Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

File Missing?


  • This topic is locked This topic is locked
14 replies to this topic

#1 Vsquizz

Vsquizz

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 04 January 2015 - 09:39 AM

My HJT Log shows "File Missing" entries.  To be honest, I have no idea if this is a problem or not.

 

Logfile of Trend Micro HijackThis v2.0.5

Scan saved at 9:15:14 PM, on 4/01/2015

Platform: Unknown Windows (WinNT 6.02.1008)

MSIE: Internet Explorer v11.0 (11.00.9600.17416)

 

Boot mode: Normal

 

Running processes:

C:\Program Files\Webroot\WRSA.exe

C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE

C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe

C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe

C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe

C:\Users\Vic\Downloads\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Webroot Vault - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - C:\ProgramData\WRData\pkg\LPBar.dll

O2 - BHO: Webroot Filtering Extension - {C9C42510-9B41-42c1-9DCD-7282A2D07C61} - C:\Program Files\Webroot\WRData\PKG\Vistax86\wrflt.dll

O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar.dll

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe"

O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe"

O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun

O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN

O4 - HKLM\..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s

O4 - HKLM\..\Run: [WRSVC] "C:\Program Files\Webroot\WRSA.exe" -ul

O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_278209370FF94061A837B2120CA1AD3C] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

O4 - Global Startup: Install Webroot FF RunOnce.lnk = C:\Program Files (x86)\Common Files\wruninstall.exe

O4 - Global Startup: Install Webroot IE RunOnce.lnk = C:\Program Files (x86)\Common Files\wruninstall.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000

O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll

O9 - Extra button: Webroot - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\ProgramData\WRData\pkg\LPBar.dll

O9 - Extra 'Tools' menuitem: Webroot - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\ProgramData\WRData\pkg\LPBar.dll

O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe

O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Intel® Integrated Clock Controller Service - Intel® ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: PDFProFiltSrvPP - Nuance Communications, Inc. - C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

O23 - Service: WRSVC - Webroot - C:\Program Files\Webroot\WRSA.exe

--

End of file - 8527 bytes



BC AdBot (Login to Remove)

 


m

#2 Machiavelli

Machiavelli

    Agent 007


  • Malware Response Instructor
  • 3,904 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:09:09 PM

Posted 07 January 2015 - 05:14 PM

Hey my friend. :)
Don't worry about the File Missing entries.

Please download FRST (by Farbar) from the link below and save it to your Desktop.

Download Mirror #1

If you are unsure whether you have 32-Bit or 64-Bit Windows, see here
  • Disable all anti-virus and anti-malware software to prevent them inhibiting FRST in any way. If you are unsure how to do this, see THIS.
  • Double-click FRST.exe/FRST64.exe (depending on which version you downloaded) to run it. (if you have Windows Vista / Windows 7 / Windows 8: Please do a Right click on the FRST icon and select Run as Administrator)
  • When the disclaimer appears, click Yes.
  • Click Scan to start FRST.
  • When FRST finishes scanning, two logs, FRST.txt and Addition.txt will open.
  • Copy (Ctrl+C) and Paste (Ctrl+V) the contents of both of these logs into your next post please.

~Machiavelli

If I don't reply within 24 hours please PM me!

  • Every topic with no replies within 5 days will be closed.
  • If you like my help here please give me feedback.

unite_blue.png
 
 


#3 Vsquizz

Vsquizz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 08 January 2015 - 06:44 AM

Thanks for That:

 

 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
64 Bit HP CIO Components Installer (Version: 17.2.1 - Hewlett-Packard) Hidden
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Brother MFL-Pro Suite HL-L2380DW series (HKLM-x32\...\{F8ECC2FD-CE2B-4ED4-BDCC-90D0D34206FD}) (Version: 0.0.20.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Dot4 (HKLM\...\{3EEDA265-C6F3-4EC1-A317-1C9315DEDDDE}) (Version: 1.0.0.0 - HP)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Office Sounds (HKLM-x32\...\{10CE1EA2-12E9-11D3-825E-00C04F6843FE}) (Version: 1.0.0.0 - Microsoft Corp)
Microsoft OneDrive (HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\OneDriveSetup.exe) (Version: 17.3.1229.0918 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
NextWindow DesktopTouch Driver Package (HKLM\...\{4ED0CEF7-8AD7-45E3-B200-02BD6523ACAB}) (Version: 1.1.004 - NextWindow)
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon)
Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.6.0 - Nikon)
Nuance PaperPort 12 (HKLM-x32\...\{869FCC6C-5669-4B0B-827E-2BBAACD88A87}) (Version: 12.1.0006 - Nuance Communications, Inc.)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0000 - Nuance Communications, Inc.)
Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.4.7 - Nikon)
SeaMonkey 2.31 (x86 en-US) (HKLM-x32\...\SeaMonkey 2.31 (x86 en-US)) (Version: 2.31 - Mozilla)
System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)
Unity Web Player (HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.6.0 - Nikon)
Webroot SecureAnywhere (HKLM-x32\...\WRUNINST) (Version: 8.0.6.28 - Webroot)
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-2151387201-1383573627-3921742935-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Vic\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\FileSyncApi64.dll (Microsoft Corporation)
 
==================== Restore Points  =========================
 
20-12-2014 21:46:09 Removed OpenOffice.org 3.4.1
29-12-2014 14:24:45 Scheduled Checkpoint
30-12-2014 22:05:46 Windows Modules Installer
03-01-2015 19:35:54 Windows Modules Installer
04-01-2015 20:33:53 Removed Windows 7 USB/DVD Download Tool
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2014-12-30 21:13 - 2014-12-30 21:13 - 00000000 ____A C:\Windows\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {0243A7FF-38D9-4EBB-9C12-8026257B5DA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-28] (Google Inc.)
Task: {1C83386B-3CB9-4A74-9FA0-727AE9CAFCEA} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2151387201-1383573627-3921742935-1001 => %localappdata%\Microsoft\SkyDrive\SkyDrive.exe
Task: {48F4DFB1-EC94-42B0-8BE3-FDC47579A631} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-12-14] (Microsoft Corporation)
Task: {685EDDF0-D2DA-403D-8238-31EE0194D464} - System32\Tasks\Microsoft Office 15 Sync Maintenance for VICS-Vic Vics => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-11-04] (Microsoft Corporation)
Task: {7095866A-EDCD-4957-B424-A73118536C68} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)
Task: {C1E7A4ED-501D-4FB6-B432-39FCBCBB899C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-27] (Adobe Systems Incorporated)
Task: {C2CCC1D2-4D11-46A0-91FB-BE26B16495B2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-28] (Google Inc.)
Task: {E86BA3FE-CE63-4BCA-A078-0EBAC9DE89E8} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-11-12] (Microsoft Corporation)
Task: {E9B83271-A27C-47C6-B9C8-93397ABE7E21} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-13] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) =============
 
2014-12-04 21:29 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-12-21 20:37 - 2005-04-22 12:36 - 00143360 ____R () C:\Windows\system32\BrSNMP64.dll
2014-12-04 21:44 - 2014-12-04 21:44 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2013-10-31 10:24 - 2013-10-31 10:24 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-12-21 20:37 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2014-12-04 21:29 - 2014-12-04 21:29 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2014-12-23 16:59 - 2014-11-18 22:26 - 01032360 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\ADDINS\UmOutlookAddin.dll
2014-12-04 21:45 - 2014-12-04 21:45 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
2014-12-04 21:29 - 2014-12-04 21:29 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\AppVIsvStream32.dll
2014-12-10 08:27 - 2014-12-06 09:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
2014-12-10 08:27 - 2014-12-06 09:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
2014-12-10 08:27 - 2014-12-06 09:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
2014-12-10 08:27 - 2014-12-06 09:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
AlternateDataStreams: C:\Users\fleaf_000\OneDrive:ms-properties
AlternateDataStreams: C:\Users\pjsqu_000\OneDrive:ms-properties
AlternateDataStreams: C:\Users\Toby\OneDrive:ms-properties
AlternateDataStreams: C:\Users\Vic\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Vic\Documents\Mainstream invoice.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Vic\Documents\Mainstream invoice.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Vic\Documents\Rego Form.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Vic\Documents\Rego Form.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Vic\Documents\Swimming WA.tiff:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Vic\Documents\Swimming WA.tiff:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"
 
==================== EXE Association (whitelisted) =============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-19\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-19\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-20\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-20\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\Software\Classes\exefile: "%1" %* <===== ATTENTION!
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
(Currently there is no automatic fix for this section.)
 
HKLM\...\StartupApproved\Run32: => "IndexSearch"
HKLM\...\StartupApproved\Run32: => "PaperPort PTD"
HKLM\...\StartupApproved\Run32: => "PDF5 Registry Controller"
HKLM\...\StartupApproved\Run32: => "PDFHook"
HKLM\...\StartupApproved\Run32: => "Nikon Message Center 2"
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_278209370FF94061A837B2120CA1AD3C"
 
========================= Accounts: ==========================
 
Administrator (S-1-5-21-2151387201-1383573627-3921742935-500 - Administrator - Disabled)
fleaf_000 (S-1-5-21-2151387201-1383573627-3921742935-1005 - Limited - Enabled) => C:\Users\fleaf_000
Guest (S-1-5-21-2151387201-1383573627-3921742935-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2151387201-1383573627-3921742935-1008 - Limited - Enabled)
pjsqu_000 (S-1-5-21-2151387201-1383573627-3921742935-1006 - Limited - Enabled) => C:\Users\pjsqu_000
Toby (S-1-5-21-2151387201-1383573627-3921742935-1004 - Limited - Enabled) => C:\Users\Toby
Vic (S-1-5-21-2151387201-1383573627-3921742935-1001 - Administrator - Enabled) => C:\Users\Vic
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (01/08/2015 11:58:05 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/07/2015 09:20:11 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/06/2015 06:36:42 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/06/2015 05:45:45 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/06/2015 10:59:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: plugin-container.exe, version: 34.0.0.5449, time stamp: 0x547eb66c
Faulting module name: mozalloc.dll, version: 34.0.0.5449, time stamp: 0x547eb350
Exception code: 0x80000003
Fault offset: 0x00001425
Faulting process id: 0x14c
Faulting application start time: 0xplugin-container.exe0
Faulting application path: plugin-container.exe1
Faulting module path: plugin-container.exe2
Report Id: plugin-container.exe3
Faulting package full name: plugin-container.exe4
Faulting package-relative application ID: plugin-container.exe5
 
Error: (01/06/2015 10:59:14 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: e7c
 
Start Time: 01d0295b9ccddb88
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe
 
Report Id: 907a9af1-954f-11e4-8285-b4749fc8c4e2
 
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe
 
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
 
Error: (01/05/2015 03:02:27 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/05/2015 02:44:27 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/05/2015 02:21:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/05/2015 02:01:00 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
 
System errors:
=============
Error: (01/08/2015 07:40:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The MBAMService service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (01/08/2015 01:59:15 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT AUTHORITY)
Description: The system watchdog timer was triggered.
 
Error: (01/08/2015 01:59:35 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 12:41:27 PM on ‎8/‎01/‎2015 was unexpected.
 
Error: (01/07/2015 09:09:14 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the AudioEndpointBuilder service.
 
Error: (01/07/2015 09:08:44 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NcbService service.
 
Error: (01/07/2015 09:08:14 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WlanSvc service.
 
Error: (01/07/2015 09:07:44 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (01/07/2015 07:54:26 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (01/07/2015 01:22:15 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT AUTHORITY)
Description: The system watchdog timer was triggered.
 
Error: (01/07/2015 01:22:40 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:09:07 AM on ‎7/‎01/‎2015 was unexpected.
 
 
Microsoft Office Sessions:
=========================
Error: (01/08/2015 11:58:05 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/07/2015 09:20:11 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/06/2015 06:36:42 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/06/2015 05:45:45 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/06/2015 10:59:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe34.0.0.5449547eb66cmozalloc.dll34.0.0.5449547eb350800000030000142514c01d0295ca9ff6189C:\Program Files (x86)\SeaMonkey\plugin-container.exeC:\Program Files (x86)\SeaMonkey\mozalloc.dll0740d4a8-9550-11e4-8285-b4749fc8c4e2
 
Error: (01/06/2015 10:59:14 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20689e7c01d0295b9ccddb884294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe907a9af1-954f-11e4-8285-b4749fc8c4e2microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
 
Error: (01/05/2015 03:02:27 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/05/2015 02:44:27 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/05/2015 02:21:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/05/2015 02:01:00 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
 
CodeIntegrity Errors:
===================================
  Date: 2015-01-04 09:13:04.256
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:04.115
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:03.974
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:03.803
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:03.599
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:03.318
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:03.053
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2014-12-26 08:12:09.682
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2014-12-26 08:12:09.542
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2014-12-26 08:11:28.899
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i5-2410M CPU @ 2.30GHz
Percentage of memory in use: 31%
Total physical RAM: 6091.86 MB
Available physical RAM: 4198.33 MB
Total Pagefile: 7115.86 MB
Available Pagefile: 5178.9 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:931.17 GB) (Free:825.16 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 86128EB4)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================


#4 Vsquizz

Vsquizz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 08 January 2015 - 06:48 AM

and this one:

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Vic (administrator) on VICS on 08-01-2015 19:41:23
Running from C:\Users\Vic\Downloads
Loaded Profile: Vic (Available profiles: Vic & Toby & fleaf_000 & pjsqu_000)
Platform: Windows 8.1 Pro (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Seamonkey)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Webroot) C:\Program Files\Webroot\WRSA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Webroot) C:\Program Files\Webroot\WRSA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\outlook.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\msosync.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46952 2011-08-02] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [30568 2011-08-02] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2014-01-27] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792 2013-12-19] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKLM-x32\...\Run: [WRSVC] => C:\Program Files\Webroot\WRSA.exe [773256 2015-01-04] (Webroot)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKLM\...\Policies\Explorer: [NoShellSearchButton] 0
HKLM\...\Policies\Explorer: [NoFind] 0
HKLM\...\Policies\Explorer: [NoFile] 0
HKLM\...\Policies\Explorer: [HideClock] 0
HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0
HKLM\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKLM\...\Policies\Explorer: [NoSetFolders] 0
HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKLM\...\Policies\Explorer: [NoSetTaskbar] 0
HKLM\...\Policies\Explorer: [NoDeletePrinter] 0
HKLM\...\Policies\Explorer: [NoDFSTab] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [NoLogoff] 0
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0
HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0
HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [NoHardwareTab] 0
HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKLM\...\Policies\Explorer: [NoDesktop] 0
HKU\S-1-5-19\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-19\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-19\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-20\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-20\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-20\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-13] (Piriform Ltd)
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Run: [GoogleChromeAutoLaunch_278209370FF94061A837B2120CA1AD3C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\MountPoints2: {1b015d0d-3e3d-11e4-824f-806e6f6e6963} - "E:\Welcome.exe" 
HKU\S-1-5-18\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-18\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-18\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoStartMenuSubFolders] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install Webroot FF RunOnce.lnk
ShortcutTarget: Install Webroot FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (No File)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install Webroot IE RunOnce.lnk
ShortcutTarget: Install Webroot IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (No File)
ShellIconOverlayIdentifiers: [ ] -> {1914B27A-33C8-46F8-A1C2-F993268D4564} => C:\Windows\system32\WRusr.dll (Webroot)
ShellIconOverlayIdentifiers: [  ] -> {C14874EA-ACE4-4A47-8A81-18C4D1C40868} => C:\Windows\system32\WRusr.dll (Webroot)
ShellIconOverlayIdentifiers: [   ] -> {6DA1ED92-315E-4D0B-B354-9D5F519DBA95} => C:\Windows\system32\WRusr.dll (Webroot)
ShellIconOverlayIdentifiers: [    ] -> {8D7FC74C-E409-42DF-8EEE-69D45FAE2F30} => C:\Windows\system32\WRusr.dll (Webroot)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar64.dll (Webroot)
BHO: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files\Webroot\WRData\PKG\Vistax64\wrflt.dll (Webroot)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar.dll (Webroot)
BHO-x32: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files\Webroot\WRData\PKG\Vistax86\wrflt.dll (Webroot)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar64.dll (Webroot)
Toolbar: HKLM-x32 - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar.dll (Webroot)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2151387201-1383573627-3921742935-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Vic\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://www.news.com.au/sport
CHR StartupUrls: Default -> "https://www.google.com.au/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-28]
CHR Extension: (Google Docs) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-28]
CHR Extension: (Google Drive) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-28]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-28]
CHR Extension: (YouTube) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-28]
CHR Extension: (Adblock Plus) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-01]
CHR Extension: (Google Search) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-28]
CHR Extension: (Google Sheets) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-28]
CHR Extension: (Google Maps) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2014-09-28]
CHR Extension: (Google Wallet) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-28]
CHR Extension: (Security Protection) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh [2015-01-04]
CHR Extension: (Webroot Password Manager) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\okfhiodnpcnnnpgbjbhfebjnbagmfhab [2015-01-04]
CHR Extension: (Outlook.com) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge [2014-09-28]
CHR Extension: (Gmail) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-28]
CHR HKLM-x32\...\Chrome\Extension: [kjeghcllfecehndceplomkocgfbklffd] - C:\ProgramData\WRData\PKG\CHROME\CHROME_1.0.2.42.crx [2015-01-04]
CHR HKLM-x32\...\Chrome\Extension: [okfhiodnpcnnnpgbjbhfebjnbagmfhab] - C:\ProgramData\WRData\pkg\lpchrome.crx [2015-01-04]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2014-04-28] (Hewlett-Packard) [File not signed]
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2014-04-28] (Hewlett-Packard) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 WRSVC; C:\Program Files\Webroot\WRSA.exe [773256 2015-01-04] (Webroot)
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 athr; C:\Windows\system32\DRIVERS\athwnx.sys [3680256 2013-06-18] (Qualcomm Atheros Communications, Inc.)
R3 CXPOLARIS; C:\Windows\system32\drivers\cxRDU253S.sys [477824 2012-08-21] (Conexant Systems, Inc.)
R3 DFKBfilter; C:\Windows\system32\drivers\DFKBfilter.sys [24712 2010-06-24] (Darfon Electronics Corp.)
R3 DFMousefilter; C:\Windows\system32\drivers\DFMousefilter.sys [24200 2010-06-24] (Darfon Electronics Corp.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [146856 2013-06-04] (Windows ® Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2013-06-04] (Windows ® Win 7 DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-08] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 nuvotonir; C:\Windows\system32\DRIVERS\nuvotonir.sys [68096 2013-06-17] (Nuvoton Technology Corporation)
R3 NWVoltron; C:\Windows\System32\drivers\NWVoltron.sys [28440 2011-03-08] ()
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [33168 2013-11-01] (Windows ® Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R0 WRkrn; C:\Windows\System32\drivers\WRkrn.sys [115680 2015-01-04] (Webroot)
U0 SR; No ImagePath
U2 srservice; No ImagePath
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-01-08 19:41 - 2015-01-08 19:41 - 00025417 _____ () C:\Users\Vic\Downloads\FRST.txt
2015-01-08 19:41 - 2015-01-08 19:41 - 00000000 ____D () C:\FRST
2015-01-08 19:36 - 2015-01-08 19:36 - 02124288 _____ (Farbar) C:\Users\Vic\Downloads\FRST64.exe
2015-01-08 19:36 - 2015-01-08 19:36 - 00001134 _____ () C:\Users\Vic\Desktop\FRST64.exe - Shortcut.lnk
2015-01-06 16:38 - 2015-01-06 16:38 - 00000000 _____ () C:\Users\Vic\Sti_Trace.log
2015-01-05 13:09 - 2015-01-05 13:09 - 00001446 _____ () C:\Users\Toby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-04 21:12 - 2015-01-04 21:15 - 00008528 _____ () C:\Users\Vic\Downloads\hijackthis.log
2015-01-04 21:01 - 2015-01-05 21:08 - 00002622 _____ () C:\Windows\PFRO.log
2015-01-04 20:34 - 2015-01-04 20:34 - 00000000 ____D () C:\Windows\system32\appmgmt
2015-01-04 20:15 - 2015-01-04 20:15 - 00000000 ____D () C:\Users\Vic\AppData\Local\lptmp1639552134
2015-01-04 20:14 - 2015-01-08 19:12 - 00000000 ____D () C:\ProgramData\WRData
2015-01-04 20:14 - 2015-01-04 20:14 - 00773256 _____ (Webroot) C:\Users\Vic\Downloads\wsainstall.exe
2015-01-04 20:14 - 2015-01-04 20:14 - 00154760 _____ (Webroot) C:\Windows\SysWOW64\WRusr.dll
2015-01-04 20:14 - 2015-01-04 20:14 - 00115680 _____ (Webroot) C:\Windows\system32\Drivers\WRkrn.sys
2015-01-04 20:14 - 2015-01-04 20:14 - 00105320 _____ (Webroot) C:\Windows\system32\WRusr.dll
2015-01-04 20:14 - 2015-01-04 20:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webroot SecureAnywhere
2015-01-04 20:14 - 2015-01-04 20:14 - 00000000 ____D () C:\Program Files\Webroot
2015-01-04 18:50 - 2015-01-04 18:50 - 00010370 _____ () C:\Users\fleaf_000\Documents\Job Roster.xlsx
2015-01-04 16:53 - 2015-01-04 16:53 - 04650440 _____ () C:\Users\Vic\Downloads\tc00091500e.exe
2015-01-04 16:50 - 2015-01-04 16:52 - 80433832 _____ () C:\Users\Vic\Downloads\tc00201800s.exe
2015-01-04 16:48 - 2015-01-04 16:49 - 40099240 _____ () C:\Users\Vic\Downloads\tc50066400h (1).exe
2015-01-04 16:48 - 2015-01-04 16:48 - 08566720 _____ () C:\Users\Vic\Downloads\tc50067200e (1).exe
2015-01-04 15:52 - 2015-01-04 15:52 - 16761176 _____ () C:\Users\Vic\Downloads\tc00275200a.exe
2015-01-04 15:49 - 2015-01-04 15:50 - 32625360 _____ () C:\Users\Vic\Downloads\tc50067700g.exe
2015-01-04 15:49 - 2015-01-04 15:49 - 05200416 _____ () C:\Users\Vic\Downloads\tc50067000d.exe
2015-01-04 15:48 - 2015-01-04 15:49 - 12516712 _____ () C:\Users\Vic\Downloads\tc50066800d.exe
2015-01-04 15:47 - 2015-01-04 15:47 - 27951464 _____ () C:\Users\Vic\Downloads\tc00384500f.exe
2015-01-04 15:46 - 2015-01-04 15:47 - 07023472 _____ () C:\Users\Vic\Downloads\tc50067500e.exe
2015-01-04 15:43 - 2015-01-04 15:44 - 35784568 _____ () C:\Users\Vic\Downloads\7_64_intel_display_driver_8.15.10.2086.exe
2015-01-04 15:39 - 2015-01-04 15:41 - 47774096 _____ () C:\Users\Vic\Downloads\tc00163700z.exe
2015-01-04 15:39 - 2015-01-04 15:40 - 09751800 _____ () C:\Users\Vic\Downloads\tc50066500d.exe
2015-01-04 15:39 - 2015-01-04 15:39 - 04792256 _____ () C:\Users\Vic\Downloads\tc50066600e.exe
2015-01-04 15:36 - 2015-01-04 15:36 - 02698960 _____ (Igor Pavlov) C:\Users\Vic\Downloads\sl630_sl650_bios_w240.exe
2015-01-04 15:34 - 2015-01-04 15:35 - 40099240 _____ () C:\Users\Vic\Downloads\tc50066400h.exe
2015-01-04 15:33 - 2015-01-04 15:33 - 08566720 _____ () C:\Users\Vic\Downloads\tc50067200e.exe
2015-01-04 10:10 - 2015-01-04 10:10 - 00001446 _____ () C:\Users\fleaf_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-04 09:08 - 2015-01-08 19:36 - 00874498 _____ () C:\Windows\WindowsUpdate.log
2015-01-04 09:08 - 2015-01-04 09:12 - 00000400 __RSH () C:\ProgramData\ntuser.pol
2015-01-04 09:08 - 2015-01-04 09:08 - 00640424 _____ (Akeo Consulting (http://akeo.ie)) C:\Users\Vic\Downloads\rufus-1.4.12.exe
2015-01-04 07:58 - 2015-01-04 08:39 - 3275751424 _____ () C:\Users\Vic\Downloads\X17-24209.iso
2015-01-04 07:34 - 2015-01-04 07:34 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\PowerISO
2015-01-04 07:23 - 2015-01-04 07:23 - 00213631 _____ () C:\Users\Vic\Downloads\TomsDownloader4B7376.exe
2015-01-04 07:18 - 2015-01-04 07:18 - 00213546 _____ () C:\Users\Vic\Downloads\TomsDownloader5B14923.exe
2015-01-03 21:45 - 2015-01-03 23:47 - 3275161600 _____ () C:\Users\Vic\Downloads\X17-24209a.iso
2015-01-03 19:40 - 2015-01-03 19:40 - 00001446 _____ () C:\Users\Vic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-03 18:36 - 2015-01-03 18:37 - 02721168 _____ (Microsoft Corporation) C:\Users\Vic\Downloads\Windows7-USB-DVD-Download-Tool-Installer-en-US.exe
2015-01-03 14:49 - 2015-01-03 15:16 - 00000000 ____D () C:\Users\fleaf_000\Documents\Weekly Menu's
2015-01-03 13:14 - 2015-01-03 13:14 - 00000000 ___RD () C:\Users\fleaf_000\AppData\Roaming\Brother
2015-01-03 13:04 - 2015-01-03 14:49 - 00000000 ____D () C:\Users\fleaf_000\Documents\Swimming Official
2015-01-01 21:44 - 2015-01-01 21:48 - 00000000 ____D () C:\AdwCleaner
2015-01-01 21:42 - 2015-01-01 21:42 - 02173952 _____ () C:\Users\Vic\Downloads\adwcleaner_4.106.exe
2014-12-31 22:53 - 2014-12-31 22:53 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-12-31 22:50 - 2014-12-31 22:50 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\Nikon
2014-12-31 22:50 - 2014-12-31 22:50 - 00000000 ____D () C:\Users\Vic\AppData\Local\Nikon
2014-12-31 22:28 - 2014-12-31 22:28 - 00000000 ____D () C:\ProgramData\Nikon
2014-12-31 21:22 - 2014-12-31 21:22 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-12-31 21:22 - 2014-12-31 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Message Center 2
2014-12-31 21:21 - 2014-12-31 21:21 - 00000268 ___RH () C:\Users\Vic\AppData\Roaming\Plug-In Settings
2014-12-31 21:21 - 2014-12-31 21:21 - 00000000 ____D () C:\ProgramData\Internet Services
2014-12-31 21:20 - 2014-12-31 21:22 - 00000000 ____D () C:\Users\Vic\AppData\Local\Downloaded Installations
2014-12-31 21:20 - 2014-12-31 21:22 - 00000000 ____D () C:\Program Files\Common Files\Nikon
2014-12-31 21:20 - 2014-12-31 21:22 - 00000000 ____D () C:\Program Files (x86)\Nikon
2014-12-31 21:20 - 2014-12-31 21:20 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ATL71.DLL
2014-12-31 21:20 - 2014-12-31 21:20 - 00002069 _____ () C:\Users\Public\Desktop\ViewNX 2.lnk
2014-12-31 21:20 - 2014-12-31 21:20 - 00000268 ___RH () C:\Users\Vic\AppData\Roaming\Plug-Ins
2014-12-31 21:20 - 2014-12-31 21:20 - 00000268 ___RH () C:\Users\Vic\AppData\Roaming\Plants
2014-12-31 21:20 - 2014-12-31 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX 2
2014-12-31 21:20 - 2014-12-31 21:20 - 00000000 ____D () C:\ProgramData\Keyboard Layouts
2014-12-31 21:20 - 2014-12-31 21:20 - 00000000 ____D () C:\ProgramData\Image Units
2014-12-31 21:20 - 2014-12-31 21:20 - 00000000 ____D () C:\Program Files\Nikon
2014-12-31 21:19 - 2014-12-31 21:21 - 00000000 ____D () C:\ProgramData\Ultima_T15
2014-12-31 21:19 - 2014-12-31 21:21 - 00000000 ____D () C:\ProgramData\EnterNHelp
2014-12-31 21:19 - 2014-12-31 21:19 - 00000000 ____D () C:\ProgramData\Sci-Fi
2014-12-31 21:09 - 2014-12-31 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon
2014-12-31 18:34 - 2014-12-31 18:38 - 00000000 ____D () C:\Users\pjsqu_000\Downloads\Your bleep left on USB Stick
2014-12-31 18:21 - 2014-12-31 18:21 - 00003744 _____ () C:\Users\Toby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Toby's Notebook.lnk
2014-12-31 18:21 - 2014-12-31 18:21 - 00003491 _____ () C:\Users\Toby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF.lnk
2014-12-30 22:40 - 2015-01-08 19:35 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-30 22:40 - 2014-12-30 22:40 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-30 22:40 - 2014-12-30 22:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-30 22:40 - 2014-12-30 22:40 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-30 22:40 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-30 22:40 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-30 22:40 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-30 22:38 - 2014-12-30 22:39 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Vic\Downloads\mbam-setup-2.0.4.1028.exe
2014-12-30 22:28 - 2014-12-30 22:28 - 00000000 ____D () C:\Users\Vic\Downloads\backups
2014-12-30 22:26 - 2014-12-30 22:26 - 00388608 _____ (Trend Micro Inc.) C:\Users\Vic\Downloads\HijackThis.exe
2014-12-30 21:38 - 2014-12-30 21:52 - 00000000 ____D () C:\Users\pjsqu_000\Downloads\backups
2014-12-30 21:22 - 2014-12-30 21:51 - 00007456 _____ () C:\Users\pjsqu_000\Downloads\hijackthis.log
2014-12-30 21:21 - 2014-12-30 21:21 - 00388608 _____ (Trend Micro Inc.) C:\Users\pjsqu_000\Downloads\HijackThis.exe
2014-12-30 21:13 - 2014-12-30 21:13 - 00000000 _____ () C:\autoexec.bat
2014-12-30 21:11 - 2014-12-30 21:11 - 02998656 _____ (Enigma Software Group USA, LLC.) C:\Users\pjsqu_000\Downloads\SpyHunter-Installer.exe
2014-12-26 21:04 - 2014-12-26 21:04 - 00000000 ____D () C:\Users\pjsqu_000\AppData\Roaming\ControlCenter4
2014-12-25 18:10 - 2014-12-25 18:10 - 00000000 ____D () C:\Users\Toby\AppData\Roaming\ControlCenter4
2014-12-24 08:49 - 2014-12-24 08:49 - 02033664 _____ () C:\Users\Vic\Documents\PEGGY.pub
2014-12-24 08:34 - 2014-12-24 08:34 - 00095744 _____ () C:\Users\Vic\Documents\toby.pub
2014-12-22 08:00 - 2014-12-22 08:00 - 00000000 ____D () C:\Users\fleaf_000\AppData\Roaming\ControlCenter4
2014-12-21 20:59 - 2014-12-21 20:59 - 00000000 ___RD () C:\Users\Vic\AppData\Roaming\Brother
2014-12-21 20:50 - 2014-12-21 20:50 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\FLEXnet
2014-12-21 20:50 - 2014-12-21 20:50 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\ControlCenter4
2014-12-21 20:38 - 2014-12-21 20:38 - 00002160 _____ () C:\Users\Public\Desktop\Brother Creative Center.lnk
2014-12-21 20:38 - 2014-12-21 20:38 - 00002075 _____ () C:\Users\Public\Desktop\Brother Utilities.lnk
2014-12-21 20:38 - 2014-12-21 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2014-12-21 20:38 - 2014-12-21 20:38 - 00000000 ____D () C:\ProgramData\ControlCenter4
2014-12-21 20:38 - 2014-12-21 20:38 - 00000000 ____D () C:\Program Files (x86)\Browny02
2014-12-21 20:38 - 2014-12-21 20:38 - 00000000 ____D () C:\Brother
2014-12-21 20:37 - 2014-12-21 20:38 - 00000000 ____D () C:\Program Files (x86)\ControlCenter4
2014-12-21 20:37 - 2014-12-21 20:38 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-12-21 20:37 - 2013-07-12 14:03 - 00214016 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll
2014-12-21 20:37 - 2013-07-12 13:03 - 00251392 ____R (brother) C:\Windows\system32\NSSRH64.dll
2014-12-21 20:37 - 2013-07-03 10:46 - 00065024 ____R (Brother Industries,Ltd) C:\Windows\system32\Brnsplg.dll
2014-12-21 20:37 - 2013-03-12 20:50 - 01442304 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWi213b.dll
2014-12-21 20:37 - 2013-03-08 14:45 - 00059904 ____R (Brother Industries,Ltd.) C:\Windows\system32\BrWiaNCp.dll
2014-12-21 20:37 - 2013-03-08 14:44 - 00087040 ____R (Brother Industries, Ltd.) C:\Windows\system32\BrNetSti.dll
2014-12-21 20:37 - 2012-12-03 13:39 - 00002560 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2014-12-21 20:37 - 2011-09-08 17:36 - 00279040 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrJDec.dll
2014-12-21 20:37 - 2010-03-15 19:45 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2014-12-21 20:37 - 2007-12-13 22:16 - 00005120 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2014-12-21 20:37 - 2005-04-22 12:36 - 00143360 ____R () C:\Windows\system32\BrSNMP64.dll
2014-12-21 20:36 - 2014-12-31 21:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-21 20:35 - 2014-12-21 20:35 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\InstallShield
2014-12-21 20:21 - 2014-12-21 20:21 - 00001886 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Software Updates.lnk
2014-12-21 20:21 - 2014-12-21 20:21 - 00000000 ____D () C:\Users\Vic\Documents\MyWebPages
2014-12-21 20:20 - 2014-12-21 20:20 - 00000158 _____ () C:\Windows\SysWOW64\pp.log
2014-12-21 20:11 - 2014-12-21 20:11 - 00000000 ____D () C:\Program Files\Nuance
2014-12-21 20:10 - 2014-12-29 22:07 - 00000000 ____D () C:\Program Files (x86)\Nuance
2014-12-21 20:10 - 2014-12-29 22:06 - 00000000 ____D () C:\ProgramData\Nuance
2014-12-21 20:10 - 2014-12-29 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 12
2014-12-21 20:10 - 2014-12-21 20:21 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-12-21 20:10 - 2014-12-21 20:10 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\Nuance
2014-12-21 20:10 - 2014-12-21 20:10 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-12-21 20:07 - 2014-12-21 20:07 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-12-21 20:06 - 2014-12-21 20:18 - 00000000 ____D () C:\ProgramData\Brother
2014-12-21 16:53 - 2014-12-21 16:53 - 00000000 __SHD () C:\Users\pjsqu_000\AppData\Local\EmieUserList
2014-12-21 16:53 - 2014-12-21 16:53 - 00000000 __SHD () C:\Users\pjsqu_000\AppData\Local\EmieSiteList
2014-12-21 16:53 - 2014-12-21 16:53 - 00000000 __SHD () C:\Users\pjsqu_000\AppData\Local\EmieBrowserModeList
2014-12-21 15:15 - 2014-12-21 15:22 - 00000000 ____D () C:\Users\pjsqu_000\Documents\Peggy's Phone Stuff
2014-12-20 21:52 - 2014-12-20 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-20 21:49 - 2014-12-20 21:50 - 05317104 _____ (Piriform Ltd) C:\Users\Vic\Downloads\ccsetup501.exe
2014-12-18 21:05 - 2015-01-06 16:44 - 00000000 ____D () C:\Users\fleaf_000\Documents\Fiona's stuff
2014-12-17 16:49 - 2014-12-17 16:49 - 11602234 _____ () C:\Users\Toby\Downloads\CaptainAmerica.themepack
2014-12-17 16:41 - 2014-12-17 16:43 - 00027648 ___SH () C:\Users\Toby\Downloads\Thumbs.db
2014-12-17 16:36 - 2014-12-17 16:37 - 16337314 _____ () C:\Users\Toby\Downloads\SummerBloomsRebeccaHeigel.themepack
2014-12-15 21:04 - 2014-12-15 21:09 - 00007662 _____ () C:\Users\Vic\AppData\Local\resmon.resmoncfg
2014-12-15 06:19 - 2014-10-31 06:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-12-15 06:19 - 2014-10-31 06:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-14 13:19 - 2014-12-14 13:19 - 06438368 _____ (WinSoftMagic Inc. ) C:\Users\Vic\Downloads\ajpegcompr(1).exe
2014-12-14 13:16 - 2014-12-14 13:16 - 00230768 _____ () C:\Users\Vic\Downloads\ajpegcompr (1).exe
2014-12-14 13:15 - 2014-12-14 13:15 - 00230768 _____ () C:\Users\Vic\Downloads\ajpegcompr.exe
2014-12-14 11:18 - 2014-11-15 14:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-12-14 11:18 - 2014-11-14 15:10 - 03558400 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-12-14 11:18 - 2014-11-14 14:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-12-14 11:18 - 2014-11-11 08:39 - 22290560 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-12-14 11:18 - 2014-11-11 08:17 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-12-14 11:18 - 2014-11-11 02:06 - 00473408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-12-14 11:18 - 2014-11-08 18:42 - 01390928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2014-12-14 11:18 - 2014-11-08 18:23 - 01127976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2014-12-14 11:18 - 2014-11-08 11:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
2014-12-14 11:18 - 2014-11-08 09:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-12-14 11:18 - 2014-11-08 09:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-12-14 11:18 - 2014-10-31 08:51 - 18823168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-12-14 11:18 - 2014-10-31 08:10 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-12-14 11:18 - 2014-10-30 13:55 - 07473472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-12-14 11:17 - 2014-11-18 04:17 - 00672984 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-12-14 11:17 - 2014-11-18 04:17 - 00273240 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-12-14 11:17 - 2014-11-16 03:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-12-14 11:17 - 2014-11-14 22:36 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-12-14 11:17 - 2014-11-14 14:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll
2014-12-14 11:17 - 2014-11-14 14:58 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-12-14 11:17 - 2014-11-14 14:57 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-12-14 11:17 - 2014-11-14 14:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2014-12-14 11:17 - 2014-11-14 14:54 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-12-14 11:17 - 2014-11-14 14:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-12-14 11:17 - 2014-11-14 14:53 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-12-14 11:17 - 2014-11-14 14:52 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-12-14 11:17 - 2014-11-14 14:46 - 02171904 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-12-14 11:17 - 2014-11-14 14:46 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-12-14 11:17 - 2014-11-14 14:39 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-12-14 11:17 - 2014-11-14 13:04 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-12-14 11:17 - 2014-11-14 13:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-12-14 11:17 - 2014-11-14 13:03 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-12-14 11:17 - 2014-11-14 13:01 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-12-14 11:17 - 2014-11-14 13:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-12-14 11:17 - 2014-11-14 12:53 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-12-14 11:17 - 2014-11-11 02:06 - 02485056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-12-14 11:17 - 2014-11-11 02:06 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-12-14 11:17 - 2014-11-11 02:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-12-14 11:17 - 2014-11-10 10:57 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2014-12-14 11:17 - 2014-11-10 09:37 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-12-14 11:17 - 2014-11-10 09:34 - 01084416 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-12-14 11:17 - 2014-11-10 09:26 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-12-14 11:17 - 2014-11-10 09:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2014-12-14 11:17 - 2014-11-10 09:09 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-12-14 11:17 - 2014-11-10 09:08 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2014-12-14 11:17 - 2014-11-10 09:06 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-12-14 11:17 - 2014-11-10 08:57 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2014-12-14 11:17 - 2014-11-10 08:57 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-12-14 11:17 - 2014-11-08 12:00 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2014-12-14 11:17 - 2014-11-08 12:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2014-12-14 11:17 - 2014-11-08 11:58 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2014-12-14 11:17 - 2014-11-08 11:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2014-12-14 11:17 - 2014-11-08 11:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2014-12-14 11:17 - 2014-11-08 11:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2014-12-14 11:17 - 2014-11-08 11:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2014-12-14 11:17 - 2014-11-08 11:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2014-12-14 11:17 - 2014-11-08 11:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2014-12-14 11:17 - 2014-11-08 11:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2014-12-14 11:17 - 2014-11-08 10:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2014-12-14 11:17 - 2014-11-08 10:38 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-12-14 11:17 - 2014-11-08 10:17 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-12-14 11:17 - 2014-11-08 10:09 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2014-12-14 11:17 - 2014-11-08 10:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-12-14 11:17 - 2014-11-08 09:59 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2014-12-14 11:17 - 2014-11-07 11:58 - 00952896 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-12-14 11:17 - 2014-11-07 11:20 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-12-14 11:17 - 2014-11-05 10:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2014-12-14 11:17 - 2014-11-05 10:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2014-12-14 11:17 - 2014-11-05 10:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2014-12-14 11:17 - 2014-11-05 09:44 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-12-14 11:17 - 2014-11-05 09:43 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-12-14 11:17 - 2014-11-05 09:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-12-14 11:17 - 2014-11-05 09:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
2014-12-14 11:17 - 2014-11-05 09:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
2014-12-14 11:17 - 2014-11-05 09:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2014-12-14 11:17 - 2014-11-05 09:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2014-12-14 11:17 - 2014-11-05 09:20 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-12-14 11:17 - 2014-11-05 09:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2014-12-14 11:17 - 2014-11-05 09:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-12-14 11:17 - 2014-11-05 09:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2014-12-14 11:17 - 2014-11-05 03:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2014-12-14 11:17 - 2014-11-05 03:25 - 00059712 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2014-12-14 11:17 - 2014-11-05 03:25 - 00051008 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2014-12-14 11:17 - 2014-11-04 14:55 - 00026112 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2014-12-14 11:17 - 2014-11-04 14:54 - 00108544 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2014-12-14 11:17 - 2014-11-04 14:54 - 00032256 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2014-12-14 11:17 - 2014-11-04 14:54 - 00030208 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2014-12-14 11:17 - 2014-11-04 14:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2014-12-14 11:17 - 2014-11-04 13:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-12-14 11:17 - 2014-10-31 07:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-14 11:17 - 2014-10-31 07:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-12-14 11:17 - 2014-10-30 13:47 - 01499384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-12-14 11:17 - 2014-10-30 13:41 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-12-14 11:17 - 2014-10-29 11:05 - 00551232 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2014-12-14 11:17 - 2014-10-29 10:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-12-14 11:17 - 2014-10-29 10:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-12-14 11:17 - 2014-10-29 09:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-12-14 11:17 - 2014-10-29 09:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2014-12-14 11:17 - 2014-10-29 09:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-12-14 11:17 - 2014-10-29 09:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-12-14 11:17 - 2014-10-29 09:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-12-14 11:17 - 2014-10-29 09:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2014-12-14 11:17 - 2014-10-29 09:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-12-14 11:17 - 2014-10-29 09:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-12-14 11:17 - 2014-10-27 06:10 - 00390841 _____ () C:\Windows\system32\ApnDatabase.xml
2014-12-14 11:17 - 2014-10-21 09:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\eventcls.dll
2014-12-14 11:17 - 2014-10-21 09:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll
2014-12-14 11:17 - 2014-10-21 08:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2014-12-14 11:17 - 2014-10-21 08:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2014-12-14 11:17 - 2014-10-21 08:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2014-12-14 11:17 - 2014-10-21 08:30 - 01454080 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-12-14 11:17 - 2014-10-21 08:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2014-12-14 11:17 - 2014-10-17 12:56 - 00238912 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-12-14 11:17 - 2014-10-17 12:56 - 00153920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-12-14 11:17 - 2014-10-17 12:56 - 00039744 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-12-14 11:17 - 2014-10-17 11:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-12-13 16:11 - 2014-12-13 16:11 - 00000000 __SHD () C:\Users\Vic\AppData\Local\EmieUserList
2014-12-13 16:11 - 2014-12-13 16:11 - 00000000 __SHD () C:\Users\Vic\AppData\Local\EmieSiteList
2014-12-13 16:11 - 2014-12-13 16:11 - 00000000 __SHD () C:\Users\Vic\AppData\Local\EmieBrowserModeList
2014-12-11 21:20 - 2014-12-11 21:23 - 03774975 _____ () C:\Users\Vic\Downloads\Detailed Player Statistics 260914 (BayUnion - Hale).xlsx
2014-12-11 16:38 - 2014-12-11 16:38 - 01080608 _____ (Unity Technologies ApS) C:\Users\Vic\Downloads\UnityWebPlayer (1).exe
2014-12-11 16:38 - 2014-12-11 16:38 - 00000000 ____D () C:\Users\Vic\AppData\Local\Unity
2014-12-11 16:36 - 2014-12-11 16:36 - 01080608 _____ (Unity Technologies ApS) C:\Users\Vic\Downloads\UnityWebPlayer.exe
2014-12-10 13:05 - 2014-11-10 10:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-10 13:05 - 2014-11-10 09:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-10 12:54 - 2014-11-22 11:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 12:54 - 2014-11-22 10:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 12:54 - 2014-11-22 10:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 12:54 - 2014-11-22 10:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-10 12:54 - 2014-11-22 10:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 12:54 - 2014-11-22 10:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-10 12:54 - 2014-11-22 10:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 12:54 - 2014-11-22 10:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 12:54 - 2014-11-22 10:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 12:54 - 2014-11-22 10:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 12:54 - 2014-11-22 10:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-12-10 12:54 - 2014-11-22 10:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-10 12:54 - 2014-11-22 10:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 12:54 - 2014-11-22 10:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 12:54 - 2014-11-22 10:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 12:54 - 2014-11-22 09:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-12-10 12:54 - 2014-11-22 09:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-12-10 12:54 - 2014-11-22 09:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-12-10 12:54 - 2014-11-22 09:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 12:54 - 2014-11-22 09:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 12:54 - 2014-11-22 09:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 12:54 - 2014-11-22 09:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 12:54 - 2014-11-22 09:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 12:54 - 2014-11-22 09:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 12:54 - 2014-11-22 09:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-12-10 12:54 - 2014-11-22 09:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 12:54 - 2014-11-22 09:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 12:54 - 2014-11-22 09:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-12-10 12:54 - 2014-11-22 09:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 12:54 - 2014-11-22 09:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-12-10 12:54 - 2014-11-22 09:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 12:54 - 2014-11-22 09:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 12:54 - 2014-11-22 09:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 12:54 - 2014-11-22 09:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 12:54 - 2014-11-22 09:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 12:54 - 2014-11-22 09:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 12:54 - 2014-11-22 09:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 12:54 - 2014-11-22 08:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 12:54 - 2014-11-22 08:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 12:54 - 2014-11-07 12:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 12:54 - 2014-11-07 11:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-01-08 19:40 - 2014-09-29 04:02 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2151387201-1383573627-3921742935-1001
2015-01-08 19:35 - 2014-12-07 22:50 - 00000000 ____D () C:\Users\Vic\Documents\Outlook Files
2015-01-08 19:35 - 2014-12-04 22:02 - 00004950 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for VICS-Vic Vics
2015-01-08 19:35 - 2014-09-29 03:57 - 00000000 ___DO () C:\Users\Vic\SkyDrive
2015-01-08 19:35 - 2014-09-28 11:11 - 00000912 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-08 19:34 - 2014-11-08 20:58 - 00000000 ____D () C:\Users\fleaf_000
2015-01-08 19:34 - 2014-09-29 19:20 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-08 19:26 - 2014-09-28 11:11 - 00000916 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-08 18:23 - 2014-11-08 21:09 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2151387201-1383573627-3921742935-1005
2015-01-08 18:00 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-08 17:46 - 2014-12-07 21:31 - 00000000 ____D () C:\Users\fleaf_000\Documents\Outlook Files
2015-01-08 17:43 - 2014-11-08 21:05 - 00000000 ___DO () C:\Users\fleaf_000\OneDrive
2015-01-08 15:18 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-08 13:59 - 2013-08-22 22:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-08 10:22 - 2014-11-08 21:09 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{6400516E-CF31-45F5-9057-64DD00CD1BF1}
2015-01-07 17:19 - 2014-11-08 20:58 - 00000000 ____D () C:\Users\fleaf_000\AppData\Local\Packages
2015-01-07 09:08 - 2013-08-22 21:25 - 00786432 ___SH () C:\Windows\system32\config\BBI
2015-01-07 08:02 - 2014-09-29 03:54 - 00000000 ____D () C:\Users\Vic
2015-01-06 17:44 - 2014-11-08 17:32 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2151387201-1383573627-3921742935-1004
2015-01-06 16:49 - 2014-11-08 17:28 - 00000000 ____D () C:\Users\Toby\OneDrive
2015-01-04 21:01 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\addins
2015-01-04 20:49 - 2014-09-29 04:00 - 00003902 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{8A98630E-A15A-483C-AF71-A9DD85DA8E4C}
2015-01-04 15:29 - 2013-09-30 12:14 - 00863592 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-04 12:32 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\rescache
2015-01-04 09:08 - 2013-08-22 23:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-01-04 09:08 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-01-04 07:46 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-03 19:36 - 2013-08-22 23:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-12-31 20:04 - 2014-12-07 18:32 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2151387201-1383573627-3921742935-1006
2014-12-31 18:33 - 2014-12-07 18:29 - 00000000 ___DO () C:\Users\pjsqu_000\OneDrive
2014-12-30 23:32 - 2014-09-28 11:12 - 00002288 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-30 22:54 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\System
2014-12-30 22:26 - 2014-09-29 03:55 - 00000000 ____D () C:\Users\Vic\AppData\Local\VirtualStore
2014-12-30 21:22 - 2014-12-07 18:26 - 00000000 ____D () C:\Users\pjsqu_000\AppData\Local\VirtualStore
2014-12-30 15:38 - 2014-09-29 03:55 - 00000000 ____D () C:\Users\Vic\AppData\Local\Packages
2014-12-30 15:36 - 2014-12-07 18:26 - 00000000 ____D () C:\Users\pjsqu_000\AppData\Local\Packages
2014-12-30 15:16 - 2014-09-29 03:56 - 00000000 ____D () C:\Users\Vic\AppData\Local\PackageStaging
2014-12-29 21:03 - 2013-08-22 23:36 - 00000000 __RSD () C:\Windows\Media
2014-12-27 22:27 - 2014-09-29 19:20 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-27 22:27 - 2014-09-29 19:11 - 00000000 ____D () C:\Users\Vic\AppData\Local\Adobe
2014-12-27 10:51 - 2014-12-07 20:00 - 00000000 ____D () C:\Users\pjsqu_000\Documents\Outlook Files
2014-12-23 17:02 - 2014-12-04 21:29 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-21 20:49 - 2013-08-22 22:44 - 00482552 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-20 21:52 - 2014-09-28 11:28 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-20 21:51 - 2014-09-28 11:28 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ___RD () C:\Windows\ToastData
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\system32\setup
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-14 11:24 - 2014-09-28 00:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-14 11:21 - 2014-09-28 00:30 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-14 11:17 - 2014-11-12 16:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-12-14 11:17 - 2014-11-12 16:43 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-12-14 11:17 - 2014-11-12 16:43 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-12-14 11:17 - 2014-11-12 16:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2014-12-14 10:51 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-12-10 08:59 - 2014-10-15 20:29 - 00000000 ____D () C:\Users\Toby
2014-12-09 21:36 - 2014-09-29 11:32 - 00000000 ____D () C:\Program Files (x86)\SeaMonkey
2014-12-09 09:34 - 2014-12-07 18:26 - 00000000 ____D () C:\Users\pjsqu_000
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-01-06 17:44


#5 Machiavelli

Machiavelli

    Agent 007


  • Malware Response Instructor
  • 3,904 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:09:09 PM

Posted 08 January 2015 - 10:59 AM

You haven't post the full Addition log. ;) Please repost.

~Machiavelli

If I don't reply within 24 hours please PM me!

  • Every topic with no replies within 5 days will be closed.
  • If you like my help here please give me feedback.

unite_blue.png
 
 


#6 Vsquizz

Vsquizz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 09 January 2015 - 08:09 AM

You haven't post the full Addition log. ;) Please repost.

 

I try again:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015
Ran by Vic at 2015-01-08 19:49:27
Running from C:\Users\Vic\Downloads
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Webroot SecureAnywhere (Enabled - Up to date) {66A6FE14-08CB-F415-3742-517201416109}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Webroot SecureAnywhere (Enabled - Up to date) {DDC71FF0-2EF1-FB9B-0DF2-6A007AC62BB4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
64 Bit HP CIO Components Installer (Version: 17.2.1 - Hewlett-Packard) Hidden
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Brother MFL-Pro Suite HL-L2380DW series (HKLM-x32\...\{F8ECC2FD-CE2B-4ED4-BDCC-90D0D34206FD}) (Version: 0.0.20.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Dot4 (HKLM\...\{3EEDA265-C6F3-4EC1-A317-1C9315DEDDDE}) (Version: 1.0.0.0 - HP)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Office Sounds (HKLM-x32\...\{10CE1EA2-12E9-11D3-825E-00C04F6843FE}) (Version: 1.0.0.0 - Microsoft Corp)
Microsoft OneDrive (HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\OneDriveSetup.exe) (Version: 17.3.1229.0918 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
NextWindow DesktopTouch Driver Package (HKLM\...\{4ED0CEF7-8AD7-45E3-B200-02BD6523ACAB}) (Version: 1.1.004 - NextWindow)
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon)
Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.6.0 - Nikon)
Nuance PaperPort 12 (HKLM-x32\...\{869FCC6C-5669-4B0B-827E-2BBAACD88A87}) (Version: 12.1.0006 - Nuance Communications, Inc.)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0000 - Nuance Communications, Inc.)
Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.4.7 - Nikon)
SeaMonkey 2.31 (x86 en-US) (HKLM-x32\...\SeaMonkey 2.31 (x86 en-US)) (Version: 2.31 - Mozilla)
System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)
Unity Web Player (HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.6.0 - Nikon)
Webroot SecureAnywhere (HKLM-x32\...\WRUNINST) (Version: 8.0.6.28 - Webroot)
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-2151387201-1383573627-3921742935-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Vic\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\FileSyncApi64.dll (Microsoft Corporation)
 
==================== Restore Points  =========================
 
20-12-2014 21:46:09 Removed OpenOffice.org 3.4.1
29-12-2014 14:24:45 Scheduled Checkpoint
30-12-2014 22:05:46 Windows Modules Installer
03-01-2015 19:35:54 Windows Modules Installer
04-01-2015 20:33:53 Removed Windows 7 USB/DVD Download Tool
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2014-12-30 21:13 - 2014-12-30 21:13 - 00000000 ____A C:\Windows\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {0243A7FF-38D9-4EBB-9C12-8026257B5DA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-28] (Google Inc.)
Task: {1C83386B-3CB9-4A74-9FA0-727AE9CAFCEA} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2151387201-1383573627-3921742935-1001 => %localappdata%\Microsoft\SkyDrive\SkyDrive.exe
Task: {48F4DFB1-EC94-42B0-8BE3-FDC47579A631} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-12-14] (Microsoft Corporation)
Task: {685EDDF0-D2DA-403D-8238-31EE0194D464} - System32\Tasks\Microsoft Office 15 Sync Maintenance for VICS-Vic Vics => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-11-04] (Microsoft Corporation)
Task: {7095866A-EDCD-4957-B424-A73118536C68} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)
Task: {C1E7A4ED-501D-4FB6-B432-39FCBCBB899C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-27] (Adobe Systems Incorporated)
Task: {C2CCC1D2-4D11-46A0-91FB-BE26B16495B2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-28] (Google Inc.)
Task: {E86BA3FE-CE63-4BCA-A078-0EBAC9DE89E8} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-11-12] (Microsoft Corporation)
Task: {E9B83271-A27C-47C6-B9C8-93397ABE7E21} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-13] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) =============
 
2014-12-04 21:29 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-12-21 20:37 - 2005-04-22 12:36 - 00143360 ____R () C:\Windows\system32\BrSNMP64.dll
2014-12-04 21:44 - 2014-12-04 21:44 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2013-10-31 10:24 - 2013-10-31 10:24 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-12-21 20:37 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2014-12-04 21:29 - 2014-12-04 21:29 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2014-12-23 16:59 - 2014-11-18 22:26 - 01032360 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\ADDINS\UmOutlookAddin.dll
2014-12-04 21:45 - 2014-12-04 21:45 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
2014-12-04 21:29 - 2014-12-04 21:29 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\AppVIsvStream32.dll
2014-12-10 08:27 - 2014-12-06 09:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
2014-12-10 08:27 - 2014-12-06 09:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
2014-12-10 08:27 - 2014-12-06 09:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
2014-12-10 08:27 - 2014-12-06 09:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
AlternateDataStreams: C:\Users\fleaf_000\OneDrive:ms-properties
AlternateDataStreams: C:\Users\pjsqu_000\OneDrive:ms-properties
AlternateDataStreams: C:\Users\Toby\OneDrive:ms-properties
AlternateDataStreams: C:\Users\Vic\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Vic\Documents\Mainstream invoice.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Vic\Documents\Mainstream invoice.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Vic\Documents\Rego Form.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Vic\Documents\Rego Form.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Vic\Documents\Swimming WA.tiff:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Vic\Documents\Swimming WA.tiff:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"
 
==================== EXE Association (whitelisted) =============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-19\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-19\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-20\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-20\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\Software\Classes\exefile: "%1" %* <===== ATTENTION!
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
(Currently there is no automatic fix for this section.)
 
HKLM\...\StartupApproved\Run32: => "IndexSearch"
HKLM\...\StartupApproved\Run32: => "PaperPort PTD"
HKLM\...\StartupApproved\Run32: => "PDF5 Registry Controller"
HKLM\...\StartupApproved\Run32: => "PDFHook"
HKLM\...\StartupApproved\Run32: => "Nikon Message Center 2"
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_278209370FF94061A837B2120CA1AD3C"
 
========================= Accounts: ==========================
 
Administrator (S-1-5-21-2151387201-1383573627-3921742935-500 - Administrator - Disabled)
fleaf_000 (S-1-5-21-2151387201-1383573627-3921742935-1005 - Limited - Enabled) => C:\Users\fleaf_000
Guest (S-1-5-21-2151387201-1383573627-3921742935-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2151387201-1383573627-3921742935-1008 - Limited - Enabled)
pjsqu_000 (S-1-5-21-2151387201-1383573627-3921742935-1006 - Limited - Enabled) => C:\Users\pjsqu_000
Toby (S-1-5-21-2151387201-1383573627-3921742935-1004 - Limited - Enabled) => C:\Users\Toby
Vic (S-1-5-21-2151387201-1383573627-3921742935-1001 - Administrator - Enabled) => C:\Users\Vic
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (01/08/2015 11:58:05 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/07/2015 09:20:11 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/06/2015 06:36:42 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/06/2015 05:45:45 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/06/2015 10:59:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: plugin-container.exe, version: 34.0.0.5449, time stamp: 0x547eb66c
Faulting module name: mozalloc.dll, version: 34.0.0.5449, time stamp: 0x547eb350
Exception code: 0x80000003
Fault offset: 0x00001425
Faulting process id: 0x14c
Faulting application start time: 0xplugin-container.exe0
Faulting application path: plugin-container.exe1
Faulting module path: plugin-container.exe2
Report Id: plugin-container.exe3
Faulting package full name: plugin-container.exe4
Faulting package-relative application ID: plugin-container.exe5
 
Error: (01/06/2015 10:59:14 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: e7c
 
Start Time: 01d0295b9ccddb88
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe
 
Report Id: 907a9af1-954f-11e4-8285-b4749fc8c4e2
 
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe
 
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
 
Error: (01/05/2015 03:02:27 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/05/2015 02:44:27 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/05/2015 02:21:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
Error: (01/05/2015 02:01:00 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
 
 
System errors:
=============
Error: (01/08/2015 07:40:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The MBAMService service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (01/08/2015 01:59:15 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT AUTHORITY)
Description: The system watchdog timer was triggered.
 
Error: (01/08/2015 01:59:35 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 12:41:27 PM on ‎8/‎01/‎2015 was unexpected.
 
Error: (01/07/2015 09:09:14 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the AudioEndpointBuilder service.
 
Error: (01/07/2015 09:08:44 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NcbService service.
 
Error: (01/07/2015 09:08:14 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WlanSvc service.
 
Error: (01/07/2015 09:07:44 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (01/07/2015 07:54:26 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (01/07/2015 01:22:15 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT AUTHORITY)
Description: The system watchdog timer was triggered.
 
Error: (01/07/2015 01:22:40 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:09:07 AM on ‎7/‎01/‎2015 was unexpected.
 
 
Microsoft Office Sessions:
=========================
Error: (01/08/2015 11:58:05 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/07/2015 09:20:11 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/06/2015 06:36:42 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/06/2015 05:45:45 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/06/2015 10:59:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe34.0.0.5449547eb66cmozalloc.dll34.0.0.5449547eb350800000030000142514c01d0295ca9ff6189C:\Program Files (x86)\SeaMonkey\plugin-container.exeC:\Program Files (x86)\SeaMonkey\mozalloc.dll0740d4a8-9550-11e4-8285-b4749fc8c4e2
 
Error: (01/06/2015 10:59:14 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20689e7c01d0295b9ccddb884294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe907a9af1-954f-11e4-8285-b4749fc8c4e2microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
 
Error: (01/05/2015 03:02:27 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/05/2015 02:44:27 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/05/2015 02:21:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
Error: (01/05/2015 02:01:00 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestc:\program files\CCleaner\CCleaner.exe
 
 
CodeIntegrity Errors:
===================================
  Date: 2015-01-04 09:13:04.256
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:04.115
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:03.974
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:03.803
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:03.599
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:03.318
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2015-01-04 09:13:03.053
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2014-12-26 08:12:09.682
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2014-12-26 08:12:09.542
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
  Date: 2014-12-26 08:11:28.899
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i5-2410M CPU @ 2.30GHz
Percentage of memory in use: 30%
Total physical RAM: 6091.86 MB
Available physical RAM: 4207.77 MB
Total Pagefile: 7115.86 MB
Available Pagefile: 5150.26 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:931.17 GB) (Free:825.18 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 86128EB4)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================


#7 Machiavelli

Machiavelli

    Agent 007


  • Malware Response Instructor
  • 3,904 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:09:09 PM

Posted 09 January 2015 - 08:19 AM

Hey,
please move FRST64.exe to your Desktop. :)

Step 1: Adwarecleaner

Please download AdwCleaner (by Xplode) from the link below and save it to your Desktop:

Download Mirror #1
  • Right-click on AdwCleaner.exe and select Run as administrator. (If you have Windows XP the just run it)
  • Click Scan and let the scan run.
  • When it finishes, click Clean, following the on screen prompts
  • After your computer reboots, a log will open. Please Copy (Ctrl+C) and Paste (Ctrl+V) this into your next post.
Note: The log can also be found in here: C:\AdwCleaner\

Step 2: Malwarebytes

Please download Malwarebytes Anti-Malware to your desktop Install the progamme and select update
Once it has updated select Settings > Detection and Protection
Tick Scan for rootkits

MBAMsettings.JPG

Go back to the Dashboard and select Scan Now

MBAMScan.JPG

If threats are detected, click the Apply Actions button, MBAM will ask for a reboot.

MBAMReboot.JPG

MBAMLog.JPG

On completion of the scan (or after the reboot) select View Detailed Log
Select Export > Select text file and save to the desktop
Attach/Post that log

Step 3: Junkware Removal Tool

thisisujrt.gif  Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
Step 4: FRST Scan
  • Run FRST. (if you have Windows Vista / Windows 7 / Windows 8: Please do a Right click on the FRST icon and select Run as Administrator)
  • Click Scan to start FRST.
  • When FRST finishes scanning, a log, FRST.txt, will open.
  • Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this log into your next post please.

~Machiavelli

If I don't reply within 24 hours please PM me!

  • Every topic with no replies within 5 days will be closed.
  • If you like my help here please give me feedback.

unite_blue.png
 
 


#8 Vsquizz

Vsquizz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 09 January 2015 - 09:30 AM

# AdwCleaner v4.107 - Report created 09/01/2015 at 22:22:07
# Updated 07/01/2015 by Xplode
# Database : 2015-01-03.1 [Live]
# Operating System : Windows 8.1 Pro  (64 bits)
# Username : Vic - VICS
# Running from : C:\Users\Vic\Desktop\AdwCleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh
 
***** [ Scheduled Tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17416
 
 
-\\ Google Chrome v39.0.2171.95
 
 
*************************
 
AdwCleaner[R0].txt - [1391 octets] - [01/01/2015 21:44:12]
AdwCleaner[R1].txt - [954 octets] - [09/01/2015 22:20:16]
AdwCleaner[S0].txt - [1381 octets] - [01/01/2015 21:48:59]
AdwCleaner[S1].txt - [878 octets] - [09/01/2015 22:22:07]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [937 octets] ##########


#9 Vsquizz

Vsquizz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 09 January 2015 - 09:48 AM

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 9/01/2015
Scan Time: 10:31:56 PM
Logfile: MAMW.txt
Administrator: Yes
 
Version: 2.00.4.1028
Malware Database: v2015.01.09.09
Rootkit Database: v2015.01.07.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
 
OS: Windows 8.1
CPU: x64
File System: NTFS
User: Vic
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 446968
Time Elapsed: 11 min, 14 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 0
(No malicious items detected)
 
Registry Values: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Folders: 3
PUP.Optional.SecurityProtection.A, C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh, Quarantined, [b5e38371cbbe290d1c097de545bede22], 
PUP.Optional.SecurityProtection.A, C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh\1.2.4_0, Quarantined, [b5e38371cbbe290d1c097de545bede22], 
PUP.Optional.SecurityProtection.A, C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh\1.2.4_0\_metadata, Quarantined, [b5e38371cbbe290d1c097de545bede22], 
 
Files: 1
PUP.Optional.SecurityProtection.A, C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh\1.2.4_0\_metadata\verified_contents.json, Quarantined, [b5e38371cbbe290d1c097de545bede22], 
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)


#10 Vsquizz

Vsquizz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 09 January 2015 - 09:54 AM

Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 8.1 Pro x64
Ran by Vic on Fri 09/01/2015 at 22:49:09.48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Fri 09/01/2015 at 22:52:18.63
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


#11 Vsquizz

Vsquizz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 09 January 2015 - 09:59 AM

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Vic (administrator) on VICS on 09-01-2015 22:56:16
Running from C:\Users\Vic\Downloads
Loaded Profile: Vic (Available profiles: Vic & Toby & fleaf_000 & pjsqu_000)
Platform: Windows 8.1 Pro (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Seamonkey)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Webroot) C:\Program Files\Webroot\WRSA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Webroot) C:\Program Files\Webroot\WRSA.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46952 2011-08-02] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [30568 2011-08-02] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2014-01-27] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792 2013-12-19] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKLM-x32\...\Run: [WRSVC] => C:\Program Files\Webroot\WRSA.exe [773256 2015-01-09] (Webroot)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKLM\...\Policies\Explorer: [NoShellSearchButton] 0
HKLM\...\Policies\Explorer: [NoFind] 0
HKLM\...\Policies\Explorer: [NoFile] 0
HKLM\...\Policies\Explorer: [HideClock] 0
HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0
HKLM\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKLM\...\Policies\Explorer: [NoSetFolders] 0
HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKLM\...\Policies\Explorer: [NoSetTaskbar] 0
HKLM\...\Policies\Explorer: [NoDeletePrinter] 0
HKLM\...\Policies\Explorer: [NoDFSTab] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [NoLogoff] 0
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0
HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0
HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [NoHardwareTab] 0
HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKLM\...\Policies\Explorer: [NoDesktop] 0
HKU\S-1-5-19\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-19\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-19\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-20\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-20\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-20\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-13] (Piriform Ltd)
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Run: [GoogleChromeAutoLaunch_278209370FF94061A837B2120CA1AD3C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-2151387201-1383573627-3921742935-1001\...\MountPoints2: {1b015d0d-3e3d-11e4-824f-806e6f6e6963} - "E:\Welcome.exe" 
HKU\S-1-5-18\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-18\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-18\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoStartMenuSubFolders] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install Webroot FF RunOnce.lnk
ShortcutTarget: Install Webroot FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (No File)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install Webroot IE RunOnce.lnk
ShortcutTarget: Install Webroot IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (No File)
ShellIconOverlayIdentifiers: [ ] -> {1914B27A-33C8-46F8-A1C2-F993268D4564} => C:\Windows\system32\WRusr.dll (Webroot)
ShellIconOverlayIdentifiers: [  ] -> {C14874EA-ACE4-4A47-8A81-18C4D1C40868} => C:\Windows\system32\WRusr.dll (Webroot)
ShellIconOverlayIdentifiers: [   ] -> {6DA1ED92-315E-4D0B-B354-9D5F519DBA95} => C:\Windows\system32\WRusr.dll (Webroot)
ShellIconOverlayIdentifiers: [    ] -> {8D7FC74C-E409-42DF-8EEE-69D45FAE2F30} => C:\Windows\system32\WRusr.dll (Webroot)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar64.dll (Webroot)
BHO: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files\Webroot\WRData\PKG\Vistax64\wrflt.dll (Webroot)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar.dll (Webroot)
BHO-x32: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files\Webroot\WRData\PKG\Vistax86\wrflt.dll (Webroot)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar64.dll (Webroot)
Toolbar: HKLM-x32 - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar.dll (Webroot)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2151387201-1383573627-3921742935-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Vic\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://www.news.com.au/sport
CHR StartupUrls: Default -> "https://www.google.com.au/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-28]
CHR Extension: (Google Docs) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-28]
CHR Extension: (Google Drive) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-28]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-28]
CHR Extension: (YouTube) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-28]
CHR Extension: (Adblock Plus) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-01]
CHR Extension: (Google Search) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-28]
CHR Extension: (Google Sheets) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-28]
CHR Extension: (Google Maps) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2014-09-28]
CHR Extension: (Google Wallet) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-28]
CHR Extension: (Security Protection) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh [2015-01-09]
CHR Extension: (Webroot Password Manager) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\okfhiodnpcnnnpgbjbhfebjnbagmfhab [2015-01-04]
CHR Extension: (Outlook.com) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge [2014-09-28]
CHR Extension: (Gmail) - C:\Users\Vic\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-28]
CHR HKLM-x32\...\Chrome\Extension: [kjeghcllfecehndceplomkocgfbklffd] - C:\ProgramData\WRData\PKG\CHROME\CHROME_1.0.2.42.crx [2015-01-04]
CHR HKLM-x32\...\Chrome\Extension: [okfhiodnpcnnnpgbjbhfebjnbagmfhab] - C:\ProgramData\WRData\pkg\lpchrome.crx [2015-01-04]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2014-04-28] (Hewlett-Packard) [File not signed]
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2014-04-28] (Hewlett-Packard) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 WRSVC; C:\Program Files\Webroot\WRSA.exe [773256 2015-01-09] (Webroot)
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 athr; C:\Windows\system32\DRIVERS\athwnx.sys [3680256 2013-06-18] (Qualcomm Atheros Communications, Inc.)
R3 CXPOLARIS; C:\Windows\system32\drivers\cxRDU253S.sys [477824 2012-08-21] (Conexant Systems, Inc.)
R3 DFKBfilter; C:\Windows\system32\drivers\DFKBfilter.sys [24712 2010-06-24] (Darfon Electronics Corp.)
R3 DFMousefilter; C:\Windows\system32\drivers\DFMousefilter.sys [24200 2010-06-24] (Darfon Electronics Corp.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [146856 2013-06-04] (Windows ® Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2013-06-04] (Windows ® Win 7 DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-09] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 nuvotonir; C:\Windows\system32\DRIVERS\nuvotonir.sys [68096 2013-06-17] (Nuvoton Technology Corporation)
R3 NWVoltron; C:\Windows\System32\drivers\NWVoltron.sys [28440 2011-03-08] ()
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [33168 2013-11-01] (Windows ® Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R0 WRkrn; C:\Windows\System32\drivers\WRkrn.sys [115680 2015-01-09] (Webroot)
U0 SR; No ImagePath
U2 srservice; No ImagePath
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-01-09 22:52 - 2015-01-09 22:52 - 00000624 _____ () C:\Users\Vic\Desktop\JRT.txt
2015-01-09 22:46 - 2015-01-09 22:46 - 01707939 _____ (Thisisu) C:\Users\Vic\Desktop\JRT.exe
2015-01-09 22:45 - 2015-01-09 22:45 - 00001806 _____ () C:\Users\Vic\Desktop\MAMW.txt
2015-01-09 22:19 - 2015-01-09 22:19 - 02191360 _____ () C:\Users\Vic\Desktop\AdwCleaner.exe
2015-01-09 12:21 - 2015-01-09 12:21 - 00001446 _____ () C:\Users\pjsqu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-08 19:41 - 2015-01-09 22:56 - 00025510 _____ () C:\Users\Vic\Downloads\FRST.txt
2015-01-08 19:41 - 2015-01-09 22:56 - 00000000 ____D () C:\FRST
2015-01-08 19:41 - 2015-01-08 19:49 - 00033795 _____ () C:\Users\Vic\Downloads\Addition.txt
2015-01-08 19:36 - 2015-01-08 19:36 - 02124288 _____ (Farbar) C:\Users\Vic\Downloads\FRST64.exe
2015-01-08 19:36 - 2015-01-08 19:36 - 00001134 _____ () C:\Users\Vic\Desktop\FRST64.exe - Shortcut.lnk
2015-01-06 16:38 - 2015-01-06 16:38 - 00000000 _____ () C:\Users\Vic\Sti_Trace.log
2015-01-05 13:09 - 2015-01-05 13:09 - 00001446 _____ () C:\Users\Toby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-04 21:12 - 2015-01-04 21:15 - 00008528 _____ () C:\Users\Vic\Downloads\hijackthis.log
2015-01-04 21:01 - 2015-01-09 22:23 - 00002928 _____ () C:\Windows\PFRO.log
2015-01-04 20:34 - 2015-01-04 20:34 - 00000000 ____D () C:\Windows\system32\appmgmt
2015-01-04 20:15 - 2015-01-04 20:15 - 00000000 ____D () C:\Users\Vic\AppData\Local\lptmp1639552134
2015-01-04 20:14 - 2015-01-09 19:12 - 00000000 ____D () C:\ProgramData\WRData
2015-01-04 20:14 - 2015-01-09 18:18 - 00154760 _____ (Webroot) C:\Windows\SysWOW64\WRusr.dll
2015-01-04 20:14 - 2015-01-09 18:18 - 00115680 _____ (Webroot) C:\Windows\system32\Drivers\WRkrn.sys
2015-01-04 20:14 - 2015-01-09 18:18 - 00105320 _____ (Webroot) C:\Windows\system32\WRusr.dll
2015-01-04 20:14 - 2015-01-04 20:14 - 00773256 _____ (Webroot) C:\Users\Vic\Downloads\wsainstall.exe
2015-01-04 20:14 - 2015-01-04 20:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webroot SecureAnywhere
2015-01-04 20:14 - 2015-01-04 20:14 - 00000000 ____D () C:\Program Files\Webroot
2015-01-04 18:50 - 2015-01-04 18:50 - 00010370 _____ () C:\Users\fleaf_000\Documents\Job Roster.xlsx
2015-01-04 16:53 - 2015-01-04 16:53 - 04650440 _____ () C:\Users\Vic\Downloads\tc00091500e.exe
2015-01-04 16:50 - 2015-01-04 16:52 - 80433832 _____ () C:\Users\Vic\Downloads\tc00201800s.exe
2015-01-04 16:48 - 2015-01-04 16:49 - 40099240 _____ () C:\Users\Vic\Downloads\tc50066400h (1).exe
2015-01-04 16:48 - 2015-01-04 16:48 - 08566720 _____ () C:\Users\Vic\Downloads\tc50067200e (1).exe
2015-01-04 15:52 - 2015-01-04 15:52 - 16761176 _____ () C:\Users\Vic\Downloads\tc00275200a.exe
2015-01-04 15:49 - 2015-01-04 15:50 - 32625360 _____ () C:\Users\Vic\Downloads\tc50067700g.exe
2015-01-04 15:49 - 2015-01-04 15:49 - 05200416 _____ () C:\Users\Vic\Downloads\tc50067000d.exe
2015-01-04 15:48 - 2015-01-04 15:49 - 12516712 _____ () C:\Users\Vic\Downloads\tc50066800d.exe
2015-01-04 15:47 - 2015-01-04 15:47 - 27951464 _____ () C:\Users\Vic\Downloads\tc00384500f.exe
2015-01-04 15:46 - 2015-01-04 15:47 - 07023472 _____ () C:\Users\Vic\Downloads\tc50067500e.exe
2015-01-04 15:43 - 2015-01-04 15:44 - 35784568 _____ () C:\Users\Vic\Downloads\7_64_intel_display_driver_8.15.10.2086.exe
2015-01-04 15:39 - 2015-01-04 15:41 - 47774096 _____ () C:\Users\Vic\Downloads\tc00163700z.exe
2015-01-04 15:39 - 2015-01-04 15:40 - 09751800 _____ () C:\Users\Vic\Downloads\tc50066500d.exe
2015-01-04 15:39 - 2015-01-04 15:39 - 04792256 _____ () C:\Users\Vic\Downloads\tc50066600e.exe
2015-01-04 15:36 - 2015-01-04 15:36 - 02698960 _____ (Igor Pavlov) C:\Users\Vic\Downloads\sl630_sl650_bios_w240.exe
2015-01-04 15:34 - 2015-01-04 15:35 - 40099240 _____ () C:\Users\Vic\Downloads\tc50066400h.exe
2015-01-04 15:33 - 2015-01-04 15:33 - 08566720 _____ () C:\Users\Vic\Downloads\tc50067200e.exe
2015-01-04 10:10 - 2015-01-04 10:10 - 00001446 _____ () C:\Users\fleaf_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-04 09:08 - 2015-01-09 22:45 - 01319952 _____ () C:\Windows\WindowsUpdate.log
2015-01-04 09:08 - 2015-01-04 09:12 - 00000400 __RSH () C:\ProgramData\ntuser.pol
2015-01-04 09:08 - 2015-01-04 09:08 - 00640424 _____ (Akeo Consulting (http://akeo.ie)) C:\Users\Vic\Downloads\rufus-1.4.12.exe
2015-01-04 07:58 - 2015-01-04 08:39 - 3275751424 _____ () C:\Users\Vic\Downloads\X17-24209.iso
2015-01-04 07:34 - 2015-01-04 07:34 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\PowerISO
2015-01-04 07:23 - 2015-01-04 07:23 - 00213631 _____ () C:\Users\Vic\Downloads\TomsDownloader4B7376.exe
2015-01-04 07:18 - 2015-01-04 07:18 - 00213546 _____ () C:\Users\Vic\Downloads\TomsDownloader5B14923.exe
2015-01-03 21:45 - 2015-01-03 23:47 - 3275161600 _____ () C:\Users\Vic\Downloads\X17-24209a.iso
2015-01-03 19:40 - 2015-01-03 19:40 - 00001446 _____ () C:\Users\Vic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-03 18:36 - 2015-01-03 18:37 - 02721168 _____ (Microsoft Corporation) C:\Users\Vic\Downloads\Windows7-USB-DVD-Download-Tool-Installer-en-US.exe
2015-01-03 14:49 - 2015-01-03 15:16 - 00000000 ____D () C:\Users\fleaf_000\Documents\Weekly Menu's
2015-01-03 13:14 - 2015-01-03 13:14 - 00000000 ___RD () C:\Users\fleaf_000\AppData\Roaming\Brother
2015-01-03 13:04 - 2015-01-03 14:49 - 00000000 ____D () C:\Users\fleaf_000\Documents\Swimming Official
2015-01-01 21:44 - 2015-01-09 22:22 - 00000000 ____D () C:\AdwCleaner
2015-01-01 21:42 - 2015-01-01 21:42 - 02173952 _____ () C:\Users\Vic\Downloads\adwcleaner_4.106.exe
2014-12-31 22:53 - 2014-12-31 22:53 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-12-31 22:50 - 2014-12-31 22:50 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\Nikon
2014-12-31 22:50 - 2014-12-31 22:50 - 00000000 ____D () C:\Users\Vic\AppData\Local\Nikon
2014-12-31 22:28 - 2014-12-31 22:28 - 00000000 ____D () C:\ProgramData\Nikon
2014-12-31 21:22 - 2014-12-31 21:22 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-12-31 21:22 - 2014-12-31 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Message Center 2
2014-12-31 21:21 - 2014-12-31 21:21 - 00000268 ___RH () C:\Users\Vic\AppData\Roaming\Plug-In Settings
2014-12-31 21:21 - 2014-12-31 21:21 - 00000000 ____D () C:\ProgramData\Internet Services
2014-12-31 21:20 - 2014-12-31 21:22 - 00000000 ____D () C:\Users\Vic\AppData\Local\Downloaded Installations
2014-12-31 21:20 - 2014-12-31 21:22 - 00000000 ____D () C:\Program Files\Common Files\Nikon
2014-12-31 21:20 - 2014-12-31 21:22 - 00000000 ____D () C:\Program Files (x86)\Nikon
2014-12-31 21:20 - 2014-12-31 21:20 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ATL71.DLL
2014-12-31 21:20 - 2014-12-31 21:20 - 00002069 _____ () C:\Users\Public\Desktop\ViewNX 2.lnk
2014-12-31 21:20 - 2014-12-31 21:20 - 00000268 ___RH () C:\Users\Vic\AppData\Roaming\Plug-Ins
2014-12-31 21:20 - 2014-12-31 21:20 - 00000268 ___RH () C:\Users\Vic\AppData\Roaming\Plants
2014-12-31 21:20 - 2014-12-31 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX 2
2014-12-31 21:20 - 2014-12-31 21:20 - 00000000 ____D () C:\ProgramData\Keyboard Layouts
2014-12-31 21:20 - 2014-12-31 21:20 - 00000000 ____D () C:\ProgramData\Image Units
2014-12-31 21:20 - 2014-12-31 21:20 - 00000000 ____D () C:\Program Files\Nikon
2014-12-31 21:19 - 2014-12-31 21:21 - 00000000 ____D () C:\ProgramData\Ultima_T15
2014-12-31 21:19 - 2014-12-31 21:21 - 00000000 ____D () C:\ProgramData\EnterNHelp
2014-12-31 21:19 - 2014-12-31 21:19 - 00000000 ____D () C:\ProgramData\Sci-Fi
2014-12-31 21:09 - 2014-12-31 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon
2014-12-31 18:34 - 2014-12-31 18:38 - 00000000 ____D () C:\Users\pjsqu_000\Downloads\Your bleep left on USB Stick
2014-12-31 18:21 - 2014-12-31 18:21 - 00003744 _____ () C:\Users\Toby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Toby's Notebook.lnk
2014-12-31 18:21 - 2014-12-31 18:21 - 00003491 _____ () C:\Users\Toby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF.lnk
2014-12-30 22:40 - 2015-01-09 22:23 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-30 22:40 - 2014-12-30 22:40 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-30 22:40 - 2014-12-30 22:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-30 22:40 - 2014-12-30 22:40 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-30 22:40 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-30 22:40 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-30 22:40 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-30 22:38 - 2014-12-30 22:39 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Vic\Downloads\mbam-setup-2.0.4.1028.exe
2014-12-30 22:28 - 2014-12-30 22:28 - 00000000 ____D () C:\Users\Vic\Downloads\backups
2014-12-30 22:26 - 2014-12-30 22:26 - 00388608 _____ (Trend Micro Inc.) C:\Users\Vic\Downloads\HijackThis.exe
2014-12-30 21:38 - 2014-12-30 21:52 - 00000000 ____D () C:\Users\pjsqu_000\Downloads\backups
2014-12-30 21:22 - 2014-12-30 21:51 - 00007456 _____ () C:\Users\pjsqu_000\Downloads\hijackthis.log
2014-12-30 21:21 - 2014-12-30 21:21 - 00388608 _____ (Trend Micro Inc.) C:\Users\pjsqu_000\Downloads\HijackThis.exe
2014-12-30 21:13 - 2014-12-30 21:13 - 00000000 _____ () C:\autoexec.bat
2014-12-30 21:11 - 2014-12-30 21:11 - 02998656 _____ (Enigma Software Group USA, LLC.) C:\Users\pjsqu_000\Downloads\SpyHunter-Installer.exe
2014-12-26 21:04 - 2014-12-26 21:04 - 00000000 ____D () C:\Users\pjsqu_000\AppData\Roaming\ControlCenter4
2014-12-25 18:10 - 2014-12-25 18:10 - 00000000 ____D () C:\Users\Toby\AppData\Roaming\ControlCenter4
2014-12-24 08:49 - 2014-12-24 08:49 - 02033664 _____ () C:\Users\Vic\Documents\PEGGY.pub
2014-12-24 08:34 - 2014-12-24 08:34 - 00095744 _____ () C:\Users\Vic\Documents\toby.pub
2014-12-22 08:00 - 2014-12-22 08:00 - 00000000 ____D () C:\Users\fleaf_000\AppData\Roaming\ControlCenter4
2014-12-21 20:59 - 2014-12-21 20:59 - 00000000 ___RD () C:\Users\Vic\AppData\Roaming\Brother
2014-12-21 20:50 - 2014-12-21 20:50 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\FLEXnet
2014-12-21 20:50 - 2014-12-21 20:50 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\ControlCenter4
2014-12-21 20:38 - 2014-12-21 20:38 - 00002160 _____ () C:\Users\Public\Desktop\Brother Creative Center.lnk
2014-12-21 20:38 - 2014-12-21 20:38 - 00002075 _____ () C:\Users\Public\Desktop\Brother Utilities.lnk
2014-12-21 20:38 - 2014-12-21 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2014-12-21 20:38 - 2014-12-21 20:38 - 00000000 ____D () C:\ProgramData\ControlCenter4
2014-12-21 20:38 - 2014-12-21 20:38 - 00000000 ____D () C:\Program Files (x86)\Browny02
2014-12-21 20:38 - 2014-12-21 20:38 - 00000000 ____D () C:\Brother
2014-12-21 20:37 - 2014-12-21 20:38 - 00000000 ____D () C:\Program Files (x86)\ControlCenter4
2014-12-21 20:37 - 2014-12-21 20:38 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-12-21 20:37 - 2013-07-12 14:03 - 00214016 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll
2014-12-21 20:37 - 2013-07-12 13:03 - 00251392 ____R (brother) C:\Windows\system32\NSSRH64.dll
2014-12-21 20:37 - 2013-07-03 10:46 - 00065024 ____R (Brother Industries,Ltd) C:\Windows\system32\Brnsplg.dll
2014-12-21 20:37 - 2013-03-12 20:50 - 01442304 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWi213b.dll
2014-12-21 20:37 - 2013-03-08 14:45 - 00059904 ____R (Brother Industries,Ltd.) C:\Windows\system32\BrWiaNCp.dll
2014-12-21 20:37 - 2013-03-08 14:44 - 00087040 ____R (Brother Industries, Ltd.) C:\Windows\system32\BrNetSti.dll
2014-12-21 20:37 - 2012-12-03 13:39 - 00002560 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2014-12-21 20:37 - 2011-09-08 17:36 - 00279040 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrJDec.dll
2014-12-21 20:37 - 2010-03-15 19:45 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2014-12-21 20:37 - 2007-12-13 22:16 - 00005120 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2014-12-21 20:37 - 2005-04-22 12:36 - 00143360 ____R () C:\Windows\system32\BrSNMP64.dll
2014-12-21 20:36 - 2014-12-31 21:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-21 20:35 - 2014-12-21 20:35 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\InstallShield
2014-12-21 20:21 - 2014-12-21 20:21 - 00001886 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Software Updates.lnk
2014-12-21 20:21 - 2014-12-21 20:21 - 00000000 ____D () C:\Users\Vic\Documents\MyWebPages
2014-12-21 20:20 - 2014-12-21 20:20 - 00000158 _____ () C:\Windows\SysWOW64\pp.log
2014-12-21 20:11 - 2014-12-21 20:11 - 00000000 ____D () C:\Program Files\Nuance
2014-12-21 20:10 - 2014-12-29 22:07 - 00000000 ____D () C:\Program Files (x86)\Nuance
2014-12-21 20:10 - 2014-12-29 22:06 - 00000000 ____D () C:\ProgramData\Nuance
2014-12-21 20:10 - 2014-12-29 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 12
2014-12-21 20:10 - 2014-12-21 20:21 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-12-21 20:10 - 2014-12-21 20:10 - 00000000 ____D () C:\Users\Vic\AppData\Roaming\Nuance
2014-12-21 20:10 - 2014-12-21 20:10 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-12-21 20:07 - 2014-12-21 20:07 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-12-21 20:06 - 2014-12-21 20:18 - 00000000 ____D () C:\ProgramData\Brother
2014-12-21 16:53 - 2014-12-21 16:53 - 00000000 __SHD () C:\Users\pjsqu_000\AppData\Local\EmieUserList
2014-12-21 16:53 - 2014-12-21 16:53 - 00000000 __SHD () C:\Users\pjsqu_000\AppData\Local\EmieSiteList
2014-12-21 16:53 - 2014-12-21 16:53 - 00000000 __SHD () C:\Users\pjsqu_000\AppData\Local\EmieBrowserModeList
2014-12-21 15:15 - 2014-12-21 15:22 - 00000000 ____D () C:\Users\pjsqu_000\Documents\Peggy's Phone Stuff
2014-12-20 21:52 - 2014-12-20 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-20 21:49 - 2014-12-20 21:50 - 05317104 _____ (Piriform Ltd) C:\Users\Vic\Downloads\ccsetup501.exe
2014-12-18 21:05 - 2015-01-06 16:44 - 00000000 ____D () C:\Users\fleaf_000\Documents\Fiona's stuff
2014-12-17 16:49 - 2014-12-17 16:49 - 11602234 _____ () C:\Users\Toby\Downloads\CaptainAmerica.themepack
2014-12-17 16:41 - 2014-12-17 16:43 - 00027648 ___SH () C:\Users\Toby\Downloads\Thumbs.db
2014-12-17 16:36 - 2014-12-17 16:37 - 16337314 _____ () C:\Users\Toby\Downloads\SummerBloomsRebeccaHeigel.themepack
2014-12-15 21:04 - 2014-12-15 21:09 - 00007662 _____ () C:\Users\Vic\AppData\Local\resmon.resmoncfg
2014-12-15 06:19 - 2014-10-31 06:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-12-15 06:19 - 2014-10-31 06:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-14 13:19 - 2014-12-14 13:19 - 06438368 _____ (WinSoftMagic Inc. ) C:\Users\Vic\Downloads\ajpegcompr(1).exe
2014-12-14 13:16 - 2014-12-14 13:16 - 00230768 _____ () C:\Users\Vic\Downloads\ajpegcompr (1).exe
2014-12-14 13:15 - 2014-12-14 13:15 - 00230768 _____ () C:\Users\Vic\Downloads\ajpegcompr.exe
2014-12-14 11:18 - 2014-11-15 14:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-12-14 11:18 - 2014-11-14 15:10 - 03558400 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-12-14 11:18 - 2014-11-14 14:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-12-14 11:18 - 2014-11-11 08:39 - 22290560 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-12-14 11:18 - 2014-11-11 08:17 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-12-14 11:18 - 2014-11-11 02:06 - 00473408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-12-14 11:18 - 2014-11-08 18:42 - 01390928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2014-12-14 11:18 - 2014-11-08 18:23 - 01127976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2014-12-14 11:18 - 2014-11-08 11:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
2014-12-14 11:18 - 2014-11-08 09:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-12-14 11:18 - 2014-11-08 09:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-12-14 11:18 - 2014-10-31 08:51 - 18823168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-12-14 11:18 - 2014-10-31 08:10 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-12-14 11:18 - 2014-10-30 13:55 - 07473472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-12-14 11:17 - 2014-11-18 04:17 - 00672984 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-12-14 11:17 - 2014-11-18 04:17 - 00273240 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-12-14 11:17 - 2014-11-16 03:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-12-14 11:17 - 2014-11-14 22:36 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-12-14 11:17 - 2014-11-14 14:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll
2014-12-14 11:17 - 2014-11-14 14:58 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-12-14 11:17 - 2014-11-14 14:57 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-12-14 11:17 - 2014-11-14 14:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2014-12-14 11:17 - 2014-11-14 14:54 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-12-14 11:17 - 2014-11-14 14:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-12-14 11:17 - 2014-11-14 14:53 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-12-14 11:17 - 2014-11-14 14:52 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-12-14 11:17 - 2014-11-14 14:46 - 02171904 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-12-14 11:17 - 2014-11-14 14:46 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-12-14 11:17 - 2014-11-14 14:39 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-12-14 11:17 - 2014-11-14 13:04 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-12-14 11:17 - 2014-11-14 13:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-12-14 11:17 - 2014-11-14 13:03 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-12-14 11:17 - 2014-11-14 13:01 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-12-14 11:17 - 2014-11-14 13:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-12-14 11:17 - 2014-11-14 12:53 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-12-14 11:17 - 2014-11-11 02:06 - 02485056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-12-14 11:17 - 2014-11-11 02:06 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-12-14 11:17 - 2014-11-11 02:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-12-14 11:17 - 2014-11-10 10:57 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2014-12-14 11:17 - 2014-11-10 09:37 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-12-14 11:17 - 2014-11-10 09:34 - 01084416 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-12-14 11:17 - 2014-11-10 09:26 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-12-14 11:17 - 2014-11-10 09:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2014-12-14 11:17 - 2014-11-10 09:09 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-12-14 11:17 - 2014-11-10 09:08 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2014-12-14 11:17 - 2014-11-10 09:06 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-12-14 11:17 - 2014-11-10 08:57 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2014-12-14 11:17 - 2014-11-10 08:57 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-12-14 11:17 - 2014-11-08 12:00 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2014-12-14 11:17 - 2014-11-08 12:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2014-12-14 11:17 - 2014-11-08 11:58 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2014-12-14 11:17 - 2014-11-08 11:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2014-12-14 11:17 - 2014-11-08 11:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2014-12-14 11:17 - 2014-11-08 11:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2014-12-14 11:17 - 2014-11-08 11:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2014-12-14 11:17 - 2014-11-08 11:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2014-12-14 11:17 - 2014-11-08 11:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2014-12-14 11:17 - 2014-11-08 11:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2014-12-14 11:17 - 2014-11-08 10:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2014-12-14 11:17 - 2014-11-08 10:38 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-12-14 11:17 - 2014-11-08 10:17 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-12-14 11:17 - 2014-11-08 10:09 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2014-12-14 11:17 - 2014-11-08 10:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-12-14 11:17 - 2014-11-08 09:59 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2014-12-14 11:17 - 2014-11-07 11:58 - 00952896 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-12-14 11:17 - 2014-11-07 11:20 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-12-14 11:17 - 2014-11-05 10:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2014-12-14 11:17 - 2014-11-05 10:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2014-12-14 11:17 - 2014-11-05 10:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2014-12-14 11:17 - 2014-11-05 09:44 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-12-14 11:17 - 2014-11-05 09:43 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-12-14 11:17 - 2014-11-05 09:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-12-14 11:17 - 2014-11-05 09:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
2014-12-14 11:17 - 2014-11-05 09:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
2014-12-14 11:17 - 2014-11-05 09:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2014-12-14 11:17 - 2014-11-05 09:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2014-12-14 11:17 - 2014-11-05 09:20 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-12-14 11:17 - 2014-11-05 09:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2014-12-14 11:17 - 2014-11-05 09:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-12-14 11:17 - 2014-11-05 09:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2014-12-14 11:17 - 2014-11-05 03:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2014-12-14 11:17 - 2014-11-05 03:25 - 00059712 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2014-12-14 11:17 - 2014-11-05 03:25 - 00051008 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2014-12-14 11:17 - 2014-11-04 14:55 - 00026112 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2014-12-14 11:17 - 2014-11-04 14:54 - 00108544 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2014-12-14 11:17 - 2014-11-04 14:54 - 00032256 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2014-12-14 11:17 - 2014-11-04 14:54 - 00030208 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2014-12-14 11:17 - 2014-11-04 14:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2014-12-14 11:17 - 2014-11-04 13:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-12-14 11:17 - 2014-10-31 07:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-14 11:17 - 2014-10-31 07:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-12-14 11:17 - 2014-10-30 13:47 - 01499384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-12-14 11:17 - 2014-10-30 13:41 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-12-14 11:17 - 2014-10-29 11:05 - 00551232 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2014-12-14 11:17 - 2014-10-29 10:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-12-14 11:17 - 2014-10-29 10:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-12-14 11:17 - 2014-10-29 09:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-12-14 11:17 - 2014-10-29 09:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2014-12-14 11:17 - 2014-10-29 09:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-12-14 11:17 - 2014-10-29 09:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-12-14 11:17 - 2014-10-29 09:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-12-14 11:17 - 2014-10-29 09:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2014-12-14 11:17 - 2014-10-29 09:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-12-14 11:17 - 2014-10-29 09:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-12-14 11:17 - 2014-10-27 06:10 - 00390841 _____ () C:\Windows\system32\ApnDatabase.xml
2014-12-14 11:17 - 2014-10-21 09:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\eventcls.dll
2014-12-14 11:17 - 2014-10-21 09:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll
2014-12-14 11:17 - 2014-10-21 08:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2014-12-14 11:17 - 2014-10-21 08:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2014-12-14 11:17 - 2014-10-21 08:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2014-12-14 11:17 - 2014-10-21 08:30 - 01454080 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-12-14 11:17 - 2014-10-21 08:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2014-12-14 11:17 - 2014-10-17 12:56 - 00238912 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-12-14 11:17 - 2014-10-17 12:56 - 00153920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-12-14 11:17 - 2014-10-17 12:56 - 00039744 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-12-14 11:17 - 2014-10-17 11:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-12-13 16:11 - 2014-12-13 16:11 - 00000000 __SHD () C:\Users\Vic\AppData\Local\EmieUserList
2014-12-13 16:11 - 2014-12-13 16:11 - 00000000 __SHD () C:\Users\Vic\AppData\Local\EmieSiteList
2014-12-13 16:11 - 2014-12-13 16:11 - 00000000 __SHD () C:\Users\Vic\AppData\Local\EmieBrowserModeList
2014-12-11 21:20 - 2014-12-11 21:23 - 03774975 _____ () C:\Users\Vic\Downloads\Detailed Player Statistics 260914 (BayUnion - Hale).xlsx
2014-12-11 16:38 - 2014-12-11 16:38 - 01080608 _____ (Unity Technologies ApS) C:\Users\Vic\Downloads\UnityWebPlayer (1).exe
2014-12-11 16:38 - 2014-12-11 16:38 - 00000000 ____D () C:\Users\Vic\AppData\Local\Unity
2014-12-11 16:36 - 2014-12-11 16:36 - 01080608 _____ (Unity Technologies ApS) C:\Users\Vic\Downloads\UnityWebPlayer.exe
2014-12-10 13:05 - 2014-11-10 10:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-10 13:05 - 2014-11-10 09:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-10 12:54 - 2014-11-22 11:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 12:54 - 2014-11-22 10:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 12:54 - 2014-11-22 10:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 12:54 - 2014-11-22 10:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-10 12:54 - 2014-11-22 10:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 12:54 - 2014-11-22 10:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-10 12:54 - 2014-11-22 10:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 12:54 - 2014-11-22 10:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 12:54 - 2014-11-22 10:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 12:54 - 2014-11-22 10:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 12:54 - 2014-11-22 10:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-12-10 12:54 - 2014-11-22 10:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-10 12:54 - 2014-11-22 10:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 12:54 - 2014-11-22 10:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 12:54 - 2014-11-22 10:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 12:54 - 2014-11-22 09:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-12-10 12:54 - 2014-11-22 09:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-12-10 12:54 - 2014-11-22 09:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-12-10 12:54 - 2014-11-22 09:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 12:54 - 2014-11-22 09:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 12:54 - 2014-11-22 09:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 12:54 - 2014-11-22 09:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 12:54 - 2014-11-22 09:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 12:54 - 2014-11-22 09:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 12:54 - 2014-11-22 09:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-12-10 12:54 - 2014-11-22 09:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 12:54 - 2014-11-22 09:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 12:54 - 2014-11-22 09:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-12-10 12:54 - 2014-11-22 09:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 12:54 - 2014-11-22 09:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-12-10 12:54 - 2014-11-22 09:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 12:54 - 2014-11-22 09:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 12:54 - 2014-11-22 09:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 12:54 - 2014-11-22 09:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 12:54 - 2014-11-22 09:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 12:54 - 2014-11-22 09:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 12:54 - 2014-11-22 09:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 12:54 - 2014-11-22 08:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 12:54 - 2014-11-22 08:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 12:54 - 2014-11-07 12:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 12:54 - 2014-11-07 11:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-01-09 22:44 - 2014-12-04 22:02 - 00004948 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for VICS-Vic Vics
2015-01-09 22:34 - 2014-09-29 19:20 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-09 22:29 - 2014-09-29 04:02 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2151387201-1383573627-3921742935-1001
2015-01-09 22:27 - 2014-09-29 04:00 - 00003902 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{8A98630E-A15A-483C-AF71-A9DD85DA8E4C}
2015-01-09 22:26 - 2014-09-28 11:11 - 00000916 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-09 22:26 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-09 22:24 - 2014-09-29 03:57 - 00000000 ___DO () C:\Users\Vic\SkyDrive
2015-01-09 22:24 - 2014-09-28 11:11 - 00000912 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-09 22:23 - 2013-08-22 22:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-09 22:22 - 2013-08-22 21:25 - 00786432 ___SH () C:\Windows\system32\config\BBI
2015-01-09 22:19 - 2014-12-07 22:50 - 00000000 ____D () C:\Users\Vic\Documents\Outlook Files
2015-01-09 22:00 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-09 19:53 - 2014-12-07 18:32 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2151387201-1383573627-3921742935-1006
2015-01-09 19:53 - 2014-11-08 21:09 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2151387201-1383573627-3921742935-1005
2015-01-09 19:53 - 2014-11-08 17:32 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2151387201-1383573627-3921742935-1004
2015-01-09 19:49 - 2014-12-07 21:31 - 00000000 ____D () C:\Users\fleaf_000\Documents\Outlook Files
2015-01-09 16:56 - 2014-11-08 21:09 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{6400516E-CF31-45F5-9057-64DD00CD1BF1}
2015-01-09 16:19 - 2014-11-08 21:05 - 00000000 __RDO () C:\Users\fleaf_000\OneDrive
2015-01-09 12:21 - 2014-12-07 18:29 - 00000000 ___DO () C:\Users\pjsqu_000\OneDrive
2015-01-09 09:40 - 2014-11-08 17:28 - 00000000 ___RD () C:\Users\Toby\OneDrive
2015-01-09 08:17 - 2014-09-28 11:28 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-08 19:34 - 2014-11-08 20:58 - 00000000 ____D () C:\Users\fleaf_000
2015-01-07 17:19 - 2014-11-08 20:58 - 00000000 ____D () C:\Users\fleaf_000\AppData\Local\Packages
2015-01-07 08:02 - 2014-09-29 03:54 - 00000000 ____D () C:\Users\Vic
2015-01-04 21:01 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\addins
2015-01-04 15:29 - 2013-09-30 12:14 - 00863592 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-04 12:32 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\rescache
2015-01-04 09:08 - 2013-08-22 23:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-01-04 09:08 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-01-04 07:46 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-03 19:36 - 2013-08-22 23:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-12-30 23:32 - 2014-09-28 11:12 - 00002288 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-30 22:54 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\System
2014-12-30 22:26 - 2014-09-29 03:55 - 00000000 ____D () C:\Users\Vic\AppData\Local\VirtualStore
2014-12-30 21:22 - 2014-12-07 18:26 - 00000000 ____D () C:\Users\pjsqu_000\AppData\Local\VirtualStore
2014-12-30 15:38 - 2014-09-29 03:55 - 00000000 ____D () C:\Users\Vic\AppData\Local\Packages
2014-12-30 15:36 - 2014-12-07 18:26 - 00000000 ____D () C:\Users\pjsqu_000\AppData\Local\Packages
2014-12-30 15:16 - 2014-09-29 03:56 - 00000000 ____D () C:\Users\Vic\AppData\Local\PackageStaging
2014-12-29 21:03 - 2013-08-22 23:36 - 00000000 __RSD () C:\Windows\Media
2014-12-27 22:27 - 2014-09-29 19:20 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-27 22:27 - 2014-09-29 19:11 - 00000000 ____D () C:\Users\Vic\AppData\Local\Adobe
2014-12-27 10:51 - 2014-12-07 20:00 - 00000000 ____D () C:\Users\pjsqu_000\Documents\Outlook Files
2014-12-23 17:02 - 2014-12-04 21:29 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-21 20:49 - 2013-08-22 22:44 - 00482552 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-20 21:52 - 2014-09-28 11:28 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ___RD () C:\Windows\ToastData
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\system32\setup
2014-12-14 12:23 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-14 11:24 - 2014-09-28 00:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-14 11:21 - 2014-09-28 00:30 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-14 11:17 - 2014-11-12 16:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-12-14 11:17 - 2014-11-12 16:43 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-12-14 11:17 - 2014-11-12 16:43 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-12-14 11:17 - 2014-11-12 16:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2014-12-14 10:51 - 2013-08-22 23:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-12-10 08:59 - 2014-10-15 20:29 - 00000000 ____D () C:\Users\Toby
 
Some content of TEMP:
====================
C:\Users\fleaf_000\AppData\Local\Temp\WRupdate101975375.exe
C:\Users\pjsqu_000\AppData\Local\Temp\WRupdate101975625.exe
C:\Users\Vic\AppData\Local\Temp\Quarantine.exe
C:\Users\Vic\AppData\Local\Temp\sqlite3.dll
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-01-06 17:44
 
==================== End Of Log ============================


#12 Machiavelli

Machiavelli

    Agent 007


  • Malware Response Instructor
  • 3,904 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:09:09 PM

Posted 09 January 2015 - 10:05 AM

Hey my friend,

Step 1: FRST Fix
  • Please open Notepad.exe. Make sure that you don't use any other software than Notepad.exe!
  • Copy and Paste the content of the codebox below into the empty textfile:

    ShortcutTarget: Install Webroot FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (No File)
    ShortcutTarget: Install Webroot IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (No File)
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    EmptyTemp:
    
  • Then click on File >> Save as
    • File Name: Fixlist.txt
    • From the Save as type drop down list, choose All Files
  • It is very important that you save this textfile on your Desktop!
Note: It's important that both files, FRST.exe/FRST64.exe and fixlist.txt are in the same location or the fix will not work
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
  • Run FRST.exe/FRST64.exe (Note: If FRST advises there is a new updated version to be downloaded, allow this.)and press the Fix button just once and wait
  • If for some reason the tool needs a restart, please make sure you let the system restart normally, then let the tool complete its run
  • When finished, FRST will generate a log (Fixlog.txt) in the same location the tool was run, please post it to your reply
Step 2: FRST Scan
  • Run FRST. (if you have Windows Vista / Windows 7 / Windows 8: Please do a Right click on the FRST icon and select Run as Administrator)
  • Click Scan to start FRST.
  • When FRST finishes scanning, a log, FRST.txt, will open.
  • Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this log into your next post please.
Step 3: ESET

Please run a free online scan with the ESET Online Scanner:

IMPORTANT: You MUST use Internet Explorer for this step!
  • Visit the ESET Online Scanner Web Page
  • Select the blue Run ESET Online Scanner button:
    ESET1_zps23a5e840.png
  • Tick the box next to YES, I accept the Terms of Use and click Start
    ESET_EULA2_zps9451f1c3.png
  • When asked, allow the ActiveX control to install.
  • Select Enable detection of potentially unwanted applications and select Advanced Settings:
    ESET2_zpsc701c045.png
  • Make sure to check the options Remove found threats and Enable Anti-Stealth technology are checked:
    ESET4_zps0afafd0d.png
  • Click Start. (This scan can take several hours, so please be patient):
    ESET3_zpsccd1657d.png
  • Once the scan is completed, select List of found threats:
    ESET5_zpsd27be299.png
  • Select Export to text file... and save the file as ESETlog.txt on your Desktop:
    ESET6_zpsc17d154e.png
  • Click the Back button.
  • Click the Finish button:
    ESET9_zps51587217.png
  • Use Notepad to open the saved log file (on your Desktop- ESET.txt)[/b]
  • Copy and paste that log as a reply to this topic.
Step 4: Question

How is your PC running?

~Machiavelli

If I don't reply within 24 hours please PM me!

  • Every topic with no replies within 5 days will be closed.
  • If you like my help here please give me feedback.

unite_blue.png
 
 


#13 Vsquizz

Vsquizz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 10 January 2015 - 08:26 PM

Thank you for your help my friend.

 

I will try those last 4 steps today...but unfortunately work keeps interrupting my leisure time.



#14 Machiavelli

Machiavelli

    Agent 007


  • Malware Response Instructor
  • 3,904 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:09:09 PM

Posted 11 January 2015 - 07:44 AM

No problem, Vsquizz. :)

~Machiavelli

If I don't reply within 24 hours please PM me!

  • Every topic with no replies within 5 days will be closed.
  • If you like my help here please give me feedback.

unite_blue.png
 
 


#15 Machiavelli

Machiavelli

    Agent 007


  • Malware Response Instructor
  • 3,904 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:09:09 PM

Posted 15 January 2015 - 10:27 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.

~Machiavelli

If I don't reply within 24 hours please PM me!

  • Every topic with no replies within 5 days will be closed.
  • If you like my help here please give me feedback.

unite_blue.png
 
 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users