Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

My computer is infected with cassiopesa, and I can't get rid of it. Please help


  • This topic is locked This topic is locked
4 replies to this topic

#1 SongmakersCry

SongmakersCry

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:08:28 AM

Posted 28 May 2015 - 02:31 PM

I play this game online.  You take surveys to earn gold.  One of them promised a lot of gold if you download something.  I foolishly fell for it, and now my computer is infected.  I have already uninstalled the program, and removed it to the best of my ability from Chrome and Firefox.  I also ran Malwarebytes.  It detected and (supposedly) deleted the problem, but as soon as I restarted my computer, the problem is still here.  It keeps opening the strange Chrome clone browser at startup that takes me to Cassiopesas search engine.  I think the browser is called Cromium, or something like that.  It has the Chrome symbol, but it's grey.  This thing keeps making changes to my browsers, and strange screens keep popping up.  I download what I thought was a free scanner called Hijak killer (or something like that) it said that I have 1960 Infections, but (as usual) it wants you to pay to remove them, and I just do not have the money right now AT ALL.  Is there anyway to remove them FREE?  Thanks.  http://imgur.com/TkF1FQk



BC AdBot (Login to Remove)

 


#2 SongmakersCry

SongmakersCry
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:08:28 AM

Posted 28 May 2015 - 09:22 PM

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-05-2015 01
Ran by Mr. Smokey Mokums (administrator) on TOKYO on 28-05-2015 20:15:50
Running from C:\Users\Mr. Smokey Mokums\Downloads
Loaded Profiles: Mr. Smokey Mokums (Available Profiles: Mr. Smokey Mokums)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.1.1\Lightshot.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Spotify Ltd) C:\Users\Mr. Smokey Mokums\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\Mr. Smokey Mokums\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Mr. Smokey Mokums\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\Mr. Smokey Mokums\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Mr. Smokey Mokums\AppData\Roaming\Spotify\Spotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227648 2015-03-30] (AVAST Software)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448520 2015-04-08] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-09] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\Run: [Exetender] => "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup
HKU\S-1-5-20\...\Run: [Exetender] => "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup
HKU\S-1-5-21-4245574805-2178375736-1859896947-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-4245574805-2178375736-1859896947-1001\...\Run: [Spotify Web Helper] => C:\Users\Mr. Smokey Mokums\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2021944 2015-05-28] (Spotify Ltd)
HKU\S-1-5-21-4245574805-2178375736-1859896947-1001\...\RunOnce: [Uninstall C:\Users\Mr. Smokey Mokums\AppData\Local\Microsoft\SkyDrive\17.0.4024.1220\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mr. Smokey Mokums\AppData\Local\Microsoft\SkyDrive\17.0.4024.1220\amd64"
HKU\S-1-5-21-4245574805-2178375736-1859896947-1001\...\RunOnce: [Uninstall C:\Users\Mr. Smokey Mokums\AppData\Local\Microsoft\SkyDrive\17.0.4024.1220] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mr. Smokey Mokums\AppData\Local\Microsoft\SkyDrive\17.0.4024.1220"
HKU\S-1-5-18\...\Run: [Exetender] => "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup
AppInit_DLLs-x32: C:\PROGRA~3\{27DCC~1\1172~1.1\daco.dll => "C:\PROGRA~3\{27DCC~1\1172~1.1\daco.dll" File not found
AppInit_DLLs-x32:  c:\progra~3\perfor~1\perfor~1.dll => "c:\progra~3\perfor~1\perfor~1.dll" File not found
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-02-04] (AVAST Software)
CHR HKU\S-1-5-21-4245574805-2178375736-1859896947-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.com?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-4245574805-2178375736-1859896947-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-4245574805-2178375736-1859896947-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.yahoo.com?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-4245574805-2178375736-1859896947-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
URLSearchHook: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM -> {9143e921-7c9a-4d27-ac43-eaccc78cc55a} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = 
SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=http://www.ebay.com/sch/i.html?_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> DefaultScope {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = 
SearchScopes: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> A7C86C02E30747C9B8AE18B0653CF98A URL = http://www.bing.com/search?FORM=U038DF&PC=U038&dt=062113&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://mysearch.avg.com/search?cid={02E05859-7D10-41BA-AADE-D13FD0DACDD1}&mid=7483ee13cc3d47d3bdc6397073bec2af-8b0e53f7b6368a3644fa8912490071061b5c86bd&lang=en&ds=AVG&coid=avgtbavg&pr=fr&d=2013-11-04 20:52:58&v=17.1.3.3&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> {A8BC91BE-2ABC-473E-99BB-6D5FE8CAF8C5} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = 
SearchScopes: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=http://www.ebay.com/sch/i.html?_nkw={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-02-04] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2014-04-09] (LastPass)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: &Yahoo! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll [2008-07-28] (Yahoo! Inc.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: PasswordBox Helper -> {5DB69B97-934B-451D-94DB-32EF802A01CD} -> C:\Program Files (x86)\PasswordBox\Application\pbbtn.dll No File
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-21] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-02-04] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll [2014-04-09] (LastPass)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-21] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: SingleInstance Class -> {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll [2008-07-28] (Yahoo! Inc)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2014-04-09] (LastPass)
Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll [2008-07-28] (Yahoo! Inc.)
Toolbar: HKLM-x32 - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2014-04-09] (LastPass)
Toolbar: HKU\S-1-5-21-4245574805-2178375736-1859896947-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455} 
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll [2014-01-10] (AVG Secure Search)
Winsock: Catalog9-x64 01 C:\Windows\system32\VOTPrx64.dll File Not ' & $found1 & '
Winsock: Catalog9-x64 02 C:\Windows\system32\VOTPrx64.dll File Not ' & $found1 & '
Winsock: Catalog9-x64 03 C:\Windows\system32\VOTPrx64.dll File Not ' & $found1 & '
Winsock: Catalog9-x64 04 C:\Windows\system32\VOTPrx64.dll File Not ' & $found1 & '
Winsock: Catalog9-x64 15 C:\Windows\system32\VOTPrx64.dll File Not ' & $found1 & '
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 205.171.3.25
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
 
FireFox:
========
FF ProfilePath: C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default
FF DefaultSearchEngine.US: Google
FF DefaultSearchUrl: hxxp://us.yhs4.search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF SearchEngineOrder.3: Bing 
FF SelectedSearchEngine: Yahoo!
FF Homepage: Google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2014-04-09] (LastPass)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.3.0\\npsitesafety.dll [2014-01-10] (AVG Technologies)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-21] (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass.dll [2014-04-09] (LastPass)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-05] ()
FF Plugin HKU\S-1-5-21-4245574805-2178375736-1859896947-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Mr. Smokey Mokums\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-03-27] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-4245574805-2178375736-1859896947-1001: sony.com/MediaGoDetector -> C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll [2014-07-10] (Sony Network Entertainment International LLC)
FF user.js: detected! => C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default\user.js [2015-03-17]
FF SearchPlugin: C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default\searchplugins\bingp.xml [2013-06-21]
FF SearchPlugin: C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default\searchplugins\safeguard-secure-search.xml [2013-12-08]
FF SearchPlugin: C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default\searchplugins\yahoo-avast.xml [2014-06-07]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml [2014-01-10]
FF Extension: Click&Clean - C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default\Extensions\clickclean@hotcleaner.com [2014-05-02]
FF Extension: LastPass - C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default\Extensions\support@lastpass.com [2014-08-27]
FF Extension: Save Images - C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default\Extensions\LDSI_plashcor@gmail.com.xpi [2015-02-24]
FF Extension: Snap Links Plus - C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default\Extensions\snaplinks@snaplinks.mozdev.org.xpi [2014-08-25]
FF Extension: Stylish - C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2014-05-02]
FF Extension: Adblock Plus - C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mozilla\Firefox\Profiles\k5c25zqe.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-02]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-06-21]
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.3.2.101
FF HKLM-x32\...\Firefox\Extensions: [firefox@passwordbox.com] - C:\Program Files (x86)\PasswordBox\Firefox
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-22]
FF HKU\S-1-5-21-4245574805-2178375736-1859896947-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
StartMenuInternet: FIREFOX.EXE - firefox.exe
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2015-04-24] <==== ATTENTION
 
Chrome: 
=======
CHR Profile: C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-28]
CHR Extension: (Adblock for Youtube™) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2014-04-15]
CHR Extension: (AdBlock) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-01-28]
CHR Extension: (Bookmark Manager) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-21]
CHR Extension: (Lunaria Story) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohldomknihdgjdinaabghnpnkjhkgcm [2015-04-27]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-04-15]
CHR Extension: (Snap Links Lite) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\idmmhhijggcmbeejedibpdcahpkneegg [2014-04-15]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Awesome New Tab Page) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg [2014-04-15]
CHR Extension: (Quick Note) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\mijlebbfndhelmdpmllgcfadlkankhok [2014-04-15]
CHR Extension: (GetThemAll Video Downloader) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbkekaeindpfpcoldfckljplboolgkfm [2015-03-16]
CHR Extension: (LastPass Vault) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncliohomlfopnmlfkepkcbnhmeijkhhf [2014-04-15]
CHR Extension: (Google Wallet) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (Any.do) - C:\Users\Mr. Smokey Mokums\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocgddccilgpeepgglnlpchkpgamkgmld [2014-04-15]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-04]
CHR HKLM-x32\...\Chrome\Extension: [ihenkjeihefokohmemphikjnjbmegdik] - "C:\Program Files (x86)\Sony\Media Go\MediaGoDetector.crx" [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG SafeGuard toolbar\ChromeExt\17.3.2.101\avg.crx [2014-01-10]
 
Opera: 
=======
OPR Extension: (Adblock Plus) - C:\Users\Mr. Smokey Mokums\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2014-07-05]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-08-23] (SUPERAntiSpyware.com)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-20] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-02-04] (AVAST Software)
R2 CalendarSynchService; C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe [16384 2011-08-16] (Hewlett-Packard) [File not signed]
S2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64616 2014-11-03] (CyberGhost S.R.L)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1254400 2015-04-27] (Microsoft Corporation)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [128280 2011-12-16] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [581568 2014-03-27] (RealNetworks, Inc.)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-08-12] (PDF Complete Inc)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S4 PRMonitorService; C:\Program Files (x86)\Personal Renamer\PRService1.exe [58368 2010-11-25] (VC) [File not signed]
S4 vToolbarUpdater17.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [1772056 2014-01-10] (AVG Secure Search)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)
S2 PasswordBox; "C:\Program Files (x86)\PasswordBox\pbbtnService.exe" [X]
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [31744 2012-06-05] (Google Inc)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-02-04] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2015-02-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-02-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-02-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-02-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-02-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-02-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-02-04] ()
S3 DIRECTIO; C:\Program Files\PerformanceTest\DirectIo64.sys [25704 2012-08-13] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-05-28] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 WsAudio_Device(1); C:\Windows\System32\drivers\VirtualAudio1.sys [31080 2013-01-25] (Wondershare)
R3 WsAudio_Device(2); C:\Windows\System32\drivers\VirtualAudio2.sys [31080 2013-01-25] (Wondershare)
R3 WsAudio_Device(3); C:\Windows\System32\drivers\VirtualAudio3.sys [31080 2013-01-25] (Wondershare)
R3 WsAudio_Device(4); C:\Windows\System32\drivers\VirtualAudio4.sys [31080 2013-01-25] (Wondershare)
R3 WsAudio_Device(5); C:\Windows\System32\drivers\VirtualAudio5.sys [31080 2013-01-25] (Wondershare)
S2 X5XSEx_Pr143; \??\C:\Program Files (x86)\Free Ride Games\X5XSEx_Pr143.Sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-05-28 20:15 - 2015-05-28 20:16 - 00033444 _____ () C:\Users\Mr. Smokey Mokums\Downloads\FRST.txt
2015-05-28 20:15 - 2015-05-28 20:15 - 00000000 ____D () C:\FRST
2015-05-28 20:14 - 2015-05-28 20:15 - 02108928 _____ (Farbar) C:\Users\Mr. Smokey Mokums\Downloads\FRST64.exe
2015-05-28 13:52 - 2015-05-28 13:52 - 00324639 _____ () C:\Users\Apps\local-files-desktop.spa
2015-05-27 23:00 - 2015-05-28 03:31 - 00003264 _____ () C:\Windows\System32\Tasks\Trojan Killer
2015-05-27 22:59 - 2015-05-27 22:59 - 00000000 ____D () C:\ProgramData\GridinSoft
2015-05-27 22:55 - 2015-05-27 22:56 - 70276192 _____ (GridinSoft LLC) C:\Users\Mr. Smokey Mokums\Downloads\gtk-2.2.7.2-setup.exe
2015-05-27 22:38 - 2015-05-28 13:12 - 00052974 _____ () C:\Windows\PFRO.log
2015-05-26 20:47 - 2015-05-26 20:47 - 00001072 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-05-26 20:44 - 2015-05-26 20:44 - 00323655 _____ () C:\Users\Mr. Smokey Mokums\Downloads\EtjSKIO.webm
2015-05-25 00:03 - 2015-05-28 20:01 - 00000728 _____ () C:\Windows\setupact.log
2015-05-25 00:03 - 2015-05-25 00:03 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-24 05:31 - 2015-05-24 05:31 - 00000000 __SHD () C:\Users\Mr. Smokey Mokums\AppData\Local\EmieBrowserModeList
2015-05-24 05:29 - 2015-05-24 05:30 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\AppData\Local\Chromium
2015-05-21 17:54 - 2015-05-28 13:52 - 00145701 _____ () C:\Users\Apps\hub.spa
2015-05-18 21:45 - 2015-05-18 21:45 - 00000082 _____ () C:\Program Files (x86)\Free Ride GamesGlobalTime.xml
2015-05-18 21:41 - 2015-05-18 21:41 - 00000064 _____ () C:\Windows\GPlrLanc.dat
2015-05-18 21:41 - 2015-05-18 21:41 - 00000000 ____D () C:\ProgramData\Free Ride Games
2015-05-18 21:41 - 2013-07-14 09:58 - 00058264 ____N (Exent Technologies Ltd.) C:\Windows\ExentInfo.exe
2015-05-13 03:02 - 2015-05-01 07:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 03:02 - 2015-05-01 07:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-12 17:08 - 2015-05-04 19:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-12 17:08 - 2015-05-04 19:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-12 17:08 - 2015-04-21 20:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-12 17:08 - 2015-04-21 19:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-12 17:08 - 2015-04-21 11:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-12 17:08 - 2015-04-21 11:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-12 17:08 - 2015-04-21 11:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-12 17:08 - 2015-04-21 10:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-12 17:08 - 2015-04-21 10:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-12 17:08 - 2015-04-21 10:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-12 17:08 - 2015-04-21 10:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-12 17:08 - 2015-04-21 10:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-12 17:08 - 2015-04-21 10:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-12 17:08 - 2015-04-21 10:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-12 17:08 - 2015-04-21 10:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-12 17:08 - 2015-04-21 10:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-12 17:08 - 2015-04-21 10:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-12 17:08 - 2015-04-21 10:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-12 17:08 - 2015-04-21 10:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-12 17:08 - 2015-04-21 10:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-12 17:08 - 2015-04-21 10:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-12 17:08 - 2015-04-21 10:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-12 17:08 - 2015-04-21 10:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-05-12 17:08 - 2015-04-21 10:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-12 17:08 - 2015-04-21 10:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-12 17:08 - 2015-04-21 10:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-12 17:08 - 2015-04-21 10:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-12 17:08 - 2015-04-21 10:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-05-12 17:08 - 2015-04-21 10:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-05-12 17:08 - 2015-04-21 10:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-12 17:08 - 2015-04-21 10:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-12 17:08 - 2015-04-21 10:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-12 17:08 - 2015-04-21 10:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-05-12 17:08 - 2015-04-21 10:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-12 17:08 - 2015-04-21 10:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-12 17:08 - 2015-04-21 10:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-05-12 17:08 - 2015-04-21 10:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-05-12 17:08 - 2015-04-21 10:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-05-12 17:08 - 2015-04-21 09:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-12 17:08 - 2015-04-21 09:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-05-12 17:08 - 2015-04-21 09:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-05-12 17:08 - 2015-04-21 09:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-12 17:08 - 2015-04-21 09:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-12 17:08 - 2015-04-21 09:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-05-12 17:08 - 2015-04-21 09:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-12 17:08 - 2015-04-21 09:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-12 17:08 - 2015-04-21 09:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-05-12 17:08 - 2015-04-21 09:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-12 17:08 - 2015-04-21 09:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-05-12 17:08 - 2015-04-21 09:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-12 17:08 - 2015-04-21 09:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-12 17:08 - 2015-04-21 09:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-12 17:08 - 2015-04-21 09:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-12 17:08 - 2015-04-21 09:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-12 17:08 - 2015-04-21 09:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-12 17:08 - 2015-04-21 09:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-05-12 17:08 - 2015-04-21 09:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-12 17:08 - 2015-04-21 09:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-12 17:08 - 2015-04-21 09:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-12 17:08 - 2015-04-21 09:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-12 17:08 - 2015-04-21 08:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-12 17:08 - 2015-04-21 08:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-12 17:08 - 2015-04-17 21:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-12 17:08 - 2015-04-17 20:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-12 17:06 - 2015-04-27 13:28 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-12 17:06 - 2015-04-27 13:28 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-12 17:06 - 2015-04-27 13:28 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-12 17:06 - 2015-04-27 13:26 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-05-12 17:06 - 2015-04-27 13:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-05-12 17:06 - 2015-04-27 13:22 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-12 17:06 - 2015-04-27 13:22 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-05-12 17:06 - 2015-04-27 13:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-12 17:06 - 2015-04-27 13:22 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-12 17:06 - 2015-04-27 13:22 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-12 17:06 - 2015-04-27 13:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-12 17:06 - 2015-04-27 13:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-12 17:06 - 2015-04-27 13:22 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-12 17:06 - 2015-04-27 13:22 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-12 17:06 - 2015-04-27 13:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-12 17:06 - 2015-04-27 13:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-12 17:06 - 2015-04-27 13:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 13:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-05-12 17:06 - 2015-04-27 13:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-05-12 17:06 - 2015-04-27 13:08 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-05-12 17:06 - 2015-04-27 13:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-05-12 17:06 - 2015-04-27 13:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-05-12 17:06 - 2015-04-27 13:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-05-12 17:06 - 2015-04-27 13:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-05-12 17:06 - 2015-04-27 13:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-05-12 17:06 - 2015-04-27 13:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-05-12 17:06 - 2015-04-27 13:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-05-12 17:06 - 2015-04-27 13:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-05-12 17:06 - 2015-04-27 13:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-05-12 17:06 - 2015-04-27 13:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-05-12 17:06 - 2015-04-27 13:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-05-12 17:06 - 2015-04-27 13:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-05-12 17:06 - 2015-04-27 13:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-05-12 17:06 - 2015-04-27 13:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-05-12 17:06 - 2015-04-27 13:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-05-12 17:06 - 2015-04-27 13:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-05-12 17:06 - 2015-04-27 13:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-05-12 17:06 - 2015-04-27 13:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-05-12 17:06 - 2015-04-27 13:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-05-12 17:06 - 2015-04-27 13:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-05-12 17:06 - 2015-04-27 13:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-05-12 17:06 - 2015-04-27 13:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-05-12 17:06 - 2015-04-27 13:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-05-12 17:06 - 2015-04-27 13:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-05-12 17:06 - 2015-04-27 13:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 12:06 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-12 17:06 - 2015-04-27 11:57 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-05-12 17:06 - 2015-04-27 11:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-05-12 17:06 - 2015-04-27 11:55 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 11:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 11:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-05-12 17:06 - 2015-04-27 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-05-12 17:06 - 2015-04-19 21:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-12 17:06 - 2015-04-12 21:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-12 17:05 - 2015-04-19 21:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-12 17:05 - 2015-04-19 20:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-12 17:05 - 2015-04-19 20:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-12 17:05 - 2015-04-07 21:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-12 17:05 - 2015-04-07 21:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-12 17:05 - 2015-04-07 21:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-05-12 17:05 - 2015-03-03 22:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-12 17:05 - 2015-03-03 22:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-12 17:05 - 2015-03-03 22:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-12 17:05 - 2015-03-03 22:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-12 17:05 - 2015-03-03 22:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-05-12 17:05 - 2015-03-03 22:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-05-12 17:05 - 2015-03-03 22:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-12 17:05 - 2015-02-18 01:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-12 17:05 - 2015-02-18 01:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-12 17:05 - 2015-01-28 21:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-12 17:05 - 2015-01-28 21:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-04 20:17 - 2015-05-04 20:17 - 00000000 ____D () C:\ProgramData\Sandlot Games
2015-05-04 04:14 - 2015-05-04 04:14 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\AppData\Local\CrashRpt
2015-05-04 04:12 - 2015-05-25 12:22 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\AppData\Roaming\Angry_Birds
2015-04-28 17:08 - 2015-04-28 17:08 - 00004286 _____ () C:\Users\Mr. Smokey Mokums\Downloads\happy fairy tail.cur
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-05-28 20:01 - 2015-02-06 14:21 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\AppData\Local\Spotify
2015-05-28 20:01 - 2015-02-06 14:20 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\AppData\Roaming\Spotify
2015-05-28 14:11 - 2015-01-03 13:52 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\Desktop\Farmville
2015-05-28 13:52 - 2015-04-23 13:07 - 41287224 _____ () C:\Users\libcef.dll
2015-05-28 13:52 - 2015-04-23 13:07 - 10457856 _____ () C:\Users\icudtl.dat
2015-05-28 13:52 - 2015-04-23 13:07 - 07323192 _____ (Spotify Ltd) C:\Users\Spotify.exe
2015-05-28 13:52 - 2015-04-23 13:07 - 04253463 _____ () C:\Users\devtools_resources.pak
2015-05-28 13:52 - 2015-04-23 13:07 - 03457592 _____ (Microsoft Corporation) C:\Users\d3dcompiler_47.dll
2015-05-28 13:52 - 2015-04-23 13:07 - 02314260 _____ () C:\Users\Apps\musixmatch-lyrics.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 02157552 _____ () C:\Users\Apps\glue-resources.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 02106424 _____ (Microsoft Corporation) C:\Users\d3dcompiler_43.dll
2015-05-28 13:52 - 2015-04-23 13:07 - 02021944 _____ (Spotify Ltd) C:\Users\SpotifyWebHelper.exe
2015-05-28 13:52 - 2015-04-23 13:07 - 02018406 _____ () C:\Users\cef.pak
2015-05-28 13:52 - 2015-04-23 13:07 - 01488440 _____ () C:\Users\libGLESv2.dll
2015-05-28 13:52 - 2015-04-23 13:07 - 00968248 _____ (The Chromium Authors) C:\Users\ffmpegsumo.dll
2015-05-28 13:52 - 2015-04-23 13:07 - 00828468 _____ () C:\Users\Apps\zlink.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00777272 _____ (Spotify Ltd) C:\Users\SpotifyCrashService.exe
2015-05-28 13:52 - 2015-04-23 13:07 - 00713882 _____ () C:\Users\Apps\browse.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00598403 _____ () C:\Users\cef_200_percent.pak
2015-05-28 13:52 - 2015-04-23 13:07 - 00532827 _____ () C:\Users\Apps\notification-center.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00523578 _____ () C:\Users\Apps\collection.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00505562 _____ () C:\Users\Apps\genre.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00502734 _____ () C:\Users\Apps\collection-artist.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00489222 _____ () C:\Users\Apps\discover.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00463102 _____ () C:\Users\Apps\collection-album.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00444515 _____ () C:\Users\cef_100_percent.pak
2015-05-28 13:52 - 2015-04-23 13:07 - 00436638 _____ () C:\Users\Apps\article.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00419994 _____ () C:\Users\Apps\messages.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00408845 _____ () C:\Users\Apps\album.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00385462 _____ () C:\Users\Apps\social-feed.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00363379 _____ () C:\Users\Apps\collection-songs.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00361920 _____ () C:\Users\Apps\charts.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00357199 _____ () C:\Users\Apps\artist.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00345753 _____ () C:\Users\Apps\social-chart.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00344387 _____ () C:\Users\Apps\buddy-list.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00331084 _____ () C:\Users\Apps\playlist-desktop.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00299819 _____ () C:\Users\Apps\radio.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00285287 _____ () C:\Users\Apps\folder.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00251227 _____ () C:\Users\Apps\profile.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00246374 _____ () C:\Users\Apps\share.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00233679 _____ () C:\Users\Apps\chart.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00209721 _____ () C:\Users\Apps\findfriends.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00191376 _____ () C:\Users\Apps\search.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00178608 _____ () C:\Users\Apps\settings.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00177470 _____ () C:\Users\Apps\suggest.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00162516 _____ () C:\Users\Apps\zlink-queue.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00158229 _____ () C:\Users\Apps\follow.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00124472 _____ (Spotify Ltd) C:\Users\SpotifyLauncher.exe
2015-05-28 13:52 - 2015-04-23 13:07 - 00112424 _____ () C:\Users\Apps\zlogin.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00086386 _____ () C:\Users\Apps\about.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00079928 _____ () C:\Users\libEGL.dll
2015-05-28 13:52 - 2015-04-23 13:07 - 00073272 _____ () C:\Users\wow_helper.exe
2015-05-28 13:52 - 2015-04-23 13:07 - 00053462 _____ () C:\Users\Apps\ad.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00040253 _____ () C:\Users\Apps\licenses.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00038320 _____ () C:\Users\Apps\error.spa
2015-05-28 13:52 - 2015-04-23 13:07 - 00013506 _____ () C:\Users\locales\en-US.pak
2015-05-28 13:52 - 2015-04-23 13:07 - 00007047 _____ () C:\Users\locales\el.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00006945 _____ () C:\Users\locales\ru.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00006203 _____ () C:\Users\locales\ja.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00006086 _____ () C:\Users\locales\fr-CA.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00006079 _____ () C:\Users\locales\hu.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00006022 _____ () C:\Users\locales\fr.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00006007 _____ () C:\Users\locales\fi.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00006006 _____ () C:\Users\locales\pl.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005947 _____ () C:\Users\locales\es-419.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005914 _____ () C:\Users\locales\nl.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005872 _____ () C:\Users\locales\es.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005868 _____ () C:\Users\locales\zsm.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005868 _____ () C:\Users\locales\de.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005859 _____ () C:\Users\locales\tr.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005859 _____ () C:\Users\locales\it.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005858 _____ () C:\Users\locales\zh-Hant.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005852 _____ () C:\Users\locales\pt-BR.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005808 _____ () C:\Users\locales\sv.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005694 _____ () C:\Users\locales\arb.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00005623 _____ () C:\Users\locales\en.mo
2015-05-28 13:52 - 2015-04-23 13:07 - 00000020 _____ () C:\Users\inst_ver.dat
2015-05-28 13:52 - 2015-04-23 13:07 - 00000000 ____D () C:\Users\locales
2015-05-28 13:51 - 2015-04-23 13:07 - 00000000 _____ () C:\Users\Mr..redir
2015-05-28 13:45 - 2014-11-18 20:56 - 01726721 _____ () C:\Windows\WindowsUpdate.log
2015-05-28 13:20 - 2009-07-13 22:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-28 13:20 - 2009-07-13 22:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-28 13:16 - 2015-03-17 00:40 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-28 13:13 - 2012-03-12 13:25 - 00000000 ____D () C:\ProgramData\PDFC
2015-05-28 13:12 - 2009-07-13 23:08 - 00032594 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-28 13:12 - 2009-07-13 23:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-28 05:14 - 2013-06-20 21:10 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-28 05:05 - 2013-06-20 21:32 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-28 04:13 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\Resources
2015-05-28 03:24 - 2014-06-09 21:39 - 00000412 _____ () C:\Windows\Tasks\update-S-1-5-21-4245574805-2178375736-1859896947-1001.job
2015-05-28 02:18 - 2014-06-09 21:39 - 00000412 _____ () C:\Windows\Tasks\update-sys.job
2015-05-28 02:17 - 2014-10-17 12:33 - 00000380 _____ () C:\Windows\Tasks\HPCeeScheduleForMr. Smokey Mokums.job
2015-05-28 00:03 - 2013-06-20 21:06 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{C3EC2545-DEEE-4A33-83E4-A1C7BDFB774D}
2015-05-27 22:39 - 2013-06-20 21:10 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-27 22:38 - 2013-06-20 21:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-27 22:38 - 2009-07-13 23:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2015-05-27 22:35 - 2013-06-25 19:55 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\AppData\Local\CrashDumps
2015-05-27 22:21 - 2013-06-21 16:54 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\AppData\Local\WMTools Downloaded Files
2015-05-27 22:11 - 2013-07-20 20:17 - 00214528 _____ () C:\Users\Mr. Smokey Mokums\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-05-27 14:09 - 2014-05-22 04:52 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-05-27 14:08 - 2013-06-20 23:58 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-05-26 20:47 - 2013-06-20 22:19 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\AppData\Roaming\vlc
2015-05-25 14:22 - 2014-04-26 13:07 - 00003212 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForTOKYO$
2015-05-25 14:22 - 2014-04-26 13:07 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForTOKYO$.job
2015-05-25 05:25 - 2015-03-17 00:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-05-25 05:25 - 2015-03-17 00:40 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-05-25 03:40 - 2009-07-13 23:13 - 00783424 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-25 03:39 - 2013-06-21 19:47 - 00000000 ____D () C:\Hermanito
2015-05-24 05:38 - 2014-10-12 19:24 - 00000000 ____D () C:\Program Files\Speccy
2015-05-23 13:28 - 2015-04-24 21:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-22 14:17 - 2014-10-17 12:33 - 00003258 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForMr. Smokey Mokums
2015-05-22 14:16 - 2013-06-21 12:56 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2015-05-21 20:45 - 2013-10-08 22:01 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\AppData\Roaming\Mp3tag
2015-05-20 14:18 - 2014-06-03 21:44 - 00003824 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1397332047
2015-05-20 14:18 - 2013-06-20 21:29 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-05-18 21:43 - 2014-03-28 20:09 - 00001977 _____ () C:\Users\Mr. Smokey Mokums\Desktop\Play Burger Shop 2.lnk
2015-05-18 21:41 - 2012-03-12 13:08 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-05-18 21:12 - 2012-03-12 13:10 - 00000000 ____D () C:\ProgramData\Temp
2015-05-17 19:00 - 2015-04-05 03:00 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-05-17 19:00 - 2015-04-05 03:00 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-16 00:38 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\rescache
2015-05-15 14:09 - 2013-06-20 21:10 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-15 14:09 - 2013-06-20 21:10 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-13 20:46 - 2015-04-13 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-05-13 20:46 - 2015-04-13 14:06 - 00000000 ____D () C:\ProgramData\DivX
2015-05-13 20:46 - 2015-04-13 14:06 - 00000000 ____D () C:\Program Files (x86)\DivX
2015-05-13 14:17 - 2013-06-22 19:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-13 14:17 - 2013-06-22 19:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-05-13 14:17 - 2009-07-13 22:45 - 00296600 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-13 05:17 - 2010-11-21 01:17 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-13 05:17 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-13 03:19 - 2013-06-20 23:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2015-05-13 03:19 - 2011-02-11 11:15 - 00799564 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-05-13 03:17 - 2013-08-14 15:30 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-13 03:04 - 2013-06-22 19:31 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 03:02 - 2013-06-22 19:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-09 13:20 - 2014-03-13 22:49 - 00000000 ____D () C:\Program Files (x86)\Cake Mania Main Street
2015-05-08 19:52 - 2013-06-20 22:00 - 00000000 ____D () C:\Kuvat
2015-05-07 13:25 - 2013-06-20 21:02 - 00000000 ____D () C:\Users\Mr. Smokey Mokums
2015-05-05 19:51 - 2015-04-13 14:09 - 00000000 ____D () C:\Users\Mr. Smokey Mokums\AppData\Roaming\DivX
2015-05-03 05:18 - 2009-07-13 23:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-05-02 13:01 - 2014-03-13 22:53 - 00000000 ____D () C:\Program Files (x86)\Cake Mania - To the Max
 
==================== Files in the root of some directories =======
 
2015-05-18 21:45 - 2015-05-18 21:45 - 0000082 _____ () C:\Program Files (x86)\Free Ride GamesGlobalTime.xml
2013-09-09 13:58 - 2014-01-10 20:44 - 0003745 _____ () C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml
2013-01-19 01:44 - 2013-01-19 01:44 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2013-09-18 22:37 - 2014-04-09 20:42 - 14883840 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2014-10-27 21:31 - 2015-02-21 20:54 - 0000133 _____ () C:\Users\Mr. Smokey Mokums\AppData\Roaming\licecap.ini
2013-07-20 20:17 - 2015-05-27 22:11 - 0214528 _____ () C:\Users\Mr. Smokey Mokums\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-04 20:58 - 2014-12-04 19:55 - 0000058 _____ () C:\Users\Mr. Smokey Mokums\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2014-10-30 04:38 - 2014-10-30 04:38 - 0002887 _____ () C:\Users\Mr. Smokey Mokums\AppData\Local\recently-used.xbel
2014-07-07 04:52 - 2014-07-07 04:52 - 0007605 _____ () C:\Users\Mr. Smokey Mokums\AppData\Local\Resmon.ResmonCfg
2014-06-09 21:39 - 2014-06-09 21:39 - 0000003 _____ () C:\Users\Mr. Smokey Mokums\AppData\Local\updater.log
2014-06-09 21:39 - 2015-04-23 18:19 - 0000424 _____ () C:\Users\Mr. Smokey Mokums\AppData\Local\UserProducts.xml
 
Some files in TEMP:
====================
C:\Users\Mr. Smokey Mokums\AppData\Local\Temp\SpOrder.dll
C:\Users\Mr. Smokey Mokums\AppData\Local\Temp\vlc-2.2.1-win32.exe
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-05-25 05:08
 
==================== End of log ============================
 

Attached Files



#3 satchfan

satchfan

  • Malware Response Team
  • 2,715 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:03:28 PM

Posted 29 May 2015 - 05:53 AM

Hello SongmakersCry and welcome to Bleeping Computer.

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

  • please follow all instructions in the order posted
  • please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
  • all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
  • if you don't understand something, please don't hesitate to ask for clarification before proceeding
  • the fixes are specific to your problem and should only be used for this issue on this machine.
  • please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested

===================================================

Note: Please complete these tasks in the order given in the instructions.

===================================================

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.

  • run AdwCleaner
  • when it has finished, select Clean
  • if it asks to reboot, allow the reboot
  • on reboot a log will be produced; please attach the content of the log to your next reply.

===================================================

Download and run Windows Repair (all in one)

Download Windows Repair (all in one) from here

  • install and then run the program
  • at the top, click on the Repairs button & make sure that “Automatically Do a Registry Backup” is checked. When it is finished you will see a message saying that the Registry is backed up
  • click the Open Repairs button
  • on the “Start Repairs” tab click Start


    DwysfIW.jpg
     

  • at the “Repair Options” screen, be sure the following are selected:


    Reset Registry Permissions
    Remove Policies Set By Infections
    Repair Winsock and DNS cache

     

  • also check Restart System When Finished.
  • now press Start.

Once all that is complete, please run FRST again and send the new log.

Logs to include with next post:

AdwCleaner log
JRT.txt
New FRST.txt


Thanks

Satchfan

 


My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#4 satchfan

satchfan

  • Malware Response Team
  • 2,715 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:03:28 PM

Posted 31 May 2015 - 07:32 AM

Hi SongmakersCry

It has been a couple of days since I replied to your request for help with your computer problems.

Please let me know if you are having problems and still need help.

Thanks

Satchfan


My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#5 satchfan

satchfan

  • Malware Response Team
  • 2,715 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:03:28 PM

Posted 01 June 2015 - 09:54 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.

My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users