Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

rand new laptop (seemingly) had malware on, can't get rid of cookies


  • This topic is locked This topic is locked
50 replies to this topic

#1 Martin_P

Martin_P

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 09 March 2016 - 12:01 PM

Hi all, have been advised to post here. Here is the link to the original thread. http://www.bleepingcomputer.com/forums/t/607162/my-brand-new-laptop-is-infected-and-i-am-at-end-of-tether/page-3

 

I am concerned as to why SuperAntiSpyware found so many cookies when had only ever visited that site to download the free program.

 

Every SAS scan since (including after the nasties have been removed by that program) shows 600-1000 PUPs on the computer, which reappear whenever I shut it down and switch it off fr the day.

 

Are the logs on that thread's 3rd page anything to be concerned about? I will repost the last one here, if that is okay, guys.

 

Scan type       : Complete Scan
Total Scan Time : 00:48:36
 
Operating System Information
Windows 8.1 Home 64-bit (Build 6.03.9600)
UAC On - Limited User
 
Memory items scanned      : 897
Memory threats detected   : 0
Registry items scanned    : 59857
Registry threats detected : 0
File items scanned        : 20138
File threats detected     : 556
 
Adware.Tracking Cookie
.doubleclick.net\id [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.doubleclick.net\IDE [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.yadro.ru\FTID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.yadro.ru\VID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mgid.com\muidn [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.scorecardresearch.com\UID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.scorecardresearch.com\UIDR [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bluekai.com\bkdc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mathtag.com\uuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mathtag.com\uuidc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.crwdcntrl.net\_cc_dc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.lijit.com\ljt_reader [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtechus.com\JEB2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.imrworldwide.com\IMRID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\DPSync2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.demdex.net\demdex [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.dpm.demdex.net\dpm [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KRTBCOOKIE_240 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sekindo.com\dp4h [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sekindo.com\v6151334 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sitescout.com\_ssum [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adtech.de\JEB2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sekindo.com\v5726136 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sekindo.com\fro0c42346bn [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sekindo.com\fro0valbn [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sekindo.com\fro0impsbn [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\pubfreq_30577 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\pubtime_30577 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\PMDTSHR [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\cli [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchcasale [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.owneriq.net\si [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.criteo.com\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com\C5 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com\D2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.everesttech.net\gglck [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adadvisor.net\ab [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.lijit.com\_ljtrtb_1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-171 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com\TestIfCookieP [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sxp.smartclip.net\uuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sxp.smartclip.net\psyn [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.geo-um.btrll.com\jncRULOV [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.teads.tv\tt_viewer [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.univide.com\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adaptv.advertising.com\adaptv_unique_user_cookie [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.liverail.com\lr_uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.jumptap.com\jtc-mdwbtbh [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.univide.com\ex [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.univide.com\ext [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adbrn.com\rscscap [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.dianomi.com\__cfduid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media.net\visitor-id [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com\OT2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.config.parsely.com\parsely_network_uuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
trc.taboola.com\taboola_upci [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\csi10 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\csc10 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
statse.webtrendslive.com\ACOOKIE [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.dianomi.com\_ga [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
p2.keywee.co\sp [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\au [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.chango.com\_i_rc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2313 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2810 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2307 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2245 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2974 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adform.net\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adform.net\C [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.relestar.com\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.servesharp.net\UUID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.servesharp.net\UREGION [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2731 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_1902 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_1994 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_1197 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_3778 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2243 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_3468 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
match.rundsp.com\RUN_ID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.erne.co\u [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2861 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2676 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.c.appier.net\_auid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2323 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2238 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tap-t.rubiconproject.com\dq [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_3632 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2950 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2590 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2082 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adgrx.com\ADGRX_UID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.virool.com\vrlid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_1185 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2309 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2146 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adgrx.com\ADGRX_CM_RUBICON_BRIDGED [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_1512 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_3838 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.dotomi.com\DotomiUser [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2046 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_4032 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.eyeota.net\mako_uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rlcdn.com\ck1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tru.am\__cfduid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.teads.tv\tt_exelate [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bidswitch.net\c [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tru.am\mid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ox-d.one-and-one.servedbyopenx.com\OX_u [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.audienceiq.com\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rhythmxchange.com\_rxuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mxptint.net\mxpim [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rfihub.com\smd [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com\svid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com\rts [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smaato.net\SomaCookieUserId [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gssprt.jp\gid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.wtp101.com\cookie_born [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.chango.com\_i_ca [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adgrx.com\ADGRX_CM_CASALE_US_BRIDGED [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.wtp101.com\lldt [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads2.williamhill.com\NetRefer_CookieUniTrack_V [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads2.williamhill.com\NetRefer_CookieUniTrack_C [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads2.williamhill.com\NetReferSPS [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.williamhill.com\banner_click [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.williamhill.com\clickinfo [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.wtp101.com\synced [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com\ATN [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.turn.com\fc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com\pid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com\pdomid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com\sasd2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com\sasd [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com\dyncdn [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rtbidder.net\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.btrll.com\BR_APS [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.flashtalking.com\flashtalkingad1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.iasds01.com\AC [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.dmtry.com\aid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\jpcleaner [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\_z52_4973a44615 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\_z52_4973a26979 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\_z52_4973a89532 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\_z52_4973a58448 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\_z52_4973a89531 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\_z52_4973a60135 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\_z52_4973a32711 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mookie1.com\syncdata_AN [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_1986 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\apnx [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\ddp_us [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\idtest1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\lrhs [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\blki [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\fwmn [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\exdp [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\lvrp [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\tinc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\krcs [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\tiki [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\axlr [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\azcs [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\lrep [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net\live [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.chango.com\_i_ox [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.taboola.com\t_gid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.taboola.com\taboola_usg [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ligadx.com\LIG_ULT [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ligadx.com\LIG_U16 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media.net\data [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tremorhub.com\tv_UIAN [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KRTBCOOKIE_57 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchbidswitch [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.simpli.fi\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.iasds01.com\DMADT [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.eyereturn.com\er_guid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.acuityplatform.com\auid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adgrx.com\ADGRX_CM_CASALE_BRIDGED [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.eyeviewads.com\__ev_uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rlcdn.com\ids [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.crwdcntrl.net\_cc_domain [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.basebanner.com\cicouid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.afy11.net\a [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.lijit.com\_ljtrtb_12 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_3876 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ebdr3.com\guid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ebdr3.com\duid_340 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-951 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.nexac.com\na_id [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.nexac.com\na_an [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-159 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-717 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2271 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.po.st\post_dcm [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adsby.bidtheatre.com\__kuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.m6r.eu\id [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.m6r.eu\improve-digital [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adscience.nl\viewer [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adscience.nl\id_ts [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rvty.net\RTBUserId [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mathtag.com\HRL8 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.visualdna.com\vdnaR [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.semasio.net\SEUNCY [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchaddthis [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.audiencemanager.de\Nano [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.audiencemanager.de\NmpAddThis [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com\IDSYNC [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\um [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\bt2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\dt [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\di2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\vc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\uvc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\loc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com\mojo3 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bs.serving-sys.com\eyeblaster [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tynt.com\__cfduid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\csi2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\csc2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tap2-cdn.rubiconproject.com\pux [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bidr.io\bito [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2650 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2181 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_3320 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2820 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_4114 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_3734 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mathtag.com\mt_misc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.optimatic.com\opt_cc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tubemogul.com\_tmid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-45 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2249 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-892 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KRTBCOOKIE_80 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-529 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.legolas-media.com\ui [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-617 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2909 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.skimresources.com\skimCSP [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.skimresources.com\skimGUID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.sitescout.com\ssi [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-838 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.company-target.com\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-772 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-687 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com\acs [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.dyntrk.com\dyn_u [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com\vstcnt [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com\clid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com\sglst [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-57 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tellapart.com\__cmbGU [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
t.tellapart.com\AWSELB [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.chango.com\_i_an2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchan [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
pixel.sitescout.com\_ssum [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com\UMAP [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\OAID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.stickyadstv.com\uid-bp-583 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.connexity.net\COu [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.swid.switchads.com\MMTH [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tidaltv.com\tidal_ttid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adgrx.com\ADGRX_CM_APPNEXUS_BRIDGED [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.lijit.com\_ljtrtb_3 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.go.sonobi.com\__uin_mm [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mookie1.com\sync_ib1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.jivox.com\jvxtrb [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ibeu2.mookie1.com\ibkukinet [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mookie1.com\syncdata_JVX [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.wtp101.com\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adfarm1.adition.com\UserID1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.254a.com\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
pool.admedo.com\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pool.admedo.com\is [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fastclick.net\cttutcid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.metrigo.com\id [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.metrigo.com\ici [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fastclick.net\pluto [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pswec.com\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.creative-serving.com\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com\ACID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com\ASCID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com\C2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com\F1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com\FC [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bskyb.demdex.net\bskyb [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bskyb.demdex.net\DexLifeCycle [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.legolas-media.com\udt [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adsymptotic.com\U [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ipredictive.com\cu [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
go.flx1.com\check [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
go.flx1.com\id [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
go.flx1.com\r [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
go.flx1.com\ans3 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
go.flx1.com\dbm1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
pix.btrll.com\cap_617653 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchopenx [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchdemdex [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchappnexus [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchbluekai [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.swid.switchads.com\IPON [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_1523 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KRTBCOOKIE_107 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchliveramp [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchtapad [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchspotx [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchrubicon [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchbrightroll [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchpubmatic [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchtwitter [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchfbx [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchgoogle [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.everesttech.net\everest_g_v2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchimprovedigital [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atemda.com\UM1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atemda.com\vi [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atemda.com\fid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tremorhub.com\tv_UIDX [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchtremor [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchcontextweb [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchexelate [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchkrux [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchxaxis [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchdlx [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchadaptv [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchadscale [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchrhythmone [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchtargus [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adhigh.net\gi_u [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adhigh.net\bsw_sync [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ibeu2.mookie1.com\ibkukiuno [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adgrx.com\ADGRX_CM_IPONWEB_BRIDGED [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.betweendigital.com\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.betweendigital.com\um2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.netseer.com\netseer_v3_vi [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.eqads.com\EQUser [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.lijit.com\_ljtrtb_26 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\matchyahoo [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ctnsnet.com\opt [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ctnsnet.com\pb [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ctnsnet.com\con [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ctnsnet.com\cid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.solocpm.com\nb_sh_glb_view [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tekblue.net\TRK [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tekblue.net\TRKMONTH [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tekblue.net\TRK30 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.360yield.com\um [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.360yield.com\umeh [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.weborama.fr\AFFICHE_W [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bilinmedia.net\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adsymptotic.com\A [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revcontent.com\adb_blk [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revcontent.com\s_0 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gwallet.com\ra1_sid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gwallet.com\ra1_uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gwallet.com\ra1_pd [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gwallet.com\ra1_pd_360219593 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gwallet.com\ra1_sgm [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gwallet.com\ra1_sgm_761517485 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gwallet.com\RA1balancer [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.chango.com\_t [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.chango.com\_vt [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.chango.com\_i_aol [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gumgum.com\vst [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.criteo.com\udc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.criteo.com\zdi [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.turn.com\rrs [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.turn.com\rds [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.turn.com\rv [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.po.st\post_uuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cdn.taboola.com\akaas_abtesting [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\ruid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\rsid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.unrulymedia.com\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.livefyre.com\__qca [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.livefyre.com\__utmt [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.visualdna.com\vdnaWidgetMC [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\ses57 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\vis57 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\csi57 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\csc57 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\ses15 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\vis15 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\csi15 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\csc15 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.livefyre.com\__utma [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.livefyre.com\__utmb [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.livefyre.com\__utmc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.livefyre.com\__utmz [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2931 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.unrulymedia.com\unruly_u [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com\CMSC [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com\CMDD [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
pix.btrll.com\cap_114943 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.dmtracker.com\v1st [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\_z52_13110a64327 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\SERVERID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
emea.tracking.justpremium.com\jpuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
emea.tracking.justpremium.com\SERVERID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.justpremium.com\OX_u [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.360yield.com\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.360yield.com\is [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.360yield.com\fh [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.360yield.com\lcri5m [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.360yield.com\lcai9h [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.criteo.com\eid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\jpuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
uk.ads.justpremium.com\_z52_13110a64326 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.7550209.log.optimizely.com\end_user_id [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
pix.btrll.com\cap_868092 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\cd [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
tap.rubiconproject.com\dq [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.exelator.com\ud [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.exelator.com\EE [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pagefair.com\d_uniq [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.smartadserver.com\csync [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
pix.btrll.com\cap_353806 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adscale.de\uu [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ih.adscale.de\tu [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.kiosked.com\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.kiosked.com\umd [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mathtag.com\mt_mop [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.agkn.com\uuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.agkn.com\u [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.krxd.net\ServedBy [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.krxd.net\_kuid_ [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rfihub.com\g [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rfihub.com\ub [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.openx.net\i [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.openx.net\pd [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com\CMID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com\CMPS [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com\CMST [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com\CMRUM3 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.liverail.com\lr_uds [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ru4.com\X1ID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.spotxchange.com\partner-1457516404_b3f6-0 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KRTBCOOKIE_18 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_2596 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rfihub.com\ac [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rfihub.com\b [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rfihub.com\u [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rfihub.com\ruds [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rfihub.com\euds [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rfihub.com\eud [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rfihub.com\rud [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gssprt.jp\rocket [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.go.sonobi.com\__uin_bw [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.go.sonobi.com\__uig [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.go.sonobi.com\__uis [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
edigitalsurvey.com\en-persist [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.intellitxt.com\VM_PL [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.intellitxt.com\VM_PM [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net\NETID01 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.spotxchange.com\pacing-0 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.spotxchange.com\user-0 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.spotxchange.com\history-0 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.postrelease.com\visitor [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.postrelease.com\has_data [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
m.exactag.com\exactag_new_uk [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
m.exactag.com\session_session [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.gigya.com\ucid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KTPCACOOKIE [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\SyncRTB2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adbrn.com\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a.scorecardresearch.com\CP12 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a.scorecardresearch.com\CP4 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a.scorecardresearch.com\CP6 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KADUSERCOOKIE [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.intellitxt.com\VM_PM_ID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KRTBCOOKIE_22 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KRTBCOOKIE_97 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KRTBCOOKIE_27 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KRTBCOOKIE_377 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\KRTBCOOKIE_594 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\PUBRETARGET [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pubmatic.com\PUBMDCID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\rpb [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\put_3856 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pixel.rubiconproject.com\rpx [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rubiconproject.com\khaos [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.nexac.com\na_sr [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.nexac.com\na_rn [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.nexac.com\na_srp [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.turn.com\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.at.atwola.com\dmpsync [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.dailystar.co.uk\logglytrackingsession [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.3lift.com\tl_sync_start [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
api.connatix.com\cuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com\DOMSYNC [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.at.atwola.com\ATTACID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.areyouahuman.com\aoc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.areyouahuman.com\ayah_adobe_sync [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.areyouahuman.com\ayah_bluekai_sync [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.areyouahuman.com\ayah_ttd_sync [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.areyouahuman.com\ayah_bidswitch_sync [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.areyouahuman.com\ayah_dataxu_sync [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.w55c.net\wfivefivec [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adsrvr.org\TDID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adsrvr.org\TDCPM [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.nexac.com\na_tc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.angsrvr.com\dspuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.angsrvr.com\uuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.angsrvr.com\psyn [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bidswitch.net\tuuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.imrworldwide.com\CAMPAIGN [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.srv.stackadapt.com\sa-user-id [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.srv.stackadapt.com\sa-user-id-v2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zemanta.com\zuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.contextweb.com\sto-id-20480-bh [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.contextweb.com\V [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.contextweb.com\pb_rtb_ev [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adhigh.net\tpl_sync [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.3lift.com\tl_sync_idx [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.visiblemeasures.com\uid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.visiblemeasures.com\sid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.intellitxt.com\VM_USR [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.undertone.com\UTZ [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net\pudm_AAAA [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net\rtc_AAAA [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net\rts_AAAA [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.undertone.com\UTV [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.univide.com\pdv [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adaptv.advertising.com\rtbData0 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com\APID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com\A6 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com\u2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.outbrain.com\_fcap_CAM4 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.outbrain.com\_ofcap_DOC1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.outbrain.com\_utastes_1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ads.undertone.com\UTID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adnxs.com\icu [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.3lift.com\tluid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.3lift.com\tlcookieable [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tribalfusion.com\ANON_ID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.outbrain.com\obuid [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.outbrain.com\recs-b706d18e013881e03eb1f89e3a6f674c [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.dailystar.co.uk\logglytrackingsession [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adnxs.com\anj [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adnxs.com\sess [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adnxs.com\uuid2 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tapad.com\TapAd_TS [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tapad.com\TapAd_DID [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rlcdn.com\rlas3 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rlcdn.com\rtn1 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.rlcdn.com\dids2086173222 [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.jivox.com\jvxsync [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mookie1.com\id [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mookie1.com\mdata [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mookie1.com\OAX [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bluekai.com\bku [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.crwdcntrl.net\_cc_aud [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.crwdcntrl.net\_cc_cc [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.crwdcntrl.net\_cc_id [ C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
 
============
 End of Log 
============


BC AdBot (Login to Remove)

 


#2 satchfan

satchfan

  • Malware Response Team
  • 2,862 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:07:46 PM

Posted 09 March 2016 - 12:18 PM

Hello Martin_P and welcome to Bleeping Computer.

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

  • please follow all instructions in the order posted
  • please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
  • all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
  • if you don't understand something, please don't hesitate to ask for clarification before proceeding
  • the fixes are specific to your problem and should only be used for this issue on this machine.
  • please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested

===================================================

Note: Please complete these tasks in the order given in the instructions.

===================================================

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.


  • run AdwCleaner
  • when it has finished, select Clean
  • if it asks to reboot, allow the reboot
  • on reboot a log will be produced; please attach the content of the log to your next reply.

===================================================

Download and run Junkware Removal Tool

Please download Junkware Removal Tool to your desktop.

  • shut down your protection software now to avoid potential conflicts.
  • run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator"
  • the tool will open and start scanning your system
  • please be patient as this can take a while to complete depending on your system's specifications
  • on completion, a log (JRT.txt) is saved to your desktop and will automatically open
  • post the contents of JRT.txt into your next message.

===================================================

Download Malwarebytes-Anti-Malware

Click here.
 

  • double-click mbam-setup.exe and follow the prompts to install the program – (Note: Vista & Windows 7, 8, 10 users, please right-click and select “Run as Administrator”)
  • select the “Scan” tab at the top
  • there are three scan types; choose Threat Scan, then click on Scan
  • when the scan is complete, if no malicious items are found you can close the program
  • if malicious items are found be sure that everything is checked and click Quarantine
  • when removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
  • the log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • copy and paste the contents of that report in your next reply and exit MBAM.

NOTE: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

Logs to include with next post:

AdwCleaner log
JRT.txt
Mbam.txt


Thanks

Satchfan
 


Edited by satchfan, 09 March 2016 - 12:28 PM.

My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#3 Martin_P

Martin_P
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 11 March 2016 - 03:43 AM

Satchfan, thanks for your reply; sorry I didn't respond to it yesterday, it was a mad day!! My following posts will be the logs in the requested order.



#4 Martin_P

Martin_P
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 11 March 2016 - 03:58 AM

ADWARE CLEANER: said the computer is clean; here's the logfile:

 

# AdwCleaner v5.101 - Logfile created 11/03/2016 at 08:49:50
# Updated 07/03/2016 by Xplode
# Database : 2016-03-08.1 [Server]
# Operating system : Windows 8.1  (x64)
# Username : acer - ACER_PC
# Running from : C:\Users\acer\Downloads\adwcleaner_5.101.exe
# Option : Scan
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
 
***** [ Files ] *****
 
 
***** [ DLL ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Web browsers ] *****
 
 
*************************
 
C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [377 bytes] - [08/03/2016 10:28:14]
C:\Program Files (x86)\AdwCleaner\AdwCleaner[C2].txt - [2442 bytes] - [08/03/2016 12:28:36]
C:\Program Files (x86)\AdwCleaner\AdwCleaner[S1].txt - [1523 bytes] - [08/03/2016 09:41:33]
C:\Program Files (x86)\AdwCleaner\AdwCleaner[S2].txt - [2158 bytes] - [08/03/2016 12:10:29]
C:\Program Files (x86)\AdwCleaner\AdwCleaner[S3].txt - [964 bytes] - [11/03/2016 08:49:50]
 
########## EOF - C:\Program Files (x86)\AdwCleaner\AdwCleaner[S3].txt - [1056 bytes] ##########


#5 Martin_P

Martin_P
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 11 March 2016 - 04:54 AM

JRT:

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.3 (02.09.2016)
Operating System: Windows 8.1 x64 
Ran by acer (Administrator) on 11/03/2016 at  9:03:32.52
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
File System: 3 
 
Successfully deleted: C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.metrolyrics.com_0.localstorage-journal (File) 
Successfully deleted: C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.metrolyrics.com_0.localstorage (File) 
Successfully deleted: C:\Windows\wininit.ini (File) 
 
 
 
Registry: 2 
 
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} (Registry Key)
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11/03/2016 at  9:48:02.44
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


#6 Martin_P

Martin_P
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 11 March 2016 - 05:56 AM

MALWAREBYTES: found nothing, so no removal or log produced.



#7 satchfan

satchfan

  • Malware Response Team
  • 2,862 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:07:46 PM

Posted 11 March 2016 - 09:34 AM

sorry I didn't respond to it yesterday, it was a mad day!!

 

We all have busy lives and finding spare time is not always easy so not to worry. The only thing that I ask is if your reply is going to be delayed for more than 3 days that you let me know.

 

 

There should have been a log even if it found nothing.

Open Malwarebytes, click on History > Application Logs. Open the last scan by double-clicking on it. At the bottom of that window are two options, "Copy to clipboard" and "Export"

Select "Copy to clipboard"; that copies the full log to the windows clipboard, so in your reply, right click in the text field and select "Paste", (or press Ctrl+V).

===================================================

Run Farbar Recovery Scan Tool

We'll have a look with a different tool to be sure there is nothing sinister on your computer.

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • press Scan button
  • it will produce a log called Frst.txt in the same directory the tool is run from
  • please copy and paste log back here.
  • the first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the Frst.txt into your reply.

Logs to include with next post:

Mbam.txt
Frst.txt
Addition.txt


Thanks

Satchfan

 


My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#8 Martin_P

Martin_P
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 11 March 2016 - 09:55 AM

Ah, thanks - found the log I thought I'd tried to save earlier but failed to do so - it was hiding.

 

MALWARE BYTES LOG:

 

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 11/03/2016
Scan Time: 10:10
Logfile: 11thMarch.txt
Administrator: Yes
 
Version: 2.2.0.1024
Malware Database: v2016.03.11.01
Rootkit Database: v2016.02.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
 
OS: Windows 8.1
CPU: x64
File System: NTFS
User: acer
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 334978
Time Elapsed: 32 min, 45 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 0
(No malicious items detected)
 
Registry Values: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Folders: 0
(No malicious items detected)
 
Files: 0
(No malicious items detected)
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)


#9 Martin_P

Martin_P
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 11 March 2016 - 11:05 AM

FARBAR LOG:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by acer (administrator) on ACER_PC (11-03-2016 15:04:23)
Running from C:\Users\acer\Downloads
Loaded Profiles: acer (Available Profiles: acer)
Platform: Windows 8.1 (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
() C:\Program Files\AVAST Software\SecureLine\vpnsvc.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcchhost.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\Core\mchost.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(McAfee, Inc.) C:\Program Files\mcafee\vul\McVulCtr.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\FIRSTRUN.EXE
(McAfee, Inc.) C:\Program Files\mcafee\vul\McVulAlert.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13874392 2015-04-07] (Realtek Semiconductor)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1427648 2015-08-05] (COMODO)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe [643064 2015-02-09] (McAfee, Inc.)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [91488 2015-11-23] ()
HKLM-x32\...\Run: [isa] => C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe [330240 2015-02-18] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7137664 2016-03-09] (AVAST Software)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2015-01-31] (Qualcomm®Atheros®)
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-02-29] (SUPERAntiSpyware)
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\...\RunOnce: [Application Restart #2] => C:\Users\acer\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resourc (the data entry has 581 more characters).
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\...\MountPoints2: {f4b33e2e-0b58-11e5-8260-806e6f6e6963} - "D:\SETUP.EXE" 
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-01-19] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-01-19] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-01-19] (Acer Incorporated)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-05] (AVAST Software)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{34F54AC9-FA0B-4B96-A248-5DB7FBE588A0}: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{34F54AC9-FA0B-4B96-A248-5DB7FBE588A0}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{E0AA27FA-CB98-48BF-BDD3-FCD5C02E0284}: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{E0AA27FA-CB98-48BF-BDD3-FCD5C02E0284}: [DhcpNameServer] 192.17.128.24
 
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-332180863-3176859329-4029246278-1001 -> DefaultScope {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
SearchScopes: HKU\S-1-5-21-332180863-3176859329-4029246278-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-05] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-05] (AVAST Software)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\mcieplg.dll [2016-02-25] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\mcieplg.dll [2016-02-25] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\mcieplg.dll [2016-02-25] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\mcieplg.dll [2016-02-25] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-02-27] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-02-27] (McAfee, Inc.)
 
FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-02-27] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2014-07-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2014-07-01] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-02-27] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-14] ()
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-12-29]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-05]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-03-05]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2016-03-04] [not signed]
 
Chrome: 
=======
CHR Profile: C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-04]
CHR Extension: (Google Docs) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-04]
CHR Extension: (Google Drive) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-04]
CHR Extension: (YouTube) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-04]
CHR Extension: (Google Sheets) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-04]
CHR Extension: (SiteAdvisor) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2016-03-04]
CHR Extension: (Google Docs Offline) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-04]
CHR Extension: (Chrome Web Store Payments) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-04]
CHR Extension: (Gmail) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-04]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-03-04]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-03-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-05]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-22] (SUPERAntiSpyware.com)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [323200 2015-01-31] (Windows ® Win 7 DDK provider) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-05] (AVAST Software)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2860760 2016-01-14] (Acer Incorporated)
R2 ChromodoUpdater; C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe [2291192 2016-03-11] (Comodo)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5542472 2015-09-03] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265792 2015-08-05] (COMODO)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573544 2015-01-28] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-11-19] (WildTangent)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344168 2015-04-19] (Intel Corporation)
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [881152 2014-10-03] (Intel® Corporation)
S3 Intel® Security Assist; C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe [330240 2015-02-18] () [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel® Security Assist\isaHelperService.exe [7680 2015-02-18] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe [172320 2014-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [163592 2016-02-25] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-02-27] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [332528 2014-03-12] (McAfee, Inc.)
R2 mcbootdelaystartsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe [422632 2015-01-22] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-02-27] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [476904 2015-02-03] (Acer Incorporated)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2014-10-08] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2015-02-03] (Acer Incorporated)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [465088 2016-03-04] ()
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [242944 2015-01-07] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2016-03-06] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2016-03-06] (Microsoft Corporation)
S3 AvgAMPS; "C:\Program Files (x86)\AVG\Av\avgamps.exe" [X]
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-05] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-05] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-03-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-05] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-05] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4267008 2015-01-11] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2015-01-31] (Qualcomm Atheros)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [21720 2015-11-18] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [828144 2015-11-18] (COMODO)
R1 cmdhlp; C:\Windows\system32\DRIVERS\cmdhlp.sys [35056 2015-08-05] (COMODO)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 iagpioe; C:\Windows\System32\drivers\iagpioe.sys [32256 2015-02-28] (Intel® Corporation)
R3 iai2ce; C:\Windows\System32\drivers\iai2ce.sys [83968 2015-02-28] (Intel® Corporation)
S3 iauarte; C:\Windows\System32\drivers\iauarte.sys [101888 2015-02-28] (Intel® Corporation)
R3 igfxLP; C:\Windows\system32\DRIVERS\igdkmd64lp.sys [4516280 2015-04-19] (Intel Corporation)
R1 inspect; C:\Windows\system32\DRIVERS\inspect.sys [127232 2015-08-05] (COMODO)
R3 iusb3adp; C:\Windows\System32\drivers\iusb3adp.sys [23824 2015-03-27] (Intel)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-11] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [36968 2016-01-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [114976 2014-11-23] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2016-03-06] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2016-03-06] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2016-03-06] (Microsoft Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-03-11 15:04 - 2016-03-11 15:51 - 00024126 _____ C:\Users\acer\Downloads\FRST.txt
2016-03-11 15:01 - 2016-03-11 15:04 - 00000000 ____D C:\FRST
2016-03-11 14:58 - 2016-03-11 14:58 - 02374144 _____ (Farbar) C:\Users\acer\Downloads\FRST64.exe
2016-03-11 10:52 - 2016-03-11 10:52 - 00001042 _____ C:\11thMarch.txt
2016-03-11 09:43 - 2016-03-11 09:43 - 00000000 ____D C:\Program Files (x86)\Comodo
2016-03-11 09:00 - 2016-03-11 09:00 - 01609216 _____ (Malwarebytes) C:\Users\acer\Downloads\JRT (2).exe
2016-03-11 08:44 - 2016-03-11 08:44 - 01524224 _____ C:\Users\acer\Downloads\adwcleaner_5.101.exe
2016-03-11 08:18 - 2016-03-11 08:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2016-03-10 12:56 - 2016-03-10 12:56 - 00076551 _____ C:\Users\acer\Downloads\the_fighter_pullup (4).pdf
2016-03-09 08:51 - 2016-03-09 08:51 - 02487296 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-03-09 08:50 - 2016-03-09 08:51 - 01482240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-03-09 08:50 - 2016-02-04 17:24 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 08:50 - 2016-02-04 17:02 - 00483328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-09 08:50 - 2015-12-20 14:56 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2016-03-08 23:01 - 2016-03-08 23:01 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00069448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2016-03-08 23:00 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2016-03-08 23:00 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2016-03-08 23:00 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2016-03-08 22:59 - 2016-03-08 23:00 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2016-03-08 22:59 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2016-03-08 22:59 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2016-03-08 22:58 - 2016-03-08 22:59 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2016-03-08 22:35 - 2016-03-08 22:35 - 00000000 ____D C:\Users\Public\Documents\Sports Interactive
2016-03-08 22:35 - 2016-03-08 22:35 - 00000000 ____D C:\Users\acer\Documents\Sports Interactive
2016-03-08 22:35 - 2016-03-08 22:35 - 00000000 ____D C:\Users\acer\AppData\Local\Sports Interactive
2016-03-08 22:34 - 2016-03-08 22:34 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2016-03-08 20:21 - 2016-03-08 20:21 - 01380712 _____ C:\Users\acer\Downloads\SteamSetup.exe
2016-03-08 20:02 - 2016-03-08 20:02 - 00000000 ____D C:\Users\acer\AppData\Local\Steam
2016-03-08 20:02 - 2016-03-08 20:02 - 00000000 ____D C:\Users\acer\AppData\Local\CEF
2016-03-08 19:51 - 2016-03-11 11:58 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-08 19:51 - 2016-03-08 19:51 - 00000979 _____ C:\Users\Public\Desktop\Steam.lnk
2016-03-08 19:51 - 2016-03-08 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-03-08 11:59 - 2016-03-08 11:59 - 01524224 _____ C:\Users\acer\Downloads\AdwCleaner (2).exe
2016-03-08 11:33 - 2016-03-08 11:33 - 00076551 _____ C:\Users\acer\Downloads\the_fighter_pullup (3).pdf
2016-03-08 11:31 - 2016-03-08 11:31 - 00076551 _____ C:\Users\acer\Downloads\the_fighter_pullup (2).pdf
2016-03-08 09:39 - 2016-03-11 08:49 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-08 09:29 - 2016-03-08 09:29 - 01524224 _____ C:\Users\acer\Downloads\AdwCleaner (1).exe
2016-03-07 23:51 - 2016-03-07 23:51 - 00076551 _____ C:\Users\acer\Downloads\the_fighter_pullup (1).pdf
2016-03-07 23:43 - 2016-03-07 23:43 - 00076551 _____ C:\Users\acer\Downloads\the_fighter_pullup.pdf
2016-03-07 19:11 - 2016-03-07 19:11 - 02870984 _____ (ESET) C:\Users\acer\Downloads\esetsmartinstaller_enu.exe
2016-03-07 19:11 - 2016-03-07 19:11 - 00000000 ____D C:\Program Files (x86)\ESET
2016-03-07 16:42 - 2016-03-07 12:53 - 00828920 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-07 16:42 - 2016-03-07 12:53 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-07 16:34 - 2016-03-07 16:34 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-07 16:07 - 2016-03-07 16:07 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-03-07 16:07 - 2016-03-07 16:07 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-03-07 14:44 - 2016-03-07 14:44 - 00448512 _____ (OldTimer Tools) C:\Users\acer\Downloads\TFC (1).exe
2016-03-07 14:21 - 2016-03-07 14:21 - 00448512 _____ (OldTimer Tools) C:\Users\acer\Downloads\TFC.exe
2016-03-07 13:47 - 2016-03-11 13:53 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-07 13:47 - 2016-03-11 13:53 - 00000000 ____D C:\Windows\system32\MRT
2016-03-07 12:54 - 2016-03-07 12:54 - 00001036 _____ C:\Users\acer\Downloads\mwb.txt
2016-03-07 11:07 - 2016-03-07 11:11 - 00002190 _____ C:\Users\acer\Desktop\Rkill.txt
2016-03-07 11:06 - 2016-03-07 11:06 - 02032072 _____ (Bleeping Computer, LLC) C:\Users\acer\Downloads\rkill.exe
2016-03-07 09:39 - 2016-03-07 09:47 - 00039533 _____ C:\Users\acer\Downloads\MTB.txt
2016-03-07 09:37 - 2016-03-07 09:37 - 00891392 _____ (Farbar) C:\Users\acer\Downloads\MiniToolBox.exe
2016-03-06 23:27 - 2016-03-06 23:37 - 00000000 ____D C:\Users\acer\AppData\Roaming\DropboxOEM
2016-03-06 23:00 - 2015-01-27 03:44 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2016-03-06 23:00 - 2015-01-24 01:51 - 00816128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
2016-03-06 22:46 - 2016-03-06 22:46 - 20366336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 14459392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 12859392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 02280960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-06 22:46 - 2016-03-06 22:46 - 02120704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-06 22:46 - 2016-03-06 22:46 - 01552384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 01317888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-06 22:46 - 2016-03-06 22:46 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2016-03-06 22:46 - 2016-03-06 22:46 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2016-03-06 22:46 - 2016-03-06 22:46 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-03-06 22:46 - 2015-07-16 19:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-03-06 22:45 - 2016-03-06 22:46 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-03-06 22:45 - 2016-03-06 22:46 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-06 22:45 - 2016-03-06 22:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-03-06 22:45 - 2016-03-06 22:45 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-06 22:45 - 2016-03-06 22:45 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-06 22:45 - 2016-03-06 22:45 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-03-06 22:45 - 2016-03-06 22:45 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-03-06 22:45 - 2015-07-16 20:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-06 22:44 - 2016-03-06 22:44 - 00898048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00702976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00443392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\cfgbkend.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgbkend.dll
2016-03-06 22:34 - 2016-03-06 22:34 - 01311960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-06 22:34 - 2016-03-06 22:34 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-03-06 22:34 - 2016-03-06 22:34 - 00723072 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-03-06 22:34 - 2016-03-06 22:34 - 00560392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2016-03-06 22:33 - 2016-03-06 22:33 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-03-06 22:33 - 2016-03-06 22:33 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-03-06 22:33 - 2016-03-06 22:33 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2016-03-06 22:33 - 2015-12-02 15:04 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-03-06 22:33 - 2015-11-05 08:59 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-03-06 22:33 - 2015-05-30 19:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-03-06 22:33 - 2015-03-09 02:02 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2016-03-06 22:32 - 2016-03-06 22:32 - 07075328 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 05267968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 04710400 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 04068352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 03607552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-03-06 22:32 - 2016-03-06 22:32 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-03-06 22:32 - 2015-12-29 15:45 - 07783936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-03-06 22:32 - 2015-09-29 12:24 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-03-06 22:32 - 2015-05-07 15:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2016-03-06 22:32 - 2015-04-10 00:34 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-03-06 22:32 - 2015-04-10 00:11 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 01903848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 01362944 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 01162240 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00033472 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-06 22:31 - 2015-09-04 19:24 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2016-03-06 22:31 - 2015-09-03 02:18 - 02531400 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 02745184 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 02528784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 02450240 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 02447136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 02334104 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 02324744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01798480 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01697792 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01664000 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 01501184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01484888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01411584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 01288128 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01210200 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 01150232 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 01115640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01037680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00914672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00887296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00850680 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00743936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00736256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00735496 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00700360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00644608 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00629600 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00584656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00559616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-03-06 22:30 - 2016-03-06 22:30 - 00557856 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00498472 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00492736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00463776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00451072 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00402432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00399776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00299080 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-03-06 22:30 - 2016-03-06 22:30 - 00275312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00274280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00250520 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00248432 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00246856 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-03-06 22:30 - 2016-03-06 22:30 - 00244296 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00229272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00203016 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00184912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00183856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00183368 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2016-03-06 22:30 - 2016-03-06 22:30 - 00116720 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00110544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-03-06 22:30 - 2016-03-06 22:30 - 00099136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00090904 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00090392 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00081032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00076936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-03-06 22:30 - 2015-12-05 05:58 - 01877504 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-03-06 22:28 - 2016-03-06 22:28 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-03-06 22:28 - 2016-03-06 22:28 - 00951296 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-03-06 22:28 - 2016-03-06 22:28 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-03-06 22:28 - 2015-07-22 14:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-03-06 22:28 - 2015-03-20 01:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2016-03-06 22:27 - 2016-03-06 22:28 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-06 22:27 - 2016-03-06 22:28 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-03-06 22:27 - 2016-03-06 22:28 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-06 22:27 - 2016-03-06 22:28 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-03-06 22:27 - 2016-03-06 22:28 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-03-06 22:27 - 2016-03-06 22:28 - 00177496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-06 22:27 - 2016-03-06 22:27 - 22365992 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 19794896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 14467072 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 12879360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 02778624 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 02464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 01442304 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 00987648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 00561952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-03-06 22:27 - 2016-03-06 22:27 - 00442720 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 00332640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll
2016-03-06 22:27 - 2016-01-07 18:34 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-06 22:27 - 2015-03-04 01:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-03-06 22:27 - 2015-03-04 01:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2016-03-06 22:27 - 2015-03-02 01:43 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2016-03-06 22:27 - 2015-03-02 01:21 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
2016-03-06 22:24 - 2015-06-27 11:47 - 00118616 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-03-06 22:23 - 2016-03-06 22:23 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 01134752 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00397224 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00340872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-06 22:23 - 2016-03-06 22:23 - 00137968 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00120376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-03-06 22:23 - 2016-03-06 22:23 - 00091416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2016-03-06 22:23 - 2015-12-03 19:42 - 00106960 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-03-06 22:23 - 2015-12-03 17:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-06 22:23 - 2015-12-03 16:45 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-06 22:22 - 2016-03-06 22:22 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-03-06 22:22 - 2016-03-06 22:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2016-03-06 22:22 - 2016-03-06 22:22 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
2016-03-06 22:21 - 2016-03-06 22:21 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2016-03-06 22:21 - 2016-03-06 22:21 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2016-03-06 22:21 - 2016-03-06 22:21 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2016-03-06 22:21 - 2016-03-06 22:21 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2016-03-06 22:21 - 2015-03-13 01:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-03-06 22:21 - 2015-03-13 00:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 07455064 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-06 22:20 - 2016-03-06 22:20 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 01706496 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 01344000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 00414208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-03-06 22:20 - 2015-11-22 06:59 - 01659568 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-03-06 22:20 - 2015-11-22 06:59 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-03-06 22:20 - 2015-11-22 06:59 - 01487008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-03-06 22:20 - 2015-11-22 06:59 - 01355848 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-03-06 22:17 - 2016-03-06 22:17 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2016-03-06 22:17 - 2016-03-06 22:17 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2016-03-06 22:17 - 2016-03-06 22:17 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rgb9rast.dll
2016-03-06 22:17 - 2015-03-13 02:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2016-03-06 22:16 - 2016-03-06 22:16 - 01091584 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-03-06 22:16 - 2016-03-06 22:16 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-03-06 22:16 - 2016-03-06 22:16 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2016-03-06 22:16 - 2016-03-06 22:16 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2016-03-06 22:16 - 2016-03-06 22:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2016-03-06 22:14 - 2015-11-09 00:41 - 01540728 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-03-06 22:14 - 2015-11-08 21:23 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-03-06 22:14 - 2015-11-08 21:13 - 01383936 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-03-06 22:14 - 2015-11-08 21:01 - 01753600 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-03-06 22:14 - 2015-11-08 20:52 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-03-06 22:14 - 2015-11-08 20:48 - 01376256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-03-06 22:14 - 2015-11-08 20:42 - 01490944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-03-06 22:13 - 2016-03-06 22:13 - 18823680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-03-06 22:13 - 2016-03-06 22:13 - 15159296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 01124384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-03-06 22:12 - 2016-03-06 22:12 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-03-06 22:12 - 2016-03-06 22:12 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-03-06 22:12 - 2015-10-03 19:41 - 01385280 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00737280 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2016-03-06 22:11 - 2016-03-06 22:11 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00270168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2016-03-06 22:11 - 2016-03-06 22:11 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2016-03-06 22:11 - 2016-03-06 22:11 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2016-03-06 22:11 - 2016-03-06 22:11 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2016-03-06 22:11 - 2015-08-06 17:05 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2016-03-06 22:11 - 2015-04-25 02:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-03-06 22:11 - 2015-04-08 22:55 - 00410128 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-03-06 22:10 - 2016-03-06 22:10 - 03551744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 01488896 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 01464832 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 01204224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atlthunk.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-03-06 22:10 - 2016-03-06 22:10 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-03-06 22:10 - 2015-06-19 17:07 - 02819072 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2016-03-06 22:10 - 2015-02-03 00:02 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 01546752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00520192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00148480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2016-03-06 22:09 - 2015-09-02 02:50 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-06 22:09 - 2015-09-02 02:13 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-06 22:09 - 2015-03-06 02:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-03-06 22:08 - 2016-03-06 22:08 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-03-06 22:08 - 2016-03-06 22:08 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2016-03-06 22:08 - 2016-03-06 22:08 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2016-03-06 22:08 - 2016-03-06 22:08 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\PCPKsp.dll
2016-03-06 22:08 - 2016-03-06 22:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll
2016-03-06 22:08 - 2015-12-07 10:56 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-03-06 22:05 - 2015-07-09 17:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-03-06 22:05 - 2015-07-09 17:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-03-06 22:05 - 2015-07-09 16:30 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-03-06 22:05 - 2015-05-11 16:34 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2016-03-06 22:04 - 2016-03-06 22:04 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2016-03-06 22:04 - 2016-03-06 22:04 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2016-03-06 22:04 - 2016-03-06 22:04 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2016-03-06 22:04 - 2015-01-30 01:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2016-03-06 22:04 - 2015-01-30 01:24 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2016-03-06 22:04 - 2015-01-30 01:16 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2016-03-06 22:04 - 2015-01-30 01:08 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2016-03-06 22:04 - 2015-01-30 01:06 - 00278016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2016-03-06 22:02 - 2014-12-11 05:36 - 00046456 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2016-03-06 21:56 - 2016-03-06 21:56 - 01265152 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-03-06 21:56 - 2016-03-06 21:56 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2016-03-06 21:56 - 2016-03-06 21:56 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2016-03-06 21:56 - 2016-03-06 21:56 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2016-03-06 21:56 - 2016-03-06 21:56 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
2016-03-06 21:54 - 2015-08-03 21:15 - 00074928 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-03-06 21:54 - 2015-08-03 21:15 - 00065600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-03-06 21:54 - 2015-08-01 14:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-03-06 21:54 - 2015-07-10 17:13 - 07032320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-03-06 21:54 - 2015-07-10 16:31 - 06213120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-03-06 21:53 - 2016-03-06 21:53 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-03-06 21:53 - 2016-03-06 21:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-03-06 21:53 - 2015-10-05 18:28 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2016-03-06 21:53 - 2015-10-05 18:25 - 00572928 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-03-06 21:53 - 2015-07-10 18:19 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-03-06 21:53 - 2015-07-10 17:14 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-03-06 21:53 - 2015-04-28 13:13 - 00513480 _____ C:\Windows\SysWOW64\locale.nls
2016-03-06 21:53 - 2015-04-28 13:13 - 00513480 _____ C:\Windows\system32\locale.nls
2016-03-06 21:53 - 2015-03-11 01:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-03-06 21:52 - 2015-06-16 05:36 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-03-06 21:52 - 2015-06-16 05:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-03-06 21:52 - 2015-02-07 23:57 - 01090048 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-03-06 21:52 - 2015-02-07 23:49 - 00791040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2016-03-06 21:52 - 2015-01-28 01:31 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-03-06 21:52 - 2015-01-28 01:11 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-03-06 21:51 - 2016-03-06 21:51 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tzsync.exe
2016-03-06 21:51 - 2016-03-06 21:51 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-03-06 21:51 - 2015-04-23 15:47 - 03084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-03-06 21:51 - 2015-04-23 15:16 - 02471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2016-03-06 21:51 - 2015-03-04 10:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-03-06 21:51 - 2015-03-04 03:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-03-06 21:50 - 2016-03-06 21:50 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2016-03-06 21:50 - 2016-03-06 21:50 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-03-06 21:50 - 2015-12-17 16:17 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-03-06 21:50 - 2015-03-06 03:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-03-06 21:49 - 2016-03-06 21:49 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-03-06 21:49 - 2015-07-16 18:58 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\NcdAutoSetup.dll
2016-03-06 21:49 - 2015-07-10 19:06 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2016-03-06 21:48 - 2015-10-08 16:08 - 01083904 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-03-06 21:48 - 2015-08-10 18:15 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-03-06 21:48 - 2015-08-10 18:06 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-03-06 21:48 - 2015-08-10 17:49 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-03-06 21:48 - 2015-08-10 16:56 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-03-06 21:48 - 2015-08-10 16:46 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-03-06 21:48 - 2014-07-24 03:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2016-03-06 21:48 - 2014-07-24 03:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2016-03-06 21:47 - 2015-12-08 19:08 - 00685432 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-06 21:47 - 2015-12-08 19:07 - 00507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-06 21:46 - 2015-05-12 13:19 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2016-03-06 21:43 - 2016-03-11 09:48 - 00001170 _____ C:\Users\acer\Desktop\JRT.txt
2016-03-06 18:49 - 2016-03-06 18:50 - 01609216 _____ (Malwarebytes) C:\Users\acer\Downloads\JRT (1).exe
2016-03-06 18:30 - 2016-03-06 18:30 - 01609216 _____ (Malwarebytes) C:\Users\acer\Downloads\JRT.exe
2016-03-06 11:51 - 2016-03-06 11:54 - 00000000 ____D C:\AdwCleaner
2016-03-06 11:40 - 2016-03-06 11:50 - 01518592 _____ C:\Users\acer\Downloads\AdwCleaner.exe
2016-03-06 09:48 - 2016-03-06 09:49 - 16563352 _____ (Malwarebytes Corp.) C:\Users\acer\Downloads\mbar-1.09.3.1001 (1).exe
2016-03-05 22:05 - 2016-03-06 18:29 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-03-05 22:04 - 2016-03-06 18:29 - 00000000 ____D C:\Users\acer\Desktop\mbar
2016-03-05 22:03 - 2016-03-05 22:03 - 16563352 _____ (Malwarebytes Corp.) C:\Users\acer\Downloads\mbar-1.09.3.1001.exe
2016-03-05 21:37 - 2016-03-05 21:37 - 00852798 _____ C:\Users\acer\Downloads\SecurityCheck (1).exe
2016-03-05 20:05 - 2016-03-05 20:05 - 00852798 _____ C:\Users\acer\Downloads\SecurityCheck.exe
2016-03-05 19:38 - 2016-03-11 14:52 - 00145408 ___SH C:\Users\acer\Downloads\Thumbs.db
2016-03-05 14:26 - 2016-03-05 14:26 - 00000000 ____D C:\Users\acer\AppData\Local\CrashDumps
2016-03-05 11:09 - 2016-03-05 11:02 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-03-05 11:04 - 2016-03-05 11:04 - 00001948 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-03-05 11:04 - 2016-03-05 11:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-03-05 11:03 - 2016-03-08 12:41 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-03-05 11:02 - 2016-03-09 23:12 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-03-05 11:02 - 2016-03-09 23:12 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2016-03-05 11:02 - 2016-03-05 11:03 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-03-05 11:02 - 2016-03-05 11:03 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-03-05 11:02 - 2016-03-05 11:02 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-03-05 11:02 - 2016-03-05 11:02 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-03-05 11:02 - 2016-03-05 11:02 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-03-05 11:02 - 2016-03-05 11:01 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-03-05 11:01 - 2016-03-05 11:01 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-03-05 10:39 - 2016-03-05 10:39 - 05207096 _____ (AVAST Software) C:\Users\acer\Downloads\avast_free_antivirus_setup_online.exe
2016-03-05 09:31 - 2016-03-05 09:31 - 02979288 _____ (AVG Technologies CZ, s.r.o.) C:\Users\acer\Downloads\AVG_Protection_Free_1005.exe
2016-03-05 09:27 - 2016-03-05 09:27 - 00000000 ____D C:\Users\acer\AppData\Local\Acer Aspire R7 Tutorial
2016-03-05 09:12 - 2016-03-05 09:13 - 05066104 _____ (AVAST Software) C:\Users\acer\Downloads\avast_free_antivirus_setup_online_cnet2 (1).exe
2016-03-05 00:56 - 2016-03-05 00:56 - 00001886 _____ C:\Users\Public\Desktop\COMODO Firewall.lnk
2016-03-05 00:56 - 2016-03-05 00:56 - 00000000 ____D C:\Windows\System32\Tasks\COMODO
2016-03-05 00:55 - 2016-03-05 00:55 - 00000000 ____D C:\ProgramData\Shared Space
2016-03-05 00:53 - 2016-03-09 16:50 - 00000000 ____D C:\Program Files\COMODO
2016-03-05 00:53 - 2016-03-05 00:53 - 00001142 _____ C:\Users\Public\Desktop\Internet (Chromodo).lnk
2016-03-05 00:44 - 2016-03-05 00:49 - 220699928 _____ (COMODO) C:\Users\acer\Downloads\cfw_installer_6106_53 (1).exe
2016-03-05 00:41 - 2016-03-05 00:41 - 03411920 _____ (Check Point Software Technologies Ltd.) C:\Users\acer\Downloads\zafwSetupWeb_141_048_000.exe
2016-03-04 22:59 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2016-03-04 22:55 - 2016-03-04 22:55 - 00003334 _____ C:\Windows\System32\Tasks\AcerCloud
2016-03-04 22:55 - 2016-03-04 22:55 - 00002030 _____ C:\Users\Public\Desktop\Acer Portal.lnk
2016-03-04 22:53 - 2016-03-04 22:53 - 00003344 _____ C:\Windows\System32\Tasks\McAfee Remediation (Prepare)
2016-03-04 22:53 - 2016-03-04 20:56 - 00000000 ____D C:\Program Files\Common Files\AV
2016-03-04 22:52 - 2016-03-04 22:52 - 00002291 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-04 22:52 - 2016-03-04 22:52 - 00002279 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-04 22:51 - 2016-03-04 22:51 - 00002001 _____ C:\Users\Public\Desktop\abMedia.lnk
2016-03-04 22:50 - 2016-03-11 14:55 - 00000910 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-04 22:50 - 2016-03-11 09:21 - 00000906 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-04 22:50 - 2016-03-04 22:51 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-04 22:50 - 2016-03-04 22:50 - 00003882 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-03-04 22:50 - 2016-03-04 22:50 - 00003646 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-03-04 22:50 - 2016-03-04 22:50 - 00000000 ____D C:\Users\acer\AppData\Local\Deployment
2016-03-04 22:50 - 2016-03-04 22:50 - 00000000 ____D C:\Users\acer\AppData\Local\Apps\2.0
2016-03-04 22:50 - 2016-03-04 17:06 - 00000000 ____D C:\Users\acer\AppData\Local\Google
2016-03-04 22:47 - 2016-03-04 22:47 - 00002005 _____ C:\Users\Public\Desktop\abPhoto.lnk
2016-03-04 22:45 - 2016-03-04 22:45 - 00003338 _____ C:\Windows\System32\Tasks\abDocsDllLoader
2016-03-04 22:45 - 2016-03-04 22:45 - 00001969 _____ C:\Users\Public\Desktop\abDocs.lnk
2016-03-04 22:43 - 2016-03-04 22:43 - 00000000 __SHD C:\Users\acer\AppData\LocalLow\EmieUserList
2016-03-04 22:43 - 2016-03-04 22:43 - 00000000 __SHD C:\Users\acer\AppData\LocalLow\EmieBrowserModeList
2016-03-04 22:42 - 2016-03-04 22:55 - 00003352 _____ C:\Windows\System32\Tasks\BacKGroundAgent
2016-03-04 22:40 - 2016-03-11 13:27 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-332180863-3176859329-4029246278-1001
2016-03-04 22:39 - 2016-03-11 14:42 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{534BAF9E-9FFB-4C65-8C07-33F399B4A5B4}
2016-03-04 22:39 - 2016-03-04 22:39 - 00000000 __SHD C:\Users\acer\AppData\Local\EmieUserList
2016-03-04 22:39 - 2016-03-04 22:39 - 00000000 __SHD C:\Users\acer\AppData\Local\EmieSiteList
2016-03-04 22:39 - 2016-03-04 22:39 - 00000000 __SHD C:\Users\acer\AppData\Local\EmieBrowserModeList
2016-03-04 22:39 - 2016-03-04 22:39 - 00000000 ____D C:\Users\acer\AppData\Roaming\Macromedia
2016-03-04 22:39 - 2016-03-04 22:39 - 00000000 ____D C:\Users\acer\AppData\Local\DropboxOEM
2016-03-04 22:38 - 2016-03-04 22:43 - 00000000 __SHD C:\Users\acer\AppData\LocalLow\EmieSiteList
2016-03-04 22:38 - 2016-03-04 22:38 - 00000000 ____D C:\Users\acer\AppData\Local\GWX
2016-03-04 22:37 - 2016-03-11 10:51 - 00000000 ____D C:\Users\acer\OneDrive
2016-03-04 22:36 - 2016-03-04 22:36 - 00000000 ____D C:\Users\Public\Pokki
2016-03-04 22:36 - 2016-03-04 22:36 - 00000000 ____D C:\Users\acer\PicStream
2016-03-04 22:35 - 2016-03-05 19:07 - 00000000 ____D C:\Users\acer\AppData\Local\clear.fi
2016-03-04 22:35 - 2016-03-04 22:35 - 00001276 _____ C:\Users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio Manager.lnk
2016-03-04 22:35 - 2016-03-04 22:35 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-03-04 22:35 - 2016-03-04 22:35 - 00000000 ____D C:\Users\acer\AppData\Roaming\Atheros
2016-03-04 22:35 - 2016-03-04 22:35 - 00000000 ____D C:\Users\acer\AppData\Local\iGware
2016-03-04 22:35 - 2016-03-04 22:35 - 00000000 ____D C:\Users\acer\AppData\Local\AOP SDK
2016-03-04 22:34 - 2016-03-08 09:13 - 00000000 ____D C:\Users\acer\AppData\Local\Packages
2016-03-04 22:34 - 2016-03-04 22:34 - 00001786 _____ C:\Users\Public\Desktop\Buy Online.lnk
2016-03-04 22:34 - 2016-03-04 22:34 - 00001446 _____ C:\Users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Windows\oem
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Users\acer\AppData\Roaming\Adobe
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Users\acer\AppData\Local\VirtualStore
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Users\acer\AppData\Local\OEM
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\ProgramData\OEM_YAHOO
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Program Files\Accessory Store
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Program Files (x86)\OEM
2016-03-04 22:33 - 2016-03-11 08:16 - 00000000 __SHD C:\Users\acer\IntelGraphicsProfiles
2016-03-04 22:33 - 2016-03-04 22:33 - 00000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-04 22:30 - 2016-03-10 00:16 - 00000000 ____D C:\Users\acer
2016-03-04 22:30 - 2016-03-07 12:46 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-04 22:30 - 2016-03-07 12:46 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-04 22:30 - 2016-03-04 22:30 - 00000020 ___SH C:\Users\acer\ntuser.ini
2016-03-04 22:30 - 2014-11-21 08:52 - 00000369 _____ C:\Users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-03-04 22:30 - 2014-11-21 08:52 - 00000369 _____ C:\Users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-03-04 22:24 - 2015-11-14 14:50 - 00133248 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe
2016-03-04 22:24 - 2015-11-14 14:50 - 00114160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe
2016-03-04 22:24 - 2015-10-20 21:54 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-04 22:24 - 2015-10-20 14:53 - 03705856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-04 22:24 - 2015-10-20 14:36 - 02243072 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-04 22:24 - 2015-10-20 14:35 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-04 22:24 - 2015-10-20 14:34 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-03-04 22:24 - 2015-10-20 14:34 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-04 22:24 - 2015-10-20 14:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-04 22:24 - 2015-10-20 14:33 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-04 22:24 - 2015-10-20 14:14 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-04 22:24 - 2015-10-20 14:13 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-04 22:24 - 2015-10-20 14:13 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-04 22:24 - 2015-10-20 14:13 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-04 22:24 - 2015-08-11 02:47 - 02757072 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-03-04 22:24 - 2015-08-11 02:47 - 02414096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-03-04 22:24 - 2015-07-09 18:40 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-03-04 22:24 - 2015-06-27 03:08 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-04 22:24 - 2015-06-27 03:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-03-04 22:24 - 2015-06-27 02:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-04 22:24 - 2015-03-14 01:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-03-04 21:58 - 2016-03-04 21:58 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-04 20:56 - 2016-03-04 20:56 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-03-04 20:52 - 2016-03-04 20:52 - 05066104 _____ (AVAST Software) C:\Users\acer\Downloads\avast_free_antivirus_setup_online_cnet2.exe
2016-03-04 20:40 - 2016-03-04 20:40 - 02924848 _____ (AVG Technologies CZ, s.r.o.) C:\Users\acer\Downloads\AVG_Protection_Free_1004 (1).exe
2016-03-04 19:30 - 2016-03-04 19:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2016-03-04 19:20 - 2016-03-11 14:13 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-04 19:19 - 2016-03-04 19:19 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-03-04 17:09 - 2016-03-09 16:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2016-03-04 17:09 - 2016-03-04 17:09 - 00000000 ____D C:\Users\acer\AppData\Local\Comodo
2016-03-04 16:59 - 2016-03-06 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-04 16:59 - 2016-03-04 16:59 - 00001118 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-04 16:59 - 2016-03-04 16:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-04 16:59 - 2016-03-04 16:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-04 16:59 - 2016-03-04 16:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-04 16:59 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-04 16:59 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-04 16:56 - 2016-03-04 16:56 - 00000000 ____D C:\Users\acer\AppData\Roaming\TuneUp Software
2016-03-04 16:47 - 2016-03-05 14:14 - 00000000 ____D C:\ProgramData\MFAData
2016-03-04 16:47 - 2016-03-04 16:47 - 00000000 ____D C:\Users\acer\AppData\Local\MFAData
2016-03-04 16:45 - 2016-03-05 00:56 - 00000000 ____D C:\ProgramData\Comodo
2016-03-04 16:45 - 2016-03-04 16:46 - 22908888 _____ (Malwarebytes ) C:\Users\acer\Downloads\mbam-setup-2.2.0.1024 (1).exe
2016-03-04 16:44 - 2016-03-10 16:46 - 00000000 ____D C:\Users\acer\Downloads\MP 3
2016-03-04 16:40 - 2016-03-05 10:29 - 00000000 ____D C:\Program Files (x86)\AVG
2016-03-04 16:39 - 2016-03-05 14:14 - 00000000 ____D C:\ProgramData\Avg
2016-03-04 16:38 - 2016-03-04 16:38 - 00001824 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2016-03-04 16:38 - 2016-03-04 16:38 - 00000000 ____D C:\Users\acer\AppData\Roaming\SUPERAntiSpyware.com
2016-03-04 16:38 - 2016-03-04 16:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2016-03-04 16:37 - 2016-03-05 14:18 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-03-04 16:37 - 2016-03-04 16:37 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-03-04 16:36 - 2016-03-05 10:16 - 00000000 ____D C:\Users\acer\AppData\Local\AvgSetupLog
2016-03-04 16:36 - 2016-03-04 16:37 - 24930888 _____ (SUPERAntiSpyware) C:\Users\acer\Downloads\SUPERAntiSpyware.exe
2016-03-04 16:36 - 2016-03-04 16:37 - 22908888 _____ (Malwarebytes ) C:\Users\acer\Downloads\mbam-setup-2.2.0.1024.exe
2016-03-04 16:36 - 2016-03-04 16:36 - 00000000 ____D C:\Users\acer\AppData\Local\Avg
2016-03-04 16:34 - 2016-03-04 16:35 - 02924848 _____ (AVG Technologies CZ, s.r.o.) C:\Users\acer\Downloads\AVG_Protection_Free_1004.exe
2016-03-04 16:33 - 2016-03-04 16:40 - 220699928 _____ (COMODO) C:\Users\acer\Downloads\cfw_installer_6106_53.exe
2016-03-04 16:29 - 2016-03-05 11:06 - 00000000 ____D C:\Users\acer\AppData\Roaming\AVAST Software
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-03-11 14:18 - 2014-11-21 08:44 - 01152138 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-11 14:18 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\Inf
2016-03-11 14:07 - 2013-08-22 15:20 - 00000000 ____D C:\Windows\CbsTemp
2016-03-11 13:37 - 2013-08-22 15:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-10 08:20 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\AppReadiness
2016-03-09 23:54 - 2013-08-22 14:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-08 12:37 - 2013-08-22 13:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-03-08 09:10 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\AppCompat
2016-03-07 16:40 - 2013-08-22 14:44 - 00346744 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-07 16:34 - 2014-11-21 15:56 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-03-07 16:34 - 2014-11-21 08:25 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ___RD C:\Windows\ToastData
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\en-GB
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ____D C:\Program Files\Windows Defender
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-03-07 16:33 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\WinStore
2016-03-07 16:33 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-03-06 22:16 - 2014-11-21 08:39 - 02473472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2016-03-05 10:58 - 2015-03-24 13:04 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-05 10:06 - 2013-08-22 15:36 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-03-05 09:13 - 2015-03-24 13:13 - 00000000 ____D C:\ProgramData\McAfee
2016-03-04 22:58 - 2015-03-24 13:13 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-03-04 22:56 - 2015-03-24 13:22 - 00000000 ___HD C:\OEM
2016-03-04 22:55 - 2015-03-24 13:04 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2016-03-04 22:55 - 2015-03-24 13:04 - 00000000 ____D C:\ProgramData\Acer
2016-03-04 22:55 - 2015-03-24 13:04 - 00000000 ____D C:\Program Files (x86)\Acer
2016-03-04 22:41 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\rescache
2016-03-04 22:35 - 2015-03-24 13:28 - 00000000 ____D C:\Windows\Panther
2016-03-04 22:25 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-03-04 20:53 - 2015-03-24 13:04 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-04 19:42 - 2015-03-24 13:13 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-03-04 16:30 - 2015-03-24 13:04 - 00000000 ____D C:\ProgramData\OEM
2016-03-04 15:55 - 2013-08-22 13:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
 
==================== Files in the root of some directories =======
 
2015-06-05 07:01 - 2015-06-05 07:01 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 
Some files in TEMP:
====================
C:\Users\acer\AppData\Local\Temp\sqlite3.dll
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2016-03-04 22:29
 
==================== End of FRST.txt ============================

ADDITION:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by acer (2016-03-11 15:54:23)
Running from C:\Users\acer\Downloads
Windows 8.1 (X64) (2016-03-04 22:33:11)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
acer (S-1-5-21-332180863-3176859329-4029246278-1001 - Administrator - Enabled) => C:\Users\acer
Administrator (S-1-5-21-332180863-3176859329-4029246278-500 - Administrator - Disabled)
Guest (S-1-5-21-332180863-3176859329-4029246278-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-332180863-3176859329-4029246278-1003 - Limited - Enabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Comodo Defense+ (Enabled - Up to date) {493CE176-EB84-BC8D-9707-B3ACF7598648}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}
FW: COMODO Firewall (Enabled) {CA6681B7-87D1-B25B-86E8-21EB720D8B8E}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.09.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.02.2001 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.01.2001 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.09.2003.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.06.2000.22 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3001 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.09.2002 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8108 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3023 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8111 - Acer Incorporated)
Acer UEIP App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 2.00.3002 - Acer Incorporated)
Acer UEIP Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 2.00.3002 - Acer Incorporated)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.15.2000.1 - Acer Incorporated)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software)
Avast SecureLine (HKLM\...\{2CD3C92F-EDC5-4B02-9B0A-9C1D37C58EF5}_is1) (Version: 1.0.211.4 - AVAST Software)
Chromodo (HKLM-x32\...\Chromodo) (Version: 48.12.18.238 - Comodo)
COMODO Firewall (HKLM\...\{04833277-EE61-4251-9273-0CF86C0FE710}) (Version: 8.2.0.4792 - COMODO Security Solutions Inc.)
CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5926.02 - CyberLink Corp.)
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.3602.02 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.4609.02 - CyberLink Corp.)
Dropbox 15 GB (HKLM-x32\...\{597A58EC-42D6-4940-8739-FB94491B013C}) (Version: 0.9.0 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Foxit PhantomPDF (HKLM-x32\...\{2DF18CA8-86F2-4F3A-A1BF-A2A7D39B9161}) (Version: 7.0.49.127 - Foxit Software Inc.)
Game Explorer Categories - genres (HKLM-x32\...\WildTangentGameProvider-acer-genres) (Version: 12.0.0.6 - WildTangent, Inc.)
Game Explorer Categories - main (HKLM-x32\...\WildTangentGameProvider-acer-main) (Version: 12.0.0.6 - WildTangent, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.75 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Home Makeover (x32 Version: 3.0.2.59 - WildTangent) Hidden
Hospital Manager (x32 Version: 3.0.2.59 - WildTangent) Hidden
Intel® Chipset Device Software (x32 Version: 10.0.26 - Intel® Corporation) Hidden
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4189 - Intel Corporation)
Intel® Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 2.0.0.1036 - Intel Corporation)
Intel® USB 3.0 Host Controller Adaptation Driver (HKLM\...\{9472AEE5-5D4D-4329-8BD8-B282FD33B8E0}) (Version: 1.0.0.26 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{A5830729-36A3-4900-8135-D8A972914342}) (Version: 1.0.0.516 - Intel Corporation)
Jewel Match 3 (x32 Version: 3.0.2.59 - WildTangent) Hidden
King Oddball (x32 Version: 3.0.2.48 - WildTangent) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
McAfee LiveSafe – Internet Security (HKLM-x32\...\MSC) (Version: 13.6.1599 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.173 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4641.1005 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Polar Bowler 1st Frame (x32 Version: 3.0.2.59 - WildTangent) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.340 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.57 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.39063 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.38.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7482 - Realtek Semiconductor Corp.)
Rory's Restaurant (x32 Version: 3.0.2.59 - WildTangent) Hidden
Royal Envoy Double Pack (x32 Version: 3.0.2.59 - WildTangent) Hidden
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.105 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1216 - SUPERAntiSpyware.com)
The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.51 - WildTangent) Hidden
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden
Windows Driver Package - Intel Corporation (iagpioe) System  (02/28/2015 603.9600.1920.60719) (HKLM\...\F7BD032DC4815E48C8FFD310F4793B930D5F4837) (Version: 02/28/2015 603.9600.1920.60719 - Intel Corporation)
Windows Driver Package - Intel Corporation (iai2ce) System  (02/28/2015 603.9600.2425.60717) (HKLM\...\358163B8DA80E489A41CAAC6542BF9E6245297EA) (Version: 02/28/2015 603.9600.2425.60717 - Intel Corporation)
Windows Driver Package - Intel Corporation (iauarte) System  (02/16/2015 603.9600.2426.59928) (HKLM\...\EBFE7C1B6A8869998B8883D5FAFEA855A69722C8) (Version: 02/16/2015 603.9600.2426.59928 - Intel Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {06ACB3C9-DCC9-489D-850A-0763DC4A1BD6} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-09] (Acer Incorporated)
Task: {0E11907E-8194-439C-940B-382C1549A589} - System32\Tasks\abDocsDllLoader => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe [2015-11-23] ()
Task: {15CD7ADE-D6EF-4FD9-BBCF-A275C5C799F2} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-03-11] (Microsoft Corporation)
Task: {2E3B6E39-95ED-44DE-AEA8-28B9A1927B4E} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-04] (AVAST Software)
Task: {2F3607D4-BAC8-4AB9-A5C4-A06609BCAD33} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2016-01-19] (Acer)
Task: {32A03CEC-BFAA-4BF5-9ED7-69593CD084E2} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: {3EDB2A04-B521-4BA6-887C-DEDDE276A3B1} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-05] (COMODO)
Task: {43C8B170-A365-44B4-8DEB-68334D2B147E} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2015-02-03] (Acer Incorporated)
Task: {49FE31DA-585F-420E-BD46-3C631A5622D8} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-30] ()
Task: {6CA429B6-FD25-4AC3-9FF0-55C6F8E310AD} - System32\Tasks\avast! SL Update => C:\Program Files\AVAST Software\SecureLine\SLUpdate.exe [2016-03-04] (AVAST Software)
Task: {6E533C18-0709-4655-9D77-26BE0F11F8B2} - System32\Tasks\DropboxOEM => c:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2014-12-12] ()
Task: {714061F0-70BE-4180-8E00-E9EF1BF38A3D} - System32\Tasks\Microsoft\Office\Microsoft Office Touchless Attach Notification => C:\Program Files (x86)\Microsoft Office\Office15\FirstRun.exe [2014-08-23] (Microsoft Corporation)
Task: {72766082-52BD-41D2-B068-24A379EF57E0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-04] (Google Inc.)
Task: {9C569A02-A486-4FDB-B720-94121D4FF34D} - System32\Tasks\Avast SecureLine => C:\Program Files\AVAST Software\SecureLine\SecureLine.exe [2016-03-04] (AVAST Software)
Task: {AD9D0F02-DA70-4CE4-A6D3-1D861E9636CD} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-30] ()
Task: {B98C977C-C8F7-42F6-B2D2-9D16149248FD} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2015-01-28] (Acer Incorporated)
Task: {BC0BAC5B-F1EB-4D90-BFBD-42479BF20032} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-05] (COMODO)
Task: {C4BCD911-2170-4C67-8612-0158EA087B2A} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2016-01-14] (Acer Incorporated)
Task: {C5D26442-59A4-41FF-8591-B5E256C961D0} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-10-16] (Acer Incorporated)
Task: {C97F653F-0C4C-4A0A-841F-4C161DC9547C} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2015-02-03] (Acer Incorporated)
Task: {DC762D03-D315-45B8-8833-4A474AE9E794} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-04] (Google Inc.)
Task: {E6FDA7F2-0E94-43FD-B78B-7ED8A1B5C167} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [2015-11-03] (McAfee, Inc.)
Task: {F5E2AB0E-CC5F-40E2-B75A-D811A1BCF2DB} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-12] (TODO: <Company name>)
Task: {F608657A-FCEA-4710-85F1-F40A6A57DA1A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-03-05] (AVAST Software)
Task: {F743BA5B-B980-4B35-9D1C-45E72E266CF9} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-08-05] (COMODO)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Shortcuts =============================
 
(The entries could be listed to be restored or removed.)
 
ShortcutWithArgument: C:\Users\Public\Desktop\Booking.com.lnk -> C:\Program Files\Booking.COM\StartURL.exe () -> hxxp://www.booking.com/index.html?aid=379334
 
==================== Loaded Modules (Whitelisted) ==============
 
2015-03-24 13:08 - 2014-10-08 01:27 - 00253776 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2016-03-04 16:00 - 2016-03-04 15:59 - 00465088 _____ () C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
2016-03-05 11:01 - 2016-03-05 11:01 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-03-05 11:01 - 2016-03-05 11:01 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-03-09 21:00 - 2016-03-09 21:00 - 02838528 _____ () C:\Program Files\AVAST Software\Avast\defs\16030901\algo.dll
2016-03-05 11:01 - 2016-03-05 11:01 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-03-10 23:54 - 2016-03-10 23:54 - 02838528 _____ () C:\Program Files\AVAST Software\Avast\defs\16031003\algo.dll
2016-03-11 11:55 - 2016-03-11 11:55 - 02839552 _____ () C:\Program Files\AVAST Software\Avast\defs\16031100\algo.dll
2016-03-05 11:01 - 2016-03-05 11:02 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-03-04 22:52 - 2016-03-02 04:47 - 01675928 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\libglesv2.dll
2016-03-04 22:52 - 2016-03-02 04:47 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\libegl.dll
2016-03-08 19:56 - 2016-02-10 01:17 - 00782336 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-03-08 19:56 - 2016-03-08 22:47 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-03-08 19:56 - 2016-03-08 19:49 - 02547792 _____ () C:\Program Files (x86)\Steam\video.dll
2016-03-08 19:56 - 2015-07-03 16:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-03-08 19:56 - 2015-07-03 16:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-03-08 19:56 - 2016-02-08 23:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-03-08 19:56 - 2016-02-08 23:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-03-08 19:56 - 2016-02-08 23:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-03-08 19:56 - 2016-02-08 23:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-03-08 19:56 - 2016-02-08 23:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-03-08 19:56 - 2016-03-08 19:49 - 00802896 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-03-09 20:25 - 2016-02-17 22:25 - 00281088 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-03-08 19:56 - 2016-02-09 01:33 - 48400672 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2016-03-08 19:56 - 2016-03-08 22:47 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2016-03-10 00:12 - 2016-03-08 12:16 - 17541312 _____ () C:\Users\acer\AppData\Local\Google\Chrome\User Data\PepperFlash\21.0.0.182\pepflashplayer.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Windows\avastSS.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\actxprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\apphelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aswBoot.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AuthHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\authui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcryptprimitives.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bdesvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\certcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cfgbkend.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CompatTelRunner.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\compstui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CPFilters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d2d1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_39.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx10_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_24.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_25.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_26.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_27.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_28.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_29.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_31.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_34.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx9_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dbgeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dbghelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dpapisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxtmsft.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxtrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eappgnui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EncDec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ExplorerFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fveapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\glcndFilter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hlink.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ie4uinit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieframe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iepeers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iertutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetcomm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\InkEd.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\inseng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\localspl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfc42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfc42u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfsvr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\microsoft-windows-system-events.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MRT.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msfeeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MshtmlDac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtmled.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msiexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msrating.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mtxoci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\PCPKsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PhotoMetadataHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\photowiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pku2u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\puiobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpudd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\schedsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\schtasks.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdbinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SHCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\StorageContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\storagewmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\storewuauth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SysFxUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sysmain.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemSettingsDatabase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\taskeng.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tdc.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TsWpfWrp.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tzsync.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\urlmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vbscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\webcheck.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\werdiagcontroller.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WiFiDisplay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\win32spl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Immersive.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Xaml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wininet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winshfhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMALFXGFXDSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSShared.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\xactengine3_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\actxprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atlthunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\authui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bcryptprimitives.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\certcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cfgbkend.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\clfsw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CPFilters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d2d1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_33.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_34.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_35.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_36.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_37.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_38.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_39.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_40.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_41.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_47.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_33.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_34.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_35.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_36.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_37.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_38.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_39.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_40.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_41.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_24.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_25.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_26.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_27.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_28.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_29.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_30.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_31.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_32.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_33.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_34.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_35.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_36.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_37.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_38.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_39.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_40.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_41.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dbgeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dbghelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxtmsft.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxtrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eapp3hst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eappgnui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\EncDec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ExplorerFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\GeofenceMonitorService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\glcndFilter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hhctrl.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hlink.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieframe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iepeers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iertutil.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\ieui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\inetcomm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\inetcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\InkEd.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\jscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfc42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfc42u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfsvr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msfeeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtml.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\MshtmlDac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtmled.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msiexec.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2adec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msorcl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msrating.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mtxoci.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ncryptsslp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PCPKsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PhotoMetadataHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\photowiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pku2u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PrintConfig.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\puiobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rgb9rast.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\schtasks.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SHCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\StorageContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\storagewmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\taskeng.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tdc.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TsWpfWrp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\urlmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vbscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\webcheck.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Data.Pdf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Immersive.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Xaml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wininet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winshfhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wpdshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSShared.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_4.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_5.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_6.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_7.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_10.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_4.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_5.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_6.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_7.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_8.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_9.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_4.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_5.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_6.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_7.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_4.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_5.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_4.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_5.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_6.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_7.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\afd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\aswHwid.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\aswRdr2.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\aswRvrt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\aswStm.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\bthport.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hidbth.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mountmgr.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb10.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb20.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\rfcomm.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\tdx.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\WdBoot.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WdFilter.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WdNisDrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\AdwCleaner (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\AdwCleaner (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\AdwCleaner (2).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\AdwCleaner (2).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\AdwCleaner.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\adwcleaner_5.101.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\adwcleaner_5.101.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\avast_free_antivirus_setup_online.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\avast_free_antivirus_setup_online.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\avast_free_antivirus_setup_online_cnet2 (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\avast_free_antivirus_setup_online_cnet2 (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\AVG_Protection_Free_1005.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\AVG_Protection_Free_1005.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\esetsmartinstaller_enu.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\esetsmartinstaller_enu.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\FRST64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\FRST64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\JRT (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\JRT (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\JRT (2).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\JRT (2).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\JRT.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\JRT.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\mbar-1.09.3.1001 (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\mbar-1.09.3.1001 (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\mbar-1.09.3.1001.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\mbar-1.09.3.1001.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\MiniToolBox.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\MiniToolBox.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\penguin.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\rkill.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\rkill.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\SecurityCheck (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\SecurityCheck (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\SecurityCheck.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\SecurityCheck.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\SteamSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\SteamSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\TFC (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\TFC (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\TFC.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\TFC.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\the_fighter_pullup (1).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\the_fighter_pullup (2).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\the_fighter_pullup (3).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\the_fighter_pullup (4).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\the_fighter_pullup.pdf:$CmdZnID [26]
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2ce.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2013-08-22 13:25 - 2013-08-22 13:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\acer01.jpg
DNS Servers: 156.154.70.22 - 156.154.71.22
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{46F80A27-08AE-4727-A72F-DF10C6857612}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector12\PDR10.EXE
FirewallRules: [{BC8007AF-5C72-4407-A098-B0C7B565EDE3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{32944D24-9CCF-45BA-9E86-044B62DC1E46}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{B81E5AA0-EE69-4109-AEAC-8ADCF82566DC}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{A3EAD224-CFDA-46B9-A4AB-0AC2F1AE5F22}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{349B57D7-014D-47C1-9712-355AC3DDFF4B}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{4555ABDD-6CC7-46CE-B664-8E1A95BDB075}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{C267FCB9-4255-4F6C-81F8-D3C37F5A6284}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{74FA046F-378D-4F65-BB00-A5D0B9C7D9B1}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{14798929-6536-476F-BA01-D49EED41336F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{55712EE4-C645-48A9-88BC-7FBC23AD18C2}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{7C5FC920-D4E6-44A5-9094-B57946CCB51F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{AB528CF6-ECF6-4920-944D-613F0B992CD4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{7DEEC866-F1CC-4566-B295-667F520DC4CA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{3328B31A-625C-48C5-9D35-F29B72DA2934}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{4D4CD1BE-9264-4B18-8D0F-1D411EA11799}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{D9C19756-B307-4494-BE22-6BDD0CE750AA}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{713688C9-0D62-48A9-A9EF-ADE5C17E2BEB}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{ED9520D3-6FBC-4AFD-BB10-CA14F889A5B9}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{E52E0E95-E2D6-498D-92B1-0940D5A0A550}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{69A79439-26FD-4115-8D3D-801CEE0A7574}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{1B00F2C0-3EA4-4164-A5D6-03E1DD4B0B20}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{A1001EE3-8CC5-498D-A18E-6FBAB5C54922}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{1D4E0902-B8CD-444C-9743-D080EED87752}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{5B84DC77-9A21-4E00-AFEB-E3444F3012A5}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{F4EC42EC-0312-479F-999F-6F7FABB4BABF}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{BD738E99-894C-4620-A32A-9D08E0F406A6}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{DF81BDA9-E34E-48D5-B79B-381A01BBB643}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{57C1F0CA-3020-4B9D-8936-B2B28FD8EC32}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{29DA72DF-B432-4173-A28F-7CE1E803BCD3}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{5F4FB086-4483-4CE6-B3DC-51A7898FA09C}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{F800747B-E368-4615-A1F4-3B1499872AFC}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{6AD166CB-7FFF-4999-A597-29D7A9DA44B2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{A6E41D06-17EB-4F39-B8B3-5CAAA10AF8CA}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{2A0B8576-C45F-40E9-91F8-82E5A0110FFD}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{6559A39F-441C-4003-BE64-6DC232B63228}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{9882A18F-8A22-4FCA-A817-9FDBEB5CC8AA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{14D20D34-7C75-4EEA-8EDA-1D8CA3620381}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E3F0D9E2-F72B-487B-B213-C85A24D4F6C1}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{653ADC01-280E-4E7E-840B-28E380F83D21}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
 
==================== Restore Points =========================
 
04-03-2016 16:49:34 Installed AVG 2016
04-03-2016 16:52:15 Installed AVG
04-03-2016 22:24:43 Windows Modules Installer
06-03-2016 19:12:31 JRT Pre-Junkware Removal
08-03-2016 22:30:02 Installed DirectX
11-03-2016 09:03:40 JRT Pre-Junkware Removal
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (03/11/2016 02:04:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: MRT.exe, version: 5.34.12400.0, time stamp: 0x56cebba9
Faulting module name: webio.dll, version: 6.3.9600.17415, time stamp: 0x545040e0
Exception code: 0xc0000409
Fault offset: 0x0000000000031035
Faulting process ID: 0x195c
Faulting application start time: 0xMRT.exe0
Faulting application path: MRT.exe1
Faulting module path: MRT.exe2
Report ID: MRT.exe3
Faulting package full name: MRT.exe4
Faulting package-relative application ID: MRT.exe5
 
Error: (03/11/2016 10:55:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
 
Error: (03/11/2016 08:20:43 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: acc
 
Start Time: 01d17b6e27502ec1
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 
Report Id: 1d494a9f-e762-11e5-8275-3065ec794018
 
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
 
Error: (03/10/2016 11:21:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 26d0
 
Start Time: 01d17b22d7c053e7
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 
Report Id: cca7c466-e716-11e5-8275-3065ec794018
 
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
 
Error: (03/10/2016 10:21:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 23dc
 
Start Time: 01d17b1a75bf5bb8
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 
Report Id: 6ca81e97-e70e-11e5-8275-3065ec794018
 
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
 
Error: (03/10/2016 12:06:13 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: b20
 
Start Time: 01d17a5f1716d6fb
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 
Report Id: e290c8a5-e653-11e5-8275-3065ec794018
 
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
 
Error: (03/09/2016 10:53:53 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 21c4
 
Start Time: 01d17a55d9ea6981
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 
Report Id: c9ceb4e6-e649-11e5-8274-3065ec794018
 
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
 
Error: (03/09/2016 10:23:56 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 348
 
Start Time: 01d17a51a44e335b
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 
Report Id: 99634495-e645-11e5-8274-3065ec794018
 
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
 
Error: (03/09/2016 08:26:41 PM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to copy new service file to temp location
 
Error: (03/09/2016 04:50:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: version_logging.exe, version: 4.0.0.0, time stamp: 0x568e22c3
Faulting module name: OLEAUT32.dll, version: 6.3.9600.17560, time stamp: 0x5493b320
Exception code: 0xc0000005
Fault offset: 0x000000000000185d
Faulting process ID: 0xb10
Faulting application start time: 0xversion_logging.exe0
Faulting application path: version_logging.exe1
Faulting module path: version_logging.exe2
Report ID: version_logging.exe3
Faulting package full name: version_logging.exe4
Faulting package-relative application ID: version_logging.exe5
 
 
System errors:
=============
Error: (03/11/2016 02:06:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2 x64 Edition - March 2016 (KB890830).
 
Error: (03/11/2016 12:19:43 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 
Error: (03/11/2016 12:19:42 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 
Error: (03/11/2016 12:19:40 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 
Error: (03/11/2016 12:19:40 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 
Error: (03/11/2016 12:19:37 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 
Error: (03/11/2016 12:19:36 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 
Error: (03/11/2016 12:19:34 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 
Error: (03/11/2016 12:19:34 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 
Error: (03/10/2016 11:51:52 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Windows Error Reporting Service service to connect.
 
 
CodeIntegrity:
===================================
  Date: 2016-03-11 15:01:15.146
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-03-11 14:36:00.855
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-03-11 14:21:44.477
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-03-11 14:14:03.579
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-03-11 13:17:48.955
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-03-11 13:05:46.629
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-03-11 11:50:34.548
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-03-11 11:15:24.441
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-03-11 11:06:06.929
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-03-11 10:43:34.653
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Celeron® CPU N3050 @ 1.60GHz
Percentage of memory in use: 64%
Total physical RAM: 4010.02 MB
Available physical RAM: 1410.14 MB
Total Virtual: 6570.52 MB
Available Virtual: 2709.28 MB
 
==================== Drives ================================
 
Drive c: (Acer) (Fixed) (Total:917.05 GB) (Free:864.68 GB) NTFS
Drive d: (FM2016) (CDROM) (Total:1.27 GB) (Free:0 GB) UDF
Drive e: (PHILIPS) (Removable) (Total:3.86 GB) (Free:3.77 GB) FAT32
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 87DC2A18)
 
Partition: GPT.
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 1.
 
==================== End of Addition.txt ============================


#10 satchfan

satchfan

  • Malware Response Team
  • 2,862 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:07:46 PM

Posted 11 March 2016 - 12:40 PM

Thanks for the logs.

 

Have to go out for a while so won't reply until later.


My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#11 Martin_P

Martin_P
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 11 March 2016 - 02:15 PM

No worries, thanks for your help this far, have a great evening! :-)



#12 satchfan

satchfan

  • Malware Response Team
  • 2,862 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:07:46 PM

Posted 12 March 2016 - 03:49 AM

Warning: Downloading software from Cnet

CNET is increasingly bundling invasive and annoying browser toolbars with software on its site, even some open-source titles whose distribution licenses prohibit such activity. Also, CNET’s own installer is detected by many antivirus products as a Trojan horse, even though the company prefaces each download with the assurance that “CNET hosts this file and has scanned it to ensure it is virus and spyware free.” CNET also has long touted download.com’s zero tolerance policy toward all bundled adware.

================================================

Multiple antiviruses

You have Comodo, McAfee and Avast antivirus programs installed. Although you seem to be using different elements of each, it is a very bad decision.

You can not run two real-time antiviruses at the same time. Although many have different methods of searching for and recognising threats, they will all be 'fighting' in memory to kick each other out, rendering them all ineffective.

You also have more than one firewall which is also a security risk. In the UK it’s usual now to have McAfee pre-installed so it could be that in your case but then why have you installed so many others?

Windows 8.1 comes with a perfectly adequate antivirus and firewall, (Windows Defender & and Windows firewall), and no other is necessary.

Please decide what your choice is and uninstall all but one AV and firewall.

We’ll clean up what I’ve found in your log and then have another look.

================================================

You need to move Farbar Recovery Scan Tool to your desktop otherwise fixes will not work.

  • go to your Downloads folder and locate Farbar Recovery Scan Tool
  • right click and select Cut
  • go to an empty spot on your desktop, right click and select Paste

Farbar Recovery Scan Tool should now be on your desktop.

================================================

Run Farbar Recovery Scan Tool

Open notepad. Please copy the contents of the code box below and paste it into Notepad.


HKU\S-1-5-21-332180863-3176859329-4029246278-1001\...\RunOnce: [Application Restart #2] => C:\Users\acer\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resourc (the data entry has 581 more characters).
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\...\MountPoints2: {f4b33e2e-0b58-11e5-8260-806e6f6e6963} - "D:\SETUP.EXE"
S3 AvgAMPS; "C:\Program Files (x86)\AVG\Av\avgamps.exe" [X]
2016-03-05 09:31 - 2016-03-05 09:31 - 02979288 _____ (AVG Technologies CZ, s.r.o.) C:\Users\acer\Downloads\AVG_Protection_Free_1005.exe
2016-03-05 09:12 - 2016-03-05 09:13 - 05066104 _____ (AVAST Software)
2016-03-04 22:36 - 2016-03-04 22:36 - 00000000 ____D C:\Users\Public\Pokki
C:\Users\acer\Downloads\avast_free_antivirus_setup_online_cnet2 (1).exe
2016-03-05 00:41 - 2016-03-05 00:41 - 03411920 _____ (Check Point Software Technologies Ltd.) C:\Users\acer\Downloads\zafwSetupWeb_141_048_000.exe
2016-03-04 16:40 - 2016-03-05 10:29 - 00000000 ____D C:\Program Files (x86)\AVG
2016-03-04 16:39 - 2016-03-05 14:14 - 00000000 ____D C:\ProgramData\Avg
2016-03-04 16:36 - 2016-03-04 16:36 - 00000000 ____D C:\Users\acer\AppData\Local\Avg
2016-03-04 16:34 - 2016-03-04 16:35 - 02924848 _____ (AVG Technologies CZ, s.r.o.) C:\Users\acer\Downloads\AVG_Protection_Free_1004.exe
C:\Users\acer\AppData\Local\SweetLabs App Platform
EmptyTemp:

NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system


  • save the files as fixlist.txt in the same folder as FRST – NOTE: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work
  • run FRST64 then click Fix just once and wait
  • it will create a log on your desktop, (Fixlog.txt); please post it to your reply.

================================================

Run Security Check

Download Security Check by screen317 from here or here.

  • save it to your Desktop.
  • double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • a Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE: If you get the following message: UNSUPPORTED OPERATING SYSTEM! ABORTED!, try rebooting the system and then run SecurityCheck again.

Logs to include with next post:

Fixlog.txt
checkup.txt


Thanks

Satchfan

 

 


My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#13 Martin_P

Martin_P
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 12 March 2016 - 06:55 AM

Morning, to answer why there are multiple antivirus progs running: McAfee is just on a 30 day trial and I don't like it as its scans tend to slow everything down, so I will probably remove it, if I can. I think I was just being a bit lazy and doing all my downloading of protection software in one go. 

 

As for Commodo, I thought I was just using it as a fire wall not an antivirus. I installed it because I was unsure whether the Windows one was any good; in light of what you've said, Commodo will go. My defences will then be Avast and the Windows Defender, and thanks very much for your advice on this. I'll apply the fixes as requested, next, and thanks again!



#14 Martin_P

Martin_P
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 12 March 2016 - 07:03 AM

FARBAR: I have located the FRST folder on the C Drive. In it, there are 3 subfolders: 'Hives', 'Logs' and 'Quarantine'. Do I need to save it within any of these subfolders, or as long as it is in the FRST folder itself, is this okay? 



#15 satchfan

satchfan

  • Malware Response Team
  • 2,862 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:07:46 PM

Posted 12 March 2016 - 09:17 AM

My defences will then be Avast and the Windows Defender


Windows Defender is the default real-time, (always on), antivirus in Windows 8.1. Unlike the one in Windows XP, Vista and 7, the Windows 8.1 version is a full-on antivirus and the only one you'll need. I suggest that you uninstall Avast otherwise you'll still have 2 antiviruses running.

Windows Defender & Windows firewall are what protected my 8.1 before I upgraded to Windows 10, (and they still are). They are more than adequate as an AV & firewall.


Re FRST, those folders are not what I want you to move, just the FRST program located at C:\Users\acer\Downloads\FRST.


My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users