Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spigot Redirect Virus - Need Assistance!


  • This topic is locked This topic is locked
22 replies to this topic

#1 sushiandpie

sushiandpie

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:09 AM

Posted 04 February 2014 - 07:25 PM

i seem to have somehow picked up the Spigot Redirect virus, and although its only on Internet Explorer (which i never use) i am still really eager to get it permanently deleted from my pc. i ran Malware Bytes and removed everything it picked up (both on a full scan and a quick scan, it found different things.) i have also run AdwCleaner and Junk Removal Tool, with no success. IE reroutes to the spigot controlled Yahoo site, and i dare not use it for anything. Chrome is clean to my knowledge (i scanned and scrubbed it pretty well) and no redirect stuff has ever popped up on it. this is a brand new computer, so getting the Spigot garbage off is my prime priority right now. thanks in advance for the help!

 

i am running Windows 8.1 on a Acer Aspire laptop.



BC AdBot (Login to Remove)

 


#2 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:04:09 AM

Posted 05 February 2014 - 03:54 AM





Hello sushiandpie

I would like to welcome you to the Malware Removal section of the forum.

Around here they call me Gringo and I will be glad to help you with your malware problems.

Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!

  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not attach logs or use code boxes, just copy and paste the text.
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
  • Please read every post completely before doing anything.
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Please provide feedback about your experience as we go.
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.
NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

I would like you to run this program for me.

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#3 sushiandpie

sushiandpie
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:09 AM

Posted 05 February 2014 - 05:09 PM

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2014
Ran by mylor_000 (administrator) on SIMIN on 05-02-2014 17:05:57
Running from C:\Users\mylor_000\Downloads
Windows 8.1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Launch8\Launch8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Launch8\Launch8_64.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\n360.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Soluto) C:\Program Files\Soluto\SolutoLauncherService.exe
(Soluto) C:\Program Files\Soluto\SolutoService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Soluto) C:\Program Files\Soluto\Soluto.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\n360.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\EuWatch.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TrayNotify.exe
() C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) D:\iTunesHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Jane, Inc.) C:\Program Files (x86)\Janetter2\bin\Janetter.exe
(Jane,Inc.) C:\Program Files (x86)\Janetter2\bin\JanetterSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\mylor_000\Documents\oC11b72rv1.exe
() C:\Sai\sai.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Jane, Inc.) C:\Program Files (x86)\Janetter2\bin\Janetter.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13449288 2013-03-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3016432 2013-03-06] (Synaptics Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [EaseUs Watch] - C:\Program Files (x86)\EaseUS\Todo Backup\bin\EuWatch.exe [70728 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM-x32\...\Run: [EaseUs Tray] - C:\Program Files (x86)\EaseUS\Todo Backup\bin\TrayNotify.exe [1372232 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM-x32\...\Run: [EaseUs TB Tray Agent] - C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe [253512 2013-09-04] ()
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2010-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [821144 2010-10-25] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132224 2013-02-28] ( (Qualcomm Atheros Commnucations))
HKU\S-1-5-21-1218462981-349761750-1491518987-1001\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-1218462981-349761750-1491518987-1002\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1218462981-349761750-1491518987-1002\...\Run: [GoogleChromeAutoLaunch_595B13ABB91BA812F12655270181FBBB] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866632 2014-02-01] (Google Inc.)
HKU\S-1-5-21-1218462981-349761750-1491518987-1002\...\Run: [Gyazo] - C:\Program Files (x86)\Gyazo\GyStation.exe [2990304 2013-10-30] (Nota Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
Startup: C:\Users\mylor_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?type=994519&fr=spigot-yhp-ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
SearchScopes: HKLM - DefaultScope {37B8121C-708B-429D-8417-B0F19D9DF572} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {37B8121C-708B-429D-8417-B0F19D9DF572} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 - {37B8121C-708B-429D-8417-B0F19D9DF572} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {37B8121C-708B-429D-8417-B0F19D9DF572} URL = 
SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = 
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12
 
Chrome: 
=======
CHR HomePage: hxxp://www.tumblr.com/dashboard
CHR Extension: (Google Docs) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-25]
CHR Extension: (Google Drive) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-25]
CHR Extension: (Missing e) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjbagclppcgdbpobcpoojdjdmcjhpid [2013-12-28]
CHR Extension: (YouTube) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-25]
CHR Extension: (Honey) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2013-12-28]
CHR Extension: (Twitter for Chrome) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdoinklelehcpndgmcddkkdhibpoglnk [2013-12-28]
CHR Extension: (Hotot) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnfkkfleeiooolklkgkmigodkmcopnji [2013-12-28]
CHR Extension: (Google Search) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-25]
CHR Extension: (Gaia Online) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcejlakbncmhdpijmpdepcjfjodfeljj [2013-12-28]
CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2013-12-28]
CHR Extension: (Tumblr Purrification) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\elfolagcmfgahhhpebfpijbnnjkakpgb [2013-12-28]
CHR Extension: (Stylish) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2013-12-28]
CHR Extension: (XKit) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpfgeeomkfdefkckijiabdbogjkdaecd [2014-01-31]
CHR Extension: (Quick Javascript Switcher) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\geddoclleiomckbhadiaipdggiiccfje [2014-01-06]
CHR Extension: (AdBlock) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-12-28]
CHR Extension: (Eye Dropper) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka [2013-12-28]
CHR Extension: (Norton Identity Protection) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2013-12-28]
CHR Extension: (AutoPager Chrome) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh [2013-12-28]
CHR Extension: (TumTaster) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nanfbkacbckngfcklahdgfagjlghfbgm [2013-12-28]
CHR Extension: (#wrap) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbcgkdilbhnnoemimofnknocbkpldobi [2013-12-28]
CHR Extension: (Google Wallet) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-25]
CHR Extension: (AutoScroll) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\occjjkgifpmdgodlplnacmkejpdionan [2013-12-28]
CHR Extension: (NotScripts) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn [2013-12-28]
CHR Extension: (Tumblr Savior) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\oefddkjnflmjbclpnnoegglmmdfkidip [2013-12-28]
CHR Extension: (ScriptSafe) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2013-12-28]
CHR Extension: (Gmail) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\Exts\Chrome.crx [2014-01-20]
 
==================== Services (Whitelisted) =================
 
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227968 2013-02-28] (Qualcomm Atheros Commnucations)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-27] (Acer Incorporated)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [660040 2013-01-18] (Acer Incorporated)
R2 Guard Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [128896 2013-02-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165760 2013-02-18] (Intel Corporation)
R2 Launch8; C:\Program Files (x86)\Stardock\Launch8\Launch8Srv.exe [87152 2013-10-22] (Stardock Software, Inc)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-04-25] (Acer Incorporate)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
R2 SolutoLauncherService; C:\Program Files\Soluto\SolutoLauncherService.exe [222168 2013-01-29] (Soluto)
R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.)
 
==================== Drivers (Whitelisted) ====================
 
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Windows ® Win 7 DDK provider)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-17] (Symantec Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-02-28] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-25] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-12-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-12-27] (Symantec Corporation)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48200 2013-09-04] ()
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140205.001\IDSvia64.sys [521944 2014-01-20] (Symantec Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-12-29] (Microsoft Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-09] (Acer Incorporated)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140205.007\ENG64.SYS [126040 2014-02-02] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140205.007\EX64.SYS [2099288 2014-02-02] (Symantec Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-09] (Acer Incorporated)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [455240 2013-03-05] (RTS Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-12-29] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31984 2013-03-06] (Synaptics Incorporated)
R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-26] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-07-30] (Symantec Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-07-31] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-26] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\N360x64\1501000.012\SymELAM.sys [23568 2013-07-31] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-27] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-07-30] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-25] (Symantec Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
R3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-02-05 17:05 - 2014-02-05 17:06 - 00026069 _____ () C:\Users\mylor_000\Downloads\FRST.txt
2014-02-05 17:05 - 2014-02-05 17:05 - 02082304 _____ (Farbar) C:\Users\mylor_000\Downloads\FRST64.exe
2014-02-05 17:05 - 2014-02-05 17:05 - 00000000 ____D () C:\FRST
2014-02-04 23:26 - 2014-02-04 23:42 - 02319710 _____ () C:\Users\mylor_000\Documents\$$$tmp.wpb
2014-02-04 18:18 - 2014-02-04 18:18 - 00001125 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Malwarebytes
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-04 18:18 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-02-04 18:17 - 2014-02-04 18:17 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\mylor_000\Downloads\mbam-setup-1-75-0-1300.exe
2014-02-04 18:11 - 2014-02-04 18:11 - 00001276 _____ () C:\Users\mylor_000\Desktop\JRT.txt
2014-02-04 18:06 - 2014-02-04 18:06 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-04 18:02 - 2014-02-04 18:02 - 00002564 _____ () C:\Users\mylor_000\Desktop\AdwCleaner[S0].txt
2014-02-04 17:58 - 2014-02-04 17:58 - 01037530 _____ (Thisisu) C:\Users\mylor_000\Downloads\JRT.exe
2014-02-04 17:52 - 2014-02-04 17:52 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-04 17:47 - 2014-02-04 17:50 - 00000000 ____D () C:\AdwCleaner
2014-02-04 17:46 - 2014-02-04 17:46 - 01166132 _____ () C:\Users\mylor_000\Downloads\AdwCleaner.exe
2014-02-03 14:56 - 2014-02-03 14:56 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-02-03 14:56 - 2006-09-13 05:00 - 00234496 _____ (CANON INC.) C:\WINDOWS\system32\CNMLM7L.DLL
2014-02-02 20:01 - 2014-02-02 20:01 - 00649176 _____ () C:\WINDOWS\Minidump\020214-27968-01.dmp
2014-01-28 16:50 - 2014-01-28 16:50 - 00000110 ____H () C:\Users\mylor_000\Downloads\.~lock.Commission Application 2013 (Responses) (4).xlsx#
2014-01-28 16:49 - 2014-01-28 16:49 - 00009586 _____ () C:\Users\mylor_000\Downloads\Commission Application 2013 (Responses) (4).xlsx
2014-01-23 12:39 - 2014-01-23 12:39 - 00001360 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\Program Files\iTunes
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\Program Files\iPod
2014-01-23 12:27 - 2014-01-23 12:27 - 00782568 _____ () C:\WINDOWS\Minidump\012314-43171-01.dmp
2014-01-16 17:08 - 2014-01-16 17:09 - 00782184 _____ () C:\WINDOWS\Minidump\011614-53031-01.dmp
2014-01-15 13:44 - 2013-12-08 19:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 13:43 - 2013-11-27 10:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 13:43 - 2013-11-27 06:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 13:43 - 2013-11-27 05:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 13:43 - 2013-11-27 04:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 13:43 - 2013-11-27 03:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 13:43 - 2013-11-27 03:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 13:43 - 2013-11-27 03:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 13:43 - 2013-11-27 03:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 13:43 - 2013-11-27 03:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 13:43 - 2013-11-27 03:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-15 12:26 - 2014-01-15 12:26 - 00649280 _____ () C:\WINDOWS\Minidump\011514-36593-01.dmp
2014-01-14 15:02 - 2014-01-14 15:02 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\InstallShield
2014-01-14 15:02 - 2014-01-14 15:02 - 00000000 ____D () C:\ProgramData\InstallShield
2014-01-14 14:54 - 2002-04-03 17:13 - 00348672 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltdlg13n.ocx
2014-01-14 14:54 - 2002-04-03 17:11 - 01368576 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltdlg13n.dll
2014-01-14 14:54 - 2002-04-03 17:11 - 00065536 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfcgm13n.dll
2014-01-14 14:54 - 2002-04-03 15:24 - 00094208 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltodb13n.ocx
2014-01-14 14:54 - 2002-04-03 15:23 - 00241152 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltpnt13n.ocx
2014-01-14 14:54 - 2002-04-03 15:23 - 00192512 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltscr13n.ocx
2014-01-14 14:54 - 2002-04-03 15:23 - 00180224 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst13n.ocx
2014-01-14 14:54 - 2002-04-03 15:23 - 00141312 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb13n.ocx
2014-01-14 14:54 - 2002-04-03 15:23 - 00134144 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltmrc13n.ocx
2014-01-14 14:54 - 2002-04-03 15:21 - 00731136 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltocx13n.ocx
2014-01-14 14:54 - 2002-04-03 14:53 - 00921088 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDic13n.dll
2014-01-14 14:54 - 2002-04-03 14:52 - 00248320 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFJ2K13n.dll
2014-01-14 14:54 - 2002-04-03 14:51 - 00150016 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpng13n.dll
2014-01-14 14:54 - 2002-04-03 14:50 - 00103936 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttw213n.dll
2014-01-14 14:54 - 2002-04-03 14:49 - 00120320 ____N () C:\WINDOWS\SysWOW64\Ltpnt13n.dll
2014-01-14 14:54 - 2002-04-03 14:49 - 00116736 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTAUT13n.dll
2014-01-14 14:54 - 2002-04-03 14:49 - 00112640 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTOCR13n.dll
2014-01-14 14:54 - 2002-04-03 14:49 - 00080384 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTCON13n.dll
2014-01-14 14:54 - 2002-04-03 14:49 - 00076288 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltpdg13n.dll
2014-01-14 14:54 - 2002-04-03 14:48 - 00293376 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfAFP13n.dll
2014-01-14 14:54 - 2002-04-03 14:48 - 00082432 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfshp13n.dll
2014-01-14 14:54 - 2002-04-03 14:48 - 00069632 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFPTK13n.dll
2014-01-14 14:54 - 2002-04-03 14:48 - 00058368 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfsct13n.dll
2014-01-14 14:54 - 2002-04-03 14:48 - 00033280 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwmp13n.dll
2014-01-14 14:54 - 2002-04-03 14:46 - 00351744 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFCMP13n.DLL
2014-01-14 14:54 - 2002-04-03 14:45 - 00131072 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lftif13n.dll
2014-01-14 14:54 - 2002-04-03 14:44 - 00482816 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwf13n.dll
2014-01-14 14:54 - 2002-04-03 14:44 - 00133632 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdxf13n.dll
2014-01-14 14:54 - 2002-04-03 14:44 - 00084480 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfgbr13n.dll
2014-01-14 14:54 - 2002-04-03 14:44 - 00074240 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfplt13n.dll
2014-01-14 14:54 - 2002-04-03 14:44 - 00019456 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfvec13n.dll
2014-01-14 14:54 - 2002-04-03 14:43 - 00918016 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Ltwvc13n.dll
2014-01-14 14:54 - 2002-04-03 14:43 - 00114176 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwg13n.dll
2014-01-14 14:54 - 2002-04-03 14:43 - 00110592 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTSGM13N.DLL
2014-01-14 14:54 - 2002-04-03 14:43 - 00054784 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdgn13n.dll
2014-01-14 14:54 - 2002-04-03 14:43 - 00052224 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdrw13n.dll
2014-01-14 14:54 - 2002-04-03 14:42 - 00139776 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTSCR13n.DLL
2014-01-14 14:54 - 2002-04-03 14:41 - 01684480 ____N () C:\WINDOWS\SysWOW64\LTCLR13n.dll
2014-01-14 14:54 - 2002-04-03 14:41 - 00077312 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTTLB13n.dll
2014-01-14 14:54 - 2002-04-03 14:39 - 00228352 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lvkrn13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00171008 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpdf13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00049152 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfwmf13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00047104 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXpm13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00045056 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXbm13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00025600 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfxwd13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00023552 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lftga13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00020480 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwpg13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00019968 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwfx13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00102400 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmpg13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00059392 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpct13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00055296 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpsd13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00031232 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFPNM13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00026112 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcx13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00020480 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfsgi13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00019968 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcd13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00019456 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfras13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00018944 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmsp13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00090112 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfjbg13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00084480 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lffpx13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00048128 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfica13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00038400 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfflc13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00034816 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfgif13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00031744 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflmb13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00029184 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflma13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00027136 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfiff13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00020992 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfimg13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00019968 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfitg13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00018944 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmac13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00073216 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lffax13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00050176 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00037888 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfeps13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00035840 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfcal13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00032256 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00030208 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfbmp13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00029184 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfclp13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00025600 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfani13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00023040 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfawd13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00021504 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfCUT13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00018944 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfavi13n.dll
2014-01-14 14:54 - 2002-04-03 14:34 - 00326144 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltimg13n.dll
2014-01-14 14:54 - 2002-04-03 14:34 - 00034816 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltisi13n.dll
2014-01-14 14:54 - 2002-04-03 14:34 - 00030208 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTWND13n.DLL
2014-01-14 14:54 - 2002-04-03 14:33 - 00416256 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltkrn13n.dll
2014-01-14 14:54 - 2002-04-03 14:33 - 00258560 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDIS13n.dll
2014-01-14 14:54 - 2002-04-03 14:33 - 00137728 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltfil13n.DLL
2014-01-14 14:54 - 2002-04-03 13:54 - 00138752 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltisi13n.ocx
2014-01-14 14:54 - 2002-04-03 13:08 - 00796160 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltann13n.dll
2014-01-14 14:54 - 2002-04-03 13:08 - 00205824 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltefx13n.dll
2014-01-14 14:54 - 2002-04-03 13:08 - 00035328 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttwn13n.dll
2014-01-14 14:54 - 2002-03-12 23:04 - 00966144 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltdlgres13n.dll
2014-01-14 14:54 - 2002-01-30 13:18 - 00093184 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfPCL13n.dll
2014-01-14 14:54 - 2002-01-29 10:03 - 00026624 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AWRESX32.DLL
2014-01-14 14:54 - 2002-01-29 10:03 - 00024576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AWCODC32.DLL
2014-01-14 14:54 - 2002-01-29 10:03 - 00011776 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AWDENC32.DLL
2014-01-14 14:54 - 2002-01-29 10:03 - 00010240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AWVIEW32.DLL
2014-01-14 14:54 - 2002-01-29 10:03 - 00006144 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AWDCXC32.DLL
2014-01-14 14:54 - 2002-01-14 12:01 - 00131584 ____N () C:\WINDOWS\SysWOW64\lttlb13n.ocx
2014-01-14 14:54 - 2001-11-19 16:57 - 00825344 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltwen13n.dll
2014-01-14 14:54 - 2001-11-16 19:05 - 00033792 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFSMP13n.dll
2014-01-14 14:54 - 2001-11-16 19:04 - 00445440 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFCMW13n.dll
2014-01-14 14:54 - 2001-11-16 18:55 - 00017920 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfRaw13n.dll
2014-01-14 14:54 - 2001-11-15 16:31 - 00794624 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTRTN13n.DLL
2014-01-14 14:54 - 2000-07-21 12:05 - 00614672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OLEA2003.rra
2014-01-14 14:54 - 2000-07-21 12:05 - 00164112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OLEP22a3.rra
2014-01-14 14:54 - 2000-05-02 04:17 - 00212480 ____N (Eastman Kodak) C:\WINDOWS\SysWOW64\PCDLIB32.DLL
2014-01-14 14:54 - 2000-04-12 16:28 - 00118784 ____N () C:\WINDOWS\SysWOW64\lfkodak.dll
2014-01-14 14:54 - 2000-04-12 16:24 - 00338944 ____N () C:\WINDOWS\SysWOW64\lffpx7.dll
2014-01-14 14:53 - 2014-01-14 14:53 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-01-14 14:45 - 2014-01-14 14:45 - 00000000 ____D () C:\Users\mylor_000\.swt
2014-01-14 14:44 - 2014-01-14 14:55 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Azureus
2014-01-14 14:43 - 2014-01-14 14:43 - 00072008 _____ (Azureus Software, Inc.) C:\Users\mylor_000\Downloads\VuzeBittorrentClientInstaller.exe
2014-01-14 14:39 - 2014-01-14 14:39 - 12628359 _____ () C:\Users\mylor_000\Downloads\Brother PE-Design Next 9 Full Pack.rar
2014-01-14 13:16 - 2014-01-14 13:21 - 00000132 _____ () C:\Users\mylor_000\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-01-12 18:45 - 2014-01-12 18:45 - 00647344 _____ () C:\WINDOWS\Minidump\011214-55812-01.dmp
2014-01-08 22:24 - 2014-01-08 22:24 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Gyazo
2014-01-08 22:23 - 2014-01-08 22:23 - 06013024 _____ (Nota Inc. ) C:\Users\mylor_000\Downloads\GyazoSetup.exe
2014-01-08 22:23 - 2014-01-08 22:23 - 00000998 _____ () C:\Users\Public\Desktop\Gyazo.lnk
2014-01-08 22:23 - 2014-01-08 22:23 - 00000998 _____ () C:\Users\Public\Desktop\Gyazo GIF.lnk
2014-01-08 22:23 - 2014-01-08 22:23 - 00000000 ____D () C:\Program Files (x86)\Gyazo
2014-01-08 21:13 - 2014-01-08 21:13 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\OpenOffice
2014-01-08 21:06 - 2014-01-08 21:06 - 00001128 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-08 21:05 - 2014-01-08 21:06 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-01-08 21:03 - 2014-01-08 21:06 - 143436858 _____ () C:\Users\mylor_000\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_en-US.exe
2014-01-08 21:03 - 2014-01-08 21:03 - 00000000 ____D () C:\Users\mylor_000\Desktop\OpenOffice 4.0.1 (en-US) Installation Files
2014-01-08 21:02 - 2014-01-08 21:03 - 143485940 _____ () C:\Users\mylor_000\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_en-US.exe
2014-01-08 14:04 - 2014-01-08 14:04 - 00920608 _____ () C:\WINDOWS\Minidump\010814-45437-01.dmp
2014-01-07 23:36 - 2014-02-04 18:34 - 00000000 ____D () C:\Program Files (x86)\Trillian
2014-01-07 23:36 - 2014-01-07 23:38 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Trillian
2014-01-07 23:36 - 2014-01-07 23:36 - 00001125 _____ () C:\Users\mylor_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trillian.lnk
2014-01-07 23:36 - 2014-01-07 23:36 - 00001095 _____ () C:\Users\mylor_000\Desktop\Trillian.lnk
2014-01-07 23:35 - 2014-01-07 23:35 - 21961360 _____ () C:\Users\mylor_000\Downloads\trillian-v5.4.0.15.exe
2014-01-06 19:38 - 2014-01-06 19:38 - 00002777 _____ () C:\Users\Public\Desktop\Sculptris Alpha 6.exe.lnk
2014-01-06 19:38 - 2014-01-06 19:38 - 00000000 ____D () C:\Users\Public\Pixologic
2014-01-06 19:38 - 2014-01-06 19:38 - 00000000 ____D () C:\Program Files (x86)\Pixologic
2014-01-06 19:35 - 2014-01-06 19:35 - 00000000 ____D () C:\Users\mylor_000\AppData\Local\Downloaded Installations
2014-01-06 19:33 - 2014-01-06 19:33 - 20168505 _____ () C:\Users\mylor_000\Downloads\Sculptris-Alpha6-Windows.zip
2014-01-06 16:39 - 2014-01-06 16:39 - 00003504 _____ () C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-mylordbyron@gmail.com
2014-01-06 16:37 - 2014-01-06 16:39 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
 
==================== One Month Modified Files and Folders =======
 
2014-02-05 17:06 - 2014-02-05 17:05 - 00026069 _____ () C:\Users\mylor_000\Downloads\FRST.txt
2014-02-05 17:05 - 2014-02-05 17:05 - 02082304 _____ (Farbar) C:\Users\mylor_000\Downloads\FRST64.exe
2014-02-05 17:05 - 2014-02-05 17:05 - 00000000 ____D () C:\FRST
2014-02-05 17:05 - 2014-01-04 21:23 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-02-05 17:00 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-05 16:36 - 2013-12-28 22:42 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Skype
2014-02-05 16:33 - 2013-12-29 00:32 - 01510062 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-05 01:12 - 2013-12-25 18:02 - 00000916 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-05 00:07 - 2014-01-01 01:44 - 00000000 ____D () C:\Sai
2014-02-04 23:42 - 2014-02-04 23:26 - 02319710 _____ () C:\Users\mylor_000\Documents\$$$tmp.wpb
2014-02-04 20:06 - 2013-12-25 18:01 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1218462981-349761750-1491518987-1002
2014-02-04 19:19 - 2013-11-14 02:28 - 00863592 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-04 19:16 - 2013-12-25 18:04 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-04 19:15 - 2013-12-29 21:38 - 00000000 __RDO () C:\Users\mylor_000\SkyDrive
2014-02-04 19:15 - 2013-12-25 18:02 - 00000912 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-04 19:13 - 2013-11-14 02:20 - 00034482 _____ () C:\WINDOWS\PFRO.log
2014-02-04 19:13 - 2013-08-22 09:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-04 18:34 - 2014-01-07 23:36 - 00000000 ____D () C:\Program Files (x86)\Trillian
2014-02-04 18:18 - 2014-02-04 18:18 - 00001125 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Malwarebytes
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-04 18:17 - 2014-02-04 18:17 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\mylor_000\Downloads\mbam-setup-1-75-0-1300.exe
2014-02-04 18:12 - 2013-08-22 08:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-04 18:11 - 2014-02-04 18:11 - 00001276 _____ () C:\Users\mylor_000\Desktop\JRT.txt
2014-02-04 18:06 - 2014-02-04 18:06 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-04 18:02 - 2014-02-04 18:02 - 00002564 _____ () C:\Users\mylor_000\Desktop\AdwCleaner[S0].txt
2014-02-04 17:58 - 2014-02-04 17:58 - 01037530 _____ (Thisisu) C:\Users\mylor_000\Downloads\JRT.exe
2014-02-04 17:53 - 2013-08-22 08:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-02-04 17:52 - 2014-02-04 17:52 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-04 17:50 - 2014-02-04 17:47 - 00000000 ____D () C:\AdwCleaner
2014-02-04 17:50 - 2013-12-29 00:38 - 00000000 ____D () C:\Users\mylor_000
2014-02-04 17:46 - 2014-02-04 17:46 - 01166132 _____ () C:\Users\mylor_000\Downloads\AdwCleaner.exe
2014-02-04 15:05 - 2014-01-04 21:23 - 00003718 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-02-04 02:11 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-03 14:56 - 2014-02-03 14:56 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-02-03 14:56 - 2013-08-22 10:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-02-03 14:55 - 2013-08-22 09:46 - 00330747 _____ () C:\WINDOWS\setupact.log
2014-02-02 20:06 - 2013-12-31 22:28 - 00000000 ____D () C:\Users\mylor_000\AppData\Local\Adobe
2014-02-02 20:01 - 2014-02-02 20:01 - 00649176 _____ () C:\WINDOWS\Minidump\020214-27968-01.dmp
2014-02-02 20:01 - 2014-01-01 16:08 - 712671124 _____ () C:\WINDOWS\MEMORY.DMP
2014-02-02 20:01 - 2014-01-01 16:08 - 00000000 ____D () C:\WINDOWS\Minidump
2014-02-01 21:42 - 2014-01-04 21:13 - 00000000 ____D () C:\Users\mylor_000\AppData\Local\Procaster
2014-01-31 01:21 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-01-30 15:47 - 2013-08-22 10:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-30 15:47 - 2013-08-22 10:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-28 16:50 - 2014-01-28 16:50 - 00000110 ____H () C:\Users\mylor_000\Downloads\.~lock.Commission Application 2013 (Responses) (4).xlsx#
2014-01-28 16:49 - 2014-01-28 16:49 - 00009586 _____ () C:\Users\mylor_000\Downloads\Commission Application 2013 (Responses) (4).xlsx
2014-01-24 20:33 - 2012-07-26 03:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2014-01-23 12:39 - 2014-01-23 12:39 - 00001360 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\Program Files\iTunes
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\Program Files\iPod
2014-01-23 12:37 - 2014-01-03 16:14 - 00000000 ____D () C:\ProgramData\Apple
2014-01-23 12:27 - 2014-01-23 12:27 - 00782568 _____ () C:\WINDOWS\Minidump\012314-43171-01.dmp
2014-01-16 17:09 - 2014-01-16 17:08 - 00782184 _____ () C:\WINDOWS\Minidump\011614-53031-01.dmp
2014-01-16 17:08 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-15 14:45 - 2013-12-25 21:33 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-15 14:42 - 2013-12-25 21:33 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-15 12:26 - 2014-01-15 12:26 - 00649280 _____ () C:\WINDOWS\Minidump\011514-36593-01.dmp
2014-01-14 15:05 - 2013-10-10 17:47 - 00028638 _____ () C:\WINDOWS\DPINST.LOG
2014-01-14 15:02 - 2014-01-14 15:02 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\InstallShield
2014-01-14 15:02 - 2014-01-14 15:02 - 00000000 ____D () C:\ProgramData\InstallShield
2014-01-14 15:02 - 2013-08-31 05:31 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-14 14:55 - 2014-01-14 14:44 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Azureus
2014-01-14 14:53 - 2014-01-14 14:53 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-01-14 14:45 - 2014-01-14 14:45 - 00000000 ____D () C:\Users\mylor_000\.swt
2014-01-14 14:43 - 2014-01-14 14:43 - 00072008 _____ (Azureus Software, Inc.) C:\Users\mylor_000\Downloads\VuzeBittorrentClientInstaller.exe
2014-01-14 14:39 - 2014-01-14 14:39 - 12628359 _____ () C:\Users\mylor_000\Downloads\Brother PE-Design Next 9 Full Pack.rar
2014-01-14 13:21 - 2014-01-14 13:16 - 00000132 _____ () C:\Users\mylor_000\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-01-14 13:13 - 2013-12-25 17:54 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Adobe
2014-01-12 18:45 - 2014-01-12 18:45 - 00647344 _____ () C:\WINDOWS\Minidump\011214-55812-01.dmp
2014-01-12 18:45 - 2013-08-22 09:44 - 04917752 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-08 22:24 - 2014-01-08 22:24 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Gyazo
2014-01-08 22:23 - 2014-01-08 22:23 - 06013024 _____ (Nota Inc. ) C:\Users\mylor_000\Downloads\GyazoSetup.exe
2014-01-08 22:23 - 2014-01-08 22:23 - 00000998 _____ () C:\Users\Public\Desktop\Gyazo.lnk
2014-01-08 22:23 - 2014-01-08 22:23 - 00000998 _____ () C:\Users\Public\Desktop\Gyazo GIF.lnk
2014-01-08 22:23 - 2014-01-08 22:23 - 00000000 ____D () C:\Program Files (x86)\Gyazo
2014-01-08 21:13 - 2014-01-08 21:13 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\OpenOffice
2014-01-08 21:06 - 2014-01-08 21:06 - 00001128 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-08 21:06 - 2014-01-08 21:05 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-01-08 21:06 - 2014-01-08 21:03 - 143436858 _____ () C:\Users\mylor_000\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_en-US.exe
2014-01-08 21:03 - 2014-01-08 21:03 - 00000000 ____D () C:\Users\mylor_000\Desktop\OpenOffice 4.0.1 (en-US) Installation Files
2014-01-08 21:03 - 2014-01-08 21:02 - 143485940 _____ () C:\Users\mylor_000\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_en-US.exe
2014-01-08 14:04 - 2014-01-08 14:04 - 00920608 _____ () C:\WINDOWS\Minidump\010814-45437-01.dmp
2014-01-07 23:38 - 2014-01-07 23:36 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Trillian
2014-01-07 23:36 - 2014-01-07 23:36 - 00001125 _____ () C:\Users\mylor_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trillian.lnk
2014-01-07 23:36 - 2014-01-07 23:36 - 00001095 _____ () C:\Users\mylor_000\Desktop\Trillian.lnk
2014-01-07 23:36 - 2013-12-25 17:54 - 00000000 ___RD () C:\Users\mylor_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-07 23:35 - 2014-01-07 23:35 - 21961360 _____ () C:\Users\mylor_000\Downloads\trillian-v5.4.0.15.exe
2014-01-07 02:00 - 2013-12-31 22:30 - 00000000 ____D () C:\ProgramData\Adobe
2014-01-06 19:38 - 2014-01-06 19:38 - 00002777 _____ () C:\Users\Public\Desktop\Sculptris Alpha 6.exe.lnk
2014-01-06 19:38 - 2014-01-06 19:38 - 00000000 ____D () C:\Users\Public\Pixologic
2014-01-06 19:38 - 2014-01-06 19:38 - 00000000 ____D () C:\Program Files (x86)\Pixologic
2014-01-06 19:35 - 2014-01-06 19:35 - 00000000 ____D () C:\Users\mylor_000\AppData\Local\Downloaded Installations
2014-01-06 19:33 - 2014-01-06 19:33 - 20168505 _____ () C:\Users\mylor_000\Downloads\Sculptris-Alpha6-Windows.zip
2014-01-06 16:39 - 2014-01-06 16:39 - 00003504 _____ () C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-mylordbyron@gmail.com
2014-01-06 16:39 - 2014-01-06 16:37 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
 
Some content of TEMP:
====================
C:\Users\mylor_000\AppData\Local\Temp\install_flashplayer12x32au_mssd_aaa_aih.exe
C:\Users\mylor_000\AppData\Local\Temp\Quarantine.exe
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2014-02-05 16:37
 
==================== End Of Log ============================

Attached Files



#4 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:04:09 AM

Posted 05 February 2014 - 05:55 PM



Hello sushiandpie

These are the programs I would like you to run next, if you have any problems with one of these just skip it and move on to the next one.

-AdwCleaner-

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
-Junkware-Removal-Tool-

Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
When they are complete let me have the two reports and let me know how things are running.

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#5 sushiandpie

sushiandpie
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:09 AM

Posted 05 February 2014 - 06:07 PM

# AdwCleaner v3.018 - Report created 05/02/2014 at 17:59:29
# Updated 28/01/2014 by Xplode
# Operating System : Windows 8.1  (64 bits)
# Username : mylor_000 - SIMIN
# Running from : C:\Users\mylor_000\Downloads\AdwCleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\ProgramData\boost_interprocess
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v11.0.9600.16384
 
 
-\\ Google Chrome v32.0.1700.107
 
[ File : C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
*************************
 
AdwCleaner[R0].txt - [2503 octets] - [04/02/2014 17:47:42]
AdwCleaner[R1].txt - [915 octets] - [05/02/2014 17:58:44]
AdwCleaner[S0].txt - [2564 octets] - [04/02/2014 17:50:24]
AdwCleaner[S1].txt - [841 octets] - [05/02/2014 17:59:29]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [900 octets] ##########
 
running the Junkware Removal tool now, will post that in a second post when its complete!


#6 sushiandpie

sushiandpie
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:09 AM

Posted 05 February 2014 - 06:14 PM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 8.1 x64
Ran by mylor_000 on Wed 02/05/2014 at 18:09:26.62
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
Failed to delete: [Folder] "C:\ProgramData\boost_interprocess"
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 02/05/2014 at 18:14:06.34
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


#7 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:04:09 AM

Posted 05 February 2014 - 08:58 PM


Hello sushiandpie

I Would like you to do the following.

Please print out or make a copy in notepad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer

"information and logs"
  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#8 sushiandpie

sushiandpie
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:09 AM

Posted 05 February 2014 - 09:22 PM

i downloaded ComboFix to the desktop as specified, and it is telling me that i shouldnt run it in compatibility mode or that will damage the computer. it then shuts itself down. what am i doing wrong?

 

edit - i looked into this issue elsewhere on this forum and it seems that ComboFix is incompatible with Windows 8.1


Edited by sushiandpie, 05 February 2014 - 09:25 PM.


#9 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:04:09 AM

Posted 05 February 2014 - 09:37 PM

Hello sushiandpie


Please rerun the FRST program for me and send me a new report


gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#10 sushiandpie

sushiandpie
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:09 AM

Posted 05 February 2014 - 09:39 PM

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2014
Ran by mylor_000 (administrator) on SIMIN on 05-02-2014 21:38:42
Running from C:\Users\mylor_000\Desktop
Windows 8.1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Launch8\Launch8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Launch8\Launch8_64.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\n360.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Soluto) C:\Program Files\Soluto\SolutoLauncherService.exe
(Soluto) C:\Program Files\Soluto\SolutoService.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\n360.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Soluto) C:\Program Files\Soluto\Soluto.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\EuWatch.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TrayNotify.exe
() C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13449288 2013-03-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3016432 2013-03-06] (Synaptics Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [EaseUs Watch] - C:\Program Files (x86)\EaseUS\Todo Backup\bin\EuWatch.exe [70728 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM-x32\...\Run: [EaseUs Tray] - C:\Program Files (x86)\EaseUS\Todo Backup\bin\TrayNotify.exe [1372232 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM-x32\...\Run: [EaseUs TB Tray Agent] - C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe [253512 2013-09-04] ()
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2010-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [821144 2010-10-25] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1218462981-349761750-1491518987-1001\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-1218462981-349761750-1491518987-1002\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1218462981-349761750-1491518987-1002\...\Run: [GoogleChromeAutoLaunch_595B13ABB91BA812F12655270181FBBB] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866632 2014-02-01] (Google Inc.)
HKU\S-1-5-21-1218462981-349761750-1491518987-1002\...\Run: [Gyazo] - C:\Program Files (x86)\Gyazo\GyStation.exe [2990304 2013-10-30] (Nota Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
Startup: C:\Users\mylor_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?type=994519&fr=spigot-yhp-ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
SearchScopes: HKLM - DefaultScope {37B8121C-708B-429D-8417-B0F19D9DF572} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {37B8121C-708B-429D-8417-B0F19D9DF572} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 - {37B8121C-708B-429D-8417-B0F19D9DF572} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {37B8121C-708B-429D-8417-B0F19D9DF572} URL = 
SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = 
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12
 
Chrome: 
=======
CHR HomePage: hxxp://www.tumblr.com/dashboard
CHR Extension: (Google Docs) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-25]
CHR Extension: (Google Drive) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-25]
CHR Extension: (Missing e) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjbagclppcgdbpobcpoojdjdmcjhpid [2013-12-28]
CHR Extension: (YouTube) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-25]
CHR Extension: (Honey) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2013-12-28]
CHR Extension: (Twitter for Chrome) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdoinklelehcpndgmcddkkdhibpoglnk [2013-12-28]
CHR Extension: (Hotot) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnfkkfleeiooolklkgkmigodkmcopnji [2013-12-28]
CHR Extension: (Google Search) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-25]
CHR Extension: (Gaia Online) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcejlakbncmhdpijmpdepcjfjodfeljj [2013-12-28]
CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2013-12-28]
CHR Extension: (Tumblr Purrification) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\elfolagcmfgahhhpebfpijbnnjkakpgb [2013-12-28]
CHR Extension: (Stylish) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2013-12-28]
CHR Extension: (XKit) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpfgeeomkfdefkckijiabdbogjkdaecd [2014-01-31]
CHR Extension: (Quick Javascript Switcher) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\geddoclleiomckbhadiaipdggiiccfje [2014-01-06]
CHR Extension: (AdBlock) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-12-28]
CHR Extension: (Eye Dropper) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka [2013-12-28]
CHR Extension: (Norton Identity Protection) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2013-12-28]
CHR Extension: (AutoPager Chrome) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh [2013-12-28]
CHR Extension: (TumTaster) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nanfbkacbckngfcklahdgfagjlghfbgm [2013-12-28]
CHR Extension: (#wrap) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbcgkdilbhnnoemimofnknocbkpldobi [2013-12-28]
CHR Extension: (Google Wallet) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-25]
CHR Extension: (AutoScroll) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\occjjkgifpmdgodlplnacmkejpdionan [2013-12-28]
CHR Extension: (NotScripts) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn [2013-12-28]
CHR Extension: (Tumblr Savior) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\oefddkjnflmjbclpnnoegglmmdfkidip [2013-12-28]
CHR Extension: (ScriptSafe) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2013-12-28]
CHR Extension: (Gmail) - C:\Users\mylor_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\Exts\Chrome.crx [2014-01-20]
 
==================== Services (Whitelisted) =================
 
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227968 2013-02-28] (Qualcomm Atheros Commnucations)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-27] (Acer Incorporated)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [660040 2013-01-18] (Acer Incorporated)
R2 Guard Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [128896 2013-02-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165760 2013-02-18] (Intel Corporation)
R2 Launch8; C:\Program Files (x86)\Stardock\Launch8\Launch8Srv.exe [87152 2013-10-22] (Stardock Software, Inc)
S2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-04-25] (Acer Incorporate)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
R2 SolutoLauncherService; C:\Program Files\Soluto\SolutoLauncherService.exe [222168 2013-01-29] (Soluto)
R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.)
 
==================== Drivers (Whitelisted) ====================
 
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Windows ® Win 7 DDK provider)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-17] (Symantec Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-02-28] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-25] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-12-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-12-27] (Symantec Corporation)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48200 2013-09-04] ()
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\IPSDefs\20140205.002\IDSvia64.sys [521944 2014-01-20] (Symantec Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-12-29] (Microsoft Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-09] (Acer Incorporated)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140205.007\ENG64.SYS [126040 2014-02-02] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.1.3\Definitions\VirusDefs\20140205.007\EX64.SYS [2099288 2014-02-02] (Symantec Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-09] (Acer Incorporated)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [455240 2013-03-05] (RTS Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-12-29] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31984 2013-03-06] (Synaptics Incorporated)
R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-26] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-07-30] (Symantec Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-07-31] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-26] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\N360x64\1501000.012\SymELAM.sys [23568 2013-07-31] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-27] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-07-30] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-25] (Symantec Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [37768 2013-08-22] (Microsoft Corporation)
R3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-02-05 21:19 - 2014-02-05 21:21 - 00000000 ___SD () C:\32788R22FWJFW
2014-02-05 21:19 - 2014-02-05 21:19 - 00000000 ____D () C:\WINDOWS\erdnt
2014-02-05 18:14 - 2014-02-05 18:14 - 00000692 _____ () C:\Users\mylor_000\Desktop\JRT.txt
2014-02-05 18:01 - 2014-02-05 18:01 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-05 17:08 - 2014-02-05 21:38 - 00025022 _____ () C:\Users\mylor_000\Desktop\FRST.txt
2014-02-05 17:08 - 2014-02-05 17:08 - 00031122 _____ () C:\Users\mylor_000\Desktop\Addition.txt
2014-02-05 17:07 - 2014-02-05 17:07 - 00031122 _____ () C:\Users\mylor_000\Downloads\Addition.txt
2014-02-05 17:05 - 2014-02-05 21:38 - 00000000 ____D () C:\FRST
2014-02-05 17:05 - 2014-02-05 17:07 - 00056493 _____ () C:\Users\mylor_000\Downloads\FRST.txt
2014-02-05 17:05 - 2014-02-05 17:05 - 02082304 _____ (Farbar) C:\Users\mylor_000\Desktop\FRST64.exe
2014-02-04 23:26 - 2014-02-04 23:42 - 02319710 _____ () C:\Users\mylor_000\Documents\$$$tmp.wpb
2014-02-04 18:18 - 2014-02-04 18:18 - 00001125 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Malwarebytes
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-04 18:18 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-02-04 18:17 - 2014-02-04 18:17 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\mylor_000\Downloads\mbam-setup-1-75-0-1300.exe
2014-02-04 18:06 - 2014-02-04 18:06 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-04 18:02 - 2014-02-04 18:02 - 00002564 _____ () C:\Users\mylor_000\Desktop\AdwCleaner[S0].txt
2014-02-04 17:58 - 2014-02-04 17:58 - 01037530 _____ (Thisisu) C:\Users\mylor_000\Downloads\JRT.exe
2014-02-04 17:47 - 2014-02-05 17:59 - 00000000 ____D () C:\AdwCleaner
2014-02-04 17:46 - 2014-02-04 17:46 - 01166132 _____ () C:\Users\mylor_000\Downloads\AdwCleaner.exe
2014-02-03 14:56 - 2014-02-03 14:56 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-02-03 14:56 - 2006-09-13 05:00 - 00234496 _____ (CANON INC.) C:\WINDOWS\system32\CNMLM7L.DLL
2014-02-02 20:01 - 2014-02-02 20:01 - 00649176 _____ () C:\WINDOWS\Minidump\020214-27968-01.dmp
2014-01-28 16:50 - 2014-01-28 16:50 - 00000110 ____H () C:\Users\mylor_000\Downloads\.~lock.Commission Application 2013 (Responses) (4).xlsx#
2014-01-28 16:49 - 2014-01-28 16:49 - 00009586 _____ () C:\Users\mylor_000\Downloads\Commission Application 2013 (Responses) (4).xlsx
2014-01-23 12:39 - 2014-01-23 12:39 - 00001360 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\Program Files\iTunes
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\Program Files\iPod
2014-01-23 12:27 - 2014-01-23 12:27 - 00782568 _____ () C:\WINDOWS\Minidump\012314-43171-01.dmp
2014-01-16 17:08 - 2014-01-16 17:09 - 00782184 _____ () C:\WINDOWS\Minidump\011614-53031-01.dmp
2014-01-15 13:44 - 2013-12-08 19:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 13:43 - 2013-11-27 10:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 13:43 - 2013-11-27 06:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 13:43 - 2013-11-27 05:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 13:43 - 2013-11-27 04:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 13:43 - 2013-11-27 03:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 13:43 - 2013-11-27 03:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 13:43 - 2013-11-27 03:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 13:43 - 2013-11-27 03:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 13:43 - 2013-11-27 03:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 13:43 - 2013-11-27 03:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-15 12:26 - 2014-01-15 12:26 - 00649280 _____ () C:\WINDOWS\Minidump\011514-36593-01.dmp
2014-01-14 15:02 - 2014-01-14 15:02 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\InstallShield
2014-01-14 15:02 - 2014-01-14 15:02 - 00000000 ____D () C:\ProgramData\InstallShield
2014-01-14 14:54 - 2002-04-03 17:13 - 00348672 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltdlg13n.ocx
2014-01-14 14:54 - 2002-04-03 17:11 - 01368576 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltdlg13n.dll
2014-01-14 14:54 - 2002-04-03 17:11 - 00065536 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfcgm13n.dll
2014-01-14 14:54 - 2002-04-03 15:24 - 00094208 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltodb13n.ocx
2014-01-14 14:54 - 2002-04-03 15:23 - 00241152 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltpnt13n.ocx
2014-01-14 14:54 - 2002-04-03 15:23 - 00192512 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltscr13n.ocx
2014-01-14 14:54 - 2002-04-03 15:23 - 00180224 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst13n.ocx
2014-01-14 14:54 - 2002-04-03 15:23 - 00141312 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb13n.ocx
2014-01-14 14:54 - 2002-04-03 15:23 - 00134144 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltmrc13n.ocx
2014-01-14 14:54 - 2002-04-03 15:21 - 00731136 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltocx13n.ocx
2014-01-14 14:54 - 2002-04-03 14:53 - 00921088 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDic13n.dll
2014-01-14 14:54 - 2002-04-03 14:52 - 00248320 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFJ2K13n.dll
2014-01-14 14:54 - 2002-04-03 14:51 - 00150016 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpng13n.dll
2014-01-14 14:54 - 2002-04-03 14:50 - 00103936 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttw213n.dll
2014-01-14 14:54 - 2002-04-03 14:49 - 00120320 ____N () C:\WINDOWS\SysWOW64\Ltpnt13n.dll
2014-01-14 14:54 - 2002-04-03 14:49 - 00116736 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTAUT13n.dll
2014-01-14 14:54 - 2002-04-03 14:49 - 00112640 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTOCR13n.dll
2014-01-14 14:54 - 2002-04-03 14:49 - 00080384 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTCON13n.dll
2014-01-14 14:54 - 2002-04-03 14:49 - 00076288 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltpdg13n.dll
2014-01-14 14:54 - 2002-04-03 14:48 - 00293376 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfAFP13n.dll
2014-01-14 14:54 - 2002-04-03 14:48 - 00082432 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfshp13n.dll
2014-01-14 14:54 - 2002-04-03 14:48 - 00069632 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFPTK13n.dll
2014-01-14 14:54 - 2002-04-03 14:48 - 00058368 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfsct13n.dll
2014-01-14 14:54 - 2002-04-03 14:48 - 00033280 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwmp13n.dll
2014-01-14 14:54 - 2002-04-03 14:46 - 00351744 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFCMP13n.DLL
2014-01-14 14:54 - 2002-04-03 14:45 - 00131072 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lftif13n.dll
2014-01-14 14:54 - 2002-04-03 14:44 - 00482816 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwf13n.dll
2014-01-14 14:54 - 2002-04-03 14:44 - 00133632 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdxf13n.dll
2014-01-14 14:54 - 2002-04-03 14:44 - 00084480 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfgbr13n.dll
2014-01-14 14:54 - 2002-04-03 14:44 - 00074240 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfplt13n.dll
2014-01-14 14:54 - 2002-04-03 14:44 - 00019456 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfvec13n.dll
2014-01-14 14:54 - 2002-04-03 14:43 - 00918016 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Ltwvc13n.dll
2014-01-14 14:54 - 2002-04-03 14:43 - 00114176 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwg13n.dll
2014-01-14 14:54 - 2002-04-03 14:43 - 00110592 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTSGM13N.DLL
2014-01-14 14:54 - 2002-04-03 14:43 - 00054784 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdgn13n.dll
2014-01-14 14:54 - 2002-04-03 14:43 - 00052224 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdrw13n.dll
2014-01-14 14:54 - 2002-04-03 14:42 - 00139776 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTSCR13n.DLL
2014-01-14 14:54 - 2002-04-03 14:41 - 01684480 ____N () C:\WINDOWS\SysWOW64\LTCLR13n.dll
2014-01-14 14:54 - 2002-04-03 14:41 - 00077312 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTTLB13n.dll
2014-01-14 14:54 - 2002-04-03 14:39 - 00228352 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lvkrn13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00171008 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpdf13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00049152 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfwmf13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00047104 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXpm13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00045056 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXbm13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00025600 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfxwd13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00023552 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lftga13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00020480 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwpg13n.dll
2014-01-14 14:54 - 2002-04-03 14:38 - 00019968 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwfx13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00102400 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmpg13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00059392 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpct13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00055296 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpsd13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00031232 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFPNM13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00026112 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcx13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00020480 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfsgi13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00019968 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcd13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00019456 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfras13n.dll
2014-01-14 14:54 - 2002-04-03 14:37 - 00018944 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmsp13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00090112 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfjbg13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00084480 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lffpx13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00048128 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfica13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00038400 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfflc13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00034816 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfgif13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00031744 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflmb13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00029184 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflma13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00027136 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfiff13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00020992 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfimg13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00019968 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfitg13n.dll
2014-01-14 14:54 - 2002-04-03 14:36 - 00018944 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmac13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00073216 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lffax13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00050176 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00037888 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfeps13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00035840 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfcal13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00032256 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00030208 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfbmp13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00029184 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfclp13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00025600 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfani13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00023040 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfawd13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00021504 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfCUT13n.dll
2014-01-14 14:54 - 2002-04-03 14:35 - 00018944 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfavi13n.dll
2014-01-14 14:54 - 2002-04-03 14:34 - 00326144 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltimg13n.dll
2014-01-14 14:54 - 2002-04-03 14:34 - 00034816 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltisi13n.dll
2014-01-14 14:54 - 2002-04-03 14:34 - 00030208 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTWND13n.DLL
2014-01-14 14:54 - 2002-04-03 14:33 - 00416256 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltkrn13n.dll
2014-01-14 14:54 - 2002-04-03 14:33 - 00258560 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDIS13n.dll
2014-01-14 14:54 - 2002-04-03 14:33 - 00137728 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltfil13n.DLL
2014-01-14 14:54 - 2002-04-03 13:54 - 00138752 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltisi13n.ocx
2014-01-14 14:54 - 2002-04-03 13:08 - 00796160 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltann13n.dll
2014-01-14 14:54 - 2002-04-03 13:08 - 00205824 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltefx13n.dll
2014-01-14 14:54 - 2002-04-03 13:08 - 00035328 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttwn13n.dll
2014-01-14 14:54 - 2002-03-12 23:04 - 00966144 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltdlgres13n.dll
2014-01-14 14:54 - 2002-01-30 13:18 - 00093184 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfPCL13n.dll
2014-01-14 14:54 - 2002-01-29 10:03 - 00026624 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AWRESX32.DLL
2014-01-14 14:54 - 2002-01-29 10:03 - 00024576 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AWCODC32.DLL
2014-01-14 14:54 - 2002-01-29 10:03 - 00011776 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AWDENC32.DLL
2014-01-14 14:54 - 2002-01-29 10:03 - 00010240 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AWVIEW32.DLL
2014-01-14 14:54 - 2002-01-29 10:03 - 00006144 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\AWDCXC32.DLL
2014-01-14 14:54 - 2002-01-14 12:01 - 00131584 ____N () C:\WINDOWS\SysWOW64\lttlb13n.ocx
2014-01-14 14:54 - 2001-11-19 16:57 - 00825344 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltwen13n.dll
2014-01-14 14:54 - 2001-11-16 19:05 - 00033792 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFSMP13n.dll
2014-01-14 14:54 - 2001-11-16 19:04 - 00445440 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFCMW13n.dll
2014-01-14 14:54 - 2001-11-16 18:55 - 00017920 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfRaw13n.dll
2014-01-14 14:54 - 2001-11-15 16:31 - 00794624 ____N (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTRTN13n.DLL
2014-01-14 14:54 - 2000-07-21 12:05 - 00614672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OLEA2003.rra
2014-01-14 14:54 - 2000-07-21 12:05 - 00164112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OLEP22a3.rra
2014-01-14 14:54 - 2000-05-02 04:17 - 00212480 ____N (Eastman Kodak) C:\WINDOWS\SysWOW64\PCDLIB32.DLL
2014-01-14 14:54 - 2000-04-12 16:28 - 00118784 ____N () C:\WINDOWS\SysWOW64\lfkodak.dll
2014-01-14 14:54 - 2000-04-12 16:24 - 00338944 ____N () C:\WINDOWS\SysWOW64\lffpx7.dll
2014-01-14 14:53 - 2014-01-14 14:53 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-01-14 14:45 - 2014-01-14 14:45 - 00000000 ____D () C:\Users\mylor_000\.swt
2014-01-14 14:44 - 2014-01-14 14:55 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Azureus
2014-01-14 14:43 - 2014-01-14 14:43 - 00072008 _____ (Azureus Software, Inc.) C:\Users\mylor_000\Downloads\VuzeBittorrentClientInstaller.exe
2014-01-14 14:39 - 2014-01-14 14:39 - 12628359 _____ () C:\Users\mylor_000\Downloads\Brother PE-Design Next 9 Full Pack.rar
2014-01-14 13:16 - 2014-01-14 13:21 - 00000132 _____ () C:\Users\mylor_000\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-01-12 18:45 - 2014-01-12 18:45 - 00647344 _____ () C:\WINDOWS\Minidump\011214-55812-01.dmp
2014-01-08 22:24 - 2014-01-08 22:24 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Gyazo
2014-01-08 22:23 - 2014-01-08 22:23 - 06013024 _____ (Nota Inc. ) C:\Users\mylor_000\Downloads\GyazoSetup.exe
2014-01-08 22:23 - 2014-01-08 22:23 - 00000998 _____ () C:\Users\Public\Desktop\Gyazo.lnk
2014-01-08 22:23 - 2014-01-08 22:23 - 00000998 _____ () C:\Users\Public\Desktop\Gyazo GIF.lnk
2014-01-08 22:23 - 2014-01-08 22:23 - 00000000 ____D () C:\Program Files (x86)\Gyazo
2014-01-08 21:13 - 2014-01-08 21:13 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\OpenOffice
2014-01-08 21:06 - 2014-01-08 21:06 - 00001128 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-08 21:05 - 2014-01-08 21:06 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-01-08 21:03 - 2014-01-08 21:06 - 143436858 _____ () C:\Users\mylor_000\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_en-US.exe
2014-01-08 21:03 - 2014-01-08 21:03 - 00000000 ____D () C:\Users\mylor_000\Desktop\OpenOffice 4.0.1 (en-US) Installation Files
2014-01-08 21:02 - 2014-01-08 21:03 - 143485940 _____ () C:\Users\mylor_000\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_en-US.exe
2014-01-08 14:04 - 2014-01-08 14:04 - 00920608 _____ () C:\WINDOWS\Minidump\010814-45437-01.dmp
2014-01-07 23:36 - 2014-02-04 18:34 - 00000000 ____D () C:\Program Files (x86)\Trillian
2014-01-07 23:36 - 2014-01-07 23:38 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Trillian
2014-01-07 23:36 - 2014-01-07 23:36 - 00001125 _____ () C:\Users\mylor_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trillian.lnk
2014-01-07 23:36 - 2014-01-07 23:36 - 00001095 _____ () C:\Users\mylor_000\Desktop\Trillian.lnk
2014-01-07 23:35 - 2014-01-07 23:35 - 21961360 _____ () C:\Users\mylor_000\Downloads\trillian-v5.4.0.15.exe
2014-01-06 19:38 - 2014-01-06 19:38 - 00002777 _____ () C:\Users\Public\Desktop\Sculptris Alpha 6.exe.lnk
2014-01-06 19:38 - 2014-01-06 19:38 - 00000000 ____D () C:\Users\Public\Pixologic
2014-01-06 19:38 - 2014-01-06 19:38 - 00000000 ____D () C:\Program Files (x86)\Pixologic
2014-01-06 19:35 - 2014-01-06 19:35 - 00000000 ____D () C:\Users\mylor_000\AppData\Local\Downloaded Installations
2014-01-06 19:33 - 2014-01-06 19:33 - 20168505 _____ () C:\Users\mylor_000\Downloads\Sculptris-Alpha6-Windows.zip
2014-01-06 16:39 - 2014-01-06 16:39 - 00003504 _____ () C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-mylordbyron@gmail.com
2014-01-06 16:37 - 2014-01-06 16:39 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
 
==================== One Month Modified Files and Folders =======
 
2014-02-05 21:39 - 2014-02-05 17:08 - 00025022 _____ () C:\Users\mylor_000\Desktop\FRST.txt
2014-02-05 21:38 - 2014-02-05 17:05 - 00000000 ____D () C:\FRST
2014-02-05 21:21 - 2014-02-05 21:19 - 00000000 ___SD () C:\32788R22FWJFW
2014-02-05 21:20 - 2014-01-01 01:44 - 00000000 ____D () C:\Sai
2014-02-05 21:19 - 2014-02-05 21:19 - 00000000 ____D () C:\WINDOWS\erdnt
2014-02-05 21:12 - 2013-12-29 00:32 - 01525967 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-05 21:12 - 2013-12-25 18:02 - 00000916 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-05 21:05 - 2014-01-04 21:23 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-02-05 21:04 - 2013-12-28 22:42 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Skype
2014-02-05 21:00 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-05 18:14 - 2014-02-05 18:14 - 00000692 _____ () C:\Users\mylor_000\Desktop\JRT.txt
2014-02-05 18:08 - 2013-11-14 02:28 - 00863592 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-05 18:07 - 2013-12-25 18:04 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-05 18:07 - 2013-12-25 18:02 - 00000912 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-05 18:05 - 2013-12-29 21:38 - 00000000 __RDO () C:\Users\mylor_000\SkyDrive
2014-02-05 18:02 - 2013-08-22 08:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-02-05 18:01 - 2014-02-05 18:01 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-05 18:01 - 2013-08-22 09:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-05 18:00 - 2013-08-22 08:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-05 17:59 - 2014-02-04 17:47 - 00000000 ____D () C:\AdwCleaner
2014-02-05 17:08 - 2014-02-05 17:08 - 00031122 _____ () C:\Users\mylor_000\Desktop\Addition.txt
2014-02-05 17:07 - 2014-02-05 17:07 - 00031122 _____ () C:\Users\mylor_000\Downloads\Addition.txt
2014-02-05 17:07 - 2014-02-05 17:05 - 00056493 _____ () C:\Users\mylor_000\Downloads\FRST.txt
2014-02-05 17:05 - 2014-02-05 17:05 - 02082304 _____ (Farbar) C:\Users\mylor_000\Desktop\FRST64.exe
2014-02-04 23:42 - 2014-02-04 23:26 - 02319710 _____ () C:\Users\mylor_000\Documents\$$$tmp.wpb
2014-02-04 20:06 - 2013-12-25 18:01 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1218462981-349761750-1491518987-1002
2014-02-04 19:13 - 2013-11-14 02:20 - 00034482 _____ () C:\WINDOWS\PFRO.log
2014-02-04 18:34 - 2014-01-07 23:36 - 00000000 ____D () C:\Program Files (x86)\Trillian
2014-02-04 18:18 - 2014-02-04 18:18 - 00001125 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Malwarebytes
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-04 18:18 - 2014-02-04 18:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-04 18:17 - 2014-02-04 18:17 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\mylor_000\Downloads\mbam-setup-1-75-0-1300.exe
2014-02-04 18:06 - 2014-02-04 18:06 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-04 18:02 - 2014-02-04 18:02 - 00002564 _____ () C:\Users\mylor_000\Desktop\AdwCleaner[S0].txt
2014-02-04 17:58 - 2014-02-04 17:58 - 01037530 _____ (Thisisu) C:\Users\mylor_000\Downloads\JRT.exe
2014-02-04 17:50 - 2013-12-29 00:38 - 00000000 ____D () C:\Users\mylor_000
2014-02-04 17:46 - 2014-02-04 17:46 - 01166132 _____ () C:\Users\mylor_000\Downloads\AdwCleaner.exe
2014-02-04 15:05 - 2014-01-04 21:23 - 00003718 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-02-04 02:11 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-03 14:56 - 2014-02-03 14:56 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-02-03 14:56 - 2013-08-22 10:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-02-03 14:55 - 2013-08-22 09:46 - 00330747 _____ () C:\WINDOWS\setupact.log
2014-02-02 20:06 - 2013-12-31 22:28 - 00000000 ____D () C:\Users\mylor_000\AppData\Local\Adobe
2014-02-02 20:01 - 2014-02-02 20:01 - 00649176 _____ () C:\WINDOWS\Minidump\020214-27968-01.dmp
2014-02-02 20:01 - 2014-01-01 16:08 - 712671124 _____ () C:\WINDOWS\MEMORY.DMP
2014-02-02 20:01 - 2014-01-01 16:08 - 00000000 ____D () C:\WINDOWS\Minidump
2014-02-01 21:42 - 2014-01-04 21:13 - 00000000 ____D () C:\Users\mylor_000\AppData\Local\Procaster
2014-01-31 01:21 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-01-30 15:47 - 2013-08-22 10:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-30 15:47 - 2013-08-22 10:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-28 16:50 - 2014-01-28 16:50 - 00000110 ____H () C:\Users\mylor_000\Downloads\.~lock.Commission Application 2013 (Responses) (4).xlsx#
2014-01-28 16:49 - 2014-01-28 16:49 - 00009586 _____ () C:\Users\mylor_000\Downloads\Commission Application 2013 (Responses) (4).xlsx
2014-01-24 20:33 - 2012-07-26 03:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2014-01-23 12:39 - 2014-01-23 12:39 - 00001360 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\Program Files\iTunes
2014-01-23 12:39 - 2014-01-23 12:39 - 00000000 ____D () C:\Program Files\iPod
2014-01-23 12:37 - 2014-01-03 16:14 - 00000000 ____D () C:\ProgramData\Apple
2014-01-23 12:27 - 2014-01-23 12:27 - 00782568 _____ () C:\WINDOWS\Minidump\012314-43171-01.dmp
2014-01-16 17:09 - 2014-01-16 17:08 - 00782184 _____ () C:\WINDOWS\Minidump\011614-53031-01.dmp
2014-01-16 17:08 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-15 14:45 - 2013-12-25 21:33 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-15 14:42 - 2013-12-25 21:33 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-15 12:26 - 2014-01-15 12:26 - 00649280 _____ () C:\WINDOWS\Minidump\011514-36593-01.dmp
2014-01-14 15:05 - 2013-10-10 17:47 - 00028638 _____ () C:\WINDOWS\DPINST.LOG
2014-01-14 15:02 - 2014-01-14 15:02 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\InstallShield
2014-01-14 15:02 - 2014-01-14 15:02 - 00000000 ____D () C:\ProgramData\InstallShield
2014-01-14 15:02 - 2013-08-31 05:31 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-14 14:55 - 2014-01-14 14:44 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Azureus
2014-01-14 14:53 - 2014-01-14 14:53 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-01-14 14:45 - 2014-01-14 14:45 - 00000000 ____D () C:\Users\mylor_000\.swt
2014-01-14 14:43 - 2014-01-14 14:43 - 00072008 _____ (Azureus Software, Inc.) C:\Users\mylor_000\Downloads\VuzeBittorrentClientInstaller.exe
2014-01-14 14:39 - 2014-01-14 14:39 - 12628359 _____ () C:\Users\mylor_000\Downloads\Brother PE-Design Next 9 Full Pack.rar
2014-01-14 13:21 - 2014-01-14 13:16 - 00000132 _____ () C:\Users\mylor_000\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-01-14 13:13 - 2013-12-25 17:54 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Adobe
2014-01-12 18:45 - 2014-01-12 18:45 - 00647344 _____ () C:\WINDOWS\Minidump\011214-55812-01.dmp
2014-01-12 18:45 - 2013-08-22 09:44 - 04917752 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-08 22:24 - 2014-01-08 22:24 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Gyazo
2014-01-08 22:23 - 2014-01-08 22:23 - 06013024 _____ (Nota Inc. ) C:\Users\mylor_000\Downloads\GyazoSetup.exe
2014-01-08 22:23 - 2014-01-08 22:23 - 00000998 _____ () C:\Users\Public\Desktop\Gyazo.lnk
2014-01-08 22:23 - 2014-01-08 22:23 - 00000998 _____ () C:\Users\Public\Desktop\Gyazo GIF.lnk
2014-01-08 22:23 - 2014-01-08 22:23 - 00000000 ____D () C:\Program Files (x86)\Gyazo
2014-01-08 21:13 - 2014-01-08 21:13 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\OpenOffice
2014-01-08 21:06 - 2014-01-08 21:06 - 00001128 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-08 21:06 - 2014-01-08 21:05 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-01-08 21:06 - 2014-01-08 21:03 - 143436858 _____ () C:\Users\mylor_000\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_en-US.exe
2014-01-08 21:03 - 2014-01-08 21:03 - 00000000 ____D () C:\Users\mylor_000\Desktop\OpenOffice 4.0.1 (en-US) Installation Files
2014-01-08 21:03 - 2014-01-08 21:02 - 143485940 _____ () C:\Users\mylor_000\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_en-US.exe
2014-01-08 14:04 - 2014-01-08 14:04 - 00920608 _____ () C:\WINDOWS\Minidump\010814-45437-01.dmp
2014-01-07 23:38 - 2014-01-07 23:36 - 00000000 ____D () C:\Users\mylor_000\AppData\Roaming\Trillian
2014-01-07 23:36 - 2014-01-07 23:36 - 00001125 _____ () C:\Users\mylor_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trillian.lnk
2014-01-07 23:36 - 2014-01-07 23:36 - 00001095 _____ () C:\Users\mylor_000\Desktop\Trillian.lnk
2014-01-07 23:36 - 2013-12-25 17:54 - 00000000 ___RD () C:\Users\mylor_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-07 23:35 - 2014-01-07 23:35 - 21961360 _____ () C:\Users\mylor_000\Downloads\trillian-v5.4.0.15.exe
2014-01-07 02:00 - 2013-12-31 22:30 - 00000000 ____D () C:\ProgramData\Adobe
2014-01-06 19:38 - 2014-01-06 19:38 - 00002777 _____ () C:\Users\Public\Desktop\Sculptris Alpha 6.exe.lnk
2014-01-06 19:38 - 2014-01-06 19:38 - 00000000 ____D () C:\Users\Public\Pixologic
2014-01-06 19:38 - 2014-01-06 19:38 - 00000000 ____D () C:\Program Files (x86)\Pixologic
2014-01-06 19:35 - 2014-01-06 19:35 - 00000000 ____D () C:\Users\mylor_000\AppData\Local\Downloaded Installations
2014-01-06 19:33 - 2014-01-06 19:33 - 20168505 _____ () C:\Users\mylor_000\Downloads\Sculptris-Alpha6-Windows.zip
2014-01-06 16:39 - 2014-01-06 16:39 - 00003504 _____ () C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-mylordbyron@gmail.com
2014-01-06 16:39 - 2014-01-06 16:37 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
 
Some content of TEMP:
====================
C:\Users\mylor_000\AppData\Local\Temp\install_flashplayer12x32au_mssd_aaa_aih.exe
C:\Users\mylor_000\AppData\Local\Temp\Quarantine.exe
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2014-02-05 19:17
 
==================== End Of Log ============================


#11 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:04:09 AM

Posted 05 February 2014 - 10:12 PM

Hello sushiandpie



I need you to download this script I have made for you --> Attached File  fixlist.txt   260bytes   1 downloads

It needs to be saved Next to the "Farbar Recovery Scan Tool" (FRST) program (If asked to overwrite existing one please allow)

Run FRST again but this time press the Fix button just once and wait.


When finished, it will make a log (fixlog.txt) next to FRST. Please copy and paste the content of this file to your reply.


NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system


Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#12 sushiandpie

sushiandpie
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:09 AM

Posted 05 February 2014 - 10:17 PM

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-02-2014
Ran by mylor_000 at 2014-02-05 22:16:39 Run:1
Running from C:\Users\mylor_000\Desktop
Boot Mode: Normal
==============================================
 
Content of fixlist:
*****************
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <http://search.yahoo.com/?type=994519&fr=spigot-yhp-ie>
C:\Users\mylor_000\AppData\Local\Temp\install_flashplayer12x32au_mssd_aaa_aih.exe 
C:\Users\mylor_000\AppData\Local\Temp\Quarantine.exe 
 
 
 
*****************
 
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
C:\Users\mylor_000\AppData\Local\Temp\install_flashplayer12x32au_mssd_aaa_aih.exe => Moved successfully.
C:\Users\mylor_000\AppData\Local\Temp\Quarantine.exe => Moved successfully.
 
==== End of Fixlog ====


#13 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:04:09 AM

Posted 05 February 2014 - 10:28 PM

how are things doing at this time?

gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#14 sushiandpie

sushiandpie
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:09 AM

Posted 05 February 2014 - 10:37 PM

i think its gone! i started up internet explorer, and got the Windows 8 homepage for it rather than the Spigot redirect. so i think thats done the trick, thankyou so much Gringo, youve helped me so much!



#15 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:04:09 AM

Posted 05 February 2014 - 10:48 PM


Hello

These logs are looking allot better. But we still have some work to do.

Please print out these instructions, or copy them to a Notepad file. It will make it easier for you to follow the instructions and complete all of the necessary steps..

Clean Out Temp Files
  • This small application you may want to keep and use once a week to keep the computer clean.

    Download CCleaner from here CCleaner
    • Run the installer to install the application.
    • When it gives you the option to install Yahoo toolbar uncheck the box next to it.
    • Run CCleaner. default settings are fine
    • Click Run Cleaner.
    • Close CCleaner.
: Malwarebytes' Anti-Malware :

I see that you have MBAM installed - That is great!! and at this time I would like you to update it and run me a quick scan
  • Double-click mbam icon
  • go to the update tab at the top
  • click on check for updates
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is Checked (ticked) except items in the C:\System Volume Information folder and click on Remove Selected.
  • When completed, a log will open in Notepad. please copy and paste the log into your next reply
    • If you accidentally close it, the log file is saved here and will be named like this:
    • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.



Download HijackThis
  • Go Here to download HijackThis program
  • Save HijackThis to your desktop.
  • Right Click on Hijackthis and select "Run as Admin" (XP users just need to double click to run)
  • Click on "Do A system scan and save a logfile" (if you do not see "Do A system scan and save a logfile" then click on main menu)
  • copy and paste hijackthis report into the topic
"information and logs"
  • In your next post I need the following
    • Log From MBAM
    • report from Hijackthis
    • let me know of any problems you may have had
    • How is the computer doing now?
Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users