Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

My computer is infected with CrossBrowse, CoupoonService64, and others

Started by Appliance , May 12 2015 07:47 PM

This topic is locked

#1
Appliance

Posted 12 May 2015 - 07:47 PM

Member

Member
11 posts

Hello! My computer has been infected with Crossbrowse and CoupoonService64. There might be others, as there are other items like "Mountain Bike", "globalUpdate", "Junk Cleaner", and others that appear to have been created at the same time. I had hastily ran a program from the web without scanning it. I can't remember exactly what the program was as I've removed it from my computer while attempting to remove everything else.

My Chrome was changed to Crossbrowse. I uninstalled that (via Control Panel) and got Chrome back; however, it runs slower and freezes, as well as opens new taps of adds. I thought I had successfully uninstalled most of the programs through Control Panel, but noticed other items remaining in the background. Some items would appear with a dialog box stating something along the lines of "Unable to uninstall until other items are finished uninstalling" when the previous uninstall had already finished. When checking the task manager, there is an application called "wexplorer" that is running. This seems to be tied to a process/service called "Boxer.exe". CoupoonService64 seems to continue running no matter how many times I stop it. After looking at some videos and reading, I attempted to remove more from a system called "Revo Uninstaller", but that hasn't worked. Out of despiration, I've attempted to remove as many files as I can by starting my computer in Safe Mode with Networking. This seems to have stopped some processes (at least that is what Task Manager is stating), but still having some issues.

Here is the info from the FRST scan. I selected all boxes, so I also have a Shortcut.txt file in case you need any info from that as well. Thank you guys so much for your help. This has been an insane nightmare.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015

Ran by A Steel Lady (administrator) on ASTEELLADY-HP on 12-05-2015 15:12:10

Running from G:\

Loaded Profiles: A Steel Lady (Available profiles: A Steel Lady)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(HP) C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

(AuthenTec Inc.) C:\Program Files (x86)\HP SimplePass\TouchControl.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

() C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\jnspF71E.tmp

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

(Google) C:\Users\A Steel Lady\AppData\Roaming\Google\Google Talk\googletalk.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSAS10_50.MSSQLSERVER\OLAP\bin\msmdsrv.exe

() C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\nsgA973.tmp

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSRS10_50.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe

() C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE

( ) C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\vnsp9A4F.tmp

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-13] (Synaptics Incorporated)

HKLM\...\Run: [SetDefault] => C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [44880 2011-12-20] (Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2013-03-04] (IDT, Inc.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)

HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [630912 2012-01-26] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)

HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-09-13] (Hewlett-Packard Development Company L.P.)

HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [577408 2012-02-15] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [SearchProtectAll] => C:\Program Files (x86)\SearchProtect\bin\cltmng.exe

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [ospd_us_1050] => [X]

HKLM-x32\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot

HKLM-x32\...\Run: [gmsd_us_532] => [X]

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\Run: [googletalk] => C:\Users\A Steel Lady\AppData\Roaming\Google\Google Talk\googletalk.exe [3739648 2007-01-01] (Google)

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\Run: [BackgroundContainer] => "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\A Steel Lady\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\Run: [GoogleDriveSync] => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.)

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\Run: [Boxerexe] => C:\Users\A Steel Lady\AppData\Local\Boxer\BoxerApp.exe

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\Run: [JunkCleaner] => C:\Program Files (x86)\PandaJe Group\Junk Cleaner\JunkCleaner.exe

HKU\S-1-5-18\...\Run: [SearchProtect] => C:\Windows\system32\config\systemprofile\AppData\Roaming\SearchProtect\bin\cltmng.exe

AppInit_DLLs-x32: c:\programdata\lolliscan\lolliscan32.dll => c:\programdata\lolliscan\lolliscan32.dll [878592 2015-05-05] (LolliScan)

Startup: C:\Users\A Steel Lady\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-05-08]

ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{36c9b6d1-db1e-5534-36c9-9b6d1db1db47}\hqghumeaylnlf.exe (PC Utilities Software Limited)

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2013-10-16] ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2013-10-16] ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2013-10-16] ()

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.c...Date=12/11/2013

URLSearchHook: HKLM-x32 - (No Name) - {650598e1-b35a-45d3-b607-896d7acb64c3} - No File

SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/...=MSSEDF&pc=MSSE

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...rc=IE-SearchBox

SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =

SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.co...&l=dis&o=HPNTDF

SearchScopes: HKLM -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL =

SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/...=MSSEDF&pc=MSSE

SearchScopes: HKLM -> {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = http://searchfunmood...yB&cr=642245846

SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo....psg&type=HPNTDF

SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia....h={searchTerms}

SearchScopes: HKLM-x32 -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/...=MSSEDF&pc=MSSE

SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snapdo.c...Date=12/11/2013

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...rc=IE-SearchBox

SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/...=MSSEDF&pc=MSSE

BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)

BHO: No Name -> {5081D2D4-1637-404c-B74F-50526718257D} -> No File

BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2011-06-08] (Advanced Micro Devices)

BHO: Updater By SweetPacks -> {7D4F1959-3F72-49d5-8E59-F02F8AA6815D} -> C:\Program Files\Updater By SweetPacks\Extension64.dll [2013-05-16] ()

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)

BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File

BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)

BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File

BHO-x32: hosts -> {11111111-1111-1111-1111-110311531182} -> C:\Program Files (x86)\hosts\hosts-bho.dll [2013-06-26] (Alex)

BHO-x32: privitize Helper Object -> {1ACB5ABE-4890-4747-952C-F13BDB93FB75} -> C:\Program Files (x86)\Industriya\privitize\1.8.21.6\bh\privitize.dll [2013-05-21] (Industriya LLC)

BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)

BHO-x32: No Name -> {5081D2D4-1637-404c-B74F-50526718257D} -> No File

BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\coIEPlg.dll [2011-08-11] (Symantec Corporation)

BHO-x32: No Name -> {650598e1-b35a-45d3-b607-896d7acb64c3} -> No File

BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2011-06-08] (Advanced Micro Devices)

BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\IPS\IPSBHO.DLL [2011-07-25] (Symantec Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-26] (Oracle Corporation)

BHO-x32: Updater By SweetPacks -> {7D4F1959-3F72-49d5-8E59-F02F8AA6815D} -> C:\Program Files\Updater By SweetPacks\Extension32.dll [2013-05-16] ()

BHO-x32: DefaultTab Browser Helper -> {7F6AFBF1-E065-4627-A2FD-810366367D01} -> C:\Users\A Steel Lady\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll No File

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)

BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-26] (Oracle Corporation)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)

Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File

Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\coIEPlg.dll [2011-08-11] (Symantec Corporation)

Toolbar: HKLM-x32 - privitize Toolbar - {1C46A0DD-D53E-46C4-A435-CA11103E255E} - C:\Program Files (x86)\Industriya\privitize\1.8.21.6\privitizeTlbr.dll [2013-05-21] (Industriya LLC)

Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File

Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)

Toolbar: HKU\S-1-5-21-1885504849-1370587953-3290610847-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

Toolbar: HKU\S-1-5-21-1885504849-1370587953-3290610847-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

Toolbar: HKU\S-1-5-21-1885504849-1370587953-3290610847-1001 -> No Name - {650598E1-B35A-45D3-B607-896D7ACB64C3} - No File

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Tcpip\Parameters: [DhcpNameServer] 75.75.76.76 75.75.75.75

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()

FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2013-05-07] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-01-21] (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2013-11-05] (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2011-11-07] (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin-x32: @authentec.com/ffwloplugin -> C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll [2013-02-07] ( HP)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-26] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-26] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-01-21] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)

FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll No File

FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-14] ()

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2013-11-05] (Adobe Systems)

FF Plugin HKU\S-1-5-21-1885504849-1370587953-3290610847-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\A Steel Lady\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-10-03] (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\A Steel Lady\AppData\Roaming\mozilla\plugins\npatgpc.dll [2014-12-17] (Cisco WebEx LLC)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\safeguard-secure-search.xml [2013-08-27]

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml [2013-08-27]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-09-15]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-09-15]

FF HKLM\...\Firefox\Extensions: [{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}] - C:\Program Files\Updater By SweetPacks\Firefox

FF HKLM\...\Firefox\Extensions: [{5081D2D4-1637-404c-B74F-50526718257D}] - C:\Program Files\shopperz\Firefox

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\IPSFFPlgn

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\IPSFFPlgn [2013-01-18]

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\coFFPlgn

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\coFFPlgn [2015-05-12]

FF HKLM-x32\...\Firefox\Extensions: [{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}] - C:\Program Files\Updater By SweetPacks\Firefox

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]

FF HKLM-x32\...\Firefox\Extensions: [{5081D2D4-1637-404c-B74F-50526718257D}] - C:\Program Files\shopperz\Firefox

Chrome:

=======

CHR HomePage: Default -> hxxp://www-searching.com/?s=F58ztutdk0001,778acda5-d039-4941-8028-01d174bbd3b8,

CHR StartupUrls: Default -> "https://www.google.com/"

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Profile: C:\Users\A Steel Lady\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\A Steel Lady\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-01-25]

CHR Extension: (Website Logon) - C:\Users\A Steel Lady\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmbkhknacohfhbmmpnmbkgdffdbildof [2013-08-06]

CHR Extension: (infbohjcpbljfmnimjodijobdhjfijnp) - C:\Users\A Steel Lady\AppData\Local\Google\Chrome\User Data\Default\Extensions\infbohjcpbljfmnimjodijobdhjfijnp [2015-05-12]

CHR Extension: (Norton Identity Protection) - C:\Users\A Steel Lady\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2013-01-25]

CHR Extension: (nolijncfnkgaikbjbdaogikpmpbdcdef) - C:\Users\A Steel Lady\AppData\Local\Google\Chrome\User Data\Default\Extensions\nolijncfnkgaikbjbdaogikpmpbdcdef [2015-05-12]

CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.goo...ice/update2/crx

CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\ASTEEL~1\AppData\Local\mysearchdial-speeddial.crx [Not Found]

CHR HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.goo...ice/update2/crx

CHR HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\ASTEEL~1\AppData\Local\mysearchdial-speeddial.crx [Not Found]

CHR HKLM-x32\...\Chrome\Extension: [dhfcbmlocifngpbjdpgnkbjmgkadkjpp] - C:\Program Files (x86)\Industriya\privitize\1.8.21.6\privitize.crx [2013-05-21]

CHR HKLM-x32\...\Chrome\Extension: [hmbkhknacohfhbmmpnmbkgdffdbildof] - C:\Program Files (x86)\HP SimplePass\tschrome.crx [2012-12-12]

CHR HKLM-x32\...\Chrome\Extension: [jaaieiajnhcnimjgfmjpccjmmfkploci] - C:\Program Files (x86)\HP SimplePass\tschrome.crx [2012-12-12]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\Extensions\Chrome.crx [2012-11-07]

CHR HKLM-x32\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.goo...ice/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\ASTEEL~1\AppData\Local\mysearchdial-speeddial.crx [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-01-26] (Advanced Micro Devices, Inc.) [File not signed]

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-20] (Apple Inc.)

R2 FPLService; C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe [1641768 2013-02-07] (HP)

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [347200 2015-02-27] (WildTangent)

R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]

R2 moleluty; C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\jnspF71E.tmp [352256 2015-05-08] () [File not signed]

S2 MsDtsServer100; C:\Program Files\Microsoft SQL Server\100\DTS\Binn\MsDtsSrvr.exe [210784 2011-04-24] (Microsoft Corporation)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)

S2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)

S3 MSSQLFDLauncher; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [32096 2010-04-03] (Microsoft Corporation)

S2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [61916000 2011-04-24] (Microsoft Corporation)

R2 MSSQLServerOLAPService; C:\Program Files\Microsoft SQL Server\MSAS10_50.MSSQLSERVER\OLAP\bin\msmdsrv.exe [54568288 2010-04-03] (Microsoft Corporation)

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe [138760 2011-08-10] (Symantec Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)

R2 pujodigi; C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\nsgA973.tmp [266752 2015-05-10] () [File not signed]

R2 ReportServer; C:\Program Files\Microsoft SQL Server\MSRS10_50.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2175328 2011-04-24] (Microsoft Corporation)

S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)

S3 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [428384 2011-04-24] (Microsoft Corporation)

S3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401856 2013-01-07] (AuthenTec, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

S2 BrsHelper; C:\PROGRA~2\YTDOWN~1\BROWSE~2.EXE [X]

S2 CoupoonService64; C:\Program Files (x86)\coupoon\iiwjljrnpc64.exe [X]

S2 DefaultTabUpdate; "C:\Users\A Steel Lady\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe" [X]

S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /svc [X] <==== ATTENTION

S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /medsvc [X] <==== ATTENTION

S2 Update Edu App; "C:\Program Files (x86)\Edu App\updateEduApp.exe" [X]

S2 Update Mountain Bike; "C:\Program Files (x86)\Mountain Bike\updateMountainBike.exe" [X]

S2 Update PathMaxx; "C:\Program Files (x86)\PathMaxx\updatePathMaxx.exe" [X]

S2 UpdateCheck; C:\Program Files (x86)\Coupoon\UpdateCheck.exe run [X]

S2 Util Edu App; "C:\Program Files (x86)\Edu App\bin\utilEduApp.exe" [X]

S2 Util Mountain Bike; "C:\Program Files (x86)\Mountain Bike\bin\utilMountainBike.exe" [X]

S2 Util PathMaxx; "C:\Program Files (x86)\PathMaxx\bin\utilPathMaxx.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [31360 2012-01-18] (Advanced Micro Devices, Inc.)

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2011-11-13] (Advanced Micro Devices)

R2 APXACC; C:\Windows\System32\DRIVERS\appexDrv.sys [189760 2012-02-05] (AppEx Networks Corporation)

R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation)

R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1301000.01C\ccSetx64.sys [167048 2011-08-08] (Symantec Corporation)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-07-06] (Disc Soft Ltd)

R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-01-18] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2013-01-18] (Symantec Corporation)

R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20130717.001\IDSvia64.sys [513184 2013-01-18] (Symantec Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)

S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130717.016\ENG64.SYS [126040 2013-06-16] (Symantec Corporation)

S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130717.016\EX64.SYS [2098776 2013-06-16] (Symantec Corporation)

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [46376 2015-04-02] (NetFilterSDK.com)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)

S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [28416 2008-04-16] (Research In Motion Limited)

R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.)

S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [20016 2011-10-13] (Synaptics Incorporated)

S3 SRTSP; C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSP64.SYS [729720 2011-08-02] (Symantec Corporation)

R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSPX64.SYS [37496 2011-08-02] (Symantec Corporation)

R3 SymDS; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMDS64.SYS [451192 2011-07-25] (Symantec Corporation)

R3 SymEFA; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMEFA64.SYS [1084536 2011-07-28] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2012-11-07] (Symantec Corporation)

R3 SymIRON; C:\Windows\system32\drivers\NISx64\1301000.01C\Ironx64.SYS [189560 2011-07-25] (Symantec Corporation)

R3 SymNetS; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMNETS.SYS [401016 2011-07-25] (Symantec Corporation)

R1 {2dbedf58-a62a-42c8-8238-0f30b6742344}Gw64; C:\Windows\System32\drivers\{2dbedf58-a62a-42c8-8238-0f30b6742344}Gw64.sys [48784 2015-05-08] (StdLib)

R1 {7ac2c1a1-86c6-433c-a5d3-1f965778f48a}Gw64; C:\Windows\System32\drivers\{7ac2c1a1-86c6-433c-a5d3-1f965778f48a}Gw64.sys [48776 2015-05-08] (StdLib)

R1 {ca90993a-de56-4b38-814c-e9d8d5eca392}Gw64; C:\Windows\System32\drivers\{ca90993a-de56-4b38-814c-e9d8d5eca392}Gw64.sys [48776 2015-05-08] (StdLib)

========================== Drivers MD5 =======================

C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\Accelerometer.sys 899B7E724BF19F17978B6A37B864A277

C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit

C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit

C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit

C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit

C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit

C:\Windows\system32\drivers\afd.sys FA886682CFC5D36718D3E436AACF10B9

C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit

C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit

C:\Windows\system32\drivers\amdhub30.sys 2EF1BA6D5DC79FCE5E9216C8C2D3F193

C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit

C:\Windows\system32\drivers\amdiox64.sys 6A2EEB0C4133B20773BB3DD0B7B377B4

C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\atikmdag.sys F46EB9066C311EA44DBD29BBB7B710E2

C:\Windows\System32\DRIVERS\atikmpag.sys 6CED03A1A176526B15F2256B6C1E72BA

C:\Windows\System32\drivers\amdkmpfd.sys 19D7EED3928930BAFC541F1758AA6AA1

C:\Windows\system32\drivers\amdppm.sys ==> MD5 is legit

C:\Windows\System32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49

C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit

C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048

C:\Windows\system32\drivers\amdxhc.sys 541A6C49C792ED71FB3EFF8C815CFE60

C:\Windows\System32\drivers\amd_sata.sys A1434F35B7B171CB697D74D33F7D029F

C:\Windows\System32\drivers\amd_xata.sys E9B5A82FA268BB2D1B012030D5F4E096

C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys D7253A1A7A49FA40EF0BA1955AAFB346

C:\Windows\system32\drivers\appid.sys 90C53BD47979FB8814F465A08B885102

C:\Windows\System32\DRIVERS\appexDrv.sys BC6526297C2E1377949F79A3AC622BAD

C:\Windows\system32\drivers\arc.sys ==> MD5 is legit

C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit

C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\athrx.sys CE197ECAA255ACC7A7765DC24FAB3A0D

C:\Windows\System32\drivers\AtihdW76.sys 2B3B05C0A7768BF033217EB8F33F9C35

C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\bcmwl664.sys 9E84A931DBEE0292E38ED672F6293A99

C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20130715.001\BHDrvx64.sys 6E10DB69DB1AA96207F4B14B18FF12F8

C:\Windows\system32\drivers\blbdrive.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit

C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit

C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit

C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit

C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit

C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit

C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit

C:\Windows\system32\drivers\BthEnum.sys CF98190A94F62E405C8CB255018B2315

C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\bthpan.sys 02DD601B708DD0667E1331FA8518E9FF

C:\Windows\System32\Drivers\BTHport.sys 738D0E9272F59EB7A1449C3EC118E6C4

C:\Windows\System32\Drivers\BTHUSB.sys F188B7394D81010767B6DF3178519A37

C:\Windows\system32\drivers\NISx64\1301000.01C\ccSetx64.sys A8AD33C9DD88C810CAC00ACC7F4329FB

C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit

C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit

C:\Windows\System32\CLFS.sys 404B7DF9CA4D1CB675045AF220FF3285

C:\Windows\System32\DRIVERS\clwvd.sys 50F92C943F18B070F166D019DFAB3D9A

C:\Windows\system32\drivers\CmBatt.sys ==> MD5 is legit

C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit

C:\Windows\System32\Drivers\cng.sys 27667A788130A7F7A5858DE27572E6D7

C:\Windows\System32\drivers\compbatt.sys ==> MD5 is legit

C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit

C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit

C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit

C:\Windows\System32\drivers\discache.sys ==> MD5 is legit

C:\Windows\System32\drivers\disk.sys ==> MD5 is legit

C:\Windows\system32\drivers\drmkaud.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\dtsoftbus01.sys 6A0E850DDCB136AA3D2FB7234382DF12

C:\Windows\System32\drivers\dxgkrnl.sys F59E2FE2687A5C30598F9099F318EB73

C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit

C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 4353FF94D47A0A9D52B89ECCF0CDB013

C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit

C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys C5BCCB378D0A896304A3E71BE7215983

C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit

C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit

C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit

C:\Windows\system32\drivers\fdc.sys ==> MD5 is legit

C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit

C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit

C:\Windows\system32\drivers\flpydisk.sys ==> MD5 is legit

C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit

C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit

C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B

C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0

C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\GEARAspiWDM.sys 8E98D21EE06192492A5671A6144D092F

C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit

C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A

C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit

C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit

C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit

C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit

C:\Windows\system32\drivers\hidusb.sys ==> MD5 is legit

C:\Windows\System32\drivers\hpdskflt.sys D104FF402FC3DDB686E6DEF00334DB26

C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit

C:\Windows\System32\drivers\HTTP.sys F61634BEC53F73702A10DE69F6DCAF57

C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit

C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit

C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20130717.001\IDSvia64.sys A48928D4CCA6F8B731989DB08CF2C0AB

C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit

C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit

C:\Windows\system32\drivers\intelppm.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit

C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit

C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit

C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit

C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit

C:\Windows\system32\drivers\msiscsi.sys 96BB922A0981BC7432C8CF52B5410FE6

C:\Windows\system32\drivers\kbdclass.sys ==> MD5 is legit

C:\Windows\system32\drivers\kbdhid.sys ==> MD5 is legit

C:\Windows\System32\Drivers\ksecdd.sys 063C09DB965E3DFD6F4F08416F6DB8F5

C:\Windows\System32\Drivers\ksecpkg.sys 1FA627E63195BF3BF636BFEF0D7190D4

C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit

C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit

C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit

C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit

C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit

C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit

C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit

C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit

C:\Windows\System32\drivers\modem.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit

C:\Windows\system32\drivers\mouclass.sys ==> MD5 is legit

C:\Windows\system32\drivers\mouhid.sys ==> MD5 is legit

C:\Windows\System32\drivers\mountmgr.sys 87BCD1034CBF33537D4D4C251D39BA26

C:\Windows\System32\DRIVERS\MpFilter.sys FBA4CDA6B3B00D7A116DCC2B5C7E9790

C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit

C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit

C:\Windows\system32\drivers\mrxdav.sys AE3334958D8F631FF14A0AEB3D7EFB3A

C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC

C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163

C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C

C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit

C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit

C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit

C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit

C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit

C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit

C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit

C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit

C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit

C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit

C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit

C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit

C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130717.016\ENG64.SYS 56540E526B46E379A476FB5BC381B290

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130717.016\EX64.SYS 8A19D3991F9F14B885CDE8BC640F6B68

C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88

C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit

C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit

C:\Windows\System32\drivers\netfilter64.sys 9E34BF0784E087F7366DBD2BDA01C8EB

C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\NisDrvWFP.sys E10B84385C3FEEF4BDE8E6A980535522

C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit

C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit

C:\Windows\System32\Drivers\Ntfs.sys 1A29A59A4C5BA6F8C85062A613B7E2B2

C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\nvm62x64.sys A85B4F2EF3A7304A5399EF0526423040

C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD

C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A

C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit

C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit

C:\Windows\system32\drivers\parport.sys ==> MD5 is legit

C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C

C:\Windows\System32\drivers\pci.sys ==> MD5 is legit

C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit

C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit

C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit

C:\Windows\System32\drivers\peauth.sys ED6E75158D28D33A2E2A020AC5B2B59D

C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit

C:\Windows\system32\drivers\processr.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit

C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit

C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit

C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit

C:\Windows\system32\drivers\rdpbus.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit

C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit

C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit

C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34

C:\Windows\System32\Drivers\RDPWD.sys FE571E088C2D83619D2D48D4E961BF41

C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\rfcomm.sys 3DD798846E2C28102B922C56E71B7932

C:\Windows\System32\Drivers\RimUsb_AMD64.sys 5790BCA445CC40DF8B38C2C48608AAC2

C:\Windows\System32\DRIVERS\RsFx0103.sys CD553B8633466A6D1C115812F2619F1F

C:\Windows\System32\DRIVERS\RsFx0150.sys EB1C539E621A35A49F7692B0EB565AB9

C:\Windows\System32\DRIVERS\RtsP2Stor.sys 7F324DFFCA5318EEF040DBE351D038D8

C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\Rt64win7.sys 7F4F11527AF5A7E4526CB6A146B3E40C

C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\sdbus.sys 111E0EBC0AD79CB0FA014B907B231CF0

C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit

C:\Windows\system32\drivers\serenum.sys ==> MD5 is legit

C:\Windows\system32\drivers\serial.sys ==> MD5 is legit

C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit

C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit

C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit

C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit

C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\Sftfslh.sys 2046AA7491DE7EFA4D70E615D9BC9D09

C:\Windows\System32\DRIVERS\Sftplaylh.sys 0E0446BC4D51BE4263ACB7E33491191C

C:\Windows\System32\DRIVERS\Sftredirlh.sys C5FB982CD266E604ED3142102C26D62C

C:\Windows\System32\DRIVERS\Sftvollh.sys 2575511AF67AA1FA068CCC4918E2C2A3

C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit

C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit

C:\Windows\system32\drivers\Smb_driver.sys 8AF2546861B179E2517EB02748B4FAB7

C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit

C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSP64.SYS 1321A6C3C92BBD3F3BBE1292CFF8E91A

C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSPX64.SYS BD129C22C3B8C2E584227269DFA77B09

C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B

C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28

C:\Windows\System32\DRIVERS\VSTAZL6.SYS 0C4540311E11664B245A263E1154CEF8

C:\Windows\System32\DRIVERS\VSTDPV6.SYS 02071D207A9858FBE3A48CBFD59C4A04

C:\Windows\System32\DRIVERS\VSTCNXT6.SYS 18E40C245DBFAF36FD0134A7EF2DF396

C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3

C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\stwrt64.sys 7E89F65EB250463EE8665CFE19566FC3

C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit

C:\Windows\system32\drivers\NISx64\1301000.01C\SYMDS64.SYS 8B2430762099598DA40686F754632EFD

C:\Windows\system32\drivers\NISx64\1301000.01C\SYMEFA64.SYS FE29B18BF86FFCD55D8733C9B01E5042

C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 36B77F5C9E21F88A8C8EC67AD5415819

C:\Windows\system32\drivers\NISx64\1301000.01C\Ironx64.SYS DD70DA422460FDED831D211DF151D560

C:\Windows\system32\drivers\NISx64\1301000.01C\SYMNETS.SYS BCE4EB2EEF05E388959B46FD21388C2D

C:\Windows\system32\drivers\SynTP.sys AC3CC98B1BDB6540021D3FFB105AC2B9

C:\Windows\System32\drivers\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E

C:\Windows\System32\DRIVERS\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E

C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC

C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit

C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8

C:\Windows\System32\DRIVERS\tdx.sys 70988118145F5F10EF24720B97F35F65

C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\tssecsrv.sys E232A3B43A894BB327FC161529BD9ED1

C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426

C:\Windows\system32\drivers\TsUsbGD.sys AD64450A4ABE076F5CB34CC08EEACB07

C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit

C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit

C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit

C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit

C:\Windows\System32\Drivers\usbaapl64.sys 5C3BE22E485B9BF11FCEFDC676C728D0

C:\Windows\System32\DRIVERS\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A

C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31

C:\Windows\System32\DRIVERS\usbehci.sys 18A85013A3E0F7E1755365D287443965

C:\Windows\System32\DRIVERS\usbfilter.sys 33A58C5630200E17B51C8D73DD64181B

C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA

C:\Windows\System32\DRIVERS\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC

C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6

C:\Windows\system32\drivers\usbuhci.sys DD253AFC3BC6CBA412342DE60C3647F3

C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7

C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit

C:\Windows\System32\drivers\vga.sys ==> MD5 is legit

C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit

C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit

C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit

C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit

C:\Windows\System32\drivers\volsnap.sys DF8126BD41180351A093A3AD2FC8903B

C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit

C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys 1928B9CA20F51BFBBAD54D2C2C447B13

C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\vwififlt.sys ==> MD5 is legit

C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit

C:\Windows\System32\drivers\wd.sys ==> MD5 is legit

C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8

C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit

C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit

C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\WinUSB.sys FE88B288356E7B47B74B13372ADD906D

C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit

C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit

C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F

C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659

C:\Windows\System32\drivers\{2dbedf58-a62a-42c8-8238-0f30b6742344}Gw64.sys 832DBBAADCCAE464780E4B00AE69792B

C:\Windows\System32\drivers\{7ac2c1a1-86c6-433c-a5d3-1f965778f48a}Gw64.sys 63575A394B11B79F037C93212D21E897

C:\Windows\System32\drivers\{ca90993a-de56-4b38-814c-e9d8d5eca392}Gw64.sys 6DAC573E0330F0A69DD9D0087BE80DDC

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== Three Months Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-12 14:35 - 2015-05-12 15:12 - 00000000 ____D () C:\FRST

2015-05-12 13:58 - 2015-05-12 13:58 - 00003412 _____ () C:\Windows\System32\Tasks\BackgroundContainer Startup Task

2015-05-11 10:33 - 2015-05-11 12:03 - 00000000 ____D () C:\ProgramData\abc

2015-05-10 23:22 - 2015-05-10 23:22 - 00000185 _____ () C:\Users\A Steel Lady\Documents\junkCleaner.xml

2015-05-10 21:37 - 2015-05-10 21:38 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\A Steel Lady\Downloads\revosetup (1).exe

2015-05-10 21:35 - 2015-05-10 21:35 - 00001109 _____ () C:\Users\A Steel Lady\Desktop\Continue Live Installation.lnk

2015-05-10 21:31 - 2015-05-10 21:31 - 00001268 _____ () C:\Users\A Steel Lady\Desktop\Revo Uninstaller.lnk

2015-05-10 21:31 - 2015-05-10 21:31 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2015-05-10 21:29 - 2015-05-10 21:30 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\A Steel Lady\Downloads\revosetup.exe

2015-05-10 21:11 - 2015-05-10 21:11 - 00000000 __SHD () C:\Users\A Steel Lady\AppData\Local\EmieUserList

2015-05-10 21:11 - 2015-05-10 21:11 - 00000000 __SHD () C:\Users\A Steel Lady\AppData\Local\EmieSiteList

2015-05-10 21:11 - 2015-05-10 21:11 - 00000000 __SHD () C:\Users\A Steel Lady\AppData\Local\EmieBrowserModeList

2015-05-08 19:28 - 2015-05-08 20:00 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2015-05-08 19:20 - 2015-05-08 19:20 - 00000000 ____D () C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431134428-E111-8703-CBF38146158A

2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\ProgramData\FlashBeat

2015-05-08 17:51 - 2015-05-08 19:20 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-05-08 17:37 - 2015-05-08 17:37 - 00880208 _____ (Google Inc.) C:\Users\A Steel Lady\Downloads\ChromeSetup.exe

2015-05-08 17:30 - 2015-05-10 21:20 - 00000000 ____D () C:\ProgramData\NetEngine

2015-05-08 17:29 - 2015-05-08 07:41 - 00048776 _____ (StdLib) C:\Windows\system32\Drivers\{7ac2c1a1-86c6-433c-a5d3-1f965778f48a}Gw64.sys

2015-05-08 17:28 - 2015-05-08 19:26 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job

2015-05-08 17:28 - 2015-05-08 19:25 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP3.job

2015-05-08 17:28 - 2015-05-08 19:06 - 00002842 _____ () C:\Windows\System32\Tasks\APSnotifierPP1

2015-05-08 17:28 - 2015-05-08 19:06 - 00002840 _____ () C:\Windows\System32\Tasks\APSnotifierPP3

2015-05-08 17:28 - 2015-05-08 19:06 - 00002840 _____ () C:\Windows\System32\Tasks\APSnotifierPP2

2015-05-08 17:28 - 2015-05-08 19:06 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job

2015-05-08 17:25 - 2015-05-08 17:25 - 00000000 __SHD () C:\Users\A Steel Lady\AppData\Roaming\AnyProtectEx

2015-05-08 16:58 - 2015-05-08 16:58 - 00004072 _____ () C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task

2015-05-08 16:57 - 2015-05-08 20:06 - 00000000 ____D () C:\Program Files\shopperz

2015-05-08 16:57 - 2015-05-08 16:57 - 00000045 _____ () C:\user.js

2015-05-08 16:49 - 2015-05-08 16:49 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro

2015-05-08 16:36 - 2015-05-08 16:36 - 00000000 ____D () C:\ProgramData\ccc4026c00005946

2015-05-08 16:28 - 2015-05-08 16:28 - 00003708 _____ () C:\Windows\System32\Tasks\boosterpop

2015-05-08 16:28 - 2015-05-08 16:28 - 00003706 _____ () C:\Windows\System32\Tasks\IEError

2015-05-08 16:28 - 2015-05-08 16:28 - 00003522 _____ () C:\Windows\System32\Tasks\AI_Updater

2015-05-08 16:06 - 2015-05-08 07:30 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{2dbedf58-a62a-42c8-8238-0f30b6742344}Gw64.sys

2015-05-08 16:04 - 2015-05-08 06:27 - 00048776 _____ (StdLib) C:\Windows\system32\Drivers\{ca90993a-de56-4b38-814c-e9d8d5eca392}Gw64.sys

2015-05-08 15:45 - 2015-05-08 15:45 - 00000000 ____D () C:\ProgramData\SearchModule

2015-05-08 15:44 - 2015-05-08 20:18 - 00000000 ____D () C:\Program Files\Common Files\Goobzo

2015-05-08 15:44 - 2015-05-08 15:59 - 00000000 ____D () C:\ProgramData\{36c9b6d1-db1e-5534-36c9-9b6d1db1db47}

2015-05-08 15:29 - 2015-05-12 12:15 - 00000000 ___HD () C:\Users\A Steel Lady\AppData\Local\Boxer

2015-05-08 15:29 - 2015-05-10 23:03 - 00000000 ____D () C:\Program Files\Common Files\PastaLeads

2015-05-08 15:29 - 2015-05-08 15:29 - 00000000 ___HD () C:\Users\A Steel Lady\AppData\Local\OptimiserUn

2015-05-08 15:29 - 2015-05-08 15:29 - 00000000 ____D () C:\ProgramData\PastaLeadsAgent

2015-05-08 15:26 - 2015-05-12 13:57 - 00002460 _____ () C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5_user.job

2015-05-08 15:26 - 2015-05-12 13:57 - 00002460 _____ () C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5.job

2015-05-08 15:26 - 2015-05-08 15:26 - 00005490 _____ () C:\Windows\System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5

2015-05-08 15:25 - 2015-05-12 14:25 - 00003152 _____ () C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-6.job

2015-05-08 15:25 - 2015-05-12 13:57 - 00003152 _____ () C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-7.job

2015-05-08 15:25 - 2015-05-08 15:25 - 00006182 _____ () C:\Windows\System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-7

2015-05-08 15:25 - 2015-05-08 15:25 - 00006180 _____ () C:\Windows\System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-6

2015-05-08 15:25 - 2015-05-08 15:25 - 00000000 ____D () C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120328-E111-8703-CBF38146158A

2015-05-08 15:24 - 2015-05-12 14:24 - 00005532 _____ () C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-6.job

2015-05-08 15:24 - 2015-05-12 13:57 - 00005196 _____ () C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-7.job

2015-05-08 15:24 - 2015-05-10 23:06 - 00000000 ____D () C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A

2015-05-08 15:24 - 2015-05-08 15:24 - 00008560 _____ () C:\Windows\System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-6

2015-05-08 15:24 - 2015-05-08 15:24 - 00008226 _____ () C:\Windows\System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-7

2015-05-08 15:24 - 2015-05-08 15:24 - 00000000 ____D () C:\Users\A Steel Lady\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage

2015-05-08 15:23 - 2015-05-12 14:23 - 00002126 _____ () C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-10_user.job

2015-05-08 15:23 - 2015-05-12 13:57 - 00004508 _____ () C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-3.job

2015-05-08 15:23 - 2015-05-12 13:57 - 00000984 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job

2015-05-08 15:23 - 2015-05-11 11:51 - 00000988 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job

2015-05-08 15:23 - 2015-05-11 11:51 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7

2015-05-08 15:23 - 2015-05-08 17:06 - 00003986 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA

2015-05-08 15:23 - 2015-05-08 17:06 - 00003732 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore

2015-05-08 15:23 - 2015-05-08 15:23 - 00007538 _____ () C:\Windows\System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-3

2015-05-08 15:22 - 2015-05-08 15:22 - 00003676 _____ () C:\Windows\System32\Tasks\IE_ERR4WDR

2015-05-08 15:22 - 2015-05-08 15:22 - 00003652 _____ () C:\Windows\System32\Tasks\HDNINSTSCHD

2015-05-08 15:22 - 2015-05-08 15:22 - 00003518 _____ () C:\Windows\System32\Tasks\UPDTEXE4_WDR

2015-05-08 15:19 - 2015-05-08 15:19 - 00000924 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\JunkCleaner.lnk

2015-05-08 15:19 - 2015-05-08 15:19 - 00000906 _____ () C:\ProgramData\JunkCleaner.lnk

2015-05-08 15:19 - 2015-05-08 15:19 - 00000000 ____D () C:\ProgramData\All copyright reserved - 2014

2015-05-08 15:18 - 2015-05-08 15:18 - 00004008 _____ () C:\Windows\System32\Tasks\LaunchPreSignup

2015-05-08 15:18 - 2015-05-08 15:18 - 00003596 _____ () C:\Windows\System32\Tasks\ZFNENS

2015-05-08 15:17 - 2015-05-12 13:57 - 00000344 _____ () C:\Windows\Tasks\LQGVVK1.job

2015-05-08 15:17 - 2015-05-08 15:17 - 00002866 _____ () C:\Windows\System32\Tasks\LQGVVK1

2015-05-08 15:17 - 2015-05-08 15:17 - 00000000 ____D () C:\ProgramData\Package Cache

2015-05-08 15:17 - 2015-05-08 15:17 - 00000000 ____D () C:\ProgramData\7c0535b143fc4671b6ebd202fbffe066

2015-05-08 15:17 - 2015-05-08 15:17 - 00000000 ____D () C:\ProgramData\75b516f7def3449383a44752d9f6e6a9

2015-05-08 15:17 - 2015-05-08 15:17 - 00000000 ____D () C:\ProgramData\2451325811901998479

2015-05-08 15:16 - 2015-05-08 21:08 - 00000000 ____D () C:\ProgramData\LolliScan

2015-05-08 15:14 - 2015-05-11 12:01 - 00000112 _____ () C:\ProgramData\UD2XUy.dat

2015-05-08 15:13 - 2015-05-08 15:13 - 00000000 ____D () C:\ProgramData\imjahbjfdibimglcehjcmpmopanciefj

2015-05-08 15:12 - 2015-05-08 17:02 - 00000004 _____ () C:\end

2015-05-08 15:12 - 2015-05-08 15:12 - 00000000 ____D () C:\Program Files\Coupoon

2015-04-25 21:56 - 2015-04-25 21:56 - 00001063 _____ () C:\Users\A Steel Lady\Desktop\Notepad++.lnk

2015-04-15 17:07 - 2015-04-15 17:07 - 00001753 _____ () C:\Users\Public\Desktop\iTunes.lnk

2015-04-15 17:07 - 2015-04-15 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-04-15 17:03 - 2015-04-15 17:07 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7

2015-04-15 17:03 - 2015-04-15 17:07 - 00000000 ____D () C:\Program Files\iTunes

2015-04-15 17:03 - 2015-04-15 17:03 - 00000000 ____D () C:\Program Files\iPod

2015-04-15 17:03 - 2015-04-15 17:03 - 00000000 ____D () C:\Program Files (x86)\iTunes

2015-04-14 20:54 - 2015-04-14 20:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2015-04-14 19:35 - 2015-04-14 19:35 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2015-04-14 14:33 - 2015-03-24 21:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-14 14:33 - 2015-03-24 21:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-14 14:33 - 2015-03-24 21:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-14 14:33 - 2015-03-24 21:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-14 14:33 - 2015-03-24 21:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-14 14:33 - 2015-03-24 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-14 14:33 - 2015-03-24 21:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-14 14:33 - 2015-03-24 21:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-14 14:33 - 2015-03-24 21:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-14 14:33 - 2015-03-24 21:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-14 14:33 - 2015-03-24 21:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-14 14:33 - 2015-03-24 21:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-04-14 14:33 - 2015-03-24 21:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-04-14 14:33 - 2015-03-24 21:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-04-14 14:33 - 2015-03-24 21:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-04-14 14:33 - 2015-03-24 21:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-04-14 14:33 - 2015-03-22 21:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-14 14:33 - 2015-03-22 21:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-14 14:33 - 2015-03-22 21:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-14 14:33 - 2015-03-22 21:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-14 14:33 - 2015-03-22 21:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-14 14:33 - 2015-03-22 21:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-14 14:33 - 2015-03-22 21:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-14 14:33 - 2015-03-22 21:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-14 14:33 - 2015-03-16 23:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-14 14:33 - 2015-03-16 23:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-14 14:33 - 2015-03-16 23:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-14 14:33 - 2015-03-16 23:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-04-14 14:33 - 2015-03-16 23:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-04-14 14:33 - 2015-03-16 23:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-14 14:33 - 2015-03-16 23:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-14 14:33 - 2015-03-16 23:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-14 14:33 - 2015-03-16 23:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-14 14:33 - 2015-03-16 23:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-14 14:33 - 2015-03-16 23:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-14 14:33 - 2015-03-16 23:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-14 14:33 - 2015-03-16 23:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-14 14:33 - 2015-03-16 23:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-04-14 14:33 - 2015-03-16 23:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-14 14:33 - 2015-03-16 23:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-04-14 14:33 - 2015-03-16 23:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-04-14 14:33 - 2015-03-16 23:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-04-14 14:33 - 2015-03-16 22:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-04-14 14:33 - 2015-03-16 22:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-04-14 14:33 - 2015-03-16 22:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-04-14 14:33 - 2015-03-16 22:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-04-14 14:33 - 2015-03-16 22:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-04-14 14:33 - 2015-03-09 21:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-14 14:33 - 2015-03-09 21:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-14 14:33 - 2015-03-09 21:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-04-14 14:33 - 2015-03-09 21:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-04-14 14:33 - 2015-03-04 23:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-14 14:33 - 2015-03-04 22:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-04-14 14:32 - 2015-03-16 23:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-14 14:32 - 2015-03-16 23:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-04-14 14:32 - 2015-03-16 23:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-14 14:32 - 2015-03-16 23:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-14 14:32 - 2015-03-16 23:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-14 14:32 - 2015-03-16 23:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-14 14:32 - 2015-03-16 23:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-14 14:32 - 2015-03-16 23:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-14 14:32 - 2015-03-16 23:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-14 14:32 - 2015-03-16 23:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-14 14:32 - 2015-03-16 23:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-14 14:32 - 2015-03-16 23:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-04-14 14:32 - 2015-03-16 23:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-14 14:32 - 2015-03-16 23:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-14 14:32 - 2015-03-16 23:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-14 14:32 - 2015-03-16 23:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-04-14 14:32 - 2015-03-16 22:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-04-14 14:32 - 2015-03-16 22:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-04-14 14:32 - 2015-03-16 22:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-04-14 14:32 - 2015-03-16 22:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-04-14 14:32 - 2015-03-16 22:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-04-14 14:32 - 2015-03-16 22:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-04-14 14:32 - 2015-03-16 22:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-04-14 14:32 - 2015-03-16 22:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-04-14 14:32 - 2015-03-16 22:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-04-14 14:32 - 2015-03-16 22:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-04-14 14:32 - 2015-03-16 22:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-04-14 14:32 - 2015-03-16 22:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-04-14 14:32 - 2015-03-16 22:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 22:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 21:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-04-14 14:32 - 2015-03-16 21:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-04-14 14:32 - 2015-03-16 21:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 21:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 21:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 14:32 - 2015-03-16 21:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-04-14 14:31 - 2015-04-01 18:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-04-14 14:31 - 2015-04-01 17:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-04-14 14:31 - 2015-03-12 22:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-04-14 14:31 - 2015-03-12 22:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-04-14 14:31 - 2015-03-12 22:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-04-14 14:31 - 2015-03-12 22:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-04-14 14:31 - 2015-03-12 22:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-04-14 14:31 - 2015-03-12 22:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-04-14 14:31 - 2015-03-12 22:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-04-14 14:31 - 2015-03-12 22:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-04-14 14:31 - 2015-03-12 22:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-04-14 14:31 - 2015-03-12 22:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-04-14 14:31 - 2015-03-12 21:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-04-14 14:31 - 2015-03-12 21:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-04-14 14:31 - 2015-03-12 21:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-04-14 14:31 - 2015-03-12 21:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-04-14 14:31 - 2015-03-12 21:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-04-14 14:31 - 2015-03-12 21:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-04-14 14:31 - 2015-03-12 21:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-04-14 14:31 - 2015-03-12 21:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-04-14 14:31 - 2015-03-12 21:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-04-14 14:31 - 2015-03-12 21:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-04-14 14:31 - 2015-03-12 21:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-04-14 14:31 - 2015-03-12 21:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-04-14 14:31 - 2015-03-12 21:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-04-14 14:31 - 2015-03-12 21:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-04-14 14:31 - 2015-03-12 21:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-04-14 14:31 - 2015-03-12 21:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-04-14 14:31 - 2015-03-12 21:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-04-14 14:31 - 2015-03-12 21:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-04-14 14:31 - 2015-03-12 21:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-04-14 14:31 - 2015-03-12 21:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-04-14 14:31 - 2015-03-12 21:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-04-14 14:31 - 2015-03-12 21:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-04-14 14:31 - 2015-03-12 21:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-04-14 14:31 - 2015-03-12 21:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-04-14 14:31 - 2015-03-12 21:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-04-14 14:31 - 2015-03-12 21:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-04-14 14:31 - 2015-03-12 21:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-04-14 14:31 - 2015-03-12 21:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-04-14 14:31 - 2015-03-12 21:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-04-14 14:31 - 2015-03-12 21:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-04-14 14:31 - 2015-03-12 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-04-14 14:31 - 2015-03-12 21:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-04-14 14:31 - 2015-03-12 20:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-04-14 14:31 - 2015-03-12 20:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-04-14 14:31 - 2015-03-12 20:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-04-14 14:31 - 2015-03-12 20:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-04-14 14:31 - 2015-03-12 20:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-04-14 14:31 - 2015-03-12 20:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-04-14 14:31 - 2015-03-12 20:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-04-14 14:31 - 2015-03-12 20:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-04-14 14:31 - 2015-03-12 20:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-04-14 14:31 - 2015-03-12 20:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-04-14 14:31 - 2015-03-12 20:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-04-14 14:31 - 2015-03-12 20:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-04-14 14:31 - 2015-03-12 20:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-04-14 14:31 - 2015-03-12 20:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-04-14 14:31 - 2015-02-24 21:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-04-14 14:30 - 2015-03-03 22:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-14 14:30 - 2015-03-03 22:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-14 14:30 - 2015-03-03 22:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-04-03 21:21 - 2015-04-03 21:22 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-03 21:21 - 2015-04-03 21:21 - 00000000 ___SD () C:\Windows\SysWOW64\GWX

2015-04-02 16:22 - 2015-04-02 16:22 - 00046376 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter64.sys

2015-03-13 15:32 - 2015-02-02 21:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-03-13 15:32 - 2015-02-02 21:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2015-03-13 15:32 - 2015-02-02 21:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-03-13 15:32 - 2015-02-02 21:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll

2015-03-13 15:32 - 2015-02-02 21:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx

2015-03-13 15:32 - 2015-02-02 21:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll

2015-03-13 15:32 - 2015-02-02 21:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2015-03-13 15:32 - 2015-02-02 21:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe

2015-03-13 15:32 - 2015-02-02 21:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe

2015-03-13 15:32 - 2015-02-02 21:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll

2015-03-13 15:31 - 2015-02-19 22:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-03-13 15:31 - 2015-02-19 22:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-03-13 15:31 - 2015-02-19 22:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-13 15:31 - 2015-02-19 22:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-03-13 15:31 - 2015-02-19 22:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-03-13 15:31 - 2015-02-19 22:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-03-13 15:31 - 2015-02-19 22:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-03-13 15:31 - 2015-02-19 22:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-03-13 15:31 - 2015-02-19 21:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-13 15:31 - 2015-02-19 21:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-03-13 15:31 - 2015-02-02 21:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2015-03-13 15:31 - 2015-02-02 21:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2015-03-13 15:31 - 2015-02-02 21:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2015-03-13 15:31 - 2015-02-02 21:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2015-03-13 15:31 - 2015-02-02 21:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-03-13 15:31 - 2015-02-02 21:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2015-03-13 15:31 - 2015-02-02 21:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-03-13 15:31 - 2015-02-02 21:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-03-13 15:31 - 2015-02-02 21:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-03-13 15:31 - 2015-02-02 21:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-03-13 15:31 - 2015-02-02 21:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe

2015-03-13 15:31 - 2015-02-02 21:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe

2015-03-13 15:31 - 2015-02-02 21:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll

2015-03-13 15:31 - 2015-02-02 21:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-03-13 15:31 - 2015-02-02 21:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2015-03-13 15:31 - 2015-02-02 20:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-03-13 15:31 - 2014-10-31 16:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-03-13 15:28 - 2015-01-30 21:48 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-03-13 15:28 - 2015-01-30 21:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2015-03-13 15:28 - 2015-01-30 17:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-03-13 15:27 - 2015-02-25 21:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-13 15:27 - 2015-02-12 23:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-03-13 15:27 - 2015-02-12 23:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-13 15:27 - 2015-02-02 21:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-13 15:27 - 2015-02-02 21:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2015-03-13 15:27 - 2015-02-02 21:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-03-13 15:27 - 2015-02-02 21:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll

2015-03-13 15:27 - 2015-01-30 17:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-03-13 15:27 - 2015-01-16 20:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-13 15:27 - 2015-01-16 20:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2015-03-13 15:26 - 2015-02-03 21:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-13 15:26 - 2015-02-03 20:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2015-03-03 15:34 - 2015-01-08 21:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll

2015-03-03 15:34 - 2015-01-08 21:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll

2015-03-03 15:34 - 2015-01-08 21:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll

2015-03-03 15:34 - 2015-01-08 20:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll

2015-02-26 06:09 - 2015-02-26 06:06 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-02-26 06:09 - 2015-02-26 06:05 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2015-02-26 06:09 - 2015-02-26 06:05 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2015-02-25 16:56 - 2015-01-08 17:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls

2015-02-25 16:56 - 2015-01-08 17:43 - 00419936 _____ () C:\Windows\system32\locale.nls

2015-02-23 21:27 - 2015-02-23 21:27 - 00001004 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NoteWorthy Player.lnk

2015-02-23 21:27 - 2015-02-23 21:27 - 00000992 _____ () C:\Users\A Steel Lady\Desktop\NoteWorthy Player.lnk

2015-02-23 21:27 - 2015-02-23 21:27 - 00000000 ____D () C:\Program Files (x86)\NoteWorthy Player

2015-02-17 22:02 - 2015-02-17 22:02 - 00000000 ____D () C:\Users\A Steel Lady\Downloads\Dante Alighieri

2015-02-17 17:16 - 2015-02-17 21:54 - 00000000 ____D () C:\Users\A Steel Lady\Downloads\H. P. Lovecraft

2015-02-11 12:59 - 2015-01-27 17:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-02-11 12:56 - 2014-12-07 21:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-02-11 12:56 - 2014-12-07 20:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll

2015-02-11 12:56 - 2014-11-25 21:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-02-11 12:56 - 2014-11-25 21:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-12 15:12 - 2013-01-18 18:30 - 01545739 _____ () C:\Windows\WindowsUpdate.log

2015-05-12 14:41 - 2009-07-13 22:45 - 00031472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-05-12 14:41 - 2009-07-13 22:45 - 00031472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-05-12 14:33 - 2009-07-13 23:13 - 01028224 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-05-12 14:32 - 2014-09-22 00:41 - 00030616 _____ () C:\Windows\setupact.log

2015-05-12 14:31 - 2012-03-22 13:51 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-05-12 14:22 - 2013-01-19 21:26 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-05-12 14:01 - 2013-01-21 12:37 - 00000000 ____D () C:\Users\A Steel Lady\AppData\Roaming\Skype

2015-05-12 13:57 - 2013-01-19 21:26 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-05-12 13:56 - 2009-07-13 23:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-05-12 10:13 - 2013-01-18 18:35 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{5523693D-D540-4162-A273-5782F93A2EF2}

2015-05-12 10:08 - 2013-03-03 13:47 - 00000000 ____D () C:\Users\A Steel Lady\AppData\Local\Adobe

2015-05-11 10:26 - 2010-11-20 21:47 - 00392912 _____ () C:\Windows\PFRO.log

2015-05-10 21:30 - 2013-01-19 20:32 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log

2015-05-08 20:17 - 2013-01-18 18:35 - 00001429 _____ () C:\Users\A Steel Lady\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-05-08 19:51 - 2013-09-17 14:48 - 00000000 ____D () C:\Program Files (x86)\Adobe

2015-05-08 19:28 - 2009-07-13 20:34 - 00000505 _____ () C:\Windows\win.ini

2015-05-08 17:59 - 2009-07-13 23:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-05-08 17:51 - 2013-01-19 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-05-08 15:47 - 2009-07-13 21:20 - 00000000 ____D () C:\Program Files\Common Files\System

2015-05-08 15:25 - 2012-11-07 15:08 - 00000000 ____D () C:\Program Files (x86)\AMD

2015-05-08 13:10 - 2013-08-08 23:36 - 00000000 ____D () C:\Users\A Steel Lady\AppData\Roaming\vlc

2015-05-04 00:09 - 2013-03-21 11:14 - 00000000 ____D () C:\Users\A Steel Lady\AppData\Roaming\SoftGrid Client

2015-04-25 22:15 - 2013-01-20 17:49 - 00000000 ____D () C:\Users\A Steel Lady\Documents\Visual Studio 2010

2015-04-25 20:14 - 2013-09-09 10:38 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk

2015-04-23 11:14 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\AppCompat

2015-04-15 17:03 - 2013-01-18 23:18 - 00000000 ____D () C:\Program Files\Common Files\Apple

2015-04-15 16:15 - 2014-12-10 14:21 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-15 16:15 - 2014-05-06 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-15 16:15 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-04-14 20:59 - 2013-01-20 17:38 - 01020838 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-04-14 20:54 - 2013-01-30 01:59 - 00000000 ___RD () C:\Program Files (x86)\Skype

2015-04-14 20:54 - 2012-03-22 14:05 - 00000000 ____D () C:\ProgramData\Skype

2015-04-14 20:51 - 2013-08-14 00:41 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-14 20:29 - 2013-02-09 18:57 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-04-14 19:36 - 2012-03-22 13:51 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-04-14 19:36 - 2012-03-22 13:51 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-04-14 19:36 - 2012-03-22 13:51 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

==================== Files in the root of some directories =======

2013-09-17 18:56 - 2013-09-17 18:57 - 0000026 ____H () C:\ProgramData\.811261211181235583101118113995

2015-05-08 15:19 - 2015-05-08 15:19 - 0000906 _____ () C:\ProgramData\JunkCleaner.lnk

2015-05-08 15:14 - 2015-05-11 12:01 - 0000112 _____ () C:\ProgramData\UD2XUy.dat

Files to move or delete:

====================

C:\ProgramData\UD2XUy.dat

Some content of TEMP:

====================

C:\Users\A Steel Lady\AppData\Local\Temp\cw.exe

C:\Users\A Steel Lady\AppData\Local\Temp\Extract.exe

C:\Users\A Steel Lady\AppData\Local\Temp\npp.6.6.9.Installer.exe

C:\Users\A Steel Lady\AppData\Local\Temp\npp.6.7.4.Installer.exe

C:\Users\A Steel Lady\AppData\Local\Temp\npp.6.7.5.Installer.exe

C:\Users\A Steel Lady\AppData\Local\Temp\npp.6.7.7.Installer.exe

C:\Users\A Steel Lady\AppData\Local\Temp\Runner.exe

C:\Users\A Steel Lady\AppData\Local\Temp\Search_Protect_NonSearch_setup.exe

C:\Users\A Steel Lady\AppData\Local\Temp\SP69020.exe

C:\Users\A Steel Lady\AppData\Local\Temp\Uninstall.exe

C:\Users\A Steel Lady\AppData\Local\Temp\vlc-2.2.1-win32.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

==================== BCD ================================

Windows Boot Manager

--------------------

identifier {bootmgr}

device partition=\Device\HarddiskVolume1

description Windows Boot Manager

locale en-US

inherit {globalsettings}

extendedinput Yes

default {current}

resumeobject {158181c0-9a00-11db-8a1d-b11d19fd3102}

displayorder {current}

toolsdisplayorder {memdiag}

timeout 30

customactions 0x1000085000001

0x5400000f

custom:5400000f {70952a6a-2925-11e2-ba38-fe6bc4bdb0bd}

Windows Boot Loader

-------------------

identifier {current}

device partition=C:

path \Windows\system32\winload.exe

description Windows 7

locale en-US

inherit {bootloadersettings}

recoverysequence {70952a6a-2925-11e2-ba38-fe6bc4bdb0bd}

recoveryenabled Yes

osdevice partition=C:

systemroot \Windows

resumeobject {158181c0-9a00-11db-8a1d-b11d19fd3102}

nx OptIn

Windows Boot Loader

-------------------

identifier {572bcd60-ffa7-11d9-aae0-0007e994107d}

device ramdisk=[boot]\sources\boot.wim,{ramdiskoptions}

path \windows\system32\boot\winload.exe

description Microsoft Windows PE 2.0

osdevice ramdisk=[boot]\sources\boot.wim,{ramdiskoptions}

systemroot \windows

detecthal Yes

winpe Yes

ems Yes

Windows Boot Loader

-------------------

identifier {70952a6a-2925-11e2-ba38-fe6bc4bdb0bd}

device ramdisk=[D:]\Recovery\WindowsRE\Winre.wim,{70952a6b-2925-11e2-ba38-fe6bc4bdb0bd}

path \windows\system32\winload.exe

description Windows Recovery Environment

inherit {bootloadersettings}

osdevice ramdisk=[D:]\Recovery\WindowsRE\Winre.wim,{70952a6b-2925-11e2-ba38-fe6bc4bdb0bd}

systemroot \windows

nx OptIn

winpe Yes

Resume from Hibernate

---------------------

identifier {158181c0-9a00-11db-8a1d-b11d19fd3102}

device partition=C:

path \Windows\system32\winresume.exe

description Windows Resume Application

locale en-US

inherit {resumeloadersettings}

filedevice partition=C:

filepath \hiberfil.sys

debugoptionenabled No

Windows Memory Tester

---------------------

identifier {memdiag}

device partition=\Device\HarddiskVolume1

path \boot\memtest.exe

description Windows Memory Diagnostic

locale en-US

inherit {globalsettings}

badmemoryaccess Yes

EMS Settings

------------

identifier {emssettings}

bootems Yes

Debugger Settings

-----------------

identifier {dbgsettings}

debugtype Serial

debugport 1

baudrate 115200

RAM Defects

-----------

identifier {badmemory}

Global Settings

---------------

identifier {globalsettings}

inherit {dbgsettings}

{emssettings}

{badmemory}

Boot Loader Settings

--------------------

identifier {bootloadersettings}

inherit {globalsettings}

{hypervisorsettings}

Hypervisor Settings

-------------------

identifier {hypervisorsettings}

hypervisordebugtype Serial

hypervisordebugport 1

hypervisorbaudrate 115200

Resume Loader Settings

----------------------

identifier {resumeloadersettings}

inherit {globalsettings}

Device options

--------------

identifier {70952a6b-2925-11e2-ba38-fe6bc4bdb0bd}

description Ramdisk Options

ramdisksdidevice partition=D:

ramdisksdipath \Recovery\WindowsRE\boot.sdi

Setup Ramdisk Options

---------------------

identifier {ramdiskoptions}

description Ramdisk Options

ramdisksdidevice boot

ramdisksdipath \boot\boot.sdi

LastRegBack: 2015-01-03 16:40

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015

Ran by A Steel Lady at 2015-05-12 15:14:14

Running from G:\

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

A Steel Lady (S-1-5-21-1885504849-1370587953-3290610847-1001 - Administrator - Enabled) => C:\Users\A Steel Lady

Administrator (S-1-5-21-1885504849-1370587953-3290610847-500 - Administrator - Disabled)

Guest (S-1-5-21-1885504849-1370587953-3290610847-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1885504849-1370587953-3290610847-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AV: Norton Internet Security (Disabled - Out of date) {63DF5164-9100-186D-2187-8DC619EFD8BF}

AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Norton Internet Security (Disabled - Out of date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Internet Security (Disabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.2.1.260 - Adobe Systems Incorporated)

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.3.633 - Adobe Systems, Inc.)

AMD Catalyst Install Manager (HKLM\...\{E5E8615E-3433-5473-C6E5-12726B6216F1}) (Version: 3.0.864.0 - Advanced Micro Devices, Inc.)

AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.3.14.0 - AppEx Networks)

Apothecarium: Renaissance of Evil Collector's Edition (x32 Version: 3.0.2.51 - WildTangent) Hidden

Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ARIA Engine v1.6.2.0 (HKLM\...\ARIA Engine_is1) (Version: v1.6.2.0 - Plogue Art et Technologie, Inc)

Astroburn Lite (HKLM-x32\...\Astroburn Lite) (Version: 1.8.0.0182 - Disc Soft Ltd)

Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)

AuthenTec TrueAPI 64-bit (Version: 1.6.0.87 - AuthenTec, Inc.) Hidden

Behind The Reflection 2: Witch's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden

Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden

Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)

Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden

Blio (HKLM-x32\...\{74A8E1BE-D438-4C35-ABFF-3A1EAF17526E}) (Version: 2.2.8530 - K-NFB Reading Technology, Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

Cisco WebEx Meetings (HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC)

Contacts (HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\da0d765a7b2636d3) (Version: 1.0.0.0 - Microsoft)

Cradle of Rome 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden

Crystal Reports for Visual Studio (x32 Version: 12.51.0.240 - SAP) Hidden

Cursed Fates: The Headless Horseman Collector's Edition (x32 Version: 3.0.2.48 - WildTangent) Hidden

CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.2.4725 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0335 - Disc Soft Ltd)

Dark Strokes: Sins of the Fathers (x32 Version: 2.2.0.110 - WildTangent) Hidden

Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden

Dotfuscator Software Services - Community Edition (HKLM-x32\...\{41B31ABE-5A6E-498A-8F28-3BA3B8779A41}) (Version: 5.0.2300.0 - PreEmptive Solutions)

Echoes Bundle (x32 Version: 2.2.0.98 - WildTangent) Hidden

ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{7DA9DD7F-F4D9-40FB-BD27-69B7731DEDD9}) (Version: 5.1.3 - Hewlett-Packard)

Eternal Journey: New Atlantis (x32 Version: 3.0.2.32 - WildTangent) Hidden

Evernote v. 4.5.2 (HKLM-x32\...\{8CE152BA-1D16-11E1-867D-984BE15F174E}) (Version: 4.5.2.5904 - Evernote Corp.)

Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden

Farmscapes (x32 Version: 2.2.0.98 - WildTangent) Hidden

FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden

Final Drive Fury (x32 Version: 2.2.0.95 - WildTangent) Hidden

Finale 2014 (HKLM-x32\...\Finale 2014) (Version: 2014.0.3163.0 - MakeMusic)

Forbidden Secrets Alien Town (x32 Version: 3.0.2.48 - WildTangent) Hidden

Free Audio Converter version 5.0.47.906 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.47.906 - DVDVideoSoft Ltd.)

Free Studio version 2014 (HKLM-x32\...\Free Studio_is1) (Version: 6.3.9.906 - DVDVideoSoft Ltd.)

Garritan ARIA Player v1.620 (HKLM\...\__ARIA_1012___is1) (Version: v1.6.2.0 - Garritan)

Garritan Instruments for Finale (HKLM\...\__ARIA_1013___is1) (Version: v2.0.0.0 - Garritan)

GDR 1617 for SQL Server 2008 R2 (KB2494088) (64-bit) (HKLM\...\KB2494088) (Version: 10.50.1617.0 - Microsoft Corporation)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)

Google Talk (remove only) (HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk) (Version: - )

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Head First C# - Lab #1 (HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\928e69970e05b210) (Version: 1.0.0.4 - Head First C#)

Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden

hosts (HKLM-x32\...\hosts) (Version: 1.27.153.7 - Alex) <==== ATTENTION

House of 1000 Doors: Family Secrets (x32 Version: 2.2.0.98 - WildTangent) Hidden

House of 1000 Doors: The Palm of Zoroaster (x32 Version: 2.2.0.110 - WildTangent) Hidden

Hoyle Card Games (x32 Version: 2.2.0.95 - WildTangent) Hidden

HP 3D DriveGuard (HKLM\...\{54CE68A8-4F2D-4328-B1F7-D6C720405F7F}) (Version: 4.2.9.1 - Hewlett-Packard Company)

HP Application Assistant (HKLM\...\{0CE7EBAF-157D-4111-9146-057CB2A4023E}) (Version: 1.1.466.3970 - Hewlett-Packard)

HP Connection Manager (HKLM-x32\...\{B65FCAA5-F3A6-4B3F-ABEE-CBC2B085796B}) (Version: 4.1.25.1 - Hewlett-Packard Company)

HP CoolSense (HKLM-x32\...\{0D3A6808-82B8-4BB1-BE5A-AED75B3F6C02}) (Version: 2.20.11 - Hewlett-Packard Company)

HP Documentation (HKLM-x32\...\{B288E426-9954-451C-B811-B0F234CF0EDD}) (Version: 1.3.0.0 - Hewlett-Packard)

HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.5 - WildTangent)

HP Launch Box (HKLM\...\{5A847522-375C-4D05-BD3D-88C450CC047F}) (Version: 1.1.5 - Hewlett-Packard Company)

HP MovieStore (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA}) (Version: 2.1.21096.0 - Hewlett-Packard Company)

HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)

HP Power Manager (HKLM-x32\...\{D8BCE5B9-67CF-4F3F-93AE-3ACC754C72EB}) (Version: 1.4.7 - Hewlett-Packard Company)

HP Quick Launch (HKLM-x32\...\{00A42832-B21A-4296-B5F4-D296D0BC4A3E}) (Version: 2.6.3 - Hewlett-Packard Company)

HP Security Assistant (HKLM\...\{ED6CD3AC-616B-4B20-BCF3-6E637B92A5AD}) (Version: 3.0.4 - Hewlett-Packard Company)

HP Setup (HKLM-x32\...\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}) (Version: 9.0.15109.3899 - Hewlett-Packard Company)

HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.2.14901.3869 - Hewlett-Packard Company)

HP SimplePass (HKLM-x32\...\{34C821CA-6B55-44A0-8A9B-2EF471D6019E}) (Version: 6.0.100.272 - Hewlett-Packard)

HP Software Framework (HKLM-x32\...\{675D093B-815D-47FD-AB2C-192EC751E8E2}) (Version: 4.6.10.1 - Hewlett-Packard Company)

HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)

iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)

IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6418.0 - IDT)

Inspector Parker (HKLM-x32\...\Inspector Parker) (Version: 32.0.0.0 - Shockwave.com)

iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java SE Development Kit 7 Update 11 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170110}) (Version: 1.7.0.110 - Oracle)

Java SE Development Kit 7 Update 21 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170210}) (Version: 1.7.0.210 - Oracle)

Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden

John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden

Junk Cleaner (x32 Version: 1.1.6.2 - Pandaje Group) Hidden

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Letters from Nowhere 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden

Luxor HD (x32 Version: 2.2.0.98 - WildTangent) Hidden

Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden

Manga Reader (HKLM-x32\...\{1FDA9091-BAEF-4E1E-8494-E8942AB6AC10}) (Version: 1.4.4.0 - Minut Made Software)

Master of Alchemy (x32 Version: 3.0.2.32 - WildTangent) Hidden

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools (HKLM-x32\...\{40416836-56CC-4C0E-A6AF-5C34BADCE483}) (Version: 2.0.50217.0 - Microsoft Corporation)

Microsoft ASP.NET MVC 2 (HKLM-x32\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation)

Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)

Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.5139.5005 - Microsoft Corporation)

Microsoft Report Viewer Redistributable 2008 SP1 (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 (KB971119)) (Version: - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Silverlight 3 SDK (HKLM-x32\...\{2012098D-EEE9-4769-8DD3-B038050854D4}) (Version: 3.0.40818.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)

Microsoft SQL Server 2008 R2 (64-bit) (HKLM\...\Microsoft SQL Server 2008 R2) (Version: - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Books Online (HKLM-x32\...\{74F7B314-0507-4F91-9A4E-B6C9B027E410}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Data-Tier Application Framework (HKLM-x32\...\{0DDCEC37-369C-484B-B16D-B4413FD42FB9}) (Version: 10.50.1447.4 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Data-Tier Application Project (HKLM-x32\...\{E5AE9031-79A5-4627-9641-BEFA82819B08}) (Version: 10.50.1447.4 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{4E968D9C-21A7-4915-B698-F7AEB913541D}) (Version: 10.50.1447.4 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Management Objects (x64) (HKLM\...\{DA67488A-2689-4F10-B90F-D2F6977509D6}) (Version: 10.50.1447.4 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Native Client (HKLM\...\{362A3FDF-B12E-436A-9097-1B795A9FFCC5}) (Version: 10.50.1617.0 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Policies (HKLM-x32\...\{D21BC5B2-CBAC-48FA-A701-B5A63C1CA7B8}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Setup (English) (HKLM\...\{79FB3E7E-FD92-49A9-AAD1-193EE4CB85D3}) (Version: 10.50.1617.0 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Transact-SQL Language Service (HKLM-x32\...\{78C3657E-742C-40B1-9F53-E5A921D40F17}) (Version: 10.50.1447.4 - Microsoft Corporation)

Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)

Microsoft SQL Server Browser (HKLM-x32\...\{BF9BF038-FE03-429D-9B26-2FA0FD756052}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 Query Tools ENU (HKLM-x32\...\{DDFD8348-058C-4F4B-85E5-6D740D4AB3FE}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Database Publishing Wizard 1.4 (HKLM-x32\...\{ACE28263-76A4-4BF5-B6F4-8BD719595969}) (Version: 10.1.2512.8 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2F3AE8-246A-4252-BB26-1BEB45627074}) (Version: 10.50.1447.4 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft SQL Server VSS Writer (HKLM\...\{288D79EE-A2D1-42AF-9597-B0ADCC23A8ED}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft Sync Framework Runtime v1.0 SP1 (x64) (HKLM\...\{8438EC02-B8A9-462D-AC72-1B521349C001}) (Version: 1.0.3010.0 - Microsoft Corporation)

Microsoft Sync Framework SDK v1.0 SP1 (HKLM-x32\...\{0E3DFC64-CC49-4BE2-8C9C-58EF129675DB}) (Version: 1.0.3010.0 - Microsoft Corporation)

Microsoft Sync Framework Services v1.0 SP1 (x64) (HKLM\...\{034106B5-54B7-467F-B477-5B7DBB492624}) (Version: 1.0.3010.0 - Microsoft Corporation)

Microsoft Sync Services for ADO.NET v2.0 SP1 (x64) (HKLM\...\{1D1CEEF8-3741-45BD-8E77-963E1DEBDDD3}) (Version: 2.0.3010.0 - Microsoft Corporation)

Microsoft Team Foundation Server 2010 Object Model - ENU (HKLM\...\Microsoft Team Foundation Server 2010 Object Model - ENU) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Designtime - 10.0.30319 (HKLM\...\{F5079164-1DB9-3BDA-853B-F78AF67CE071}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Runtime - 10.0.30319 (HKLM-x32\...\{6A86554B-8928-30E4-A53C-D7337689134D}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual F# 2.0 Runtime (HKLM-x32\...\{729A3000-BC8A-3B74-BA5D-5068FE12D70C}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual Studio 2008 Shell (integrated mode) - ENU (HKLM-x32\...\{BA0C9AAF-1327-3F06-B49C-349B4BE8F740}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual Studio 2010 IntelliTrace Collection (x64) (HKLM\...\{88BAE373-00F4-3E33-828F-96E89E5E0CB9}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual Studio 2010 Premium - ENU (HKLM-x32\...\Microsoft Visual Studio 2010 Premium - ENU) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{4ECF4BDC-8387-329A-ABE9-CF5798F84BB2}) (Version: 9.0.35191 - Microsoft Corporation)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Norton Internet Security (HKLM-x32\...\NIS) (Version: 19.1.0.28 - Symantec Corporation)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.7 - Notepad++ Team)

NoteWorthy Player (HKLM-x32\...\NoteWorthy Player) (Version: - )

opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.0 - Frank Heindörfer, Philip Chinery)

Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden

PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)

Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden

Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden

Polar Golfer (x32 Version: 2.2.0.98 - WildTangent) Hidden

Puzzle Myth (x32 Version: 2.2.0.95 - WildTangent) Hidden

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)

Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.29005 - Realtek Semiconductor Corp.)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

RollerCoaster Tycoon 3: Platinum (x32 Version: 2.2.0.98 - WildTangent) Hidden

Sacra Terra: Angelic Night (x32 Version: 2.2.0.98 - WildTangent) Hidden

Sacra Terra: Kiss of Death Collector's Edition (x32 Version: 3.0.2.48 - WildTangent) Hidden

Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)

Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.9.12585 - Skype Technologies S.A.)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

SQL Server 2008 R2 Analysis Services (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

SQL Server 2008 R2 BI Development Studio (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

SQL Server 2008 R2 Client Tools (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

SQL Server 2008 R2 Common Files (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

SQL Server 2008 R2 Database Engine Services (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

SQL Server 2008 R2 Database Engine Shared (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

SQL Server 2008 R2 Full text search (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

SQL Server 2008 R2 Integration Services (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

SQL Server 2008 R2 Management Studio (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

SQL Server 2008 R2 Reporting Services (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

Sql Server Customer Experience Improvement Program (Version: 10.50.1600.1 - Microsoft Corporation) Hidden

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)

The Treasures of Mystery Island (x32 Version: 2.2.0.98 - WildTangent) Hidden

The Treasures of Mystery Island 2: The Gates of Fate (x32 Version: 2.2.0.98 - WildTangent) Hidden

The Treasures of Mystery Island: The Ghost Ship (x32 Version: 2.2.0.98 - WildTangent) Hidden

toolbar (HKLM-x32\...\privitize) (Version: 1.8.21.6 - Industriya)

Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden

Unity Web Player (HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS)

Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden

Updater By SweetPacks 2.0.0.586 (HKLM\...\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}_is1) (Version: 2.0.0.586 - SweetPacks) <==== ATTENTION

Validity WBF DDK (HKLM\...\{DA83578A-7DB2-4CF6-9453-CF24C7917AB8}) (Version: 4.3.301.0 - Validity Sensors, Inc.)

Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98 - WildTangent) Hidden

Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.30319 - Microsoft Corporation)

Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

Web Deployment Tool (HKLM\...\{0F37D969-1260-419E-B308-EF7D29ABDE20}) (Version: 1.1.0618 - Microsoft Corporation)

WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WildTangent Games App (HP Games) (x32 Version: 4.0.10.16 - WildTangent) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)

Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)

Youda Mystery: The Stanwick Legacy (HKLM-x32\...\Youda Mystery: The Stanwick Legacy) (Version: 32.0.0.0 - Shockwave.com)

Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

10-05-2015 23:17:18 Revo Uninstaller's restore point - TidyNetwork.com

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 20:34 - 2009-06-10 15:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0089B4D2-7DBD-4F06-B3DA-F8452485664E} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION

Task: {075710C8-CBCB-4E26-A10B-63AF5E9307A6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)

Task: {09299C54-7838-4813-A028-FEE18A0DFA7A} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe <==== ATTENTION

Task: {0B2DC6A3-2773-49F7-9ABF-0167393CA7EA} - System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-6 => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-6.exe <==== ATTENTION

Task: {1291D067-0E5B-434A-9FCC-DAFDF1D562CA} - System32\Tasks\ZFNENS => C:\ProgramData\75b516f7def3449383a44752d9f6e6a9\75b516f7def3449383a44752d9f6e6a9.exe [2015-05-07] ()

Task: {25576247-CDD0-4C16-B4EB-A5D2885C4781} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)

Task: {268DDB4D-CA14-4664-851B-80A5EE860CD0} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION

Task: {2C9484CB-8181-4B55-9C00-0246F3E06931} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-04-14] (Hewlett-Packard)

Task: {2DBF4CAA-70A3-4080-92AB-0CC597388308} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\A Steel Lady\AppData\Local\SmartWeb\SmartWebHelper.exe <==== ATTENTION

Task: {37554CFF-4429-49A6-947D-FCC993966E8A} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-11-28] (CyberLink)

Task: {388DCBF1-E50D-4593-85B8-3DE0C8F912BE} - System32\Tasks\boosterpop => C:\Program Files (x86)\Tuneup computer\Probsalert.exe

Task: {3B123644-0A0C-4A09-AA15-04DDF24CA6A3} - System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5 => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-5.exe <==== ATTENTION

Task: {3F21F79B-FCC0-45F5-9744-E21B9316A79D} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\SymErr.exe [2011-08-11] (Symantec Corporation)

Task: {457172A4-C571-41FE-89F4-69F9305DD256} - System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-7 => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-7.exe <==== ATTENTION

Task: {463C4F8C-1964-43A0-BC0E-37EC7DA41B17} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\WSCStub.exe [2011-08-13] (Symantec Corporation)

Task: {47B1DBD6-0E25-4A29-8A2F-07A53CDF163A} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\SymErr.exe [2011-08-11] (Symantec Corporation)

Task: {5B6F039B-7026-487E-B8BD-D2E62CB0086E} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)

Task: {60F9A5A9-5425-4DF9-BFD6-ECA850FCA181} - System32\Tasks\IE_ERR4WDR => C:\Program Files (x86)\Portable WeatherApp\IEError.exe

Task: {7DAB5F3C-15DF-44B6-94D4-E861F6B95762} - System32\Tasks\AI_Updater => C:\Program Files (x86)\Tuneup computer\updater.exe

Task: {95A0CF32-48E3-4EEA-B0A0-F8A6CB3AAC93} - System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-6 => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-1-6.exe <==== ATTENTION

Task: {96AEA23C-CC10-4C12-B151-21F394117005} - System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-7 => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-1-7.exe <==== ATTENTION

Task: {97123642-BA61-4172-96CC-7E0E90CEA740} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: {97A955C6-3171-4DAD-AB12-F52AC2E688F2} - System32\Tasks\LQGVVK1 => C:\ProgramData\LolliScan\LolliScan.exe

Task: {97D85A03-E5E0-4718-8D9F-58F3A91A1EF5} - System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5_user => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-5.exe <==== ATTENTION

Task: {9CA34345-B456-432F-9A0D-31A1E8C5A54C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-19] (Google Inc.)

Task: {A0BCF1DC-97BC-4B65-BEAC-ED06FE453B9C} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: {A92F105D-BA37-4BB8-B453-688F7FF497D1} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1885504849-1370587953-3290610847-1001

Task: {A99B0BD3-D43B-4716-848B-3B9F3344ED0D} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)

Task: {AD6D465F-8574-41DC-AE4D-02E334FCC2AF} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-08-19] (Hewlett-Packard Development Company, L.P.)

Task: {ADB815A1-89A5-4FB7-A644-D785609878E0} - System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-10_user => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-10.exe <==== ATTENTION

Task: {AEA4A02A-ADDD-4809-91A7-D1177574134B} - System32\Tasks\IEError => C:\Program Files (x86)\Tuneup computer\Popialert.exe

Task: {B3B7F1A4-F66A-4884-9016-1339EB0AC8C4} - System32\Tasks\c0976ad7-b268-4bd9-b131-7cf2ab414e25-7 => C:\Program Files (x86)\Torntv V9.0\Torntv V9.0-nova.exe <==== ATTENTION

Task: {B79AB0A2-0767-4FD2-AEE3-F9C6CE7AABA5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-19] (Google Inc.)

Task: {B7A656C8-AED6-46FD-BAA5-492D5B3167D5} - System32\Tasks\UPDTEXE4_WDR => C:\Program Files (x86)\Portable WeatherApp\updater.exe

Task: {BBEA53CA-AA34-4F7B-86E7-8048895B5796} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C2C8512B-46FB-440B-B274-FACB94F5ACEE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)

Task: {D2FCD131-55DE-484B-AC15-D627BB8B0684} - System32\Tasks\HDNINSTSCHD => C:\Windows\PCBHDNW\hdnInstaller.exe

Task: {DA02DF3D-13CC-4849-A389-5468A16DE52E} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)

Task: {E0EFF135-3B46-461D-B1D3-D530DBF22BE7} - System32\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-3 => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-3.exe <==== ATTENTION

Task: {E1360380-7702-458E-AE41-6C6998D5ACDA} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\A Steel Lady\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION

Task: {E3F679D1-8DDB-432D-B1A1-61ACBA917F34} - System32\Tasks\Funmoods => C:\Users\ASTEEL~1\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

Task: {E53D1E47-4ACE-46B4-AA74-5F87B0FF3B85} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: {F03E965B-7DDB-4EB2-B92C-C82B06F196F4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)

Task: {F96531D8-7CA6-497B-B6C9-7AFC9EE47CDA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)

Task: C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-6.job => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-1-6.exe <==== ATTENTION

Task: C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-7.job => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-1-7.exe <==== ATTENTION

Task: C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-10_user.job => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-10.exe <==== ATTENTION

Task: C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-3.job => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-3.exe <==== ATTENTION

Task: C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5.job => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5_user.job => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-6.job => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-6.exe <==== ATTENTION

Task: C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-7.job => C:\Program Files (x86)\CinemaPlus_1.3dV07.05\0a6f44be-7070-4d63-b7da-716f36427197-7.exe <==== ATTENTION

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION

Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\LQGVVK1.job => C:\ProgramData\LolliScan\LolliScan.exe

==================== Loaded Modules (whitelisted) ==============

2013-01-30 19:49 - 2005-03-12 01:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll

2012-01-26 20:54 - 2012-01-26 20:54 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll

2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-01-20 23:35 - 2015-01-20 23:35 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2013-10-16 19:02 - 2013-10-16 19:02 - 03358064 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll

2015-05-08 15:26 - 2015-05-08 15:26 - 00352256 _____ () C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\jnspF71E.tmp

2012-01-26 20:54 - 2012-01-26 20:54 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

2012-01-26 20:59 - 2012-01-26 20:59 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2011-11-09 11:55 - 2011-11-09 11:55 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll

2015-05-10 23:06 - 2015-05-10 23:06 - 00266752 _____ () C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\nsgA973.tmp

2011-04-27 18:05 - 2011-04-27 18:05 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll

2013-02-07 09:19 - 2013-02-07 09:19 - 04073768 _____ () C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe

2013-10-16 19:01 - 2013-10-16 19:01 - 04624240 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-10-17 17:45 - 2013-10-17 17:45 - 32726528 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libcef.dll

2013-03-13 14:42 - 2013-06-05 15:21 - 00071560 _____ () C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\zlib1.dll

2011-04-27 18:05 - 2011-04-27 18:05 - 00514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll

2015-05-12 15:12 - 2015-05-12 15:13 - 00264554 _____ () C:\Users\A Steel Lady\AppData\Local\Temp\nst3B30.tmp

2015-05-12 15:13 - 2015-05-12 15:13 - 00011264 _____ () C:\Users\A Steel Lady\AppData\Local\Temp\nso8E2E.tmp\System.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\plsapp => ""="service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1885504849-1370587953-3290610847-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\A Steel Lady\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 75.75.76.76 - 75.75.75.75

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{FF2373EE-2D99-4DA8-BA3E-4D63B2264EB9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{DDC15A35-8127-4697-AB69-076CC418BA99}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{5F771FCF-A8E9-4C1D-A768-0683F798A478}] => (Allow) LPort=2869

FirewallRules: [{7A4869FC-BFC9-4B3F-AD91-CC7AA21A83F6}] => (Allow) LPort=1900

FirewallRules: [{9560457E-0416-4EC8-ADA9-A6AC69EE7D54}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{6C0036F6-5FC0-45D6-8A2F-91E64CB84BE4}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe

FirewallRules: [{0BDF672F-7ECC-406B-BFAB-DB5ADA7648A5}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\RNow.exe

FirewallRules: [{4B2032DD-553C-4572-A4E5-6808C7AED44E}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\RNow.exe

FirewallRules: [{FEC9067C-B666-4929-9AC8-8D8D303CCA91}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\RNow.exe

FirewallRules: [{DD759FF7-F5DA-46EB-95D0-623E6E3184E6}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\RNow.exe

FirewallRules: [{27922F38-8542-4221-A4DA-6CCE8291F9FB}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\IndivDRM.exe

FirewallRules: [{ADF7C08E-823A-4A84-807C-FDC9391F5C36}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\IndivDRM.exe

FirewallRules: [{651AA293-5B03-49F0-88EF-8334A52AA99D}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\IndivDRM.exe

FirewallRules: [{A12C344E-73EC-4C26-B302-4EC82472B7EC}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\IndivDRM.exe

FirewallRules: [{D8EADE37-031C-4472-993A-E7CD82FA7395}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{B0AC1A1E-239D-45D3-8131-A2721F9FED55}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{B5232F7B-E2C9-478F-A415-BA2ABCFFB830}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{26056727-8C30-4DF7-958B-5D3CA6F6ACF0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{449AD50F-A161-48B9-95CD-A0FEFAB17567}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe

FirewallRules: [{08726177-7CE6-405A-BE65-BEF523DDFECA}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe

FirewallRules: [{AAA81FFF-C18A-4793-BA3B-25CF040BA741}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe

FirewallRules: [TCP Query User{9328E566-5905-47D6-8554-6844B5598743}C:\users\a steel lady\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\a steel lady\appdata\roaming\utorrent\utorrent.exe

FirewallRules: [UDP Query User{38DFE376-8883-49DD-9947-F420BB05E60F}C:\users\a steel lady\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\a steel lady\appdata\roaming\utorrent\utorrent.exe

FirewallRules: [TCP Query User{6053097D-21C6-43AE-91A7-8591524397EA}C:\users\a steel lady\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\a steel lady\appdata\roaming\utorrent\utorrent.exe

FirewallRules: [UDP Query User{CE5B3E07-F2F2-411C-B767-215B6C3A8CAE}C:\users\a steel lady\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\a steel lady\appdata\roaming\utorrent\utorrent.exe

FirewallRules: [{4579FCCD-84D7-407F-87DE-7D13779E8668}] => (Allow) C:\Users\A Steel Lady\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{E085DD5E-F24B-43FB-9B13-DB3B4085402C}] => (Allow) C:\Users\A Steel Lady\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [TCP Query User{40A60333-53B9-45BD-BDF6-4EC512C62CD3}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [UDP Query User{883C05F5-F284-4E59-9971-2302EBB1CFA5}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [{C871DA54-5A15-418F-B275-F4347884A926}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe

FirewallRules: [TCP Query User{7172FB87-9834-4AD0-8F89-D19F05E7F5DD}C:\program files (x86)\torntv.com\torntv downloader.exe] => (Block) C:\program files (x86)\torntv.com\torntv downloader.exe

FirewallRules: [UDP Query User{5F8E8DA0-0723-4F13-B922-2B65BAC15898}C:\program files (x86)\torntv.com\torntv downloader.exe] => (Block) C:\program files (x86)\torntv.com\torntv downloader.exe

FirewallRules: [{BE08D636-68A2-4B1D-B8E9-D37B86259D09}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe

FirewallRules: [{BC3A7A69-22B1-43AB-B03A-08B7009530A5}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe

FirewallRules: [{A9FA5C21-9724-4352-9EDC-CD2EF4929DB2}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{2B67C8C2-DD83-4222-82CC-8B9B06BD0A88}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{DB27DFBA-0469-4032-BB53-30B6AD57334E}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft Teredo Tunneling Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

==================== Event log errors: =========================

Application errors:

==================

Error: (05/12/2015 02:10:52 PM) (Source: CVHSVC) (EventID: 100) (User: )

Description: Information only.

(Patch task for {90140011-0066-0409-0000-0000000FF1CE}): DownloadLatest Failed: There are currently no active network connections. Background Intelligent Transfer Service (BITS) will try again when an adapter is connected.

Error: (05/12/2015 02:00:41 PM) (Source: MSSQLServerOLAPService) (EventID: 4) (User: )

Description: An error occurred while starting the flight recorder.

Error: (05/12/2015 02:00:40 PM) (Source: MSSQLServerOLAPService) (EventID: 35) (User: )

Description: The file '\\?\C:\Program Files\Microsoft SQL Server\MSAS10_50.MSSQLSERVER\OLAP\Log\FlightRecorderCurrent.trc' could not be opened. Please check the file for permissions or see if other applications locked it.

Error: (05/12/2015 02:00:32 PM) (Source: Report Server Windows Service (MSSQLSERVER)) (EventID: 107) (User: )

Description: Report Server Windows Service (MSSQLSERVER) cannot connect to the report server database.

Error: (05/12/2015 02:00:09 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 00:24:41 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 00:20:17 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: )

Description: The Cryptographic Services service failed to initialize the VSS backup "System Writer" object.

Details:

Could not query the status of the EventSystem service.

System Error:

A system shutdown is in progress.

Error: (05/12/2015 00:09:29 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 11:14:10 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 10:10:05 AM) (Source: MsiInstaller) (EventID: 11606) (User: NT AUTHORITY)

Description: Product: Adobe Refresh Manager -- Error 1606.Could not access network location %APPDATA%\.

System errors:

=============

Error: (05/12/2015 03:15:13 PM) (Source: volsnap) (EventID: 36) (User: )

Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (05/12/2015 02:11:52 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.197.2059.0

Update Source: %NT AUTHORITY59

Update Stage: 4.7.0205.00

Source Path: 4.7.0205.01

Signature Type: %NT AUTHORITY602

Update Type: %NT AUTHORITY604

User: NT AUTHORITY\SYSTEM

Current Engine Version: %NT AUTHORITY605

Previous Engine Version: %NT AUTHORITY606

Error code: %NT AUTHORITY607

Error description: %NT AUTHORITY608

Error: (05/12/2015 02:09:07 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for FailureCommand with the following error:

%%5

Error: (05/12/2015 02:06:57 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Start with the following error:

%%5

Error: (05/12/2015 02:06:16 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: The Windows Update service hung on starting.

Error: (05/12/2015 02:02:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The globalUpdate Update Service (globalUpdate) service failed to start due to the following error:

%%2

Error: (05/12/2015 02:00:25 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the HPWMISVC service.

Error: (05/12/2015 01:59:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Util PathMaxx service failed to start due to the following error:

%%2

Error: (05/12/2015 01:59:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Util Mountain Bike service failed to start due to the following error:

%%2

Error: (05/12/2015 01:59:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Util Edu App service failed to start due to the following error:

%%2

Microsoft Office Sessions:

=========================

Error: (05/12/2015 02:10:52 PM) (Source: CVHSVC) (EventID: 100) (User: )

Description: (Patch task for {90140011-0066-0409-0000-0000000FF1CE}): DownloadLatest Failed: There are currently no active network connections. Background Intelligent Transfer Service (BITS) will try again when an adapter is connected.

Error: (05/12/2015 02:00:41 PM) (Source: MSSQLServerOLAPService) (EventID: 4) (User: )

Description: Internal error: An unexpected error occurred (file 'pfperfmonmgr.cpp', line 843, function 'StartupSetupNamedObjectSecurity'). Errors in performance monitor counter library. An error occurred during initialization: failure from InitializeSecurityDescriptor. File system error: The following error occurred while opening the file '\\?\C:\Program Files\Microsoft SQL Server\MSAS10_50.MSSQLSERVER\OLAP\Log\FlightRecorderCurrent.trc'.

Error: (05/12/2015 02:00:40 PM) (Source: MSSQLServerOLAPService) (EventID: 35) (User: )

Description: \\?\C:\Program Files\Microsoft SQL Server\MSAS10_50.MSSQLSERVER\OLAP\Log\FlightRecorderCurrent.trc

Error: (05/12/2015 02:00:32 PM) (Source: Report Server Windows Service (MSSQLSERVER)) (EventID: 107) (User: )

Description: Report Server Windows Service (MSSQLSERVER)

Error: (05/12/2015 02:00:09 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 00:24:41 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 00:20:17 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: )

Description:

Details:

Could not query the status of the EventSystem service.

System Error:

A system shutdown is in progress.

Error: (05/12/2015 00:09:29 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 11:14:10 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 10:10:05 AM) (Source: MsiInstaller) (EventID: 11606) (User: NT AUTHORITY)

Description: Product: Adobe Refresh Manager -- Error 1606.Could not access network location %APPDATA%\.(NULL)(NULL)(NULL)(NULL)(NULL)

CodeIntegrity Errors:

===================================

Date: 2015-05-08 17:29:40.907

Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-05-08 17:29:37.348

Date: 2015-05-08 17:29:36.093

Date: 2015-05-08 17:29:35.300

Date: 2015-05-08 17:29:34.545

Date: 2015-05-08 17:29:34.213

==================== Memory info ===========================

Processor: AMD A8-4500M APU with Radeon™ HD Graphics

Percentage of memory in use: 41%

Total physical RAM: 5602.36 MB

Available physical RAM: 3257.84 MB

Total Pagefile: 6007.11 MB

Available Pagefile: 3287.27 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:679.09 GB) (Free:1.56 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive d: (Recovery) (Fixed) (Total:19.25 GB) (Free:2.02 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive f: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32

Drive g: (USB) (Removable) (Total:3.74 GB) (Free:3.74 GB) FAT32

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 64077DA3)

Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=679.1 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=19.2 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=102 MB) - (Type=0C)

========================================================

Disk: 1 (Size: 3.8 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

#2
Naathim

Posted 13 May 2015 - 03:14 AM

GeekU Minion

Expert
4,568 posts

Minion%20Welcome.jpg

My name's Naathim and I'm a GeekU Minion! Now that we are mates and will be working together to clean your machine out of any junkware, feel free to call me Naat

Before we start please note the following:

Analysis and research take some time, also sometimes real life gets in the way, please be patient.

Limit your internet access to posting here, some infections just wait to steal typed-in passwords.

Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.

Paste the logs in your posts, attachments make my work harder and more complicated.

Stay with me to the end, the absence of symtoms doesn't mean that your machine is fully operational.

Note that we may live in totally different time zones, what may cause some delays between answers.

I can't foresee everything, so if anything unexpected happens, please stop and inform me!

There are no silly questions. Never be afraid to ask if in doubt!

Let's start and enjoy the fight!

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

Right-click on icon and select Run as Administrator to start the tool.
Wait patiently until the main console will appear, it may take a minute or two.

In the main box please paste in the following script:

createsrpoint;
autoclean;
C:\Program Files (x86)\SearchProtect;fs
C:\Program Files (x86)\YTDownloader;fs
C:\Users\A Steel Lady\AppData\Local\Conduit;fs
C:\Users\A Steel Lady\AppData\Local\Boxer;fs
C:\Program Files (x86)\PandaJe Group;fs
C:\Windows\sysnative\config\systemprofile\AppData\Roaming\SearchProtect;fs
c:\programdata\lolliscan;fs
C:\Users\A Steel Lady\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk;f
C:\ProgramData\{36c9b6d1-db1e-5534-36c9-9b6d1db1db47};fs
[-HKLM\SOFTWARE\Policies\Google];r
[-HKLM\SOFTWARE\Policies\Google];r64
{650598e1-b35a-45d3-b607-896d7acb64c3};c
{2E00D31D-D171-423D-836D-1A4D7EA7F1A9};c
{2fa28606-de77-4029-af96-b231e3b8f827};c
{77AA745B-F4F8-45DA-9B14-61D2D95054C8};c
{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B};c
{006ee092-9658-4fd6-bd8e-a21a348e59f5};c
{5081D2D4-1637-404c-B74F-50526718257D};c
emptyclsid;
{7D4F1959-3F72-49d5-8E59-F02F8AA6815D};c
C:\Program Files\Updater By SweetPacks;fs
{11111111-1111-1111-1111-110311531182};c
C:\Program Files (x86)\hosts;fs
{7F6AFBF1-E065-4627-A2FD-810366367D01};c 
{7D4F1959-3F72-49d5-8E59-F02F8AA6815D};ff
{5081D2D4-1637-404c-B74F-50526718257D};ff
pflphaooapbgpeakohlggbpidpppgdff;chr
nolijncfnkgaikbjbdaogikpmpbdcdef ;chr
infbohjcpbljfmnimjodijobdhjfijnp;chr
pujodigi;s
C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A;fs
BrsHelper;s
CoupoonService64;s
C:\Program Files (x86)\coupoon;fs
C:\Users\A Steel Lady\AppData\Roaming\DefaultTab;fs
DefaultTabUpdate;s
globalUpdate;s
C:\Program Files (x86)\globalUpdate;fs
globalUpdatem;s
C:\Windows\Sysnative\drivers\{2dbedf58-a62a-42c8-8238-0f30b6742344}Gw64.sys;f
C:\Windows\Sysnative\drivers\{7ac2c1a1-86c6-433c-a5d3-1f965778f48a}Gw64.sys;f
C:\Windows\Sysnative\drivers\{ca90993a-de56-4b38-814c-e9d8d5eca392}Gw64.sys;f
{ca90993a-de56-4b38-814c-e9d8d5eca392}Gw64;s
{7ac2c1a1-86c6-433c-a5d3-1f965778f48a}Gw64;s
{2dbedf58-a62a-42c8-8238-0f30b6742344}Gw64;s
C:\Users\A Steel Lady\AppData\Roaming\AnyProtectEx;fs
C:\Windows\Tasks\APSnotifierPP1.job;f
C:\Windows\Tasks\APSnotifierPP3.job;f
C:\Windows\Sysnative\Tasks\APSnotifierPP1;f
C:\Windows\Sysnative\Tasks\APSnotifierPP3;f
C:\Windows\Sysnative\Tasks\APSnotifierPP2;f
C:\Windows\Tasks\APSnotifierPP2.job;f
C:\Windows\Sysnative\Tasks\SmartWeb Upgrade Trigger Task;f
C:\Program Files\shopperz;fs
C:\user.js;f
C:\Users\Public\Documents\ShopperPro;fs
C:\ProgramData\ccc4026c00005946;fs
C:\Windows\Sysnative\Tasks\boosterpop;f
C:\Windows\Sysnative\Tasks\IEError;f
C:\Windows\Sysnative\Tasks\AI_Updater;f
C:\ProgramData\SearchModule;fs
C:\Program Files\Common Files\Goobzo;fs
C:\ProgramData\{36c9b6d1-db1e-5534-36c9-9b6d1db1db47};fs
C:\Program Files\Common Files\PastaLeads;fs
C:\Users\A Steel Lady\AppData\Local\OptimiserUn;fs
C:\ProgramData\PastaLeadsAgent
C:\Users\A Steel Lady\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage;fs
C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5_user.job;f
C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5.job;f
C:\Windows\Sysnative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5;f
C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-6.job;f
C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-7.job;f
C:\Windows\Sysnative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-7;f
C:\Windows\Sysnative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-6;f
C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120328-E111-8703-CBF38146158A;fs
C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-6.job;f
C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-7.job;f
C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A;fs
C:\Windows\Sysnative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-6;f
C:\Windows\Sysnative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-7;f
C:\Program Files\Coupoon;fs
C:\end;f
C:\ProgramData\imjahbjfdibimglcehjcmpmopanciefj;fs
C:\ProgramData\UD2XUy.dat;f
C:\ProgramData\LolliScan;fs
C:\ProgramData\2451325811901998479;fs
C:\ProgramData\75b516f7def3449383a44752d9f6e6a9;fs
C:\ProgramData\7c0535b143fc4671b6ebd202fbffe066;fs
C:\ProgramData\Package Cache;fs
C:\Windows\Sysnative\Tasks\LQGVVK1;f
C:\Windows\Tasks\LQGVVK1.job;f
C:\Windows\Sysnative\Tasks\ZFNENS;f
startupall;
filesrcm;

Make sure that Scan All Users option is checked.
Push Run Script and wait patiently. The scan may take a couple of minutes.
When the scan completes, a zoek-results logfile should open in notepad.
If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Please include its content in your next reply.
Don't forget to re-enable your switched-off protection software!

#3
Appliance

Posted 13 May 2015 - 07:50 PM

Member

Topic Starter
Member
11 posts

Thanks for the help Naat,

I'm not sure if you need to know or not. When my computer rebooted, a dialog box came up saying:

Header: "RunDLL"

Message: "There was a problem starting C:\Users\A Steel Lady\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll

The specified module could not be found."

Here is the info from the zoek-results.txt file:

Zoek.exe v5.0.0.0 Updated 04-May-2015

Tool run by A Steel Lady on Wed 05/13/2015 at 16:15:24.59.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode No Internet Access Detected

Launched: C:\Users\A Steel Lady\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

5/13/2015 4:23:35 PM Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\PROGRA~2\DownLite deleted successfully

C:\PROGRA~2\MSXML 4.0 deleted successfully

C:\PROGRA~2\Noteworthy Software deleted successfully

C:\PROGRA~2\OpenDownloaderManager deleted successfully

C:\PROGRA~2\WinRAR deleted successfully

C:\Program Files\003 deleted successfully

C:\Program Files\Google deleted successfully

C:\Program Files\Symantec deleted successfully

C:\Program Files\Common Files\Goobzo deleted successfully

C:\Program Files\Common Files\PastaLeads deleted successfully

C:\PROGRA~3\374311380 deleted successfully

C:\PROGRA~3\regid.1986-12.com.adobe deleted successfully

C:\PROGRA~3\Yahoo! deleted successfully

C:\Users\A Steel Lady\AppData\Roaming\30939 deleted successfully

C:\Users\A Steel Lady\AppData\Roaming\TP deleted successfully

C:\Users\A Steel Lady\AppData\Roaming\uTorrent deleted successfully

C:\Users\A Steel Lady\AppData\Local\Boxer deleted successfully

C:\Users\A Steel Lady\AppData\Local\Shopping Sidekick Plugin deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311531182} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311531182} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3624987F-296D-4097-85A5-9FE1A4E2F33F} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4C19A859-3B64-4321-9AD0-8F5484F5331} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{73F5B58A-D288-4264-AD4C-E289A9F597C6} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8123389A-EB3-4559-A656-F7F0AB9665F} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{84DCE0D2-F8CA-470F-B1D-388653EDD774} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E66592B-8E7C-4A14-88A5-8BF21032F651} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8EF0828E-6F2D-44AE-A589-BD3053406B4} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A10E477B-A1BF-4381-ADDC-4B329B2EA4A9} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B96C7F31-22FB-42AD-B086-A1A95552B0FA} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BDEB5381-DB3-47FF-8324-E4EFCCC0E685} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D5CA9AEB-6BA7-4C5D-8E66-26B1574BBD34} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E114CDEA-C9F4-40FE-AB6F-DA2ED5A6AFC0} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E8B2194F-7A0C-45A1-9035-A6C9F5F7AC6} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{650598e1-b35a-45d3-b607-896d7acb64c3} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5081D2D4-1637-404c-B74F-50526718257D} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5081D2D4-1637-404c-B74F-50526718257D} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D} deleted successfully

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311531182} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311531182} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311531182} deleted successfully

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{650598e1-b35a-45d3-b607-896d7acb64c3} deleted successfully

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Approved Extensions\{5081D2D4-1637-404c-B74F-50526718257D} deleted successfully

HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Approved Extensions\{5081D2D4-1637-404c-B74F-50526718257D} deleted successfully

HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Approved Extensions\{5081D2D4-1637-404c-B74F-50526718257D} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Classes\Software\Microsoft\Internet Explorer\Approved Extensions\{5081D2D4-1637-404c-B74F-50526718257D} deleted successfully

HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{5081D2D4-1637-404c-B74F-50526718257D} deleted successfully

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{5081D2D4-1637-404c-B74F-50526718257D} deleted successfully

HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D} deleted successfully

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\[email protected] deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pujodigi deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\pujodigi deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrsHelper deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BrsHelper deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CoupoonService64 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\CoupoonService64 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DefaultTabUpdate deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\DefaultTabUpdate deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\globalUpdate deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\globalUpdate deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\globalUpdatem deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\globalUpdatem deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{ca90993a-de56-4b38-814c-e9d8d5eca392}Gw64 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\{ca90993a-de56-4b38-814c-e9d8d5eca392}Gw64 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{7ac2c1a1-86c6-433c-a5d3-1f965778f48a}Gw64 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\{7ac2c1a1-86c6-433c-a5d3-1f965778f48a}Gw64 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{2dbedf58-a62a-42c8-8238-0f30b6742344}Gw64 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\{2dbedf58-a62a-42c8-8238-0f30b6742344}Gw64 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\consumerinput_updatem deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\consumerinput_updatem deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\consumerinput_update deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\consumerinput_update deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netfilter64 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\netfilter64 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util Edu App deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Util Edu App deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Util Edu App deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Util Edu App deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update Edu App deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Update Edu App deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Update Edu App deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Update Edu App deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util Mountain Bike deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Util Mountain Bike deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Util Mountain Bike deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Util Mountain Bike deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update Mountain Bike deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Update Mountain Bike deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Update Mountain Bike deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Update Mountain Bike deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util PathMaxx deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Util PathMaxx deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Util PathMaxx deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Util PathMaxx deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update PathMaxx deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Update PathMaxx deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Update PathMaxx deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Update PathMaxx deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google]

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google]

==== Deleting Files \ Folders ======================

C:\PROGRA~2\DownLite not found

C:\PROGRA~2\Noteworthy Software not found

C:\PROGRA~2\OpenDownloaderManager not found

C:\PROGRA~2\WinRAR not found

C:\Program Files (x86)\SearchProtect not found

C:\Program Files (x86)\YTDownloader not found

C:\Users\A Steel Lady\AppData\Local\Boxer not found

C:\Program Files (x86)\PandaJe Group not found

C:\Windows\sysnative\config\systemprofile\AppData\Roaming\SearchProtect not found

C:\Users\A Steel Lady\AppData\Roaming\DefaultTab not found

C:\Program Files\Common Files\Goobzo not found

C:\Program Files\Common Files\PastaLeads not found

C:\Users\A Steel Lady\AppData\Roaming\Industriya deleted

C:\Users\A Steel Lady\AppData\Local\Conduit deleted

c:\programdata\lolliscan deleted

C:\ProgramData\{36c9b6d1-db1e-5534-36c9-9b6d1db1db47} deleted

C:\Program Files\Updater By SweetPacks deleted

C:\Program Files (x86)\hosts deleted

C:\Users\A Steel Lady\AppData\Roaming\AnyProtectEx deleted

C:\Program Files\shopperz deleted

C:\Users\Public\Documents\ShopperPro deleted

C:\ProgramData\ccc4026c00005946 deleted

C:\ProgramData\SearchModule deleted

C:\Users\A Steel Lady\AppData\Local\OptimiserUn deleted

C:\Users\A Steel Lady\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage deleted

C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120328-E111-8703-CBF38146158A deleted

C:\Program Files\Coupoon deleted

C:\ProgramData\imjahbjfdibimglcehjcmpmopanciefj deleted

C:\ProgramData\2451325811901998479 deleted

C:\ProgramData\75b516f7def3449383a44752d9f6e6a9 deleted

C:\ProgramData\7c0535b143fc4671b6ebd202fbffe066 deleted

C:\ProgramData\Package Cache deleted

C:\windows\SysNative\Tasks\ZFNENS deleted

C:\windows\SysNative\Tasks\LQGVVK1 deleted

C:\Program Files (x86)\AMD\66c3b775-7622-4146-a654-38874f48e05c.dll deleted

C:\Program Files (x86)\AMD\86583d2e-7ff4-4b9c-83ad-6b374a1be126.dll deleted

C:\Users\A Steel Lady\AppData\LocalLow\BrowserPlus2 deleted

C:\Users\A Steel Lady\AppData\LocalLow\Conduit deleted

C:\PROGRA~2\Mozilla Firefox\nsprotector.js deleted

C:\PROGRA~2\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml deleted

C:\PROGRA~2\Mozilla Firefox\searchplugins\safeguard-secure-search.xml deleted

C:\PROGRA~2\NCH Software\Components\NCHToolbars deleted

C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted

C:\PROGRA~2\Yahoo! deleted

C:\PROGRA~2\86583d2e-7ff4-4b9c-83ad-6b374a1be126 deleted

C:\PROGRA~2\MyPC Backup deleted

C:\PROGRA~2\Industriya deleted

C:\Program Files\Common Files\System\SysMenu.dll deleted

C:\Program Files\Common Files\System\SysMenu64.dll deleted

C:\user.js deleted

C:\Users\A Steel Lady\AppData\Roaming\Open Download Manager deleted

C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431134428-E111-8703-CBF38146158A deleted

C:\Users\A Steel Lady\AppData\Roaming\DownLite deleted

C:\Users\A Steel Lady\AppData\Roaming\Alawar deleted

C:\Users\A Steel Lady\AppData\Roaming\Alawar Entertainment deleted

C:\Users\A Steel Lady\AppData\Roaming\AlawarEntertainment deleted

C:\Users\A Steel Lady\AppData\Roaming\Funmoods deleted

C:\Users\A Steel Lady\AppData\Roaming\DriverCure deleted

C:\Users\A Steel Lady\AppData\Roaming\YoudaGames deleted

C:\Users\A Steel Lady\AppData\Roaming\OpenCandy deleted

C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\SearchProtect deleted

C:\PROGRA~3\APN deleted

C:\PROGRA~3\UD2XUy.dat deleted

C:\PROGRA~3\FlashBeat deleted

C:\PROGRA~3\Tarma Installer deleted

C:\Users\A Steel Lady\AppData\Local\APN deleted

C:\Users\A Steel Lady\AppData\Local\Consumer Input deleted

C:\Users\A Steel Lady\AppData\Local\globalUpdate deleted

C:\Users\A Steel Lady\AppData\Local\visi_coupon deleted

C:\Users\A Steel Lady\AppData\Local\emaze deleted

C:\Windows\SysNative\config\systemprofile\AppData\Local\WebBar deleted

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP deleted

C:\Users\A Steel Lady\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk deleted

C:\windows\SysNative\Tasks\BackgroundContainer Startup Task deleted

C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-6.job deleted

C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-7.job deleted

C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-10_user.job deleted

C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-3.job deleted

C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5.job deleted

C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5_user.job deleted

C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-6.job deleted

C:\Windows\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-7.job deleted

C:\Windows\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-1-6.job deleted

C:\Windows\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-1-7.job deleted

C:\Windows\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-10_user.job deleted

C:\Windows\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-3.job deleted

C:\Windows\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-5.job deleted

C:\Windows\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-5_user.job deleted

C:\Windows\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-6.job deleted

C:\Windows\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-7.job deleted

C:\windows\SysNative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-1-7 deleted

C:\windows\SysNative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-10_user deleted

C:\windows\SysNative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-3 deleted

C:\windows\SysNative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5 deleted

C:\windows\SysNative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-5_user deleted

C:\windows\SysNative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-6 deleted

C:\windows\SysNative\Tasks\0a6f44be-7070-4d63-b7da-716f36427197-7 deleted

C:\windows\SysNative\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-1-6 deleted

C:\windows\SysNative\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-1-7 deleted

C:\windows\SysNative\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-10_user deleted

C:\windows\SysNative\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-3 deleted

C:\windows\SysNative\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-5 deleted

C:\windows\SysNative\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-5_user deleted

C:\windows\SysNative\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-6 deleted

C:\windows\SysNative\Tasks\b4096e90-51f6-437f-be3e-7c1dca0a5779-7 deleted

C:\windows\SysNative\Tasks\c0976ad7-b268-4bd9-b131-7cf2ab414e25-7 deleted

C:\Users\A Steel Lady\AppData\LocalLow\Company deleted

C:\Users\A Steel Lady\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A} deleted

C:\Users\A Steel Lady\AppData\LocalLow\Yahoo! deleted

C:\Users\A Steel Lady\AppData\LocalLow\Industriya deleted

C:\Users\A Steel Lady\AppData\LocalLow\Funmoods deleted

C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted

C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Yahoo! deleted

C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Yahoo! Companion deleted

C:\windows\SysNative\tasks\ConsumerInputUpdateTaskMachineCore deleted

C:\windows\SysNative\tasks\ConsumerInputUpdateTaskMachineUA deleted

C:\Windows\tasks\ConsumerInputUpdateTaskMachineCore.job deleted

C:\Windows\tasks\ConsumerInputUpdateTaskMachineUA.job deleted

C:\windows\SysNative\tasks\Funmoods deleted

C:\Windows\tasks\APSnotifierPP1.job deleted

C:\Windows\tasks\APSnotifierPP2.job deleted

C:\Windows\tasks\APSnotifierPP3.job deleted

C:\windows\SysNative\tasks\APSnotifierPP1 deleted

C:\windows\SysNative\tasks\APSnotifierPP2 deleted

C:\windows\SysNative\tasks\APSnotifierPP3 deleted

C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job deleted

C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job deleted

C:\windows\SysNative\tasks\globalUpdateUpdateTaskMachineCore deleted

C:\windows\SysNative\tasks\globalUpdateUpdateTaskMachineUA deleted

C:\windows\SysNative\tasks\SmartWeb Upgrade Trigger Task deleted

C:\end deleted

C:\windows\SysNative\drivers\{2dbedf58-a62a-42c8-8238-0f30b6742344}Gw64.sys deleted

C:\windows\SysNative\drivers\{7ac2c1a1-86c6-433c-a5d3-1f965778f48a}Gw64.sys deleted

C:\windows\SysNative\drivers\{ca90993a-de56-4b38-814c-e9d8d5eca392}Gw64.sys deleted

C:\Windows\SysNative\config\systemprofile\Searches deleted

C:\Windows\Syswow64\WNLT deleted

C:\windows\SysNative\GroupPolicy\Machine deleted

C:\windows\SysNative\GroupPolicy\User deleted

C:\windows\SysNative\GroupPolicy\GPT.INI deleted

C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted

C:\windows\SysNative\drivers\netfilter64.sys deleted

C:\Windows\Syswow64\InstallUtil.InstallLog deleted

C:\Users\A Steel Lady\Documents\Add-in Express deleted

C:\Users\A Steel Lady\Desktop\Continue Live Installation.lnk deleted

C:\Users\A Steel Lady\AppData\Roaming\3xLfDzFLq46DcYBZ.exe deleted

"C:\Users\A Steel Lady\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk" deleted

"C:\Windows\Sysnative\Tasks\boosterpop" deleted

"C:\Windows\Sysnative\Tasks\IEError" deleted

"C:\Windows\Sysnative\Tasks\AI_Updater" deleted

"C:\Windows\Tasks\LQGVVK1.job" deleted

"C:\Windows\Installer\6544ee7.msi" deleted

"C:\Windows\Installer\4acc2c.msi" deleted

"C:\Users\A Steel Lady\AppData\Roaming\3xLfDzFLq46DcYBZ" deleted

"C:\Windows\tasks\3xLfDzFLq46DcYBZ.job" deleted

"C:\Windows\SysNative\tasks\3xLfDzFLq46DcYBZ" deleted

"C:\ProgramData\.811261211181235583101118113995" deleted

"C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\jnspF71E.tmp" deleted

"C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\vnsp9A4F.tmp" not deleted

"C:\Program Files (x86)\Coupoon\UpdateCheck.exe" deleted

"C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\jnspF71E.tmp" deleted

"C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\vnsp9A4F.tmp" not deleted

"C:\PROGRA~2\Coupoon\UpdateCheck.exe" deleted

"C:\PROGRA~2\gmsd_us_558\gmsd_us_558.exe" deleted

"C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\jnspF71E.tmp" deleted

"C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A\vnsp9A4F.tmp" not deleted

"C:\Users\A Steel Lady\AppData\Local\gmsd_us_558\upgmsd_us_558.exe" deleted

"C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe" deleted

"C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll" deleted

"C:\PROGRA~2\Consumer Input\Update\ConsumerInputUpdate.exe" deleted

"C:\PROGRA~2\Consumer Input\Update\1.3.25.309\goopdate.dll" deleted

"C:\PROGRA~2\globalUpdate\Update\globalupdate.exe" deleted

"C:\PROGRA~2\globalUpdate\Update\1.3.25.0\goopdate.dll" deleted

"C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A" not deleted

"C:\Program Files (x86)\Coupoon" not deleted

"C:\Program Files (x86)\globalUpdate" not deleted

"C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A" not deleted

"C:\PROGRA~2\Coupoon" not deleted

"C:\PROGRA~2\gmsd_us_558" deleted

"C:\PROGRA~2\Consumer Input" not deleted

"C:\PROGRA~2\gmsd_us_558" deleted

"C:\PROGRA~2\globalUpdate" not deleted

"C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A" not deleted

"C:\Users\A Steel Lady\AppData\Local\gmsd_us_558" deleted

"C:\Program Files (x86)\globalUpdate\Update" not deleted

"C:\Program Files (x86)\globalUpdate\Update\1.3.25.0" not deleted

"C:\PROGRA~2\Consumer Input\Update" not deleted

"C:\PROGRA~2\Consumer Input\Update\1.3.25.309" not deleted

"C:\PROGRA~2\globalUpdate\Update" not deleted

"C:\PROGRA~2\globalUpdate\Update\1.3.25.0" not deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\ASTEEL~1\AppData\Local\Temp ====

2015-05-13 22:13:13 C17103AE9072A06DA581DEC998343FC1 11264 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\nsh7B59.tmp\System.dll

2015-05-13 22:13:13 A3ED6F7EA493B9644125D494FBF9A1E6 117248 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\nsh7B59.tmp\IpConfig.dll

2015-05-13 22:13:11 F02155FA3E59A8FC48A74A236B2BB42E 20992 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\nsh7B59.tmp\inetc.dll

2015-05-13 22:13:11 8531346D16FA5D4768F6530D2EB2B65C 106496 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\nsh7B59.tmp\WmiInspector.dll

2015-05-12 21:24:40 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\{BC530D12-C673-4F19-A8F8-39794106FE70}-cimt-3.2.1-1080.exe

2015-05-12 21:18:33 A9ECA902185F41CF0FDEF207705B8C8C 155648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.120659\psuser.dll

2015-05-12 21:18:32 F4474EE9CF0F246F068A720A3A9807F3 220672 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.120659\npglobalupdateUpdate4.dll

2015-05-12 21:18:32 613B73392333921CB5D6455F28BBB77C 155648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.120659\psmachine.dll

2015-05-12 21:18:31 E4D152690272A4D782B66024DBE95111 761856 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.120659\goopdate.dll

2015-05-12 21:18:30 F3E0BCAC0A50EA3B7571407A7DA325C7 32768 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.120659\globalupdateHelper.msi

2015-05-12 21:18:30 8DF6560ADF608ECDCE5CAF299062A135 46080 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.120659\globalupdateOnDemand.exe

2015-05-12 21:18:30 6419BCBF0B2569AACF4023942EADFCB8 46080 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.120659\globalupdateBroker.exe

2015-05-12 21:18:30 3C14AAE26EA06BADAC98520773772CEB 68608 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.120659\globalupdate.exe

2015-05-12 21:18:29 3C14AAE26EA06BADAC98520773772CEB 68608 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.120659\globalupdateCrashHandler.exe

2015-05-12 21:16:55 C27041EBC042B5F28FCB4E660EE35E26 14022184 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\584.exe

2015-05-12 21:16:50 40B747F6FD23DB287B81D911C7A9B058 323648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\setup_644.exe

2015-05-12 21:16:34 FBA9F8238C551C871C2826D1D161281F 1842872 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\compete.exe

2015-05-12 21:14:36 2E2DC08CF93C1472D158DE8A510B7424 1893976 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\1495.exe

2015-05-12 21:13:54 514D46F0679CF387A9E096B292222261 61980 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\Uninstall.exe

2015-05-11 06:15:32 08611FF2B9ECF2959155D9185D456C69 40960 ------w- C:\Users\A Steel Lady\AppData\Local\Temp\is45637729\1968634_stp\gvstb.exe

2015-05-09 03:09:42 DDCF55C4BDFAE117302C66536AA8ED68 748560 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\Temp2_The Elton John Keyboard Book P Downloader.zip\The Elton John Keyboard Book P Downloader__3687_i1511838860_il1006532.exe

2015-05-09 02:07:02 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_3624_15637\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 23:56:20 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_11424_17933\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 23:55:58 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_11424_22555\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 23:34:31 FBD4B7D91A6DDBBF13E32D1C395DCC51 4740728 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5700_16256\CRX_INSTALL\npSkypeChromePlugin.dll

2015-05-08 23:33:49 0DE9EFA75519740BE4D9516432A344B7 106104 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5700_16256\CRX_INSTALL\MSIExecWatcher.exe

2015-05-08 23:30:17 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5700_4485\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 23:29:52 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5700_15724\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 23:10:29 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_3532_19162\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 23:09:49 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_3532_7056\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 23:05:58 A9ECA902185F41CF0FDEF207705B8C8C 155648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.253692\psuser.dll

2015-05-08 23:05:57 613B73392333921CB5D6455F28BBB77C 155648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.253692\psmachine.dll

2015-05-08 23:05:56 6A4FBB7E5EE5A3D942B08A8FF7A4C9A6 220672 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.253692\npglobalupdateUpdate4.dll

2015-05-08 23:05:55 17EE9DB1A91202D91202CE9D71035BBC 761856 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.253692\goopdate.dll

2015-05-08 23:05:54 F3E0BCAC0A50EA3B7571407A7DA325C7 32768 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.253692\globalupdateHelper.msi

2015-05-08 23:05:54 8DF6560ADF608ECDCE5CAF299062A135 46080 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.253692\globalupdateOnDemand.exe

2015-05-08 23:05:54 6419BCBF0B2569AACF4023942EADFCB8 46080 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.253692\globalupdateBroker.exe

2015-05-08 23:05:52 3C14AAE26EA06BADAC98520773772CEB 68608 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.253692\globalupdate.exe

2015-05-08 23:05:51 3C14AAE26EA06BADAC98520773772CEB 68608 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.253692\globalupdateCrashHandler.exe

2015-05-08 23:03:59 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_7800_5419\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 23:03:51 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_7800_402\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 23:01:11 55CED1E147F8204A239519CE611F73C2 306688 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\f9626892-7a78-3199-abd2-97bbce96297b\OfferInstaller.exe

2015-05-08 22:54:25 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_1868_26667\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 22:52:57 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_1868_22586\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 22:36:09 6364F532861A24A510AEE310DF11575A 1549824 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5308_27920\CRX_INSTALL\npgcwloplugin.dll

2015-05-08 22:33:03 824B5DC821F68A21B9174B58C1A9F768 4736901 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\Install_17204\ins_shopperpro.exe

2015-05-08 22:12:21 A9ECA902185F41CF0FDEF207705B8C8C 155648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.88088\psuser.dll

2015-05-08 22:12:19 613B73392333921CB5D6455F28BBB77C 155648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.88088\psmachine.dll

2015-05-08 22:12:18 6A4FBB7E5EE5A3D942B08A8FF7A4C9A6 220672 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.88088\npglobalupdateUpdate4.dll

2015-05-08 22:12:15 17EE9DB1A91202D91202CE9D71035BBC 761856 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.88088\goopdate.dll

2015-05-08 22:12:10 8DF6560ADF608ECDCE5CAF299062A135 46080 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.88088\globalupdateOnDemand.exe

2015-05-08 22:12:09 F3E0BCAC0A50EA3B7571407A7DA325C7 32768 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.88088\globalupdateHelper.msi

2015-05-08 22:12:06 6419BCBF0B2569AACF4023942EADFCB8 46080 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.88088\globalupdateBroker.exe

2015-05-08 22:12:01 3C14AAE26EA06BADAC98520773772CEB 68608 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.88088\globalupdate.exe

2015-05-08 22:12:00 3C14AAE26EA06BADAC98520773772CEB 68608 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.88088\globalupdateCrashHandler.exe

2015-05-08 22:04:10 371E3D3E7FE71E37F406BE7EB81D0074 12815287 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\Install_31928\ins_geforce.exe

2015-05-08 22:04:06 824B5DC821F68A21B9174B58C1A9F768 4736901 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\Install_18152\ins_shopperpro.exe

2015-05-08 21:46:20 FD3C64735AAFF49657B01E751F86EF4D 7050072 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\Install_152\ins_ytd.exe

2015-05-08 21:43:49 D532B38E6BC762C32E0DEE376C46E08F 4004576 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\Install_152\ins_smk.exe

2015-05-08 21:30:31 687B6055E3AD51F80F907B23F013B449 523240 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\f9626892-7a78-3199-abd2-97bbce96297b\adv_70.exe

2015-05-08 21:30:12 A9ECA902185F41CF0FDEF207705B8C8C 155648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.219650\psuser.dll

2015-05-08 21:30:12 613B73392333921CB5D6455F28BBB77C 155648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.219650\psmachine.dll

2015-05-08 21:30:11 6A4FBB7E5EE5A3D942B08A8FF7A4C9A6 220672 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.219650\npglobalupdateUpdate4.dll

2015-05-08 21:30:09 17EE9DB1A91202D91202CE9D71035BBC 761856 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.219650\goopdate.dll

2015-05-08 21:30:08 F3E0BCAC0A50EA3B7571407A7DA325C7 32768 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.219650\globalupdateHelper.msi

2015-05-08 21:30:08 8DF6560ADF608ECDCE5CAF299062A135 46080 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.219650\globalupdateOnDemand.exe

2015-05-08 21:30:08 6419BCBF0B2569AACF4023942EADFCB8 46080 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.219650\globalupdateBroker.exe

2015-05-08 21:30:07 3C14AAE26EA06BADAC98520773772CEB 68608 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.219650\globalupdateCrashHandler.exe

2015-05-08 21:30:07 3C14AAE26EA06BADAC98520773772CEB 68608 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.219650\globalupdate.exe

2015-05-08 21:23:32 A9ECA902185F41CF0FDEF207705B8C8C 155648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.140199\psuser.dll

2015-05-08 21:23:32 6A4FBB7E5EE5A3D942B08A8FF7A4C9A6 220672 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.140199\npglobalupdateUpdate4.dll

2015-05-08 21:23:32 613B73392333921CB5D6455F28BBB77C 155648 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.140199\psmachine.dll

2015-05-08 21:23:31 17EE9DB1A91202D91202CE9D71035BBC 761856 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.140199\goopdate.dll

2015-05-08 21:23:30 F3E0BCAC0A50EA3B7571407A7DA325C7 32768 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.140199\globalupdateHelper.msi

2015-05-08 21:23:30 8DF6560ADF608ECDCE5CAF299062A135 46080 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.140199\globalupdateOnDemand.exe

2015-05-08 21:23:30 6419BCBF0B2569AACF4023942EADFCB8 46080 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.140199\globalupdateBroker.exe

2015-05-08 21:23:29 3C14AAE26EA06BADAC98520773772CEB 68608 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.140199\globalupdateCrashHandler.exe

2015-05-08 21:23:29 3C14AAE26EA06BADAC98520773772CEB 68608 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\comh.140199\globalupdate.exe

2015-05-08 21:12:53 D313FE47CB2C6946D61F02E32FF0F448 1210368 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\169E1\temp\Priceless.exe

====== Java Cache =====

====== C:\Windows\SysWOW64 =====

2015-05-12 21:16:38 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Windows\SysWOW64\Number of results

2015-05-08 21:23:48 4EBB7AA432E3A872E1989F58A8009241 4 ----a-w- C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

====== C:\Windows\Sysnative\drivers =====

2015-04-14 20:33:00 063C09DB965E3DFD6F4F08416F6DB8F5 95672 ----a-w- C:\Windows\Sysnative\drivers\ksecdd.sys

2015-04-14 20:32:59 1FA627E63195BF3BF636BFEF0D7190D4 155576 ----a-w- C:\Windows\Sysnative\drivers\ksecpkg.sys

2015-04-14 20:31:45 F61634BEC53F73702A10DE69F6DCAF57 754688 ----a-w- C:\Windows\Sysnative\drivers\http.sys

====== C:\Windows\Tasks ======

2015-05-12 21:16:21 4E5A163A959BA2987905E6285069A408 4100 ----a-w- C:\Windows\Sysnative\Tasks\Crossbrowse

2015-05-12 21:16:19 5851184BC3A9836E769D764A41FB6CCE 1070 ----a-w- C:\Windows\Tasks\Crossbrowse.job

2015-05-08 21:22:59 6061CE9580D41085818B98F2CA11570B 3652 ----a-w- C:\Windows\Sysnative\Tasks\HDNINSTSCHD

2015-05-08 21:22:58 D9CD4BB0BB9E5C1569CE4B50A5C49E4D 3518 ----a-w- C:\Windows\Sysnative\Tasks\UPDTEXE4_WDR

2015-05-08 21:22:56 5C866F239A4A90827F5E59DFB10A91C7 3676 ----a-w- C:\Windows\Sysnative\Tasks\IE_ERR4WDR

2015-05-08 21:18:40 000277C6630F2CD1F64B3CB756FBB8FC 4008 ----a-w- C:\Windows\Sysnative\Tasks\LaunchPreSignup

====== C:\Windows\Temp ======

======= C:\Program Files =====

2015-04-15 23:03:42 -------- d-----w- C:\Program Files\iPod

2015-04-15 23:03:36 -------- d-----w- C:\Program Files\iTunes

======= C:\PROGRA~2 =====

2015-05-12 21:18:34 -------- d-----w- C:\PROGRA~2\globalUpdate

2015-05-12 21:17:55 -------- d-----w- C:\PROGRA~2\CinemaPlus-3.2cV12.05

2015-05-12 21:17:07 -------- d-----w- C:\PROGRA~2\Coupoon

2015-05-12 21:16:44 -------- d-----w- C:\PROGRA~2\Consumer Input

2015-05-12 21:15:19 -------- d-----w- C:\PROGRA~2\Crossbrowse

2015-05-11 03:31:35 -------- d-----w- C:\PROGRA~2\VS Revo Group

2015-04-15 23:03:43 -------- d-----w- C:\PROGRA~2\iTunes

2015-04-15 02:54:19 -------- d-----w- C:\PROGRA~2\COMMON~1\Skype

======= C: =====

====== C:\Users\A Steel Lady\AppData\Roaming ======

2015-05-12 21:16:21 -------- d-----w- C:\Users\A Steel Lady\AppData\Local\Crossbrowse

2015-05-11 03:31:37 -------- d-----w- C:\Users\A Steel Lady\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

2015-05-11 03:11:12 -------- d-sh--w- C:\Users\A Steel Lady\AppData\Locallow\EmieUserList

2015-05-11 03:11:12 -------- d-sh--w- C:\Users\A Steel Lady\AppData\Locallow\EmieBrowserModeList

2015-05-11 03:11:03 -------- d-sh--w- C:\Users\A Steel Lady\AppData\Local\EmieUserList

2015-05-11 03:11:03 -------- d-sh--w- C:\Users\A Steel Lady\AppData\Local\EmieSiteList

2015-05-11 03:11:03 -------- d-sh--w- C:\Users\A Steel Lady\AppData\Local\EmieBrowserModeList

2015-05-09 02:06:13 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\A Steel Lady\AppData\Locallow\localStorageIE_backup.txt

2015-05-08 22:15:43 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Local\BrowserHelper

2015-05-08 21:24:30 -------- d-----w- C:\Users\A Steel Lady\AppData\Roaming\C01FA761-1431120270-E111-8703-CBF38146158A

====== C:\Users\A Steel Lady ======

2015-05-12 21:16:09 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse

2015-05-11 16:33:16 -------- d-----w- C:\ProgramData\abc

2015-05-11 03:37:53 4F99CAE27FFD46712E65C21444AACDFC 2623656 ----a-w- C:\Users\A Steel Lady\Downloads\revosetup (1).exe

2015-05-11 03:29:34 4F99CAE27FFD46712E65C21444AACDFC 2623656 ----a-w- C:\Users\A Steel Lady\Downloads\revosetup.exe

2015-05-11 03:09:45 53C485BC8BBD41877F58AEB89412F5D7 2048 ----a-w- C:\Windows\sysWoW64\config\systemprofile\user.exe

2015-05-11 03:09:24 DF6923839C6A8F776F0DA704C5F4CEA5 8192 ----a-w- C:\Windows\sysWoW64\config\systemprofile\systray.exe

2015-05-11 03:08:03 2305BFF2966D73694972FD7531BC5BAA 314368 ----a-w- C:\Windows\sysWoW64\config\systemprofile\sndvol.exe

2015-05-09 01:28:24 8E1B08222F20E45A3E8DB04C569F9CB7 8 --sha-r- C:\ProgramData\ntuser.pol

2015-05-08 23:37:30 E9A8FBAE244BA2699C24197EF7826D70 880208 ----a-w- C:\Users\A Steel Lady\Downloads\ChromeSetup.exe

2015-05-08 23:30:29 -------- d-----w- C:\ProgramData\NetEngine

2015-05-08 21:29:12 -------- d-----w- C:\ProgramData\PastaLeadsAgent

2015-05-08 21:19:51 7786144DFC76DB2E8AE81BA001E0A040 906 ----a-w- C:\ProgramData\JunkCleaner.lnk

2015-05-08 21:19:49 -------- d-----w- C:\ProgramData\All copyright reserved - 2014

2015-05-08 21:13:42 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\locales

2015-04-15 23:07:43 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-04-15 23:03:36 -------- d-----w- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7

2015-04-15 02:54:22 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

====== C: exe-files ==

2015-05-13 23:33:17 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Program Files (x86)\Coupoon\UpdateCheck.exe

2015-05-12 21:20:06 E55CFB06E51C60CBAA2D1E56F8DA28FB 1184848 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\b4096e90-51f6-437f-be3e-7c1dca0a5779-5.exe

2015-05-12 21:19:50 D919E4050AD245F2484837BE8D8C97EC 1136208 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\b4096e90-51f6-437f-be3e-7c1dca0a5779-1-7.exe

2015-05-12 21:19:49 9FBF73CB318561BBBEAAB2BF513A83AD 1530960 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\b4096e90-51f6-437f-be3e-7c1dca0a5779-1-6.exe

2015-05-12 21:19:19 87436078D994E9BB1A8240A458F7C242 1814096 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\b4096e90-51f6-437f-be3e-7c1dca0a5779-64.exe

2015-05-12 21:19:17 D919E4050AD245F2484837BE8D8C97EC 1136208 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\b4096e90-51f6-437f-be3e-7c1dca0a5779-7.exe

2015-05-12 21:19:14 9305BCAE40B861465CA21E034C289E8E 1500240 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\b4096e90-51f6-437f-be3e-7c1dca0a5779-6.exe

2015-05-12 21:18:39 7AF4BFDF3072902C64445AB3BD3ADDAE 1457232 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\b4096e90-51f6-437f-be3e-7c1dca0a5779-3.exe

2015-05-12 21:18:23 273F89A9C6A0AA3E9F4D4F590A23A7E7 1242192 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\b4096e90-51f6-437f-be3e-7c1dca0a5779-10.exe

2015-05-12 21:18:19 273F89A9C6A0AA3E9F4D4F590A23A7E7 1242192 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\UninstallBrw.exe

2015-05-12 21:18:18 094E1473A2E52CC1D29F0363D667B831 120912 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\Uninstall.exe

2015-05-12 21:17:55 22FFA71756E3AB3587C72F9DB997DF02 2019744 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\utils.exe

2015-05-12 21:16:13 2E2DC08CF93C1472D158DE8A510B7424 1893976 ----a-w- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe

2015-05-12 21:16:07 FD91956C6775D35BCEEF9A570C61164F 913408 ----a-w- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.5.2171.95\Installer\setup.exe

2015-05-12 21:16:07 FD91956C6775D35BCEEF9A570C61164F 913408 ----a-w- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.5.2171.95\Installer\chrmstp.exe

2015-05-12 21:16:07 55D9D5D626A1E30D286FDA5A58F9AF98 637440 ----a-w- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe

2015-05-12 21:16:02 3C6B63A999DD8A1CF94F851254B893A7 1983488 ----a-w- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.5.2171.95\delegate_execute.exe

2015-05-12 21:16:02 129463E75E6806ACF86571453DF4BCBB 1922560 ----a-w- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.5.2171.95\nacl64.exe

2015-05-09 01:19:35 B4605D865BF030CD5CEFCC3266A06C7F 41792592 ----a-w- C:\Program Files (x86)\Google\Update\Install\{43E9B5E9-BAEA-4387-97CF-5C3F559F7BB4}\42.0.2311.135_chrome_installer.exe

2015-05-09 01:19:26 B4605D865BF030CD5CEFCC3266A06C7F 41792592 ----a-w- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\42.0.2311.135\42.0.2311.135_chrome_installer.exe

=== C: other files ==

2015-05-12 21:18:38 334168F6C6893EFDCE1A74BDD4E997C4 400544 ----a-w- C:\Program Files (x86)\CinemaPlus-3.2cV12.05\ccce1ee8-78cc-4de0-b0ac-82886cf58d61.crx

2015-05-11 03:28:27 196A7BAF919F49CEEF2DE0E0E8097D6B 467 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\hi.vbs

2015-05-09 02:07:28 2E2E328E5BF6BE61203164B3E9EA8094 24040 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_3624_29219\gmail.crx

2015-05-09 02:07:16 71E1283B8440F6264CEC99DF9AD81F5B 25561 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_3624_12491\drive.crx

2015-05-09 02:06:56 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_3624_15637\tschrome.crx

2015-05-09 01:16:07 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_7996_22566\tschrome.crx

2015-05-08 23:55:52 7158BA4EFFADC7A9E920141BA8223E89 366611 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_11424_31170\mysearchdial-speeddial.crx

2015-05-08 23:55:36 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_11424_17933\tschrome.crx

2015-05-08 23:55:31 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_11424_22555\tschrome.crx

2015-05-08 23:28:12 7158BA4EFFADC7A9E920141BA8223E89 366611 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5700_8202\mysearchdial-speeddial.crx

2015-05-08 23:27:50 DBE3D165D0D8B980F5280355BDB2960D 406868 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5700_16293\Chrome.crx

2015-05-08 23:27:38 39D0F1F64D8CBB94B59EBF2212386F93 2032644 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5700_16256\skype_chrome_extension.crx

2015-05-08 23:26:55 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5700_4485\tschrome.crx

2015-05-08 23:26:40 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5700_15724\tschrome.crx

2015-05-08 23:08:48 7158BA4EFFADC7A9E920141BA8223E89 366611 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_3532_9228\mysearchdial-speeddial.crx

2015-05-08 23:07:00 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_3532_19162\tschrome.crx

2015-05-08 23:06:46 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_3532_7056\tschrome.crx

2015-05-08 23:03:29 7158BA4EFFADC7A9E920141BA8223E89 366611 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_7800_2974\mysearchdial-speeddial.crx

2015-05-08 23:03:17 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_7800_402\tschrome.crx

2015-05-08 23:03:15 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_7800_5419\tschrome.crx

2015-05-08 22:52:32 7158BA4EFFADC7A9E920141BA8223E89 366611 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_1868_3386\mysearchdial-speeddial.crx

2015-05-08 22:50:50 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_1868_26667\tschrome.crx

2015-05-08 22:50:44 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_1868_22586\tschrome.crx

2015-05-08 22:38:45 7158BA4EFFADC7A9E920141BA8223E89 366611 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_7812_26675\mysearchdial-speeddial.crx

2015-05-08 22:35:51 6224FB32F773D6E107928D761EC3741D 283261 ----a-w- C:\Users\A Steel Lady\AppData\Local\Temp\scoped_dir_5308_27920\tschrome.crx

==== Startup Registry Enabled ======================

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"SearchProtect"="C:\Windows\system32\config\systemprofile\AppData\Roaming\SearchProtect\bin\cltmng.exe"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-1885504849-1370587953-3290610847-1001\Software\Microsoft\Windows\CurrentVersion\Run]

"googletalk"="C:\Users\A Steel Lady\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart"

"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"

"BackgroundContainer"="C:\Windows\SysWOW64\Rundll32.exe C:\Users\A Steel Lady\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll,DllRun"

"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"

"GoogleDriveSync"="C:\Program Files (x86)\Google\Drive\googledrivesync.exe /autostart"

"iCloudServices"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"

"ApplePhotoStreams"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"

"Boxerexe"="C:\Users\A Steel Lady\AppData\Local\Boxer\BoxerApp.exe"

"YTDownloader"="C:\Program Files (x86)\YTDownloader\YTDownloader.exe /boot"

"JunkCleaner"="C:\Program Files (x86)\PandaJe Group\Junk Cleaner\JunkCleaner.exe"

"GoogleChromeAutoLaunch_8678E05336FE7E3302F93AC77FAB0AA5"="C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run]

"SearchProtect"="C:\Windows\system32\config\systemprofile\AppData\Roaming\SearchProtect\bin\cltmng.exe"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"

"HPOSD"="C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe"

"APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

"HPConnectionManager"="C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe"

"HP Quick Launch"="C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"

"SearchProtectAll"="C:\Program Files (x86)\SearchProtect\bin\cltmng.exe"

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"Adobe Creative Cloud"="C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --showwindow=false --onOSstartup=true"

"YTDownloader"="C:\Program Files (x86)\YTDownloader\YTDownloader.exe /boot"

"gmsd_us_558"="C:\Program Files (x86)\gmsd_us_558\gmsd_us_558.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"upgmsd_us_558.exe"="C:\Users\A Steel Lady\AppData\Local\gmsd_us_558\upgmsd_us_558.exe -runonce"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]