Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SPIGOT VIRUS! PLEASE HELP!!


  • This topic is locked This topic is locked
17 replies to this topic

#1 callijo

callijo

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 30 January 2014 - 01:14 PM

Every time I open google chrome I get http://search.yahoo.com/?type=599486&fr=spigot-yhp-ch
I know this is a virus but I can't seem to get rid of it. Please help me!!


Cannot run DDS ...

Edited by boopme, 30 January 2014 - 01:57 PM.


BC AdBot (Login to Remove)

 


#2 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:05:49 AM

Posted 02 February 2014 - 08:15 PM



Hello callijo

I would like to welcome you to the Malware Removal section of the forum.

Around here they call me Gringo and I will be glad to help you with your malware problems.


Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!

  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not attach logs or use code boxes, just copy and paste the text.
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
  • Please read every post completely before doing anything.
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Please provide feedback about your experience as we go.
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.
NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.





I need to get some reports to get a base to start from so I need you to run these programs first.



-Download DDS-
  • Please download DDS from one of the links below and save it to your desktop:

    dds_scr.gif
    Download DDS and save it to your desktop

    Link1
    Link2
    Link3
    • Double-Click on dds.scr and a command window will appear. This is normal.
    • Shortly after two logs will appear:
      • DDS.txt
      • Attach.txt
    • A window will open instructing you save & post the logs
    • Save the logs to a convenient place such as your desktop
    • Copy the contents of both logs & post in your next reply
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#3 callijo

callijo
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 03 February 2014 - 12:18 PM

I mentioned in my first post that I can't download dds. I get this error "DDS is not meant to run in 'Compatibility Mode". The program shall now exit."



#4 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:05:49 AM

Posted 03 February 2014 - 12:51 PM


Hello callijo



Please download Farbar Recovery Scan Tool and save it to your desktop.


Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#5 callijo

callijo
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 03 February 2014 - 01:00 PM

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by Calli (administrator) on R2D2 on 03-02-2014 12:57:28
Running from C:\Users\Calli\Downloads
Windows 8.1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Dropbox, Inc.) C:\Users\Calli\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(OOO Industry) C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [678296 2012-07-09] (Alps Electric Co., Ltd.)
HKLM\...\Run: [QuickSet] - c:\Program Files\Dell\QuickSet\QuickSet.exe [4384928 2012-07-12] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-05-30] ()
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [11554688 2012-08-08] (Motorola Solutions, Inc.)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-07-24] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [277504 2012-07-09] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-04] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [143888 2012-06-01] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [PrivitizeVPN] - C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe [196784 2013-04-08] (OOO Industry)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [PSUAMain] - C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe [32736 2013-10-18] (Panda Security, S.L.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-987448196-2540284813-4176814040-1001\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-18] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-18] (NVIDIA Corporation)
Startup: C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Calli\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com
SearchScopes: HKLM - DefaultScope {C9757848-8E73-4D80-A6BF-0D4C587214E6} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MDDCJS
SearchScopes: HKLM - {C9757848-8E73-4D80-A6BF-0D4C587214E6} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MDDCJS
SearchScopes: HKLM-x32 - {C9757848-8E73-4D80-A6BF-0D4C587214E6} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MDDCJS
SearchScopes: HKCU - {5CC02B46-C0BA-4553-9ED7-46629F5F21C9} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=599486&p={searchTerms}
SearchScopes: HKCU - {C9757848-8E73-4D80-A6BF-0D4C587214E6} URL = 
SearchScopes: HKCU - {EC33FFDC-1FB2-4E68-B9A4-096AD023AC6D} URL = http://searchou.com/?q={searchTerms}&id=d6835e1e00000000000084a6c8f51672&r=859
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62
 
FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 - C:\Program Files\mcafee\msc\npMcSnFFPl64.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Calli\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-01-30]
FF Extension: HDvid Codec - C:\Users\Calli\AppData\Roaming\Mozilla\Firefox\profiles\extensions\hdvc@hdvc.com.xpi [2013-04-17]
FF HKLM\...\Firefox\Extensions: [{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}] - C:\Program Files\Updater By SweetPacks\Firefox
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
 
Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Angry Birds) - C:\Users\Calli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2013-04-19]
CHR Extension: (Lilly Pulitzer) - C:\Users\Calli\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbpppaoddgakkggpcadaefofdnbmfkcm [2013-04-19]
CHR Extension: (SlingPlayer Web Plug-in) - C:\Users\Calli\AppData\Local\Google\Chrome\User Data\Default\Extensions\lidgnhlbmoakdjkfhanbhfngcadpaiac [2013-09-08]
CHR Extension: (Google Wallet) - C:\Users\Calli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-11]
 
==================== Services (Whitelisted) =================
 
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe [140768 2013-10-02] (Panda Security, S.L.)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-10-31] (Microsoft Corporation)
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe [37344 2013-10-18] (Panda Security, S.L.)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1915408 2013-10-09] (SoftThinks SAS)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2014-01-09] (Enigma Software Group USA, LLC.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)
 
==================== Drivers (Whitelisted) ====================
 
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Windows ® Win 7 DDK provider)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2012-08-04] (OSR Open Systems Resources, Inc.)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [14872 2014-01-07] ()
S2 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-10] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106112 2012-11-09] (McAfee, Inc.)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation)
R1 NNSALPC; C:\Windows\system32\DRIVERS\NNSALPC.sys [91368 2013-05-28] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\system32\DRIVERS\NNSHTTP.sys [122088 2013-05-28] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\system32\DRIVERS\NNSHTTPS.sys [109288 2013-05-28] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\system32\DRIVERS\NNSIDS.sys [114920 2013-05-28] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\system32\DRIVERS\NNSPICC.sys [95464 2013-05-28] (Panda Security, S.L.)
S4 NNSPIHSW; C:\Windows\system32\DRIVERS\NNSPIHSW.sys [69864 2013-05-28] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\system32\DRIVERS\NNSPOP3.sys [119016 2013-05-28] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\system32\DRIVERS\NNSPROT.sys [305896 2013-05-28] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\system32\DRIVERS\NNSPRV.sys [118504 2013-05-28] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\system32\DRIVERS\NNSSMTP.sys [114920 2013-05-28] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\system32\DRIVERS\NNSSTRM.sys [246504 2013-05-28] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\system32\DRIVERS\NNSTLSC.sys [106216 2013-05-28] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\system32\DRIVERS\PSINAflt.sys [169192 2013-10-17] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [122600 2013-10-11] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\system32\DRIVERS\PSINKNC.sys [206056 2013-10-11] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124648 2013-10-11] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\system32\DRIVERS\PSINProt.sys [137960 2013-10-11] (Panda Security, S.L.)
S3 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [105704 2013-10-11] (Panda Security, S.L.)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [58808 2013-04-28] (Panda Security, S.L.)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-25] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-13] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows ® Win 7 DDK provider)
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-02-03 12:57 - 2014-02-03 12:57 - 00022362 _____ () C:\Users\Calli\Downloads\FRST.txt
2014-02-03 12:57 - 2014-02-03 12:57 - 00000000 ____D () C:\FRST
2014-02-03 12:56 - 2014-02-03 12:56 - 02080256 _____ (Farbar) C:\Users\Calli\Downloads\FRST64.exe
2014-02-03 12:17 - 2014-02-03 12:17 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (1).scr
2014-02-03 12:16 - 2014-02-03 12:16 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (4).com
2014-02-03 12:16 - 2014-02-03 12:16 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-987448196-2540284813-4176814040-1002
2014-02-03 12:15 - 2014-02-03 12:16 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds.scr
2014-02-03 12:08 - 2013-04-28 23:17 - 00058808 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSKMAD.sys
2014-01-30 23:31 - 2014-01-30 23:31 - 00000000 ____D () C:\Users\Calli\AppData\Local\Skype
2014-01-30 23:30 - 2014-02-03 12:00 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Skype
2014-01-30 23:27 - 2014-01-30 23:27 - 00002713 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-30 23:27 - 2014-01-30 23:27 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-30 23:23 - 2014-01-30 23:30 - 00000000 ____D () C:\ProgramData\Skype
2014-01-30 23:19 - 2014-01-30 23:23 - 35671200 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetupFull (1).exe
2014-01-30 23:19 - 2014-01-30 23:19 - 35671200 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetupFull.exe
2014-01-30 23:19 - 2014-01-30 23:19 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetup (1).exe
2014-01-30 23:16 - 2014-01-30 23:16 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetup.exe
2014-01-30 13:29 - 2014-01-30 13:29 - 00001123 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Malwarebytes
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-30 13:29 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-01-30 13:28 - 2014-01-30 13:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Calli\Downloads\mbam-setup-1.75.0.1300 (1).exe
2014-01-30 13:24 - 2014-01-30 13:24 - 01037068 _____ (Thisisu) C:\Users\Calli\Downloads\JRT.exe
2014-01-30 13:20 - 2014-01-30 13:25 - 00000000 ____D () C:\AdwCleaner
2014-01-30 13:19 - 2014-01-30 13:19 - 01166132 _____ () C:\Users\Calli\Downloads\adwcleaner.exe
2014-01-30 13:14 - 2014-01-30 13:14 - 00000133 _____ () C:\Users\Calli\AppData\Roaming\WB.CFG
2014-01-30 13:14 - 2014-01-30 13:14 - 00000005 _____ () C:\Users\Calli\AppData\Roaming\WBPU-TTL.DAT
2014-01-30 13:13 - 2014-01-30 10:46 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\DigitalSites
2014-01-30 13:01 - 2014-01-30 13:07 - 00524015 _____ (Malwarebytes Corporation ) C:\Users\Calli\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-30 12:08 - 2014-01-30 12:08 - 00002272 _____ () C:\Users\Calli\Desktop\SpyHunter.lnk
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\sh4ldr
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 _____ () C:\autoexec.bat
2014-01-30 12:08 - 2012-06-22 11:01 - 00022704 _____ () C:\WINDOWS\system32\Drivers\EsgScanner.sys
2014-01-30 12:07 - 2014-01-30 12:08 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-01-30 11:58 - 2014-01-30 11:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Calli\Downloads\SpyHunter-Installer.exe
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Panda Security
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\ProgramData\Panda Security
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\Program Files (x86)\Panda Security
2014-01-30 11:48 - 2013-10-17 11:31 - 00169192 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINAflt.sys
2014-01-30 11:48 - 2013-10-11 01:46 - 00206056 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINKNC.sys
2014-01-30 11:48 - 2013-10-11 01:46 - 00137960 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINProt.sys
2014-01-30 11:46 - 2014-01-30 11:46 - 00845944 _____ () C:\Users\Calli\Downloads\PandaCloudAntivirus.exe
2014-01-30 11:01 - 2014-01-30 11:01 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (3).com
2014-01-30 10:56 - 2014-01-30 10:56 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (2).com
2014-01-30 10:53 - 2014-01-30 10:53 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (1).com
2014-01-30 10:52 - 2014-01-30 10:52 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds.com
2014-01-29 19:26 - 2014-01-29 19:26 - 00272720 _____ (My Company) C:\Users\Calli\Downloads\Setup_ODM (1).exe
2014-01-29 19:18 - 2014-01-30 10:49 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Open Download Manager
2014-01-29 19:18 - 2014-01-29 19:28 - 00001081 _____ () C:\Users\UpdatusUser\Desktop\OpenDownloaderManager.lnk
2014-01-29 19:15 - 2014-01-29 19:15 - 00272720 _____ (My Company) C:\Users\Calli\Downloads\Setup_ODM.exe
2014-01-29 19:06 - 2014-01-30 11:37 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\uTorrent
2014-01-29 19:05 - 2014-01-29 19:05 - 01307736 _____ (BitTorrent Inc.) C:\Users\Calli\Downloads\utorrent.exe
2014-01-27 18:19 - 2014-01-27 18:19 - 00016704 _____ () C:\Users\Calli\Downloads\perendies1.2.txt
2014-01-26 16:59 - 2014-01-26 16:59 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-26 16:58 - 2014-01-26 16:59 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-26 16:58 - 2014-01-26 16:59 - 00000000 ____D () C:\Program Files\iTunes
2014-01-26 16:58 - 2014-01-26 16:59 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-26 16:58 - 2014-01-26 16:58 - 00000000 ____D () C:\Program Files\iPod
2014-01-25 12:46 - 2014-01-25 12:46 - 00294568 _____ (VLCPlayer) C:\Users\Calli\Downloads\HD_Player__CD5MTCD15543_0_0_0_0_b47088829c5ea3bbab1575703f98b1d64b5d93ef-78-3.exe
2014-01-22 15:04 - 2014-01-22 15:04 - 00109192 _____ () C:\Users\Calli\Downloads\Setup (4).exe
2014-01-21 15:43 - 2014-01-21 15:43 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-21 15:43 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-01-21 15:43 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-01-21 15:43 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-01-21 15:43 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-01-21 15:42 - 2014-01-21 15:43 - 00005765 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-21 15:39 - 2014-01-21 15:41 - 00921000 _____ (Oracle Corporation) C:\Users\Calli\Downloads\chromeinstall-7u51.exe
2014-01-17 11:45 - 2013-12-08 16:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-17 11:45 - 2013-11-27 07:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-17 11:45 - 2013-11-27 03:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-17 11:45 - 2013-11-27 02:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-17 11:45 - 2013-11-27 01:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-17 11:45 - 2013-11-27 00:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-17 11:45 - 2013-11-27 00:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-17 11:45 - 2013-11-27 00:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-17 11:45 - 2013-11-27 00:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-17 11:45 - 2013-11-27 00:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-17 11:45 - 2013-11-27 00:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-16 18:22 - 2014-01-16 18:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-16 18:22 - 2014-01-16 18:22 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-11 10:21 - 2013-11-10 18:48 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-01-11 10:21 - 2013-11-09 03:55 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-01-11 10:21 - 2013-11-08 22:37 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-01-11 10:21 - 2013-11-08 21:56 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2014-01-11 10:21 - 2013-11-08 02:26 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-01-11 10:21 - 2013-11-07 20:43 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-01-11 10:21 - 2013-11-07 20:28 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-01-11 10:21 - 2013-11-07 20:26 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-01-11 10:21 - 2013-11-07 20:16 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-01-11 10:21 - 2013-11-07 20:15 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-01-11 10:21 - 2013-11-07 20:07 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-11 10:21 - 2013-11-07 19:41 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-01-11 10:21 - 2013-11-07 19:14 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-01-11 10:21 - 2013-11-05 06:19 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-01-11 10:21 - 2013-11-05 06:03 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-11 10:21 - 2013-11-05 05:57 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-11 10:21 - 2013-11-05 05:33 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-11 10:21 - 2013-11-05 05:32 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-11 10:21 - 2013-11-04 09:13 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-01-11 10:21 - 2013-11-04 09:13 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-01-11 10:21 - 2013-11-04 05:07 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-01-11 10:21 - 2013-11-04 03:50 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-01-11 10:21 - 2013-11-04 02:32 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-01-11 10:21 - 2013-11-03 18:28 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-01-11 10:21 - 2013-11-03 17:30 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-01-11 10:21 - 2013-11-01 03:39 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-01-11 10:21 - 2013-10-31 22:08 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-01-11 10:21 - 2013-10-31 21:57 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2014-01-11 10:21 - 2013-10-30 16:58 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-01-11 10:21 - 2013-10-30 16:42 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-01-11 10:21 - 2013-10-30 16:33 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-01-11 10:21 - 2013-10-30 16:33 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-01-11 10:21 - 2013-10-30 16:33 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-01-11 10:21 - 2013-10-30 16:33 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-01-11 10:21 - 2013-10-25 17:54 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2014-01-11 10:21 - 2013-10-24 01:31 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-01-11 10:21 - 2013-10-24 01:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-01-11 10:21 - 2013-10-17 03:21 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-01-11 10:21 - 2013-10-17 02:36 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-01-11 10:21 - 2013-10-05 06:21 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-01-11 10:21 - 2013-10-05 06:21 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-01-11 10:21 - 2013-10-05 04:05 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-01-11 10:21 - 2013-10-05 04:05 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-01-11 10:19 - 2013-10-19 00:53 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-01-11 10:19 - 2013-10-18 23:14 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-01-11 10:18 - 2013-11-26 03:54 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-01-11 10:18 - 2013-11-26 02:11 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-01-11 10:18 - 2013-11-26 01:41 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-01-11 10:18 - 2013-11-26 00:57 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-01-11 10:18 - 2013-11-26 00:38 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-01-11 10:18 - 2013-11-26 00:35 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-01-11 10:18 - 2013-11-26 00:16 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-01-11 10:18 - 2013-11-26 00:02 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-01-11 10:18 - 2013-11-25 23:48 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-01-11 10:18 - 2013-11-25 23:32 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-01-11 10:18 - 2013-11-25 23:26 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-01-11 10:18 - 2013-11-25 23:07 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-01-11 10:18 - 2013-11-25 22:40 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-01-11 10:18 - 2013-11-25 22:34 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-01-11 10:18 - 2013-11-25 22:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-01-11 10:18 - 2013-11-25 22:33 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-01-11 10:18 - 2013-11-25 22:27 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-01-11 10:18 - 2013-11-22 20:34 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-01-11 10:18 - 2013-11-22 20:13 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-01-11 10:18 - 2013-11-22 19:32 - 04105728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-11 10:18 - 2013-11-22 19:10 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-01-11 10:18 - 2013-11-08 22:34 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-01-11 10:18 - 2013-11-08 22:34 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-01-11 10:18 - 2013-11-08 21:52 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2014-01-11 10:18 - 2013-11-07 23:21 - 04191744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-11 10:18 - 2013-10-15 00:54 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-01-11 10:18 - 2013-10-15 00:03 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-01-10 15:11 - 2014-01-18 23:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-07 18:10 - 2014-01-07 18:10 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-01-07 17:52 - 2014-01-30 10:49 - 00000000 ___RD () C:\Users\Calli\SkyDrive
2014-01-07 17:49 - 2014-01-07 17:49 - 00001444 _____ () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-07 17:48 - 2014-01-07 17:48 - 00000020 ___SH () C:\Users\Calli\ntuser.ini
2014-01-07 17:40 - 2014-02-03 12:27 - 01328898 _____ () C:\WINDOWS\WindowsUpdate.log
2014-01-07 17:40 - 2014-01-07 17:40 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-01-07 17:26 - 2014-01-07 17:26 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-01-07 17:26 - 2014-01-07 17:26 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-01-07 17:23 - 2014-01-07 17:23 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-01-07 17:22 - 2014-02-03 12:10 - 00000000 ____D () C:\Users\Calli
2014-01-07 17:22 - 2014-01-07 17:23 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-07 17:22 - 2014-01-07 17:23 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-07 17:21 - 2014-01-07 17:40 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-01-07 17:21 - 2014-01-07 17:40 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-01-07 17:17 - 2014-01-07 17:17 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-01-07 17:16 - 2014-01-07 18:09 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-07 17:16 - 2014-01-07 17:25 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____D () C:\Program Files\DellTPad
2014-01-07 17:16 - 2013-12-21 00:02 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-01-07 17:16 - 2013-12-21 00:02 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-01-07 17:16 - 2013-10-23 00:20 - 06669600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 03489568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 03426956 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-01-07 17:16 - 2013-10-23 00:20 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-01-07 17:16 - 2013-10-23 00:20 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-01-07 17:14 - 2014-01-08 10:27 - 00000000 ___DC () C:\WINDOWS\Panther
2014-01-07 17:14 - 2014-01-07 17:14 - 00000000 __SHD () C:\Recovery
2014-01-07 17:12 - 2014-01-07 17:12 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files\MSBuild
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-01-07 17:09 - 2013-08-02 20:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-01-07 17:09 - 2013-08-02 20:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-01-07 17:09 - 2013-08-02 20:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-01-07 17:09 - 2013-08-02 20:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-01-07 17:09 - 2013-08-02 20:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-01-07 17:09 - 2013-08-02 20:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-01-07 16:34 - 2014-01-07 17:40 - 00006603 _____ () C:\WINDOWS\comsetup.log
 
==================== One Month Modified Files and Folders =======
 
2014-02-03 12:57 - 2014-02-03 12:57 - 00022362 _____ () C:\Users\Calli\Downloads\FRST.txt
2014-02-03 12:57 - 2014-02-03 12:57 - 00000000 ____D () C:\FRST
2014-02-03 12:56 - 2014-02-03 12:56 - 02080256 _____ (Farbar) C:\Users\Calli\Downloads\FRST64.exe
2014-02-03 12:27 - 2014-01-07 17:40 - 01328898 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-03 12:17 - 2014-02-03 12:17 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (1).scr
2014-02-03 12:17 - 2012-11-19 15:57 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-02-03 12:16 - 2014-02-03 12:16 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (4).com
2014-02-03 12:16 - 2014-02-03 12:16 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-987448196-2540284813-4176814040-1002
2014-02-03 12:16 - 2014-02-03 12:15 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds.scr
2014-02-03 12:12 - 2013-11-13 23:28 - 00865408 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-03 12:11 - 2013-03-19 18:29 - 00000000 ___RD () C:\Users\Calli\Dropbox
2014-02-03 12:11 - 2013-03-19 18:26 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Dropbox
2014-02-03 12:10 - 2014-01-07 17:22 - 00000000 ____D () C:\Users\Calli
2014-02-03 12:08 - 2013-08-22 06:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-03 12:07 - 2013-08-22 06:44 - 00525832 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-02-03 12:02 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-03 12:00 - 2014-01-30 23:30 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Skype
2014-01-30 23:31 - 2014-01-30 23:31 - 00000000 ____D () C:\Users\Calli\AppData\Local\Skype
2014-01-30 23:30 - 2014-01-30 23:23 - 00000000 ____D () C:\ProgramData\Skype
2014-01-30 23:27 - 2014-01-30 23:27 - 00002713 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-30 23:27 - 2014-01-30 23:27 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-30 23:23 - 2014-01-30 23:19 - 35671200 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetupFull (1).exe
2014-01-30 23:19 - 2014-01-30 23:19 - 35671200 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetupFull.exe
2014-01-30 23:19 - 2014-01-30 23:19 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetup (1).exe
2014-01-30 23:16 - 2014-01-30 23:16 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetup.exe
2014-01-30 13:29 - 2014-01-30 13:29 - 00001123 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Malwarebytes
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-30 13:28 - 2014-01-30 13:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Calli\Downloads\mbam-setup-1.75.0.1300 (1).exe
2014-01-30 13:25 - 2014-01-30 13:20 - 00000000 ____D () C:\AdwCleaner
2014-01-30 13:25 - 2013-08-22 05:25 - 01310720 ___SH () C:\WINDOWS\system32\config\BBI
2014-01-30 13:24 - 2014-01-30 13:24 - 01037068 _____ (Thisisu) C:\Users\Calli\Downloads\JRT.exe
2014-01-30 13:19 - 2014-01-30 13:19 - 01166132 _____ () C:\Users\Calli\Downloads\adwcleaner.exe
2014-01-30 13:14 - 2014-01-30 13:14 - 00000133 _____ () C:\Users\Calli\AppData\Roaming\WB.CFG
2014-01-30 13:14 - 2014-01-30 13:14 - 00000005 _____ () C:\Users\Calli\AppData\Roaming\WBPU-TTL.DAT
2014-01-30 13:07 - 2014-01-30 13:01 - 00524015 _____ (Malwarebytes Corporation ) C:\Users\Calli\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-30 12:08 - 2014-01-30 12:08 - 00002272 _____ () C:\Users\Calli\Desktop\SpyHunter.lnk
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\sh4ldr
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 _____ () C:\autoexec.bat
2014-01-30 12:08 - 2014-01-30 12:07 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-01-30 12:00 - 2013-12-20 09:23 - 00000000 ____D () C:\ProgramData\Sony
2014-01-30 11:58 - 2014-01-30 11:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Calli\Downloads\SpyHunter-Installer.exe
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Panda Security
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\ProgramData\Panda Security
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\Program Files (x86)\Panda Security
2014-01-30 11:46 - 2014-01-30 11:46 - 00845944 _____ () C:\Users\Calli\Downloads\PandaCloudAntivirus.exe
2014-01-30 11:39 - 2012-12-30 14:31 - 00002277 _____ () C:\Users\Calli\Desktop\Google Chrome.lnk
2014-01-30 11:37 - 2014-01-29 19:06 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\uTorrent
2014-01-30 11:01 - 2014-01-30 11:01 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (3).com
2014-01-30 10:56 - 2014-01-30 10:56 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (2).com
2014-01-30 10:53 - 2014-01-30 10:53 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (1).com
2014-01-30 10:52 - 2014-01-30 10:52 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds.com
2014-01-30 10:51 - 2013-08-22 06:46 - 00333870 _____ () C:\WINDOWS\setupact.log
2014-01-30 10:49 - 2014-01-29 19:18 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Open Download Manager
2014-01-30 10:49 - 2014-01-07 17:52 - 00000000 ___RD () C:\Users\Calli\SkyDrive
2014-01-30 10:47 - 2013-11-13 23:20 - 00017184 _____ () C:\WINDOWS\PFRO.log
2014-01-30 10:46 - 2014-01-30 13:13 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\DigitalSites
2014-01-30 01:10 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-29 19:40 - 2013-11-02 22:27 - 00000000 ____D () C:\Users\Calli\AppData\Local\Windows Live
2014-01-29 19:28 - 2014-01-29 19:18 - 00001081 _____ () C:\Users\UpdatusUser\Desktop\OpenDownloaderManager.lnk
2014-01-29 19:26 - 2014-01-29 19:26 - 00272720 _____ (My Company) C:\Users\Calli\Downloads\Setup_ODM (1).exe
2014-01-29 19:15 - 2014-01-29 19:15 - 00272720 _____ (My Company) C:\Users\Calli\Downloads\Setup_ODM.exe
2014-01-29 19:05 - 2014-01-29 19:05 - 01307736 _____ (BitTorrent Inc.) C:\Users\Calli\Downloads\utorrent.exe
2014-01-28 20:05 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-01-28 17:51 - 2012-12-27 14:28 - 00000000 ____D () C:\Users\Calli\AppData\Local\Packages
2014-01-27 18:19 - 2014-01-27 18:19 - 00016704 _____ () C:\Users\Calli\Downloads\perendies1.2.txt
2014-01-26 21:35 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-01-26 20:39 - 2013-01-28 04:49 - 00000157 _____ () C:\WINDOWS\SysWOW64\SystemPreferences.xml
2014-01-26 16:59 - 2014-01-26 16:59 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-26 16:59 - 2014-01-26 16:58 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-26 16:59 - 2014-01-26 16:58 - 00000000 ____D () C:\Program Files\iTunes
2014-01-26 16:59 - 2014-01-26 16:58 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-26 16:58 - 2014-01-26 16:58 - 00000000 ____D () C:\Program Files\iPod
2014-01-26 16:56 - 2012-12-27 22:25 - 00000000 ____D () C:\ProgramData\Apple
2014-01-25 12:46 - 2014-01-25 12:46 - 00294568 _____ (VLCPlayer) C:\Users\Calli\Downloads\HD_Player__CD5MTCD15543_0_0_0_0_b47088829c5ea3bbab1575703f98b1d64b5d93ef-78-3.exe
2014-01-22 15:04 - 2014-01-22 15:04 - 00109192 _____ () C:\Users\Calli\Downloads\Setup (4).exe
2014-01-21 15:43 - 2014-01-21 15:43 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-21 15:43 - 2014-01-21 15:42 - 00005765 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-21 15:43 - 2013-07-12 12:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-21 15:41 - 2014-01-21 15:39 - 00921000 _____ (Oracle Corporation) C:\Users\Calli\Downloads\chromeinstall-7u51.exe
2014-01-21 15:41 - 2012-11-19 15:54 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-18 23:38 - 2014-01-10 15:11 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 21:11 - 2013-07-23 11:50 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-17 21:08 - 2012-12-28 14:38 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-17 20:08 - 2013-12-05 16:47 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-01-17 13:42 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-01-16 18:32 - 2012-12-27 14:30 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 18:31 - 2013-03-19 18:29 - 00001067 _____ () C:\Users\Calli\Desktop\Dropbox.lnk
2014-01-16 18:31 - 2013-03-19 18:27 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 18:26 - 2013-08-22 07:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-01-16 18:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-01-16 18:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-01-16 18:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-01-16 18:22 - 2014-01-16 18:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-16 18:22 - 2014-01-16 18:22 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-15 02:03 - 2013-05-31 13:59 - 00000000 ____D () C:\Program Files\My Dell
2014-01-15 02:03 - 2012-11-19 15:49 - 00000000 ____D () C:\ProgramData\PCDr
2014-01-11 11:17 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-01-08 10:27 - 2014-01-07 17:14 - 00000000 ___DC () C:\WINDOWS\Panther
2014-01-07 18:10 - 2014-01-07 18:10 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-01-07 18:10 - 2012-11-19 15:34 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-07 18:09 - 2014-01-07 17:16 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-07 18:04 - 2012-11-19 15:42 - 00000000 ____D () C:\Program Files\Intel
2014-01-07 17:52 - 2013-12-05 17:00 - 00000000 ___RD () C:\Users\Calli\SkyDrive.old
2014-01-07 17:49 - 2014-01-07 17:49 - 00001444 _____ () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-07 17:49 - 2012-12-27 14:30 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-07 17:48 - 2014-01-07 17:48 - 00000020 ___SH () C:\Users\Calli\ntuser.ini
2014-01-07 17:40 - 2014-01-07 17:40 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-01-07 17:40 - 2014-01-07 17:21 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-01-07 17:40 - 2014-01-07 17:21 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-01-07 17:40 - 2014-01-07 16:34 - 00006603 _____ () C:\WINDOWS\comsetup.log
2014-01-07 17:40 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-01-07 17:34 - 2013-08-22 07:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-01-07 17:34 - 2013-08-22 07:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-01-07 17:34 - 2012-11-19 16:08 - 00880342 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-01-07 17:28 - 2013-08-22 05:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-01-07 17:28 - 2013-08-22 05:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-01-07 17:28 - 2013-04-08 16:20 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PrivitizeVPN
2014-01-07 17:28 - 2012-11-19 16:00 - 00000000 ____D () C:\WINDOWS\en
2014-01-07 17:26 - 2014-01-07 17:26 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-01-07 17:26 - 2014-01-07 17:26 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-01-07 17:26 - 2013-11-13 23:14 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-01-07 17:26 - 2013-11-13 23:14 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-01-07 17:26 - 2013-11-13 23:14 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-01-07 17:26 - 2013-08-22 07:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-01-07 17:26 - 2013-08-22 05:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-01-07 17:26 - 2013-08-22 05:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-01-07 17:26 - 2012-11-19 15:42 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-01-07 17:26 - 2012-07-25 21:37 - 00000000 ____D () C:\Users\Default.migrated
2014-01-07 17:25 - 2014-01-07 17:16 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-07 17:25 - 2013-08-22 07:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-01-07 17:25 - 2013-08-22 07:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-01-07 17:25 - 2013-08-22 07:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-01-07 17:25 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\Help
2014-01-07 17:25 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-01-07 17:25 - 2012-12-27 14:28 - 00000000 ____D () C:\ProgramData\PRICache
2014-01-07 17:23 - 2014-01-07 17:23 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-01-07 17:23 - 2014-01-07 17:22 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-07 17:23 - 2014-01-07 17:22 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-07 17:23 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-01-07 17:17 - 2014-01-07 17:17 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-01-07 17:17 - 2013-08-22 06:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____D () C:\Program Files\DellTPad
2014-01-07 17:14 - 2014-01-07 17:14 - 00000000 __SHD () C:\Recovery
2014-01-07 17:14 - 2013-08-22 05:36 - 00000000 __RHD () C:\Users\Default
2014-01-07 17:13 - 2013-08-22 07:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-01-07 17:12 - 2014-01-07 17:12 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files\MSBuild
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-01-07 17:00 - 2012-12-27 14:28 - 01148585 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-01-07 13:09 - 2012-07-26 00:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-01-07 13:07 - 2012-12-30 23:26 - 00723968 ___SH () C:\Users\Calli\Downloads\Thumbs.db
2014-01-06 14:31 - 2013-08-22 07:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 14:31 - 2013-08-22 07:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
 
Some content of TEMP:
====================
C:\Users\Calli\AppData\Local\Temp\MachineIdComponents.exe
C:\Users\Calli\AppData\Local\Temp\Quarantine.exe
C:\Users\Calli\AppData\Local\Temp\SHSetup.exe
 
 
==================== Bamital & volsnap Check =================
 
 
 
 
ADDITIONAL SCAN
 
 
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04
Ran by Calli at 2014-02-03 12:57:58
Running from C:\Users\Calli\Downloads
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
AV: Panda Cloud Antivirus (Enabled - Up to date) {5FD6C936-849B-5CE2-14BA-709E1D6FD1DA}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Panda Cloud Antivirus (Enabled - Up to date) {E4B728D2-A2A1-536C-2E0A-4BEC66E89B67}
FW: Cloud Antivirus Firewall (Disabled) {67ED4813-CEF4-5DBA-3FE5-D9ABE3BC96A1}
 
==================== Installed Programs ======================
 
Adobe Reader XI (11.0.06) (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Amazon Browser App (x32 Version: 1.0.0.0 - Amazon)
Apple Application Support (x32 Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Compatibility Pack for the 2007 Office system (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink LabelPrint 2.5 (x32 Version: 2.5.5415a - CyberLink Corp.) Hidden
CyberLink Media Suite 10 (x32 Version: 10.0.1.1913 - CyberLink Corp.) Hidden
CyberLink Media Suite Essentials (x32 Version: 10.0 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1904 - CyberLink Corp.) Hidden
CyberLink PowerDirector 10 (x32 Version: 10.0.1.1904 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (x32 Version: 10.0.4318.52 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Backup and Recovery - Support Software (x32 Version: 1.6.1.1 - Dell Inc.)
Dell Backup and Recovery (x32 Version: 1.6.1.1 - Dell Inc.)
Dell Touchpad (Version: 8.1200.101.209 - ALPS ELECTRIC CO., LTD.)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
ffdshow v1.2.4422 [2012-04-09] (x32 Version: 1.2.4422.0 - )
Google Chrome (x32 Version: 32.0.1700.102 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
iCloud (Version: 3.1.0.40 - Apple Inc.)
Intel® Control Center (x32 Version: 1.2.1.1008 - Intel Corporation)
Intel® Management Engine Components (x32 Version: 8.1.0.1252 - Intel Corporation)
Intel® PRO/Wireless Driver (Version: 16.01.5000.0577 - Intel Corporation) Hidden
Intel® Processor Graphics (x32 Version: 10.18.10.3379 - Intel Corporation)
Intel® PROSet/Wireless for Bluetooth® + High Speed (Version: 15.5.0.0344 - Intel Corporation)
Intel® PROSet/Wireless Software for Bluetooth® Technology (Version: 2.5.0.0248 - Motorola Solutions, Inc)
Intel® Rapid Storage Technology (x32 Version: 11.5.0.1207 - Intel Corporation)
Intel® Turbo Boost Technology Monitor 2.6 (Version: 2.6.2.0 - Intel)
Intel® WiDi (Version: 3.5.34.0 - Intel Corporation)
Intel® PROSet/Wireless Software (x32 Version: 16.1.5 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (Version: 16.01.5000.0269 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Internet Explorer Toolbar 4.7 by SweetPacks (x32 Version: 4.7.0008 - SweetIM Technologies Ltd.) <==== ATTENTION
iTunes (Version: 11.1.4.62 - Apple Inc.)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
MagniPic (Version: 1.0 - ) <==== ATTENTION
Malwarebytes Anti-Malware version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 365 Home Premium - en-us (Version: 15.0.4551.1512 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU Version: 17.0.2015.0811 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
My Dell (Version: 3.4.6422.14 - PC-Doctor, Inc.)
Nancy Drew: Alibi in Ashes (x32 Version: 1.00 - Her Interactive)
Nancy Drew: Ghost of Thornton Hall (x32 Version: 1.00 - Her Interactive)
Nancy Drew: The Captive Curse (x32 Version: 1.00 - Her Interactive)
Nancy Drew: The Deadly Device (x32 Version: 1.00 - Her Interactive)
Nancy Drew: The Silent Spy (x32 Version: 8.0.0.30162 - Her Interactive, Inc.)
Nancy Drew: Tomb of the Lost Queen (x32 Version: 8.0.0.30162 - Her Interactive, Inc.)
NVIDIA Control Panel 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden
NVIDIA Graphics Driver 331.65 (Version: 331.65 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.15.2 (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update 1.15.2 (Version: 1.15.2 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1512 - Microsoft Corporation) Hidden
Origin (x32 Version: 9.1.3.2637 - Electronic Arts, Inc.)
Panda Cloud Antivirus (Version: 6.06.00.0000 - Panda Security) Hidden
Panda Cloud Antivirus (x32 Version: 02.03.00.0000 - Panda Security)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Plugin 7 (x32 Version: 7 - WebSource)
PrivitizeVPN (x32 Version: 1.0.0 - OOO Industry) <==== ATTENTION
Quickset64 (Version: 11.1.27 - Dell Inc.)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
RollerCoaster Tycoon 3 Platinum (x32 Version: 1.00.000 - Atari)
Shadow at the Waters Edge (x32 Version: 1.00.0000 - Valusoft Cosmi)
Shared C Run-time for x64 (Version: 10.0.0 - McAfee)
Skype™ 6.13 (x32 Version: 6.13.104 - Skype Technologies S.A.)
SpyHunter (Version: 4.17.6.4336 - Enigma Software Group USA, LLC)
The Sims™ 3 (x32 Version: 1.55.4 - Electronic Arts)
The Sims™ 3 Island Paradise (x32 Version: 19.0.101 - Electronic Arts)
The Sims™ 3 Showtime (x32 Version: 12.0.273 - Electronic Arts)
The Sims™ 3 University Life (x32 Version: 18.0.126 - Electronic Arts)
Trail of the Twister (x32 Version: 1.00.0000 - Valusoft Cosmi)
Updater By SweetPacks 2.0.0.609 (Version: 2.0.0.609 - SweetPacks) <==== ATTENTION
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
 
==================== Restore Points  =========================
 
11-01-2014 19:17:33 Windows Update
17-01-2014 04:35:51 Windows Update
21-01-2014 23:42:19 Installed Java 7 Update 51
30-01-2014 18:53:33 Removed SavetheChildren Reminder by We-Care.com v4.1.26.4
 
==================== Hosts content: ==========================
 
2013-08-22 05:25 - 2013-08-22 05:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0710A496-B853-4284-A806-E5FE8C808784} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-10-31] (Microsoft Corporation)
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {11E2F8F3-677B-4D54-B680-C08F0F6BA968} - \{B6F0D752-0DE8-487C-8247-DD993D105EA2} No Task File
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-21] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3FCAC83A-5726-4317-800A-324DC9D52DFE} - \PCDEventLauncherTask No Task File
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {56949A5F-B445-437C-BE61-8C743991522F} - \User_Feed_Synchronization-{132EEECC-68DA-479E-9C1E-86F36F881436} No Task File
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {736909A7-8878-422E-90B7-EDA1B826457F} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-01-14] (Microsoft Corporation)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {771A4146-D15E-4508-9778-D1BC3A50A249} - \PCDoctorBackgroundMonitorTask No Task File
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {880BC177-67C1-4FC2-9936-E6062BA516F1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {BB2B5797-F8DB-4F7C-A737-B1847D70CB73} - \SystemToolsDailyTest No Task File
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D6FEB108-ADD3-4883-A9FE-24C279045573} - \SpyHunter4Startup No Task File
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {EA0BB3E6-83EF-4EFF-9F7B-B0886369FD54} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-01-17] (Microsoft Corporation)
 
==================== Loaded Modules (whitelisted) =============
 
2014-01-14 05:27 - 2014-01-14 05:27 - 08866472 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2012-10-06 00:12 - 2012-10-06 00:12 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-01-10 15:23 - 2014-01-10 15:24 - 00183808 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\ErrorReporting.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-04-12 09:23 - 2013-04-12 09:23 - 00612664 _____ () C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\SQLite3.dll
2014-01-08 12:20 - 2014-01-08 12:20 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\06b95eda481d77daac1e10d1a7f48696\PSIClient.ni.dll
2013-10-18 15:55 - 2013-10-18 15:55 - 25100288 _____ () C:\Users\Calli\AppData\Roaming\Dropbox\bin\libcef.dll
2012-11-19 15:51 - 2012-06-07 19:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 09:34 - 2012-06-08 09:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2012-11-19 15:42 - 2012-06-25 08:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
2013-12-18 14:42 - 2013-12-18 14:42 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2014-01-27 18:08 - 2014-01-22 21:56 - 00715544 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libglesv2.dll
2014-01-27 18:08 - 2014-01-22 21:56 - 00100120 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libegl.dll
2014-01-27 18:08 - 2014-01-22 21:56 - 04055320 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll
2014-01-27 18:08 - 2014-01-22 21:57 - 00399640 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll
2014-01-27 18:08 - 2014-01-22 21:55 - 01634584 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ffmpegsumo.dll
2013-10-14 08:07 - 2013-10-11 13:21 - 01904928 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\STRestoreAPI.dll
2013-02-21 18:05 - 2012-11-25 20:20 - 01153384 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\libxml2.dll
2013-02-21 18:05 - 2012-11-25 20:20 - 00117608 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\zlib1.dll
2014-01-27 18:08 - 2014-01-22 21:56 - 13615896 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
AlternateDataStreams: C:\Users\Calli\SkyDrive:ms-properties
 
==================== Safe Mode (whitelisted) ===================
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSUAService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 
==================== Faulty Device Manager Devices =============
 
Name: USB-IF xHCI USB Host Controller
Description: USB-IF xHCI USB Host Controller
Class Guid: {8a2edc79-c759-46f2-88af-9d4efe3b5eee}
Manufacturer: Intel Corporation
Service: XHCIPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
 
 
==================== Event log errors: =========================
 
Could not start eventlog service, could not read events.
 
The requested service has already been started.
 
More help is available by typing NET HELPMSG 2182.
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 31%
Total physical RAM: 8048.93 MB
Available physical RAM: 5489.4 MB
Total Pagefile: 9328.93 MB
Available Pagefile: 6620.39 MB
Total Virtual: 131072 MB
Available Virtual: 131071.77 MB
 
==================== Drives ================================
 
Drive c: (OS) (Fixed) (Total:916.51 GB) (Free:802.27 GB) NTFS
Drive e: (ESP) (Fixed) (Total:0.48 GB) (Free:0.44 GB) FAT32
Drive x: () (Fixed) (Total:0.34 GB) (Free:0.05 GB) NTFS
Drive y: (PBR Image) (Fixed) (Total:13.52 GB) (Free:0.28 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: C6D892AB)
 
Partition: GPT Partition Type
==================== End Of Log ============================


#6 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:05:49 AM

Posted 03 February 2014 - 01:15 PM



Hello callijo

These are the programs I would like you to run next, if you have any problems with one of these just skip it and move on to the next one.

-AdwCleaner-

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
-Junkware-Removal-Tool-

Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
When they are complete let me have the two reports and let me know how things are running.

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#7 callijo

callijo
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 03 February 2014 - 02:21 PM

# AdwCleaner v3.018 - Report created 03/02/2014 at 14:09:08
# Updated 28/01/2014 by Xplode
# Operating System : Windows 8.1  (64 bits)
# Username : Calli - R2D2
# Running from : C:\Users\Calli\Downloads\AdwCleaner (1).exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v11.0.9600.16384
 
 
-\\ Mozilla Firefox v
 
[ File : C:\Users\Calli\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js ]
 
 
-\\ Google Chrome v32.0.1700.102
 
[ File : C:\Users\Calli\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
*************************
 
AdwCleaner[R0].txt - [7559 octets] - [30/01/2014 13:21:01]
AdwCleaner[R1].txt - [975 octets] - [03/02/2014 14:08:39]
AdwCleaner[S0].txt - [7183 octets] - [30/01/2014 13:25:08]
AdwCleaner[S1].txt - [897 octets] - [03/02/2014 14:09:08]
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 8.1 x64
Ran by Calli on Mon 02/03/2014 at 14:15:04.99
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-987448196-2540284813-4176814040-1002\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EC33FFDC-1FB2-4E68-B9A4-096AD023AC6D}
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
Successfully deleted: [Folder] "C:\Users\Calli\AppData\Roaming\getrighttogo"
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 02/03/2014 at 14:20:17.35
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
My computer seems to be running normally. Haven't had any issues yet.

Edited by callijo, 03 February 2014 - 02:22 PM.


#8 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:05:49 AM

Posted 03 February 2014 - 04:11 PM


Hello callijo,

I Would like you to do the following.

Please print out or make a copy in notepad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer

"information and logs"
  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#9 callijo

callijo
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 03 February 2014 - 04:25 PM

Got error message "ComboFox is not meant to run in 'Compatibility Mode.' The program shall now exit.



#10 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:05:49 AM

Posted 03 February 2014 - 04:39 PM





Hello callijo

Malwarebytes Anti-Rootkit

1.Download Malwarebytes Anti-Rootkit
2.Unzip the contents to a folder in a convenient location.
3.Open the folder where the contents were unzipped and run mbar.exe
4.Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
5.Click on the Cleanup button to remove any threats and reboot if prompted to do so.
6.Wait while the system shuts down and the cleanup process is performed.
7.Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
8.If no additional threats were found, verify that your system is now running normally, making sure that the following items are functional:
  • •Internet access
    •Windows Update
    •Windows Firewall
9.If there are additional problems with your system, such as any of those listed above or other system issues, then run the 'fixdamage' tool included with Malwarebytes Anti-Rootkit and reboot.
10.Verify that your system is now functioning normally.


--RogueKiller--

Download & SAVE to your Desktop RogueKiller for 32bit or Roguekiller for 64bit
  • Quit all programs that you may have started.
  • Please disconnect any external drives from the computer before you run this scan!
  • For Vista or Windows 7, right-click and select "Run as Administrator to start"
  • For Windows XP, double-click to start.
  • Wait until Prescan has finished ...
  • Then Click on "Scan" button
  • Wait until the Status box shows "Scan Finished"
  • click on "delete"
  • Wait until the Status box shows "Deleting Finished"
  • Click on "Report" and copy/paste the content of the Notepad into your next reply.
  • the scan will make two reports the one I would like to see is called RKreport[2].txt on your Desktop
  • Exit/Close RogueKiller+
send me the reports made from MBAR and Roguekiller and also let me know how the computer is doing at this time.

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#11 callijo

callijo
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 03 February 2014 - 04:57 PM

Malwarebytes found nothing & the links for roguekiller were not found.



#12 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:05:49 AM

Posted 03 February 2014 - 08:26 PM

Very good

Now please rerun the FRST program and send me a new report please


gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#13 callijo

callijo
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 03 February 2014 - 10:06 PM

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by Calli (administrator) on R2D2 on 03-02-2014 19:04:28
Running from C:\Users\Calli\Downloads
Windows 8.1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Dropbox, Inc.) C:\Users\Calli\AppData\Roaming\Dropbox\bin\Dropbox.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(OOO Industry) C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(Farbar) C:\Users\Calli\Downloads\FRST64 (2).exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [678296 2012-07-09] (Alps Electric Co., Ltd.)
HKLM\...\Run: [QuickSet] - c:\Program Files\Dell\QuickSet\QuickSet.exe [4384928 2012-07-12] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-05-30] ()
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [11554688 2012-08-08] (Motorola Solutions, Inc.)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-07-24] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [277504 2012-07-09] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-04] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [143888 2012-06-01] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [PrivitizeVPN] - C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe [196784 2013-04-08] (OOO Industry)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [PSUAMain] - C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe [32736 2013-10-18] (Panda Security, S.L.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-987448196-2540284813-4176814040-1001\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
Startup: C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Calli\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com
SearchScopes: HKLM - DefaultScope {C9757848-8E73-4D80-A6BF-0D4C587214E6} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MDDCJS
SearchScopes: HKLM - {C9757848-8E73-4D80-A6BF-0D4C587214E6} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MDDCJS
SearchScopes: HKLM-x32 - {C9757848-8E73-4D80-A6BF-0D4C587214E6} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MDDCJS
SearchScopes: HKCU - {5CC02B46-C0BA-4553-9ED7-46629F5F21C9} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=599486&p={searchTerms}
SearchScopes: HKCU - {C9757848-8E73-4D80-A6BF-0D4C587214E6} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62
 
FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 - C:\Program Files\mcafee\msc\npMcSnFFPl64.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Calli\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-01-30]
FF Extension: HDvid Codec - C:\Users\Calli\AppData\Roaming\Mozilla\Firefox\profiles\extensions\hdvc@hdvc.com.xpi [2013-04-17]
FF HKLM\...\Firefox\Extensions: [{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}] - C:\Program Files\Updater By SweetPacks\Firefox
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
 
Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Angry Birds) - C:\Users\Calli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2013-04-19]
CHR Extension: (Lilly Pulitzer) - C:\Users\Calli\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbpppaoddgakkggpcadaefofdnbmfkcm [2013-04-19]
CHR Extension: (SlingPlayer Web Plug-in) - C:\Users\Calli\AppData\Local\Google\Chrome\User Data\Default\Extensions\lidgnhlbmoakdjkfhanbhfngcadpaiac [2013-09-08]
CHR Extension: (Google Wallet) - C:\Users\Calli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-11]
 
==================== Services (Whitelisted) =================
 
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe [140768 2013-10-02] (Panda Security, S.L.)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-10-31] (Microsoft Corporation)
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe [37344 2013-10-18] (Panda Security, S.L.)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1915408 2013-10-09] (SoftThinks SAS)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2014-01-09] (Enigma Software Group USA, LLC.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)
 
==================== Drivers (Whitelisted) ====================
 
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Windows ® Win 7 DDK provider)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2012-08-04] (OSR Open Systems Resources, Inc.)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [14872 2014-01-07] ()
S2 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-10] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106112 2012-11-09] (McAfee, Inc.)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation)
R1 NNSALPC; C:\Windows\system32\DRIVERS\NNSALPC.sys [91368 2013-05-28] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\system32\DRIVERS\NNSHTTP.sys [122088 2013-05-28] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\system32\DRIVERS\NNSHTTPS.sys [109288 2013-05-28] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\system32\DRIVERS\NNSIDS.sys [114920 2013-05-28] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\system32\DRIVERS\NNSPICC.sys [95464 2013-05-28] (Panda Security, S.L.)
S4 NNSPIHSW; C:\Windows\system32\DRIVERS\NNSPIHSW.sys [69864 2013-05-28] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\system32\DRIVERS\NNSPOP3.sys [119016 2013-05-28] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\system32\DRIVERS\NNSPROT.sys [305896 2013-05-28] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\system32\DRIVERS\NNSPRV.sys [118504 2013-05-28] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\system32\DRIVERS\NNSSMTP.sys [114920 2013-05-28] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\system32\DRIVERS\NNSSTRM.sys [246504 2013-05-28] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\system32\DRIVERS\NNSTLSC.sys [106216 2013-05-28] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\system32\DRIVERS\PSINAflt.sys [169192 2013-10-17] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [122600 2013-10-11] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\system32\DRIVERS\PSINKNC.sys [206056 2013-10-11] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124648 2013-10-11] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\system32\DRIVERS\PSINProt.sys [137960 2013-10-11] (Panda Security, S.L.)
S3 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [105704 2013-10-11] (Panda Security, S.L.)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-25] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-13] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows ® Win 7 DDK provider)
S3 PSKMAD; System32\DRIVERS\PSKMAD.sys [x]
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-02-03 14:20 - 2014-02-03 14:20 - 02080256 _____ (Farbar) C:\Users\Calli\Downloads\FRST64 (2).exe
2014-02-03 14:20 - 2014-02-03 14:20 - 01166132 _____ () C:\Users\Calli\Downloads\AdwCleaner (3).exe
2014-02-03 14:20 - 2014-02-03 14:20 - 01037068 _____ (Thisisu) C:\Users\Calli\Downloads\JRT (2).exe
2014-02-03 14:20 - 2014-02-03 14:20 - 00001137 _____ () C:\Users\Calli\Desktop\JRT.txt
2014-02-03 14:15 - 2014-02-03 14:15 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-03 14:14 - 2014-02-03 14:14 - 02080256 _____ (Farbar) C:\Users\Calli\Downloads\FRST64 (1).exe
2014-02-03 14:14 - 2014-02-03 14:14 - 01166132 _____ () C:\Users\Calli\Downloads\AdwCleaner (2).exe
2014-02-03 14:14 - 2014-02-03 14:14 - 01037068 _____ (Thisisu) C:\Users\Calli\Downloads\JRT (1).exe
2014-02-03 14:08 - 2014-02-03 14:08 - 01166132 _____ () C:\Users\Calli\Downloads\AdwCleaner (1).exe
2014-02-03 13:43 - 2014-02-03 13:55 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-02-03 13:43 - 2014-02-03 13:43 - 00119000 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-02-03 13:42 - 2014-02-03 13:55 - 00000000 ____D () C:\Users\Calli\Desktop\mbar
2014-02-03 13:42 - 2014-02-03 13:42 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Calli\Downloads\mbar-1.07.0.1009.exe
2014-02-03 13:42 - 2014-02-03 13:42 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-02-03 13:23 - 2014-02-03 13:23 - 05179684 _____ (Swearware) C:\Users\Calli\Downloads\ComboFix.exe
2014-02-03 12:57 - 2014-02-03 19:04 - 00022295 _____ () C:\Users\Calli\Downloads\FRST.txt
2014-02-03 12:57 - 2014-02-03 19:04 - 00000000 ____D () C:\FRST
2014-02-03 12:57 - 2014-02-03 12:58 - 00018192 _____ () C:\Users\Calli\Downloads\Addition.txt
2014-02-03 12:56 - 2014-02-03 12:56 - 02080256 _____ (Farbar) C:\Users\Calli\Downloads\FRST64.exe
2014-02-03 12:17 - 2014-02-03 12:17 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (1).scr
2014-02-03 12:16 - 2014-02-03 14:43 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-987448196-2540284813-4176814040-1002
2014-02-03 12:16 - 2014-02-03 12:16 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (4).com
2014-02-03 12:15 - 2014-02-03 12:16 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds.scr
2014-01-30 23:31 - 2014-01-30 23:31 - 00000000 ____D () C:\Users\Calli\AppData\Local\Skype
2014-01-30 23:30 - 2014-02-03 12:00 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Skype
2014-01-30 23:27 - 2014-01-30 23:27 - 00002713 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-30 23:27 - 2014-01-30 23:27 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-30 23:23 - 2014-01-30 23:30 - 00000000 ____D () C:\ProgramData\Skype
2014-01-30 23:19 - 2014-01-30 23:23 - 35671200 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetupFull (1).exe
2014-01-30 23:19 - 2014-01-30 23:19 - 35671200 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetupFull.exe
2014-01-30 23:19 - 2014-01-30 23:19 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetup (1).exe
2014-01-30 23:16 - 2014-01-30 23:16 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetup.exe
2014-01-30 13:29 - 2014-01-30 13:29 - 00001123 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Malwarebytes
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-30 13:29 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-01-30 13:28 - 2014-01-30 13:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Calli\Downloads\mbam-setup-1.75.0.1300 (1).exe
2014-01-30 13:24 - 2014-01-30 13:24 - 01037068 _____ (Thisisu) C:\Users\Calli\Downloads\JRT.exe
2014-01-30 13:20 - 2014-02-03 14:09 - 00000000 ____D () C:\AdwCleaner
2014-01-30 13:19 - 2014-01-30 13:19 - 01166132 _____ () C:\Users\Calli\Downloads\adwcleaner.exe
2014-01-30 13:14 - 2014-01-30 13:14 - 00000133 _____ () C:\Users\Calli\AppData\Roaming\WB.CFG
2014-01-30 13:14 - 2014-01-30 13:14 - 00000005 _____ () C:\Users\Calli\AppData\Roaming\WBPU-TTL.DAT
2014-01-30 13:13 - 2014-01-30 10:46 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\DigitalSites
2014-01-30 13:01 - 2014-01-30 13:07 - 00524015 _____ (Malwarebytes Corporation ) C:\Users\Calli\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-30 12:08 - 2014-01-30 12:08 - 00002272 _____ () C:\Users\Calli\Desktop\SpyHunter.lnk
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\sh4ldr
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 _____ () C:\autoexec.bat
2014-01-30 12:08 - 2012-06-22 11:01 - 00022704 _____ () C:\WINDOWS\system32\Drivers\EsgScanner.sys
2014-01-30 12:07 - 2014-01-30 12:08 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-01-30 11:58 - 2014-01-30 11:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Calli\Downloads\SpyHunter-Installer.exe
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Panda Security
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\ProgramData\Panda Security
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\Program Files (x86)\Panda Security
2014-01-30 11:48 - 2013-10-17 11:31 - 00169192 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINAflt.sys
2014-01-30 11:48 - 2013-10-11 01:46 - 00206056 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINKNC.sys
2014-01-30 11:48 - 2013-10-11 01:46 - 00137960 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINProt.sys
2014-01-30 11:46 - 2014-01-30 11:46 - 00845944 _____ () C:\Users\Calli\Downloads\PandaCloudAntivirus.exe
2014-01-30 11:01 - 2014-01-30 11:01 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (3).com
2014-01-30 10:56 - 2014-01-30 10:56 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (2).com
2014-01-30 10:53 - 2014-01-30 10:53 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (1).com
2014-01-30 10:52 - 2014-01-30 10:52 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds.com
2014-01-29 19:26 - 2014-01-29 19:26 - 00272720 _____ (My Company) C:\Users\Calli\Downloads\Setup_ODM (1).exe
2014-01-29 19:18 - 2014-01-30 10:49 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Open Download Manager
2014-01-29 19:18 - 2014-01-29 19:28 - 00001081 _____ () C:\Users\UpdatusUser\Desktop\OpenDownloaderManager.lnk
2014-01-29 19:15 - 2014-01-29 19:15 - 00272720 _____ (My Company) C:\Users\Calli\Downloads\Setup_ODM.exe
2014-01-29 19:06 - 2014-01-30 11:37 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\uTorrent
2014-01-29 19:05 - 2014-01-29 19:05 - 01307736 _____ (BitTorrent Inc.) C:\Users\Calli\Downloads\utorrent.exe
2014-01-27 18:19 - 2014-01-27 18:19 - 00016704 _____ () C:\Users\Calli\Downloads\perendies1.2.txt
2014-01-26 16:59 - 2014-01-26 16:59 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-26 16:58 - 2014-01-26 16:59 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-26 16:58 - 2014-01-26 16:59 - 00000000 ____D () C:\Program Files\iTunes
2014-01-26 16:58 - 2014-01-26 16:59 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-26 16:58 - 2014-01-26 16:58 - 00000000 ____D () C:\Program Files\iPod
2014-01-25 12:46 - 2014-01-25 12:46 - 00294568 _____ (VLCPlayer) C:\Users\Calli\Downloads\HD_Player__CD5MTCD15543_0_0_0_0_b47088829c5ea3bbab1575703f98b1d64b5d93ef-78-3.exe
2014-01-22 15:04 - 2014-01-22 15:04 - 00109192 _____ () C:\Users\Calli\Downloads\Setup (4).exe
2014-01-21 15:43 - 2014-01-21 15:43 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-21 15:43 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-01-21 15:43 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-01-21 15:43 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-01-21 15:43 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-01-21 15:42 - 2014-01-21 15:43 - 00005765 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-21 15:39 - 2014-01-21 15:41 - 00921000 _____ (Oracle Corporation) C:\Users\Calli\Downloads\chromeinstall-7u51.exe
2014-01-17 11:45 - 2013-12-08 16:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-17 11:45 - 2013-11-27 07:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-17 11:45 - 2013-11-27 03:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-17 11:45 - 2013-11-27 02:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-17 11:45 - 2013-11-27 01:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-17 11:45 - 2013-11-27 00:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-17 11:45 - 2013-11-27 00:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-17 11:45 - 2013-11-27 00:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-17 11:45 - 2013-11-27 00:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-17 11:45 - 2013-11-27 00:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-17 11:45 - 2013-11-27 00:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-16 18:22 - 2014-01-16 18:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-16 18:22 - 2014-01-16 18:22 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-11 10:21 - 2013-11-10 18:48 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-01-11 10:21 - 2013-11-09 03:55 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-01-11 10:21 - 2013-11-08 22:37 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-01-11 10:21 - 2013-11-08 21:56 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2014-01-11 10:21 - 2013-11-08 02:26 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-01-11 10:21 - 2013-11-07 20:43 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-01-11 10:21 - 2013-11-07 20:28 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-01-11 10:21 - 2013-11-07 20:26 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-01-11 10:21 - 2013-11-07 20:16 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-01-11 10:21 - 2013-11-07 20:15 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-01-11 10:21 - 2013-11-07 20:07 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-11 10:21 - 2013-11-07 19:41 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-01-11 10:21 - 2013-11-07 19:14 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-01-11 10:21 - 2013-11-05 06:19 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-01-11 10:21 - 2013-11-05 06:03 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-11 10:21 - 2013-11-05 05:57 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-11 10:21 - 2013-11-05 05:33 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-11 10:21 - 2013-11-05 05:32 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-11 10:21 - 2013-11-04 09:13 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-01-11 10:21 - 2013-11-04 09:13 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-01-11 10:21 - 2013-11-04 05:07 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-01-11 10:21 - 2013-11-04 03:50 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-01-11 10:21 - 2013-11-04 02:32 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-01-11 10:21 - 2013-11-03 18:28 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-01-11 10:21 - 2013-11-03 17:30 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-01-11 10:21 - 2013-11-01 03:39 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-01-11 10:21 - 2013-10-31 22:08 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-01-11 10:21 - 2013-10-31 21:57 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2014-01-11 10:21 - 2013-10-30 16:58 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-01-11 10:21 - 2013-10-30 16:42 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-01-11 10:21 - 2013-10-30 16:33 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-01-11 10:21 - 2013-10-30 16:33 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-01-11 10:21 - 2013-10-30 16:33 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-01-11 10:21 - 2013-10-30 16:33 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-01-11 10:21 - 2013-10-25 17:54 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2014-01-11 10:21 - 2013-10-24 01:31 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-01-11 10:21 - 2013-10-24 01:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-01-11 10:21 - 2013-10-17 03:21 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-01-11 10:21 - 2013-10-17 02:36 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-01-11 10:21 - 2013-10-05 06:21 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-01-11 10:21 - 2013-10-05 06:21 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-01-11 10:21 - 2013-10-05 04:05 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-01-11 10:21 - 2013-10-05 04:05 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-01-11 10:19 - 2013-10-19 00:53 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-01-11 10:19 - 2013-10-18 23:14 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-01-11 10:18 - 2013-11-26 03:54 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-01-11 10:18 - 2013-11-26 02:11 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-01-11 10:18 - 2013-11-26 01:41 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-01-11 10:18 - 2013-11-26 00:57 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-01-11 10:18 - 2013-11-26 00:38 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-01-11 10:18 - 2013-11-26 00:35 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-01-11 10:18 - 2013-11-26 00:16 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-01-11 10:18 - 2013-11-26 00:02 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-01-11 10:18 - 2013-11-25 23:48 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-01-11 10:18 - 2013-11-25 23:32 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-01-11 10:18 - 2013-11-25 23:26 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-01-11 10:18 - 2013-11-25 23:07 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-01-11 10:18 - 2013-11-25 22:40 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-01-11 10:18 - 2013-11-25 22:34 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-01-11 10:18 - 2013-11-25 22:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-01-11 10:18 - 2013-11-25 22:33 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-01-11 10:18 - 2013-11-25 22:27 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-01-11 10:18 - 2013-11-22 20:34 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-01-11 10:18 - 2013-11-22 20:13 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-01-11 10:18 - 2013-11-22 19:32 - 04105728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-11 10:18 - 2013-11-22 19:10 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-01-11 10:18 - 2013-11-08 22:34 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-01-11 10:18 - 2013-11-08 22:34 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-01-11 10:18 - 2013-11-08 21:52 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2014-01-11 10:18 - 2013-11-07 23:21 - 04191744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-11 10:18 - 2013-10-15 00:54 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-01-11 10:18 - 2013-10-15 00:03 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-01-10 15:11 - 2014-01-18 23:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-07 18:10 - 2014-01-07 18:10 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-01-07 17:52 - 2014-02-03 14:12 - 00000000 ___RD () C:\Users\Calli\SkyDrive
2014-01-07 17:49 - 2014-01-07 17:49 - 00001444 _____ () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-07 17:48 - 2014-01-07 17:48 - 00000020 ___SH () C:\Users\Calli\ntuser.ini
2014-01-07 17:40 - 2014-02-03 14:24 - 01371742 _____ () C:\WINDOWS\WindowsUpdate.log
2014-01-07 17:40 - 2014-01-07 17:40 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-01-07 17:26 - 2014-01-07 17:26 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-01-07 17:26 - 2014-01-07 17:26 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-01-07 17:23 - 2014-01-07 17:23 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-01-07 17:22 - 2014-02-03 14:09 - 00000000 ____D () C:\Users\Calli
2014-01-07 17:22 - 2014-01-07 17:23 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-07 17:22 - 2014-01-07 17:23 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-07 17:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-07 17:21 - 2014-01-07 17:40 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-01-07 17:21 - 2014-01-07 17:40 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-01-07 17:17 - 2014-01-07 17:17 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-01-07 17:16 - 2014-01-07 18:09 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-07 17:16 - 2014-01-07 17:25 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____D () C:\Program Files\DellTPad
2014-01-07 17:16 - 2013-12-21 00:02 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-01-07 17:16 - 2013-12-21 00:02 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-01-07 17:16 - 2013-10-23 00:20 - 06669600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 03489568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 03426956 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-01-07 17:16 - 2013-10-23 00:20 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-01-07 17:16 - 2013-10-23 00:20 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-01-07 17:16 - 2013-10-23 00:20 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-01-07 17:14 - 2014-01-08 10:27 - 00000000 ___DC () C:\WINDOWS\Panther
2014-01-07 17:14 - 2014-01-07 17:14 - 00000000 __SHD () C:\Recovery
2014-01-07 17:12 - 2014-01-07 17:12 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files\MSBuild
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-01-07 17:09 - 2013-08-02 20:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-01-07 17:09 - 2013-08-02 20:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-01-07 17:09 - 2013-08-02 20:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-01-07 17:09 - 2013-08-02 20:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-01-07 17:09 - 2013-08-02 20:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-01-07 17:09 - 2013-08-02 20:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-01-07 16:34 - 2014-01-07 17:40 - 00006603 _____ () C:\WINDOWS\comsetup.log
 
==================== One Month Modified Files and Folders =======
 
2014-02-03 19:04 - 2014-02-03 12:57 - 00022295 _____ () C:\Users\Calli\Downloads\FRST.txt
2014-02-03 19:04 - 2014-02-03 12:57 - 00000000 ____D () C:\FRST
2014-02-03 19:02 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-03 18:59 - 2013-11-13 23:28 - 00865408 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-03 18:58 - 2014-01-07 17:40 - 01371742 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-03 18:58 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-03 14:43 - 2014-02-03 12:16 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-987448196-2540284813-4176814040-1002
2014-02-03 14:20 - 2014-02-03 14:20 - 02080256 _____ (Farbar) C:\Users\Calli\Downloads\FRST64 (2).exe
2014-02-03 14:20 - 2014-02-03 14:20 - 01166132 _____ () C:\Users\Calli\Downloads\AdwCleaner (3).exe
2014-02-03 14:20 - 2014-02-03 14:20 - 01037068 _____ (Thisisu) C:\Users\Calli\Downloads\JRT (2).exe
2014-02-03 14:20 - 2014-02-03 14:20 - 00001137 _____ () C:\Users\Calli\Desktop\JRT.txt
2014-02-03 14:18 - 2012-11-19 15:57 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-02-03 14:15 - 2014-02-03 14:15 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-03 14:14 - 2014-02-03 14:14 - 02080256 _____ (Farbar) C:\Users\Calli\Downloads\FRST64 (1).exe
2014-02-03 14:14 - 2014-02-03 14:14 - 01166132 _____ () C:\Users\Calli\Downloads\AdwCleaner (2).exe
2014-02-03 14:14 - 2014-02-03 14:14 - 01037068 _____ (Thisisu) C:\Users\Calli\Downloads\JRT (1).exe
2014-02-03 14:13 - 2013-03-19 18:29 - 00000000 ___RD () C:\Users\Calli\Dropbox
2014-02-03 14:13 - 2013-03-19 18:26 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Dropbox
2014-02-03 14:12 - 2014-01-07 17:52 - 00000000 ___RD () C:\Users\Calli\SkyDrive
2014-02-03 14:10 - 2013-08-22 06:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-03 14:09 - 2014-01-30 13:20 - 00000000 ____D () C:\AdwCleaner
2014-02-03 14:09 - 2014-01-07 17:22 - 00000000 ____D () C:\Users\Calli
2014-02-03 14:09 - 2013-08-22 05:25 - 01310720 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-03 14:08 - 2014-02-03 14:08 - 01166132 _____ () C:\Users\Calli\Downloads\AdwCleaner (1).exe
2014-02-03 13:55 - 2014-02-03 13:43 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-02-03 13:55 - 2014-02-03 13:42 - 00000000 ____D () C:\Users\Calli\Desktop\mbar
2014-02-03 13:43 - 2014-02-03 13:43 - 00119000 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-02-03 13:42 - 2014-02-03 13:42 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Calli\Downloads\mbar-1.07.0.1009.exe
2014-02-03 13:42 - 2014-02-03 13:42 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-02-03 13:23 - 2014-02-03 13:23 - 05179684 _____ (Swearware) C:\Users\Calli\Downloads\ComboFix.exe
2014-02-03 12:58 - 2014-02-03 12:57 - 00018192 _____ () C:\Users\Calli\Downloads\Addition.txt
2014-02-03 12:56 - 2014-02-03 12:56 - 02080256 _____ (Farbar) C:\Users\Calli\Downloads\FRST64.exe
2014-02-03 12:17 - 2014-02-03 12:17 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (1).scr
2014-02-03 12:16 - 2014-02-03 12:16 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (4).com
2014-02-03 12:16 - 2014-02-03 12:15 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds.scr
2014-02-03 12:07 - 2013-08-22 06:44 - 00525832 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-02-03 12:00 - 2014-01-30 23:30 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Skype
2014-01-30 23:31 - 2014-01-30 23:31 - 00000000 ____D () C:\Users\Calli\AppData\Local\Skype
2014-01-30 23:30 - 2014-01-30 23:23 - 00000000 ____D () C:\ProgramData\Skype
2014-01-30 23:27 - 2014-01-30 23:27 - 00002713 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-30 23:27 - 2014-01-30 23:27 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-30 23:23 - 2014-01-30 23:19 - 35671200 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetupFull (1).exe
2014-01-30 23:19 - 2014-01-30 23:19 - 35671200 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetupFull.exe
2014-01-30 23:19 - 2014-01-30 23:19 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetup (1).exe
2014-01-30 23:16 - 2014-01-30 23:16 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Calli\Downloads\SkypeSetup.exe
2014-01-30 13:29 - 2014-01-30 13:29 - 00001123 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Malwarebytes
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-30 13:29 - 2014-01-30 13:29 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-30 13:28 - 2014-01-30 13:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Calli\Downloads\mbam-setup-1.75.0.1300 (1).exe
2014-01-30 13:24 - 2014-01-30 13:24 - 01037068 _____ (Thisisu) C:\Users\Calli\Downloads\JRT.exe
2014-01-30 13:19 - 2014-01-30 13:19 - 01166132 _____ () C:\Users\Calli\Downloads\adwcleaner.exe
2014-01-30 13:14 - 2014-01-30 13:14 - 00000133 _____ () C:\Users\Calli\AppData\Roaming\WB.CFG
2014-01-30 13:14 - 2014-01-30 13:14 - 00000005 _____ () C:\Users\Calli\AppData\Roaming\WBPU-TTL.DAT
2014-01-30 13:07 - 2014-01-30 13:01 - 00524015 _____ (Malwarebytes Corporation ) C:\Users\Calli\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-30 12:08 - 2014-01-30 12:08 - 00002272 _____ () C:\Users\Calli\Desktop\SpyHunter.lnk
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\sh4ldr
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-01-30 12:08 - 2014-01-30 12:08 - 00000000 _____ () C:\autoexec.bat
2014-01-30 12:08 - 2014-01-30 12:07 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-01-30 12:00 - 2013-12-20 09:23 - 00000000 ____D () C:\ProgramData\Sony
2014-01-30 11:58 - 2014-01-30 11:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Calli\Downloads\SpyHunter-Installer.exe
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Panda Security
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\ProgramData\Panda Security
2014-01-30 11:48 - 2014-01-30 11:48 - 00000000 ____D () C:\Program Files (x86)\Panda Security
2014-01-30 11:46 - 2014-01-30 11:46 - 00845944 _____ () C:\Users\Calli\Downloads\PandaCloudAntivirus.exe
2014-01-30 11:39 - 2012-12-30 14:31 - 00002277 _____ () C:\Users\Calli\Desktop\Google Chrome.lnk
2014-01-30 11:37 - 2014-01-29 19:06 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\uTorrent
2014-01-30 11:01 - 2014-01-30 11:01 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (3).com
2014-01-30 10:56 - 2014-01-30 10:56 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (2).com
2014-01-30 10:53 - 2014-01-30 10:53 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds (1).com
2014-01-30 10:52 - 2014-01-30 10:52 - 00688992 _____ (Swearware) C:\Users\Calli\Downloads\dds.com
2014-01-30 10:51 - 2013-08-22 06:46 - 00333870 _____ () C:\WINDOWS\setupact.log
2014-01-30 10:49 - 2014-01-29 19:18 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Open Download Manager
2014-01-30 10:47 - 2013-11-13 23:20 - 00017184 _____ () C:\WINDOWS\PFRO.log
2014-01-30 10:46 - 2014-01-30 13:13 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\DigitalSites
2014-01-30 01:10 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-29 19:40 - 2013-11-02 22:27 - 00000000 ____D () C:\Users\Calli\AppData\Local\Windows Live
2014-01-29 19:28 - 2014-01-29 19:18 - 00001081 _____ () C:\Users\UpdatusUser\Desktop\OpenDownloaderManager.lnk
2014-01-29 19:26 - 2014-01-29 19:26 - 00272720 _____ (My Company) C:\Users\Calli\Downloads\Setup_ODM (1).exe
2014-01-29 19:15 - 2014-01-29 19:15 - 00272720 _____ (My Company) C:\Users\Calli\Downloads\Setup_ODM.exe
2014-01-29 19:05 - 2014-01-29 19:05 - 01307736 _____ (BitTorrent Inc.) C:\Users\Calli\Downloads\utorrent.exe
2014-01-28 17:51 - 2012-12-27 14:28 - 00000000 ____D () C:\Users\Calli\AppData\Local\Packages
2014-01-27 18:19 - 2014-01-27 18:19 - 00016704 _____ () C:\Users\Calli\Downloads\perendies1.2.txt
2014-01-26 21:35 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-01-26 20:39 - 2013-01-28 04:49 - 00000157 _____ () C:\WINDOWS\SysWOW64\SystemPreferences.xml
2014-01-26 16:59 - 2014-01-26 16:59 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-26 16:59 - 2014-01-26 16:58 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-26 16:59 - 2014-01-26 16:58 - 00000000 ____D () C:\Program Files\iTunes
2014-01-26 16:59 - 2014-01-26 16:58 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-26 16:58 - 2014-01-26 16:58 - 00000000 ____D () C:\Program Files\iPod
2014-01-26 16:56 - 2012-12-27 22:25 - 00000000 ____D () C:\ProgramData\Apple
2014-01-25 12:46 - 2014-01-25 12:46 - 00294568 _____ (VLCPlayer) C:\Users\Calli\Downloads\HD_Player__CD5MTCD15543_0_0_0_0_b47088829c5ea3bbab1575703f98b1d64b5d93ef-78-3.exe
2014-01-22 15:04 - 2014-01-22 15:04 - 00109192 _____ () C:\Users\Calli\Downloads\Setup (4).exe
2014-01-21 15:43 - 2014-01-21 15:43 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-21 15:43 - 2014-01-21 15:42 - 00005765 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-21 15:43 - 2013-07-12 12:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-21 15:41 - 2014-01-21 15:39 - 00921000 _____ (Oracle Corporation) C:\Users\Calli\Downloads\chromeinstall-7u51.exe
2014-01-21 15:41 - 2012-11-19 15:54 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-18 23:38 - 2014-01-10 15:11 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 21:11 - 2013-07-23 11:50 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-17 21:08 - 2012-12-28 14:38 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-17 20:08 - 2013-12-05 16:47 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-01-17 13:42 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-01-16 18:32 - 2012-12-27 14:30 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 18:31 - 2013-03-19 18:29 - 00001067 _____ () C:\Users\Calli\Desktop\Dropbox.lnk
2014-01-16 18:31 - 2013-03-19 18:27 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 18:26 - 2013-08-22 07:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-01-16 18:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-01-16 18:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-01-16 18:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-01-16 18:22 - 2014-01-16 18:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-16 18:22 - 2014-01-16 18:22 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-15 02:03 - 2013-05-31 13:59 - 00000000 ____D () C:\Program Files\My Dell
2014-01-15 02:03 - 2012-11-19 15:49 - 00000000 ____D () C:\ProgramData\PCDr
2014-01-11 11:17 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-01-08 10:27 - 2014-01-07 17:14 - 00000000 ___DC () C:\WINDOWS\Panther
2014-01-07 18:10 - 2014-01-07 18:10 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-01-07 18:10 - 2012-11-19 15:34 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-07 18:09 - 2014-01-07 17:16 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-07 18:04 - 2012-11-19 15:42 - 00000000 ____D () C:\Program Files\Intel
2014-01-07 17:52 - 2013-12-05 17:00 - 00000000 ___RD () C:\Users\Calli\SkyDrive.old
2014-01-07 17:49 - 2014-01-07 17:49 - 00001444 _____ () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-07 17:49 - 2012-12-27 14:30 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-07 17:48 - 2014-01-07 17:48 - 00000020 ___SH () C:\Users\Calli\ntuser.ini
2014-01-07 17:40 - 2014-01-07 17:40 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-01-07 17:40 - 2014-01-07 17:21 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-01-07 17:40 - 2014-01-07 17:21 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-01-07 17:40 - 2014-01-07 16:34 - 00006603 _____ () C:\WINDOWS\comsetup.log
2014-01-07 17:40 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-01-07 17:34 - 2013-08-22 07:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-01-07 17:34 - 2013-08-22 07:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-01-07 17:34 - 2012-11-19 16:08 - 00880342 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-01-07 17:28 - 2013-08-22 05:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-01-07 17:28 - 2013-08-22 05:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-01-07 17:28 - 2013-04-08 16:20 - 00000000 ____D () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PrivitizeVPN
2014-01-07 17:28 - 2012-11-19 16:00 - 00000000 ____D () C:\WINDOWS\en
2014-01-07 17:26 - 2014-01-07 17:26 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-01-07 17:26 - 2014-01-07 17:26 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-01-07 17:26 - 2013-11-13 23:14 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-01-07 17:26 - 2013-11-13 23:14 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-01-07 17:26 - 2013-11-13 23:14 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-01-07 17:26 - 2013-08-22 07:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-01-07 17:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-01-07 17:26 - 2013-08-22 05:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-01-07 17:26 - 2013-08-22 05:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-01-07 17:26 - 2012-11-19 15:42 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-01-07 17:26 - 2012-07-25 21:37 - 00000000 ____D () C:\Users\Default.migrated
2014-01-07 17:25 - 2014-01-07 17:16 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-07 17:25 - 2013-08-22 07:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-01-07 17:25 - 2013-08-22 07:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-01-07 17:25 - 2013-08-22 07:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-01-07 17:25 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\Help
2014-01-07 17:25 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-01-07 17:25 - 2012-12-27 14:28 - 00000000 ____D () C:\ProgramData\PRICache
2014-01-07 17:23 - 2014-01-07 17:23 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-01-07 17:23 - 2014-01-07 17:22 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-07 17:23 - 2014-01-07 17:22 - 00000000 ___RD () C:\Users\Calli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-07 17:23 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-01-07 17:17 - 2014-01-07 17:17 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-01-07 17:17 - 2013-08-22 06:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-07 17:16 - 2014-01-07 17:16 - 00000000 ____D () C:\Program Files\DellTPad
2014-01-07 17:14 - 2014-01-07 17:14 - 00000000 __SHD () C:\Recovery
2014-01-07 17:14 - 2013-08-22 05:36 - 00000000 __RHD () C:\Users\Default
2014-01-07 17:13 - 2013-08-22 07:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-01-07 17:12 - 2014-01-07 17:12 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files\MSBuild
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-01-07 17:10 - 2014-01-07 17:10 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-01-07 17:00 - 2012-12-27 14:28 - 01148585 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-01-07 13:09 - 2012-07-26 00:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-01-07 13:07 - 2012-12-30 23:26 - 00723968 ___SH () C:\Users\Calli\Downloads\Thumbs.db
2014-01-06 14:31 - 2013-08-22 07:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 14:31 - 2013-08-22 07:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
 
Some content of TEMP:
====================
C:\Users\Calli\AppData\Local\Temp\MachineIdComponents.exe
C:\Users\Calli\AppData\Local\Temp\Quarantine.exe
C:\Users\Calli\AppData\Local\Temp\SHSetup.exe
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2014-02-03 14:43
 
==================== End Of Log ============================


#14 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:05:49 AM

Posted 04 February 2014 - 03:00 PM


Hello

These logs are looking allot better. But we still have some work to do.

Please print out these instructions, or copy them to a Notepad file. It will make it easier for you to follow the instructions and complete all of the necessary steps..

Clean Out Temp Files
  • This small application you may want to keep and use once a week to keep the computer clean.

    Download CCleaner from here CCleaner
    • Run the installer to install the application.
    • When it gives you the option to install Yahoo toolbar uncheck the box next to it.
    • Run CCleaner. default settings are fine
    • Click Run Cleaner.
    • Close CCleaner.
: Malwarebytes' Anti-Malware :

I see that you have MBAM installed - That is great!! and at this time I would like you to update it and run me a quick scan
  • Double-click mbam icon
  • go to the update tab at the top
  • click on check for updates
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is Checked (ticked) except items in the C:\System Volume Information folder and click on Remove Selected.
  • When completed, a log will open in Notepad. please copy and paste the log into your next reply
    • If you accidentally close it, the log file is saved here and will be named like this:
    • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.



Download HijackThis
  • Go Here to download HijackThis program
  • Save HijackThis to your desktop.
  • Right Click on Hijackthis and select "Run as Admin" (XP users just need to double click to run)
  • Click on "Do A system scan and save a logfile" (if you do not see "Do A system scan and save a logfile" then click on main menu)
  • copy and paste hijackthis report into the topic
"information and logs"
  • In your next post I need the following
    • Log From MBAM
    • report from Hijackthis
    • let me know of any problems you may have had
    • How is the computer doing now?
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#15 callijo

callijo
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 04 February 2014 - 03:16 PM

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org
 
Database version: v2014.02.04.10
 
Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
Calli :: R2D2 [administrator]
 
Protection: Disabled
 
2/4/2014 3:11:01 PM
mbam-log-2014-02-04 (15-11-01).txt
 
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 235813
Time elapsed: 3 minute(s), 23 second(s)
 
Memory Processes Detected: 0
(No malicious items detected)
 
Memory Modules Detected: 0
(No malicious items detected)
 
Registry Keys Detected: 0
(No malicious items detected)
 
Registry Values Detected: 0
(No malicious items detected)
 
Registry Data Items Detected: 0
(No malicious items detected)
 
Folders Detected: 0
(No malicious items detected)
 
Files Detected: 0
(No malicious items detected)
 
(end)
 
 
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:15:51 PM, on 2/4/2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.16384)
Boot mode: Normal
 
Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Users\Calli\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Calli\Downloads\HijackThis.exe
 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [PrivitizeVPN] C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe /autorun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PSUAMain] "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe" /LaunchSysTray
O4 - Startup: Dropbox.lnk = Calli\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: Send to Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Send to Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (HKCU)
O9 - Extra 'Tools' menuitem: Send to Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Security Service (BTHSSecurityMgr) - Intel® Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: Panda Cloud Antivirus Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Panda Product Service (PSUAService) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Intel® Turbo Boost Technology Monitor 2.6 (TurboBoost) - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
 
--
End of file - 13073 bytes
 
 
Computer is still running normally.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users