Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unknown BPS. Possible MBR Rootkit


  • This topic is locked This topic is locked
9 replies to this topic

#1 priggs80

priggs80

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:42 AM

Posted 10 May 2015 - 10:40 AM

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by priggs (administrator) on STUDY-PC on 10-05-2015 09:10:28
Running from C:\Users\pvrig_000\Downloads
Loaded Profiles: priggs (Available profiles: Cindy & priggs)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
() C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(DELL INC.) C:\Program Files (x86)\DELL\DELLOSD\MediaButtons.exe
(Dell Inc.) C:\Program Files (x86)\DELL\SupportAssistAgent\bin\SupportAssistAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(DELL INC.) C:\Program Files (x86)\DELL\DELLOSD\DELLOSD.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Qualcomm Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe
() C:\Program Files\WindowsApps\ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0\CodeWriter.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Microsoft Corporation) C:\Windows\System32\wbengine.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7194840 2013-07-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-29] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtTray.exe [763520 2012-08-08] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [127616 2012-08-08] (Qualcomm Atheros Commnucations)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-20] (Intel Corporation)
HKLM-x32\...\Run: [ospd_us_898] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-05-06]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [DBARFileBackuped] -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\WINDOWS\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DBARFileNotBackuped] -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\WINDOWS\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll [2012-08-08] (Qualcomm Atheros Commnucations)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-05] (Oracle Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-05] (Oracle Corporation)
Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 
FireFox:
========
FF ProfilePath: C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default
FF DefaultSearchEngine.US: Google
FF NetworkProxy: "type", 0
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-05] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-05] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-25] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-25] (Google Inc.)
FF Extension: Simple Youtube and Video Converter - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\jid0-SQnwtgW1b8BsMB5PLV5WScEDWOjw@jetpack [2015-04-12]
FF Extension: WOT - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-03-12]
FF Extension: Bitdefender QuickScan - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2015-04-18]
FF Extension: FlashGot - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2015-03-29]
FF Extension: Download YouTube Videos as MP4 - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2015-03-29]
FF Extension: Web Developer - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi [2015-04-28]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2015-04-12]
FF HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF Extension: No Name - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\extensions\{988da70d-b78d-44a1-a9c7-ed11832a9e2e}.xpi [Not Found]
 
Chrome: 
=======
CHR DefaultSearchKeyword: Profile 4 -> bing.com
CHR DefaultNewTabURL: Profile 4 -> https://www.bing.com/chrome/newtab
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.7.796\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)
CHR Plugin: (Chrome PDF Viewer) - chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/ No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\internal-nacl-plugin No File
CHR Plugin: (Chrome PDF Viewer) - internal-pdf-viewer No File
CHR Profile: C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4
CHR Extension: (Google Docs) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-30]
CHR Extension: (Google Drive) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-30]
CHR Extension: (YouTube) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-30]
CHR Extension: (Google Search) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-30]
CHR Extension: (20 Things I Learned About Browsers & the Web) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\dfdlnlenokgjjchimonbekcmnofmlibg [2015-04-30]
CHR Extension: (Black Menu for Google™) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\eignhdfgaldabilaaegmdfbajngjmoke [2015-04-30]
CHR Extension: (Care your Eyes) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\fidmpnedniahpnkeomejhnepmbdamlhl [2015-04-30]
CHR Extension: (Accessibility Developer Tools) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\fpkknkljclfencbdbgkenhalefipecmb [2015-04-30]
CHR Extension: (HTTPS Everywhere) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2015-04-30]
CHR Extension: (Bookmark Manager) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-30]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-30]
CHR Extension: (JSON Editor) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lhkmoheomjbkfloacpgllgjcamhihfaj [2015-04-30]
CHR Extension: (BrowserStack Local) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\mfiddfehmfdojjfdpfngagldgaaafcfo [2015-04-30]
CHR Extension: (Google Wallet) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-30]
CHR Extension: (Gmail) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-30]
CHR Extension: (Secure Shell) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pnhechapfaindjhompbnflcldabbghjo [2015-04-30]
CHR Extension: (Spot The Differences!) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pniinickecbjegedmgagmgikbolfgaij [2015-04-30]
 
Opera: 
=======
OPR Extension: (360 Internet Protection) - C:\Users\pvrig_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnpeghmjdfdmneiljeibjnemfdkojdhl [2015-04-30]
OPR Extension: (HTTPS Everywhere) - C:\Users\pvrig_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\edaplhobcmdaneconioghljnnopmkhgm [2015-04-30]
OPR Extension: (Night Mode) - C:\Users\pvrig_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\hlemcagbaifmcnpohjbjmpbfjnjinkgc [2015-04-30]
OPR Extension: (Web Developer) - C:\Users\pvrig_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\kddhmaadmaklcieonhggddempagbakph [2015-04-30]
OPR Extension: (Magic Actions for YouTube™) - C:\Users\pvrig_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\nlffnljnicbkfhnlomjhjlebndachaka [2015-04-30]
StartMenuInternet: (HKU\S-1-5-21-3201845695-133406859-1892422958-1004) OperaStable - "C:\Users\pvrig_000\AppData\Local\Programs\Opera\Launcher.exe"
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [211072 2012-08-08] (Qualcomm Atheros Commnucations) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 Dell WMI Service; C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe [73728 2012-08-01] () [File not signed]
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2552528 2015-01-30] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201424 2015-01-30] (Dell Inc.)
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [211320 2015-02-11] (Dell Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-07-20] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-18] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [1915920 2014-04-04] (SoftThinks SAS)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [19288 2015-02-19] (Dell Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-05-01] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-05-01] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [77824 2012-08-07] (Atheros) [File not signed]
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-08] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)
R3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)
R3 DellProf; C:\Windows\system32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation)
R3 FintekCIR; C:\Windows\system32\DRIVERS\FintekCIR.sys [33128 2012-06-07] (Fintek)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-05-10] ()
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-05-01] (Microsoft Corporation)
S3 keycrypt; system32\DRIVERS\KeyCrypt64.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== Three Months Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-05-10 09:10 - 2015-05-10 09:11 - 00018062 _____ () C:\Users\pvrig_000\Downloads\FRST.txt
2015-05-10 09:10 - 2015-05-10 09:10 - 00000000 ____D () C:\FRST
2015-05-10 09:09 - 2015-05-10 09:09 - 00000000 ___RD () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-05-10 09:07 - 2015-05-10 09:07 - 00000000 ___HD () C:\WINDOWS\AxInstSV
2015-05-10 09:03 - 2015-05-10 09:03 - 02102784 _____ (Farbar) C:\Users\pvrig_000\Downloads\FRST64.exe
2015-05-10 08:57 - 2015-04-30 23:20 - 00002205 _____ () C:\Users\pvrig_000\Desktop\Google Chrome.lnk
2015-05-10 08:41 - 2015-05-10 08:41 - 00005223 _____ () C:\Users\pvrig_000\Downloads\aswMBR.txt
2015-05-10 08:41 - 2015-05-10 08:41 - 00000512 _____ () C:\Users\pvrig_000\Downloads\MBR.dat
2015-05-10 08:02 - 2015-05-10 08:02 - 00000390 _____ () C:\Users\pvrig_000\Downloads\RootkitRemover_20150510_080209.log
2015-05-10 07:50 - 2015-05-10 07:50 - 01063160 _____ (Bleeping Computer, LLC) C:\Users\pvrig_000\Downloads\iExplore64-24775.exe
2015-05-10 07:49 - 2015-05-10 07:49 - 01063160 _____ (Bleeping Computer, LLC) C:\Users\pvrig_000\Downloads\iExplore64.exe
2015-05-10 07:44 - 2015-05-10 09:07 - 00000000 ____D () C:\WINDOWS\pss
2015-05-10 07:12 - 2015-05-10 07:13 - 00000000 ____D () C:\ProgramData\F-Secure
2015-05-10 07:12 - 2015-05-10 07:12 - 00572456 _____ (F-Secure Corporation) C:\Users\pvrig_000\Downloads\F-SecureOnlineScanner.exe
2015-05-10 07:12 - 2015-05-10 07:12 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\F-Secure
2015-05-10 07:09 - 2015-05-10 07:09 - 00380416 _____ () C:\Users\pvrig_000\Downloads\l9fontgy.exe
2015-05-10 06:56 - 2015-05-10 06:56 - 00415232 _____ (Farbar) C:\Users\pvrig_000\Downloads\FSS (1).exe
2015-05-10 06:55 - 2015-05-10 06:55 - 16937048 _____ () C:\Users\pvrig_000\Downloads\RogueKiller.exe
2015-05-10 06:55 - 2015-05-10 06:55 - 02204160 _____ () C:\Users\pvrig_000\Downloads\adwcleaner_4.203.exe
2015-05-10 06:55 - 2015-05-10 06:55 - 00852630 _____ () C:\Users\pvrig_000\Downloads\SecurityCheck.exe
2015-05-10 06:53 - 2015-05-10 06:53 - 00000000 ____D () C:\Users\pvrig_000\Pavark
2015-05-10 06:52 - 2015-05-10 06:53 - 00000296 _____ () C:\Users\pvrig_000\Downloads\RootkitRemover_20150510_065244.log
2015-05-10 06:51 - 2015-05-10 06:52 - 00002286 _____ () C:\Users\pvrig_000\Downloads\FSS.txt
2015-05-10 06:42 - 2015-05-10 06:42 - 00063874 _____ () C:\Users\pvrig_000\Downloads\Extras.Txt
2015-05-10 06:41 - 2015-05-10 06:41 - 00207160 _____ () C:\Users\pvrig_000\Downloads\OTL.Txt
2015-05-10 06:40 - 2015-05-10 06:40 - 00415232 _____ (Farbar) C:\Users\pvrig_000\Downloads\FSS.exe
2015-05-10 06:38 - 2015-05-10 06:38 - 00688992 _____ (Swearware) C:\Users\pvrig_000\Downloads\dds.com
2015-05-10 06:35 - 2015-05-10 06:35 - 00092608 _____ () C:\Users\pvrig_000\Desktop\Show-Hidden.txt
2015-05-10 06:33 - 2015-05-10 06:33 - 00783120 _____ (McAfee, Inc.) C:\Users\pvrig_000\Downloads\rootkitremover.exe
2015-05-10 06:32 - 2015-05-10 06:32 - 00602112 _____ (OldTimer Tools) C:\Users\pvrig_000\Downloads\OTL.exe
2015-05-10 06:30 - 2015-05-10 06:30 - 00386464 _____ (Bleeping Computer, LLC) C:\Users\pvrig_000\Downloads\show-hidden.exe
2015-05-10 06:26 - 2015-05-10 07:50 - 00001498 _____ () C:\Users\pvrig_000\Desktop\Rkill.txt
2015-05-10 06:24 - 2015-05-10 06:28 - 00000000 ____D () C:\Users\pvrig_000\eclipse
2015-05-10 06:22 - 2015-05-10 06:23 - 00562272 _____ (Oracle Corporation) C:\Users\pvrig_000\Downloads\chromeinstall-8u45.exe
2015-05-10 06:19 - 2015-05-10 06:23 - 215332017 _____ () C:\Users\pvrig_000\Downloads\eclipse-standard-luna-SR2-win32-x86_64.zip
2015-05-10 05:51 - 2015-05-10 05:52 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js
2015-05-10 05:51 - 2015-05-10 05:51 - 00000000 ____D () C:\Program Files\nodejs
2015-05-10 05:50 - 2015-05-10 05:51 - 08663040 _____ () C:\Users\pvrig_000\Downloads\node-v0.12.2-x64.msi
2015-05-10 05:41 - 2015-05-10 05:41 - 00000000 ____D () C:\Users\pvrig_000\Desktop\my_project
2015-05-10 05:40 - 2015-05-10 05:40 - 00761635 _____ () C:\Users\pvrig_000\Downloads\web-starter-kit-0.5.4.zip
2015-05-10 00:13 - 2015-05-10 00:16 - 31006384 _____ () C:\Users\pvrig_000\Downloads\Little_Lupe_720P_1500K_31414192.mp4
2015-05-09 07:02 - 2015-05-09 07:04 - 79694322 _____ () C:\Users\pvrig_000\Downloads\Smoking_hot_brunette_Tiffany_Brookes_gets_brutally_bleeped_58475.mp4
2015-05-06 12:41 - 2015-05-06 12:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-05-06 12:41 - 2015-05-06 12:41 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2015-05-06 07:00 - 2015-05-10 09:11 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-06 07:00 - 2015-05-09 14:34 - 00000892 _____ () C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-05-06 07:00 - 2015-05-06 12:41 - 00001949 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-05-06 07:00 - 2015-05-06 12:41 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2015-05-06 07:00 - 2015-05-06 07:00 - 00003858 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-05-06 07:00 - 2015-05-06 07:00 - 00003718 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-05-06 07:00 - 2015-05-06 07:00 - 00000000 ____D () C:\ProgramData\McAfee
2015-05-06 06:54 - 2015-05-06 07:00 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Adobe
2015-05-06 04:17 - 2015-05-06 04:17 - 00000000 __SHD () C:\Users\pvrig_000\AppData\Local\EmieUserList
2015-05-06 04:17 - 2015-05-06 04:17 - 00000000 __SHD () C:\Users\pvrig_000\AppData\Local\EmieSiteList
2015-05-06 04:17 - 2015-05-06 04:17 - 00000000 __SHD () C:\Users\pvrig_000\AppData\Local\EmieBrowserModeList
2015-05-02 17:50 - 2015-03-22 18:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-05-02 17:50 - 2014-12-02 19:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-05-02 17:50 - 2014-11-09 19:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-05-02 17:50 - 2014-11-09 19:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-05-02 17:50 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-05-02 17:50 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-05-02 17:49 - 2015-01-19 14:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-05-02 17:49 - 2014-07-23 23:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-05-02 17:49 - 2014-07-23 23:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-05-01 13:27 - 2015-05-01 13:28 - 00000838 _____ () C:\Users\pvrig_000\Desktop\priggs.lnk
2015-05-01 13:03 - 2015-05-01 13:03 - 00000000 ___RD () C:\Users\pvrig_000\Documents\My Flash
2015-05-01 13:00 - 2015-05-01 13:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Audio
2015-05-01 12:59 - 2015-05-01 13:00 - 00000000 ___HD () C:\Program Files (x86)\Temp
2015-05-01 12:59 - 2015-05-01 12:59 - 00001536 _____ () C:\WINDOWS\SysWOW64\RtkMsgs.dll
2015-05-01 12:59 - 2015-05-01 12:59 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-05-01 12:59 - 2013-07-30 21:16 - 03564376 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2015-05-01 12:59 - 2013-07-30 18:14 - 02585304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2015-05-01 12:59 - 2013-07-30 15:04 - 00397080 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBWrp64.dll
2015-05-01 12:59 - 2013-07-30 14:47 - 00620273 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2015-05-01 12:59 - 2013-07-30 14:18 - 01994008 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBAPO264.dll
2015-05-01 12:59 - 2013-07-30 14:18 - 01725720 _____ (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\MBAPO232.dll
2015-05-01 12:59 - 2013-07-29 19:41 - 00147672 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2015-05-01 12:59 - 2013-07-29 14:48 - 30311936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCORES64.dat
2015-05-01 12:59 - 2013-07-26 15:05 - 00617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 14042880 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 02032896 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 01904384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 00920832 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 00660224 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2015-05-01 12:59 - 2013-07-22 16:37 - 01004248 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-05-01 12:59 - 2013-07-19 16:55 - 02080472 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2015-05-01 12:59 - 2013-07-18 15:48 - 02795224 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-05-01 12:59 - 2013-07-17 17:17 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2015-05-01 12:59 - 2013-06-05 22:42 - 00208072 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-05-01 12:59 - 2013-04-24 18:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2015-05-01 12:59 - 2013-02-20 19:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2015-05-01 12:59 - 2013-01-11 17:27 - 00628504 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBTHX64.dll
2015-05-01 12:59 - 2013-01-11 17:27 - 00563992 _____ (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\MBTHX32.dll
2015-05-01 03:09 - 2015-05-01 03:09 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\GlassWire
2015-05-01 03:08 - 2015-05-01 03:08 - 00000000 ____D () C:\ProgramData\GlassWire
2015-05-01 03:00 - 2015-05-10 08:42 - 00000000 ____D () C:\AdwCleaner
2015-05-01 03:00 - 2015-05-01 03:00 - 00000000 ____D () C:\Users\pvrig_000\Downloads\RootkitRevealer
2015-05-01 02:59 - 2015-05-01 13:22 - 00000000 ___DC () C:\WINDOWS\Panther
2015-05-01 02:59 - 2015-05-01 02:59 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-05-01 02:59 - 2015-05-01 02:59 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-05-01 02:57 - 2015-05-01 02:57 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\pvrig_000\Downloads\iExplore.exe
2015-05-01 02:57 - 2015-05-01 02:57 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-05-01 02:57 - 2015-05-01 02:57 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-05-01 02:57 - 2015-05-01 02:57 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-05-01 02:57 - 2015-05-01 02:57 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-05-01 02:56 - 2015-05-01 02:56 - 01113920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-05-01 02:56 - 2015-05-01 02:56 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-05-01 02:56 - 2015-05-01 02:56 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-05-01 02:56 - 2015-05-01 02:56 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-05-01 02:55 - 2015-05-01 20:49 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-05-01 02:55 - 2015-05-01 02:55 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-05-01 02:55 - 2015-05-01 02:55 - 04178944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-05-01 02:55 - 2015-05-01 02:55 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-05-01 02:55 - 2015-05-01 02:55 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-05-01 02:55 - 2015-05-01 02:55 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-05-01 02:55 - 2015-05-01 02:55 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-05-01 02:55 - 2015-05-01 02:55 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-05-01 02:55 - 2015-05-01 02:55 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00264000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-05-01 02:55 - 2015-05-01 02:55 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-05-01 02:55 - 2015-05-01 02:55 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00044024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-05-01 02:55 - 2015-05-01 02:55 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-05-01 02:54 - 2015-05-01 02:54 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-05-01 02:54 - 2015-05-01 02:54 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00396419 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-05-01 02:54 - 2015-05-01 02:54 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-05-01 02:54 - 2015-05-01 02:54 - 00167424 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2015-05-01 02:54 - 2015-05-01 02:54 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-05-01 02:54 - 2015-05-01 02:54 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-05-01 02:54 - 2015-05-01 02:54 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 02257408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-05-01 02:53 - 2015-05-01 02:53 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-05-01 02:53 - 2015-05-01 02:53 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-05-01 02:53 - 2015-05-01 02:53 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-05-01 02:53 - 2015-05-01 02:53 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-05-01 02:53 - 2015-05-01 02:53 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-05-01 02:53 - 2015-05-01 02:53 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00003168 _____ () C:\WINDOWS\System32\Tasks\{BD26E7B5-12DD-418F-9DD2-6BF51C116116}
2015-05-01 02:53 - 2015-05-01 02:53 - 00000000 ____D () C:\Users\pvrig_000\Downloads\TMRBLog
2015-05-01 02:52 - 2015-05-01 02:52 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-05-01 02:52 - 2015-05-01 02:52 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-05-01 02:52 - 2015-05-01 02:52 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-05-01 02:51 - 2015-05-01 02:51 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-05-01 02:51 - 2015-05-01 02:51 - 02484224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-05-01 02:51 - 2015-05-01 02:51 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-05-01 02:51 - 2015-05-01 02:51 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-05-01 02:51 - 2015-05-01 02:51 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-05-01 02:51 - 2015-05-01 02:51 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-05-01 02:51 - 2015-05-01 02:51 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-05-01 02:50 - 2015-05-01 02:50 - 22291584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-05-01 02:50 - 2015-05-01 02:50 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-05-01 02:50 - 2015-05-01 02:50 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-05-01 02:50 - 2015-05-01 02:50 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-05-01 02:50 - 2015-05-01 02:50 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-05-01 02:50 - 2015-05-01 02:50 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-05-01 02:50 - 2015-05-01 02:50 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-05-01 02:50 - 2015-05-01 02:50 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-05-01 02:50 - 2015-05-01 02:50 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-05-01 02:50 - 2015-05-01 02:50 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-05-01 02:49 - 2015-05-01 02:49 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-05-01 02:49 - 2015-05-01 02:49 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-05-01 02:49 - 2015-05-01 02:49 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2015-05-01 02:49 - 2015-05-01 02:49 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-05-01 02:49 - 2015-05-01 02:49 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-05-01 02:49 - 2015-05-01 02:49 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-05-01 02:49 - 2015-05-01 02:49 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-05-01 02:49 - 2015-05-01 02:49 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-05-01 02:49 - 2015-05-01 02:49 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-05-01 02:45 - 2015-05-01 02:45 - 00000000 ____D () C:\Program Files\Reference Assemblies
2015-05-01 02:45 - 2015-05-01 02:45 - 00000000 ____D () C:\Program Files\MSBuild
2015-05-01 02:45 - 2015-05-01 02:45 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2015-05-01 02:45 - 2015-05-01 02:45 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-05-01 02:44 - 2015-05-01 02:44 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2015-05-01 02:44 - 2015-05-01 02:44 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2015-05-01 02:44 - 2013-08-03 00:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-05-01 02:44 - 2013-08-03 00:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-01 02:44 - 2013-08-03 00:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-05-01 02:44 - 2013-08-03 00:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-01 02:43 - 2015-05-01 02:43 - 00050477 _____ () C:\Users\pvrig_000\Downloads\Defogger.exe
2015-05-01 01:59 - 2015-05-09 06:07 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3201845695-133406859-1892422958-1004
2015-05-01 01:20 - 2015-05-01 03:02 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-01 01:20 - 2015-05-01 01:20 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-01 01:20 - 2015-05-01 01:20 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-01 01:19 - 2015-05-01 01:19 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-01 01:09 - 2015-05-01 01:09 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-STUDY-PC-Windows-8.1-(64-bit).dat
2015-05-01 01:09 - 2015-05-01 01:09 - 00000000 ____D () C:\RegBackup
2015-05-01 01:07 - 2015-05-01 01:08 - 05198336 _____ (AVAST Software) C:\Users\pvrig_000\Downloads\aswMBR.exe
2015-05-01 01:06 - 2015-05-01 01:06 - 02716306 _____ (Thisisu) C:\Users\pvrig_000\Downloads\JRT.exe
2015-05-01 01:05 - 2015-05-01 01:06 - 16502728 _____ (Malwarebytes Corp.) C:\Users\pvrig_000\Downloads\mbar-1.09.1.1004.exe
2015-05-01 01:02 - 2015-05-01 01:02 - 00000144 _____ () C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-05-01 00:49 - 2015-05-01 00:49 - 00000932 _____ () C:\Users\pvrig_000\Desktop\Downloads.lnk
2015-04-30 23:23 - 2015-04-30 23:23 - 00001444 _____ () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-30 23:22 - 2015-04-30 23:22 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-04-30 23:22 - 2015-04-30 23:22 - 00000020 ___SH () C:\Users\pvrig_000\ntuser.ini
2015-04-30 23:20 - 2015-05-10 09:09 - 02023267 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-30 23:20 - 2015-04-30 23:20 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat
2015-04-30 23:13 - 2015-04-30 23:13 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-04-30 23:11 - 2015-04-30 23:11 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2015-04-30 23:10 - 2015-05-10 06:53 - 00000000 ____D () C:\Users\pvrig_000
2015-04-30 23:10 - 2015-04-30 23:20 - 00030483 _____ () C:\WINDOWS\diagwrn.xml
2015-04-30 23:10 - 2015-04-30 23:20 - 00030483 _____ () C:\WINDOWS\diagerr.xml
2015-04-30 23:10 - 2015-04-30 23:18 - 00000000 ____D () C:\Users\Cindy
2015-04-30 23:10 - 2015-04-30 23:11 - 00000000 ___RD () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-30 23:10 - 2015-04-30 23:11 - 00000000 ___RD () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-30 23:10 - 2015-04-30 23:10 - 00000000 ___RD () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-30 23:10 - 2015-04-30 23:10 - 00000000 ___RD () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-30 23:10 - 2015-04-30 23:10 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-04-30 23:10 - 2014-11-21 11:57 - 00000000 ___RD () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-30 23:10 - 2014-11-21 11:57 - 00000000 ___RD () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-30 23:10 - 2014-11-21 04:52 - 00000369 _____ () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-04-30 23:10 - 2014-11-21 04:52 - 00000369 _____ () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-04-30 23:10 - 2014-11-21 04:52 - 00000369 _____ () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-04-30 23:10 - 2014-11-21 04:52 - 00000369 _____ () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-04-30 23:10 - 2013-08-22 11:36 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-04-30 23:03 - 2015-05-01 13:00 - 00340476 _____ () C:\WINDOWS\system32\Drivers\rtwavesskdy.dat
2015-04-30 23:03 - 2015-05-01 13:00 - 00080824 _____ () C:\WINDOWS\system32\Drivers\RTWAVES30.dat
2015-04-30 23:03 - 2015-05-01 13:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2015-04-30 23:03 - 2015-04-30 23:12 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-04-30 23:03 - 2015-04-30 23:03 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2015-04-30 23:03 - 2015-04-30 23:03 - 00000000 ____D () C:\Program Files\Realtek
2015-04-30 23:02 - 2014-10-01 19:54 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-04-30 23:02 - 2014-10-01 19:54 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-04-30 14:40 - 2015-04-30 14:40 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\AntiLogger Free
2015-04-30 14:30 - 2015-04-30 14:30 - 00000000 ____D () C:\Users\Cindy\AppData\Local\AntiLogger Free
2015-04-30 14:29 - 2015-04-30 14:30 - 00000000 ____D () C:\Users\Cindy\Downloads\backups
2015-04-30 14:26 - 2015-04-30 14:26 - 00009016 _____ () C:\Users\Cindy\Downloads\hijackthis.log
2015-04-30 14:25 - 2015-04-30 14:25 - 00380416 _____ () C:\Users\Cindy\Downloads\tguj0f4q.exe
2015-04-30 14:24 - 2015-04-30 14:24 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Cindy\Downloads\tdsskiller.exe
2015-04-30 14:22 - 2015-04-30 14:22 - 00388608 _____ (Trend Micro Inc.) C:\Users\Cindy\Downloads\HijackThis.exe
2015-04-30 14:21 - 2015-04-30 14:21 - 03688000 _____ (Zemana Ltd. ) C:\Users\Cindy\Downloads\AntiLoggerFree_Setup.exe
2015-04-30 14:20 - 2015-04-30 14:20 - 00880208 _____ (Google Inc.) C:\Users\Cindy\Downloads\ChromeSetup.exe
2015-04-30 14:07 - 2015-04-30 14:07 - 20594776 _____ () C:\Users\Cindy\Downloads\RogueKillerX64 (1).exe
2015-04-30 14:01 - 2015-04-30 14:04 - 00001366 _____ () C:\Users\Cindy\Desktop\Rkill.txt
2015-04-30 14:01 - 2015-04-30 14:01 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\Cindy\Downloads\iExplore (1).exe
2015-04-30 14:01 - 2015-04-30 14:01 - 01063160 _____ (Bleeping Computer, LLC) C:\Users\Cindy\Downloads\iExplore (1)64.exe
2015-04-30 13:50 - 2015-04-30 23:11 - 00000000 ___RD () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-04-30 08:57 - 2015-04-30 08:57 - 00004052 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1430398659
2015-04-30 08:57 - 2015-04-30 08:57 - 00001353 _____ () C:\Users\pvrig_000\Desktop\Opera.lnk
2015-04-30 08:57 - 2015-04-30 08:57 - 00001353 _____ () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-04-30 08:57 - 2015-04-30 08:57 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Opera Software
2015-04-30 08:57 - 2015-04-30 08:57 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Opera Software
2015-04-30 03:18 - 2015-04-30 23:13 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-04-30 00:20 - 2015-04-30 00:20 - 00000000 ____D () C:\Users\Public\Documents\atheros
2015-04-26 07:45 - 2015-04-27 11:40 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\tor
2015-04-26 05:30 - 2015-04-26 05:31 - 00001535 _____ () C:\Users\pvrig_000\Desktop\iexplore.exe.lnk
2015-04-26 02:01 - 2015-04-26 02:01 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Microsoft_Corporation
2015-04-26 01:51 - 2015-05-09 14:18 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2C5CD671-F092-4585-B885-D8CF17D86EBE}
2015-04-26 01:51 - 2015-04-30 23:13 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2015-04-25 23:35 - 2015-04-25 23:35 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Apps\2.0
2015-04-25 12:05 - 2015-04-25 12:05 - 00003212 _____ () C:\WINDOWS\System32\Tasks\{FAAAF6C1-00EE-4C67-B030-D661A7A20366}
2015-04-25 11:52 - 2015-04-25 11:56 - 15291515 _____ () C:\Users\pvrig_000\Downloads\Red Hot Chili Peppers - Otherside [Official Music Video].mp4
2015-04-25 11:38 - 2015-04-25 11:43 - 05155384 _____ () C:\Users\pvrig_000\Downloads\▶_Red_Hot_Chili_Peppers_Californication_Official_Music_Video.m4a
2015-04-24 03:18 - 2015-04-24 03:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-24 01:04 - 2015-05-10 07:06 - 00000000 ____D () C:\Users\pvrig_000\Downloads\SysinternalsSuite
2015-04-24 01:00 - 2015-04-24 01:00 - 00000000 ____D () C:\Users\pvrig_000\Downloads\TCPView
2015-04-23 20:24 - 2015-04-23 20:24 - 00171008 _____ () C:\Users\pvrig_000\Downloads\_Thumbs.db
2015-04-23 12:51 - 2015-04-23 12:52 - 11041130 _____ () C:\Users\pvrig_000\Downloads\Wiz Khalifa - Wake Up.mp4
2015-04-23 12:51 - 2015-04-23 12:51 - 09695576 _____ () C:\Users\pvrig_000\Downloads\Wiz Khalifa - No Sleep.mp4
2015-04-23 12:44 - 2015-04-23 12:47 - 78500070 _____ () C:\Users\pvrig_000\Downloads\Lil Wayne - Love Me (Explicit) ft. Drake, Future.mp4
2015-04-18 00:03 - 2015-04-18 00:03 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-04-16 22:08 - 2015-04-16 22:08 - 00000000 ____D () C:\Users\pvrig_000\Desktop\GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}
2015-04-16 19:46 - 2015-05-01 13:04 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\SWF.max
2015-04-16 08:43 - 2015-04-18 12:46 - 00000000 ____D () C:\Users\pvrig_000\Desktop\soFRESH!
2015-04-16 03:33 - 2015-04-16 03:34 - 56240398 _____ () C:\Users\pvrig_000\Downloads\Breakmafia and bbk - kulman remix.wav
2015-04-16 03:29 - 2015-04-16 03:30 - 71504060 _____ () C:\Users\pvrig_000\Downloads\work it!.wav
2015-04-16 03:14 - 2015-05-06 08:01 - 00000000 ____D () C:\Users\pvrig_000\Desktop\Mixes
2015-04-16 01:41 - 2015-04-16 01:41 - 18178736 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2015-04-12 08:42 - 2015-04-12 08:43 - 47989622 _____ () C:\Users\pvrig_000\Downloads\18 Defying Chronos (Original Mix).aif
2015-04-12 08:41 - 2015-04-12 08:42 - 42451782 _____ () C:\Users\pvrig_000\Downloads\17 Pitfall (Original Mix).aif
2015-04-12 08:40 - 2015-04-12 08:41 - 39847158 _____ () C:\Users\pvrig_000\Downloads\15 Bounce, Shake, Move (Original Mix.aif
2015-04-12 08:33 - 2015-04-12 08:34 - 53199238 _____ () C:\Users\pvrig_000\Downloads\13 Listen To The Drummer (Original M.aif
2015-04-12 07:25 - 2015-04-12 07:26 - 48314306 _____ () C:\Users\pvrig_000\Downloads\12 L.B.S.G. (Original Mix).aif
2015-04-12 07:24 - 2015-04-12 07:24 - 35939270 _____ () C:\Users\pvrig_000\Downloads\11 Boogie Down (Original Mix).aif
2015-04-12 07:14 - 2015-04-12 07:15 - 43104102 _____ () C:\Users\pvrig_000\Downloads\10 Disaster Alert (Original Mix).aif
2015-04-12 07:10 - 2015-04-12 07:10 - 32030370 _____ () C:\Users\pvrig_000\Downloads\09 Hun'ed Dolla' Bills (Original Mix.aif
2015-04-12 07:08 - 2015-04-12 07:09 - 42778046 _____ () C:\Users\pvrig_000\Downloads\08 Counterpoint Confusion (Original.aif
2015-04-12 06:49 - 2015-04-12 06:50 - 43103942 _____ () C:\Users\pvrig_000\Downloads\07 Kicked Out (Original Mix).aif
2015-04-12 06:48 - 2015-04-12 06:49 - 45709122 _____ () C:\Users\pvrig_000\Downloads\06 Corpus Callosum (Original Mix).aif
2015-04-12 06:46 - 2015-04-12 06:47 - 42453182 _____ () C:\Users\pvrig_000\Downloads\05 Visions of Time (Original Mix).aif
2015-04-12 06:45 - 2015-04-12 06:46 - 37894770 _____ () C:\Users\pvrig_000\Downloads\04 Once Upon A Time In South Florida.aif
2015-04-12 06:44 - 2015-04-12 06:45 - 47661626 _____ () C:\Users\pvrig_000\Downloads\03 Big Ups and Down Lows (Original M.aif
2015-04-12 06:41 - 2015-04-12 06:42 - 37241722 _____ () C:\Users\pvrig_000\Downloads\02 Festivále (Original Mix).aif
2015-04-12 06:39 - 2015-04-12 06:40 - 48966382 _____ () C:\Users\pvrig_000\Downloads\01 What You Really Want (Original Mi.aif
2015-04-12 03:20 - 2015-04-12 03:21 - 08043860 _____ () C:\Users\pvrig_000\Downloads\Aggresivnes - Playing With Fire (Original Mix).mp4
2015-04-10 12:25 - 2015-04-10 12:25 - 04809522 _____ () C:\Users\pvrig_000\Downloads\Mutantbreakz Feat. MC Bestbasstard - Shine On (Original Mix).mp4
2015-04-10 12:05 - 2015-04-10 12:05 - 10139756 _____ () C:\Users\pvrig_000\Downloads\HateNBeanz- DropDatLow (Mutantbreakz remix).mp4
2015-04-10 11:42 - 2015-04-10 11:43 - 15542055 _____ () C:\Users\pvrig_000\Downloads\MutantBreakz - Genesis.mp4
2015-04-10 11:37 - 2015-04-10 11:37 - 04335869 _____ () C:\Users\pvrig_000\Downloads\MutantBreakz _ PuRe SX - One Day Booty (Original Mix) BreakBeat 2013.mp4
2015-04-10 11:33 - 2015-04-10 11:33 - 07732083 _____ () C:\Users\pvrig_000\Downloads\PuRe SX _ Mutantbreakz - Seven Nation Booty.mp4
2015-04-09 20:41 - 2015-04-09 20:41 - 00000000 ___RD () C:\Users\pvrig_000\Documents\Notes
2015-04-08 12:22 - 2015-04-10 15:08 - 00000000 ____D () C:\Users\pvrig_000\Downloads\2_mp3_files (online-audio-converter.com)
2015-04-08 08:50 - 2015-04-08 08:50 - 26500754 _____ () C:\Users\pvrig_000\Downloads\Curtis B vs Rob Analyze Lock N Load original mix (preview).wav
2015-04-07 11:54 - 2015-04-07 11:54 - 00000000 ____D () C:\Users\pvrig_000\Documents\Fax
2015-04-05 16:12 - 2015-04-05 16:12 - 00000000 _____ () C:\Users\pvrig_000\Documents\Wale - Ambition feat. Meek Mill  Rick Ross (Official Video) - YouTube.3g
2015-03-29 15:18 - 2015-03-29 15:19 - 04402262 _____ () C:\Users\pvrig_000\Documents\Agent K - This Beat (Official Track) Ravesta Records - Breakbeat - YouTube.flv
2015-03-25 03:02 - 2015-03-04 03:26 - 00011105 ____N () C:\WINDOWS\system32\AutoconfigV2.cab
2015-03-12 20:33 - 2015-04-24 11:52 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\QuickScan
2015-03-09 06:50 - 2015-03-09 06:50 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Mozilla
2015-03-09 06:50 - 2015-03-09 06:50 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Macromedia
2015-03-09 06:50 - 2015-03-09 06:50 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Mozilla
2015-03-09 06:50 - 2015-03-09 06:50 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Macromedia
2015-03-09 04:30 - 2015-05-10 08:02 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\CrashDumps
2015-03-09 04:24 - 2015-03-09 04:24 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Intel Corporation
2015-03-09 04:23 - 2015-04-17 09:15 - 00000000 ____D () C:\Users\pvrig_000\Documents\Bluetooth Folder
2015-03-09 04:23 - 2015-03-09 04:23 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Atheros
2015-03-09 04:23 - 2015-03-09 04:23 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\BMExplorer
2015-03-09 04:22 - 2015-04-30 08:32 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Google
2015-03-09 04:22 - 2015-03-09 04:22 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Adobe
2015-03-09 04:21 - 2015-04-30 23:24 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Packages
2015-03-09 04:21 - 2015-04-18 05:58 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\VirtualStore
2015-03-09 02:43 - 2015-04-30 23:13 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Verizon
2015-03-09 02:34 - 2015-03-09 02:34 - 00000000 ____D () C:\Users\Cindy\Desktop\SAMSUNG_USB_Driver_for_Mobile_Phones
2015-03-09 02:34 - 2015-03-09 02:34 - 00000000 ____D () C:\ProgramData\Sun
2015-03-09 02:33 - 2015-05-05 21:21 - 00000000 ____D () C:\ProgramData\Oracle
2015-03-09 02:33 - 2015-05-05 21:20 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-03-09 02:33 - 2015-05-05 21:20 - 00000000 ____D () C:\Program Files (x86)\Java
2015-03-09 02:33 - 2015-04-30 23:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-03-09 02:31 - 2015-03-09 02:31 - 16044077 _____ () C:\Users\Cindy\Downloads\SAMSUNG_USB_Driver_for_Mobile_Phones.zip
2015-03-09 01:10 - 2015-03-09 01:10 - 00003170 _____ () C:\WINDOWS\System32\Tasks\{EB6A1813-0B60-4105-A294-9F7456AD0B8C}
2015-03-08 22:37 - 2015-03-08 22:37 - 00000985 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aero SWF.max Flash Player.lnk
2015-03-08 22:36 - 2015-05-01 13:04 - 00000000 ____D () C:\Program Files (x86)\SWF.max
2015-03-02 16:04 - 2015-03-02 16:04 - 00000004 _____ () C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-03-02 15:47 - 2015-03-02 15:48 - 18730584 _____ () C:\Users\Cindy\Downloads\RogueKillerX64.exe
2015-03-02 15:45 - 2015-05-10 08:04 - 00035064 _____ () C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-03-02 15:45 - 2015-04-30 14:38 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-03-02 15:44 - 2015-03-02 15:44 - 01388333 _____ (Thisisu) C:\Users\Cindy\Downloads\JRT.exe
2015-03-02 15:43 - 2015-03-02 15:43 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\Cindy\Downloads\iExplore.exe
2015-03-02 15:42 - 2015-03-02 15:43 - 15566936 _____ () C:\Users\Cindy\Downloads\RogueKiller.exe
2015-03-02 15:39 - 2015-03-02 15:39 - 00001684 _____ () C:\WINDOWS\SysWOW64\${LOGFILE}
2015-03-02 15:23 - 2015-03-02 15:23 - 00613067 _____ (CMI Limited) C:\Users\Cindy\AppData\Local\nskEA37.tmp
2015-03-02 15:05 - 2015-03-02 15:05 - 01472472 _____ (Cinema PlusV02.03) C:\Users\Cindy\AppData\Roaming\SEDLNF.exe
2015-03-02 15:04 - 2015-03-02 15:07 - 00010640 _____ () C:\WINDOWS\SysWOW64\BasementDuster.ini
2015-03-02 15:04 - 2015-03-02 15:04 - 01946584 _____ (Cinema PlusV02.03) C:\Users\Cindy\AppData\Roaming\OMKREE.exe
2015-03-02 15:03 - 2015-03-02 15:04 - 00000000 ____D () C:\Users\Cindy\AppData\Local\4C4C4544-1425305039-3110-804C-B5C04F575331
2015-02-28 06:06 - 2015-02-28 06:07 - 00000000 _____ () C:\168C.tmp
2015-02-26 15:25 - 2015-03-02 16:16 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\Opera Software
2015-02-26 15:25 - 2015-03-02 16:16 - 00000000 ____D () C:\Users\Cindy\AppData\Local\Opera Software
2015-02-26 15:20 - 2015-03-02 16:16 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-02-26 15:17 - 2015-03-02 15:04 - 00000000 ____D () C:\Users\Cindy\AppData\Local\4C4C4544-1424960270-3110-804C-B5C04F575331
2015-02-26 15:16 - 2015-02-26 15:17 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\4C4C4544-1424960218-3110-804C-B5C04F575331
2015-02-26 15:14 - 2015-03-02 15:37 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\OAS
2015-02-26 14:48 - 2015-02-26 14:48 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2015-02-26 04:07 - 2015-03-09 04:27 - 00000000 ____D () C:\Users\Public\Documents\Verizon_Android
2015-02-26 03:51 - 2015-02-26 04:00 - 00000000 ____D () C:\Users\Cindy\Documents\SelfMV
2015-02-26 03:46 - 2015-03-09 02:49 - 00000000 ____D () C:\Users\Cindy\Documents\samsung
2015-02-26 03:46 - 2015-03-09 02:49 - 00000000 ____D () C:\Users\Cindy\AppData\Local\Samsung
2015-02-26 03:46 - 2015-03-02 16:19 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\Samsung
2015-02-26 03:46 - 2015-02-26 03:46 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2015-02-26 03:44 - 2013-12-30 11:53 - 04659712 _____ (Dmitry Streblechenko) C:\WINDOWS\SysWOW64\Redemption.dll
2015-02-26 03:44 - 2013-12-30 11:53 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\WINDOWS\SysWOW64\secman.dll
2015-02-26 03:43 - 2015-05-01 13:01 - 00000000 ____D () C:\Program Files (x86)\Samsung
2015-02-26 03:42 - 2015-02-26 03:42 - 00000000 ____D () C:\Users\Cindy\AppData\Local\Downloaded Installations
2015-02-26 01:16 - 2015-05-01 13:01 - 00000000 ____D () C:\ProgramData\Samsung
2015-02-26 01:16 - 2015-03-09 02:20 - 00000000 ____D () C:\Program Files\SAMSUNG
2015-02-26 01:15 - 2015-03-09 02:45 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\VERIZON
2015-02-26 01:15 - 2015-02-26 01:15 - 00000000 ____D () C:\Users\Public\Documents\Verizon2.0_Log
2015-02-25 22:39 - 2015-04-30 23:20 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-25 22:39 - 2015-04-30 23:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-25 22:38 - 2015-05-10 09:09 - 00000910 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-25 22:38 - 2015-05-10 07:43 - 00000914 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-25 22:38 - 2015-02-25 22:39 - 00000000 ____D () C:\Users\Cindy\AppData\Local\Google
2015-02-25 22:38 - 2015-02-25 22:39 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-25 22:38 - 2015-02-25 22:38 - 00003886 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-25 22:38 - 2015-02-25 22:38 - 00003650 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-18 13:15 - 2015-02-18 13:15 - 00000000 ____D () C:\Program Files (x86)\Dell Update
2015-02-12 04:08 - 2015-02-12 04:08 - 00000000 ___DC () C:\ProgramData\{7417E72F-E156-403E-9DFA-EB0ED1DB06F1}
2015-02-12 04:07 - 2015-04-30 03:43 - 00000426 _____ () C:\WINDOWS\Tasks\Dell SupportAssistAgent AutoUpdate.job
2015-02-12 04:07 - 2015-02-15 04:05 - 00000000 ____D () C:\ProgramData\SupportAssistAgent
2015-02-12 04:07 - 2015-02-12 04:07 - 00003210 _____ () C:\WINDOWS\System32\Tasks\Dell SupportAssistAgent AutoUpdate
2015-02-11 04:08 - 2015-02-12 04:07 - 00000000 ____D () C:\Program Files\Dell
2015-02-11 04:08 - 2015-02-11 04:08 - 00003218 _____ () C:\WINDOWS\System32\Tasks\SystemToolsDailyTest
2015-02-11 04:08 - 2015-02-11 04:08 - 00000000 ____D () C:\ProgramData\PC-Doctor for Windows
2015-02-11 04:08 - 2015-02-11 04:08 - 00000000 ____D () C:\Program Files\Dell Support Center
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-05-10 09:10 - 2014-11-13 20:38 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2015-05-10 09:07 - 2013-08-22 10:46 - 00326911 _____ () C:\WINDOWS\setupact.log
2015-05-10 09:07 - 2013-08-22 10:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-05-10 08:53 - 2014-11-21 04:44 - 00865408 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-05-10 07:44 - 2013-08-22 09:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-05-10 07:00 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-05-09 05:40 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-05-05 11:56 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-05-04 21:45 - 2014-12-13 14:14 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-05-04 21:45 - 2014-11-21 11:56 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-05-04 12:50 - 2012-07-26 03:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-05-03 14:35 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2015-05-03 14:35 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2015-05-01 13:07 - 2014-11-21 04:34 - 00006182 _____ () C:\WINDOWS\PFRO.log
2015-05-01 13:01 - 2014-11-13 20:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-05-01 12:59 - 2013-06-26 18:19 - 00000000 ____D () C:\dell
2015-05-01 12:58 - 2014-11-13 20:33 - 00000000 ____D () C:\ProgramData\Dell
2015-05-01 02:59 - 2014-12-04 01:44 - 00000000 __SHD () C:\Recovery
2015-05-01 02:59 - 2013-08-22 11:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2015-05-01 02:57 - 2013-08-22 11:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2015-05-01 02:57 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\WinStore
2015-05-01 02:55 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-05-01 02:55 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-05-01 02:55 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-05-01 02:55 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-05-01 02:53 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-01 02:51 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-05-01 02:50 - 2013-08-22 11:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-05-01 01:53 - 2014-11-21 04:25 - 00000000 ____D () C:\WINDOWS\ShellNew
2015-05-01 01:53 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2015-05-01 01:09 - 2013-08-22 09:25 - 00000000 ____D () C:\Temp1234
2015-05-01 01:01 - 2014-11-28 13:14 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2015-05-01 00:44 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\AppLocker
2015-04-30 23:22 - 2014-11-13 20:09 - 00000000 ____D () C:\Intel
2015-04-30 23:20 - 2014-12-03 15:41 - 00008264 _____ () C:\WINDOWS\comsetup.log
2015-04-30 23:20 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\Registration
2015-04-30 23:20 - 2013-08-22 09:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-04-30 23:19 - 2014-11-13 20:48 - 00880342 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-04-30 23:19 - 2013-08-22 11:36 - 00000000 __RSD () C:\WINDOWS\Media
2015-04-30 23:19 - 2013-08-22 11:36 - 00000000 __RHD () C:\Users\Public\Libraries
2015-04-30 23:14 - 2013-08-22 10:44 - 00337808 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-04-30 23:13 - 2014-11-21 04:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2015-04-30 23:13 - 2014-11-21 04:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2015-04-30 23:13 - 2014-11-13 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2015-04-30 23:13 - 2014-11-13 20:34 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
2015-04-30 23:13 - 2014-11-13 20:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-04-30 23:13 - 2013-08-22 11:37 - 00005217 _____ () C:\WINDOWS\DtcInstall.log
2015-04-30 23:13 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2015-04-30 23:13 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2015-04-30 23:13 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2015-04-30 23:13 - 2013-08-22 09:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2015-04-30 23:13 - 2013-08-22 09:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2015-04-30 23:13 - 2012-07-26 01:37 - 00000000 ____D () C:\Users\Default.migrated
2015-04-30 23:12 - 2014-11-21 04:00 - 00000000 ____D () C:\WINDOWS\system32\WCN
2015-04-30 23:12 - 2014-11-13 20:56 - 00000000 ____D () C:\ProgramData\PRICache
2015-04-30 23:12 - 2014-11-13 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HotSpot
2015-04-30 23:12 - 2014-11-13 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atheros Smart Net
2015-04-30 23:12 - 2013-08-22 11:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\Help
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-30 23:12 - 2013-08-22 09:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2015-04-30 23:11 - 2014-11-27 13:42 - 00000000 ____D () C:\Users\Cindy\AppData\Local\Packages
2015-04-30 23:11 - 2013-08-22 11:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2015-04-30 23:11 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2015-04-30 23:11 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-30 23:03 - 2013-08-22 10:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2015-04-30 23:00 - 2013-08-22 09:36 - 00000000 __RHD () C:\Users\Default
2015-04-30 22:33 - 2014-11-13 20:16 - 01279823 _____ () C:\WINDOWS\WindowsUpdate (1).log
2015-04-30 14:37 - 2015-01-22 14:39 - 00000000 ____D () C:\Users\Cindy\AppData\Local\CrashDumps
2015-04-30 14:26 - 2014-11-27 13:42 - 00000000 ____D () C:\Users\Cindy\AppData\Local\VirtualStore
2015-04-26 04:03 - 2014-12-08 09:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-16 22:25 - 2014-11-13 20:56 - 00000000 ____D () C:\ProgramData\Atheros
2015-04-16 04:17 - 2014-11-28 12:15 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-16 04:12 - 2014-11-28 12:15 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-13 19:24 - 2014-11-21 12:03 - 00792056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-13 19:24 - 2014-11-21 12:03 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-11 23:05 - 2012-07-26 04:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
 
Some content of TEMP:
====================
C:\Users\pvrig_000\AppData\Local\Temp\DCWSOGB.exe
C:\Users\pvrig_000\AppData\Local\Temp\dllnt_dump.dll
C:\Users\pvrig_000\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\pvrig_000\AppData\Local\Temp\NXWCNBWPUI.exe
C:\Users\pvrig_000\AppData\Local\Temp\Quarantine.exe
C:\Users\pvrig_000\AppData\Local\Temp\QYI.exe
C:\Users\pvrig_000\AppData\Local\Temp\sqlite3.dll
C:\Users\pvrig_000\AppData\Local\Temp\TUAOISCQ.exe
C:\Users\pvrig_000\AppData\Local\Temp\YMG.exe
C:\Users\pvrig_000\AppData\Local\Temp\YPQZFZOU.exe
C:\Users\pvrig_000\AppData\Local\Temp\YRGOOAWWV.exe
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-05-10 05:59
 
==================== End Of Log ==================Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by priggs (administrator) on STUDY-PC on 10-05-2015 09:10:28
Running from C:\Users\pvrig_000\Downloads
Loaded Profiles: priggs (Available profiles: Cindy & priggs)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
() C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(DELL INC.) C:\Program Files (x86)\DELL\DELLOSD\MediaButtons.exe
(Dell Inc.) C:\Program Files (x86)\DELL\SupportAssistAgent\bin\SupportAssistAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(DELL INC.) C:\Program Files (x86)\DELL\DELLOSD\DELLOSD.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Qualcomm Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe
() C:\Program Files\WindowsApps\ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0\CodeWriter.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Microsoft Corporation) C:\Windows\System32\wbengine.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7194840 2013-07-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-29] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtTray.exe [763520 2012-08-08] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [127616 2012-08-08] (Qualcomm Atheros Commnucations)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-20] (Intel Corporation)
HKLM-x32\...\Run: [ospd_us_898] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-05-06]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [DBARFileBackuped] -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\WINDOWS\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DBARFileNotBackuped] -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\WINDOWS\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll [2012-08-08] (Qualcomm Atheros Commnucations)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-05] (Oracle Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-05] (Oracle Corporation)
Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 
FireFox:
========
FF ProfilePath: C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default
FF DefaultSearchEngine.US: Google
FF NetworkProxy: "type", 0
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-05] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-05] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-25] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-25] (Google Inc.)
FF Extension: Simple Youtube and Video Converter - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\jid0-SQnwtgW1b8BsMB5PLV5WScEDWOjw@jetpack [2015-04-12]
FF Extension: WOT - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-03-12]
FF Extension: Bitdefender QuickScan - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2015-04-18]
FF Extension: FlashGot - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2015-03-29]
FF Extension: Download YouTube Videos as MP4 - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2015-03-29]
FF Extension: Web Developer - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi [2015-04-28]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2015-04-12]
FF HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF Extension: No Name - C:\Users\pvrig_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwyvzrab.default\extensions\{988da70d-b78d-44a1-a9c7-ed11832a9e2e}.xpi [Not Found]
 
Chrome: 
=======
CHR DefaultSearchKeyword: Profile 4 -> bing.com
CHR DefaultNewTabURL: Profile 4 -> https://www.bing.com/chrome/newtab
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.7.796\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)
CHR Plugin: (Chrome PDF Viewer) - chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/ No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\internal-nacl-plugin No File
CHR Plugin: (Chrome PDF Viewer) - internal-pdf-viewer No File
CHR Profile: C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4
CHR Extension: (Google Docs) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-30]
CHR Extension: (Google Drive) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-30]
CHR Extension: (YouTube) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-30]
CHR Extension: (Google Search) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-30]
CHR Extension: (20 Things I Learned About Browsers & the Web) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\dfdlnlenokgjjchimonbekcmnofmlibg [2015-04-30]
CHR Extension: (Black Menu for Google™) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\eignhdfgaldabilaaegmdfbajngjmoke [2015-04-30]
CHR Extension: (Care your Eyes) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\fidmpnedniahpnkeomejhnepmbdamlhl [2015-04-30]
CHR Extension: (Accessibility Developer Tools) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\fpkknkljclfencbdbgkenhalefipecmb [2015-04-30]
CHR Extension: (HTTPS Everywhere) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2015-04-30]
CHR Extension: (Bookmark Manager) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-30]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-30]
CHR Extension: (JSON Editor) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lhkmoheomjbkfloacpgllgjcamhihfaj [2015-04-30]
CHR Extension: (BrowserStack Local) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\mfiddfehmfdojjfdpfngagldgaaafcfo [2015-04-30]
CHR Extension: (Google Wallet) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-30]
CHR Extension: (Gmail) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-30]
CHR Extension: (Secure Shell) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pnhechapfaindjhompbnflcldabbghjo [2015-04-30]
CHR Extension: (Spot The Differences!) - C:\Users\pvrig_000\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pniinickecbjegedmgagmgikbolfgaij [2015-04-30]
 
Opera: 
=======
OPR Extension: (360 Internet Protection) - C:\Users\pvrig_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnpeghmjdfdmneiljeibjnemfdkojdhl [2015-04-30]
OPR Extension: (HTTPS Everywhere) - C:\Users\pvrig_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\edaplhobcmdaneconioghljnnopmkhgm [2015-04-30]
OPR Extension: (Night Mode) - C:\Users\pvrig_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\hlemcagbaifmcnpohjbjmpbfjnjinkgc [2015-04-30]
OPR Extension: (Web Developer) - C:\Users\pvrig_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\kddhmaadmaklcieonhggddempagbakph [2015-04-30]
OPR Extension: (Magic Actions for YouTube™) - C:\Users\pvrig_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\nlffnljnicbkfhnlomjhjlebndachaka [2015-04-30]
StartMenuInternet: (HKU\S-1-5-21-3201845695-133406859-1892422958-1004) OperaStable - "C:\Users\pvrig_000\AppData\Local\Programs\Opera\Launcher.exe"
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [211072 2012-08-08] (Qualcomm Atheros Commnucations) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 Dell WMI Service; C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe [73728 2012-08-01] () [File not signed]
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2552528 2015-01-30] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201424 2015-01-30] (Dell Inc.)
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [211320 2015-02-11] (Dell Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-07-20] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-18] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [1915920 2014-04-04] (SoftThinks SAS)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [19288 2015-02-19] (Dell Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-05-01] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-05-01] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [77824 2012-08-07] (Atheros) [File not signed]
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-08] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)
R3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)
R3 DellProf; C:\Windows\system32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation)
R3 FintekCIR; C:\Windows\system32\DRIVERS\FintekCIR.sys [33128 2012-06-07] (Fintek)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-05-10] ()
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-05-01] (Microsoft Corporation)
S3 keycrypt; system32\DRIVERS\KeyCrypt64.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== Three Months Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-05-10 09:10 - 2015-05-10 09:11 - 00018062 _____ () C:\Users\pvrig_000\Downloads\FRST.txt
2015-05-10 09:10 - 2015-05-10 09:10 - 00000000 ____D () C:\FRST
2015-05-10 09:09 - 2015-05-10 09:09 - 00000000 ___RD () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-05-10 09:07 - 2015-05-10 09:07 - 00000000 ___HD () C:\WINDOWS\AxInstSV
2015-05-10 09:03 - 2015-05-10 09:03 - 02102784 _____ (Farbar) C:\Users\pvrig_000\Downloads\FRST64.exe
2015-05-10 08:57 - 2015-04-30 23:20 - 00002205 _____ () C:\Users\pvrig_000\Desktop\Google Chrome.lnk
2015-05-10 08:41 - 2015-05-10 08:41 - 00005223 _____ () C:\Users\pvrig_000\Downloads\aswMBR.txt
2015-05-10 08:41 - 2015-05-10 08:41 - 00000512 _____ () C:\Users\pvrig_000\Downloads\MBR.dat
2015-05-10 08:02 - 2015-05-10 08:02 - 00000390 _____ () C:\Users\pvrig_000\Downloads\RootkitRemover_20150510_080209.log
2015-05-10 07:50 - 2015-05-10 07:50 - 01063160 _____ (Bleeping Computer, LLC) C:\Users\pvrig_000\Downloads\iExplore64-24775.exe
2015-05-10 07:49 - 2015-05-10 07:49 - 01063160 _____ (Bleeping Computer, LLC) C:\Users\pvrig_000\Downloads\iExplore64.exe
2015-05-10 07:44 - 2015-05-10 09:07 - 00000000 ____D () C:\WINDOWS\pss
2015-05-10 07:12 - 2015-05-10 07:13 - 00000000 ____D () C:\ProgramData\F-Secure
2015-05-10 07:12 - 2015-05-10 07:12 - 00572456 _____ (F-Secure Corporation) C:\Users\pvrig_000\Downloads\F-SecureOnlineScanner.exe
2015-05-10 07:12 - 2015-05-10 07:12 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\F-Secure
2015-05-10 07:09 - 2015-05-10 07:09 - 00380416 _____ () C:\Users\pvrig_000\Downloads\l9fontgy.exe
2015-05-10 06:56 - 2015-05-10 06:56 - 00415232 _____ (Farbar) C:\Users\pvrig_000\Downloads\FSS (1).exe
2015-05-10 06:55 - 2015-05-10 06:55 - 16937048 _____ () C:\Users\pvrig_000\Downloads\RogueKiller.exe
2015-05-10 06:55 - 2015-05-10 06:55 - 02204160 _____ () C:\Users\pvrig_000\Downloads\adwcleaner_4.203.exe
2015-05-10 06:55 - 2015-05-10 06:55 - 00852630 _____ () C:\Users\pvrig_000\Downloads\SecurityCheck.exe
2015-05-10 06:53 - 2015-05-10 06:53 - 00000000 ____D () C:\Users\pvrig_000\Pavark
2015-05-10 06:52 - 2015-05-10 06:53 - 00000296 _____ () C:\Users\pvrig_000\Downloads\RootkitRemover_20150510_065244.log
2015-05-10 06:51 - 2015-05-10 06:52 - 00002286 _____ () C:\Users\pvrig_000\Downloads\FSS.txt
2015-05-10 06:42 - 2015-05-10 06:42 - 00063874 _____ () C:\Users\pvrig_000\Downloads\Extras.Txt
2015-05-10 06:41 - 2015-05-10 06:41 - 00207160 _____ () C:\Users\pvrig_000\Downloads\OTL.Txt
2015-05-10 06:40 - 2015-05-10 06:40 - 00415232 _____ (Farbar) C:\Users\pvrig_000\Downloads\FSS.exe
2015-05-10 06:38 - 2015-05-10 06:38 - 00688992 _____ (Swearware) C:\Users\pvrig_000\Downloads\dds.com
2015-05-10 06:35 - 2015-05-10 06:35 - 00092608 _____ () C:\Users\pvrig_000\Desktop\Show-Hidden.txt
2015-05-10 06:33 - 2015-05-10 06:33 - 00783120 _____ (McAfee, Inc.) C:\Users\pvrig_000\Downloads\rootkitremover.exe
2015-05-10 06:32 - 2015-05-10 06:32 - 00602112 _____ (OldTimer Tools) C:\Users\pvrig_000\Downloads\OTL.exe
2015-05-10 06:30 - 2015-05-10 06:30 - 00386464 _____ (Bleeping Computer, LLC) C:\Users\pvrig_000\Downloads\show-hidden.exe
2015-05-10 06:26 - 2015-05-10 07:50 - 00001498 _____ () C:\Users\pvrig_000\Desktop\Rkill.txt
2015-05-10 06:24 - 2015-05-10 06:28 - 00000000 ____D () C:\Users\pvrig_000\eclipse
2015-05-10 06:22 - 2015-05-10 06:23 - 00562272 _____ (Oracle Corporation) C:\Users\pvrig_000\Downloads\chromeinstall-8u45.exe
2015-05-10 06:19 - 2015-05-10 06:23 - 215332017 _____ () C:\Users\pvrig_000\Downloads\eclipse-standard-luna-SR2-win32-x86_64.zip
2015-05-10 05:51 - 2015-05-10 05:52 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js
2015-05-10 05:51 - 2015-05-10 05:51 - 00000000 ____D () C:\Program Files\nodejs
2015-05-10 05:50 - 2015-05-10 05:51 - 08663040 _____ () C:\Users\pvrig_000\Downloads\node-v0.12.2-x64.msi
2015-05-10 05:41 - 2015-05-10 05:41 - 00000000 ____D () C:\Users\pvrig_000\Desktop\my_project
2015-05-10 05:40 - 2015-05-10 05:40 - 00761635 _____ () C:\Users\pvrig_000\Downloads\web-starter-kit-0.5.4.zip
2015-05-10 00:13 - 2015-05-10 00:16 - 31006384 _____ () C:\Users\pvrig_000\Downloads\Little_Lupe_720P_1500K_31414192.mp4
2015-05-09 07:02 - 2015-05-09 07:04 - 79694322 _____ () C:\Users\pvrig_000\Downloads\Smoking_hot_brunette_Tiffany_Brookes_gets_brutally_bleeped_58475.mp4
2015-05-06 12:41 - 2015-05-06 12:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-05-06 12:41 - 2015-05-06 12:41 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2015-05-06 07:00 - 2015-05-10 09:11 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-06 07:00 - 2015-05-09 14:34 - 00000892 _____ () C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-05-06 07:00 - 2015-05-06 12:41 - 00001949 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-05-06 07:00 - 2015-05-06 12:41 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2015-05-06 07:00 - 2015-05-06 07:00 - 00003858 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-05-06 07:00 - 2015-05-06 07:00 - 00003718 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-05-06 07:00 - 2015-05-06 07:00 - 00000000 ____D () C:\ProgramData\McAfee
2015-05-06 06:54 - 2015-05-06 07:00 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Adobe
2015-05-06 04:17 - 2015-05-06 04:17 - 00000000 __SHD () C:\Users\pvrig_000\AppData\Local\EmieUserList
2015-05-06 04:17 - 2015-05-06 04:17 - 00000000 __SHD () C:\Users\pvrig_000\AppData\Local\EmieSiteList
2015-05-06 04:17 - 2015-05-06 04:17 - 00000000 __SHD () C:\Users\pvrig_000\AppData\Local\EmieBrowserModeList
2015-05-02 17:50 - 2015-03-22 18:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-05-02 17:50 - 2015-03-22 18:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-05-02 17:50 - 2014-12-02 19:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-05-02 17:50 - 2014-11-09 19:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-05-02 17:50 - 2014-11-09 19:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-05-02 17:50 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-05-02 17:50 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-05-02 17:49 - 2015-01-19 14:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-05-02 17:49 - 2014-07-23 23:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-05-02 17:49 - 2014-07-23 23:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-05-01 13:27 - 2015-05-01 13:28 - 00000838 _____ () C:\Users\pvrig_000\Desktop\priggs.lnk
2015-05-01 13:03 - 2015-05-01 13:03 - 00000000 ___RD () C:\Users\pvrig_000\Documents\My Flash
2015-05-01 13:00 - 2015-05-01 13:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Audio
2015-05-01 12:59 - 2015-05-01 13:00 - 00000000 ___HD () C:\Program Files (x86)\Temp
2015-05-01 12:59 - 2015-05-01 12:59 - 00001536 _____ () C:\WINDOWS\SysWOW64\RtkMsgs.dll
2015-05-01 12:59 - 2015-05-01 12:59 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-05-01 12:59 - 2013-07-30 21:16 - 03564376 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2015-05-01 12:59 - 2013-07-30 18:14 - 02585304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2015-05-01 12:59 - 2013-07-30 15:04 - 00397080 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBWrp64.dll
2015-05-01 12:59 - 2013-07-30 14:47 - 00620273 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2015-05-01 12:59 - 2013-07-30 14:18 - 01994008 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBAPO264.dll
2015-05-01 12:59 - 2013-07-30 14:18 - 01725720 _____ (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\MBAPO232.dll
2015-05-01 12:59 - 2013-07-29 19:41 - 00147672 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2015-05-01 12:59 - 2013-07-29 14:48 - 30311936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCORES64.dat
2015-05-01 12:59 - 2013-07-26 15:05 - 00617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 14042880 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 02032896 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 01904384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 00920832 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2015-05-01 12:59 - 2013-07-24 11:07 - 00660224 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2015-05-01 12:59 - 2013-07-22 16:37 - 01004248 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-05-01 12:59 - 2013-07-19 16:55 - 02080472 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2015-05-01 12:59 - 2013-07-18 15:48 - 02795224 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-05-01 12:59 - 2013-07-17 17:17 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2015-05-01 12:59 - 2013-06-05 22:42 - 00208072 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-05-01 12:59 - 2013-04-24 18:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2015-05-01 12:59 - 2013-02-20 19:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2015-05-01 12:59 - 2013-01-11 17:27 - 00628504 _____ (Creative Technology Ltd.) C:\WINDOWS\system32\MBTHX64.dll
2015-05-01 12:59 - 2013-01-11 17:27 - 00563992 _____ (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\MBTHX32.dll
2015-05-01 03:09 - 2015-05-01 03:09 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\GlassWire
2015-05-01 03:08 - 2015-05-01 03:08 - 00000000 ____D () C:\ProgramData\GlassWire
2015-05-01 03:00 - 2015-05-10 08:42 - 00000000 ____D () C:\AdwCleaner
2015-05-01 03:00 - 2015-05-01 03:00 - 00000000 ____D () C:\Users\pvrig_000\Downloads\RootkitRevealer
2015-05-01 02:59 - 2015-05-01 13:22 - 00000000 ___DC () C:\WINDOWS\Panther
2015-05-01 02:59 - 2015-05-01 02:59 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-05-01 02:59 - 2015-05-01 02:59 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-05-01 02:59 - 2015-05-01 02:59 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-05-01 02:57 - 2015-05-01 02:57 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\pvrig_000\Downloads\iExplore.exe
2015-05-01 02:57 - 2015-05-01 02:57 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-05-01 02:57 - 2015-05-01 02:57 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-05-01 02:57 - 2015-05-01 02:57 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-05-01 02:57 - 2015-05-01 02:57 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-05-01 02:57 - 2015-05-01 02:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-05-01 02:56 - 2015-05-01 02:56 - 01113920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-05-01 02:56 - 2015-05-01 02:56 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-05-01 02:56 - 2015-05-01 02:56 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-05-01 02:56 - 2015-05-01 02:56 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-05-01 02:55 - 2015-05-01 20:49 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-05-01 02:55 - 2015-05-01 02:55 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-05-01 02:55 - 2015-05-01 02:55 - 04178944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-05-01 02:55 - 2015-05-01 02:55 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-05-01 02:55 - 2015-05-01 02:55 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-05-01 02:55 - 2015-05-01 02:55 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-05-01 02:55 - 2015-05-01 02:55 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-05-01 02:55 - 2015-05-01 02:55 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-05-01 02:55 - 2015-05-01 02:55 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00264000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-05-01 02:55 - 2015-05-01 02:55 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-05-01 02:55 - 2015-05-01 02:55 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00044024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-05-01 02:55 - 2015-05-01 02:55 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-05-01 02:55 - 2015-05-01 02:55 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-05-01 02:54 - 2015-05-01 02:54 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-05-01 02:54 - 2015-05-01 02:54 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00396419 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-05-01 02:54 - 2015-05-01 02:54 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-05-01 02:54 - 2015-05-01 02:54 - 00167424 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2015-05-01 02:54 - 2015-05-01 02:54 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-05-01 02:54 - 2015-05-01 02:54 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-05-01 02:54 - 2015-05-01 02:54 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-05-01 02:54 - 2015-05-01 02:54 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 02257408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-05-01 02:53 - 2015-05-01 02:53 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-05-01 02:53 - 2015-05-01 02:53 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-05-01 02:53 - 2015-05-01 02:53 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-05-01 02:53 - 2015-05-01 02:53 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-05-01 02:53 - 2015-05-01 02:53 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-05-01 02:53 - 2015-05-01 02:53 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-05-01 02:53 - 2015-05-01 02:53 - 00003168 _____ () C:\WINDOWS\System32\Tasks\{BD26E7B5-12DD-418F-9DD2-6BF51C116116}
2015-05-01 02:53 - 2015-05-01 02:53 - 00000000 ____D () C:\Users\pvrig_000\Downloads\TMRBLog
2015-05-01 02:52 - 2015-05-01 02:52 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-05-01 02:52 - 2015-05-01 02:52 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-05-01 02:52 - 2015-05-01 02:52 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-05-01 02:52 - 2015-05-01 02:52 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-05-01 02:51 - 2015-05-01 02:51 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-05-01 02:51 - 2015-05-01 02:51 - 02484224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-05-01 02:51 - 2015-05-01 02:51 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-05-01 02:51 - 2015-05-01 02:51 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-05-01 02:51 - 2015-05-01 02:51 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-05-01 02:51 - 2015-05-01 02:51 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-05-01 02:51 - 2015-05-01 02:51 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-05-01 02:50 - 2015-05-01 02:50 - 22291584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-05-01 02:50 - 2015-05-01 02:50 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-05-01 02:50 - 2015-05-01 02:50 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-05-01 02:50 - 2015-05-01 02:50 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-05-01 02:50 - 2015-05-01 02:50 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-05-01 02:50 - 2015-05-01 02:50 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-05-01 02:50 - 2015-05-01 02:50 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-05-01 02:50 - 2015-05-01 02:50 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-05-01 02:50 - 2015-05-01 02:50 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-05-01 02:50 - 2015-05-01 02:50 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-05-01 02:49 - 2015-05-01 02:49 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-05-01 02:49 - 2015-05-01 02:49 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-05-01 02:49 - 2015-05-01 02:49 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2015-05-01 02:49 - 2015-05-01 02:49 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-05-01 02:49 - 2015-05-01 02:49 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-05-01 02:49 - 2015-05-01 02:49 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-05-01 02:49 - 2015-05-01 02:49 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-05-01 02:49 - 2015-05-01 02:49 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-05-01 02:49 - 2015-05-01 02:49 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-05-01 02:45 - 2015-05-01 02:45 - 00000000 ____D () C:\Program Files\Reference Assemblies
2015-05-01 02:45 - 2015-05-01 02:45 - 00000000 ____D () C:\Program Files\MSBuild
2015-05-01 02:45 - 2015-05-01 02:45 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2015-05-01 02:45 - 2015-05-01 02:45 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-05-01 02:44 - 2015-05-01 02:44 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2015-05-01 02:44 - 2015-05-01 02:44 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2015-05-01 02:44 - 2013-08-03 00:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-05-01 02:44 - 2013-08-03 00:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-01 02:44 - 2013-08-03 00:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-05-01 02:44 - 2013-08-03 00:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-01 02:43 - 2015-05-01 02:43 - 00050477 _____ () C:\Users\pvrig_000\Downloads\Defogger.exe
2015-05-01 01:59 - 2015-05-09 06:07 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3201845695-133406859-1892422958-1004
2015-05-01 01:20 - 2015-05-01 03:02 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-01 01:20 - 2015-05-01 01:20 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-01 01:20 - 2015-05-01 01:20 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-01 01:19 - 2015-05-01 01:19 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-01 01:09 - 2015-05-01 01:09 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-STUDY-PC-Windows-8.1-(64-bit).dat
2015-05-01 01:09 - 2015-05-01 01:09 - 00000000 ____D () C:\RegBackup
2015-05-01 01:07 - 2015-05-01 01:08 - 05198336 _____ (AVAST Software) C:\Users\pvrig_000\Downloads\aswMBR.exe
2015-05-01 01:06 - 2015-05-01 01:06 - 02716306 _____ (Thisisu) C:\Users\pvrig_000\Downloads\JRT.exe
2015-05-01 01:05 - 2015-05-01 01:06 - 16502728 _____ (Malwarebytes Corp.) C:\Users\pvrig_000\Downloads\mbar-1.09.1.1004.exe
2015-05-01 01:02 - 2015-05-01 01:02 - 00000144 _____ () C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-05-01 00:49 - 2015-05-01 00:49 - 00000932 _____ () C:\Users\pvrig_000\Desktop\Downloads.lnk
2015-04-30 23:23 - 2015-04-30 23:23 - 00001444 _____ () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-30 23:22 - 2015-04-30 23:22 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-04-30 23:22 - 2015-04-30 23:22 - 00000020 ___SH () C:\Users\pvrig_000\ntuser.ini
2015-04-30 23:20 - 2015-05-10 09:09 - 02023267 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-30 23:20 - 2015-04-30 23:20 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat
2015-04-30 23:13 - 2015-04-30 23:13 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-04-30 23:11 - 2015-04-30 23:11 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2015-04-30 23:10 - 2015-05-10 06:53 - 00000000 ____D () C:\Users\pvrig_000
2015-04-30 23:10 - 2015-04-30 23:20 - 00030483 _____ () C:\WINDOWS\diagwrn.xml
2015-04-30 23:10 - 2015-04-30 23:20 - 00030483 _____ () C:\WINDOWS\diagerr.xml
2015-04-30 23:10 - 2015-04-30 23:18 - 00000000 ____D () C:\Users\Cindy
2015-04-30 23:10 - 2015-04-30 23:11 - 00000000 ___RD () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-30 23:10 - 2015-04-30 23:11 - 00000000 ___RD () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-30 23:10 - 2015-04-30 23:10 - 00000000 ___RD () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-30 23:10 - 2015-04-30 23:10 - 00000000 ___RD () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-30 23:10 - 2015-04-30 23:10 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-04-30 23:10 - 2014-11-21 11:57 - 00000000 ___RD () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-30 23:10 - 2014-11-21 11:57 - 00000000 ___RD () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-30 23:10 - 2014-11-21 04:52 - 00000369 _____ () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-04-30 23:10 - 2014-11-21 04:52 - 00000369 _____ () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-04-30 23:10 - 2014-11-21 04:52 - 00000369 _____ () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-04-30 23:10 - 2014-11-21 04:52 - 00000369 _____ () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-04-30 23:10 - 2013-08-22 11:36 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-04-30 23:03 - 2015-05-01 13:00 - 00340476 _____ () C:\WINDOWS\system32\Drivers\rtwavesskdy.dat
2015-04-30 23:03 - 2015-05-01 13:00 - 00080824 _____ () C:\WINDOWS\system32\Drivers\RTWAVES30.dat
2015-04-30 23:03 - 2015-05-01 13:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2015-04-30 23:03 - 2015-04-30 23:12 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-04-30 23:03 - 2015-04-30 23:03 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2015-04-30 23:03 - 2015-04-30 23:03 - 00000000 ____D () C:\Program Files\Realtek
2015-04-30 23:02 - 2014-10-01 19:54 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-04-30 23:02 - 2014-10-01 19:54 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-04-30 14:40 - 2015-04-30 14:40 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\AntiLogger Free
2015-04-30 14:30 - 2015-04-30 14:30 - 00000000 ____D () C:\Users\Cindy\AppData\Local\AntiLogger Free
2015-04-30 14:29 - 2015-04-30 14:30 - 00000000 ____D () C:\Users\Cindy\Downloads\backups
2015-04-30 14:26 - 2015-04-30 14:26 - 00009016 _____ () C:\Users\Cindy\Downloads\hijackthis.log
2015-04-30 14:25 - 2015-04-30 14:25 - 00380416 _____ () C:\Users\Cindy\Downloads\tguj0f4q.exe
2015-04-30 14:24 - 2015-04-30 14:24 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Cindy\Downloads\tdsskiller.exe
2015-04-30 14:22 - 2015-04-30 14:22 - 00388608 _____ (Trend Micro Inc.) C:\Users\Cindy\Downloads\HijackThis.exe
2015-04-30 14:21 - 2015-04-30 14:21 - 03688000 _____ (Zemana Ltd. ) C:\Users\Cindy\Downloads\AntiLoggerFree_Setup.exe
2015-04-30 14:20 - 2015-04-30 14:20 - 00880208 _____ (Google Inc.) C:\Users\Cindy\Downloads\ChromeSetup.exe
2015-04-30 14:07 - 2015-04-30 14:07 - 20594776 _____ () C:\Users\Cindy\Downloads\RogueKillerX64 (1).exe
2015-04-30 14:01 - 2015-04-30 14:04 - 00001366 _____ () C:\Users\Cindy\Desktop\Rkill.txt
2015-04-30 14:01 - 2015-04-30 14:01 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\Cindy\Downloads\iExplore (1).exe
2015-04-30 14:01 - 2015-04-30 14:01 - 01063160 _____ (Bleeping Computer, LLC) C:\Users\Cindy\Downloads\iExplore (1)64.exe
2015-04-30 13:50 - 2015-04-30 23:11 - 00000000 ___RD () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-04-30 08:57 - 2015-04-30 08:57 - 00004052 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1430398659
2015-04-30 08:57 - 2015-04-30 08:57 - 00001353 _____ () C:\Users\pvrig_000\Desktop\Opera.lnk
2015-04-30 08:57 - 2015-04-30 08:57 - 00001353 _____ () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-04-30 08:57 - 2015-04-30 08:57 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Opera Software
2015-04-30 08:57 - 2015-04-30 08:57 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Opera Software
2015-04-30 03:18 - 2015-04-30 23:13 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-04-30 00:20 - 2015-04-30 00:20 - 00000000 ____D () C:\Users\Public\Documents\atheros
2015-04-26 07:45 - 2015-04-27 11:40 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\tor
2015-04-26 05:30 - 2015-04-26 05:31 - 00001535 _____ () C:\Users\pvrig_000\Desktop\iexplore.exe.lnk
2015-04-26 02:01 - 2015-04-26 02:01 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Microsoft_Corporation
2015-04-26 01:51 - 2015-05-09 14:18 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2C5CD671-F092-4585-B885-D8CF17D86EBE}
2015-04-26 01:51 - 2015-04-30 23:13 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2015-04-25 23:35 - 2015-04-25 23:35 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Apps\2.0
2015-04-25 12:05 - 2015-04-25 12:05 - 00003212 _____ () C:\WINDOWS\System32\Tasks\{FAAAF6C1-00EE-4C67-B030-D661A7A20366}
2015-04-25 11:52 - 2015-04-25 11:56 - 15291515 _____ () C:\Users\pvrig_000\Downloads\Red Hot Chili Peppers - Otherside [Official Music Video].mp4
2015-04-25 11:38 - 2015-04-25 11:43 - 05155384 _____ () C:\Users\pvrig_000\Downloads\▶_Red_Hot_Chili_Peppers_Californication_Official_Music_Video.m4a
2015-04-24 03:18 - 2015-04-24 03:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-24 01:04 - 2015-05-10 07:06 - 00000000 ____D () C:\Users\pvrig_000\Downloads\SysinternalsSuite
2015-04-24 01:00 - 2015-04-24 01:00 - 00000000 ____D () C:\Users\pvrig_000\Downloads\TCPView
2015-04-23 20:24 - 2015-04-23 20:24 - 00171008 _____ () C:\Users\pvrig_000\Downloads\_Thumbs.db
2015-04-23 12:51 - 2015-04-23 12:52 - 11041130 _____ () C:\Users\pvrig_000\Downloads\Wiz Khalifa - Wake Up.mp4
2015-04-23 12:51 - 2015-04-23 12:51 - 09695576 _____ () C:\Users\pvrig_000\Downloads\Wiz Khalifa - No Sleep.mp4
2015-04-23 12:44 - 2015-04-23 12:47 - 78500070 _____ () C:\Users\pvrig_000\Downloads\Lil Wayne - Love Me (Explicit) ft. Drake, Future.mp4
2015-04-18 00:03 - 2015-04-18 00:03 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-04-16 22:08 - 2015-04-16 22:08 - 00000000 ____D () C:\Users\pvrig_000\Desktop\GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}
2015-04-16 19:46 - 2015-05-01 13:04 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\SWF.max
2015-04-16 08:43 - 2015-04-18 12:46 - 00000000 ____D () C:\Users\pvrig_000\Desktop\soFRESH!
2015-04-16 03:33 - 2015-04-16 03:34 - 56240398 _____ () C:\Users\pvrig_000\Downloads\Breakmafia and bbk - kulman remix.wav
2015-04-16 03:29 - 2015-04-16 03:30 - 71504060 _____ () C:\Users\pvrig_000\Downloads\work it!.wav
2015-04-16 03:14 - 2015-05-06 08:01 - 00000000 ____D () C:\Users\pvrig_000\Desktop\Mixes
2015-04-16 01:41 - 2015-04-16 01:41 - 18178736 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2015-04-12 08:42 - 2015-04-12 08:43 - 47989622 _____ () C:\Users\pvrig_000\Downloads\18 Defying Chronos (Original Mix).aif
2015-04-12 08:41 - 2015-04-12 08:42 - 42451782 _____ () C:\Users\pvrig_000\Downloads\17 Pitfall (Original Mix).aif
2015-04-12 08:40 - 2015-04-12 08:41 - 39847158 _____ () C:\Users\pvrig_000\Downloads\15 Bounce, Shake, Move (Original Mix.aif
2015-04-12 08:33 - 2015-04-12 08:34 - 53199238 _____ () C:\Users\pvrig_000\Downloads\13 Listen To The Drummer (Original M.aif
2015-04-12 07:25 - 2015-04-12 07:26 - 48314306 _____ () C:\Users\pvrig_000\Downloads\12 L.B.S.G. (Original Mix).aif
2015-04-12 07:24 - 2015-04-12 07:24 - 35939270 _____ () C:\Users\pvrig_000\Downloads\11 Boogie Down (Original Mix).aif
2015-04-12 07:14 - 2015-04-12 07:15 - 43104102 _____ () C:\Users\pvrig_000\Downloads\10 Disaster Alert (Original Mix).aif
2015-04-12 07:10 - 2015-04-12 07:10 - 32030370 _____ () C:\Users\pvrig_000\Downloads\09 Hun'ed Dolla' Bills (Original Mix.aif
2015-04-12 07:08 - 2015-04-12 07:09 - 42778046 _____ () C:\Users\pvrig_000\Downloads\08 Counterpoint Confusion (Original.aif
2015-04-12 06:49 - 2015-04-12 06:50 - 43103942 _____ () C:\Users\pvrig_000\Downloads\07 Kicked Out (Original Mix).aif
2015-04-12 06:48 - 2015-04-12 06:49 - 45709122 _____ () C:\Users\pvrig_000\Downloads\06 Corpus Callosum (Original Mix).aif
2015-04-12 06:46 - 2015-04-12 06:47 - 42453182 _____ () C:\Users\pvrig_000\Downloads\05 Visions of Time (Original Mix).aif
2015-04-12 06:45 - 2015-04-12 06:46 - 37894770 _____ () C:\Users\pvrig_000\Downloads\04 Once Upon A Time In South Florida.aif
2015-04-12 06:44 - 2015-04-12 06:45 - 47661626 _____ () C:\Users\pvrig_000\Downloads\03 Big Ups and Down Lows (Original M.aif
2015-04-12 06:41 - 2015-04-12 06:42 - 37241722 _____ () C:\Users\pvrig_000\Downloads\02 Festivále (Original Mix).aif
2015-04-12 06:39 - 2015-04-12 06:40 - 48966382 _____ () C:\Users\pvrig_000\Downloads\01 What You Really Want (Original Mi.aif
2015-04-12 03:20 - 2015-04-12 03:21 - 08043860 _____ () C:\Users\pvrig_000\Downloads\Aggresivnes - Playing With Fire (Original Mix).mp4
2015-04-10 12:25 - 2015-04-10 12:25 - 04809522 _____ () C:\Users\pvrig_000\Downloads\Mutantbreakz Feat. MC Bestbasstard - Shine On (Original Mix).mp4
2015-04-10 12:05 - 2015-04-10 12:05 - 10139756 _____ () C:\Users\pvrig_000\Downloads\HateNBeanz- DropDatLow (Mutantbreakz remix).mp4
2015-04-10 11:42 - 2015-04-10 11:43 - 15542055 _____ () C:\Users\pvrig_000\Downloads\MutantBreakz - Genesis.mp4
2015-04-10 11:37 - 2015-04-10 11:37 - 04335869 _____ () C:\Users\pvrig_000\Downloads\MutantBreakz _ PuRe SX - One Day Booty (Original Mix) BreakBeat 2013.mp4
2015-04-10 11:33 - 2015-04-10 11:33 - 07732083 _____ () C:\Users\pvrig_000\Downloads\PuRe SX _ Mutantbreakz - Seven Nation Booty.mp4
2015-04-09 20:41 - 2015-04-09 20:41 - 00000000 ___RD () C:\Users\pvrig_000\Documents\Notes
2015-04-08 12:22 - 2015-04-10 15:08 - 00000000 ____D () C:\Users\pvrig_000\Downloads\2_mp3_files (online-audio-converter.com)
2015-04-08 08:50 - 2015-04-08 08:50 - 26500754 _____ () C:\Users\pvrig_000\Downloads\Curtis B vs Rob Analyze Lock N Load original mix (preview).wav
2015-04-07 11:54 - 2015-04-07 11:54 - 00000000 ____D () C:\Users\pvrig_000\Documents\Fax
2015-04-05 16:12 - 2015-04-05 16:12 - 00000000 _____ () C:\Users\pvrig_000\Documents\Wale - Ambition feat. Meek Mill  Rick Ross (Official Video) - YouTube.3g
2015-03-29 15:18 - 2015-03-29 15:19 - 04402262 _____ () C:\Users\pvrig_000\Documents\Agent K - This Beat (Official Track) Ravesta Records - Breakbeat - YouTube.flv
2015-03-25 03:02 - 2015-03-04 03:26 - 00011105 ____N () C:\WINDOWS\system32\AutoconfigV2.cab
2015-03-12 20:33 - 2015-04-24 11:52 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\QuickScan
2015-03-09 06:50 - 2015-03-09 06:50 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Mozilla
2015-03-09 06:50 - 2015-03-09 06:50 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Macromedia
2015-03-09 06:50 - 2015-03-09 06:50 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Mozilla
2015-03-09 06:50 - 2015-03-09 06:50 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Macromedia
2015-03-09 04:30 - 2015-05-10 08:02 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\CrashDumps
2015-03-09 04:24 - 2015-03-09 04:24 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Intel Corporation
2015-03-09 04:23 - 2015-04-17 09:15 - 00000000 ____D () C:\Users\pvrig_000\Documents\Bluetooth Folder
2015-03-09 04:23 - 2015-03-09 04:23 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Atheros
2015-03-09 04:23 - 2015-03-09 04:23 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\BMExplorer
2015-03-09 04:22 - 2015-04-30 08:32 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Google
2015-03-09 04:22 - 2015-03-09 04:22 - 00000000 ____D () C:\Users\pvrig_000\AppData\Roaming\Adobe
2015-03-09 04:21 - 2015-04-30 23:24 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\Packages
2015-03-09 04:21 - 2015-04-18 05:58 - 00000000 ____D () C:\Users\pvrig_000\AppData\Local\VirtualStore
2015-03-09 02:43 - 2015-04-30 23:13 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Verizon
2015-03-09 02:34 - 2015-03-09 02:34 - 00000000 ____D () C:\Users\Cindy\Desktop\SAMSUNG_USB_Driver_for_Mobile_Phones
2015-03-09 02:34 - 2015-03-09 02:34 - 00000000 ____D () C:\ProgramData\Sun
2015-03-09 02:33 - 2015-05-05 21:21 - 00000000 ____D () C:\ProgramData\Oracle
2015-03-09 02:33 - 2015-05-05 21:20 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-03-09 02:33 - 2015-05-05 21:20 - 00000000 ____D () C:\Program Files (x86)\Java
2015-03-09 02:33 - 2015-04-30 23:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-03-09 02:31 - 2015-03-09 02:31 - 16044077 _____ () C:\Users\Cindy\Downloads\SAMSUNG_USB_Driver_for_Mobile_Phones.zip
2015-03-09 01:10 - 2015-03-09 01:10 - 00003170 _____ () C:\WINDOWS\System32\Tasks\{EB6A1813-0B60-4105-A294-9F7456AD0B8C}
2015-03-08 22:37 - 2015-03-08 22:37 - 00000985 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aero SWF.max Flash Player.lnk
2015-03-08 22:36 - 2015-05-01 13:04 - 00000000 ____D () C:\Program Files (x86)\SWF.max
2015-03-02 16:04 - 2015-03-02 16:04 - 00000004 _____ () C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-03-02 15:47 - 2015-03-02 15:48 - 18730584 _____ () C:\Users\Cindy\Downloads\RogueKillerX64.exe
2015-03-02 15:45 - 2015-05-10 08:04 - 00035064 _____ () C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-03-02 15:45 - 2015-04-30 14:38 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-03-02 15:44 - 2015-03-02 15:44 - 01388333 _____ (Thisisu) C:\Users\Cindy\Downloads\JRT.exe
2015-03-02 15:43 - 2015-03-02 15:43 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\Cindy\Downloads\iExplore.exe
2015-03-02 15:42 - 2015-03-02 15:43 - 15566936 _____ () C:\Users\Cindy\Downloads\RogueKiller.exe
2015-03-02 15:39 - 2015-03-02 15:39 - 00001684 _____ () C:\WINDOWS\SysWOW64\${LOGFILE}
2015-03-02 15:23 - 2015-03-02 15:23 - 00613067 _____ (CMI Limited) C:\Users\Cindy\AppData\Local\nskEA37.tmp
2015-03-02 15:05 - 2015-03-02 15:05 - 01472472 _____ (Cinema PlusV02.03) C:\Users\Cindy\AppData\Roaming\SEDLNF.exe
2015-03-02 15:04 - 2015-03-02 15:07 - 00010640 _____ () C:\WINDOWS\SysWOW64\BasementDuster.ini
2015-03-02 15:04 - 2015-03-02 15:04 - 01946584 _____ (Cinema PlusV02.03) C:\Users\Cindy\AppData\Roaming\OMKREE.exe
2015-03-02 15:03 - 2015-03-02 15:04 - 00000000 ____D () C:\Users\Cindy\AppData\Local\4C4C4544-1425305039-3110-804C-B5C04F575331
2015-02-28 06:06 - 2015-02-28 06:07 - 00000000 _____ () C:\168C.tmp
2015-02-26 15:25 - 2015-03-02 16:16 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\Opera Software
2015-02-26 15:25 - 2015-03-02 16:16 - 00000000 ____D () C:\Users\Cindy\AppData\Local\Opera Software
2015-02-26 15:20 - 2015-03-02 16:16 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-02-26 15:17 - 2015-03-02 15:04 - 00000000 ____D () C:\Users\Cindy\AppData\Local\4C4C4544-1424960270-3110-804C-B5C04F575331
2015-02-26 15:16 - 2015-02-26 15:17 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\4C4C4544-1424960218-3110-804C-B5C04F575331
2015-02-26 15:14 - 2015-03-02 15:37 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\OAS
2015-02-26 14:48 - 2015-02-26 14:48 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2015-02-26 04:07 - 2015-03-09 04:27 - 00000000 ____D () C:\Users\Public\Documents\Verizon_Android
2015-02-26 03:51 - 2015-02-26 04:00 - 00000000 ____D () C:\Users\Cindy\Documents\SelfMV
2015-02-26 03:46 - 2015-03-09 02:49 - 00000000 ____D () C:\Users\Cindy\Documents\samsung
2015-02-26 03:46 - 2015-03-09 02:49 - 00000000 ____D () C:\Users\Cindy\AppData\Local\Samsung
2015-02-26 03:46 - 2015-03-02 16:19 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\Samsung
2015-02-26 03:46 - 2015-02-26 03:46 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2015-02-26 03:44 - 2013-12-30 11:53 - 04659712 _____ (Dmitry Streblechenko) C:\WINDOWS\SysWOW64\Redemption.dll
2015-02-26 03:44 - 2013-12-30 11:53 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\WINDOWS\SysWOW64\secman.dll
2015-02-26 03:43 - 2015-05-01 13:01 - 00000000 ____D () C:\Program Files (x86)\Samsung
2015-02-26 03:42 - 2015-02-26 03:42 - 00000000 ____D () C:\Users\Cindy\AppData\Local\Downloaded Installations
2015-02-26 01:16 - 2015-05-01 13:01 - 00000000 ____D () C:\ProgramData\Samsung
2015-02-26 01:16 - 2015-03-09 02:20 - 00000000 ____D () C:\Program Files\SAMSUNG
2015-02-26 01:15 - 2015-03-09 02:45 - 00000000 ____D () C:\Users\Cindy\AppData\Roaming\VERIZON
2015-02-26 01:15 - 2015-02-26 01:15 - 00000000 ____D () C:\Users\Public\Documents\Verizon2.0_Log
2015-02-25 22:39 - 2015-04-30 23:20 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-25 22:39 - 2015-04-30 23:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-25 22:38 - 2015-05-10 09:09 - 00000910 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-25 22:38 - 2015-05-10 07:43 - 00000914 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-25 22:38 - 2015-02-25 22:39 - 00000000 ____D () C:\Users\Cindy\AppData\Local\Google
2015-02-25 22:38 - 2015-02-25 22:39 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-25 22:38 - 2015-02-25 22:38 - 00003886 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-25 22:38 - 2015-02-25 22:38 - 00003650 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-18 13:15 - 2015-02-18 13:15 - 00000000 ____D () C:\Program Files (x86)\Dell Update
2015-02-12 04:08 - 2015-02-12 04:08 - 00000000 ___DC () C:\ProgramData\{7417E72F-E156-403E-9DFA-EB0ED1DB06F1}
2015-02-12 04:07 - 2015-04-30 03:43 - 00000426 _____ () C:\WINDOWS\Tasks\Dell SupportAssistAgent AutoUpdate.job
2015-02-12 04:07 - 2015-02-15 04:05 - 00000000 ____D () C:\ProgramData\SupportAssistAgent
2015-02-12 04:07 - 2015-02-12 04:07 - 00003210 _____ () C:\WINDOWS\System32\Tasks\Dell SupportAssistAgent AutoUpdate
2015-02-11 04:08 - 2015-02-12 04:07 - 00000000 ____D () C:\Program Files\Dell
2015-02-11 04:08 - 2015-02-11 04:08 - 00003218 _____ () C:\WINDOWS\System32\Tasks\SystemToolsDailyTest
2015-02-11 04:08 - 2015-02-11 04:08 - 00000000 ____D () C:\ProgramData\PC-Doctor for Windows
2015-02-11 04:08 - 2015-02-11 04:08 - 00000000 ____D () C:\Program Files\Dell Support Center
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-05-10 09:10 - 2014-11-13 20:38 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2015-05-10 09:07 - 2013-08-22 10:46 - 00326911 _____ () C:\WINDOWS\setupact.log
2015-05-10 09:07 - 2013-08-22 10:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-05-10 08:53 - 2014-11-21 04:44 - 00865408 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-05-10 07:44 - 2013-08-22 09:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-05-10 07:00 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-05-09 05:40 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-05-05 11:56 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-05-04 21:45 - 2014-12-13 14:14 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-05-04 21:45 - 2014-11-21 11:56 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-05-04 12:50 - 2012-07-26 03:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-05-03 14:35 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2015-05-03 14:35 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2015-05-01 13:07 - 2014-11-21 04:34 - 00006182 _____ () C:\WINDOWS\PFRO.log
2015-05-01 13:01 - 2014-11-13 20:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-05-01 12:59 - 2013-06-26 18:19 - 00000000 ____D () C:\dell
2015-05-01 12:58 - 2014-11-13 20:33 - 00000000 ____D () C:\ProgramData\Dell
2015-05-01 02:59 - 2014-12-04 01:44 - 00000000 __SHD () C:\Recovery
2015-05-01 02:59 - 2013-08-22 11:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2015-05-01 02:57 - 2013-08-22 11:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2015-05-01 02:57 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\WinStore
2015-05-01 02:55 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-05-01 02:55 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-05-01 02:55 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-05-01 02:55 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-05-01 02:53 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-01 02:51 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-05-01 02:50 - 2013-08-22 11:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-05-01 01:53 - 2014-11-21 04:25 - 00000000 ____D () C:\WINDOWS\ShellNew
2015-05-01 01:53 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2015-05-01 01:09 - 2013-08-22 09:25 - 00000000 ____D () C:\Temp1234
2015-05-01 01:01 - 2014-11-28 13:14 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2015-05-01 00:44 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\AppLocker
2015-04-30 23:22 - 2014-11-13 20:09 - 00000000 ____D () C:\Intel
2015-04-30 23:20 - 2014-12-03 15:41 - 00008264 _____ () C:\WINDOWS\comsetup.log
2015-04-30 23:20 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\Registration
2015-04-30 23:20 - 2013-08-22 09:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-04-30 23:19 - 2014-11-13 20:48 - 00880342 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-04-30 23:19 - 2013-08-22 11:36 - 00000000 __RSD () C:\WINDOWS\Media
2015-04-30 23:19 - 2013-08-22 11:36 - 00000000 __RHD () C:\Users\Public\Libraries
2015-04-30 23:14 - 2013-08-22 10:44 - 00337808 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-04-30 23:13 - 2014-11-21 04:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2015-04-30 23:13 - 2014-11-21 04:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2015-04-30 23:13 - 2014-11-13 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2015-04-30 23:13 - 2014-11-13 20:34 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
2015-04-30 23:13 - 2014-11-13 20:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-04-30 23:13 - 2013-08-22 11:37 - 00005217 _____ () C:\WINDOWS\DtcInstall.log
2015-04-30 23:13 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2015-04-30 23:13 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2015-04-30 23:13 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2015-04-30 23:13 - 2013-08-22 09:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2015-04-30 23:13 - 2013-08-22 09:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2015-04-30 23:13 - 2012-07-26 01:37 - 00000000 ____D () C:\Users\Default.migrated
2015-04-30 23:12 - 2014-11-21 04:00 - 00000000 ____D () C:\WINDOWS\system32\WCN
2015-04-30 23:12 - 2014-11-13 20:56 - 00000000 ____D () C:\ProgramData\PRICache
2015-04-30 23:12 - 2014-11-13 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HotSpot
2015-04-30 23:12 - 2014-11-13 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atheros Smart Net
2015-04-30 23:12 - 2013-08-22 11:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\Help
2015-04-30 23:12 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-30 23:12 - 2013-08-22 09:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2015-04-30 23:11 - 2014-11-27 13:42 - 00000000 ____D () C:\Users\Cindy\AppData\Local\Packages
2015-04-30 23:11 - 2013-08-22 11:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2015-04-30 23:11 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2015-04-30 23:11 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-30 23:03 - 2013-08-22 10:46 - 00000084 _____ () C:\WINDOWS\setuperr.log
2015-04-30 23:00 - 2013-08-22 09:36 - 00000000 __RHD () C:\Users\Default
2015-04-30 22:33 - 2014-11-13 20:16 - 01279823 _____ () C:\WINDOWS\WindowsUpdate (1).log
2015-04-30 14:37 - 2015-01-22 14:39 - 00000000 ____D () C:\Users\Cindy\AppData\Local\CrashDumps
2015-04-30 14:26 - 2014-11-27 13:42 - 00000000 ____D () C:\Users\Cindy\AppData\Local\VirtualStore
2015-04-26 04:03 - 2014-12-08 09:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-16 22:25 - 2014-11-13 20:56 - 00000000 ____D () C:\ProgramData\Atheros
2015-04-16 04:17 - 2014-11-28 12:15 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-16 04:12 - 2014-11-28 12:15 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-13 19:24 - 2014-11-21 12:03 - 00792056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-13 19:24 - 2014-11-21 12:03 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-11 23:05 - 2012-07-26 04:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
 
Some content of TEMP:
====================
C:\Users\pvrig_000\AppData\Local\Temp\DCWSOGB.exe
C:\Users\pvrig_000\AppData\Local\Temp\dllnt_dump.dll
C:\Users\pvrig_000\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\pvrig_000\AppData\Local\Temp\NXWCNBWPUI.exe
C:\Users\pvrig_000\AppData\Local\Temp\Quarantine.exe
C:\Users\pvrig_000\AppData\Local\Temp\QYI.exe
C:\Users\pvrig_000\AppData\Local\Temp\sqlite3.dll
C:\Users\pvrig_000\AppData\Local\Temp\TUAOISCQ.exe
C:\Users\pvrig_000\AppData\Local\Temp\YMG.exe
C:\Users\pvrig_000\AppData\Local\Temp\YPQZFZOU.exe
C:\Users\pvrig_000\AppData\Local\Temp\YRGOOAWWV.exe
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-05-10 05:59
 
==================== End Of Log ======================================


BC AdBot (Login to Remove)

 


#2 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 PM

Posted 10 May 2015 - 04:50 PM

Hello priggs80 and Welcome to the BleepingComputer. :welcome:  
 
My name is Yılmaz and I'll help you with the cleanup of malware from your computer.

Before we move on, please read the following points carefully.

  • Please complete all steps in the specified order.
  • Even if tools don't find malware, I want you to post the logfiles anyway.
  • Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
  • Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
  • Don't install or uninstall software during the cleanup unless you are told to do so.
  • Ensure your external and/or USB drives are inserted during always the scan.
  • If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
  • I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
  • Please reply to this thread. Do not start a new topic
  • As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.
  • Please open as administrator  the computer. How is open as administrator  the computer?
  • Disable your AntiVirus and AntiSpyware applications, as they will  interfere with our tools and the removal. If you are unsure how to do  this, please refer to get help here

Thanks
   
I am currently reviewing your log.I will be back with a fix for your problem as soon as possible.Please be patient with me during this time.

---------------------------------------------

What types of specific problems you are experiencing right now?
 
Sincerely
:hello:


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#3 priggs80

priggs80
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:42 AM

Posted 10 May 2015 - 10:21 PM

thank you for your response . i have read all instructions carefully and fully understand your points . look forward to hearing from you again very soon .  you guys r much appreciated and i cant think u enough for what u guys do hear . have a good day or night .  :thumbup2:



#4 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 PM

Posted 11 May 2015 - 11:45 AM

Hello priggs80,
 
I dont see Additional.txt logfile , please post.


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#5 priggs80

priggs80
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:42 AM

Posted 13 May 2015 - 09:21 PM

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-05-2015 01
Ran by priggs at 2015-05-13 22:17:23
Running from C:\Users\pvrig_000\Downloads\FRST-OlderVersion\FRST-OlderVersion\FRST-OlderVersion\FRST-OlderVersion
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3201845695-133406859-1892422958-500 - Administrator - Disabled)
Cindy (S-1-5-21-3201845695-133406859-1892422958-1001 - Administrator - Enabled) => C:\Users\Cindy
Guest (S-1-5-21-3201845695-133406859-1892422958-501 - Limited - Disabled)
priggs (S-1-5-21-3201845695-133406859-1892422958-1004 - Administrator - Enabled) => C:\Users\pvrig_000

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 17 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Dell Backup and Recovery - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 1.7.1.2 - Dell Inc.)
Dell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.7.1.2 - Dell Inc.)
Dell Data Vault (Version: 4.1.9.0 - Dell Inc.) Hidden
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.0.6584.52 - Dell)
Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.0.1.56462 - Dell)
Dell System Detect (HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\73f463568823ebbe) (Version: 6.0.0.18 - Dell)
Dell Update (HKLM-x32\...\{D9E0A33F-19D6-45A7-83BB-535C7B5F699B}) (Version: 1.5.3000.0 - Dell Inc.)
Dell WLAN and Bluetooth Client Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Dell Inc.)
DELLOSD (HKLM-x32\...\{B0F29C6D-C7A9-40AC-9658-921961818E2B}) (Version: 1.0.0.17 - DELL)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}) (Version: 3.12.3.0 - LG Electronics)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 en-US)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0 - Mozilla)
Node.js (HKLM\...\{40435563-20B0-4DA3-8E52-E5BF28ABE5C3}) (Version: 0.12.2 - Joyent, Inc. and other Node contributors)
Opera Stable 29.0.1795.47 (HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\Opera 29.0.1795.47) (Version: 29.0.1795.47 - Opera Software ASA)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.206 - Qualcomm Atheros Communications)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7004 - Realtek Semiconductor Corp.)
Verizon Wireless Software Upgrade Assistant - Samsung(ar) (HKLM-x32\...\{4B6F8DD1-66C7-4905-BD8A-B05562E08984}) (Version: 2.14.1212 - Samsung Electronics Co., Ltd.)
Verizon Wireless Software Utility Application for Android - Samsung (HKLM-x32\...\{69258FD1-F4EE-475A-83D1-BF68C8029592}) (Version: 2.14.0402 - Samsung Electronics Co., Ltd.)
VideoDownloaderUltimate (HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\VideoDownloaderUltimateWinApp) (Version: 1.0.1.36 - Link64)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3201845695-133406859-1892422958-1004_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points  =========================

01-05-2015 01:53:02 Malwarebytes Anti-Rootkit Restore Point
04-05-2015 12:49:53 Windows Update
10-05-2015 05:51:18 Installed Node.js

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 09:25 - 2015-05-10 07:06 - 00000768 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1    localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0692762F-BABF-4058-BAEB-7E7AD1A5873B} - System32\Tasks\Opera scheduled Autoupdate 1430398659 => C:\Users\pvrig_000\AppData\Local\Programs\Opera\launcher.exe [2015-04-17] (Opera Software)
Task: {0D2D4BDE-1869-44CE-B363-B4255765C515} - System32\Tasks\{FAAAF6C1-00EE-4C67-B030-D661A7A20366} => pcalua.exe -a C:\Users\pvrig_000\Downloads\SysinternalsSuite\Diskmon.exe -d C:\Users\pvrig_000\Downloads\SysinternalsSuite
Task: {1BC1541F-5F41-46C9-A89C-35E56F12590D} - \PCDEventLauncherTask No Task File <==== ATTENTION
Task: {226F4366-F8B3-4E3D-B03D-9ED00108242F} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe [2015-05-06] (Adobe Systems Incorporated)
Task: {2E12E608-1466-4034-8954-55E2168FF70F} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-02-19] (Microsoft)
Task: {598DCAEA-6A14-42F6-B631-87658A94093B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-06] (Adobe Systems Incorporated)
Task: {65E40239-2503-49C5-BD50-B9D4AF446A20} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-25] (Google Inc.)
Task: {AB1C80FC-6B83-4B6C-BF62-9745C6F83A05} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-01] (Microsoft Corporation)
Task: {ACF045FC-1EC5-45EE-B827-85962F9A63D3} - System32\Tasks\{BD26E7B5-12DD-418F-9DD2-6BF51C116116} => pcalua.exe -a C:\Users\pvrig_000\Downloads\RootkitBuster_v5_1061.exe -d C:\Users\pvrig_000\Downloads
Task: {AFFB78A5-573D-4274-B3C6-B1F86417D67F} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {B6507ACF-9B6E-4C6F-89FA-A0F181A6BA1D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-25] (Google Inc.)
Task: {C62E542C-EC9F-4EC6-99AC-8EACB56B4604} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-01] (Microsoft Corporation)
Task: {C687459C-7A4F-4E5D-9A94-9B8FAA9F18BC} - System32\Tasks\{EB6A1813-0B60-4105-A294-9F7456AD0B8C} => pcalua.exe -a C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_16_0_0_305_Plugin.exe -c -maintain plugin
Task: {CCA0B5CA-1AD2-4AE2-A9E4-9B9FA9880196} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {D71533AE-DC7A-4ED5-B378-C83142B7E1B6} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-01] (Microsoft Corporation)
Task: {DD010707-280C-47CC-B367-266FA62F19C1} - \Optimize Start Menu Cache Files-S-1-5-21-3201845695-133406859-1892422958-1001 No Task File <==== ATTENTION
Task: {EF324B0C-C9D0-4196-8FCF-EB4C18ACB59C} - \PCDoctorBackgroundMonitorTask No Task File <==== ATTENTION
Task: {FFEC741D-748A-47F1-A775-35814F2B94F7} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-01] (Microsoft Corporation)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Dell SupportAssistAgent AutoUpdate.job => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-11-13 20:40 - 2014-03-12 16:22 - 00020256 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayIcon.dll
2014-11-13 20:40 - 2014-03-12 16:22 - 00035104 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRShellExtension.dll
2014-11-13 20:40 - 2014-03-12 16:22 - 00019232 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayNotBackuped.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\60974055.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\60974055.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\dell.com -> dell.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3201845695-133406859-1892422958-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows Photo Viewer\Windows Photo Viewer Wallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "shopperz"
HKLM\...\StartupApproved\Run: => "shopperz64"
HKLM\...\StartupApproved\Run32: => "gmsd_us_275"
HKLM\...\StartupApproved\Run32: => "KiesTrayAgent"
HKLM\...\StartupApproved\Run32: => "ospd_us_898"
HKLM\...\StartupApproved\Run32: => "SmartWeb"
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\StartupApproved\StartupFolder: => "Verizon Wireless Software Utility Application for Android – Samsung.lnk"
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\StartupApproved\Run: => "VideoDownloaderUltimate"
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\StartupApproved\Run: => "Spotify Web Helper"

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{C67A8A2C-64B0-4748-AD5B-94DC489DD42C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [UDP Query User{55D794BA-FAC6-4DCE-A23C-171ACE836E25}C:\users\pvrig_000\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\pvrig_000\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{38A006E3-58AA-4EDD-A1F0-8919896D8D79}C:\users\pvrig_000\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\pvrig_000\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{96D51FA6-C4B4-4CE0-B3FC-74D2036E71F4}C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe] => (Block) C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe
FirewallRules: [TCP Query User{B8EDCE55-A0A3-4D73-BDCA-4A9E3A642F05}C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe] => (Block) C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe
FirewallRules: [UDP Query User{6AB3F999-AFBC-4986-AEBB-18D65162D7CF}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{4401025A-0CEF-429A-8D24-C7A100D89A50}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{5032A06F-5AC4-4B55-B93D-0A1E6AFA66AA}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{40E270CE-77C5-4CC6-8E0C-721353A288CD}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{4C3DAE6F-2FE5-4C47-9D1D-0E09535D884F}] => (Allow) C:\Users\Cindy\AppData\Roaming\OAS\oasupd.exe
FirewallRules: [{F8CE33A9-202B-45C3-A05C-83146BB8362C}] => (Allow) C:\Users\Cindy\AppData\Roaming\OAS\oas.exe
FirewallRules: [{1C2BD867-3A86-4DB1-A5C5-BBE2FDF29A68}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0EFAE6A1-0E82-46A4-B933-B7402FAD6D73}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{8E891590-6F50-48C1-BA84-0C324D53D215}C:\program files (x86)\dell wireless\bluetooth suite\bttray.exe] => (Block) C:\program files (x86)\dell wireless\bluetooth suite\bttray.exe
FirewallRules: [TCP Query User{2071639F-D426-448B-8A19-606C08056D67}C:\program files (x86)\dell wireless\bluetooth suite\bttray.exe] => (Block) C:\program files (x86)\dell wireless\bluetooth suite\bttray.exe
FirewallRules: [UDP Query User{CCA533B5-71AC-40D5-AC86-F19C025F341E}C:\program files (x86)\dell wireless\bluetooth suite\btvstack.exe] => (Block) C:\program files (x86)\dell wireless\bluetooth suite\btvstack.exe
FirewallRules: [TCP Query User{73936051-CBB9-404F-8801-83C11C953499}C:\program files (x86)\dell wireless\bluetooth suite\btvstack.exe] => (Block) C:\program files (x86)\dell wireless\bluetooth suite\btvstack.exe
FirewallRules: [{FE2ABC73-CA02-4CF6-B2F8-B03844390004}] => (Allow) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Win7Ui.exe
FirewallRules: [{FE22CE8B-5F65-4A84-88DE-D67BC53D22F7}] => (Allow) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtTray.exe
FirewallRules: [{325AC257-368D-4358-97B3-DD846B6BC0BC}] => (Allow) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtTray.exe
FirewallRules: [{09409366-62ED-4C49-99F7-38BECE7D22FE}] => (Allow) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Btvstack.exe
FirewallRules: [{7D97C01A-7BAB-40D4-B5DF-83E27C77DCFE}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{84298428-AD95-46CC-8235-27D99E2597B6}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe

==================== Faulty Device Manager Devices =============

Name: Consumer IR Devices
Description: Consumer IR Devices
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: circlass
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (05/13/2015 10:16:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/13/2015 10:16:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/13/2015 09:58:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: l9fontgy.exe, version: 2.1.19357.0, time stamp: 0x52e7ea83
Faulting module name: l9fontgy.exe, version: 2.1.19357.0, time stamp: 0x52e7ea83
Exception code: 0xc0000005
Fault offset: 0x0008d93e
Faulting process id: 0x4b4
Faulting application start time: 0xl9fontgy.exe0
Faulting application path: l9fontgy.exe1
Faulting module path: l9fontgy.exe2
Report Id: l9fontgy.exe3
Faulting package full name: l9fontgy.exe4
Faulting package-relative application ID: l9fontgy.exe5

Error: (05/13/2015 09:56:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app Microsoft.ZuneVideo_2.6.440.0_x64__8wekyb3d8bbwe:Microsoft.ZuneVideo.AppX0691txe4bqr477kft85hfv93agd4v0e0.wwa failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/13/2015 09:56:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app Microsoft.ZuneVideo_2.6.440.0_x64__8wekyb3d8bbwe:Microsoft.ZuneVideo.AppX0691txe4bqr477kft85hfv93agd4v0e0.wwa failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/13/2015 09:56:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app Microsoft.ZuneVideo_2.6.440.0_x64__8wekyb3d8bbwe:Microsoft.ZuneVideo.AppX0691txe4bqr477kft85hfv93agd4v0e0.wwa failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/13/2015 09:42:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/13/2015 09:41:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/13/2015 07:43:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/13/2015 07:43:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.


System errors:
=============
Error: (05/13/2015 10:17:24 PM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (05/13/2015 10:17:24 PM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (05/13/2015 10:17:02 PM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (05/13/2015 10:17:02 PM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (05/13/2015 10:16:51 PM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (05/13/2015 10:16:22 PM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (05/13/2015 10:16:22 PM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (05/13/2015 10:16:22 PM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (05/13/2015 10:16:22 PM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (05/13/2015 10:16:22 PM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}


Microsoft Office Sessions:
=========================
Error: (05/13/2015 10:16:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca-2144927149

Error: (05/13/2015 10:16:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca-2144927149

Error: (05/13/2015 09:58:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: l9fontgy.exe2.1.19357.052e7ea83l9fontgy.exe2.1.19357.052e7ea83c00000050008d93e4b401d08de949cb6186C:\Users\pvrig_000\Downloads\l9fontgy.exeC:\Users\pvrig_000\Downloads\l9fontgy.exeac064e02-f9dc-11e4-be9a-5cf9dde40f92

Error: (05/13/2015 09:56:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Microsoft.ZuneVideo_2.6.440.0_x64__8wekyb3d8bbwe:Microsoft.ZuneVideo.AppX0691txe4bqr477kft85hfv93agd4v0e0.wwa-2144927149

Error: (05/13/2015 09:56:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Microsoft.ZuneVideo_2.6.440.0_x64__8wekyb3d8bbwe:Microsoft.ZuneVideo.AppX0691txe4bqr477kft85hfv93agd4v0e0.wwa-2144927149

Error: (05/13/2015 09:56:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Microsoft.ZuneVideo_2.6.440.0_x64__8wekyb3d8bbwe:Microsoft.ZuneVideo.AppX0691txe4bqr477kft85hfv93agd4v0e0.wwa-2144927149

Error: (05/13/2015 09:42:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca-2144927149

Error: (05/13/2015 09:41:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca-2144927149

Error: (05/13/2015 07:43:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca-2144927149

Error: (05/13/2015 07:43:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0:App.AppXn2kyq6tkzma8743ws1z4n8g8nbfxbjf9.mca-2144927149


==================== Memory info ===========================

Processor: Intel® Core™ i5-3330S CPU @ 2.70GHz
Percentage of memory in use: 21%
Total physical RAM: 8094.61 MB
Available physical RAM: 6366.29 MB
Total Pagefile: 9374.61 MB
Available Pagefile: 8031.07 MB
Total Virtual: 131072 MB
Available Virtual: 131071.83 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:929.69 GB) (Free:886.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 6EAB99C0)

Partition: GPT Partition Type.

==================== End Of Log ============================

 

Hope it came out ok. now for some reason it wont let me open the addition.txt from day i ran it , i had to open an try an run program again . when i did it automatically said program updated. and even did this with no internet connection. other files that i could access before say 'disabled to built in administrator' as well now . this it did do before. hope this helps



#6 priggs80

priggs80
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:42 AM

Posted 13 May 2015 - 10:12 PM

here the none Safe Mode log. could open this now. 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015
Ran by priggs at 2015-05-10 09:11:59
Running from C:\Users\pvrig_000\Downloads
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-3201845695-133406859-1892422958-500 - Administrator - Disabled)
Cindy (S-1-5-21-3201845695-133406859-1892422958-1001 - Administrator - Enabled) => C:\Users\Cindy
Guest (S-1-5-21-3201845695-133406859-1892422958-501 - Limited - Disabled)
priggs (S-1-5-21-3201845695-133406859-1892422958-1004 - Administrator - Enabled) => C:\Users\pvrig_000
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Adobe Flash Player 17 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Dell Backup and Recovery - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 1.7.1.2 - Dell Inc.)
Dell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.7.1.2 - Dell Inc.)
Dell Data Vault (Version: 4.1.9.0 - Dell Inc.) Hidden
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.0.6584.52 - Dell)
Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.0.1.56462 - Dell)
Dell System Detect (HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\73f463568823ebbe) (Version: 6.0.0.18 - Dell)
Dell Update (HKLM-x32\...\{D9E0A33F-19D6-45A7-83BB-535C7B5F699B}) (Version: 1.5.3000.0 - Dell Inc.)
Dell WLAN and Bluetooth Client Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Dell Inc.)
DELLOSD (HKLM-x32\...\{B0F29C6D-C7A9-40AC-9658-921961818E2B}) (Version: 1.0.0.17 - DELL)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}) (Version: 3.12.3.0 - LG Electronics)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 en-US)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0 - Mozilla)
Node.js (HKLM\...\{40435563-20B0-4DA3-8E52-E5BF28ABE5C3}) (Version: 0.12.2 - Joyent, Inc. and other Node contributors)
Opera Stable 29.0.1795.47 (HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\Opera 29.0.1795.47) (Version: 29.0.1795.47 - Opera Software ASA)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.206 - Qualcomm Atheros Communications)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7004 - Realtek Semiconductor Corp.)
Verizon Wireless Software Upgrade Assistant - Samsung(ar) (HKLM-x32\...\{4B6F8DD1-66C7-4905-BD8A-B05562E08984}) (Version: 2.14.1212 - Samsung Electronics Co., Ltd.)
Verizon Wireless Software Utility Application for Android - Samsung (HKLM-x32\...\{69258FD1-F4EE-475A-83D1-BF68C8029592}) (Version: 2.14.0402 - Samsung Electronics Co., Ltd.)
VideoDownloaderUltimate (HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\VideoDownloaderUltimateWinApp) (Version: 1.0.1.36 - Link64)
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-3201845695-133406859-1892422958-1004_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
 
==================== Restore Points  =========================
 
01-05-2015 01:53:02 Malwarebytes Anti-Rootkit Restore Point
04-05-2015 12:49:53 Windows Update
10-05-2015 05:51:18 Installed Node.js
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2013-08-22 09:25 - 2015-05-10 07:06 - 00000768 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {0692762F-BABF-4058-BAEB-7E7AD1A5873B} - System32\Tasks\Opera scheduled Autoupdate 1430398659 => C:\Users\pvrig_000\AppData\Local\Programs\Opera\launcher.exe [2015-04-17] (Opera Software)
Task: {0D2D4BDE-1869-44CE-B363-B4255765C515} - System32\Tasks\{FAAAF6C1-00EE-4C67-B030-D661A7A20366} => pcalua.exe -a C:\Users\pvrig_000\Downloads\SysinternalsSuite\Diskmon.exe -d C:\Users\pvrig_000\Downloads\SysinternalsSuite
Task: {1BC1541F-5F41-46C9-A89C-35E56F12590D} - \PCDEventLauncherTask No Task File <==== ATTENTION
Task: {226F4366-F8B3-4E3D-B03D-9ED00108242F} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe [2015-05-06] (Adobe Systems Incorporated)
Task: {2E12E608-1466-4034-8954-55E2168FF70F} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-02-19] (Microsoft)
Task: {598DCAEA-6A14-42F6-B631-87658A94093B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-06] (Adobe Systems Incorporated)
Task: {65E40239-2503-49C5-BD50-B9D4AF446A20} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-25] (Google Inc.)
Task: {6D4E8D58-B678-4852-9F69-67368942F210} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {AB1C80FC-6B83-4B6C-BF62-9745C6F83A05} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-01] (Microsoft Corporation)
Task: {ACF045FC-1EC5-45EE-B827-85962F9A63D3} - System32\Tasks\{BD26E7B5-12DD-418F-9DD2-6BF51C116116} => pcalua.exe -a C:\Users\pvrig_000\Downloads\RootkitBuster_v5_1061.exe -d C:\Users\pvrig_000\Downloads
Task: {AFFB78A5-573D-4274-B3C6-B1F86417D67F} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {B6507ACF-9B6E-4C6F-89FA-A0F181A6BA1D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-25] (Google Inc.)
Task: {C62E542C-EC9F-4EC6-99AC-8EACB56B4604} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-01] (Microsoft Corporation)
Task: {C687459C-7A4F-4E5D-9A94-9B8FAA9F18BC} - System32\Tasks\{EB6A1813-0B60-4105-A294-9F7456AD0B8C} => pcalua.exe -a C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_16_0_0_305_Plugin.exe -c -maintain plugin
Task: {D71533AE-DC7A-4ED5-B378-C83142B7E1B6} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-01] (Microsoft Corporation)
Task: {DD010707-280C-47CC-B367-266FA62F19C1} - \Optimize Start Menu Cache Files-S-1-5-21-3201845695-133406859-1892422958-1001 No Task File <==== ATTENTION
Task: {EF324B0C-C9D0-4196-8FCF-EB4C18ACB59C} - \PCDoctorBackgroundMonitorTask No Task File <==== ATTENTION
Task: {FFEC741D-748A-47F1-A775-35814F2B94F7} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-01] (Microsoft Corporation)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Dell SupportAssistAgent AutoUpdate.job => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) ==============
 
2014-11-13 20:33 - 2012-08-01 16:03 - 00073728 _____ () C:\Program Files (x86)\DELL\DELLOSD\DellOSDService.exe
2014-11-13 20:40 - 2014-03-12 16:22 - 00020256 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayIcon.dll
2014-11-13 20:40 - 2014-03-12 16:22 - 00019232 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayNotBackuped.dll
2014-11-13 20:40 - 2014-03-12 16:22 - 00035104 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRShellExtension.dll
2012-08-08 18:11 - 2012-08-08 18:11 - 00384128 _____ () C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ContactsApi.dll
2015-05-02 14:51 - 2015-05-02 14:51 - 00743936 _____ () C:\Program Files\WindowsApps\ActiproSoftwareLLC.562882FEEB491_2.4.15.15_neutral__24pqs290vpjk0\CodeWriter.exe
2015-05-06 08:37 - 2015-05-06 08:37 - 01879040 _____ () C:\Users\pvrig_000\AppData\Local\Packages\ActiproSoftwareLLC.562882FEEB491_24pqs290vpjk0\AC\Microsoft\CLR_v4.0_32\NativeImages\CodeWriter\3320e2edebdbde6386d6f39fe03aaaaa\CodeWriter.ni.exe
2015-05-04 05:29 - 2015-05-04 05:29 - 03530752 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.UI.Xaml\90a4331ab5b5bb3ead23d75d4349a491\Windows.UI.Xaml.ni.dll
2015-05-04 05:29 - 2015-05-04 05:29 - 00960000 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.UI\6c2169e34bfb3814fa44f267572335f6\Windows.UI.ni.dll
2015-05-04 05:29 - 2015-05-04 05:29 - 01130496 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.App640a3541#\6e37f358bf8363dad51e2333292d61a9\Windows.ApplicationModel.ni.dll
2015-05-04 05:29 - 2015-05-04 05:29 - 00133120 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.System\7819e306c2c55c42f35a5fa10b93710f\Windows.System.ni.dll
2015-05-04 05:29 - 2015-05-04 05:29 - 00808448 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Storage\f0a2c10499402eff632a7a7df0b4afef\Windows.Storage.ni.dll
2015-05-04 05:29 - 2015-05-04 05:29 - 00228864 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\f7e726805e56676bd7b8662a3d842b0e\Windows.Foundation.ni.dll
2015-05-06 08:37 - 2015-05-06 08:37 - 00174592 _____ () C:\Users\pvrig_000\AppData\Local\Packages\ActiproSoftwareLLC.562882FEEB491_24pqs290vpjk0\AC\Microsoft\CLR_v4.0_32\NativeImages\GoogleAnalytics\b7710361e0b1d0ef7a885cccec5ac236\GoogleAnalytics.ni.dll
2015-05-02 15:08 - 2015-05-02 15:08 - 00304128 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Graphics\4e33edd5ee2ee09f751c0071ba0a26c3\Windows.Graphics.ni.dll
2015-05-06 08:37 - 2015-05-06 08:37 - 00242176 _____ () C:\Users\pvrig_000\AppData\Local\Packages\ActiproSoftwareLLC.562882FEEB491_24pqs290vpjk0\AC\Microsoft\CLR_v4.0_32\NativeImages\GoogleAnalytics.Core\74f683133b0ce2e291909d4e4eae4c1a\GoogleAnalytics.Core.ni.dll
2015-05-04 05:29 - 2015-05-04 05:29 - 00337920 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Data\fe565d34d4335337c06264bb0d85e3b0\Windows.Data.ni.dll
2015-05-02 15:08 - 2015-05-02 15:08 - 01282048 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Devices\bf5509cf3a0d2e3afbd0c33e9153ecbd\Windows.Devices.ni.dll
2015-05-05 12:22 - 2015-05-05 12:22 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\1706c668394b6917a63634ebd3bedcf2\PSIClient.ni.dll
2014-11-13 20:31 - 2012-07-19 06:55 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\60974055.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\60974055.sys => ""="Driver"
 
==================== EXE Association (whitelisted) ===============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 
IE trusted site: HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\dell.com -> dell.com
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\pvrig_000\AppData\Roaming\Microsoft\Windows Photo Viewer\Windows Photo Viewer Wallpaper.jpg
DNS Servers: 192.168.2.1
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
HKLM\...\StartupApproved\Run: => "shopperz"
HKLM\...\StartupApproved\Run: => "shopperz64"
HKLM\...\StartupApproved\Run32: => "gmsd_us_275"
HKLM\...\StartupApproved\Run32: => "KiesTrayAgent"
HKLM\...\StartupApproved\Run32: => "ospd_us_898"
HKLM\...\StartupApproved\Run32: => "SmartWeb"
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\StartupApproved\StartupFolder: => "Verizon Wireless Software Utility Application for Android – Samsung.lnk"
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\StartupApproved\Run: => "VideoDownloaderUltimate"
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-3201845695-133406859-1892422958-1004\...\StartupApproved\Run: => "Spotify Web Helper"
 
==================== FirewallRules (whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{C67A8A2C-64B0-4748-AD5B-94DC489DD42C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [UDP Query User{55D794BA-FAC6-4DCE-A23C-171ACE836E25}C:\users\pvrig_000\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\pvrig_000\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{38A006E3-58AA-4EDD-A1F0-8919896D8D79}C:\users\pvrig_000\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\pvrig_000\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{96D51FA6-C4B4-4CE0-B3FC-74D2036E71F4}C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe] => (Block) C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe
FirewallRules: [TCP Query User{B8EDCE55-A0A3-4D73-BDCA-4A9E3A642F05}C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe] => (Block) C:\programdata\videodownloaderultimatewinapp\videodownloaderultimate.exe
FirewallRules: [UDP Query User{6AB3F999-AFBC-4986-AEBB-18D65162D7CF}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{4401025A-0CEF-429A-8D24-C7A100D89A50}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{5032A06F-5AC4-4B55-B93D-0A1E6AFA66AA}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{40E270CE-77C5-4CC6-8E0C-721353A288CD}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{4C3DAE6F-2FE5-4C47-9D1D-0E09535D884F}] => (Allow) C:\Users\Cindy\AppData\Roaming\OAS\oasupd.exe
FirewallRules: [{F8CE33A9-202B-45C3-A05C-83146BB8362C}] => (Allow) C:\Users\Cindy\AppData\Roaming\OAS\oas.exe
FirewallRules: [{1C2BD867-3A86-4DB1-A5C5-BBE2FDF29A68}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0EFAE6A1-0E82-46A4-B933-B7402FAD6D73}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{8E891590-6F50-48C1-BA84-0C324D53D215}C:\program files (x86)\dell wireless\bluetooth suite\bttray.exe] => (Block) C:\program files (x86)\dell wireless\bluetooth suite\bttray.exe
FirewallRules: [TCP Query User{2071639F-D426-448B-8A19-606C08056D67}C:\program files (x86)\dell wireless\bluetooth suite\bttray.exe] => (Block) C:\program files (x86)\dell wireless\bluetooth suite\bttray.exe
FirewallRules: [UDP Query User{CCA533B5-71AC-40D5-AC86-F19C025F341E}C:\program files (x86)\dell wireless\bluetooth suite\btvstack.exe] => (Block) C:\program files (x86)\dell wireless\bluetooth suite\btvstack.exe
FirewallRules: [TCP Query User{73936051-CBB9-404F-8801-83C11C953499}C:\program files (x86)\dell wireless\bluetooth suite\btvstack.exe] => (Block) C:\program files (x86)\dell wireless\bluetooth suite\btvstack.exe
FirewallRules: [{FE2ABC73-CA02-4CF6-B2F8-B03844390004}] => (Allow) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Win7Ui.exe
FirewallRules: [{FE22CE8B-5F65-4A84-88DE-D67BC53D22F7}] => (Allow) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtTray.exe
FirewallRules: [{325AC257-368D-4358-97B3-DD846B6BC0BC}] => (Allow) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtTray.exe
FirewallRules: [{09409366-62ED-4C49-99F7-38BECE7D22FE}] => (Allow) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Btvstack.exe
FirewallRules: [{7D97C01A-7BAB-40D4-B5DF-83E27C77DCFE}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{84298428-AD95-46CC-8235-27D99E2597B6}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
 
==================== Faulty Device Manager Devices =============
 
Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
 
Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (05/10/2015 08:02:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: RootkitRevealer.exe, version: 1.71.0.0, time stamp: 0x44e255aa
Faulting module name: RootkitRevealer.exe, version: 1.71.0.0, time stamp: 0x44e255aa
Exception code: 0xc0000005
Fault offset: 0x000040cd
Faulting process id: 0x4b4
Faulting application start time: 0xRootkitRevealer.exe0
Faulting application path: RootkitRevealer.exe1
Faulting module path: RootkitRevealer.exe2
Report Id: RootkitRevealer.exe3
Faulting package full name: RootkitRevealer.exe4
Faulting package-relative application ID: RootkitRevealer.exe5
 
Error: (05/10/2015 08:01:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: RootkitRevealer.exe, version: 1.71.0.0, time stamp: 0x44e255aa
Faulting module name: RootkitRevealer.exe, version: 1.71.0.0, time stamp: 0x44e255aa
Exception code: 0xc0000005
Fault offset: 0x000040cd
Faulting process id: 0x784
Faulting application start time: 0xRootkitRevealer.exe0
Faulting application path: RootkitRevealer.exe1
Faulting module path: RootkitRevealer.exe2
Report Id: RootkitRevealer.exe3
Faulting package full name: RootkitRevealer.exe4
Faulting package-relative application ID: RootkitRevealer.exe5
 
Error: (05/10/2015 07:09:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: l9fontgy.exe, version: 2.1.19357.0, time stamp: 0x52e7ea83
Faulting module name: l9fontgy.exe, version: 2.1.19357.0, time stamp: 0x52e7ea83
Exception code: 0xc0000005
Fault offset: 0x000011aa
Faulting process id: 0x37c
Faulting application start time: 0xl9fontgy.exe0
Faulting application path: l9fontgy.exe1
Faulting module path: l9fontgy.exe2
Report Id: l9fontgy.exe3
Faulting package full name: l9fontgy.exe4
Faulting package-relative application ID: l9fontgy.exe5
 
Error: (05/10/2015 07:09:34 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: l9fontgy.exe, version: 2.1.19357.0, time stamp: 0x52e7ea83
Faulting module name: l9fontgy.exe, version: 2.1.19357.0, time stamp: 0x52e7ea83
Exception code: 0xc0000005
Fault offset: 0x000011aa
Faulting process id: 0x124c
Faulting application start time: 0xl9fontgy.exe0
Faulting application path: l9fontgy.exe1
Faulting module path: l9fontgy.exe2
Report Id: l9fontgy.exe3
Faulting package full name: l9fontgy.exe4
Faulting package-relative application ID: l9fontgy.exe5
 
Error: (05/10/2015 07:06:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: RootkitRevealer.exe, version: 1.71.0.0, time stamp: 0x44e255aa
Faulting module name: RootkitRevealer.exe, version: 1.71.0.0, time stamp: 0x44e255aa
Exception code: 0xc0000005
Fault offset: 0x000040cd
Faulting process id: 0x2a4
Faulting application start time: 0xRootkitRevealer.exe0
Faulting application path: RootkitRevealer.exe1
Faulting module path: RootkitRevealer.exe2
Report Id: RootkitRevealer.exe3
Faulting package full name: RootkitRevealer.exe4
Faulting package-relative application ID: RootkitRevealer.exe5
 
Error: (05/10/2015 06:56:36 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app Microsoft.BingNews_8wekyb3d8bbwe!AppexNews failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
 
Error: (05/10/2015 06:56:36 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app Microsoft.BingWeather_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
 
Error: (05/10/2015 05:00:57 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app Microsoft.BingNews_8wekyb3d8bbwe!AppexNews failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
 
Error: (05/10/2015 05:00:57 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app Microsoft.BingWeather_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
 
Error: (05/10/2015 00:59:48 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Activation of app Microsoft.BingNews_8wekyb3d8bbwe!AppexNews failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
 
 
System errors:
=============
Error: (05/10/2015 09:07:06 AM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{9E175B68-F52A-11D8-B9A5-505054503030}
 
Error: (05/10/2015 09:07:05 AM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}
 
Error: (05/10/2015 09:06:54 AM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}
 
Error: (05/10/2015 09:06:49 AM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}
 
Error: (05/10/2015 09:06:44 AM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}
 
Error: (05/10/2015 09:06:43 AM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084dpsUnavailable{7022A3B3-D004-4F52-AF11-E9E987FEE25F}
 
Error: (05/10/2015 09:06:43 AM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084dpsUnavailable{7022A3B3-D004-4F52-AF11-E9E987FEE25F}
 
Error: (05/10/2015 09:06:43 AM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084dpsUnavailable{7022A3B3-D004-4F52-AF11-E9E987FEE25F}
 
Error: (05/10/2015 09:06:43 AM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084dpsUnavailable{7022A3B3-D004-4F52-AF11-E9E987FEE25F}
 
Error: (05/10/2015 09:06:43 AM) (Source: DCOM) (EventID: 10005) (User: study-pc)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}
 
 
Microsoft Office Sessions:
=========================
Error: (05/10/2015 08:02:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: RootkitRevealer.exe1.71.0.044e255aaRootkitRevealer.exe1.71.0.044e255aac0000005000040cd4b401d08b191f0139a0C:\Users\pvrig_000\Downloads\RootkitRevealer\RootkitRevealer.exeC:\Users\pvrig_000\Downloads\RootkitRevealer\RootkitRevealer.exe5cb027e6-f70c-11e4-be94-5cf9dde40f92
 
Error: (05/10/2015 08:01:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: RootkitRevealer.exe1.71.0.044e255aaRootkitRevealer.exe1.71.0.044e255aac0000005000040cd78401d08b191866c221C:\Users\pvrig_000\Downloads\RootkitRevealer\RootkitRevealer.exeC:\Users\pvrig_000\Downloads\RootkitRevealer\RootkitRevealer.exe563bd67c-f70c-11e4-be94-5cf9dde40f92
 
Error: (05/10/2015 07:09:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: l9fontgy.exe2.1.19357.052e7ea83l9fontgy.exe2.1.19357.052e7ea83c0000005000011aa37c01d08b11d464d2e2C:\Users\pvrig_000\Downloads\l9fontgy.exeC:\Users\pvrig_000\Downloads\l9fontgy.exe14f3b882-f705-11e4-be92-68942303865c
 
Error: (05/10/2015 07:09:34 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: l9fontgy.exe2.1.19357.052e7ea83l9fontgy.exe2.1.19357.052e7ea83c0000005000011aa124c01d08b11c3f7770dC:\Users\pvrig_000\Downloads\l9fontgy.exeC:\Users\pvrig_000\Downloads\l9fontgy.exe096b3a4f-f705-11e4-be92-68942303865c
 
Error: (05/10/2015 07:06:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: RootkitRevealer.exe1.71.0.044e255aaRootkitRevealer.exe1.71.0.044e255aac0000005000040cd2a401d08b116ad7b0d8C:\Users\pvrig_000\Downloads\SysinternalsSuite\RootkitRevealer.exeC:\Users\pvrig_000\Downloads\SysinternalsSuite\RootkitRevealer.exeaa8a1dde-f704-11e4-be92-68942303865c
 
Error: (05/10/2015 06:56:36 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Microsoft.BingNews_8wekyb3d8bbwe!AppexNews-2144927148
 
Error: (05/10/2015 06:56:36 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Microsoft.BingWeather_8wekyb3d8bbwe!App-2144927148
 
Error: (05/10/2015 05:00:57 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Microsoft.BingNews_8wekyb3d8bbwe!AppexNews-2144927148
 
Error: (05/10/2015 05:00:57 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Microsoft.BingWeather_8wekyb3d8bbwe!App-2144927148
 
Error: (05/10/2015 00:59:48 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: study-pc)
Description: Microsoft.BingNews_8wekyb3d8bbwe!AppexNews-2144927148
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i5-3330S CPU @ 2.70GHz
Percentage of memory in use: 20%
Total physical RAM: 8094.61 MB
Available physical RAM: 6437.42 MB
Total Pagefile: 9374.61 MB
Available Pagefile: 7643.49 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB
 
==================== Drives ================================
 
Drive c: (OS) (Fixed) (Total:929.69 GB) (Free:888.54 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 6EAB99C0)
 
Partition: GPT Partition Type.
 
==================== End Of Log ============================


#7 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 PM

Posted 14 May 2015 - 04:59 PM

Hi priggs80,

Please go to Start, Click Control Panel , click Programs and then click Programs and Features if it still exists:
Please uninstall the following applications:

McAfee Security Scan Plus
Bitdefender QuickScan
Mozilla Maintenance Service

-----------------------------------------------
Step 1:
FRST Script:
Please download this attached txt.gif  fixlist.txt 7.44KB 0 downloads and save it in the same directory as FRST.

  • Start FRST with Administrator privileges.
  • Press the Fix button.
  • When finished, a log file (Fixlog.txt) pops up and is saved to the same location the tool was run from.
    Please copy and paste its contents in your next reply.

NOT : It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
and fixlist.txt are in the same location or the fix will not work.
 
Step 2:
Please download AdwCleaner by Xplode onto your desktop.

  • Double click on AdwCleaner.exe to run the tool.
  • Click on Search, then Clean.
  • A logfile will automatically open after the scan has finished.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

Step 3:
Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista / 7 / 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

Attached Files


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#8 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 PM

Posted 19 May 2015 - 01:47 PM

Hello,

Are you still with us?


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#9 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 PM

Posted 22 May 2015 - 10:31 AM

Hello,

 

4 Day Inactivity

This is the third day since my last post. Are you still there?

If you need more time, just let me know.

If you do not post within 24 hours, this thread will be closed due to inactivity.


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#10 olgun52

olgun52

  • Malware Response Team
  • 3,783 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 PM

Posted 29 May 2015 - 02:30 PM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.

Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users