Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

DailyTrader & Survey Pop-ups & slow performance on new PC


  • This topic is locked This topic is locked
4 replies to this topic

#1 Glarion

Glarion

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 18 April 2015 - 06:43 AM

Hi there.

 

I have bought a new laptop, just over a week ago, and have started to set it up. It is a Lenovo G50 and came bundled with Windows 8. So far all I have done is register the PC, install MS Office 2003 + SP3 and download & install Firefox. My wife was using the computer to access Ancestry.co.uk and started to get new tabs opening congratulating her on being selected to complete a Survey related to what seemed like Ancestry. When I checked it out it looked fake so I closed it. She then went onto the BBC website and the same thing happened but for BBC instead of Ancestry, exactly the same page and pop-up box just with BBC instead of ancestry. This repeated for nearly all websites I subsequently visited. Also started to get new tabs opening referring to DailyTrader.com

 

So far I have run McAfee (which came bundled with the PC), Spybot Search & Destroy, Malwarebytes, Kaspersky, Windows Malicious Tool Remover & SuperAntiSpyware.

 

Although lots of things have subsequently been removed, it is still happening. I'm at my wits end can someone please help me...also noticed that internet & PC seem to be running a little slow for a brand new PC with reasonable spec.

 

Thanks in advance

Glarion

 

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-04-2015 01
Ran by Jason (administrator) on LENOVOG50 on 18-04-2015 12:01:43
Running from C:\Users\Jason\Downloads
Loaded Profiles: Jason (Available profiles: Jason)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\ProgramData\NetEngine\bin\D7\netengine.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\iMController\SystemAgentService.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Pokki) C:\Users\Jason\AppData\Local\Pokki\Engine\StartMenuIndexer.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Lenovo) C:\Program Files\lenovo\Lenovo Solution Center\LSCNotify.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe
() C:\ProgramData\NetEngine\bin\D7\netengine.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\mhn\AlertHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Software Updater Beta\ksu.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [287592 2014-02-26] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-05] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2891080 2013-10-17] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [216576 2014-03-10] (Realtek Semiconductor Corporation)
HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6340312 2014-02-27] (Realtek semiconductor)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2014-11-20] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-11-20] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\platform\McUICnt.exe [643064 2014-09-17] (McAfee, Inc.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-26934793-363194436-3154964498-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-26934793-363194436-3154964498-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7806232 2015-03-25] (SUPERAntiSpyware)
HKU\S-1-5-21-26934793-363194436-3154964498-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-26934793-363194436-3154964498-1001\...\MountPoints2: {b1478b89-df8f-11e4-825d-7429af457aba} - "F:\LaunchU3.exe" -a
AppInit_DLLs-x32: c:\progra~2\lenovobrowserguard\lenovobrowserguard\bin\spvc32loader.dll => c:\Program Files (x86)\lenovobrowserguard\lenovobrowserguard\bin\spvc32loader.dll [173896 2014-08-25] (ClientConnect LTD)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Kaspersky Software Updater Beta.lnk
ShortcutTarget: Kaspersky Software Updater Beta.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Software Updater Beta\ksu.exe (Kaspersky Lab ZAO)
ShellIconOverlayIdentifiers: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-26934793-363194436-3154964498-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-26934793-363194436-3154964498-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKLM -> DefaultScope {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKLM -> {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.safesearch.net/search?q={searchTerms}&p=sm=ie&c=wi&s=wi
SearchScopes: HKU\.DEFAULT -> {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-19 -> DefaultScope {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-19 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.safesearch.net/search?q={searchTerms}&p=sm=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-19 -> {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-20 -> DefaultScope {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-20 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.safesearch.net/search?q={searchTerms}&p=sm=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-20 -> {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-21-26934793-363194436-3154964498-1001 -> {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-04-17] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-04-17] (Kaspersky Lab ZAO)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-04-20] (Kaspersky Lab ZAO)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-01-13] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-01-13] (McAfee, Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100

FireFox:
========
FF ProfilePath: C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\18hqcghn.default
FF NewTab: hxxp://www.google.co.uk
FF DefaultSearchUrl: hxxp://www.safesearch.net/search?p=s&q={searchTerms}&m=ff&c=wi&s=wi
FF SearchEngineOrder.1: Search       
FF SelectedSearchEngine: Search       
FF Homepage: hxxp://www.google.co.uk/
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2015-04-17] ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2015-04-17] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2015-04-17] ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll [2013-12-13] (Nitro PDF)
FF user.js: detected! => C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\18hqcghn.default\user.js [2015-04-17]
FF Extension: No Name - C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\18hqcghn.default\Extensions\ff [2015-04-10]
FF Extension: Firefox Certificate Store Hotfix - C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\18hqcghn.default\Extensions\firefox-hotfix@mozilla.org.xpi [2015-04-15]
FF Extension: No Name - C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\18hqcghn.default\Extensions\{23ba1251-71a7-4dd1-ade8-15e7047bf8e3}.xpi [2015-04-17]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2015-04-17]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2015-04-17]
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2015-04-17]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2015-04-17]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2015-04-17]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-11-20]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [95232 2014-03-28] () [File not signed]
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [99632 2013-10-09] (ELAN Microelectronics Corp.)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-02-26] (Intel Corporation)
R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel® Corporation) [File not signed]
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel® Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [533760 2014-06-03] (Lenovo)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-05-22] (LENOVO INCORPORATED.)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-11-20] (Lenovo(beijing) Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272440 2015-03-09] (Lenovo)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-01-13] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [332528 2014-03-12] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-01-07] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 NitroDriverReadSpool9; C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [230920 2013-12-13] (Nitro PDF Software)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2014-11-20] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [142344 2015-04-17] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [771272 2015-04-17] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
S3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [67680 2014-03-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [559832 2014-02-26] (Realtek Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [9109720 2014-02-27] (Realtek Semiconductor Corp.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2982104 2013-12-26] (Realtek Semiconductor Corporation                           )
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
R4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]
S1 qrtltsql; \??\C:\windows\system32\drivers\qrtltsql.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-18 12:01 - 2015-04-18 12:02 - 00027966 _____ () C:\Users\Jason\Downloads\FRST.txt
2015-04-18 11:59 - 2015-04-18 11:59 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\Jason\Downloads\rkill.exe
2015-04-18 11:58 - 2015-04-18 11:58 - 02686254 _____ (Thisisu) C:\Users\Jason\Downloads\JRT.exe
2015-04-18 11:57 - 2015-04-18 11:58 - 02217984 _____ () C:\Users\Jason\Downloads\adwcleaner_4.201.exe
2015-04-18 11:49 - 2015-04-18 12:01 - 00000000 ____D () C:\FRST
2015-04-18 11:48 - 2015-04-18 11:48 - 02098176 _____ (Farbar) C:\Users\Jason\Downloads\FRST64.exe
2015-04-18 10:55 - 2015-04-18 10:57 - 00013357 _____ () C:\Users\Jason\Downloads\hijackthis.log
2015-04-18 10:54 - 2015-04-18 10:54 - 00388608 _____ (Trend Micro Inc.) C:\Users\Jason\Downloads\HijackThis.exe
2015-04-18 10:36 - 2015-04-18 10:36 - 00000000 ____D () C:\Users\Jason\AppData\Local\Steam
2015-04-18 10:34 - 2015-04-18 11:07 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-18 10:34 - 2015-04-18 10:34 - 00000982 _____ () C:\Users\Public\Desktop\Steam.lnk
2015-04-18 10:34 - 2015-04-18 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-04-18 10:33 - 2015-04-18 10:33 - 01142128 _____ () C:\Users\Jason\Downloads\SteamSetup.exe
2015-04-17 20:07 - 2015-04-17 20:07 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Jason\Downloads\tdsskiller.exe
2015-04-17 14:48 - 2015-04-17 14:48 - 00002353 _____ () C:\Users\Jason\Desktop\Safe Money.lnk
2015-04-17 14:47 - 2015-04-17 14:47 - 00001215 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2015-04-17 14:47 - 2015-04-17 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2015-04-17 14:47 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\windows\system32\klfphc.dll
2015-04-17 14:46 - 2015-04-17 14:51 - 00771272 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys
2015-04-17 14:46 - 2015-04-17 14:51 - 00142344 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys
2015-04-17 14:46 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klhk.sys
2015-04-17 14:44 - 2015-04-17 14:47 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2015-04-17 14:41 - 2015-04-17 14:41 - 00716896 _____ (Kaspersky Lab) C:\Users\Jason\Downloads\setup(2).exe
2015-04-17 14:38 - 2015-04-17 14:38 - 00716896 _____ (Kaspersky Lab) C:\Users\Jason\Downloads\setup(1).exe
2015-04-17 14:36 - 2015-04-18 10:45 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-04-17 14:36 - 2015-04-17 14:46 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2015-04-17 14:36 - 2015-04-17 14:36 - 00001122 _____ () C:\Users\Public\Desktop\Kaspersky Software Updater Beta.lnk
2015-04-17 14:36 - 2015-04-17 14:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Software Updater Beta
2015-04-17 14:35 - 2015-04-17 14:35 - 00716896 _____ (Kaspersky Lab) C:\Users\Jason\Downloads\setup.exe
2015-04-17 14:32 - 2015-04-17 14:24 - 00450832 ____R () C:\windows\system32\Drivers\etc\hosts.20150417-143249.backup
2015-04-17 14:24 - 2015-04-17 11:08 - 00450716 ____R () C:\windows\system32\Drivers\etc\hosts.20150417-142425.backup
2015-04-17 11:08 - 2013-08-22 14:25 - 00000824 _____ () C:\windows\system32\Drivers\etc\hosts.20150417-110812.backup
2015-04-17 11:03 - 2015-04-17 11:10 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-04-17 11:03 - 2015-04-17 11:03 - 00001410 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-04-17 11:03 - 2015-04-17 11:03 - 00001398 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-04-17 11:03 - 2015-04-17 11:03 - 00000000 ____D () C:\windows\System32\Tasks\Safer-Networking
2015-04-17 11:03 - 2015-04-17 11:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-04-17 11:03 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe
2015-04-17 10:59 - 2015-04-17 11:00 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Jason\Downloads\spybot-2.4.exe
2015-04-17 10:56 - 2015-04-17 14:18 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-04-17 10:56 - 2015-04-17 11:03 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2015-04-17 10:54 - 2015-04-17 10:54 - 16409960 _____ (Safer Networking Limited ) C:\Users\Jason\Downloads\spybotsd162.exe
2015-04-17 00:47 - 2015-04-17 00:49 - 160214296 _____ (Microsoft Corporation) C:\Users\Jason\Downloads\msert.exe
2015-04-17 00:09 - 2015-04-17 00:09 - 00000000 ____D () C:\Users\Jason\AppData\Roaming\SUPERAntiSpyware.com
2015-04-17 00:08 - 2015-04-18 10:27 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-04-17 00:08 - 2015-04-17 00:08 - 00001831 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2015-04-17 00:08 - 2015-04-17 00:08 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2015-04-17 00:08 - 2015-04-17 00:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-04-17 00:07 - 2015-04-17 00:07 - 21676320 _____ (SUPERAntiSpyware) C:\Users\Jason\Downloads\SUPERAntiSpyware.exe
2015-04-16 23:19 - 2015-04-16 23:38 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-16 23:18 - 2015-04-16 23:18 - 00001121 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-04-16 23:18 - 2015-04-16 23:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-16 23:18 - 2015-04-16 23:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-16 23:18 - 2015-04-16 23:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-16 23:18 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-04-16 23:18 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-04-16 23:18 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-04-16 23:17 - 2015-04-16 23:17 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Jason\Downloads\mbam-setup-2.1.4.1018.exe
2015-04-16 17:36 - 2015-04-16 17:36 - 00003984 _____ () C:\windows\System32\Tasks\LaunchPreSignup
2015-04-16 17:36 - 2015-04-16 17:36 - 00000000 ____D () C:\ProgramData\6f014e0600004349
2015-04-16 17:34 - 2015-04-16 17:34 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-04-16 17:30 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2015-04-16 17:30 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2015-04-16 17:30 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2015-04-16 17:30 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2015-04-16 17:30 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
2015-04-16 17:30 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2015-04-16 17:30 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys
2015-04-16 17:30 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll
2015-04-16 17:30 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2015-04-16 17:30 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll
2015-04-16 17:30 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
2015-04-16 17:30 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll
2015-04-16 17:30 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll
2015-04-16 17:30 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll
2015-04-16 17:30 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll
2015-04-16 17:30 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll
2015-04-16 17:30 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\windows\system32\printui.dll
2015-04-16 17:30 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll
2015-04-16 17:30 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll
2015-04-16 17:30 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\windows\system32\AppxPackaging.dll
2015-04-16 17:30 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2015-04-16 17:30 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2015-04-16 17:30 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll
2015-04-16 17:30 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll
2015-04-16 17:29 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2015-04-16 17:29 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys
2015-04-16 17:29 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys
2015-04-16 17:29 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2015-04-16 17:29 - 2014-07-24 16:23 - 01519488 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2015-04-16 17:29 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2015-04-16 17:29 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2015-04-16 17:29 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe
2015-04-16 17:29 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe
2015-04-16 17:29 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-04-16 17:29 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2015-04-16 17:29 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-04-16 17:29 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2015-04-16 17:29 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll
2015-04-16 17:29 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll
2015-04-16 17:29 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2015-04-16 17:29 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\windows\system32\mftranscode.dll
2015-04-16 17:29 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2015-04-16 17:29 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe
2015-04-16 17:29 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2015-04-16 17:29 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll
2015-04-16 17:29 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll
2015-04-16 17:29 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll
2015-04-16 17:29 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL
2015-04-16 17:29 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2015-04-16 17:29 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTT102.DLL
2015-04-16 17:29 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2015-04-16 17:29 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2015-04-16 17:29 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2015-04-16 17:29 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2015-04-16 17:29 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2015-04-16 17:29 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
2015-04-16 17:29 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys
2015-04-16 17:29 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NdisImPlatform.sys
2015-04-16 17:29 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys
2015-04-16 17:29 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\iasnap.dll
2015-04-16 17:29 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll
2015-04-16 17:29 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2015-04-16 17:29 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2015-04-16 17:29 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTT102.DLL
2015-04-16 17:29 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2015-04-16 17:29 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL
2015-04-16 17:29 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2015-04-16 17:29 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2015-04-16 17:29 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2015-04-16 17:29 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersGPExt.dll
2015-04-16 17:29 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl
2015-04-16 17:29 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2015-04-16 17:29 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll
2015-04-16 17:29 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\windows\system32\Display.dll
2015-04-16 17:29 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2015-04-16 17:29 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2015-04-16 17:29 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasnap.dll
2015-04-16 17:29 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll
2015-04-16 17:29 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll
2015-04-16 17:29 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl
2015-04-16 17:29 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll
2015-04-16 17:29 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll
2015-04-16 17:29 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2015-04-16 17:29 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2015-04-16 17:29 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll
2015-04-16 17:29 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll
2015-04-16 17:29 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\browser.dll
2015-04-16 17:29 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wlansvcpal.dll
2015-04-16 17:29 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll
2015-04-16 17:29 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll
2015-04-16 17:29 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-04-16 17:29 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll
2015-04-16 17:29 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll
2015-04-16 17:29 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll
2015-04-16 17:29 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
2015-04-16 17:29 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll
2015-04-16 17:29 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\BluetoothApis.dll
2015-04-16 17:29 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
2015-04-16 17:29 - 2014-07-24 09:49 - 01361408 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2015-04-16 17:29 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll
2015-04-16 17:29 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll
2015-04-16 17:29 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll
2015-04-16 17:29 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2015-04-16 17:29 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll
2015-04-16 17:29 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
2015-04-16 17:29 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll
2015-04-16 17:29 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\BluetoothApis.dll
2015-04-16 17:29 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll
2015-04-16 17:29 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-04-16 17:29 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll
2015-04-16 17:29 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
2015-04-16 17:29 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv
2015-04-16 17:29 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll
2015-04-16 17:29 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
2015-04-16 17:29 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe
2015-04-16 17:29 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll
2015-04-16 17:29 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll
2015-04-16 17:29 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
2015-04-16 17:29 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll
2015-04-16 17:29 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll
2015-04-16 17:29 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv
2015-04-16 17:29 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll
2015-04-16 17:29 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll
2015-04-16 17:29 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll
2015-04-16 17:29 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
2015-04-16 17:29 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll
2015-04-16 17:29 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsPrint.dll
2015-04-16 17:29 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
2015-04-16 17:29 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
2015-04-16 17:29 - 2014-07-24 05:11 - 00513544 _____ () C:\windows\SysWOW64\locale.nls
2015-04-16 17:29 - 2014-07-24 05:11 - 00513544 _____ () C:\windows\system32\locale.nls
2015-04-16 17:29 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\wisp.dll
2015-04-16 17:29 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wisp.dll
2015-04-16 17:29 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys
2015-04-16 17:29 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll
2015-04-16 17:29 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll
2015-04-16 17:29 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll
2015-04-16 17:29 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll
2015-04-16 17:29 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxPackaging.dll
2015-04-16 17:29 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2015-04-16 17:29 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll
2015-04-16 17:29 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\dab.dll
2015-04-16 17:29 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-04-16 17:29 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
2015-04-16 17:29 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\windows\system32\rsaenh.dll
2015-04-16 17:29 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\windows\SysWOW64\rsaenh.dll
2015-04-16 17:29 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
2015-04-16 17:29 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\windows\system32\aclui.dll
2015-04-16 17:29 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\windows\SysWOW64\aclui.dll
2015-04-16 17:29 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\windows\system32\wsecedit.dll
2015-04-16 17:29 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsecedit.dll
2015-04-16 17:29 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll
2015-04-16 17:29 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll
2015-04-16 17:29 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\AppxSysprep.dll
2015-04-16 17:29 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
2015-04-16 17:29 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll
2015-04-16 17:29 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
2015-04-16 17:29 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
2015-04-16 17:29 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
2015-04-16 17:29 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
2015-04-16 17:26 - 2015-03-23 22:59 - 07476032 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-04-16 17:26 - 2015-03-23 22:59 - 01733952 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-04-16 17:26 - 2015-03-23 22:59 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\sechost.dll
2015-04-16 17:26 - 2015-03-23 22:58 - 01498872 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-04-16 17:26 - 2015-03-23 22:45 - 00257216 _____ (Microsoft Corporation) C:\windows\SysWOW64\sechost.dll
2015-04-16 17:26 - 2015-03-20 05:12 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\microsoft-windows-system-events.dll
2015-04-16 17:26 - 2015-03-20 05:10 - 00285184 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-04-16 17:26 - 2015-03-20 05:10 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-04-16 17:26 - 2015-03-20 04:17 - 00411648 _____ (Microsoft Corporation) C:\windows\system32\tracerpt.exe
2015-04-16 17:26 - 2015-03-20 03:41 - 00369152 _____ (Microsoft Corporation) C:\windows\SysWOW64\tracerpt.exe
2015-04-16 17:26 - 2015-03-20 03:40 - 00950784 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2015-04-16 17:26 - 2015-03-20 03:16 - 00749568 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2015-04-16 17:26 - 2015-03-13 05:32 - 24980480 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-04-16 17:26 - 2015-03-13 05:08 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-04-16 17:26 - 2015-03-13 05:07 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-04-16 17:26 - 2015-03-13 04:53 - 00816128 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-04-16 17:26 - 2015-03-13 04:50 - 06025216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-04-16 17:26 - 2015-03-13 04:42 - 19695616 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-04-16 17:26 - 2015-03-13 04:28 - 00503296 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-04-16 17:26 - 2015-03-13 04:26 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-04-16 17:26 - 2015-03-13 04:22 - 02278400 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-04-16 17:26 - 2015-03-13 04:17 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2015-04-16 17:26 - 2015-03-13 04:16 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-04-16 17:26 - 2015-03-13 04:08 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-04-16 17:26 - 2015-03-13 04:07 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-04-16 17:26 - 2015-03-13 04:00 - 14397440 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-04-16 17:26 - 2015-03-13 03:50 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2015-04-16 17:26 - 2015-03-13 03:49 - 04305408 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-04-16 17:26 - 2015-03-13 03:45 - 02358784 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-04-16 17:26 - 2015-03-13 03:44 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-04-16 17:26 - 2015-03-13 03:34 - 12825600 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-04-16 17:26 - 2015-03-13 03:33 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-04-16 17:26 - 2015-03-13 03:22 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-04-16 17:26 - 2015-03-13 03:20 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-04-16 17:26 - 2015-03-13 03:16 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-04-16 17:26 - 2015-03-13 03:14 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-04-16 17:26 - 2015-03-04 11:25 - 00377152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\clfs.sys
2015-04-16 17:26 - 2015-03-04 04:04 - 00075264 _____ (Microsoft Corporation) C:\windows\system32\clfsw32.dll
2015-04-16 17:26 - 2015-03-04 03:19 - 00058880 _____ (Microsoft Corporation) C:\windows\SysWOW64\clfsw32.dll
2015-04-16 17:26 - 2015-02-24 09:32 - 00991552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys
2015-04-16 17:26 - 2015-02-21 00:49 - 00780800 _____ (Microsoft Corporation) C:\windows\system32\lsm.dll
2015-04-16 17:26 - 2014-10-29 03:48 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\workerdd.dll
2015-04-16 17:26 - 2014-10-29 03:43 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\diskperf.exe
2015-04-16 17:26 - 2014-10-29 03:17 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\logman.exe
2015-04-16 17:26 - 2014-10-29 02:58 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\diskperf.exe
2015-04-16 17:26 - 2014-10-29 02:38 - 00087552 _____ (Microsoft Corporation) C:\windows\SysWOW64\logman.exe
2015-04-16 17:26 - 2014-10-29 02:26 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\typeperf.exe
2015-04-16 17:26 - 2014-10-29 02:26 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\relog.exe
2015-04-16 17:26 - 2014-10-29 02:04 - 00041472 _____ (Microsoft Corporation) C:\windows\SysWOW64\typeperf.exe
2015-04-16 17:26 - 2014-10-29 02:04 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\relog.exe
2015-04-16 17:25 - 2015-03-13 03:58 - 00259072 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2015-04-16 17:25 - 2015-03-13 03:37 - 00208896 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2015-04-16 17:24 - 2015-03-14 09:54 - 00133256 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-04-16 17:24 - 2015-03-14 02:56 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-04-16 17:24 - 2015-03-14 02:56 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-04-16 17:24 - 2015-03-14 02:51 - 00015360 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-04-16 17:24 - 2015-03-14 02:37 - 00267264 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-04-16 17:24 - 2015-03-14 02:14 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-04-16 17:24 - 2015-03-14 01:22 - 03678720 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-04-16 17:24 - 2015-03-14 01:12 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-04-16 17:24 - 2015-03-14 01:12 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-04-16 17:24 - 2015-03-14 01:09 - 00200192 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2015-04-16 17:24 - 2015-03-14 01:08 - 00408064 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2015-04-16 17:24 - 2015-03-14 01:08 - 00095744 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-04-16 17:24 - 2015-03-14 01:06 - 02373632 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-04-16 17:24 - 2015-03-14 01:06 - 00891392 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-04-16 17:24 - 2015-03-14 01:02 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-04-16 17:24 - 2015-03-14 01:02 - 00029696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-04-16 17:24 - 2015-03-14 00:59 - 00721920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-04-16 17:24 - 2015-03-14 00:59 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-04-15 23:49 - 2015-04-15 23:49 - 00000000 ____D () C:\Users\Jason\AppData\Local\Lenovo
2015-04-15 22:00 - 2015-04-18 11:19 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-04-15 22:00 - 2015-04-15 22:00 - 00003718 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 22:00 - 2015-04-15 22:00 - 00000000 ____D () C:\Users\Jason\AppData\Local\Macromedia
2015-04-15 21:18 - 2015-04-15 21:18 - 00000000 ____D () C:\CrimeWatch
2015-04-15 21:11 - 2015-04-15 21:11 - 00000000 __SHD () C:\Users\Jason\AppData\Local\EmieBrowserModeList
2015-04-15 21:10 - 2015-04-15 21:10 - 00000000 ____D () C:\ProgramData\Browser
2015-04-10 17:21 - 2015-04-16 17:19 - 00003436 _____ () C:\windows\System32\Tasks\NetEngine
2015-04-10 17:21 - 2015-04-10 17:21 - 00000000 ____D () C:\ProgramData\NetEngine
2015-04-10 17:17 - 2015-04-14 00:24 - 00792056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-04-10 17:17 - 2015-04-14 00:24 - 00178168 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-10 17:02 - 2015-03-11 18:48 - 122905856 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-04-10 17:00 - 2015-04-10 17:00 - 00000000 ____D () C:\Program Files (x86)\MSECache
2015-04-10 16:59 - 2015-04-10 16:59 - 41840320 _____ (Microsoft Corporation) C:\Users\Jason\Downloads\Windows-KB890830-x64-V5.22.exe
2015-04-10 16:59 - 2015-04-10 16:59 - 38808920 _____ (Microsoft Corporation) C:\Users\Jason\Downloads\FileFormatConverters.exe
2015-04-10 16:57 - 2015-04-10 16:57 - 00000376 _____ () C:\windows\ODBC.INI
2015-04-10 16:56 - 2015-04-18 10:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-04-10 16:56 - 2015-04-10 16:56 - 00002625 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Open Office Document.lnk
2015-04-10 16:56 - 2015-04-10 16:56 - 00002615 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\New Office Document.lnk
2015-04-10 16:56 - 2015-04-10 16:56 - 00000000 ____D () C:\Program Files (x86)\Microsoft ActiveSync
2015-04-10 16:54 - 2015-04-10 16:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2015-04-10 16:54 - 2015-04-10 16:54 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2015-04-10 16:53 - 2015-04-10 16:53 - 00000000 ____D () C:\windows\PCHEALTH
2015-04-10 16:41 - 2015-03-06 03:53 - 00430080 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-04-10 16:41 - 2015-03-06 03:33 - 00358912 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-04-10 16:41 - 2015-01-31 00:20 - 00203264 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll
2015-04-10 16:41 - 2015-01-28 02:31 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2015-04-10 16:41 - 2015-01-28 02:11 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2015-04-10 16:41 - 2015-01-27 05:22 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2015-04-10 16:41 - 2015-01-27 03:11 - 03547648 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2015-04-10 16:41 - 2014-10-29 04:56 - 00027456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2015-04-10 16:41 - 2014-10-29 03:37 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\rfxvmt.dll
2015-04-10 16:41 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-04-10 16:41 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-04-10 16:41 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-04-10 16:41 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-04-10 16:41 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-04-10 16:41 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-04-10 16:40 - 2015-02-26 00:26 - 04178944 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-04-10 16:40 - 2015-02-21 01:27 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-04-10 16:40 - 2015-02-21 01:27 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2015-04-10 16:40 - 2015-02-21 00:32 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-04-10 16:40 - 2015-02-20 04:03 - 00358912 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-04-10 16:40 - 2015-02-20 03:58 - 00044032 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-04-10 16:40 - 2015-02-20 03:47 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-04-10 16:40 - 2015-02-20 03:34 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-04-10 16:40 - 2015-02-20 03:20 - 00301056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2015-04-10 16:40 - 2015-02-20 03:15 - 00035840 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2015-04-10 16:40 - 2015-02-20 03:07 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2015-04-10 16:40 - 2015-02-20 03:06 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-04-10 16:40 - 2015-02-20 03:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-04-10 16:40 - 2015-02-20 02:52 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-04-10 16:40 - 2015-02-20 02:49 - 00374272 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-04-10 16:40 - 2015-02-20 02:46 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-04-10 16:40 - 2015-02-20 02:29 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2015-04-10 16:40 - 2015-02-20 02:26 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-04-10 16:40 - 2015-02-20 02:24 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-04-10 16:40 - 2015-02-12 18:40 - 22291584 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-04-10 16:40 - 2015-02-12 18:34 - 19731824 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-04-10 16:40 - 2015-01-29 19:45 - 01763352 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2015-04-10 16:40 - 2015-01-29 19:34 - 01488040 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2015-04-10 16:40 - 2015-01-21 06:54 - 01384712 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll
2015-04-10 16:40 - 2015-01-21 06:15 - 01123848 _____ (Microsoft Corporation) C:\windows\SysWOW64\msctf.dll
2015-04-10 16:40 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-04-10 16:40 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-04-10 16:40 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-04-10 16:40 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-04-10 16:40 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-04-10 16:40 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2015-04-10 16:40 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2015-04-10 16:40 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2015-04-10 16:40 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2015-04-10 16:40 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2015-04-10 16:40 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2015-04-10 16:40 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-04-10 16:40 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-04-10 16:40 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-04-10 16:40 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-04-10 16:40 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2015-04-10 16:40 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-04-10 16:40 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
2015-04-10 16:40 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-04-10 16:40 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-04-10 16:40 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2015-04-10 16:40 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-04-10 16:40 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2015-04-10 16:40 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2015-04-10 16:40 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2015-04-10 16:40 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-04-10 16:40 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2015-04-10 16:40 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2015-04-10 16:40 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2015-04-10 16:40 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2015-04-10 16:40 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2015-04-10 16:40 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2015-04-10 16:40 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2015-04-10 16:40 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2015-04-10 16:40 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2015-04-10 16:40 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-04-10 16:40 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-04-10 16:40 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-04-10 16:40 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-04-10 16:40 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2015-04-10 16:40 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-04-10 16:40 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
2015-04-10 16:40 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-04-10 16:40 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-04-10 16:40 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2015-04-10 16:40 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-10 16:40 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2015-04-10 16:40 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2015-04-10 16:40 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2015-04-10 16:40 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-04-10 16:40 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2015-04-10 16:40 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2015-04-10 16:40 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2015-04-10 16:40 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2015-04-10 16:40 - 2014-10-29 03:49 - 00003072 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-04-10 16:40 - 2014-10-29 03:44 - 00096256 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-04-10 16:40 - 2014-10-29 03:44 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-04-10 16:40 - 2014-10-29 03:04 - 00003072 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2015-04-10 16:40 - 2014-10-29 03:00 - 00077824 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2015-04-10 16:40 - 2014-10-29 03:00 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2015-04-10 16:38 - 2015-02-04 00:58 - 00264000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2015-04-10 16:38 - 2015-02-04 00:58 - 00114496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys
2015-04-10 16:38 - 2015-02-04 00:58 - 00044024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2015-04-10 16:38 - 2015-02-03 00:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\winshfhc.dll
2015-04-10 16:38 - 2015-02-03 00:53 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\winshfhc.dll
2015-04-10 16:38 - 2015-01-30 04:01 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidbth.sys
2015-04-10 16:38 - 2015-01-30 04:00 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rfcomm.sys
2015-04-10 16:38 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2015-04-10 16:38 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-04-10 16:38 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2015-04-10 16:38 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2015-04-10 16:38 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-04-10 16:38 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\windows\SysWOW64\scesrv.dll
2015-04-10 16:38 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\windows\system32\scesrv.dll
2015-04-10 16:38 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-04-10 16:38 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
2015-04-10 16:38 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-04-10 16:38 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-04-10 16:38 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-04-10 16:38 - 2014-10-29 03:46 - 00081920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BTHUSB.SYS
2015-04-10 16:38 - 2014-10-29 03:46 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthenum.sys
2015-04-10 16:38 - 2014-10-29 03:45 - 01198080 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys
2015-04-10 16:38 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-04-10 16:38 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-04-10 16:38 - 2014-10-29 03:03 - 00241152 _____ (Microsoft Corporation) C:\windows\system32\fsquirt.exe
2015-04-10 16:38 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-04-10 16:38 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
2015-04-10 16:38 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
2015-04-10 16:37 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-04-10 16:37 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ahcache.sys
2015-04-10 16:37 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2015-04-10 16:37 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
2015-04-10 16:37 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2015-04-10 16:37 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2015-04-10 16:37 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2015-04-10 16:37 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-04-10 16:37 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
2015-04-10 16:37 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
2015-04-10 16:37 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2015-04-10 16:37 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
2015-04-10 16:37 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2015-04-10 16:37 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2015-04-10 16:37 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2015-04-10 16:37 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-04-10 16:37 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-04-10 16:37 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-04-10 16:37 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2015-04-10 16:37 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2015-04-10 16:37 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
2015-04-10 16:37 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2015-04-10 16:37 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2015-04-10 16:37 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2015-04-10 16:37 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2015-04-10 16:37 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
2015-04-10 16:37 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-04-10 16:37 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
2015-04-10 16:37 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
2015-04-10 16:37 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pdc.sys
2015-04-10 16:37 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelpep.sys
2015-04-10 16:34 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-04-10 16:34 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-04-10 16:34 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2015-04-10 16:34 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2015-04-10 16:34 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-04-10 16:34 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-04-10 16:33 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2015-04-10 16:33 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2015-04-10 16:33 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll
2015-04-10 16:33 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll
2015-04-10 16:33 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2015-04-10 16:33 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2015-04-10 16:33 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2015-04-10 16:33 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2015-04-10 16:33 - 2014-09-07 23:08 - 00389176 _____ () C:\windows\system32\ApnDatabase.xml
2015-04-10 16:33 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2015-04-10 16:33 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2015-04-10 16:33 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll
2015-04-10 16:33 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll
2015-04-10 16:33 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2015-04-10 16:33 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2015-04-10 16:33 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll
2015-04-10 16:33 - 2014-09-04 00:57 - 00921600 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
2015-04-10 16:33 - 2014-09-04 00:49 - 00626688 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
2015-04-10 16:33 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
2015-04-10 16:33 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\windows\system32\FXSCOMEX.dll
2015-04-10 16:33 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\FXSAPI.dll
2015-04-10 16:33 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll
2015-04-10 16:33 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSAPI.dll
2015-04-10 16:33 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll
2015-04-10 16:33 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2015-04-10 16:33 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2015-04-10 16:33 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2015-04-10 16:33 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2015-04-10 16:33 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll
2015-04-10 16:33 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll
2015-04-10 16:33 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll
2015-04-10 16:33 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
2015-04-10 16:33 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\prnntfy.dll
2015-04-10 16:33 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnntfy.dll
2015-04-10 16:33 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
2015-04-10 16:33 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
2015-04-10 16:33 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
2015-04-10 16:33 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
2015-04-10 16:32 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\wuaext.dll
2015-04-10 16:31 - 2014-08-29 02:58 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2015-04-10 16:31 - 2014-08-29 02:32 - 02779136 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2015-04-10 16:31 - 2014-08-29 01:59 - 03117568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2015-04-10 16:31 - 2014-08-29 00:56 - 02646016 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2015-04-10 16:31 - 2014-08-29 00:47 - 02321920 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2015-04-10 16:31 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll
2015-04-10 16:31 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-04-10 16:31 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll
2015-04-10 16:31 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-04-10 16:31 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll
2015-04-10 16:31 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll
2015-04-10 16:31 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll
2015-04-10 16:31 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\ProximityService.dll
2015-04-10 16:31 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll
2015-04-10 16:31 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wldap32.dll
2015-04-10 16:31 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll
2015-04-10 16:31 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll
2015-04-10 16:31 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\pcsvDevice.dll
2015-04-10 16:31 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-10 16:31 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll
2015-04-10 16:31 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll
2015-04-10 16:31 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll
2015-04-10 16:31 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-10 16:31 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll
2015-04-10 16:31 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
2015-04-10 16:31 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll
2015-04-10 16:31 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-04-10 16:31 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
2015-04-10 16:31 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll
2015-04-10 16:31 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2015-04-10 16:31 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe
2015-04-10 16:31 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-04-10 16:31 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2015-04-10 16:31 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2015-04-10 16:31 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys
2015-04-10 16:31 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2015-04-10 16:31 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2015-04-10 16:30 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2015-04-10 16:30 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2015-04-10 16:29 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\windows\explorer.exe
2015-04-10 16:29 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2015-04-10 16:29 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2015-04-10 16:29 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2015-04-10 16:29 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll
2015-04-10 16:29 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
2015-04-10 16:29 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll
2015-04-10 16:29 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\tcpmon.dll
2015-04-10 16:29 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2015-04-10 16:29 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2015-04-10 16:28 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2015-04-10 16:28 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
2015-04-10 16:28 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
2015-04-10 16:26 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-04-10 16:26 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-04-10 16:26 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe
2015-04-10 16:26 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
2015-04-10 16:26 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll
2015-04-10 16:26 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll
2015-04-10 16:26 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe
2015-04-10 16:26 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-04-10 16:26 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-04-10 16:26 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll
2015-04-10 16:26 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2015-04-10 16:26 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll
2015-04-10 16:26 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2015-04-10 16:26 - 2014-06-04 10:27 - 00114520 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2015-04-10 16:26 - 2014-06-04 06:31 - 00356352 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2015-04-10 16:26 - 2014-06-04 05:43 - 00281088 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2015-04-10 16:24 - 2015-04-10 16:24 - 00000000 ____D () C:\Users\Jason\AppData\Local\Intel_Corporation
2015-04-10 16:23 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe
2015-04-10 16:23 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe
2015-04-10 16:23 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe
2015-04-10 16:22 - 2015-04-10 16:22 - 00002018 _____ () C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2015-04-10 16:22 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\windows\system32\Drivers\HipShieldK.sys
2015-04-10 16:20 - 2015-04-16 23:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-10 16:20 - 2015-04-15 21:49 - 00001178 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-10 16:20 - 2015-04-15 21:49 - 00001166 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-10 16:20 - 2015-04-15 21:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-10 16:20 - 2015-04-10 16:20 - 00000000 ____D () C:\Users\Jason\AppData\Roaming\Mozilla
2015-04-10 16:20 - 2015-04-10 16:20 - 00000000 ____D () C:\Users\Jason\AppData\Local\Mozilla
2015-04-10 16:20 - 2015-04-10 16:20 - 00000000 ____D () C:\ProgramData\Mozilla
2015-04-10 16:03 - 2015-04-10 17:21 - 00000000 ____D () C:\ProgramData\T122078ED
2015-04-10 16:00 - 2015-04-10 16:01 - 40808112 _____ () C:\Users\Jason\Downloads\25535-678296-mozilla-firefox.exe
2015-04-10 15:58 - 2015-04-16 17:37 - 00000258 __RSH () C:\Users\Jason\ntuser.pol
2015-04-10 15:58 - 2015-04-16 17:37 - 00000000 ____D () C:\Program Files\SafeSearch
2015-04-10 15:58 - 2015-04-16 17:37 - 00000000 ____D () C:\Program Files (x86)\SoftwareUpdater
2015-04-10 15:58 - 2015-04-10 16:14 - 00000000 ____D () C:\Users\Jason\Documents\Add-in Express
2015-04-10 15:56 - 2015-04-16 23:30 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2015-04-10 15:56 - 2015-04-10 15:56 - 00000000 _____ () C:\END
2015-04-10 15:51 - 2015-04-16 23:49 - 00000000 ____D () C:\Users\Jason\AppData\Roaming\LSC
2015-04-10 15:51 - 2015-04-15 22:00 - 00000000 ____D () C:\Users\Jason\AppData\Local\Adobe
2015-04-10 15:51 - 2015-04-10 15:51 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_ldiagio_uefi_01009.Wdf
2015-04-10 15:50 - 2015-04-18 10:36 - 00003592 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-26934793-363194436-3154964498-1001
2015-04-10 15:50 - 2015-04-18 10:30 - 00003930 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{55EF7F58-D183-4020-A77F-639365F4CD7F}
2015-04-10 15:50 - 2015-04-10 15:50 - 00000000 __SHD () C:\Users\Jason\AppData\Local\EmieUserList
2015-04-10 15:50 - 2015-04-10 15:50 - 00000000 __SHD () C:\Users\Jason\AppData\Local\EmieSiteList
2015-04-10 15:49 - 2015-04-17 00:23 - 00000000 ____D () C:\Users\Jason\OneDrive
2015-04-10 15:47 - 2015-04-10 15:47 - 00000000 ____D () C:\Users\Jason\AppData\Local\LenovoBrowserGuard
2015-04-10 15:46 - 2015-04-10 15:46 - 00000000 ____D () C:\Users\Jason\AppData\Roaming\Intel Corporation
2015-04-10 15:45 - 2015-04-10 16:16 - 00000000 ____D () C:\Users\Jason\AppData\Roaming\Hightail for Lenovo
2015-04-10 15:45 - 2015-04-10 15:45 - 00000000 ____D () C:\windows\System32\Tasks\WPD
2015-04-10 15:43 - 2015-04-18 10:55 - 00000000 ____D () C:\Users\Jason\AppData\Local\VirtualStore
2015-04-10 15:43 - 2015-04-18 10:27 - 00011614 _____ () C:\Users\Jason\AppData\Local\BTServer.log
2015-04-10 15:43 - 2015-04-10 17:48 - 00000000 ____D () C:\Users\Jason\AppData\Local\Packages
2015-04-10 15:43 - 2015-04-10 15:51 - 00000000 ____D () C:\Users\Jason\AppData\Roaming\Adobe
2015-04-10 15:43 - 2015-04-10 15:43 - 00001449 _____ () C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-10 15:43 - 2015-04-10 15:43 - 00000139 _____ () C:\Users\Public\Desktop\eBay.url
2015-04-10 15:43 - 2015-04-10 15:43 - 00000000 ____D () C:\Users\Jason\Documents\My Bluetooth
2015-04-10 15:43 - 2015-04-10 15:43 - 00000000 ____D () C:\ProgramData\eBay
2015-04-10 15:41 - 2015-04-10 15:41 - 00000020 ___SH () C:\Users\Jason\ntuser.ini
2015-04-10 15:40 - 2015-04-16 17:37 - 00000000 ____D () C:\Users\Jason
2015-04-10 15:40 - 2015-04-10 15:45 - 00000000 ____D () C:\Users\Jason\AppData\Local\Pokki
2015-04-10 15:40 - 2014-11-20 11:50 - 00000000 ____D () C:\Users\Jason\AppData\Roaming\Macromedia
2015-04-10 15:40 - 2014-11-20 11:44 - 00000187 _____ () C:\Users\Jason\Desktop\Google Play Music.url
2015-04-10 15:40 - 2014-11-20 11:41 - 00000126 _____ () C:\Users\Jason\Desktop\Adobe Photo Offer.url
2015-04-10 15:40 - 2014-11-20 11:33 - 00000000 ___RD () C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-10 15:40 - 2014-11-20 10:52 - 00000000 ___RD () C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-10 15:40 - 2014-03-26 11:21 - 00000190 _____ () C:\Users\Jason\Desktop\FREE CALLS with Voxox.url
2015-04-10 15:40 - 2014-03-18 10:55 - 00000369 _____ () C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-04-10 15:40 - 2014-03-18 10:55 - 00000369 _____ () C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-04-10 15:40 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-10 15:40 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-18 12:01 - 2014-11-20 10:41 - 01329048 _____ () C:\windows\WindowsUpdate.log
2015-04-18 12:00 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sru
2015-04-18 10:31 - 2014-03-18 10:53 - 00865408 _____ () C:\windows\system32\PerfStringBackup.INI
2015-04-18 10:30 - 2014-11-20 11:44 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-04-18 10:30 - 2013-08-22 14:25 - 00000076 _____ () C:\windows\win.ini
2015-04-18 10:27 - 2013-08-22 15:46 - 00022956 _____ () C:\windows\setupact.log
2015-04-17 19:47 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
2015-04-17 18:07 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\AppReadiness
2015-04-17 14:51 - 2013-08-22 16:20 - 00000000 ____D () C:\windows\CbsTemp
2015-04-17 14:46 - 2013-08-22 16:36 - 00000000 ___HD () C:\windows\ELAMBKUP
2015-04-17 13:07 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\rescache
2015-04-17 00:22 - 2013-08-22 15:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-04-17 00:22 - 2013-08-22 15:44 - 00491864 _____ () C:\windows\system32\FNTCACHE.DAT
2015-04-17 00:21 - 2014-11-20 11:53 - 00002560 _____ () C:\windows\system32\VfService.trf
2015-04-17 00:21 - 2014-11-20 11:05 - 00137294 _____ () C:\Users\Public\CAFADEBUG.log
2015-04-17 00:21 - 2014-03-18 10:44 - 00022166 _____ () C:\windows\PFRO.log
2015-04-17 00:21 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\BBI
2015-04-16 23:51 - 2014-11-20 11:45 - 00000000 ____D () C:\ProgramData\Lenovo
2015-04-16 23:33 - 2014-03-18 10:38 - 00000000 ____D () C:\Program Files\Windows Journal
2015-04-16 23:33 - 2013-08-22 16:36 - 00000000 ___RD () C:\windows\ToastData
2015-04-16 23:33 - 2013-08-22 16:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel
2015-04-16 23:33 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-16 23:33 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-16 23:33 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\setup
2015-04-16 23:33 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\InputMethod
2015-04-16 23:33 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\setup
2015-04-16 23:33 - 2013-08-22 14:36 - 00000000 ____D () C:\windows\system32\oobe
2015-04-10 17:16 - 2014-11-20 11:46 - 00000000 ____D () C:\Program Files (x86)\McAfee
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\WinStore
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sr-Latn-RS
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sr-Latn-CS
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\MediaViewer
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\FileManager
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\Camera
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-04-10 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-04-10 16:56 - 2014-03-18 10:38 - 00000000 ____D () C:\windows\ShellNew
2015-04-10 16:56 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\IME
2015-04-10 16:53 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\System
2015-04-10 16:53 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\Help
2015-04-10 16:22 - 2014-11-20 11:45 - 00000000 ____D () C:\Program Files\lenovo
2015-04-10 16:22 - 2014-11-20 11:44 - 00000000 ____D () C:\windows\System32\Tasks\Lenovo
2015-04-10 16:22 - 2014-11-20 11:44 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2015-04-10 16:21 - 2014-11-20 11:46 - 00000000 ____D () C:\Program Files\Common Files\McAfee
2015-04-10 16:21 - 2014-11-20 11:44 - 00000000 ____D () C:\windows\Downloaded Installations
2015-04-10 16:19 - 2014-11-20 11:46 - 00000000 ____D () C:\ProgramData\McAfee
2015-04-10 15:58 - 2013-08-22 16:36 - 00000000 ___HD () C:\windows\system32\GroupPolicy
2015-04-10 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\GroupPolicy
2015-04-10 15:55 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\Resources
2015-04-10 15:47 - 2014-11-20 11:44 - 00000000 ____D () C:\Program Files (x86)\LenovoBrowserGuard
2015-04-10 15:44 - 2014-04-03 20:15 - 00000000 ____D () C:\windows\Panther
2015-04-10 15:43 - 2014-11-20 12:07 - 00123634 ____H () C:\windows\modules.log

==================== Files in the root of some directories =======

2015-04-10 15:43 - 2015-04-18 10:27 - 0011614 _____ () C:\Users\Jason\AppData\Local\BTServer.log
2014-11-20 11:05 - 2014-11-20 11:05 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Jason\AppData\Local\Temp\kis_setup.exe
C:\Users\Jason\AppData\Local\Temp\optprosetup.exe
C:\Users\Jason\AppData\Local\Temp\SPSetup.exe
C:\Users\Jason\AppData\Local\Temp\vcredist2012.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-20 10:36

==================== End Of Log ============================

Attached Files



BC AdBot (Login to Remove)

 


#2 Glarion

Glarion
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 18 April 2015 - 06:55 AM

Screenshot of the Survey Pop-up probelm...

Attached Files



#3 nasdaq

nasdaq

  • Malware Response Team
  • 39,559 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:12:31 AM

Posted 22 April 2015 - 09:48 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.
 
start

CreateRestorePoint:
CloseProcesses:

() C:\ProgramData\NetEngine\bin\D7\netengine.exe
(Pokki) C:\Users\Jason\AppData\Local\Pokki\Engine\StartMenuIndexer.exe
() C:\ProgramData\NetEngine\bin\D7\netengine.exe
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-26934793-363194436-3154964498-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
AppInit_DLLs-x32: c:\progra~2\lenovobrowserguard\lenovobrowserguard\bin\spvc32loader.dll => c:\Program Files (x86)\lenovobrowserguard\lenovobrowserguard\bin\spvc32loader.dll [173896 2014-08-25] (ClientConnect LTD)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKLM -> {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.safesearch.net/search?q={searchTerms}&p=sm=ie&c=wi&s=wi
SearchScopes: HKU\.DEFAULT -> {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-19 -> DefaultScope {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-19 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.safesearch.net/search?q={searchTerms}&p=sm=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-19 -> {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-20 -> DefaultScope {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-20 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.safesearch.net/search?q={searchTerms}&p=sm=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-20 -> {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
SearchScopes: HKU\S-1-5-21-26934793-363194436-3154964498-1001 -> {BA1BE292-1D15-488B-934D-008742212380} URL = http://www.safesearch.net/search?q={searchTerms}&p=s&m=ie&c=wi&s=wi
FF DefaultSearchUrl: hxxp://www.safesearch.net/search?p=s&q={searchTerms}&m=ff&c=wi&s=wi
FF SearchEngineOrder.1: Search
FF SelectedSearchEngine: Search
FF user.js: detected! => C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\18hqcghn.default\user.js [2015-04-17]
R4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]
S1 qrtltsql; \??\C:\windows\system32\drivers\qrtltsql.sys [X]
C:\Users\Jason\AppData\Local\Temp\kis_setup.exe
C:\Users\Jason\AppData\Local\Temp\optprosetup.exe
C:\Users\Jason\AppData\Local\Temp\SPSetup.exe
C:\Users\Jason\AppData\Local\Temp\vcredist2012.exe
C:\ProgramData\NetEngine
C:\Users\Jason\AppData\Local\Pokki
c:\Program Files (x86)\lenovobrowserguard\lenovobrowserguard\bin\spvc32loader.dll

End
Save the files as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the Report button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).
===

How is the computer running now?

Edited by nasdaq, 22 April 2015 - 09:48 AM.


#4 nasdaq

nasdaq

  • Malware Response Team
  • 39,559 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:12:31 AM

Posted 27 April 2015 - 08:11 AM

Are you still with me?

#5 nasdaq

nasdaq

  • Malware Response Team
  • 39,559 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:12:31 AM

Posted 03 May 2015 - 07:50 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users