobe Reader 9.3 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A93000000001}) (Version: 9.3.0 - Adobe Systems Incorporated)ATI Catalyst Install Manager (HKLM\...\{BE3DFCA2-6F42-509D-555C-68A923314062}) (Version: 3.0.765.0 - ATI Technologies, Inc.)Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.4.2233 - AVAST Software)Best Buy pc app (Version: 3.0.0.0 - Best Buy) Hiddenccc-core-static (x32 Version: 2010.0315.1050.17562 - ATI) HiddenD3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) HiddenEpson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.4.0.0 - SEIKO EPSON CORPORATION)Epson Event Manager (HKLM-x32\...\{44F72193-F59C-4303-BAE8-E3E4BC1C122C}) (Version: 3.01.0003 - Seiko Epson Corporation)Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.46.00 - SEIKO EPSON CORPORATION)Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - )EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)EPSON WF-3530 Series Printer Uninstall (HKLM\...\EPSON WF-3530 Series) (Version: - SEIKO EPSON Corporation)EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)Fugawi Google Earth Plug-in Version 1.1.0.6 (HKLM-x32\...\Fugawi45_GE_is1) (Version: 4.5 - Northport Systems Inc.)FugVS2005 (HKLM-x32\...\{0C8364B1-AFD8-45B7-ACE8-B76113B6C418}) (Version: 1.0.0 - Northport Systems Inc.)Google Earth (HKLM-x32\...\{1A295C25-6E02-49FB-826B-F0D2C56FFA4E}) (Version: 7.1.4.1529 - Google)Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) HiddenGoogle Update Helper (x32 Version: 1.3.28.15 - Google Inc.) HiddenHitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.10.250 - SurfRight B.V.)HTC BMP USB Driver (HKLM-x32\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.16.0.001 - HTC Corporation)IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)Java 6 Update 17 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216017FF}) (Version: 6.0.170 - Sun Microsystems, Inc.)Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenLabel@Once 1.0 (HKLM-x32\...\{0D795777-9D60-4692-8386-F2B3F2B5E5BF}) (Version: 1.0 - Corel)Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)Navionics HotMaps - Lake Geneva WI (HKLM-x32\...\NavionicsHotMaps-HD-109_is1) (Version: 4.5 - Navionics Inc. and Northport Systems Inc.)Navionics HotMaps Explorer 4.5 (HKLM-x32\...\NavionicsHotMapsExplorer_is1) (Version: 4.5 - Navionics Inc. and Northport Systems Inc.)OTC Scanning Suite (HKLM-x32\...\{22F050C2-C916-4E47-ABFC-7A145B031BD4}) (Version: 4.001.0000 - OTC)PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.13.112.2010 - Realtek)Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.5992 - Realtek Semiconductor Corp.)Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6069 - Realtek Semiconductor Corp.)Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30111 - Realtek Semiconductor Corp.)Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0013 - REALTEK Semiconductor Corp.)Software Updater (HKLM-x32\...\{6DFBE8A2-CDBF-453E-B34C-32F202FCEE4C}) (Version: 4.2.1 - SEIKO EPSON CORPORATION) <==== ATTENTIONSynaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.8.1 - Synaptics Incorporated)TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.1 - TOSHIBA)TOSHIBA Assist (HKLM-x32\...\{1B87C40B-A60B-4EF3-9A68-706CF4B69978}) (Version: 3.00.11 - TOSHIBA CORPORATION)Toshiba Book Place (HKLM-x32\...\{BB51B753-9A0C-4D1D-B3EF-A1B936F55796}) (Version: 2.0.3977.0 - K-NFB Reading Technology, Inc.)TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{C14518AF-1A0F-4D39-8011-69BAA01CD380}) (Version: 1.6.07.64 - TOSHIBA Corporation)TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.2 for x64 - TOSHIBA Corporation)TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.2.11.64 - TOSHIBA Corporation)TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.3.64 - TOSHIBA Corporation)TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.0.6C - TOSHIBA CORPORATION)TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.0.22C - TOSHIBA CORPORATION)TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.6 - TOSHIBA Corporation)TOSHIBA Media Controller (HKLM-x32\...\{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}) (Version: 1.0.80.3.64 - TOSHIBA CORPORATION)TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.8.0 - TOSHIBA CORPORATION)TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.6.0.64 - TOSHIBA Corporation)TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.3 - TOSHIBA)TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.4 for x64 - TOSHIBA Corporation)TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{A0E99122-25C1-4CA4-9063-499A2A814EB6}) (Version: 1.6.06.64 - TOSHIBA Corporation)TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.9 - TOSHIBA)TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.0.9C - TOSHIBA CORPORATION)TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.3.3.64 - TOSHIBA Corporation)TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.15 - TOSHIBA Corporation)ToshibaRegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.4 - Toshiba)TurboTax 2014 (HKLM-x32\...\TurboTax 2014) (Version: 2014.0 - Intuit, Inc)Utility Common Driver (x32 Version: 1.0.52.1C - TOSHIBA) HiddenVC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) HiddenWindows Driver Package - FTDI CDM Driver Package (07/12/2010 2.08.02) (HKLM\...\7A3873EEB4807FBDE9271D1C3DA50F100D5B8A7D) (Version: 07/12/2010 2.08.02 - FTDI)Windows Driver Package - FTDI CDM Driver Package (07/12/2010 2.08.02) (HKLM\...\C6554C9DFBD939292E343034D2836B952A9D4B66) (Version: 07/12/2010 2.08.02 - FTDI)Windows Driver Package - SPX Service Solutions, Inc (usbser) Ports (01/07/2010 2.0.0) (HKLM\...\BA81E6D589C849EA72D1C2CF16057B36C83BAEA8) (Version: 01/07/2010 2.0.0 - SPX Service Solutions, Inc)Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)==================== Custom CLSID (Whitelisted): ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== Restore Points =========================06-10-2015 15:43:34 Windows Update08-10-2015 18:20:00 Windows Update13-10-2015 15:58:52 Windows Update13-10-2015 22:35:21 Windows Update17-10-2015 11:37:23 Windows Update20-10-2015 23:50:09 Windows Update30-10-2015 16:02:30 Scheduled Checkpoint30-10-2015 16:04:02 Windows Update31-10-2015 19:45:43 JRT Pre-Junkware Removal==================== Hosts content: ===============================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2009-07-13 20:34 - 2009-06-10 15:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts==================== Scheduled Tasks (Whitelisted) =============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)Task: {016C88F3-E949-4659-8B3B-95EA8BB008F7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> No File <==== ATTENTIONTask: {379B2579-184C-459B-9595-0C593A803035} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-09-24] (AVAST Software)Task: {54A89E75-9646-407B-9560-FA95ED3E6CE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> No File <==== ATTENTIONTask: {C7644EFB-9235-46A6-9E96-E1F787177D75} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTIONTask: {C9A9F74C-85BC-411D-8F34-C0A456382DEF} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exeTask: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> No File <==== ATTENTIONTask: {DC72C1BB-7867-4066-A8C6-09EC2BA2A5A4} - System32\Tasks\GoogleUpdateTaskMachineCore1d114ff1e3fd8d2 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)Task: {DD566739-3EFA-469F-895C-DF045C26366E} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> No File <==== ATTENTIONTask: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> No File <==== ATTENTIONTask: {FBA72CBE-1937-4C53-8282-78240E14497B} - System32\Tasks\GoogleUpdateTaskMachineUA1d114ff1eb6dd9f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\windows\Tasks\GoogleUpdateTaskMachineCore1d114ff1e3fd8d2.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\windows\Tasks\GoogleUpdateTaskMachineUA1d114ff1eb6dd9f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe==================== Loaded Modules (Whitelisted) ==============2013-10-17 14:27 - 2013-10-17 14:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe2010-03-03 16:15 - 2010-03-03 16:15 - 08762680 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll2009-11-03 15:26 - 2009-11-03 15:26 - 00053560 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll2010-03-03 16:15 - 2010-03-03 16:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll2010-03-03 16:15 - 2010-03-03 16:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll2010-07-22 18:50 - 2009-06-22 16:40 - 00022328 _____ () C:\Program Files\TOSHIBA\Toshiba Assist\NotifyX.dll2009-03-12 21:08 - 2009-03-12 21:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll2009-07-25 18:38 - 2009-07-25 18:38 - 00017800 _____ () C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll2009-10-13 12:00 - 2009-10-13 12:00 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll2015-01-11 23:34 - 2015-01-11 23:34 - 00270336 _____ () C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll2010-02-05 18:44 - 2010-02-05 18:44 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll2015-09-24 17:35 - 2015-09-24 17:35 - 00103376 _____ () C:\Program Files\AVAST Software\Avast\log.dll2015-09-24 17:35 - 2015-09-24 17:35 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll2015-11-01 12:41 - 2015-11-01 12:41 - 03014096 _____ () C:\Program Files\AVAST Software\Avast\defs\15110101\algo.dll2015-09-24 17:35 - 2015-09-24 17:35 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll==================== Alternate Data Streams (Whitelisted) =========(If an entry is included in the fixlist, only the ADS will be removed.)==================== Safe Mode (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)==================== EXE Association (Whitelisted) ===============(If an entry is included in the fixlist, the registry item will be restored to default or removed.)==================== Internet Explorer trusted/restricted ===============(If an entry is included in the fixlist, it will be removed from the registry.)==================== Other Areas ============================(Currently there is no automatic fix for this section.)HKU\S-1-5-21-1350101312-2791638396-2936791211-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Chuck Rogers\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpgDNS Servers: 192.168.10.1HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)Windows Firewall is enabled.==================== MSCONFIG/TASK MANAGER disabled items ==(Currently there is no automatic fix for this section.)MSCONFIG\startupfolder: C:^Users^Chuck Rogers^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Epson all-in-one Registration.lnk => C:\windows\pss\Epson all-in-one Registration.lnk.StartupMSCONFIG\startupreg: Best Buy pc app => C:\Users\Chuck Rogers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Best Buy\Best Buy pc app.appref-msMSCONFIG\startupreg: EPLTarget =>MSCONFIG\startupreg: FUFAXRCV => "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe"MSCONFIG\startupreg: FUFAXSTM => "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe"==================== FirewallRules (Whitelisted) ===============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [{8EB39B5A-3E9F-4000-B215-3E0F4EEF6526}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exeFirewallRules: [{4371D9FE-B23E-49F8-9590-F6503EDF1916}] => (Allow) svchost.exeFirewallRules: [{4FAD356A-677C-430D-8CC8-6976D1707F65}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exeFirewallRules: [{CFC5160B-554B-4177-A77B-81A1665F8092}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exeFirewallRules: [{089B37FD-C36C-43A9-A83D-E7DADB44E08B}] => (Allow) LPort=2869FirewallRules: [{DDD4897C-70C7-4863-B598-2054BB27BBC8}] => (Allow) LPort=1900FirewallRules: [{793550A2-F370-4706-BBAC-0F2F42ACE0A1}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exeFirewallRules: [{994240EE-05F2-4BF2-8B2B-F317086ECC65}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exeFirewallRules: [{2D8ADF22-7CA7-425C-9CF2-E88EEB386946}] => (Allow) C:\Users\Chuck Rogers\AppData\Local\Temp\WZSE0.TMP\Common\EpsonNet Setup\ENEasyApp.exeFirewallRules: [{76D5C2E4-041E-4F11-A996-915FF4D5C8B8}] => (Allow) C:\Users\Chuck Rogers\AppData\Local\Temp\WZSE0.TMP\Common\EpsonNet Setup\ENEasyApp.exeFirewallRules: [TCP Query User{652B49EB-D58F-4F7E-8341-044F68636C5F}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exeFirewallRules: [uDP Query User{19E00F48-05F5-429E-9383-310B0D6008B4}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exeFirewallRules: [{21D81A8C-53E0-4125-BD33-CA461D0F2F5F}] => (Allow) C:\Users\Chuck Rogers\AppData\Roaming\BitTorrent\BitTorrent.exeFirewallRules: [{E7B9C30C-5673-414E-BD8E-4F4C395F6268}] => (Allow) C:\Users\Chuck Rogers\AppData\Roaming\BitTorrent\BitTorrent.exeFirewallRules: [{834282D5-B89D-47C9-A5F8-E86A1EA0517C}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exeFirewallRules: [{B4B202E2-8DCC-44AC-B96E-BF9D951EAA65}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exeFirewallRules: [{8FE89CD4-BFC2-46BD-B4B1-FD0C2DCECA61}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exeFirewallRules: [{F4A3A778-DBFC-4631-A37B-D8825D828624}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exeFirewallRules: [{271D1AF3-D34C-4878-AD05-56E921FC9619}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exeFirewallRules: [{FBB78166-5346-4E44-81DA-DA1143A57257}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exeFirewallRules: [{AB2C5DEB-EC87-4F37-AA22-56FE45BF9AEB}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exeFirewallRules: [{B6410C59-D97D-4482-9D83-4239FEACBC95}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe==================== Faulty Device Manager Devices ================================= Event log errors: =========================Application errors:==================Error: (11/01/2015 09:39:03 PM) (Source: SideBySide) (EventID: 33) (User: )Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.Please use sxstrace.exe for detailed diagnosis.Error: (11/01/2015 05:37:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )Description: 80004005Error: (11/01/2015 12:42:31 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )Description: 80004005Error: (10/31/2015 09:29:59 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )Description: The following module failed to stop processing: PC Health Info Connection. Error: Operation failed.Error: (10/31/2015 09:29:59 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )Description: The following module failed to stop processing: Alerts. Error: Operation failed.Error: (10/31/2015 09:29:59 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )Description: The following module failed to stop processing: Software Updates. Error: Operation failed.Error: (10/31/2015 09:00:04 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )Description: 80004005Error: (10/31/2015 07:47:25 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: iexplore.exe, version: 11.0.9600.18057, time stamp: 0x55f8d739Faulting module name: ntdll.dll, version: 6.1.7601.19018, time stamp: 0x560a0083Exception code: 0xc0000005Fault offset: 0x000000000004ac04Faulting process id: 0x10f4Faulting application start time: 0xiexplore.exe0Faulting application path: iexplore.exe1Faulting module path: iexplore.exe2Report Id: iexplore.exe3Error: (10/31/2015 07:40:46 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )Description: The following module failed to stop processing: PC Health Info Connection. Error: Operation failed.Error: (10/31/2015 07:40:46 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )Description: The following module failed to stop processing: Alerts. Error: Operation failed.System errors:=============Error: (11/01/2015 10:52:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The VBoxAsw Support Driver service failed to start due to the following error:%%3Error: (11/01/2015 10:51:44 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)Description: WLAN Extensibility Module has failed to start.Module Path: C:\windows\system32\Rtlihvs.dllError Code: 126Error: (11/01/2015 09:30:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The VBoxAsw Support Driver service failed to start due to the following error:%%3Error: (11/01/2015 09:30:30 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)Description: WLAN Extensibility Module has failed to start.Module Path: C:\windows\system32\Rtlihvs.dllError Code: 126Error: (11/01/2015 01:55:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The Google Update Service (gupdate) service failed to start due to the following error:%%1053Error: (11/01/2015 01:55:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: )Description: A timeout was reached (30000 milliseconds) while waiting for the Google Update Service (gupdate) service to connect.Error: (11/01/2015 01:53:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The VBoxAsw Support Driver service failed to start due to the following error:%%3Error: (11/01/2015 01:53:04 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)Description: WLAN Extensibility Module has failed to start.Module Path: C:\windows\system32\Rtlihvs.dllError Code: 126Error: (11/01/2015 12:42:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The Google Update Service (gupdate) service failed to start due to the following error:%%1053Error: (11/01/2015 12:42:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )Description: A timeout was reached (30000 milliseconds) while waiting for the Google Update Service (gupdate) service to connect.==================== Memory info ===========================Processor: AMD Phenom II N640 Dual-Core ProcessorPercentage of memory in use: 41%Total physical RAM: 3835.68 MBAvailable physical RAM: 2227.07 MBTotal Virtual: 7669.57 MBAvailable Virtual: 5682.87 MB==================== Drives ================================Drive c: (TI105955W0C) (Fixed) (Total:453.42 GB) (Free:365.79 GB) NTFS ==>[system with boot components (obtained from drive)]==================== MBR & Partition Table ==========================================================================Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 23AC1F85)Partition 1: (Active) - (Size=1.5 GB) - (Type=27)Partition 2: (Not Active) - (Size=453.4 GB) - (Type=07 NTFS)Partition 3: (Not Active) - (Size=10.9 GB) - (Type=17)==================== End of Addition.txt ============================ TDSSKiller.3.1.0.5_01.11.2015_23.06.22_log.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted November 2, 2015 ID:999217 Share Posted November 2, 2015 Hello,They call me TwinHeadedEagle around here, and I'll try to help your with your issue.Before we start please read and note the following:We're primarily oriented on malware removal here, so you must know that some issues just cannot be solved and you must be prepared for this. Some tools we use here will remove your browser search history, so backup your important links and all the files whose loss is unacceptable.Limit your internet access to posting here, some infections just wait to steal typed-in passwords.Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time. Keep in mind that private life gets in the way too. Note that we may live in totally different time zones, what may cause some delays between answers.Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.I volunteer to help you, so please, do not ask for help for your company/business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed. I can't foresee everything, so if anything not covered in my instructions happens, please stop and inform me! There are no silly questions. Never be afraid to ask if in doubt! Rules and policiesWe won't support any piracy. That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!Failure to follow these guidelines will result with closing your topic and withdrawning any assistance. Scan with Farbar Recovery Scan ToolPlease re-run Farbar Recovery Scan Tool to give me a fresh look at your system.Right-click on icon and select Run as Administrator to start the tool.(XP users click run after receipt of Windows Security Warning - Open File).Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please upload them into your next reply. Link to post Share on other sites More sharing options...
Chgoenforcer Posted November 3, 2015 Author ID:999366 Share Posted November 3, 2015 Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015Ran by Chuck Rogers (administrator) on CHUCKROGERS-PC (02-11-2015 21:22:46)Running from C:\Users\Chuck Rogers\DesktopLoaded Profiles: Chuck Rogers (Available Profiles: Chuck Rogers)Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)Internet Explorer Version 11 (Default browser: IE)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(AMD) C:\windows\System32\atiesrxx.exe(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe(AMD) C:\windows\System32\atieclxx.exe(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe(TOSHIBA Corporation) C:\windows\System32\TODDSrv.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Seiko Epson Corporation) C:\windows\System32\escsvc64.exe(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE(Microsoft Corporation) C:\windows\System32\GWX\GWX.exe(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe==================== Registry (Whitelisted) ===========================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10134560 2010-03-22] (Realtek Semiconductor)HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [896032 2010-03-22] (Realtek Semiconductor)HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [505696 2009-11-06] (TOSHIBA Corporation)HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)HKLM\...\Run: [smoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [508216 2009-07-28] (TOSHIBA Corporation)HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [913720 2010-03-03] (TOSHIBA Corporation)HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1489760 2010-04-06] (TOSHIBA Corporation)HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [705368 2010-02-23] (TOSHIBA Corporation)HKLM\...\Run: [smartFaceVWatcher] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-10-19] (TOSHIBA Corporation)HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [595816 2010-03-19] (TOSHIBA Corporation)HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [35672 2010-03-03] (TOSHIBA Corporation)HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-15] (Advanced Micro Devices, Inc.)HKLM-x32\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2010-03-04] (TOSHIBA Electronics, Inc.)HKLM-x32\...\Run: [KeNotify] => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2009-12-25] (TOSHIBA CORPORATION)HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1295736 2011-02-11] (TOSHIBA Corporation)HKLM-x32\...\Run: [TWebCamera] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2454840 2010-02-24] (TOSHIBA CORPORATION.)HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-09-24] (AVAST Software)HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058400 2012-01-26] (SEIKO EPSON CORPORATION)HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exeHKU\S-1-5-21-1350101312-2791638396-2936791211-1000\...\Run: [958336810] => regsvr32.exe "C:\Users\Chuck Rogers\AppData\Roaming\WaviGkarv\Cilavx.dll"HKU\S-1-5-21-1350101312-2791638396-2936791211-1000\...\Policies\system: [DisableLockWorkstation] 0HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\windows\System32\SPReview\SPReview.exe [301568 2015-01-14] (Microsoft Corporation)ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-09-24] (AVAST Software)==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)Tcpip\Parameters: [DhcpNameServer] 192.168.10.1Tcpip\..\Interfaces\{B5D1F181-4931-4A02-A483-E4CACDEB210E}: [DhcpNameServer] 192.168.10.1Internet Explorer:==================HKU\S-1-5-21-1350101312-2791638396-2936791211-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/HKU\S-1-5-21-1350101312-2791638396-2936791211-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.toshiba.com/?cid=C001B2YHKU\S-1-5-21-1350101312-2791638396-2936791211-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://start.toshiba.com/g/SearchScopes: HKLM -> DefaultScope {E3F27ECD-647C-48EF-9F5E-C47F1E377E84} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNDSearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKLM -> {E3F27ECD-647C-48EF-9F5E-C47F1E377E84} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNDSearchScopes: HKLM-x32 -> DefaultScope {255C372F-F17A-4C90-9A6D-90F70983833A} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNDSearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKLM-x32 -> {255C372F-F17A-4C90-9A6D-90F70983833A} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNDSearchScopes: HKU\S-1-5-21-1350101312-2791638396-2936791211-1000 -> DefaultScope {E3F27ECD-647C-48EF-9F5E-C47F1E377E84} URL =SearchScopes: HKU\S-1-5-21-1350101312-2791638396-2936791211-1000 -> {255C372F-F17A-4C90-9A6D-90F70983833A} URL =SearchScopes: HKU\S-1-5-21-1350101312-2791638396-2936791211-1000 -> {3F21647E-833D-4C03-9A33-E9F711D8A501} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNDSearchScopes: HKU\S-1-5-21-1350101312-2791638396-2936791211-1000 -> {E3F27ECD-647C-48EF-9F5E-C47F1E377E84} URL =BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-09-24] (AVAST Software)BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)BHO: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll [2012-08-24] (TOSHIBA Corporation)BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21] (Adobe Systems Incorporated)BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-09-24] (AVAST Software)BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-07-22] (Sun Microsystems, Inc.)BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2012-08-24] (TOSHIBA Corporation)FireFox:========FF Plugin: @microsoft.com/GENUINE -> disabled [No File]FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2015-01-11] ()FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-03-30] (Google)FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-01] (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-01] (Google Inc.)FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FFFF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-09-24] [not signed]Chrome:=======CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-06-14]CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-14]==================== Services (Whitelisted) ========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-24] (AVAST Software)R2 EpsonScanSvc; C:\windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [X]===================== Drivers (Whitelisted) ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-09-24] (AVAST Software)R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-09-24] (AVAST Software)R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-09-24] (AVAST Software)R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-09-24] (AVAST Software)R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-09-24] (AVAST Software)R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-09-24] (AVAST Software)R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-09-24] (AVAST Software)R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-09-24] (AVAST Software)S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-11-02] (Malwarebytes)R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [1514568 2013-05-02] (Realtek Semiconductor Corporation )S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-11-02 21:22 - 2015-11-02 21:23 - 00016031 _____ C:\Users\Chuck Rogers\Desktop\FRST.txt2015-11-02 21:21 - 2015-11-02 21:21 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\New folder2015-11-01 23:02 - 2015-11-02 21:22 - 00000000 ____D C:\FRST2015-11-01 23:01 - 2015-11-01 23:01 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\Chuck Rogers\Desktop\tdsskiller.exe2015-11-01 23:00 - 2015-11-01 23:00 - 02198016 _____ (Farbar) C:\Users\Chuck Rogers\Desktop\FRST64.exe2015-11-01 17:43 - 2015-11-02 20:48 - 00000910 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA1d114ff1eb6dd9f.job2015-11-01 17:43 - 2015-11-02 19:53 - 00000906 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore1d114ff1e3fd8d2.job2015-11-01 17:43 - 2015-11-01 17:43 - 00003906 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA1d114ff1eb6dd9f2015-11-01 17:43 - 2015-11-01 17:43 - 00003654 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore1d114ff1e3fd8d22015-11-01 17:42 - 2015-11-01 17:42 - 00929872 _____ (Google Inc.) C:\Users\Chuck Rogers\Desktop\ChromeSetup.exe2015-11-01 13:27 - 2015-11-01 13:28 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\Fishing2015-11-01 13:26 - 2015-11-01 13:26 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\Samung Tv stuff2015-11-01 13:24 - 2015-11-01 13:28 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\Manuals2015-10-31 21:35 - 2015-11-01 18:55 - 00000000 ____D C:\ProgramData\HitmanPro2015-10-31 21:35 - 2015-10-31 21:35 - 00001908 _____ C:\Users\Public\Desktop\HitmanPro.lnk2015-10-31 21:35 - 2015-10-31 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro2015-10-31 21:35 - 2015-10-31 21:35 - 00000000 ____D C:\Program Files\HitmanPro2015-10-31 19:55 - 2015-11-02 21:05 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys2015-10-31 19:54 - 2015-10-31 19:54 - 00001117 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2015-10-31 19:54 - 2015-10-31 19:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2015-10-31 19:54 - 2015-10-31 19:54 - 00000000 ____D C:\ProgramData\Malwarebytes2015-10-31 19:54 - 2015-10-31 19:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware2015-10-31 19:54 - 2015-10-05 08:50 - 00109272 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys2015-10-31 19:54 - 2015-10-05 08:50 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys2015-10-31 19:54 - 2015-10-05 08:50 - 00025816 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys2015-10-31 19:52 - 2015-10-31 19:52 - 00001332 _____ C:\Users\Chuck Rogers\Desktop\JRT.txt2015-10-31 19:36 - 2015-10-31 19:39 - 00000000 ____D C:\AdwCleaner2015-10-31 17:27 - 2015-10-31 19:46 - 00000000 ____D C:\Users\Chuck Rogers\AppData\Roaming\WaviGkarv2015-10-30 17:34 - 2015-10-30 17:34 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\B-BRCME57BSP2015-10-14 16:13 - 2015-09-18 13:22 - 00025432 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe2015-10-14 16:13 - 2015-09-18 13:19 - 01291264 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll2015-10-14 16:13 - 2015-09-18 13:19 - 00766464 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll2015-10-14 16:13 - 2015-09-18 13:19 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll2015-10-14 16:13 - 2015-09-18 13:19 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll2015-10-14 16:13 - 2015-09-18 13:19 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll2015-10-14 16:13 - 2015-09-18 13:09 - 01163776 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll2015-10-13 16:01 - 2015-08-06 12:04 - 14176768 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll2015-10-13 16:01 - 2015-08-06 12:03 - 01866752 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll2015-10-13 16:01 - 2015-08-06 11:44 - 12875776 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll2015-10-13 16:01 - 2015-08-06 11:44 - 01498624 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll2015-10-13 16:00 - 2015-09-18 13:31 - 00391784 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll2015-10-13 16:00 - 2015-09-18 12:58 - 00345688 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll2015-10-13 16:00 - 2015-09-15 22:48 - 25851904 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll2015-10-13 16:00 - 2015-09-15 22:36 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb2015-10-13 16:00 - 2015-09-15 22:36 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll2015-10-13 16:00 - 2015-09-15 22:22 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll2015-10-13 16:00 - 2015-09-15 22:21 - 02886656 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll2015-10-13 16:00 - 2015-09-15 22:21 - 00585728 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll2015-10-13 16:00 - 2015-09-15 22:21 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec2015-10-13 16:00 - 2015-09-15 22:21 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll2015-10-13 16:00 - 2015-09-15 22:21 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll2015-10-13 16:00 - 2015-09-15 22:14 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll2015-10-13 16:00 - 2015-09-15 22:13 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll2015-10-13 16:00 - 2015-09-15 22:10 - 00616960 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll2015-10-13 16:00 - 2015-09-15 22:09 - 05990912 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll2015-10-13 16:00 - 2015-09-15 22:08 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll2015-10-13 16:00 - 2015-09-15 22:08 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll2015-10-13 16:00 - 2015-09-15 22:08 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe2015-10-13 16:00 - 2015-09-15 22:08 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe2015-10-13 16:00 - 2015-09-15 22:01 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe2015-10-13 16:00 - 2015-09-15 21:58 - 20357632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll2015-10-13 16:00 - 2015-09-15 21:58 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll2015-10-13 16:00 - 2015-09-15 21:50 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll2015-10-13 16:00 - 2015-09-15 21:46 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll2015-10-13 16:00 - 2015-09-15 21:45 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb2015-10-13 16:00 - 2015-09-15 21:45 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll2015-10-13 16:00 - 2015-09-15 21:43 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll2015-10-13 16:00 - 2015-09-15 21:41 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll2015-10-13 16:00 - 2015-09-15 21:33 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll2015-10-13 16:00 - 2015-09-15 21:33 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll2015-10-13 16:00 - 2015-09-15 21:32 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec2015-10-13 16:00 - 2015-09-15 21:32 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll2015-10-13 16:00 - 2015-09-15 21:31 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll2015-10-13 16:00 - 2015-09-15 21:31 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll2015-10-13 16:00 - 2015-09-15 21:29 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll2015-10-13 16:00 - 2015-09-15 21:29 - 00720896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe2015-10-13 16:00 - 2015-09-15 21:28 - 02279936 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll2015-10-13 16:00 - 2015-09-15 21:28 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll2015-10-13 16:00 - 2015-09-15 21:26 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl2015-10-13 16:00 - 2015-09-15 21:26 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll2015-10-13 16:00 - 2015-09-15 21:26 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll2015-10-13 16:00 - 2015-09-15 21:24 - 00480256 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll2015-10-13 16:00 - 2015-09-15 21:23 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe2015-10-13 16:00 - 2015-09-15 21:22 - 14458368 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll2015-10-13 16:00 - 2015-09-15 21:22 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll2015-10-13 16:00 - 2015-09-15 21:22 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll2015-10-13 16:00 - 2015-09-15 21:15 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll2015-10-13 16:00 - 2015-09-15 21:11 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll2015-10-13 16:00 - 2015-09-15 21:10 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll2015-10-13 16:00 - 2015-09-15 21:07 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll2015-10-13 16:00 - 2015-09-15 21:06 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll2015-10-13 16:00 - 2015-09-15 21:05 - 04527616 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll2015-10-13 16:00 - 2015-09-15 21:05 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll2015-10-13 16:00 - 2015-09-15 21:04 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll2015-10-13 16:00 - 2015-09-15 20:59 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll2015-10-13 16:00 - 2015-09-15 20:58 - 12853760 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll2015-10-13 16:00 - 2015-09-15 20:58 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll2015-10-13 16:00 - 2015-09-15 20:56 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll2015-10-13 16:00 - 2015-09-15 20:55 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl2015-10-13 16:00 - 2015-09-15 20:55 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll2015-10-13 16:00 - 2015-09-15 20:48 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll2015-10-13 16:00 - 2015-09-15 20:37 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll2015-10-13 16:00 - 2015-09-15 20:34 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll2015-10-13 16:00 - 2015-09-15 20:32 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll2015-10-13 15:59 - 2015-10-01 12:06 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi2015-10-13 15:59 - 2015-10-01 12:04 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi2015-10-13 15:59 - 2015-10-01 12:00 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe2015-10-13 15:59 - 2015-10-01 12:00 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll2015-10-13 15:59 - 2015-10-01 12:00 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll2015-10-13 15:59 - 2015-10-01 12:00 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll2015-10-13 15:59 - 2015-10-01 12:00 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe2015-10-13 15:59 - 2015-10-01 11:50 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll2015-10-13 15:59 - 2015-10-01 11:00 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys2015-10-13 15:59 - 2015-09-28 21:16 - 05569472 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe2015-10-13 15:59 - 2015-09-28 21:13 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll2015-10-13 15:59 - 2015-09-28 21:11 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll2015-10-13 15:59 - 2015-09-28 21:10 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll2015-10-13 15:59 - 2015-09-28 21:10 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe2015-10-13 15:59 - 2015-09-28 21:10 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe2015-10-13 15:59 - 2015-09-28 21:10 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll2015-10-13 15:59 - 2015-09-28 21:10 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll2015-10-13 15:59 - 2015-09-28 21:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe2015-10-13 15:59 - 2015-09-28 21:09 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe2015-10-13 15:59 - 2015-09-28 21:05 - 03990976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe2015-10-13 15:59 - 2015-09-28 21:05 - 03936192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe2015-10-13 15:59 - 2015-09-28 21:05 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll2015-10-13 15:59 - 2015-09-28 21:05 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll2015-10-13 15:59 - 2015-09-28 21:02 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 21:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll2015-10-13 15:59 - 2015-09-28 20:59 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll2015-10-13 15:59 - 2015-09-28 20:58 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe2015-10-13 15:59 - 2015-09-28 20:58 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll2015-10-13 15:59 - 2015-09-28 20:58 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe2015-10-13 15:59 - 2015-09-28 20:58 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll2015-10-13 15:59 - 2015-09-28 20:57 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll2015-10-13 15:59 - 2015-09-28 20:57 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll2015-10-13 15:59 - 2015-09-28 20:57 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll2015-10-13 15:59 - 2015-09-28 20:57 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll2015-10-13 15:59 - 2015-09-28 20:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll2015-10-13 15:59 - 2015-09-28 20:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 20:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 19:50 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys2015-10-13 15:59 - 2015-09-28 19:49 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys2015-10-13 15:59 - 2015-09-28 19:49 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys2015-10-13 15:59 - 2015-09-28 19:43 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe2015-10-13 15:59 - 2015-09-28 19:43 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe2015-10-13 15:59 - 2015-09-28 19:40 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 19:40 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 19:40 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll2015-10-13 15:59 - 2015-09-28 19:40 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll2015-10-13 15:59 - 2015-09-25 12:07 - 03168768 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll2015-10-13 15:59 - 2015-09-25 12:07 - 02607104 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll2015-10-13 15:59 - 2015-09-25 12:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll2015-10-13 15:59 - 2015-09-25 12:07 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll2015-10-13 15:59 - 2015-09-25 12:07 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll2015-10-13 15:59 - 2015-09-25 12:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll2015-10-13 15:59 - 2015-09-25 12:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll2015-10-13 15:59 - 2015-09-25 12:06 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe2015-10-13 15:59 - 2015-09-25 12:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll2015-10-13 15:59 - 2015-09-25 12:06 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe2015-10-13 15:59 - 2015-09-25 12:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll2015-10-13 15:59 - 2015-09-25 11:59 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll2015-10-13 15:59 - 2015-09-25 11:59 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll2015-10-13 15:59 - 2015-09-25 11:59 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll2015-10-13 15:59 - 2015-09-25 11:59 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll2015-10-13 15:59 - 2015-09-25 11:58 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe2015-10-13 15:59 - 2015-09-15 12:17 - 00157016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys2015-10-13 15:59 - 2015-09-15 12:17 - 00097112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys2015-10-13 15:59 - 2015-09-15 12:11 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll2015-10-13 15:59 - 2015-09-15 12:11 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll2015-10-13 15:59 - 2015-09-15 12:11 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll2015-10-13 15:59 - 2015-09-15 12:11 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll2015-10-13 15:59 - 2015-09-15 12:11 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll2015-10-13 15:59 - 2015-09-15 12:11 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll2015-10-13 15:59 - 2015-09-15 12:10 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe2015-10-13 15:59 - 2015-09-15 11:36 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll2015-10-13 15:59 - 2015-09-15 11:36 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll2015-10-13 15:59 - 2015-09-15 11:36 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll2015-10-13 15:59 - 2015-09-15 11:35 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00984448 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00901264 _____ (Microsoft Corporation) C:\windows\SysWOW64\ucrtbase.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00066400 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00063840 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00022368 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00020832 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00019808 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00019808 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00016224 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00016224 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00015712 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00015712 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00013664 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00013664 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-eventing-provider-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll2015-10-13 15:58 - 2015-07-18 07:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-11-02 21:17 - 2009-07-13 23:13 - 00782476 _____ C:\windows\system32\PerfStringBackup.INI2015-11-02 20:43 - 2009-07-13 22:45 - 00016304 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-11-02 20:43 - 2009-07-13 22:45 - 00016304 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-11-02 20:38 - 2015-01-11 23:33 - 01755265 _____ C:\windows\WindowsUpdate.log2015-11-02 19:53 - 2009-07-13 23:08 - 00000006 ____H C:\windows\Tasks\SA.DAT2015-11-02 19:53 - 2009-07-13 22:51 - 00005564 _____ C:\windows\setupact.log2015-11-02 18:29 - 2010-07-22 19:15 - 00445550 _____ C:\windows\PFRO.log2015-11-01 22:50 - 2009-07-13 23:32 - 00000000 ____D C:\windows\Performance2015-11-01 21:39 - 2015-03-21 21:07 - 00000000 ____D C:\Program Files (x86)\DivX2015-11-01 21:30 - 2010-07-22 18:58 - 00000910 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job2015-11-01 21:30 - 2010-07-22 18:58 - 00000906 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job2015-11-01 19:36 - 2015-01-12 00:04 - 00000000 ____D C:\Users\Chuck Rogers\AppData\Local\Google2015-11-01 19:36 - 2010-07-22 18:58 - 00000000 ____D C:\Program Files (x86)\Google2015-11-01 14:42 - 2015-09-26 21:55 - 00000000 ____D C:\Users\Chuck Rogers\Downloads\New folder2015-11-01 13:29 - 2015-03-07 21:12 - 00000000 ____D C:\Users\Chuck Rogers\Desktop\GPS stuff2015-11-01 12:41 - 2015-01-11 23:42 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update2015-10-31 21:30 - 2009-07-13 21:20 - 00000000 ____D C:\windows\PLA2015-10-31 17:11 - 2009-07-13 23:32 - 00000000 ____D C:\windows\system32\FxsTmp2015-10-21 15:39 - 2009-07-13 23:08 - 00032572 _____ C:\windows\Tasks\SCHEDLGU.TXT2015-10-17 11:38 - 2015-01-11 23:59 - 00000000 ___SD C:\windows\system32\CompatTel2015-10-17 11:37 - 2015-01-11 23:59 - 00000000 ____D C:\windows\system32\appraiser2015-10-14 17:43 - 2009-07-13 21:20 - 00000000 ____D C:\windows\rescache2015-10-13 22:47 - 2015-01-11 23:55 - 00000000 ____D C:\windows\system32\MRT2015-10-13 22:41 - 2015-01-11 23:54 - 143481208 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe2015-10-10 07:29 - 2015-04-08 16:26 - 00000000 ___SD C:\windows\system32\GWX2015-10-08 18:20 - 2015-04-08 16:26 - 00000000 ___SD C:\windows\SysWOW64\GWX==================== Files in the root of some directories =======2015-03-04 21:23 - 2015-03-09 17:37 - 0000017 ____H () C:\Users\Chuck Rogers\AppData\Local\19720201.dat2015-03-30 09:02 - 2015-03-30 09:13 - 0000469 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bcSome files in TEMP:====================C:\Users\Chuck Rogers\AppData\Local\Temp\divxe65b.exeC:\Users\Chuck Rogers\AppData\Local\Temp\DivXSetup.exeC:\Users\Chuck Rogers\AppData\Local\Temp\genteert.dllC:\Users\Chuck Rogers\AppData\Local\Temp\sqlite3.dll==================== Bamital & volsnap =================(There is no automatic fix for files that do not pass verification.)C:\windows\system32\winlogon.exe => File is digitally signedC:\windows\system32\wininit.exe => File is digitally signedC:\windows\SysWOW64\wininit.exe => File is digitally signedC:\windows\explorer.exe => File is digitally signedC:\windows\SysWOW64\explorer.exe => File is digitally signedC:\windows\system32\svchost.exe => File is digitally signedC:\windows\SysWOW64\svchost.exe => File is digitally signedC:\windows\system32\services.exe => File is digitally signedC:\windows\system32\User32.dll => File is digitally signedC:\windows\SysWOW64\User32.dll => File is digitally signedC:\windows\system32\userinit.exe => File is digitally signedC:\windows\SysWOW64\userinit.exe => File is digitally signedC:\windows\system32\rpcss.dll => File is digitally signedC:\windows\system32\dnsapi.dll => File is digitally signedC:\windows\SysWOW64\dnsapi.dll => File is digitally signedC:\windows\system32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2015-10-31 12:03==================== End of FRST.txt ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version:31-10-2015Ran by Chuck Rogers (2015-11-02 21:23:30)Running from C:\Users\Chuck Rogers\DesktopWindows 7 Home Premium Service Pack 1 (X64) (2015-01-12 05:09:01)Boot Mode: Normal============================================================================== Accounts: =============================Administrator (S-1-5-21-1350101312-2791638396-2936791211-500 - Administrator - Disabled)Chuck Rogers (S-1-5-21-1350101312-2791638396-2936791211-1000 - Administrator - Enabled) => C:\Users\Chuck RogersGuest (S-1-5-21-1350101312-2791638396-2936791211-501 - Limited - Disabled)==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}==================== Installed Programs ======================(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated)Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.1.53.64 - Adobe Systems Incorporated)Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)Adobe Reader 9.3 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A93000000001}) (Version: 9.3.0 - Adobe Systems Incorporated)ATI Catalyst Install Manager (HKLM\...\{BE3DFCA2-6F42-509D-555C-68A923314062}) (Version: 3.0.765.0 - ATI Technologies, Inc.)Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.4.2233 - AVAST Software)Best Buy pc app (Version: 3.0.0.0 - Best Buy) Hiddenccc-core-static (x32 Version: 2010.0315.1050.17562 - ATI) HiddenD3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) HiddenEpson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.4.0.0 - SEIKO EPSON CORPORATION)Epson Event Manager (HKLM-x32\...\{44F72193-F59C-4303-BAE8-E3E4BC1C122C}) (Version: 3.01.0003 - Seiko Epson Corporation)Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.46.00 - SEIKO EPSON CORPORATION)Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - )EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)EPSON WF-3530 Series Printer Uninstall (HKLM\...\EPSON WF-3530 Series) (Version: - SEIKO EPSON Corporation)EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)Fugawi Google Earth Plug-in Version 1.1.0.6 (HKLM-x32\...\Fugawi45_GE_is1) (Version: 4.5 - Northport Systems Inc.)FugVS2005 (HKLM-x32\...\{0C8364B1-AFD8-45B7-ACE8-B76113B6C418}) (Version: 1.0.0 - Northport Systems Inc.)Google Earth (HKLM-x32\...\{1A295C25-6E02-49FB-826B-F0D2C56FFA4E}) (Version: 7.1.4.1529 - Google)Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) HiddenGoogle Update Helper (x32 Version: 1.3.28.15 - Google Inc.) HiddenHitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.10.250 - SurfRight B.V.)HTC BMP USB Driver (HKLM-x32\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.16.0.001 - HTC Corporation)IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)Java 6 Update 17 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216017FF}) (Version: 6.0.170 - Sun Microsystems, Inc.)Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenLabel@Once 1.0 (HKLM-x32\...\{0D795777-9D60-4692-8386-F2B3F2B5E5BF}) (Version: 1.0 - Corel)Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)Navionics HotMaps - Lake Geneva WI (HKLM-x32\...\NavionicsHotMaps-HD-109_is1) (Version: 4.5 - Navionics Inc. and Northport Systems Inc.)Navionics HotMaps Explorer 4.5 (HKLM-x32\...\NavionicsHotMapsExplorer_is1) (Version: 4.5 - Navionics Inc. and Northport Systems Inc.)OTC Scanning Suite (HKLM-x32\...\{22F050C2-C916-4E47-ABFC-7A145B031BD4}) (Version: 4.001.0000 - OTC)PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.13.112.2010 - Realtek)Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.5992 - Realtek Semiconductor Corp.)Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6069 - Realtek Semiconductor Corp.)Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30111 - Realtek Semiconductor Corp.)Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0013 - REALTEK Semiconductor Corp.)Software Updater (HKLM-x32\...\{6DFBE8A2-CDBF-453E-B34C-32F202FCEE4C}) (Version: 4.2.1 - SEIKO EPSON CORPORATION) <==== ATTENTIONSynaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.8.1 - Synaptics Incorporated)TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.1 - TOSHIBA)TOSHIBA Assist (HKLM-x32\...\{1B87C40B-A60B-4EF3-9A68-706CF4B69978}) (Version: 3.00.11 - TOSHIBA CORPORATION)Toshiba Book Place (HKLM-x32\...\{BB51B753-9A0C-4D1D-B3EF-A1B936F55796}) (Version: 2.0.3977.0 - K-NFB Reading Technology, Inc.)TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{C14518AF-1A0F-4D39-8011-69BAA01CD380}) (Version: 1.6.07.64 - TOSHIBA Corporation)TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.2 for x64 - TOSHIBA Corporation)TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.2.11.64 - TOSHIBA Corporation)TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.3.64 - TOSHIBA Corporation)TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.0.6C - TOSHIBA CORPORATION)TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.0.22C - TOSHIBA CORPORATION)TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.6 - TOSHIBA Corporation)TOSHIBA Media Controller (HKLM-x32\...\{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}) (Version: 1.0.80.3.64 - TOSHIBA CORPORATION)TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.8.0 - TOSHIBA CORPORATION)TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.6.0.64 - TOSHIBA Corporation)TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.3 - TOSHIBA)TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.4 for x64 - TOSHIBA Corporation)TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{A0E99122-25C1-4CA4-9063-499A2A814EB6}) (Version: 1.6.06.64 - TOSHIBA Corporation)TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.9 - TOSHIBA)TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.0.9C - TOSHIBA CORPORATION)TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.3.3.64 - TOSHIBA Corporation)TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.15 - TOSHIBA Corporation)ToshibaRegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.4 - Toshiba)TurboTax 2014 (HKLM-x32\...\TurboTax 2014) (Version: 2014.0 - Intuit, Inc)Utility Common Driver (x32 Version: 1.0.52.1C - TOSHIBA) HiddenVC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) HiddenWindows Driver Package - FTDI CDM Driver Package (07/12/2010 2.08.02) (HKLM\...\7A3873EEB4807FBDE9271D1C3DA50F100D5B8A7D) (Version: 07/12/2010 2.08.02 - FTDI)Windows Driver Package - FTDI CDM Driver Package (07/12/2010 2.08.02) (HKLM\...\C6554C9DFBD939292E343034D2836B952A9D4B66) (Version: 07/12/2010 2.08.02 - FTDI)Windows Driver Package - SPX Service Solutions, Inc (usbser) Ports (01/07/2010 2.0.0) (HKLM\...\BA81E6D589C849EA72D1C2CF16057B36C83BAEA8) (Version: 01/07/2010 2.0.0 - SPX Service Solutions, Inc)Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)==================== Custom CLSID (Whitelisted): ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== Restore Points =========================06-10-2015 15:43:34 Windows Update08-10-2015 18:20:00 Windows Update13-10-2015 15:58:52 Windows Update13-10-2015 22:35:21 Windows Update17-10-2015 11:37:23 Windows Update20-10-2015 23:50:09 Windows Update30-10-2015 16:02:30 Scheduled Checkpoint30-10-2015 16:04:02 Windows Update31-10-2015 19:45:43 JRT Pre-Junkware Removal==================== Hosts content: ===============================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2009-07-13 20:34 - 2009-06-10 15:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts==================== Scheduled Tasks (Whitelisted) =============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)Task: {016C88F3-E949-4659-8B3B-95EA8BB008F7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> No File <==== ATTENTIONTask: {379B2579-184C-459B-9595-0C593A803035} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-09-24] (AVAST Software)Task: {54A89E75-9646-407B-9560-FA95ED3E6CE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> No File <==== ATTENTIONTask: {C7644EFB-9235-46A6-9E96-E1F787177D75} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTIONTask: {C9A9F74C-85BC-411D-8F34-C0A456382DEF} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exeTask: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> No File <==== ATTENTIONTask: {DC72C1BB-7867-4066-A8C6-09EC2BA2A5A4} - System32\Tasks\GoogleUpdateTaskMachineCore1d114ff1e3fd8d2 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)Task: {DD566739-3EFA-469F-895C-DF045C26366E} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> No File <==== ATTENTIONTask: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> No File <==== ATTENTIONTask: {FBA72CBE-1937-4C53-8282-78240E14497B} - System32\Tasks\GoogleUpdateTaskMachineUA1d114ff1eb6dd9f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\windows\Tasks\GoogleUpdateTaskMachineCore1d114ff1e3fd8d2.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\windows\Tasks\GoogleUpdateTaskMachineUA1d114ff1eb6dd9f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe==================== Loaded Modules (Whitelisted) ==============2013-10-17 14:27 - 2013-10-17 14:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe2010-03-03 16:15 - 2010-03-03 16:15 - 08762680 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll2009-11-03 15:26 - 2009-11-03 15:26 - 00053560 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll2010-03-03 16:15 - 2010-03-03 16:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll2010-03-03 16:15 - 2010-03-03 16:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll2010-07-22 18:50 - 2009-06-22 16:40 - 00022328 _____ () C:\Program Files\TOSHIBA\Toshiba Assist\NotifyX.dll2009-03-12 21:08 - 2009-03-12 21:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll2009-07-25 18:38 - 2009-07-25 18:38 - 00017800 _____ () C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll2009-10-13 12:00 - 2009-10-13 12:00 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll2015-01-11 23:34 - 2015-01-11 23:34 - 00270336 _____ () C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll2010-02-05 18:44 - 2010-02-05 18:44 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll2015-09-24 17:35 - 2015-09-24 17:35 - 00103376 _____ () C:\Program Files\AVAST Software\Avast\log.dll2015-09-24 17:35 - 2015-09-24 17:35 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll2015-11-02 18:31 - 2015-11-02 18:31 - 03014096 _____ () C:\Program Files\AVAST Software\Avast\defs\15110201\algo.dll==================== Alternate Data Streams (Whitelisted) =========(If an entry is included in the fixlist, only the ADS will be removed.)==================== Safe Mode (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)==================== EXE Association (Whitelisted) ===============(If an entry is included in the fixlist, the registry item will be restored to default or removed.)==================== Internet Explorer trusted/restricted ===============(If an entry is included in the fixlist, it will be removed from the registry.)==================== Other Areas ============================(Currently there is no automatic fix for this section.)HKU\S-1-5-21-1350101312-2791638396-2936791211-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Chuck Rogers\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpgDNS Servers: 192.168.10.1HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)Windows Firewall is enabled.==================== MSCONFIG/TASK MANAGER disabled items ==(Currently there is no automatic fix for this section.)MSCONFIG\startupfolder: C:^Users^Chuck Rogers^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Epson all-in-one Registration.lnk => C:\windows\pss\Epson all-in-one Registration.lnk.StartupMSCONFIG\startupreg: Best Buy pc app => C:\Users\Chuck Rogers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Best Buy\Best Buy pc app.appref-msMSCONFIG\startupreg: EPLTarget =>MSCONFIG\startupreg: FUFAXRCV => "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe"MSCONFIG\startupreg: FUFAXSTM => "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe"==================== FirewallRules (Whitelisted) ===============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [{8EB39B5A-3E9F-4000-B215-3E0F4EEF6526}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exeFirewallRules: [{4371D9FE-B23E-49F8-9590-F6503EDF1916}] => (Allow) svchost.exeFirewallRules: [{4FAD356A-677C-430D-8CC8-6976D1707F65}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exeFirewallRules: [{CFC5160B-554B-4177-A77B-81A1665F8092}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exeFirewallRules: [{089B37FD-C36C-43A9-A83D-E7DADB44E08B}] => (Allow) LPort=2869FirewallRules: [{DDD4897C-70C7-4863-B598-2054BB27BBC8}] => (Allow) LPort=1900FirewallRules: [{793550A2-F370-4706-BBAC-0F2F42ACE0A1}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exeFirewallRules: [{994240EE-05F2-4BF2-8B2B-F317086ECC65}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exeFirewallRules: [{2D8ADF22-7CA7-425C-9CF2-E88EEB386946}] => (Allow) C:\Users\Chuck Rogers\AppData\Local\Temp\WZSE0.TMP\Common\EpsonNet Setup\ENEasyApp.exeFirewallRules: [{76D5C2E4-041E-4F11-A996-915FF4D5C8B8}] => (Allow) C:\Users\Chuck Rogers\AppData\Local\Temp\WZSE0.TMP\Common\EpsonNet Setup\ENEasyApp.exeFirewallRules: [TCP Query User{652B49EB-D58F-4F7E-8341-044F68636C5F}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exeFirewallRules: [uDP Query User{19E00F48-05F5-429E-9383-310B0D6008B4}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exeFirewallRules: [{21D81A8C-53E0-4125-BD33-CA461D0F2F5F}] => (Allow) C:\Users\Chuck Rogers\AppData\Roaming\BitTorrent\BitTorrent.exeFirewallRules: [{E7B9C30C-5673-414E-BD8E-4F4C395F6268}] => (Allow) C:\Users\Chuck Rogers\AppData\Roaming\BitTorrent\BitTorrent.exeFirewallRules: [{834282D5-B89D-47C9-A5F8-E86A1EA0517C}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exeFirewallRules: [{B4B202E2-8DCC-44AC-B96E-BF9D951EAA65}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exeFirewallRules: [{8FE89CD4-BFC2-46BD-B4B1-FD0C2DCECA61}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exeFirewallRules: [{F4A3A778-DBFC-4631-A37B-D8825D828624}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exeFirewallRules: [{271D1AF3-D34C-4878-AD05-56E921FC9619}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exeFirewallRules: [{FBB78166-5346-4E44-81DA-DA1143A57257}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exeFirewallRules: [{AB2C5DEB-EC87-4F37-AA22-56FE45BF9AEB}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exeFirewallRules: [{B6410C59-D97D-4482-9D83-4239FEACBC95}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe==================== Faulty Device Manager Devices ================================= Event log errors: =========================Application errors:==================Error: (11/02/2015 07:54:30 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: runonce.exe, version: 6.1.7601.17514, time stamp: 0x4ce797ceFaulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000Exception code: 0xc0000005Fault offset: 0x0078de70Faulting process id: 0xf9cFaulting application start time: 0xrunonce.exe0Faulting application path: runonce.exe1Faulting module path: runonce.exe2Report Id: runonce.exe3Error: (11/02/2015 06:48:19 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program iexplore.exe version 11.0.9600.18057 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.Process ID: fc0Start Time: 01d115cee3bb71a0Termination Time: 0Application Path: C:\Program Files\Internet Explorer\iexplore.exeReport Id:Error: (11/02/2015 06:34:20 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )Description: 80004005Error: (11/02/2015 06:31:03 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: runonce.exe, version: 6.1.7601.17514, time stamp: 0x4ce797ceFaulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000Exception code: 0xc0000005Fault offset: 0x0257de70Faulting process id: 0xdbcFaulting application start time: 0xrunonce.exe0Faulting application path: runonce.exe1Faulting module path: runonce.exe2Report Id: runonce.exe3Error: (11/01/2015 11:15:48 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: iexplore.exe, version: 11.0.9600.18057, time stamp: 0x55f8d739Faulting module name: ntdll.dll, version: 6.1.7601.19018, time stamp: 0x560a0083Exception code: 0xc0000005Fault offset: 0x000000000004ac04Faulting process id: 0x2f0Faulting application start time: 0xiexplore.exe0Faulting application path: iexplore.exe1Faulting module path: iexplore.exe2Report Id: iexplore.exe3Error: (11/01/2015 09:39:03 PM) (Source: SideBySide) (EventID: 33) (User: )Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.Please use sxstrace.exe for detailed diagnosis.Error: (11/01/2015 05:37:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )Description: 80004005Error: (11/01/2015 12:42:31 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )Description: 80004005Error: (10/31/2015 09:29:59 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )Description: The following module failed to stop processing: PC Health Info Connection. Error: Operation failed.Error: (10/31/2015 09:29:59 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )Description: The following module failed to stop processing: Alerts. Error: Operation failed.System errors:=============Error: (11/02/2015 07:53:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The VBoxAsw Support Driver service failed to start due to the following error:%%3Error: (11/02/2015 07:53:28 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)Description: WLAN Extensibility Module has failed to start.Module Path: C:\windows\system32\Rtlihvs.dllError Code: 126Error: (11/02/2015 06:30:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The VBoxAsw Support Driver service failed to start due to the following error:%%3Error: (11/02/2015 06:29:52 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)Description: WLAN Extensibility Module has failed to start.Module Path: C:\windows\system32\Rtlihvs.dllError Code: 126Error: (11/01/2015 10:52:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The VBoxAsw Support Driver service failed to start due to the following error:%%3Error: (11/01/2015 10:51:44 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)Description: WLAN Extensibility Module has failed to start.Module Path: C:\windows\system32\Rtlihvs.dllError Code: 126Error: (11/01/2015 09:30:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The VBoxAsw Support Driver service failed to start due to the following error:%%3Error: (11/01/2015 09:30:30 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)Description: WLAN Extensibility Module has failed to start.Module Path: C:\windows\system32\Rtlihvs.dllError Code: 126Error: (11/01/2015 01:55:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The Google Update Service (gupdate) service failed to start due to the following error:%%1053Error: (11/01/2015 01:55:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: )Description: A timeout was reached (30000 milliseconds) while waiting for the Google Update Service (gupdate) service to connect.==================== Memory info ===========================Processor: AMD Phenom II N640 Dual-Core ProcessorPercentage of memory in use: 39%Total physical RAM: 3835.68 MBAvailable physical RAM: 2305.29 MBTotal Virtual: 7669.57 MBAvailable Virtual: 5766.48 MB==================== Drives ================================Drive c: (TI105955W0C) (Fixed) (Total:453.42 GB) (Free:365.72 GB) NTFS ==>[system with boot components (obtained from drive)]==================== MBR & Partition Table ==========================================================================Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 23AC1F85)Partition 1: (Active) - (Size=1.5 GB) - (Type=27)Partition 2: (Not Active) - (Size=453.4 GB) - (Type=07 NTFS)Partition 3: (Not Active) - (Size=10.9 GB) - (Type=17)==================== End of Addition.txt ============================ Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted November 3, 2015 ID:999413 Share Posted November 3, 2015 Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools. Link to post Share on other sites More sharing options...
Chgoenforcer Posted November 3, 2015 Author ID:999452 Share Posted November 3, 2015 Sorry about that, Here you go.Thank YouFRST.txt.txtAddition.txt.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted November 3, 2015 ID:999459 Share Posted November 3, 2015 Scan with ZOEKPlease download ZOEK by Smeenk and save it to your desktop.Temporary disable your AntiVirus and AntiSpyware protection - instructions here.Right-click on icon and select Run as Administrator to start the tool.Wait patiently until the main console will appear, it may take a minute or two.In the main box please paste in the following script:createsrpoint;autoclean;emptyclsid;emptyalltemp;ipconfig /flushdns >>"%temp%\log.txt";bMake sure that Scan All Users option is checked.Push Run Script and wait patiently. The scan may take a couple of minutes.When the scan completes, a zoek-results logfile should open in notepad.If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)Upload it in your next reply. Link to post Share on other sites More sharing options...
Chgoenforcer Posted November 4, 2015 Author ID:999567 Share Posted November 4, 2015 Here is the Zoek-Results.logzoek-results.log Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted November 4, 2015 ID:999599 Share Posted November 4, 2015 Zoek did not finish completely. Can you open C:\Zoek-results.log and see if reports is complete? Link to post Share on other sites More sharing options...
Chgoenforcer Posted November 5, 2015 Author ID:999799 Share Posted November 5, 2015 the zoek-results.log is attached I do not think it is running all the way thru, this is a copy & paste from program window, it never closes and it will say it is not complete started at 19:27 and hangs up at 19:38 3 hours later it is the same.... All antivirus etc... are disabled.please let me know what I need to do. Zoek.exe v5.0.0.1 Updated 03-November-2015Tool run by Chuck Rogers on Wed 11/04/2015 at 19:27:08.10.Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64Running in: Normal Mode Internet Access DetectedLaunched: C:\Users\Chuck Rogers\Desktop\zoek.exe [scan all users] [script inserted]===== Runcheck 19:27:47.71 =====--- Create Environment Variables 19:27:49.02--- Create System Restore Point 19:27:55.76--- Checking Input 19:28:26.51--- AU AppData Check 19:28:57.80--- Remove From Windows Installer 19:29:00.05--- Registry HKLM Software Check 19:30:35.41--- Quick Launch Shortcut Check 19:30:48.83--- IE Startpage Check 19:30:54.41--- Program Files DB Check 19:31:28.00--- C:\Users\Chuck Rogers\AppData\Roaming DB Check 19:32:11.15--- C:\Users\Default\AppData\Roaming DB Check 19:32:11.15--- C:\Users\Default User\AppData\Roaming DB Check 19:32:11.15--- C:\windows\SysNative\config\systemprofile\AppData\Roaming DB Check 19:32:11.15--- C:\windows\sysWoW64\config\systemprofile\AppData\Roaming DB Check 19:32:11.15--- C:\windows\serviceprofiles\networkservice\AppData\Roaming DB Check 19:32:11.15--- C:\windows\serviceprofiles\Localservice\AppData\Roaming DB Check 19:32:11.15--- C:\Users\Chuck Rogers DB Check 19:34:20.60--- C:\PROGRA~3 DB Check 19:34:36.74--- C:\Users\Administrator\AppData\Local DB Check 19:34:45.67--- C:\Users\Chuck Rogers\AppData\Local DB Check 19:34:45.67--- C:\Users\Default\AppData\Local DB Check 19:34:45.67--- C:\Users\Default User\AppData\Local DB Check 19:34:45.67--- C:\windows\SysNative\config\systemprofile\AppData\Local DB Check 19:34:45.67--- C:\windows\sysWoW64\config\systemprofile\AppData\Local DB Check 19:34:45.67--- C:\windows\serviceprofiles\networkservice\AppData\Local DB Check 19:34:45.67--- C:\windows\serviceprofiles\Localservice\AppData\Local DB Check 19:34:45.67--- C:\ProgramData\Microsoft\Windows\Start Menu\Programs DB Check 19:36:25.56--- C:\Users\Chuck Rogers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs DB Check 19:36:34.98--- Tasks DB Check 19:36:41.01--- Downloads DB Check 19:36:45.10--- C:\Users\Chuck Rogers\AppData\LocalLow DB Check 19:36:48.96--- C:\windows\SysNative\config\systemprofile\AppData\LocalLow DB Check 19:36:48.96--- C:\windows\sysWoW64\config\systemprofile\AppData\LocalLow DB Check 19:36:48.96--- C:\windows\serviceprofiles\networkservice\AppData\LocalLow DB Check 19:36:48.96--- C:\windows\serviceprofiles\Localservice\AppData\LocalLow DB Check 19:36:48.96--- Tasks2 DB Check 19:37:34.59--- Documents DB Check 19:38:04.33--- C:\Users\Public\Desktop DB Check 19:38:12.42--- C:\Users\Chuck Rogers\Desktop DB Check 19:38:17.08--- Services DB Check 19:38:25.89--- FF prefs.js DB Check 19:38:52.30--- Emptyclsid 19:38:53.26--- Del by CLSID 19:38:55.78zoek-results.log Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted November 5, 2015 ID:999871 Share Posted November 5, 2015 Can you delete Zoek, then download and run it again? Link to post Share on other sites More sharing options...
Chgoenforcer Posted November 6, 2015 Author ID:1000018 Share Posted November 6, 2015 I deleted and downloaded Zoek again - same results.I followed your instructions word by wordstarted at 17:41stopped at 17:56;Zoek is still running as of 19:02 same info as in prior reply, it never stops or closesany Ideas? Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted November 6, 2015 ID:1000088 Share Posted November 6, 2015 Don't know what is the cause. Scan with Farbar Recovery Scan Tool Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.Right-click on icon and select Run as Administrator to start the tool.(XP users click run after receipt of Windows Security Warning - Open File).Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please upload them into your next reply. Link to post Share on other sites More sharing options...
Chgoenforcer Posted November 6, 2015 Author ID:1000234 Share Posted November 6, 2015 Here you go.FRST.txtAddition.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted November 6, 2015 ID:1000247 Share Posted November 6, 2015 Fix with Farbar Recovery Scan Tool This fix was created for this user for use on that particular machine. Running it on another one may cause damage and render the system unstable. Download attached fixlist.txt file and save it to the Desktop: Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!Right-click on icon and select Run as Administrator to start the tool. (XP users click run after receipt of Windows Security Warning - Open File).Press the Fix button just once and wait.If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.When finished FRST will generate a log on the Desktop, called Fixlog.txt.Please attach it to your reply.fixlist.txt Link to post Share on other sites More sharing options...
Chgoenforcer Posted November 7, 2015 Author ID:1000261 Share Posted November 7, 2015 here you goFixlog.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted November 7, 2015 ID:1000343 Share Posted November 7, 2015 Good. How is your PC behaving now? Link to post Share on other sites More sharing options...
Chgoenforcer Posted November 7, 2015 Author ID:1000473 Share Posted November 7, 2015 so far no more pop ups!!!! Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted November 7, 2015 ID:1000511 Share Posted November 7, 2015 Since there are no more problems, we can declare this PC clean Now, we can proceed with post-cleanup procedures. Let's remove my tools and create a new, non infected restore point concurrently deleting old ones. Step 1. - Creation of system restore point and tools removal. Download DelFix by Xplode and save it to your desktop.Run the tool by right click on the icon and Run as administrator option.Make sure that these ones are checked:Remove disinfection toolsPurge system restoreReset system settingsPush Run and wait until the tool completes his work.All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt). I don't need it for review.Tool deletes old system restore points and creates a fresh system restore point after cleaning. Step 2. - Tips and tricks to keep your computer clean, safe and in a good shape. Security tips - highly recommended reading:Simple and easy ways to keep your computer safe and secure on the InternetMaintenance tips:Optimize Windows for better performanceAdditional software that I personally use and install on all my clients devices:Malwarebytes' Anti-Malware (paid version highly recommended) - to scan your system from time to time in search for malware.Malwarebytes' Anti-Exploit - to prevent plenty of mostly exploited vulnerabilities.McShield - to prevent infections spread by removable media.Unchecky - to prevent from installing additional foistware, implemented in legitimate installations.Adblock - to surf the web without annoying ads!Qualys BrowserCheck - cloud service that scans your browsers and plugins to see if they’re all up-to-date.My help is free for everybody. If you're happy with the help provided and/or wish to buy me a beer for the assistance you received, then you can consider a donation: Thank you! Stay safe, TwinHeadedEagle Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted November 11, 2015 Root Admin ID:1001119 Share Posted November 11, 2015 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts