Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

EAT @explorer.exe (AsyncGetClassBits) : COMDLG32.dll -> HOOKED


  • This topic is locked This topic is locked
8 replies to this topic

#1 scorpion73

scorpion73

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:02:59 PM

Posted 01 May 2014 - 05:53 PM

HI

 

I've been directed to post a topic here from other subforum ''Am I infected? What do I do?'' by member dev00790, who was dealing with my case and my link from that subforum is http://www.bleepingcomputer.com/forums/t/530299/rkill-results-am-i-infected/ with topic name ''RKill results, Am I infected?''

 

My problem is that while using the laptop, every now and then the sound mutes and keyboard types various symbols without even touching it. if I have websites opened, all of them go back to their home pages, also if I click on any shortcut on the desktop, several icons are selected. all these issues happen at one and the same time and last for 10-15 mins. it seems they are all related to each other and not isolated issues ( just my thoughts). I checked the drivers for the sound card and keyboard and there are all updated.

I run Rogue killer just to see if it will find something and when the scanning reached to the point to scan the MBR, I had a BSOD, showing an error with the RICOH Memory Stick Controller driver, saying that it is worth checking for its update. I did that after restart but windows says i have the most recent and updated driver. then I just disabled these drivers ( 2 ) and run again Rogue killer. it came up with following findings which I deleted.

 

¤¤ Registry Entries : 2 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> DELETED
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> DELETED
 
¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤
[Address] EAT @explorer.exe (AsyncGetClassBits) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2670B0)
[Address] EAT @explorer.exe (AsyncInstallDistributionUnit) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE267210)
[Address] EAT @explorer.exe (BindAsyncMoniker) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251F90)
[Address] EAT @explorer.exe (CDLGetLongPathNameA) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2678D0)
[Address] EAT @explorer.exe (CDLGetLongPathNameW) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2678E8)
[Address] EAT @explorer.exe (CORPolicyProvider) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251674)
[Address] EAT @explorer.exe (CoGetClassObjectFromURL) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2673FC)
[Address] EAT @explorer.exe (CoInstall) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE267460)
[Address] EAT @explorer.exe (CoInternetCanonicalizeIUri) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE215660)
[Address] EAT @explorer.exe (CoInternetCombineIUri) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2180A0)
[Address] EAT @explorer.exe (CoInternetCombineUrl) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2046A4)
[Address] EAT @explorer.exe (CoInternetCombineUrlEx) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2043C0)
[Address] EAT @explorer.exe (CoInternetCompareUrl) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE255280)
[Address] EAT @explorer.exe (CoInternetCreateSecurityManager) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1D1EE0)
[Address] EAT @explorer.exe (CoInternetCreateZoneManager) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1E0810)
[Address] EAT @explorer.exe (CoInternetFeatureSettingsChanged) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE290284)
[Address] EAT @explorer.exe (CoInternetGetProtocolFlags) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE25537C)
[Address] EAT @explorer.exe (CoInternetGetSecurityUrl) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2553D0)
[Address] EAT @explorer.exe (CoInternetGetSecurityUrlEx) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE219CD0)
[Address] EAT @explorer.exe (CoInternetGetSession) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1D2460)
[Address] EAT @explorer.exe (CoInternetIsFeatureEnabled) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE218DC0)
[Address] EAT @explorer.exe (CoInternetIsFeatureEnabledForIUri) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2151B8)
[Address] EAT @explorer.exe (CoInternetIsFeatureEnabledForUrl) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE211820)
[Address] EAT @explorer.exe (CoInternetIsFeatureZoneElevationEnabled) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE25586C)
[Address] EAT @explorer.exe (CoInternetParseIUri) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2056A8)
[Address] EAT @explorer.exe (CoInternetParseUrl) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1E1490)
[Address] EAT @explorer.exe (CoInternetQueryInfo) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE217C50)
[Address] EAT @explorer.exe (CoInternetSetFeatureEnabled) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE255AF4)
[Address] EAT @explorer.exe (CompareSecurityIds) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1ED1A4)
[Address] EAT @explorer.exe (CompatFlagsFromClsid) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE214044)
[Address] EAT @explorer.exe (CopyBindInfo) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE263020)
[Address] EAT @explorer.exe (CopyStgMedium) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1DBA0C)
[Address] EAT @explorer.exe (CreateAsyncBindCtx) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2286C0)
[Address] EAT @explorer.exe (CreateAsyncBindCtxEx) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE213D14)
[Address] EAT @explorer.exe (CreateFormatEnumerator) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1F68E0)
[Address] EAT @explorer.exe (CreateIUriBuilder) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1D3660)
[Address] EAT @explorer.exe (CreateURLMoniker) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE22CCF4)
[Address] EAT @explorer.exe (CreateURLMonikerEx) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1D78D0)
[Address] EAT @explorer.exe (CreateURLMonikerEx2) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2140F0)
[Address] EAT @explorer.exe (CreateUri) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1D16F0)
[Address] EAT @explorer.exe (CreateUriFromMultiByteString) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251EE4)
[Address] EAT @explorer.exe (CreateUriPriv) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251EF8)
[Address] EAT @explorer.exe (CreateUriWithFragment) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251F40)
[Address] EAT @explorer.exe (DllCanUnloadNow) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1D1600)
[Address] EAT @explorer.exe (DllGetClassObject) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE21AB3C)
[Address] EAT @explorer.exe (DllInstall) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE252458)
[Address] EAT @explorer.exe (DllRegisterServer) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE252464)
[Address] EAT @explorer.exe (DllRegisterServerEx) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE22E070)
[Address] EAT @explorer.exe (DllUnregisterServer) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE252470)
[Address] EAT @explorer.exe (Extract) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE267F74)
[Address] EAT @explorer.exe (FaultInIEFeature) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE268FE8)
[Address] EAT @explorer.exe (FileBearsMarkOfTheWeb) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE206B60)
[Address] EAT @explorer.exe (FindMediaType) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE252E9C)
[Address] EAT @explorer.exe (FindMediaTypeClass) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1F6080)
[Address] EAT @explorer.exe (FindMimeFromData) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2150BC)
[Address] EAT @explorer.exe (GetAddSitesFileUrl) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2902B0)
[Address] EAT @explorer.exe (GetClassFileOrMime) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE22B8EC)
[Address] EAT @explorer.exe (GetClassURL) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE252074)
[Address] EAT @explorer.exe (GetComponentIDFromCLSSPEC) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2692E8)
[Address] EAT @explorer.exe (GetIDNFlagsForUri) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1EC7F0)
[Address] EAT @explorer.exe (GetIUriPriv) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251F60)
[Address] EAT @explorer.exe (GetIUriPriv2) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251F50)
[Address] EAT @explorer.exe (GetLabelsFromNamedHost) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE298B54)
[Address] EAT @explorer.exe (GetMarkOfTheWeb) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE289390)
[Address] EAT @explorer.exe (GetPortFromUrlScheme) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251E94)
[Address] EAT @explorer.exe (GetPropertyFromName) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251EA4)
[Address] EAT @explorer.exe (GetPropertyName) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251EB4)
[Address] EAT @explorer.exe (GetSoftwareUpdateInfo) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE22E070)
[Address] EAT @explorer.exe (GetUrlmonThreadNotificationHwnd) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE22DEB4)
[Address] EAT @explorer.exe (GetZoneFromAlternateDataStreamEx) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1D6D90)
[Address] EAT @explorer.exe (HlinkGoBack) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE286E78)
[Address] EAT @explorer.exe (HlinkGoForward) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE286F24)
[Address] EAT @explorer.exe (HlinkNavigateMoniker) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE286FD0)
[Address] EAT @explorer.exe (HlinkNavigateString) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE287004)
[Address] EAT @explorer.exe (HlinkSimpleNavigateToMoniker) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE287038)
[Address] EAT @explorer.exe (HlinkSimpleNavigateToString) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2875E8)
[Address] EAT @explorer.exe (IECompatLogCSSFix) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2612FC)
[Address] EAT @explorer.exe (IEDllLoader) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2526F0)
[Address] EAT @explorer.exe (IEGetUserPrivateNamespaceName) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE263244)
[Address] EAT @explorer.exe (IEInstallScope) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE267554)
[Address] EAT @explorer.exe (IntlPercentEncodeNormalize) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251F70)
[Address] EAT @explorer.exe (IsAsyncMoniker) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2121FC)
[Address] EAT @explorer.exe (IsDWORDProperty) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251EC4)
[Address] EAT @explorer.exe (IsIntranetAvailable) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE290668)
[Address] EAT @explorer.exe (IsJITInProgress) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1EB328)
[Address] EAT @explorer.exe (IsLoggingEnabledA) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE28855C)
[Address] EAT @explorer.exe (IsLoggingEnabledW) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE288688)
[Address] EAT @explorer.exe (IsStringProperty) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE251ED4)
[Address] EAT @explorer.exe (IsValidURL) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE207610)
[Address] EAT @explorer.exe (MkParseDisplayNameEx) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2292F0)
[Address] EAT @explorer.exe (ObtainUserAgentString) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE25DCE0)
[Address] EAT @explorer.exe (PrivateCoInstall) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE267560)
[Address] EAT @explorer.exe (QueryAssociations) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1EE9C0)
[Address] EAT @explorer.exe (QueryClsidAssociation) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE260A8C)
[Address] EAT @explorer.exe (RegisterBindStatusCallback) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE20F600)
[Address] EAT @explorer.exe (RegisterFormatEnumerator) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE211C6C)
[Address] EAT @explorer.exe (RegisterMediaTypeClass) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2520C0)
[Address] EAT @explorer.exe (RegisterMediaTypes) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE252210)
[Address] EAT @explorer.exe (RegisterWebPlatformPermanentSecurityManager) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE208C54)
[Address] EAT @explorer.exe (ReleaseBindInfo) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1D7D40)
[Address] EAT @explorer.exe (RevokeBindStatusCallback) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE20FBF0)
[Address] EAT @explorer.exe (RevokeFormatEnumerator) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2522CC)
[Address] EAT @explorer.exe (SetAccessForIEAppContainer) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE263258)
[Address] EAT @explorer.exe (SetSoftwareUpdateAdvertisementState) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE22E070)
[Address] EAT @explorer.exe (ShouldDisplayPunycodeForUri) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE25DE50)
[Address] EAT @explorer.exe (ShouldShowIntranetWarningSecband) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE213A3C)
[Address] EAT @explorer.exe (ShowTrustAlertDialog) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE290820)
[Address] EAT @explorer.exe (URLDownloadA) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE255CC4)
[Address] EAT @explorer.exe (URLDownloadToCacheFileA) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE287D9C)
[Address] EAT @explorer.exe (URLDownloadToCacheFileW) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1FA0C4)
[Address] EAT @explorer.exe (URLDownloadToFileA) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE287F10)
[Address] EAT @explorer.exe (URLDownloadToFileW) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1FEFD0)
[Address] EAT @explorer.exe (URLDownloadW) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE255D78)
[Address] EAT @explorer.exe (URLOpenBlockingStreamA) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE288058)
[Address] EAT @explorer.exe (URLOpenBlockingStreamW) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE288138)
[Address] EAT @explorer.exe (URLOpenPullStreamA) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE28821C)
[Address] EAT @explorer.exe (URLOpenPullStreamW) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2882E0)
[Address] EAT @explorer.exe (URLOpenStreamA) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE288408)
[Address] EAT @explorer.exe (URLOpenStreamW) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2884D0)
[Address] EAT @explorer.exe (UnregisterWebPlatformPermanentSecurityManager) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE22C9B4)
[Address] EAT @explorer.exe (UrlMkBuildVersion) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE252804)
[Address] EAT @explorer.exe (UrlMkGetSessionOption) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1E3E60)
[Address] EAT @explorer.exe (UrlMkSetSessionOption) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE20D0E4)
[Address] EAT @explorer.exe (UrlmonCleanupCurrentThread) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE1FA27C)
[Address] EAT @explorer.exe (WriteHitLogging) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE2885D0)
[Address] EAT @explorer.exe (ZonesReInit) : COMDLG32.dll -> HOOKED (C:\Windows\system32\urlmon.dll @ 0xFE289C30)
 
The thing is that if I run again Rogue killer later, some of these above come again. not sure if this is related to sound and keyboard issue.
 
Will appreciate your help, guys. Thanks in advance.
 
DDS log:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17041  BrowserJavaVersion: 10.45.2
Run by sony at 23:26:48 on 2014-05-01
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.44.1033.18.3950.1687 [GMT 1:00]
.
AV: Bitdefender Antivirus *Enabled/Updated* {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
SP: Bitdefender Antispyware *Enabled/Updated* {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall *Enabled* {A23392FD-84B9-F933-2C71-81E751F6EF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
C:\Program Files\Sandboxie\SbieCtrl.exe
C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
C:\Program Files (x86)\Advanced System Optimizer 3\ASO3DefragSrv64.exe
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\CCleaner\CCleaner64.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files (x86)\Common Files\Sage SData\Sage.SData.Service.exe
C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe
C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\iPod\bin\iPodService.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\taskeng.exe
C:\Program Files\Sony\VAIO Care\VCsystray.exe
C:\Program Files\Sony\VAIO Care\VCService.exe
C:\Program Files\Sony\VAIO Care\VCAgent.exe
C:\Windows\System32\vds.exe
C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Sony\VAIO Care\VCPerfService.exe
C:\Program Files\Sony\VAIO Care\listener.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Windows\system32\taskmgr.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uWindow Title = Internet Explorer, optimized for Bing and MSN
uSearch Bar = hxxp://www.bing.com
mStart Page = about:blank
mDefault_Page_URL = hxxp://www.google.com
uURLSearchHooks: {8bc67b0f-a721-45e0-a0b6-db0121b0aade} - <orphaned>
mWinlogon: Userinit = userinit.exe,
BHO: Bitdefender Wallet: {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll
BHO: Lync Browser Helper: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
BHO: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
BHO: Canon Easy-WebPrint EX BHO: {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: Canon Easy-WebPrint EX: {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
EB: Canon Easy-WebPrint EX: {21347690-EC41-4F9A-8887-1F4AEE672439} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
uRun: [SandboxieControl] "C:\Program Files\Sandboxie\SbieCtrl.exe"
uRun: [MyDriveConnect.exe] "C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe"
uRun: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
uRun: [Bitdefender Wallet Agent] "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe"
uRun: [Bitdefender Wallet] "C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe" --hidden --nowizard
uRun: [Bitdefender Wallet Application Agent] "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe"
mRun: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
dRun: [Bitdefender Wallet Agent] "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe"
dRun: [Bitdefender Wallet] "C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe" --hidden --nowizard
dRun: [Bitdefender Wallet Application Agent] "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe"
uPolicies-Explorer: NoDriveTypeAutoRun = dword:221
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: DisableStartupSound = dword:1
IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-001045-0002-0045-ABCDEFFEDCBC} - <orphaned>
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
IE: {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - {BC0E0A5D-AB5A-4fa4-A5FA-280E1D58EEEE} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {A996E48C-D3DC-4244-89F7-AFA33EC60679} - hxxps://online.rbb.bg/capicom.cab
DPF: {CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: NameServer = 194.168.4.100 194.168.8.100
TCP: Interfaces\{270C2D92-990D-4847-89C2-5A380B77A674} : DHCPNameServer = 192.168.1.1 192.168.1.1
TCP: Interfaces\{738EF53B-1911-481A-8C5D-B8FFAFA587B0} : DHCPNameServer = 192.168.1.1 192.168.1.1
TCP: Interfaces\{DF077166-042A-4352-8A54-A88BBA91D769} : DHCPNameServer = 194.168.4.100 194.168.8.100
TCP: Interfaces\{DF077166-042A-4352-8A54-A88BBA91D769}\244564F4E4 : DHCPNameServer = 192.168.22.22 192.168.22.23
TCP: Interfaces\{DF077166-042A-4352-8A54-A88BBA91D769}\244584F6D65684572623D205B48483 : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{DF077166-042A-4352-8A54-A88BBA91D769}\2445F40756E6A7F6E656 : DHCPNameServer = 192.168.22.22 192.168.22.23
TCP: Interfaces\{DF077166-042A-4352-8A54-A88BBA91D769}\27574796C6E2E65647 : DHCPNameServer = 79.110.112.1 79.110.112.2
TCP: Interfaces\{DF077166-042A-4352-8A54-A88BBA91D769}\A456E69713 : DHCPNameServer = 84.43.191.4 84.43.191.2
TCP: Interfaces\{DF077166-042A-4352-8A54-A88BBA91D769}\B413 : DHCPNameServer = 62.244.176.176 62.244.177.177
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
LSA: Notification Packages =  scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-mStart Page = about:blank
x64-BHO: Bitdefender Wallet : {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll
x64-BHO: Lync Browser Helper: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL
x64-BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-Run: [Bdagent] "C:\Program Files\Bitdefender\Bitdefender\bdagent.exe"
x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [Apoint] C:\Program Files (x86)\Apoint\Apoint.exe
x64-IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
x64-DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab
x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
x64-Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
x64-Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: cardisabled - <no file>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R0 avc3;avc3;C:\Windows\System32\drivers\avc3.sys [2014-4-4 893440]
R0 gzflt;gzflt;C:\Windows\System32\drivers\gzflt.sys [2014-4-4 150256]
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-5-17 55856]
R0 RapportKE64;RapportKE64;C:\Windows\System32\drivers\RapportKE64.sys [2011-5-19 97104]
R1 A2DDA;A2 Direct Disk Access Support Driver;C:\EEK\Run\a2ddax64.sys [2013-12-7 26176]
R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [2014-4-4 93600]
R1 bdfwfpf;bdfwfpf;C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [2014-4-4 103504]
R1 BDVEDISK;BDVEDISK;C:\Windows\System32\drivers\bdvedisk.sys [2014-4-4 76944]
R1 RapportCerberus_43926;RapportCerberus_43926;C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\43926\RapportCerberus64_43926.sys [2012-10-30 505720]
R1 RapportEI64;RapportEI64;C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2011-11-1 55056]
R1 RapportPG64;RapportPG64;C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2011-11-1 61712]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2013-10-10 144152]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-10-8 202752]
R2 ASO3DiskOptimizer;ASO3DiskOptimizer;C:\Program Files (x86)\Advanced System Optimizer 3\ASO3DefragSrv64.exe [2012-7-8 263480]
R2 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2012-6-26 48488]
R2 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-3-8 1492840]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-5-5 13336]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-4-11 1809720]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-4-11 857912]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\SONY\PMB\PMBDeviceInfoProvider.exe [2009-10-24 360224]
R2 regi;regi;C:\Windows\System32\drivers\regi.sys [2010-5-17 14112]
R2 rimspci;rimspci;C:\Windows\System32\drivers\rimssne64.sys [2010-5-5 93696]
R2 risdsnpe;risdsnpe;C:\Windows\System32\drivers\risdsne64.sys [2010-5-5 75776]
R2 Sage SData Service;Sage SData Service;C:\Program Files (x86)\Common Files\Sage SData\Sage.SData.Service.exe [2009-12-16 49152]
R2 SampleCollector;VAIO Care Performance Service;C:\Program Files\Sony\VAIO Care\VCPerfService.exe [2011-12-13 259192]
R2 SOHCImp;VAIO Media plus Content Importer;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2010-5-17 120104]
R2 SOHDBSvr;VAIO Media plus Database Manager;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2010-5-17 70952]
R2 SOHDms;VAIO Media plus Digital Media Server;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2010-5-17 427304]
R2 SOHDs;VAIO Media plus Device Searcher;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2010-5-17 75048]
R2 SOHPlMgr;VAIO Media plus Playlist Manager;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2010-5-17 91432]
R2 uCamMonitor;CamMonitor;C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2010-5-17 104960]
R2 Unchecky;Unchecky;C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [2014-1-4 107624]
R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-9-15 2320920]
R2 UPDATESRV;Bitdefender Desktop Update Service;C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [2014-4-4 67320]
R2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2010-5-17 480624]
R2 VSNService;VSNService;C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [2011-2-25 845312]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;C:\Windows\System32\drivers\ArcSoftKsUFilter.sys [2010-5-17 19968]
R3 avchv;avchv Function Driver;C:\Windows\System32\drivers\avchv.sys [2014-4-4 261056]
R3 HECIx64;Intel® Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2010-5-5 56344]
R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2010-5-5 151936]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2012-12-10 25816]
R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-4-11 119512]
R3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\drivers\mwac.sys [2014-4-11 63192]
R3 SbieDrv;SbieDrv;C:\Program Files\Sandboxie\SbieDrv.sys [2014-1-17 202600]
R3 SFEP;Sony Firmware Extension Parser;C:\Windows\System32\drivers\SFEP.sys [2010-5-5 11392]
R3 VCService;VCService;C:\Program Files\Sony\VAIO Care\VCService.exe [2011-12-13 44736]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2010-5-5 395264]
S1 Uim_VIM;UIM Virtual Image Plugin;C:\Windows\System32\drivers\uim_vimx64.sys [2013-2-18 390352]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S2 SafeBox;SafeBox;C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe [2014-4-4 94624]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 VCFw;VAIO Content Folder Watcher;C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-9-14 642416]
S3 avckf;avckf;C:\Windows\System32\drivers\avckf.sys [2014-4-4 635392]
S3 bdfwfpf_pc;bdfwfpf_pc;C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [2014-4-4 121928]
S3 BDSandBox;BDSandBox;C:\Windows\System32\drivers\bdsandbox.sys [2014-4-4 82824]
S3 btusbflt;Bluetooth USB Filter;C:\Windows\System32\drivers\btusbflt.sys [2010-5-5 52264]
S3 btwampfl;btwampfl Bluetooth filter driver;C:\Windows\System32\drivers\btwampfl.sys [2013-8-31 598808]
S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2013-8-31 39976]
S3 cleanhlp;cleanhlp;C:\EEK\Run\cleanhlp64.sys [2013-12-7 57024]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-4-20 111616]
S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-1-23 178760]
S3 PSI;PSI;C:\Windows\System32\drivers\psi_mf_amd64.sys [2013-12-6 18456]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2012-12-29 19456]
S3 Secunia PSI Agent;Secunia PSI Agent;C:\Program Files (x86)\Secunia\PSI\psia.exe [2013-12-6 1229528]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-4-20 56832]
S3 TVICHW64;TVICHW64;C:\Windows\System32\drivers\TVicHW64.sys [2011-2-25 21200]
S3 VAIO Power Management;VAIO Power Management;C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2010-5-17 571248]
S3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2010-5-17 361840]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-5-17 110960]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-9-17 1255736]
S4 BdDesktopParental;Bitdefender Desktop Parental Control;C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [2014-4-4 77632]
S4 RapportMgmtService;Rapport Management Service;C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2011-11-1 931640]
S4 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-8-31 313840]
S4 Roxio Upnp Server 10;Roxio Upnp Server 10;C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-8-31 362992]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2014-05-01 21:59:43 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2014-05-01 21:59:43 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2014-04-30 21:13:26 -------- d-----w- C:\Users\sony\Doctor Web
2014-04-28 20:52:47 -------- d-----w- C:\Program Files (x86)\ESET
2014-04-27 20:15:38 -------- d-s---w- C:\Windows\System32\CompatTel
2014-04-27 20:14:29 465408 ----a-w- C:\Windows\System32\aepdu.dll
2014-04-27 20:14:29 424448 ----a-w- C:\Windows\System32\aeinv.dll
2014-04-27 14:45:05 536576 ----a-w- C:\Windows\SysWow64\sqlite3.dll
2014-04-26 14:45:13 -------- d--h--w- C:\Program Files (x86)\Temp
2014-04-26 09:28:35 -------- d-----w- C:\Users\sony\AppData\Local\Secunia PSI
2014-04-26 09:28:13 -------- d-----w- C:\Program Files (x86)\Secunia
2014-04-26 09:11:55 -------- d-----w- C:\Program Files (x86)\VirusTotalUploader2
2014-04-21 15:25:21 6574592 ----a-w- C:\Windows\System32\mstscax.dll
2014-04-21 15:25:21 5694464 ----a-w- C:\Windows\SysWow64\mstscax.dll
2014-04-21 06:20:27 -------- d-sh--w- C:\Users\sony\AppData\Local\EmieUserList
2014-04-21 06:20:27 -------- d-sh--w- C:\Users\sony\AppData\Local\EmieSiteList
2014-04-20 22:15:18 359936 ----a-w- C:\Program Files\Internet Explorer\IEShims.dll
2014-04-20 22:14:59 5784064 ----a-w- C:\Windows\System32\jscript9.dll
2014-04-20 22:14:59 4254720 ----a-w- C:\Windows\SysWow64\jscript9.dll
2014-04-20 09:10:26 -------- d-----w- C:\Windows\System32\catroot2
2014-04-20 08:04:30 -------- d-----w- C:\Windows\SysWow64\wbem\Performance
2014-04-20 07:19:05 -------- d-----w- C:\RegBackup
2014-04-18 08:20:32 -------- d-----w- C:\ProgramData\bdch
2014-04-11 06:07:00 119512 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
2014-04-11 06:06:10 88280 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys
2014-04-11 06:06:10 63192 ----a-w- C:\Windows\System32\drivers\mwac.sys
2014-04-11 06:06:10 -------- d-----w- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-09 19:45:18 -------- d-sh--w- C:\found.003
2014-04-06 07:38:16 254240 ----a-w- C:\Windows\System32\drivers\VBoxDrv.sys
2014-04-06 07:38:01 128288 ----a-w- C:\Windows\System32\drivers\VBoxUSBMon.sys
2014-04-06 07:37:55 -------- d-----w- C:\Program Files\Oracle
2014-04-05 11:03:53 792576 ----a-w- C:\Windows\SysWow64\TSWorkspace.dll
2014-04-05 11:03:53 1030144 ----a-w- C:\Windows\System32\TSWorkspace.dll
2014-04-05 07:27:37 -------- d-----w- C:\Program Files\WhoCrashed
2014-04-04 23:17:16 74512 ----a-w- C:\Windows\System32\bdsandboxuiskin32.dll
2014-04-04 22:47:35 599953 ----a-w- C:\ProgramData\1396651134.bdinstall.bin
2014-04-04 22:45:15 1721576 ----a-w- C:\Windows\System32\WdfCoInstaller01009.dll
2014-04-04 22:45:13 -------- d-----w- C:\ProgramData\BDLogging
2014-04-04 22:45:03 76944 ----a-w- C:\Windows\System32\drivers\bdvedisk.sys
2014-04-04 22:44:59 93600 ----a-w- C:\Windows\System32\drivers\BdfNdisf6.sys
2014-04-04 22:44:59 82824 ----a-w- C:\Windows\System32\drivers\bdsandbox.sys
2014-04-04 22:44:59 74512 ----a-w- C:\Windows\SysWow64\bdsandboxuiskin32.dll
2014-04-04 22:44:59 511328 ----a-w- C:\Windows\capicom.dll
2014-04-04 22:44:24 893440 ------w- C:\Windows\System32\drivers\avc3.sys
2014-04-04 22:44:24 635392 ------w- C:\Windows\System32\drivers\avckf.sys
2014-04-04 22:44:24 261056 ------w- C:\Windows\System32\drivers\avchv.sys
2014-04-04 22:43:46 -------- d-----w- C:\Users\sony\AppData\Roaming\Bitdefender
2014-04-04 22:43:27 3271472 ----a-w- C:\bdr-bz01
2014-04-04 22:39:43 84848 ----a-w- C:\Windows\System32\BDSandBoxUISkin.dll
2014-04-04 22:39:43 34384 ----a-w- C:\Windows\System32\BDSandBoxUH.dll
2014-04-04 22:39:43 -------- d-----w- C:\ProgramData\Bitdefender
2014-04-04 22:39:42 150256 ------w- C:\Windows\System32\drivers\gzflt.sys
2014-04-04 22:39:41 389240 ------w- C:\Windows\System32\drivers\trufos.sys
2014-04-04 22:39:41 -------- d-----w- C:\Program Files\Bitdefender
2014-04-04 22:38:49 -------- d-----w- C:\Program Files\Common Files\Bitdefender
2014-04-04 22:38:48 -------- d-----w- C:\Program Files (x86)\Common Files\Bitdefender
2014-04-04 12:01:30 10521840 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2011C981-C581-4F9E-ADD6-D6DD0BDB95AE}\mpengine.dll
2014-04-04 12:00:10 159744 ----a-w- C:\Program Files\Internet Explorer\Plugins\npqtplugin5.dll
2014-04-04 12:00:10 159744 ----a-w- C:\Program Files\Internet Explorer\Plugins\npqtplugin4.dll
2014-04-04 12:00:10 159744 ----a-w- C:\Program Files\Internet Explorer\Plugins\npqtplugin3.dll
2014-04-04 12:00:10 159744 ----a-w- C:\Program Files\Internet Explorer\Plugins\npqtplugin2.dll
2014-04-04 12:00:10 159744 ----a-w- C:\Program Files\Internet Explorer\Plugins\npqtplugin.dll
.
==================== Find3M  ====================
.
2014-04-29 10:37:24 70832 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-04-29 10:37:24 692400 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2014-04-03 08:50:58 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys
2014-03-26 18:00:14 156448 ----a-w- C:\Windows\System32\drivers\VBoxNetFlt.sys
2014-03-26 18:00:14 141600 ----a-w- C:\Windows\System32\drivers\VBoxNetAdp.sys
2014-03-26 17:58:04 204064 ----a-w- C:\Windows\System32\VBoxNetFltNobj.dll
2014-03-06 09:31:33 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2014-03-06 08:59:04 66048 ----a-w- C:\Windows\System32\iesetup.dll
2014-03-06 08:57:34 548352 ----a-w- C:\Windows\System32\vbscript.dll
2014-03-06 08:57:20 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2014-03-06 08:29:40 139264 ----a-w- C:\Windows\System32\ieUnatt.exe
2014-03-06 08:29:14 111616 ------w- C:\Windows\System32\ieetwcollector.exe
2014-03-06 08:28:15 752640 ----a-w- C:\Windows\System32\jscript9diag.dll
2014-03-06 08:15:54 940032 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
2014-03-06 08:02:34 61952 ----a-w- C:\Windows\SysWow64\iesetup.dll
2014-03-06 08:02:33 455168 ----a-w- C:\Windows\SysWow64\vbscript.dll
2014-03-06 08:01:01 51200 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
2014-03-06 07:56:43 38400 ----a-w- C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-03-06 07:38:13 112128 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2014-03-06 07:36:40 592896 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2014-03-06 07:13:43 32256 ----a-w- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
2014-03-06 07:11:15 2043904 ----a-w- C:\Windows\System32\inetcpl.cpl
2014-03-06 06:40:39 1967104 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2014-03-06 06:22:40 2260480 ----a-w- C:\Windows\System32\wininet.dll
2014-03-06 05:41:49 1789440 ----a-w- C:\Windows\SysWow64\wininet.dll
2014-03-04 09:44:21 362496 ----a-w- C:\Windows\System32\wow64win.dll
2014-03-04 09:44:21 243712 ----a-w- C:\Windows\System32\wow64.dll
2014-03-04 09:44:21 13312 ----a-w- C:\Windows\System32\wow64cpu.dll
2014-03-04 09:44:03 16384 ----a-w- C:\Windows\System32\ntvdm64.dll
2014-03-04 09:17:19 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2014-03-04 09:17:05 44032 ----a-w- C:\Windows\apppatch\acwow64.dll
2014-03-04 09:16:54 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2014-03-04 09:16:18 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2014-03-04 08:09:30 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2014-03-04 08:09:29 2048 ----a-w- C:\Windows\SysWow64\user.exe
2014-02-07 01:23:30 3156480 ----a-w- C:\Windows\System32\win32k.sys
2014-02-04 02:35:56 190912 ----a-w- C:\Windows\System32\drivers\storport.sys
2014-02-04 02:35:49 274880 ----a-w- C:\Windows\System32\drivers\msiscsi.sys
2014-02-04 02:35:35 27584 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2014-02-04 02:32:22 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll
2014-02-04 02:32:12 624128 ----a-w- C:\Windows\System32\qedit.dll
2014-02-04 02:28:36 2048 ----a-w- C:\Windows\System32\iologmsg.dll
2014-02-04 02:04:22 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2014-02-04 02:04:11 509440 ----a-w- C:\Windows\SysWow64\qedit.dll
2014-02-04 02:00:39 2048 ----a-w- C:\Windows\SysWow64\iologmsg.dll
2013-09-15 11:06:09 15641088 ----a-w- C:\Program Files (x86)\Common Files\lpuninstall.exe
.
============= FINISH: 23:28:59.74 ===============
 
 
Attach.txt log:
 
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium 
Boot Device: \Device\HarddiskVolume2
Install Date: 15/09/2010 16:46:48
System Uptime: 01/05/2014 22:44:22 (1 hours ago)
.
Motherboard: Sony Corporation |  | VAIO
Processor: Intel® Core™ i5 CPU       M 430  @ 2.27GHz | N/A | 2267/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 454 GiB total, 225.416 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e967-e325-11ce-bfc1-08002be10318}
Description: Disk drive
Device ID: RIMSPCI\DISK&VEN_RICOH&PROD_MEMORYSTICKSTORAGE&REV_1.00\MS0001
Manufacturer: (Standard disk drives)
Name: Ricoh Memory Stick Disk Device
PNP Device ID: RIMSPCI\DISK&VEN_RICOH&PROD_MEMORYSTICKSTORAGE&REV_1.00\MS0001
Service: disk
.
Class GUID: {4d36e967-e325-11ce-bfc1-08002be10318}
Description: Disk drive
Device ID: RISD\DISK&VEN_RICOH&PROD_SD/MMCSTORAGE&REV_2.00\0001
Manufacturer: (Standard disk drives)
Name: Ricoh SD/MMC Disk Device
PNP Device ID: RISD\DISK&VEN_RICOH&PROD_SD/MMCSTORAGE&REV_2.00\0001
Service: disk
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: VirtualBox Host-Only Ethernet Adapter
Device ID: ROOT\NET\0000
Manufacturer: Oracle Corporation
Name: VirtualBox Host-Only Ethernet Adapter
PNP Device ID: ROOT\NET\0000
Service: VBoxNetAdp
.
Class GUID: {4d36e96f-e325-11ce-bfc1-08002be10318}
Description: Alps Pointing-device for VAIO
Device ID: ACPI\SNY9011\4&2C6A9CE5&0
Manufacturer: Alps Electric
Name: Alps Pointing-device for VAIO
PNP Device ID: ACPI\SNY9011\4&2C6A9CE5&0
Service: i8042prt
.
==== System Restore Points ===================
.
RP810: 27/04/2014 21:14:38 - Windows Update
RP811: 01/05/2014 10:42:59 - PROPLUS
RP812: 01/05/2014 22:53:09 - Revo Uninstaller's restore point - BitComet 1.29
RP813: 01/05/2014 22:59:12 - Windows Update
.
==== Installed Programs ======================
.
360Amigo System Speedup Free
7-Zip 9.20 (x64 edition)
7 Quick Fix version 2.0
Accounts
Adobe Flash Player 13 ActiveX
Adobe Flash Player 13 Plugin
Adobe Reader XI (11.0.06)
Adobe Shockwave Player 12.0
AEnglish Dictionary XP 1.72
Alps Pointing-device for VAIO
Angry Birds
Angry Birds Seasons
Angry Birds Space
Apple Application Support
Apple Software Update
ArcSoft Magic-i Visual Effects 2
ArcSoft WebCam Companion 3
ATI Catalyst Install Manager
Bitdefender Total Security
Bullzip PDF Printer 9.10.0.1629
Canon Easy-PhotoPrint EX
Canon Easy-WebPrint EX
Canon MP Navigator EX 3.0
Canon MP490 series MP Drivers
Canon My Printer
Canon Utilities Solution Menu
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-static
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
CCleaner
Citrix Online Launcher
Corel WinDVD
D3DX10
Daum PotPlayer 1.5.45955 x64 Edition
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition
DivX Setup
ERUNT 1.1j
ESET Online Scanner v3
Evernote
ffdshow v1.2.4422 [2012-04-09]
Foxit PDF Editor
Google Chrome
Google Earth
Google Update Helper
GoToMeeting 6.0.0.1259
Haali Media Splitter
HiJackThis
HitmanPro 3.7
Inhatch web plugins
Intel® Control Center
Intel® Management Engine Components
Intel® Rapid Storage Technology
Intel® Turbo Boost Technology Driver
iTunes
Java 7 Update 25 (64-bit)
Java 7 Update 45
Java Auto Updater
Java™ 6 Update 16 (64-bit)
Java™ 7 (64-bit)
Juniper Networks Cache Cleaner 6.5.0
Juniper Networks Setup Client
Junk Mail filter update
K-Lite Codec Pack 7.6.0 (Full)
LastPass (uninstall only)
LightBox Free Image Editor
Macrium Reflect Free Edition
Macromedia Dreamweaver MX 2004
Macromedia Extension Manager
Malwarebytes Anti-Malware version 2.0.1.1004
Mesh Runtime
Messenger Companion
Microsoft .NET Framework 4.5.1
Microsoft Access MUI (English) 2013
Microsoft Access Setup Metadata MUI (English) 2013
Microsoft Application Error Reporting
Microsoft DCF MUI (English) 2013
Microsoft Excel MUI (English) 2013
Microsoft Groove MUI (English) 2013
Microsoft InfoPath MUI (English) 2013
Microsoft Lync MUI (English) 2013
Microsoft Office 32-bit Components 2013
Microsoft Office OSM MUI (English) 2013
Microsoft Office OSM UX MUI (English) 2013
Microsoft Office Professional Plus 2013
Microsoft Office Proofing (English) 2013
Microsoft Office Proofing Tools 2013 - English
Microsoft Office Proofing Tools 2013 - Español
Microsoft Office Shared 32-bit MUI (English) 2013
Microsoft Office Shared MUI (English) 2013
Microsoft Office Shared Setup Metadata MUI (English) 2013
Microsoft OneNote MUI (English) 2013
Microsoft Outlook MUI (English) 2013
Microsoft PowerPoint MUI (English) 2013
Microsoft Publisher MUI (English) 2013
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft SQL Server Compact 3.5 SP1 English
Microsoft SQL Server Compact 3.5 SP1 x64 English
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Microsoft Word MUI (English) 2013
Mobile Broadband HL Service
MpcStar 5.3
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MyDriveConnect 3.3.0.1342
Nitro Reader 3
Oracle VM VirtualBox 4.3.10
Outils de vérification linguistique 2013 de Microsoft Office - Français
PDFCreator
PHOTOfunSTUDIO 5.0
Picasa 3
PMB
PMB VAIO Edition Guide
PMB VAIO Edition plug-in (Click to Disc)
PMB VAIO Edition plug-in (VAIO Image Optimizer)
PMB VAIO Edition plug-in (VAIO Movie Story)
PrimoPDF -- brought to you by Nitro PDF Software
QuickTime
Rapport
Realtek HDMI Audio Driver for ATI
Realtek High Definition Audio Driver
Revo Uninstaller 1.95
ROBLOX Player for sony
Roxio Central Audio
Roxio Central Copy
Roxio Central Core
Roxio Central Data
Roxio Central Tools
Roxio Easy Media Creator 10 LJ
Roxio Easy Media Creator Home
SA Dictionary 2008 Beta 4
Sage 50 Accounts 2011
Sandboxie 4.08 (64-bit)
SARDU 2.0.6.5
Secunia PSI (3.0.0.9016)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft Word 2013 (KB2863910) 64-Bit Edition
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition
Setting Utility Series
Shared C Run-time for x64
Skype™ 6.14
SMS V4
Sony Home Network Library
SpeedFan (remove only)
SUPERAntiSpyware
swMSM
Unchecky v0.2.13
Unity Web Player
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2863908) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817636) 64-Bit Edition
Update for Microsoft Office 2013 (KB2825631) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827272) 64-Bit Edition
Update for Microsoft Office 2013 (KB2863825) 64-Bit Edition
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition
Update for Microsoft Office 2013 (KB2863844) 64-Bit Edition
Update for Microsoft Office 2013 (KB2863860) 64-Bit Edition
Update for Microsoft OneDrive for Business (KB2863864) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2817628) 64-Bit Edition
Update for Microsoft Outlook 2013 (KB2863911) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2837627) 64-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition
Update for Microsoft Word 2013 (KB2863909) 64-Bit Edition
VAIO - PMB VAIO Edition Guide
VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer)
VAIO Care
VAIO Content Metadata Intelligent Analyzing Manager
VAIO Content Metadata Intelligent Network Service Manager
VAIO Content Metadata Manager Settings
VAIO Content Metadata XML Interface Library
VAIO Content Monitoring Settings
VAIO Control Center
VAIO Data Restore Tool
VAIO DVD Menu Data
VAIO Entertainment Platform
VAIO Event Service
VAIO Gate
VAIO Gate Default
VAIO Hardware Diagnostics
VAIO Marketing Tools
VAIO Media plus
VAIO Media plus Opening Movie
VAIO Movie Story Template Data
VAIO Original Function Settings
VAIO Personalization Manager
VAIO Power Management
VAIO Premium Partners
VAIO Quick Web Access
VAIO screensaver
VAIO Smart Network
VAIO Transfer Support
VAIO Wallpaper Contents
VC80CRTRedist - 8.0.50727.4053
Veetle TV 0.9.18
VEMS Revision 03
VirusTotal Uploader 2.2
Visual Studio 2008 x64 Redistributables
Visual Studio C++ 10.0 Runtime
VLC media player 2.0.2
VU5x86
WebDwarf V2
WebEx
WebM Media Foundation Components
WhoCrashed 5.01
WIDCOMM Bluetooth Software
Windows 7 USB/DVD Download Tool
Windows Driver Package - Broadcom Bluetooth  (09/09/2009 6.2.0.9405)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800)
Windows Installer Clean Up
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Messenger Companion Core
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Media Player Firefox Plugin
WinRAR 5.01 (64-bit)
WinZip
Yahoo! BrowserPlus 2.9.8
ZoneAlarm Firewall
ZoneAlarm Security
.
==== Event Viewer Messages From Past Week ========
.
01/05/2014 22:52:11, Error: Microsoft-Windows-WMPNSS-Service [14332]  - Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80070422'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.
01/05/2014 22:50:04, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service SafeBox with arguments "" in order to run the server: {F681ABD0-41DE-46C8-9ED3-D0F4EBA19111}
01/05/2014 22:50:03, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  bhnprr raeehd TfFsMon TFSysMon UimBus Uim_IM Uim_VIM vqdtrh
01/05/2014 22:48:51, Error: Service Control Manager [7001]  - The VAIO Content Folder Watcher service depends on the Remote Desktop Services service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
01/05/2014 22:48:42, Error: Service Control Manager [7000]  - The Hardlock service failed to start due to the following error:  Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
01/05/2014 22:46:08, Error: Service Control Manager [7022]  - The Bitdefender Virus Shield service hung on starting.
.
==== End Of File ===========================
 
 


BC AdBot (Login to Remove)

 


m

#2 nasdaq

nasdaq

  • Malware Response Team
  • 38,247 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:59 AM

Posted 06 May 2014 - 10:07 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the Report button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).
===

Download the correct version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

===

Please paste the logs in your next reply DO NOT ATTACH THEM unless specified.

Let me know what problem persists.

#3 scorpion73

scorpion73
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:02:59 PM

Posted 06 May 2014 - 02:59 PM

Hello nasdaq, thank you for your reply.

I run the tools as instructed, ADW log came up clean I think. found some preferences in chrome browsers which i didn't clean.

 

here is the log

 AdwCleaner v3.207 - Report created 06/05/2014 at 20:37:42

# Updated 05/05/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : sony - SONY-VAIO
# Running from : C:\Users\sony\Desktop\adwcleaner.exe
# Option : Scan
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17041
 
 
-\\ Mozilla Firefox v
 
-\\ Google Chrome v34.0.1847.131
 
[ File : C:\Users\Iliana\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
[ File : C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
[ File : C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
*************************
 
AdwCleaner[R18].txt - [3053 octets] - [04/05/2014 21:23:29]
AdwCleaner[R19].txt - [364 octets] - [06/05/2014 20:34:28]
AdwCleaner[R20].txt - [944 octets] - [06/05/2014 20:37:42]
AdwCleaner[S16].txt - [3115 octets] - [04/05/2014 21:39:21]
 
########## EOF - C:\AdwCleaner\AdwCleaner[R20].txt - [1065 octets] ##########
 
 
FRS came up with FRST.txt log only as I have it on the laptop.
log is hereunder:
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014
Ran by sony (administrator) on SONY-VAIO on 06-05-2014 20:45:34
Running from C:\Users\sony\Desktop\BC2
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBDeviceInfoProvider.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Sage (UK) Limited) C:\Program Files (x86)\Common Files\Sage SData\Sage.SData.Service.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(TomTom) C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1742064 2014-03-25] (Bitdefender)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9636896 2009-12-16] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.)
HKLM-x32\...\Run: [SSDMonitor] => C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [103896 2012-01-04] (PC Tools)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284696 2009-11-20] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\Run: [Bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-03-19] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender Wallet] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001536 2014-03-15] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender Wallet Application Agent] => C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-03-19] (Bitdefender)
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [759496 2014-01-17] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [473496 2013-11-29] (TomTom)
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6281496 2014-04-01] (Piriform Ltd)
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\Run: [Bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-03-19] (Bitdefender)
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\Run: [Bitdefender Wallet] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001536 2014-03-15] (Bitdefender)
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\Run: [Bitdefender Wallet Application Agent] => C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-03-19] (Bitdefender)
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\MountPoints2: {003a3884-c582-11df-a638-f07bcbcb0891} - G:\AutoRun.exe
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\MountPoints2: {003a3892-c582-11df-a638-f07bcbcb0891} - G:\AutoRun.exe
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\MountPoints2: {003a38b7-c582-11df-a638-001e101f3315} - G:\AutoRun.exe
HKU\S-1-5-21-516955419-1323933561-1941991397-1000\...\MountPoints2: {abe735b6-ca5a-11df-87d1-544249599393} - G:\AutoRun.exe
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\Users\ADMIN.sony-VAIO.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-GB
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {30CEEEA2-3742-40E4-85DD-812BF1CBB83D} -  No File
DPF: HKLM-x32 {A996E48C-D3DC-4244-89F7-AFA33EC60679} https://online.rbb.bg/capicom.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} -  No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100
 
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @inhatch.com,version=0.7.5 - C:\Program Files (x86)\InhatchTeam\Inhatch\npinhatch.dll (Inhatch)
FF Plugin-x32: @inhatch.com,version=0.7.6 - C:\Program Files (x86)\InhatchTeam\Inhatch\npinhatch.dll (Inhatch)
FF Plugin-x32: @inhatch.com,version=0.7.61 - C:\Program Files (x86)\InhatchTeam\Inhatch\npinhatch.dll (Inhatch)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\sony\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @nsroblox.roblox.com/launcher - C:\Users\sony\AppData\Local\Roblox\Versions\version-38d9c3e04e394773\\NPRobloxProxy.dll ( ROBLOX Corporation)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\sony\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: @yahoo.com/BrowserPlus,version=2.9.8 - C:\Users\sony\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2014-04-04]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011-06-29]
FF HKLM-x32\...\Firefox\Extensions: [4effxtbr@RadioPI_4e.com] - C:\Program Files (x86)\RadioPI_4e\bar\1.bin
FF Extension: RadioPI - C:\Program Files (x86)\RadioPI_4e\bar\1.bin [2011-12-31]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [ffpwdman@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\ []
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2014-04-04]
 
Chrome: 
=======
CHR HomePage: 
CHR DefaultSearchKeyword: google.co.uk
CHR Extension: (Google Docs) - C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-04-13]
CHR Extension: (Google Drive) - C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-04-13]
CHR Extension: (YouTube) - C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-13]
CHR Extension: (Bitdefender Wallet) - C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-04-05]
CHR Extension: (Adblock Plus) - C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-26]
CHR Extension: (Google Search) - C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-13]
CHR Extension: (AdBlock) - C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-26]
CHR Extension: (Google Wallet) - C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-04-13]
CHR Extension: (Gmail) - C:\Users\sony\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-13]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-04-04]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-05-23]
 
==================== Services (Whitelisted) =================
 
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
S3 Macromedia Licensing Service; C:\Program Files (x86)\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [68096 2012-06-12] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
S4 RapportMgmtService; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [931640 2011-11-01] (Trusteer Ltd.)
S4 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)
S4 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)
S2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 Sage SData Service; C:\Program Files (x86)\Common Files\Sage SData\Sage.SData.Service.exe [49152 2009-12-16] (Sage (UK) Limited)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [187592 2014-01-17] (Sandboxie Holdings, LLC)
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
R2 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation)
R2 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-09-14] (Sony Corporation)
S2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [642416 2009-09-14] (Sony Corporation)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1523728 2014-03-24] (Bitdefender)
R2 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-09-14] (Sony Corporation)
 
==================== Drivers (Whitelisted) ====================
 
R1 A2DDA; C:\EEK\RUN\a2ddax64.sys [26176 2013-12-06] (Emsisoft GmbH)
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [893440 2013-12-02] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [635392 2013-12-02] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)
S0 bhnprr; No ImagePath
S3 cleanhlp; C:\EEK\Run\cleanhlp64.sys [57024 2013-12-06] (Emsisoft GmbH)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2014-05-03] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-06] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R1 MPFP; C:\Windows\System32\Drivers\Mpfp.sys [176144 2009-04-09] (McAfee, Inc.)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S0 raeehd; No ImagePath
R1 RapportCerberus_43926; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\43926\RapportCerberus64_43926.sys [505720 2012-10-30] ()
R1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [55056 2011-11-01] (Trusteer Ltd.)
R0 RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [97104 2011-11-01] (Trusteer Ltd.)
R1 RapportPG64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [61712 2011-11-01] (Trusteer Ltd.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [202600 2014-01-17] (Sandboxie Holdings, LLC)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
S3 TVICHW64; C:\Windows\system32\DRIVERS\TVICHW64.SYS [21200 2011-02-25] (EnTech Taiwan)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-02-18] (Windows ® 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-02-18] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-02-18] (Paragon)
S0 vqdtrh; No ImagePath
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-11-12] ()
S3 athur; system32\DRIVERS\athurx.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S0 TfFsMon; system32\drivers\TfFsMon.sys [X]
S0 TFSysMon; system32\drivers\TfSysMon.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-05-05 06:57 - 2014-05-06 20:35 - 00000000 ____D () C:\Users\sony\AppData\Roaming\Media Player Classic
2014-05-04 21:50 - 2014-05-04 22:04 - 00005142 _____ () C:\Users\sony\Desktop\UVK - Ultra Virus Killer report (2).htm
2014-05-04 21:22 - 2014-05-04 21:22 - 00002386 _____ () C:\Users\sony\Desktop\aswMBR.txt
2014-05-04 21:22 - 2014-05-04 21:22 - 00000512 _____ () C:\Users\sony\Desktop\MBR.dat
2014-05-04 21:09 - 2014-05-04 21:39 - 00003241 _____ () C:\Users\sony\Desktop\UVK - Ultra Virus Killer report.htm
2014-05-04 11:38 - 2014-05-04 23:28 - 00000000 ____D () C:\Program Files\UVK - Ultra Virus Killer
2014-05-04 11:38 - 2014-05-04 11:38 - 00001820 _____ () C:\Users\Public\Desktop\UVK - Ultra Virus Killer.lnk
2014-05-04 11:26 - 2014-05-04 11:26 - 00000000 ____D () C:\Users\sony\AppData\Local\WinZip
2014-05-04 11:25 - 2014-05-04 11:26 - 00000000 ____D () C:\Program Files\WinZip
2014-05-04 11:23 - 2014-05-04 11:22 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-04 11:22 - 2014-05-04 11:22 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-04 11:22 - 2014-05-04 11:22 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-04 11:22 - 2014-05-04 11:22 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-04 11:22 - 2014-05-04 11:22 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-04 11:17 - 2014-05-04 11:17 - 01364522 _____ () C:\Users\sony\Downloads\wrar393.exe
2014-05-04 11:12 - 2014-05-04 11:12 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-03 10:11 - 2014-05-03 10:11 - 00628080 _____ (ROBLOX Corporation) C:\Users\sony\Downloads\RobloxPlayerLauncher.exe
2014-05-03 10:04 - 2014-05-03 10:04 - 00000000 ____D () C:\Program Files (x86)\MPC-HC
2014-05-03 10:02 - 2014-05-03 10:03 - 05329480 _____ (Secunia) C:\Users\sony\Downloads\PSISetup.exe
2014-05-03 10:01 - 2014-05-03 10:02 - 107394336 _____ (Oracle Corporation) C:\Users\sony\Downloads\VirtualBox-4.3.10-93012-Win.exe
2014-05-03 09:36 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-05-03 08:53 - 2014-05-03 08:53 - 00001805 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-05-03 08:53 - 2014-05-03 08:53 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-05-03 08:36 - 2014-05-03 08:35 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-05-03 08:35 - 2014-05-03 08:35 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-03 08:06 - 2014-05-03 08:06 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-05-02 23:44 - 2014-05-06 20:45 - 00000000 ____D () C:\FRST
2014-05-01 23:22 - 2014-05-06 20:45 - 00000000 ____D () C:\Users\sony\Desktop\BC2
2014-05-01 23:16 - 2014-05-01 23:16 - 00017184 _____ () C:\Users\sony\Desktop\RKreport[0]_S_05012014_231654.txt
2014-05-01 23:11 - 2014-05-01 23:20 - 00000000 ____D () C:\Users\sony\Desktop\RK_Quarantine
2014-05-01 22:59 - 2014-04-29 15:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-01 22:59 - 2014-04-29 14:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-01 22:59 - 2014-04-29 13:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-01 22:59 - 2014-04-29 13:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-01 10:48 - 2014-05-01 10:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-30 22:13 - 2014-04-30 22:13 - 00000000 ____D () C:\Users\sony\Doctor Web
2014-04-30 14:40 - 2014-04-30 14:40 - 00000000 _____ () C:\Windows\SysWOW64\debug.log
2014-04-29 16:52 - 2014-04-29 16:52 - 03854864 _____ (Nitro PDF) C:\Users\Iliana\Downloads\NitroPDFReader.exe
2014-04-29 09:45 - 2014-05-06 20:27 - 00369623 ____N () C:\Windows\WindowsUpdate.log
2014-04-28 21:52 - 2014-04-28 21:52 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-04-28 19:43 - 2014-04-28 19:43 - 00000385 _____ () C:\Users\new\AppData\Roaminguser_gensett.xml
2014-04-28 19:42 - 2014-04-28 19:43 - 00000000 ____D () C:\Users\new\AppData\Roaming\BitComet
2014-04-28 19:42 - 2014-04-28 19:42 - 00000000 __SHD () C:\Users\new\AppData\Local\EmieUserList
2014-04-28 19:42 - 2014-04-28 19:42 - 00000000 __SHD () C:\Users\new\AppData\Local\EmieSiteList
2014-04-28 19:42 - 2014-04-28 19:42 - 00000000 ____D () C:\Users\new\AppData\Roaming\Bitdefender
2014-04-28 19:42 - 2014-04-28 19:42 - 00000000 ____D () C:\Users\new\AppData\Local\TomTom
2014-04-27 21:15 - 2014-04-27 21:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-27 21:14 - 2014-04-14 03:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-27 21:14 - 2014-04-14 03:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-04-27 15:45 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-04-27 12:33 - 2014-04-27 12:34 - 16001408 _____ (Microsoft Corporation) C:\Users\sony\Downloads\ITPx64_1033_7.10.344.0.exe
2014-04-26 18:31 - 2014-04-26 18:31 - 00000000 __SHD () C:\Users\Iliana\AppData\Local\EmieUserList
2014-04-26 18:31 - 2014-04-26 18:31 - 00000000 __SHD () C:\Users\Iliana\AppData\Local\EmieSiteList
2014-04-26 18:31 - 2014-04-26 18:31 - 00000000 ____D () C:\Users\Iliana\AppData\Local\TomTom
2014-04-26 18:31 - 2014-01-29 21:01 - 00000896 _____ () C:\Users\Iliana\Desktop\Sandboxed Web Browser.lnk
2014-04-26 15:45 - 2014-04-26 15:48 - 00002895 _____ () C:\RHDSetup.log
2014-04-26 10:28 - 2014-05-03 10:03 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-04-26 10:28 - 2014-04-26 10:28 - 00000000 ____D () C:\Users\sony\AppData\Local\Secunia PSI
2014-04-26 10:22 - 2014-04-26 10:22 - 00000000 ____D () C:\Users\sony\Downloads\Bitdefender Safepay
2014-04-26 10:11 - 2014-04-26 10:11 - 00002035 _____ () C:\Users\sony\Desktop\VirusTotal Uploader 2.2.lnk
2014-04-26 10:11 - 2014-04-26 10:11 - 00002035 _____ () C:\Users\new\Desktop\VirusTotal Uploader 2.2.lnk
2014-04-26 10:11 - 2014-04-26 10:11 - 00002035 _____ () C:\Users\Iliana\Desktop\VirusTotal Uploader 2.2.lnk
2014-04-26 10:11 - 2014-04-26 10:11 - 00002035 _____ () C:\Users\ADMIN.sony-VAIO.000\Desktop\VirusTotal Uploader 2.2.lnk
2014-04-26 10:11 - 2014-04-26 10:11 - 00000000 ____D () C:\Users\sony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirusTotal Uploader 2.2
2014-04-26 10:11 - 2014-04-26 10:11 - 00000000 ____D () C:\Program Files (x86)\VirusTotalUploader2
2014-04-23 07:18 - 2014-04-23 07:18 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (63).exe
2014-04-21 16:25 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-04-21 16:25 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-04-21 07:20 - 2014-04-21 07:20 - 00000000 __SHD () C:\Users\sony\AppData\Local\EmieUserList
2014-04-21 07:20 - 2014-04-21 07:20 - 00000000 __SHD () C:\Users\sony\AppData\Local\EmieSiteList
2014-04-20 23:16 - 2013-10-02 03:22 - 00056832 ____N (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-04-20 23:16 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-04-20 23:16 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-04-20 23:16 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-04-20 23:16 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-04-20 23:16 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-04-20 23:16 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-04-20 23:16 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-04-20 23:16 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-04-20 23:16 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-04-20 23:16 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-04-20 23:16 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-04-20 23:16 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-04-20 23:16 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-04-20 23:16 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-04-20 23:16 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-04-20 23:15 - 2014-03-06 10:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-20 23:15 - 2014-03-06 09:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-20 23:15 - 2014-03-06 09:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-20 23:15 - 2014-03-06 09:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-20 23:15 - 2014-03-06 09:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-20 23:15 - 2014-03-06 09:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-20 23:15 - 2014-03-06 09:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-20 23:15 - 2014-03-06 09:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-20 23:15 - 2014-03-06 09:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-20 23:15 - 2014-03-06 09:29 - 00111616 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-20 23:15 - 2014-03-06 09:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-20 23:15 - 2014-03-06 09:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-20 23:15 - 2014-03-06 09:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-20 23:15 - 2014-03-06 09:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-20 23:15 - 2014-03-06 09:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-20 23:15 - 2014-03-06 09:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-20 23:15 - 2014-03-06 09:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-20 23:15 - 2014-03-06 08:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-20 23:15 - 2014-03-06 08:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-20 23:15 - 2014-03-06 08:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-20 23:15 - 2014-03-06 08:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-20 23:15 - 2014-03-06 08:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-20 23:15 - 2014-03-06 08:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-20 23:15 - 2014-03-06 08:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-20 23:15 - 2014-03-06 08:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-20 23:15 - 2014-03-06 08:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-20 23:15 - 2014-03-06 08:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-20 23:15 - 2014-03-06 08:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-20 23:15 - 2014-03-06 08:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-20 23:15 - 2014-03-06 08:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-20 23:15 - 2014-03-06 08:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-20 23:15 - 2014-03-06 08:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-20 23:15 - 2014-03-06 07:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-20 23:15 - 2014-03-06 07:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-20 23:15 - 2014-03-06 07:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-20 23:15 - 2014-03-06 07:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-20 23:15 - 2014-03-06 07:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-20 23:15 - 2014-03-06 06:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-20 23:15 - 2014-03-06 06:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-20 23:15 - 2014-03-06 06:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-20 23:15 - 2014-03-06 06:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-20 23:15 - 2014-03-06 06:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-20 23:14 - 2014-03-06 09:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-20 23:14 - 2014-03-06 08:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-20 19:09 - 2014-04-20 19:09 - 00000000 ____D () C:\Users\Iliana\AppData\Local\Apple Computer
2014-04-20 17:12 - 2014-04-20 17:12 - 00632688 _____ (ROBLOX Corporation) C:\Users\sony\Downloads\RobloxPlayerLauncher (6).exe
2014-04-20 08:25 - 2014-04-20 09:22 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-04-20 08:19 - 2014-04-20 08:19 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-SONY-VAIO-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-04-20 08:19 - 2014-04-20 08:19 - 00000000 ____D () C:\RegBackup
2014-04-18 09:35 - 2014-04-18 09:35 - 00000000 ____D () C:\Users\Public\Desktop\CC Support
2014-04-17 15:14 - 2014-04-17 15:14 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (62).exe
2014-04-17 15:08 - 2014-04-17 15:08 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (61).exe
2014-04-17 14:52 - 2014-04-17 14:52 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (60).exe
2014-04-17 14:18 - 2014-04-17 14:18 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (59).exe
2014-04-17 14:13 - 2014-04-17 14:13 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (58).exe
2014-04-17 14:07 - 2014-04-17 14:07 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (57).exe
2014-04-17 13:47 - 2014-04-17 13:47 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (56).exe
2014-04-17 13:41 - 2014-04-17 13:41 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (55).exe
2014-04-17 13:34 - 2014-04-17 13:34 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (54).exe
2014-04-17 13:27 - 2014-04-17 13:27 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (53).exe
2014-04-17 12:37 - 2014-04-17 12:37 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (52).exe
2014-04-17 12:21 - 2014-04-17 12:21 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (51).exe
2014-04-17 12:08 - 2014-04-17 12:08 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (50).exe
2014-04-16 08:47 - 2014-04-16 08:47 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (49).exe
2014-04-16 08:17 - 2014-04-16 08:17 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (48).exe
2014-04-15 20:16 - 2014-04-15 20:16 - 00000000 ____D () C:\Users\Iliana\AppData\Roaming\QuickScan
2014-04-15 18:08 - 2014-04-15 18:08 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (47).exe
2014-04-15 17:54 - 2014-04-15 17:54 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (46).exe
2014-04-15 17:39 - 2014-04-15 17:39 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (45).exe
2014-04-15 17:26 - 2014-04-15 17:26 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (44).exe
2014-04-15 17:17 - 2014-04-15 17:17 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (43).exe
2014-04-15 15:04 - 2014-04-15 15:04 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (42).exe
2014-04-15 14:26 - 2014-04-15 14:26 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (41).exe
2014-04-14 19:18 - 2014-05-03 09:10 - 00000000 ____D () C:\Windows\ERDNT
2014-04-14 19:16 - 2014-04-14 19:17 - 00000000 ____D () C:\Program Files (x86)\ERUNT
2014-04-14 19:16 - 2014-04-14 19:16 - 00000884 _____ () C:\Users\new\Desktop\NTREGOPT.lnk
2014-04-14 19:16 - 2014-04-14 19:16 - 00000884 _____ () C:\Users\Iliana\Desktop\NTREGOPT.lnk
2014-04-14 19:16 - 2014-04-14 19:16 - 00000884 _____ () C:\Users\ADMIN.sony-VAIO.000\Desktop\NTREGOPT.lnk
2014-04-14 19:16 - 2014-04-14 19:16 - 00000865 _____ () C:\Users\new\Desktop\ERUNT.lnk
2014-04-14 19:16 - 2014-04-14 19:16 - 00000865 _____ () C:\Users\Iliana\Desktop\ERUNT.lnk
2014-04-14 19:16 - 2014-04-14 19:16 - 00000865 _____ () C:\Users\ADMIN.sony-VAIO.000\Desktop\ERUNT.lnk
2014-04-14 15:26 - 2014-04-14 15:26 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (40).exe
2014-04-14 14:39 - 2014-04-14 14:39 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (39).exe
2014-04-14 14:06 - 2014-04-14 14:06 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (38).exe
2014-04-14 13:34 - 2014-04-14 13:34 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (37).exe
2014-04-14 12:57 - 2014-04-14 12:57 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (36).exe
2014-04-14 12:33 - 2014-04-14 12:33 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (35).exe
2014-04-12 12:52 - 2014-04-12 12:52 - 09858048 _____ () C:\Users\sony\Downloads\osam_autorun_manager_5_0.msi
2014-04-11 07:07 - 2014-05-06 20:31 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-11 07:06 - 2014-04-11 07:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-11 07:06 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-11 07:06 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-10 19:42 - 2014-04-10 19:42 - 00000083 _____ () C:\Users\sony\AppData\Roaming\mbam.context.scan
2014-04-09 21:48 - 2014-03-04 10:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 21:48 - 2014-03-04 10:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 21:48 - 2014-03-04 10:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 21:48 - 2014-03-04 10:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 21:48 - 2014-03-04 10:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 21:48 - 2014-03-04 10:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 21:48 - 2014-03-04 10:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 21:48 - 2014-03-04 10:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 21:48 - 2014-03-04 10:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 21:48 - 2014-03-04 09:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 21:48 - 2014-03-04 09:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 21:48 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 21:48 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 21:48 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 21:48 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 21:48 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 21:48 - 2014-01-24 03:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-09 20:45 - 2014-04-09 20:45 - 00000000 __SHD () C:\found.003
2014-04-07 23:26 - 2014-04-24 07:54 - 00000000 ____D () C:\Users\sony\Desktop\Bleeping computer
2014-04-07 20:42 - 2014-04-07 20:42 - 00001979 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-04-07 20:42 - 2014-04-07 20:42 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-04-07 15:27 - 2014-04-07 15:27 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (34).exe
2014-04-06 16:48 - 2014-04-06 16:48 - 00000385 _____ () C:\Users\sony\AppData\Roaminguser_gensett.xml
2014-04-06 10:29 - 2014-04-06 10:29 - 07195272 _____ (Goversoft LLC) C:\Users\sony\Downloads\privazer_free.exe
2014-04-06 08:38 - 2014-03-26 19:01 - 00254240 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2014-04-06 08:38 - 2014-03-26 19:00 - 00128288 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
 
==================== One Month Modified Files and Folders =======
 
2014-05-06 20:45 - 2014-05-02 23:44 - 00000000 ____D () C:\FRST
2014-05-06 20:45 - 2014-05-01 23:22 - 00000000 ____D () C:\Users\sony\Desktop\BC2
2014-05-06 20:41 - 2013-11-24 19:11 - 00000000 ____D () C:\AdwCleaner
2014-05-06 20:37 - 2012-05-04 17:22 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-06 20:35 - 2014-05-05 06:57 - 00000000 ____D () C:\Users\sony\AppData\Roaming\Media Player Classic
2014-05-06 20:35 - 2011-02-24 20:42 - 00000000 ____D () C:\Windows\Minidump
2014-05-06 20:31 - 2014-04-11 07:07 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-06 20:30 - 2009-07-14 05:45 - 00009920 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-06 20:30 - 2009-07-14 05:45 - 00009920 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-06 20:27 - 2014-04-29 09:45 - 00369623 ____N () C:\Windows\WindowsUpdate.log
2014-05-06 20:25 - 2013-10-11 14:32 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-06 20:25 - 2010-05-17 06:11 - 00000912 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-06 20:24 - 2011-07-04 20:31 - 00000204 _____ () C:\Windows\system32\sstates.sdt
2014-05-06 20:24 - 2011-07-04 20:31 - 00000040 _____ () C:\Windows\system32\sstate_prev.sdt
2014-05-06 19:44 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-06 15:20 - 2010-09-16 06:22 - 00000000 ____D () C:\Users\sony\AppData\Roaming\Skype
2014-05-05 10:51 - 2009-07-14 03:34 - 00000763 _____ () C:\Windows\win.ini
2014-05-05 06:57 - 2014-04-05 08:27 - 00000000 ____D () C:\Program Files\WhoCrashed
2014-05-05 06:31 - 2013-09-02 19:16 - 00000000 ____D () C:\Users\sony\AppData\Local\CrashDumps
2014-05-04 23:28 - 2014-05-04 11:38 - 00000000 ____D () C:\Program Files\UVK - Ultra Virus Killer
2014-05-04 22:59 - 2013-12-05 13:40 - 00000000 ____D () C:\Users\sony\AppData\Local\Citrix
2014-05-04 22:04 - 2014-05-04 21:50 - 00005142 _____ () C:\Users\sony\Desktop\UVK - Ultra Virus Killer report (2).htm
2014-05-04 21:39 - 2014-05-04 21:09 - 00003241 _____ () C:\Users\sony\Desktop\UVK - Ultra Virus Killer report.htm
2014-05-04 21:22 - 2014-05-04 21:22 - 00002386 _____ () C:\Users\sony\Desktop\aswMBR.txt
2014-05-04 21:22 - 2014-05-04 21:22 - 00000512 _____ () C:\Users\sony\Desktop\MBR.dat
2014-05-04 11:38 - 2014-05-04 11:38 - 00001820 _____ () C:\Users\Public\Desktop\UVK - Ultra Virus Killer.lnk
2014-05-04 11:26 - 2014-05-04 11:26 - 00000000 ____D () C:\Users\sony\AppData\Local\WinZip
2014-05-04 11:26 - 2014-05-04 11:25 - 00000000 ____D () C:\Program Files\WinZip
2014-05-04 11:26 - 2012-06-12 22:53 - 00002277 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-04 11:22 - 2014-05-04 11:23 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-04 11:22 - 2014-05-04 11:22 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-04 11:22 - 2014-05-04 11:22 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-04 11:22 - 2014-05-04 11:22 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-04 11:22 - 2014-05-04 11:22 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-04 11:17 - 2014-05-04 11:17 - 01364522 _____ () C:\Users\sony\Downloads\wrar393.exe
2014-05-04 11:12 - 2014-05-04 11:12 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-04 07:55 - 2013-12-07 10:30 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-03 10:15 - 2013-01-19 16:02 - 00001348 _____ () C:\Users\sony\Desktop\ROBLOX Player.lnk
2014-05-03 10:15 - 2013-01-19 16:02 - 00000000 ____D () C:\Users\sony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2014-05-03 10:11 - 2014-05-03 10:11 - 00628080 _____ (ROBLOX Corporation) C:\Users\sony\Downloads\RobloxPlayerLauncher.exe
2014-05-03 10:04 - 2014-05-03 10:04 - 00000000 ____D () C:\Program Files (x86)\MPC-HC
2014-05-03 10:03 - 2014-05-03 10:02 - 05329480 _____ (Secunia) C:\Users\sony\Downloads\PSISetup.exe
2014-05-03 10:03 - 2014-04-26 10:28 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-05-03 10:02 - 2014-05-03 10:01 - 107394336 _____ (Oracle Corporation) C:\Users\sony\Downloads\VirtualBox-4.3.10-93012-Win.exe
2014-05-03 09:47 - 2014-03-08 17:53 - 00000000 ____D () C:\Users\sony\.VirtualBox
2014-05-03 09:10 - 2014-04-14 19:18 - 00000000 ____D () C:\Windows\ERDNT
2014-05-03 09:01 - 2013-07-28 19:36 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-05-03 08:53 - 2014-05-03 08:53 - 00001805 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-05-03 08:53 - 2014-05-03 08:53 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-05-03 08:42 - 2013-05-18 21:32 - 00000954 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-05-03 08:35 - 2014-05-03 08:36 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-05-03 08:35 - 2014-05-03 08:35 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-03 08:35 - 2012-10-27 16:23 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-03 08:35 - 2012-10-27 16:23 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-03 08:35 - 2010-05-17 06:32 - 00000000 ____D () C:\Program Files\Java
2014-05-03 08:06 - 2014-05-03 08:06 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-05-02 17:36 - 2013-06-02 20:18 - 00000000 ____D () C:\Users\Iliana\AppData\Roaming\Skype
2014-05-01 23:20 - 2014-05-01 23:11 - 00000000 ____D () C:\Users\sony\Desktop\RK_Quarantine
2014-05-01 23:16 - 2014-05-01 23:16 - 00017184 _____ () C:\Users\sony\Desktop\RKreport[0]_S_05012014_231654.txt
2014-05-01 23:08 - 2010-09-18 16:57 - 00000000 ____D () C:\Users\sony\AppData\Roaming\BitComet
2014-05-01 23:06 - 2013-12-27 19:24 - 00000000 ____D () C:\Users\ADMIN.sony-VAIO.000
2014-05-01 23:06 - 2013-01-29 10:53 - 00000000 ____D () C:\Users\Iliana
2014-05-01 21:04 - 2014-03-26 08:48 - 00000000 ____D () C:\Users\Iliana\AppData\Roaming\BitComet
2014-05-01 19:52 - 2009-07-14 06:13 - 00783102 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-01 15:52 - 2013-05-07 18:11 - 00001350 _____ () C:\Users\Iliana\Desktop\ROBLOX Player.lnk
2014-05-01 15:52 - 2013-05-07 18:10 - 00001169 _____ () C:\Users\Iliana\Desktop\ROBLOX Studio 2013.lnk
2014-05-01 15:52 - 2013-05-07 18:10 - 00000000 ____D () C:\Users\Iliana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2014-05-01 10:48 - 2014-05-01 10:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-30 22:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-30 22:13 - 2014-04-30 22:13 - 00000000 ____D () C:\Users\sony\Doctor Web
2014-04-30 22:13 - 2010-09-15 16:46 - 00000000 ____D () C:\Users\sony
2014-04-30 14:40 - 2014-04-30 14:40 - 00000000 _____ () C:\Windows\SysWOW64\debug.log
2014-04-30 10:19 - 2013-10-12 09:32 - 00003798 _____ () C:\Windows\Sandboxie.ini
2014-04-29 16:52 - 2014-04-29 16:52 - 03854864 _____ (Nitro PDF) C:\Users\Iliana\Downloads\NitroPDFReader.exe
2014-04-29 15:01 - 2014-05-01 22:59 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 14:40 - 2014-05-01 22:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 13:48 - 2014-05-01 22:59 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 13:34 - 2014-05-01 22:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:37 - 2012-05-04 17:22 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 11:37 - 2012-05-04 17:22 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 11:37 - 2011-06-19 13:02 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 10:51 - 2013-10-23 14:30 - 00320867 _____ () C:\test.xml
2014-04-29 09:59 - 2013-04-13 16:33 - 00002143 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-28 21:52 - 2014-04-28 21:52 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-04-28 20:44 - 2014-03-13 21:32 - 00001893 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-04-28 19:47 - 2013-10-12 10:50 - 00000000 ____D () C:\Users\new\AppData\Roaming\Sony Corporation
2014-04-28 19:43 - 2014-04-28 19:43 - 00000385 _____ () C:\Users\new\AppData\Roaminguser_gensett.xml
2014-04-28 19:43 - 2014-04-28 19:42 - 00000000 ____D () C:\Users\new\AppData\Roaming\BitComet
2014-04-28 19:43 - 2013-10-12 10:53 - 00080008 _____ () C:\Users\new\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-28 19:42 - 2014-04-28 19:42 - 00000000 __SHD () C:\Users\new\AppData\Local\EmieUserList
2014-04-28 19:42 - 2014-04-28 19:42 - 00000000 __SHD () C:\Users\new\AppData\Local\EmieSiteList
2014-04-28 19:42 - 2014-04-28 19:42 - 00000000 ____D () C:\Users\new\AppData\Roaming\Bitdefender
2014-04-28 19:42 - 2014-04-28 19:42 - 00000000 ____D () C:\Users\new\AppData\Local\TomTom
2014-04-28 19:42 - 2013-10-12 10:50 - 00001413 _____ () C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 21:15 - 2014-04-27 21:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-27 18:54 - 2014-03-08 17:54 - 00000000 ____D () C:\Users\sony\VirtualBox VMs
2014-04-27 12:34 - 2014-04-27 12:33 - 16001408 _____ (Microsoft Corporation) C:\Users\sony\Downloads\ITPx64_1033_7.10.344.0.exe
2014-04-27 08:08 - 2011-11-05 12:36 - 00000000 ____D () C:\KAMEN
2014-04-26 18:31 - 2014-04-26 18:31 - 00000000 __SHD () C:\Users\Iliana\AppData\Local\EmieUserList
2014-04-26 18:31 - 2014-04-26 18:31 - 00000000 __SHD () C:\Users\Iliana\AppData\Local\EmieSiteList
2014-04-26 18:31 - 2014-04-26 18:31 - 00000000 ____D () C:\Users\Iliana\AppData\Local\TomTom
2014-04-26 15:51 - 2010-05-05 20:12 - 00000000 ____D () C:\Windows\InstDrvs
2014-04-26 15:48 - 2014-04-26 15:45 - 00002895 _____ () C:\RHDSetup.log
2014-04-26 15:46 - 2010-05-17 06:04 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-04-26 10:28 - 2014-04-26 10:28 - 00000000 ____D () C:\Users\sony\AppData\Local\Secunia PSI
2014-04-26 10:23 - 2010-09-21 18:10 - 00000000 ____D () C:\Users\sony\AppData\Local\Adobe
2014-04-26 10:22 - 2014-04-26 10:22 - 00000000 ____D () C:\Users\sony\Downloads\Bitdefender Safepay
2014-04-26 10:11 - 2014-04-26 10:11 - 00002035 _____ () C:\Users\sony\Desktop\VirusTotal Uploader 2.2.lnk
2014-04-26 10:11 - 2014-04-26 10:11 - 00002035 _____ () C:\Users\new\Desktop\VirusTotal Uploader 2.2.lnk
2014-04-26 10:11 - 2014-04-26 10:11 - 00002035 _____ () C:\Users\Iliana\Desktop\VirusTotal Uploader 2.2.lnk
2014-04-26 10:11 - 2014-04-26 10:11 - 00002035 _____ () C:\Users\ADMIN.sony-VAIO.000\Desktop\VirusTotal Uploader 2.2.lnk
2014-04-26 10:11 - 2014-04-26 10:11 - 00000000 ____D () C:\Users\sony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirusTotal Uploader 2.2
2014-04-26 10:11 - 2014-04-26 10:11 - 00000000 ____D () C:\Program Files (x86)\VirusTotalUploader2
2014-04-24 07:54 - 2014-04-07 23:26 - 00000000 ____D () C:\Users\sony\Desktop\Bleeping computer
2014-04-23 09:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-04-23 07:18 - 2014-04-23 07:18 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (63).exe
2014-04-21 14:45 - 2013-11-23 12:31 - 00000000 ____D () C:\CCE_Quarantine
2014-04-21 08:52 - 2014-03-04 16:59 - 00000546 ____N () C:\Users\sony\Desktop\Emsisoft Emergency Kit.lnk
2014-04-21 08:52 - 2013-12-07 08:22 - 00000000 ____D () C:\EEK
2014-04-21 08:25 - 2014-03-23 07:41 - 00025088 ___SH () C:\Users\sony\Thumbs.db
2014-04-21 07:20 - 2014-04-21 07:20 - 00000000 __SHD () C:\Users\sony\AppData\Local\EmieUserList
2014-04-21 07:20 - 2014-04-21 07:20 - 00000000 __SHD () C:\Users\sony\AppData\Local\EmieSiteList
2014-04-20 23:18 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-20 22:06 - 2014-03-28 22:11 - 00000000 ____D () C:\Users\Iliana\AppData\Roaming\Media Player Classic
2014-04-20 19:09 - 2014-04-20 19:09 - 00000000 ____D () C:\Users\Iliana\AppData\Local\Apple Computer
2014-04-20 19:09 - 2013-04-02 07:37 - 00000000 ____D () C:\Users\Iliana\AppData\Roaming\Apple Computer
2014-04-20 17:42 - 2013-01-31 19:52 - 00080008 _____ () C:\Users\Iliana\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-20 17:12 - 2014-04-20 17:12 - 00632688 _____ (ROBLOX Corporation) C:\Users\sony\Downloads\RobloxPlayerLauncher (6).exe
2014-04-20 14:00 - 2013-07-07 10:18 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-04-20 10:09 - 2013-11-26 00:26 - 00080008 _____ () C:\Users\sony\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-20 10:08 - 2012-10-07 13:49 - 00360280 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-20 09:22 - 2014-04-20 08:25 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-04-20 08:19 - 2014-04-20 08:19 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-SONY-VAIO-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-04-20 08:19 - 2014-04-20 08:19 - 00000000 ____D () C:\RegBackup
2014-04-18 09:35 - 2014-04-18 09:35 - 00000000 ____D () C:\Users\Public\Desktop\CC Support
2014-04-17 15:14 - 2014-04-17 15:14 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (62).exe
2014-04-17 15:08 - 2014-04-17 15:08 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (61).exe
2014-04-17 14:52 - 2014-04-17 14:52 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (60).exe
2014-04-17 14:18 - 2014-04-17 14:18 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (59).exe
2014-04-17 14:13 - 2014-04-17 14:13 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (58).exe
2014-04-17 14:07 - 2014-04-17 14:07 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (57).exe
2014-04-17 13:47 - 2014-04-17 13:47 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (56).exe
2014-04-17 13:41 - 2014-04-17 13:41 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (55).exe
2014-04-17 13:34 - 2014-04-17 13:34 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (54).exe
2014-04-17 13:27 - 2014-04-17 13:27 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (53).exe
2014-04-17 12:37 - 2014-04-17 12:37 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (52).exe
2014-04-17 12:21 - 2014-04-17 12:21 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (51).exe
2014-04-17 12:08 - 2014-04-17 12:08 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (50).exe
2014-04-16 08:47 - 2014-04-16 08:47 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (49).exe
2014-04-16 08:17 - 2014-04-16 08:17 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (48).exe
2014-04-15 20:16 - 2014-04-15 20:16 - 00000000 ____D () C:\Users\Iliana\AppData\Roaming\QuickScan
2014-04-15 18:08 - 2014-04-15 18:08 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (47).exe
2014-04-15 17:54 - 2014-04-15 17:54 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (46).exe
2014-04-15 17:39 - 2014-04-15 17:39 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (45).exe
2014-04-15 17:26 - 2014-04-15 17:26 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (44).exe
2014-04-15 17:17 - 2014-04-15 17:17 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (43).exe
2014-04-15 15:04 - 2014-04-15 15:04 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (42).exe
2014-04-15 14:26 - 2014-04-15 14:26 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (41).exe
2014-04-14 19:17 - 2014-04-14 19:16 - 00000000 ____D () C:\Program Files (x86)\ERUNT
2014-04-14 19:16 - 2014-04-14 19:16 - 00000884 _____ () C:\Users\new\Desktop\NTREGOPT.lnk
2014-04-14 19:16 - 2014-04-14 19:16 - 00000884 _____ () C:\Users\Iliana\Desktop\NTREGOPT.lnk
2014-04-14 19:16 - 2014-04-14 19:16 - 00000884 _____ () C:\Users\ADMIN.sony-VAIO.000\Desktop\NTREGOPT.lnk
2014-04-14 19:16 - 2014-04-14 19:16 - 00000865 _____ () C:\Users\new\Desktop\ERUNT.lnk
2014-04-14 19:16 - 2014-04-14 19:16 - 00000865 _____ () C:\Users\Iliana\Desktop\ERUNT.lnk
2014-04-14 19:16 - 2014-04-14 19:16 - 00000865 _____ () C:\Users\ADMIN.sony-VAIO.000\Desktop\ERUNT.lnk
2014-04-14 15:26 - 2014-04-14 15:26 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (40).exe
2014-04-14 14:39 - 2014-04-14 14:39 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (39).exe
2014-04-14 14:06 - 2014-04-14 14:06 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (38).exe
2014-04-14 13:34 - 2014-04-14 13:34 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (37).exe
2014-04-14 12:57 - 2014-04-14 12:57 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (36).exe
2014-04-14 12:33 - 2014-04-14 12:33 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (35).exe
2014-04-14 08:42 - 2009-07-14 06:08 - 00032620 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-14 03:24 - 2014-04-27 21:14 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 03:19 - 2014-04-27 21:14 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-04-13 11:50 - 2009-07-14 03:34 - 00000823 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_123
2014-04-12 12:52 - 2014-04-12 12:52 - 09858048 _____ () C:\Users\sony\Downloads\osam_autorun_manager_5_0.msi
2014-04-12 01:49 - 2010-10-25 06:11 - 00000000 ____D () C:\Earth Alerts
2014-04-11 07:06 - 2014-04-11 07:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-11 07:06 - 2012-12-10 22:30 - 00000000 ____D () C:\Users\sony\AppData\Roaming\Malwarebytes
2014-04-10 19:49 - 2013-08-28 20:21 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 19:42 - 2014-04-10 19:42 - 00000083 _____ () C:\Users\sony\AppData\Roaming\mbam.context.scan
2014-04-10 19:23 - 2010-09-23 19:34 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-09 20:45 - 2014-04-09 20:45 - 00000000 __SHD () C:\found.003
2014-04-07 21:15 - 2013-10-12 10:49 - 00000000 ____D () C:\Users\new
2014-04-07 20:42 - 2014-04-07 20:42 - 00001979 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-04-07 20:42 - 2014-04-07 20:42 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-04-07 15:27 - 2014-04-07 15:27 - 00632688 _____ (ROBLOX Corporation) C:\Users\Iliana\Downloads\RobloxPlayerLauncher (34).exe
2014-04-06 16:49 - 2014-03-04 17:31 - 00001924 _____ () C:\Windows\system32\Drivers\etc\hosts.ccebak
2014-04-06 16:48 - 2014-04-06 16:48 - 00000385 _____ () C:\Users\sony\AppData\Roaminguser_gensett.xml
2014-04-06 10:29 - 2014-04-06 10:29 - 07195272 _____ (Goversoft LLC) C:\Users\sony\Downloads\privazer_free.exe
2014-04-06 08:27 - 2014-01-25 10:19 - 00000822 ____N () C:\Users\Public\Desktop\CCleaner.lnk
 
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.5012.dll
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2014-04-29 11:29
 
==================== End Of Log ============================
 
 
the sound and keyboard issue hasn't occurred for the last 4 days but not sure if it is gone. Will let you know if happens again.


#4 nasdaq

nasdaq

  • Malware Response Team
  • 38,247 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:59 AM

Posted 07 May 2014 - 08:43 AM

Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.

start

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {30CEEEA2-3742-40E4-85DD-812BF1CBB83D} -  No File
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} -  No File
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File
FF HKLM-x32\...\Firefox\Extensions: [4effxtbr@RadioPI_4e.com] - C:\Program Files (x86)\RadioPI_4e\bar\1.bin
FF Extension: RadioPI - C:\Program Files (x86)\RadioPI_4e\bar\1.bin [2011-12-31]
S0 bhnprr; No ImagePath
S0 raeehd; No ImagePath
S0 vqdtrh; No ImagePath
S3 athur; system32\DRIVERS\athurx.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S0 TfFsMon; system32\drivers\TfFsMon.sys [X]
S0 TFSysMon; system32\drivers\TfSysMon.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

end

Save the files as fixlist.txt in to the same folder as FRST
Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.
The tool will create a log (Fixlog.txt) please post it to your reply.
===

Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
p.s.
If the SecurityCheck program fails to run for any reason, run it as an Administrator.
===

#5 scorpion73

scorpion73
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:02:59 PM

Posted 07 May 2014 - 02:02 PM

Hi nasdaq

 

thanks for quick response.

followed the instructions and here are the logs:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-05-2014
Ran by sony at 2014-05-07 19:29:54 Run:1
Running from C:\Users\sony\Desktop\BC2
Boot Mode: Normal
==============================================
 
Content of fixlist:
*****************
start
 
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {30CEEEA2-3742-40E4-85DD-812BF1CBB83D} -  No File
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} -  No File
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File
FF HKLM-x32\...\Firefox\Extensions: [4effxtbr@RadioPI_4e.com] - C:\Program Files (x86)\RadioPI_4e\bar\1.bin
FF Extension: RadioPI - C:\Program Files (x86)\RadioPI_4e\bar\1.bin [2011-12-31]
S0 bhnprr; No ImagePath
S0 raeehd; No ImagePath
S0 vqdtrh; No ImagePath
S3 athur; system32\DRIVERS\athurx.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S0 TfFsMon; system32\drivers\TfFsMon.sys [X]
S0 TFSysMon; system32\drivers\TfSysMon.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
 
end
*****************
 
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Value deleted successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{30CEEEA2-3742-40E4-85DD-812BF1CBB83D} => Value deleted successfully.
HKCR\CLSID\{30CEEEA2-3742-40E4-85DD-812BF1CBB83D} => Key not found.
HKCR\PROTOCOLS\Handler\ipp\0x00000001 => Key deleted successfully.
HKCR\CLSID\{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} => Key not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@pages.tvunetworks.com/WebPlayer => Key deleted successfully.
C:\Windows\system32\TVUAx\npTVUAx.dll not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\4effxtbr@RadioPI_4e.com => Value deleted successfully.
C:\Program Files (x86)\RadioPI_4e\bar\1.bin => Moved successfully.
bhnprr => Service deleted successfully.
raeehd => Service deleted successfully.
vqdtrh => Service deleted successfully.
athur => Service deleted successfully.
ewusbnet => Service deleted successfully.
hwdatacard => Service deleted successfully.
hwusbdev => Service deleted successfully.
TfFsMon => Service deleted successfully.
TFSysMon => Service deleted successfully.
VBoxNetFlt => Service deleted successfully.
 
==== End of Fixlog ====
 

Results of screen317's Security Check version 0.99.82  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 Windows Firewall Enabled!  
Bitdefender Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Secunia PSI (3.0.0.9016)   
 VirusTotal Uploader 2.2   
 Java 7 Update 55  
 Adobe Flash Player 13.0.0.206  
 Adobe Reader XI  
 Google Chrome 34.0.1847.116  
 Google Chrome 34.0.1847.131  
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamscheduler.exe   
 Bitdefender Bitdefender vsserv.exe  
 Bitdefender Bitdefender bdagent.exe  
 Bitdefender Bitdefender pmbxag.exe  
 Bitdefender Bitdefender antispam32 bdapppassmgr.exe 
 Bitdefender Bitdefender updatesrv.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C: 5% 
````````````````````End of Log`````````````````````` 
 


#6 nasdaq

nasdaq

  • Malware Response Team
  • 38,247 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:59 AM

Posted 08 May 2014 - 06:26 AM

Looking good.

If all is well:

Please consider using these ideas to help secure your computer. While there is no way to guarantee safety when you use a computer, these steps will make it much less likely that you will need to endure another infection. While we really like to help people, we would rather help you protect yourself so that you won't need that help in the future.

Please either enable Automatic Updates under Start -> Control Panel -> Automatic Updates or get into the habit of checking Windows Update regularly. They usually have security updates every month. You can set Windows to notify you of Updates so that you can choose, but only do this if you believe you are able to understand which ones are needed. This is a crucial security measure.

Having an effective antivirus is a must for everyone.
In addition to many excellent commercial products there are plenty of good free antivirus programs available. I can recommend:

If you are satisfied with your current protection programs you can ignore the instructions on Antivirus or Firewall listed below.In addition to an antivirus I recommend using a firewall. A software firewall is a software program that helps screen out hackers, viruses, and worms that try to reach your computer over the Internet. I can recommend one of the following free products:Please note: Many installer offer third-party downloads that are installed automatically when you do not uncheck certain checkboxes. While most of the time not being malicious you usually do not want these on your computer. Be careful during the installation process and you will avoid seeing tons of new unwanted toolbars in your favorite web browser.

Please consider installing and running some of the following programs; they are either free or have free versions of commercial programs:

Malwarebytes Anti-Malware (MBAM)
The free version of MBAM can be used to scan the system for traces of malware. Scanning your system regularly will make it harder for malware to reside on your system.
A tutorial on using MBAM can be found here.
Please Note: Only the paid for version has real time capabilities.

SpywareBlaster
A tutorial on using SpywareBlaster to prevent malware from ever installing on your computer may be found here.

Please keep these programs up-to-date and run them whenever you suspect a problem to prevent malware problems. A number of programs have resident protection and it is a good idea to run the resident protection of one of each type of program to maintain protection. However, it is important to run only one resident program of each type since they can conflict and become less effective. That means only one antivirus, firewall and scanning anti-spyware program at a time. Passive protectors, like SpywareBlaster can be run with any of them.

Note that there are a lot of rogue programs out there that want to scare you into giving them your money and some malware actually claims to be security programs. If you get a popup for a security program that you did not install yourself, do NOT click on it and ask for help immediately. It is very important to run an antivirus and firewall, but you can't always rely on reviews and ads for information. Ask in a security forum that you trust if you are not sure. If you are unsure and looking for anti-spyware programs, you can find out if it is a rogue here:A similar category of programs is now called "scareware." Scareware programs are active infections that will pop-up on your computer and tell you that you are infected. If you look closely, it will usually have a name that looks like it might be legitimate, but it is NOT one of the programs you installed. It tells you to click and install it right away. If you click on any part of it, including the 'X' to close it, you may actually help it infect your computer further. Keeping protection updated and running resident protection can help prevent these infections. If it happens anyway, get offline as quickly as you can. Pull the internet connection cable or shut down the computer if you have to. Contact someone to help by using another computer if possible. These programs are also sometimes called 'rogues', but they are different than the older version of rogues mentioned above.

Please keep your programs up to date. This applies to Java, Adobe Flashplayer, Adobe Reader and your Internet Browsers in particular. Vulnerabilities in these programs are often exploited in order to install malware on your PC. Visiting a prepared web page suffices to infect your system.

In general Firefox, Opera and Google Chrome are considered to be more secure than Internet Explorer. In addition there are many useful add-ons that can protect you from possible risks:
  • WOT will warn you when you try to visit sites with poor reputation. The reputation is based on user ratings and is usually very accurate.
  • Script Blocker can help blocking many attempts to infect your system via malicious websites by only allowing scripts at sites you trust.
  • NoScript is a popular Firefox addon,
  • ScriptNo a popular Google Chrome addon.
For much more useful information, please also read Tony Klein's excellent article: How did I get infected in the first place

Hopefully these steps will help to keep you error free. If you run into more difficulty, we will certainly do what we can to help.
===

#7 scorpion73

scorpion73
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:02:59 PM

Posted 17 May 2014 - 01:52 AM

hi nasdaq

 

apologies for late response.

computer is running o'k, since last post i have had twice the issue with the keyboard, typing vocals only in a strange alphabet.

if PC is clean so this could be a driver problem, shall I reinstall the keyboard driver, will this help, what do you think?

 

thanks



#8 nasdaq

nasdaq

  • Malware Response Team
  • 38,247 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:59 AM

Posted 17 May 2014 - 10:08 AM

Check the driver version.

http://secunia.com/vulnerability_scanning/personal/
Secunia PSI is a security scanner which identifies programs/drivers that are damaged and need updates.
If interested in security I would download the tool and run it.
<<<>>>

#9 nasdaq

nasdaq

  • Malware Response Team
  • 38,247 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:59 AM

Posted 23 May 2014 - 08:32 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users