TechSpot

Suddenly all apps crash, MBAM refuses to complete

By needhelp51
Nov 27, 2014
  1. Hello,

    Computer worked fine with Win8.1 until my antivirus self-disabled and a very high CPU/Mem/Disk usage episode occured last night. Following that, it became impossible to run Firefox and Chrome, they keep crashing. IE works for very brief periods, then crashes too. Tried MBAM twice but it refuses to complete and hangs up at some time. DDS will not run and gives out a 'compatibility mode' issue. Tried uninstalling / reinstalling firefox to no avail. After further tests, every kind of app seem to crash on startup or after a little while, including notepad... However windows boots fine.

    The kind of crash is weird. ctrl alt delete seems to hang up too. I have to reboot or must be very patient.

    I suspect malware because computer is recent and worked A1 til last night and everything was so sudden.

    Sorry I cannot post the requested logs.

    Thanks for your time.
     
    Last edited: Nov 27, 2014
  2. Broni

    Broni Malware Annihilator Posts: 52,911   +344

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    ===================================

    Please download Farbar Recovery Scan Tool and save it to your Desktop.

    Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
    • Double-click to run it. When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
    • The first time the tool is run, it makes also another log (Addition.txt). Please copy and paste it to your reply.
     
  3. needhelp51

    needhelp51 TS Booster Topic Starter Posts: 285

    Thank you.

    Seems to have crashed first time (eventually black screen then nothing), worked second time.

    Here is FRST log:

    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
    Ran by Admin (administrator) on ADMIN00 on 27-11-2014 18:00:40
    Running from C:\Users\Admin\Desktop
    Loaded Profile: Admin (Available profiles: Admin)
    Platform: Windows 8.1 (X64) OS Language: Anglais (États-Unis)
    Internet Explorer Version 11
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
    ==================== Processes (Whitelisted) =================
    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
    (AMD) C:\Windows\System32\atiesrxx.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (Microsoft Corporation) C:\Windows\System32\wlanext.exe
    (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
    () C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
    (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
    (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
    (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
    (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
    ( ) C:\Windows\System32\lxdxcoms.exe
    (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    (Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
    (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
    (Toshiba Corporation) C:\Program Files\Toshiba\Teco\TecoService.exe
    (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
    (Intel Corporation) C:\Windows\System32\igfxtray.exe
    (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
    (Intel Corporation) C:\Windows\System32\hkcmd.exe
    (Intel Corporation) C:\Windows\System32\igfxpers.exe
    (TOSHIBA Corporation) C:\Program Files\Toshiba\Teco\TecoResident.exe
    (TOSHIBA Corporation) C:\Program Files\Toshiba\TPHM\TosWaitSrv.exe
    (TOSHIBA Corporation) C:\Program Files\Toshiba\Hotkey\TCrdMain_Win8.exe
    (TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TssSrv.exe
    (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
    (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
    (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
    (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
    (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

    ==================== Registry (Whitelisted) ==================
    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
    HKLM\...\Run: [] => [X]
    HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3245896 2014-03-25] (ELAN Microelectronics Corp.)
    HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [179288 2014-01-04] (TOSHIBA Corporation)
    HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation)
    HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-10-08] (TOSHIBA Corporation)
    HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296008 2013-10-21] (TOSHIBA Corporation)
    HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [914648 2014-03-05] (Conexant Systems, Inc.)
    HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830104 2014-01-14] (Conexant Systems, Inc.)
    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-02-15] (Advanced Micro Devices, Inc.)
    HKLM-x32\...\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)
    Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
    HKU\S-1-5-21-192792804-3343093449-1893152273-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-29] (Piriform Ltd)
    ==================== Internet (Whitelisted) ====================
    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
    HKU\S-1-5-21-192792804-3343093449-1893152273-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://toshiba13.msn.com/?pc=TNJB
    HKU\S-1-5-21-192792804-3343093449-1893152273-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com/?pc=TNJB
    HKU\S-1-5-21-192792804-3343093449-1893152273-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.toshiba.ca/welcome/?w=23
    HKU\S-1-5-21-192792804-3343093449-1893152273-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.toshiba.ca/welcome/?w=23
    SearchScopes: HKLM -> DefaultScope {F4ED0519-C584-4DDA-BE93-FA0B93D040F6} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TNJB
    SearchScopes: HKLM -> {F4ED0519-C584-4DDA-BE93-FA0B93D040F6} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TNJB
    SearchScopes: HKLM-x32 -> DefaultScope {F4ED0519-C584-4DDA-BE93-FA0B93D040F6} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TNJB
    SearchScopes: HKLM-x32 -> {F4ED0519-C584-4DDA-BE93-FA0B93D040F6} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TNJB
    SearchScopes: HKU\S-1-5-21-192792804-3343093449-1893152273-1001 -> DefaultScope {F4ED0519-C584-4DDA-BE93-FA0B93D040F6} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TNJB
    SearchScopes: HKU\S-1-5-21-192792804-3343093449-1893152273-1001 -> {F4ED0519-C584-4DDA-BE93-FA0B93D040F6} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TNJB
    Tcpip\Parameters: [DhcpNameServer] 47.55.55.55 142.166.166.166
    FireFox:
    ========
    FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tc5h7g8y.default
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    Chrome:
    =======
    CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Slides) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-08-27]
    CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-27]
    CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-27]
    CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-27]
    CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-27]
    CHR Extension: (Recherche Google) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-27]
    CHR Extension: (Google Sheets) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-08-27]
    CHR Extension: (Google Wallet) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-27]
    CHR Extension: (Gmail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-27]
    ==================== Services (Whitelisted) =================
    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
    R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [21840 2014-03-21] ()
    R2 ETDService; C:\Program Files\Elantech\ETDService.exe [103240 2014-03-25] (ELAN Microelectronics Corp.)
    S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]
    S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
    R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
    S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
    S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-03-06] (Intel Corporation)
    S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2014-03-06] (Intel Corporation)
    R2 lxdx_device; C:\Windows\system32\lxdxcoms.exe [1039872 2009-10-16] ( )
    S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-10-11] ()
    R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-21] (Microsoft Corporation)
    R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-21] (Microsoft Corporation)
    R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3671792 2013-10-11] (Intel® Corporation)
    S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]
    ==================== Drivers (Whitelisted) ====================
    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
    R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
    R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [24904 2014-02-06] (ELAN Microelectronic Corp.)
    R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [142280 2013-10-18] (Intel Corporation)
    S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-26] (Malwarebytes Corporation)
    R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2014-03-06] (Intel Corporation)
    R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3607520 2013-10-14] (Intel Corporation)
    R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [293592 2014-02-11] (Realtek Semiconductor Corp.)
    R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [33168 2013-10-10] (Windows (R) Win 7 DDK provider)
    R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-21] (Microsoft Corporation)
    ==================== NetSvcs (Whitelisted) ===================
    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

    ==================== One Month Created Files and Folders ========
    (If an entry is included in the fixlist, the file\folder will be moved.)
    2014-11-27 17:49 - 2014-11-27 17:49 - 00020443 _____ () C:\Users\Admin\Desktop\Addition.txt
    2014-11-27 17:47 - 2014-11-27 18:00 - 00012395 _____ () C:\Users\Admin\Desktop\FRST.txt
    2014-11-27 17:47 - 2014-11-27 18:00 - 00000000 ____D () C:\FRST
    2014-11-27 17:46 - 2014-11-27 17:46 - 02117632 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe
    2014-11-27 06:22 - 2014-11-27 06:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2014-11-27 01:13 - 2014-11-27 01:13 - 00000000 ___HD () C:\$SysReset
    2014-11-26 23:21 - 2014-11-26 23:21 - 00688992 _____ (Swearware) C:\Users\Admin\Desktop\dds.com
    2014-11-26 23:06 - 2014-11-27 17:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
    2014-11-26 22:51 - 2014-11-27 17:41 - 00236135 _____ () C:\Windows\WindowsUpdate.log
    2014-11-26 21:17 - 2014-11-26 21:17 - 00000380 _____ () C:\Windows\PFRO.log
    2014-11-26 21:10 - 2014-11-26 23:21 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2014-11-26 21:09 - 2014-11-26 21:09 - 00001125 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2014-11-26 21:09 - 2014-11-26 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2014-11-26 21:07 - 2014-11-26 21:07 - 00000000 ____D () C:\ProgramData\Malwarebytes
    2014-11-26 21:07 - 2014-11-26 21:07 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
    2014-11-26 21:07 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
    2014-11-26 21:07 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
    2014-11-26 21:07 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
    2014-11-26 21:04 - 2014-11-26 21:06 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Admin\Downloads\mbam-setup-2.0.3.1025.exe
    2014-11-26 21:03 - 2014-11-26 21:03 - 00044528 _____ () C:\Users\Admin\Documents\cc_20141126_210315.reg
    2014-11-26 21:03 - 2014-11-26 21:03 - 00005752 _____ () C:\Users\Admin\Documents\cc_20141126_210333.reg
    2014-11-26 21:03 - 2014-11-26 21:03 - 00000282 _____ () C:\Users\Admin\Documents\cc_20141126_210346.reg
    2014-11-19 06:25 - 2014-11-09 18:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2014-11-19 06:25 - 2014-11-09 18:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2014-11-19 06:25 - 2014-11-09 18:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
    2014-11-19 06:25 - 2014-11-09 18:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
    2014-11-16 17:24 - 2014-10-30 06:25 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
    2014-11-16 08:07 - 2014-11-26 23:41 - 00000000 _____ () C:\Users\Admin\Desktop\lasa.txt
    2014-11-15 16:06 - 2014-11-15 16:06 - 00000000 __SHD () C:\Users\Admin\AppData\Local\EmieBrowserModeList
    2014-11-11 22:43 - 2014-09-27 02:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
    2014-11-11 22:43 - 2014-09-27 00:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
    2014-11-11 22:43 - 2014-09-26 22:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2014-11-11 22:43 - 2014-09-26 22:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
    2014-11-11 22:43 - 2014-09-26 22:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2014-11-11 22:42 - 2014-10-09 20:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2014-11-11 22:42 - 2014-10-09 20:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
    2014-11-11 22:42 - 2014-10-09 20:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2014-11-11 22:42 - 2014-10-08 02:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2014-11-11 22:42 - 2014-10-08 02:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2014-11-11 22:42 - 2014-10-08 02:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
    2014-11-11 22:42 - 2014-10-08 02:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
    2014-11-11 22:42 - 2014-10-08 01:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
    2014-11-11 22:42 - 2014-10-08 01:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2014-11-11 22:42 - 2014-10-08 01:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2014-11-11 22:42 - 2014-10-08 01:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
    2014-11-11 22:42 - 2014-10-08 01:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2014-11-11 22:42 - 2014-10-08 00:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
    2014-11-11 22:41 - 2014-10-18 04:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2014-11-11 22:41 - 2014-10-18 03:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2014-11-11 22:41 - 2014-10-18 03:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2014-11-11 22:41 - 2014-10-18 02:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
    2014-11-11 22:41 - 2014-10-18 01:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
    2014-11-11 22:41 - 2014-10-18 01:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2014-11-11 22:41 - 2014-10-18 01:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2014-11-11 22:41 - 2014-10-18 01:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2014-11-11 22:41 - 2014-10-18 01:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
    2014-11-11 22:41 - 2014-10-18 01:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2014-11-11 22:41 - 2014-10-18 01:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2014-11-11 22:41 - 2014-10-18 01:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2014-11-11 22:41 - 2014-10-18 01:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
    2014-11-11 22:41 - 2014-10-18 01:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
    2014-11-11 22:41 - 2014-10-18 01:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
    2014-11-11 22:41 - 2014-10-18 01:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
    2014-11-11 22:41 - 2014-10-17 02:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2014-11-11 22:41 - 2014-10-17 01:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2014-11-11 22:41 - 2014-10-12 21:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
    2014-11-11 22:41 - 2014-10-10 19:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
    2014-11-11 22:41 - 2014-10-10 19:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
    2014-11-11 22:41 - 2014-10-08 02:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
    2014-11-11 22:41 - 2014-10-08 02:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
    2014-11-11 22:41 - 2014-10-08 01:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
    2014-11-11 22:41 - 2014-10-08 00:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
    2014-11-11 22:41 - 2014-10-08 00:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
    2014-11-11 22:40 - 2014-10-31 00:28 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2014-11-11 22:40 - 2014-10-30 22:42 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2014-11-11 22:40 - 2014-09-21 23:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
    2014-11-11 22:40 - 2014-09-21 22:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
    2014-11-11 22:40 - 2014-09-21 22:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
    2014-11-11 22:40 - 2014-09-21 21:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
    2014-11-11 22:40 - 2014-09-18 19:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
    2014-11-11 22:40 - 2014-09-02 17:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
    2014-11-11 22:40 - 2014-09-02 17:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
    2014-11-11 22:39 - 2014-10-30 22:59 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2014-11-11 22:39 - 2014-10-30 21:30 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2014-11-11 22:38 - 2014-10-31 00:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
    2014-11-11 22:38 - 2014-10-31 00:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
    2014-11-11 22:38 - 2014-10-31 00:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
    2014-11-11 22:38 - 2014-10-31 00:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
    2014-11-11 22:38 - 2014-10-31 00:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
    2014-11-11 22:38 - 2014-10-31 00:06 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2014-11-11 22:38 - 2014-10-31 00:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
    2014-11-11 22:38 - 2014-10-31 00:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2014-11-11 22:38 - 2014-10-31 00:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2014-11-11 22:38 - 2014-10-31 00:05 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2014-11-11 22:38 - 2014-10-31 00:05 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
    2014-11-11 22:38 - 2014-10-31 00:04 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2014-11-11 22:38 - 2014-10-30 23:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2014-11-11 22:38 - 2014-10-30 23:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2014-11-11 22:38 - 2014-10-30 23:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
    2014-11-11 22:38 - 2014-10-30 23:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2014-11-11 22:38 - 2014-10-30 23:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
    2014-11-11 22:38 - 2014-10-30 23:51 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2014-11-11 22:38 - 2014-10-30 23:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2014-11-11 22:38 - 2014-10-30 23:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2014-11-11 22:38 - 2014-10-30 23:50 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2014-11-11 22:38 - 2014-10-30 23:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2014-11-11 22:38 - 2014-10-30 23:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
    2014-11-11 22:38 - 2014-10-30 23:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2014-11-11 22:38 - 2014-10-30 23:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2014-11-11 22:38 - 2014-10-30 23:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
    2014-11-11 22:38 - 2014-10-30 23:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
    2014-11-11 22:38 - 2014-10-30 23:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
    2014-11-11 22:38 - 2014-10-30 23:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2014-11-11 22:38 - 2014-10-30 23:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2014-11-11 22:38 - 2014-10-30 23:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
    2014-11-11 22:38 - 2014-10-30 23:23 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
    2014-11-11 22:38 - 2014-10-30 23:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2014-11-11 22:38 - 2014-10-30 23:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
    2014-11-11 22:38 - 2014-10-30 23:15 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
    2014-11-11 22:38 - 2014-10-30 23:08 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
    2014-11-11 22:38 - 2014-10-30 23:06 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2014-11-11 22:38 - 2014-10-30 23:05 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2014-11-11 22:38 - 2014-10-30 23:05 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2014-11-11 22:38 - 2014-10-30 23:03 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2014-11-11 22:38 - 2014-10-30 22:45 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2014-11-11 22:38 - 2014-10-30 22:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
    2014-11-11 22:38 - 2014-10-30 22:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
    2014-11-11 22:38 - 2014-10-30 22:32 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2014-11-11 22:38 - 2014-10-30 22:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
    2014-11-11 22:38 - 2014-10-30 22:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
    2014-11-11 22:38 - 2014-10-30 22:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
    2014-11-11 22:38 - 2014-10-30 22:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
    2014-11-11 22:38 - 2014-10-30 22:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
    2014-11-11 22:38 - 2014-10-30 22:24 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2014-11-11 22:38 - 2014-10-30 22:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
    2014-11-11 22:38 - 2014-10-30 22:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2014-11-11 22:38 - 2014-10-30 22:23 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
    2014-11-11 22:38 - 2014-10-30 22:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2014-11-11 22:38 - 2014-10-30 22:22 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2014-11-11 22:38 - 2014-10-30 22:20 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2014-11-11 22:38 - 2014-10-30 22:18 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2014-11-11 22:38 - 2014-10-30 22:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2014-11-11 22:38 - 2014-10-30 22:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2014-11-11 22:38 - 2014-10-30 22:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
    2014-11-11 22:38 - 2014-10-30 22:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2014-11-11 22:38 - 2014-10-30 22:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
    2014-11-11 22:38 - 2014-10-30 22:12 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
    2014-11-11 22:38 - 2014-10-30 22:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2014-11-11 22:38 - 2014-10-30 22:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2014-11-11 22:38 - 2014-10-30 22:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
    2014-11-11 22:38 - 2014-10-30 22:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2014-11-11 22:38 - 2014-10-30 21:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2014-11-11 22:38 - 2014-10-30 21:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
    2014-11-11 22:38 - 2014-10-30 21:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
    2014-11-11 22:38 - 2014-10-30 21:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
    2014-11-11 22:38 - 2014-10-30 21:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2014-11-11 22:38 - 2014-10-30 21:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
    2014-11-11 22:38 - 2014-10-30 21:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2014-11-11 22:38 - 2014-10-30 21:51 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
    2014-11-11 22:38 - 2014-10-30 21:50 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2014-11-11 22:38 - 2014-10-30 21:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
    2014-11-11 22:38 - 2014-10-30 21:46 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2014-11-11 22:38 - 2014-10-30 21:46 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
    2014-11-11 22:38 - 2014-10-30 21:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
    2014-11-11 22:38 - 2014-10-30 21:40 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2014-11-11 22:38 - 2014-10-30 21:40 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2014-11-11 22:38 - 2014-10-30 21:39 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2014-11-11 22:38 - 2014-10-30 21:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
    2014-11-11 22:38 - 2014-10-30 21:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
    2014-11-11 22:38 - 2014-10-30 21:17 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2014-11-11 22:38 - 2014-10-30 21:13 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2014-11-11 22:38 - 2014-10-30 21:11 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2014-11-11 22:37 - 2014-10-23 00:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
    2014-11-11 22:37 - 2014-10-23 00:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
    2014-11-11 22:37 - 2014-10-07 01:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
    2014-11-11 22:37 - 2014-10-07 01:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
    2014-11-11 22:37 - 2014-10-07 01:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
    2014-11-11 22:37 - 2014-10-07 01:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
    2014-11-11 22:37 - 2014-10-07 01:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
    2014-11-11 22:37 - 2014-10-06 22:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
    2014-11-11 22:37 - 2014-10-06 22:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
    2014-11-11 22:37 - 2014-10-06 22:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
    2014-11-11 22:37 - 2014-10-06 22:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2014-11-11 22:37 - 2014-10-06 20:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
    2014-11-11 22:37 - 2014-10-06 20:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
    2014-11-11 22:37 - 2014-09-10 01:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
    2014-11-11 22:37 - 2014-09-07 22:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
    2014-11-11 22:37 - 2014-09-07 22:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
    2014-11-11 22:37 - 2014-09-07 17:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
    2014-11-11 22:37 - 2014-09-04 17:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
    2014-11-11 22:37 - 2014-09-04 17:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
    2014-11-11 22:37 - 2014-09-03 22:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
    2014-11-11 22:37 - 2014-09-03 21:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
    2014-11-11 22:37 - 2014-09-03 20:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
    2014-11-11 22:37 - 2014-09-03 19:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
    2014-11-11 22:37 - 2014-08-30 19:17 - 00148800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
    2014-11-11 22:37 - 2014-08-30 19:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
    2014-11-11 22:37 - 2014-08-30 17:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
    2014-11-11 22:37 - 2014-08-30 17:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
    2014-11-11 22:37 - 2014-08-30 16:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
    2014-11-11 22:37 - 2014-08-30 16:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
    2014-11-11 22:37 - 2014-08-30 15:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
    2014-11-11 22:37 - 2014-08-30 15:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
    2014-11-11 22:37 - 2014-08-27 21:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2014-11-11 22:37 - 2014-08-27 19:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
    2014-11-11 22:37 - 2014-08-27 19:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
    2014-11-11 22:37 - 2014-08-23 00:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
    2014-11-11 22:37 - 2014-08-23 00:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
    2014-11-11 22:37 - 2014-08-23 00:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
    2014-11-11 22:37 - 2014-08-23 00:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
    2014-11-11 22:37 - 2014-08-22 23:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
    2014-11-11 22:37 - 2014-08-01 19:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
    2014-11-11 22:37 - 2014-08-01 19:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
    2014-11-06 19:26 - 2014-11-06 19:26 - 01559552 _____ () C:\Users\Admin\Downloads\AutoMouser v5.1(2).exe
    2014-11-06 17:36 - 2014-11-06 17:36 - 04977216 _____ (Piriform Ltd) C:\Users\Admin\Downloads\ccsetup419.exe
    2014-11-02 22:55 - 2014-11-02 22:55 - 00000000 ____D () C:\Users\Admin\AppData\Local\Conexant
    2014-11-02 22:41 - 2014-11-02 22:41 - 00001937 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\SmartAudio.lnk
    2014-11-02 22:40 - 2014-11-02 22:40 - 00000000 ____D () C:\Users\Public\Documents\Conexant
    2014-11-02 22:40 - 2012-12-12 15:38 - 00205560 _____ (Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
    2014-11-02 22:37 - 2014-11-02 22:37 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\WinBatch
    2014-11-02 22:32 - 2014-11-02 22:36 - 69079984 _____ () C:\Users\Admin\Downloads\TC70184400K_Conexant_Audio_Driver_8.65.36.50.exe
    ==================== One Month Modified Files and Folders =======
    (If an entry is included in the fixlist, the file\folder will be moved.)
    2014-11-27 18:00 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sru
    2014-11-27 17:59 - 2014-08-27 21:57 - 00001088 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2014-11-27 17:59 - 2013-08-22 09:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2014-11-27 17:40 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\AppReadiness
    2014-11-27 06:27 - 2014-08-27 17:17 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-192792804-3343093449-1893152273-1001
    2014-11-27 06:22 - 2014-08-27 17:19 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2014-11-27 06:22 - 2014-08-27 17:18 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    2014-11-27 06:13 - 2014-08-27 21:57 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2014-11-27 06:06 - 2014-08-27 17:25 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2014-11-27 02:03 - 2014-09-02 22:21 - 00000000 ____D () C:\Users\Admin\AppData\Local\CrashDumps
    2014-11-27 00:13 - 2014-05-22 09:53 - 02197484 _____ () C:\Users\Public\CAFADEBUG.log
    2014-11-26 22:36 - 2014-08-27 17:10 - 00000000 ____D () C:\Users\Admin
    2014-11-26 22:16 - 2013-08-22 08:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
    2014-11-26 20:22 - 2014-10-18 09:00 - 00016982 _____ () C:\Users\Admin\Desktop\scores.txt
    2014-11-26 18:18 - 2014-08-27 21:59 - 00002212 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
    2014-11-26 06:30 - 2014-08-27 22:55 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Skype
    2014-11-25 19:21 - 2013-08-22 10:20 - 00000000 ____D () C:\Windows\CbsTemp
    2014-11-25 17:04 - 2014-08-27 17:25 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2014-11-21 13:46 - 2014-04-10 21:11 - 01824010 _____ () C:\Windows\system32\PerfStringBackup.INI
    2014-11-21 13:46 - 2013-08-28 20:28 - 00810568 _____ () C:\Windows\system32\perfh00C.dat
    2014-11-21 13:46 - 2013-08-28 20:28 - 00158980 _____ () C:\Windows\system32\perfc00C.dat
    2014-11-17 19:53 - 2013-08-22 08:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
    2014-11-16 17:39 - 2014-05-22 10:14 - 00000000 ____D () C:\ProgramData\Norton
    2014-11-16 17:27 - 2013-08-22 10:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
    2014-11-14 07:05 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\rescache
    2014-11-14 06:15 - 2013-08-22 09:44 - 00362816 _____ () C:\Windows\system32\FNTCACHE.DAT
    2014-11-14 06:11 - 2013-08-22 10:36 - 00000000 ___RD () C:\Windows\ToastData
    2014-11-14 06:11 - 2013-08-22 10:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
    2014-11-14 06:11 - 2013-08-22 10:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
    2014-11-14 06:11 - 2013-08-22 10:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
    2014-11-14 06:11 - 2013-08-22 10:36 - 00000000 ____D () C:\Program Files\Windows Defender
    2014-11-14 06:11 - 2013-08-22 10:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
    2014-11-12 22:41 - 2014-08-27 19:46 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc
    2014-11-12 19:08 - 2014-08-27 21:57 - 00004064 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2014-11-12 19:08 - 2014-08-27 21:57 - 00003828 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2014-11-11 23:30 - 2014-08-31 21:47 - 00000000 ____D () C:\Windows\system32\MRT
    2014-11-11 23:28 - 2014-08-31 21:46 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2014-11-06 23:04 - 2014-10-12 21:38 - 00000078 _____ () C:\Users\Admin\Documents\queue2.txt
    2014-11-06 17:36 - 2014-08-27 17:21 - 00000845 _____ () C:\Users\Public\Desktop\CCleaner.lnk
    2014-11-06 17:36 - 2014-08-27 17:20 - 00000000 ____D () C:\Program Files\CCleaner
    2014-11-02 23:02 - 2014-08-27 17:11 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore
    2014-11-02 22:55 - 2014-05-22 09:37 - 00000000 ____D () C:\ProgramData\Conexant
    2014-11-02 22:40 - 2014-05-22 09:38 - 00000000 ____D () C:\Windows\system32\SRSLabs
    2014-11-02 22:40 - 2014-05-22 09:38 - 00000000 ____D () C:\Program Files\CONEXANT
    2014-10-29 19:55 - 2013-08-22 10:38 - 00714208 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2014-10-29 19:55 - 2013-08-22 10:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    ==================== Bamital & volsnap Check =================
    (There is no automatic fix for files that do not pass verification.)
    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

    LastRegBack: 2014-11-27 04:26
    ==================== End Of Log ============================
     
  4. needhelp51

    needhelp51 TS Booster Topic Starter Posts: 285

    Here is addition log:

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-11-2014 01
    Ran by Admin at 2014-11-27 17:49:17
    Running from C:\Users\Admin\Desktop
    Boot Mode: Normal
    ==========================================================

    ==================== Security Center ========================
    (If an entry is included in the fixlist, it will be removed.)
    AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    ==================== Installed Programs ======================
    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
    Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
    Adobe Reader XI (11.0.09) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
    AMD Catalyst Install Manager (HKLM\...\{42EC3153-24B0-FCAD-0F16-0904BCBAB179}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
    Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
    CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
    Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
    Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.65.36.50 - Conexant)
    CyberLink MediaStory (HKLM-x32\...\InstallShield_{55762F9A-FCE3-45d5-817B-051218658423}) (Version: 1.0.1321 - CyberLink Corp.)
    DTS Sound (HKLM-x32\...\{5B54DDC3-0ACC-4722-9C23-C3F07AF4825D}) (Version: 1.01.6700 - DTS, Inc.)
    ETDWare PS/2_SMBus-X64 11.8.22.3_WHQL (HKLM\...\Elantech) (Version: 11.8.22.3 - ELAN Microelectronic Corp.)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
    Intel(R) Chipset Device Software (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
    Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
    Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3345 - Intel Corporation)
    Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
    Intel(R) Wireless Bluetooth(R) 4.0 (HKLM-x32\...\{96C730E4-F055-4118-BDF3-6E071763853C}) (Version: 3.0.1342.02 - Intel Corporation)
    Intel® PROSet/Wireless Software (HKLM-x32\...\{105fa5c4-72e1-41f2-a82c-884d8aa4b381}) (Version: 16.6.0 - Intel Corporation)
    Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden
    Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
    Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Mozilla Firefox 33.1.1 (x86 fr) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 fr)) (Version: 33.1.1 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)
    OEM Application Profile (HKLM-x32\...\{8C7185EB-4165-040E-D581-EA62D922E8A2}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
    OpenOffice 4.1.1 (HKLM-x32\...\{121727D5-FDF3-4723-BA57-EB383440ED72}) (Version: 4.11.9775 - Apache Software Foundation)
    Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
    PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
    Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.29077 - Realtek Semiconductor Corp.)
    Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
    Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
    TOSHIBA Audio Enhancement (HKLM\...\{1515F5E3-29EA-4CD1-A981-032D88880F09}) (Version: 2.0.18.0 - Toshiba Corporation)
    TOSHIBA Desktop Assist (HKLM\...\{C4CDCEF0-0A7A-4425-887C-33E39533D758}) (Version: 1.03.02.6402 - Toshiba Corporation)
    TOSHIBA Display Utility (HKLM\...\{484A4296-6F3D-4182-8CFA-D664F7DA34AA}) (Version: 1.1.17.0 - Toshiba Corporation)
    TOSHIBA eco Utility (HKLM\...\{94D2A899-0C34-4420-880E-AE337E635AB0}) (Version: 2.4.2.6403 - Toshiba Corporation)
    TOSHIBA Function Key (HKLM\...\{1844CFE2-EBA3-490A-8A5E-9BFC646342FD}) (Version: 1.1.5.6402 - Toshiba Corporation)
    TOSHIBA Password Utility (HKLM-x32\...\InstallShield_{26BB68BB-CF93-4A12-BC6D-A3B6F53AC8D9}) (Version: 6.0.3.0 - Toshiba Corporation)
    TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 3.01.02.6400 - Toshiba Corporation)
    TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 3.2.00.56006005 - Toshiba Corporation)
    TOSHIBA Service Station (HKLM\...\{BFE4C813-4DD4-4B1C-97F4-76A459055C8D}) (Version: 2.6.13 - Toshiba Corporation)
    TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0033 - Toshiba Corporation)
    TOSHIBA System Settings (HKLM-x32\...\{4D57ED72-6B01-40BD-9CA9-012B8FC09CEB}) (Version: 2.0.1.32003 - Toshiba Corporation)
    Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
    VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
    WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
    WildTangent Games App (Toshiba Games) (x32 Version: 4.0.10.20 - WildTangent) Hidden
    WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )
    ==================== Custom CLSID (selected items): ==========================
    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    ==================== Restore Points =========================
    09-11-2014 13:45:35 Scheduled Checkpoint
    18-11-2014 05:35:21 Scheduled Checkpoint
    21-11-2014 11:25:41 Windows Update
    27-11-2014 01:29:13 Windows Update
    27-11-2014 05:04:33 Opération de restauration
    ==================== Hosts content: ==========================
    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
    2013-08-22 08:25 - 2013-08-22 08:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
    ==================== Scheduled Tasks (whitelisted) =============
    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
    Task: {01ED18E2-F0CD-434F-A7E8-0B57355C9BA8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-29] (Piriform Ltd)
    Task: {0B278638-A83E-4E3A-B7AC-E1638ABA6FF6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-27] (Google Inc.)
    Task: {166499DF-D79E-4102-B4D3-3CD4DF6E58D7} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-11-11] (Microsoft Corporation)
    Task: {3FD379FA-4F4D-429F-A135-0B4F3A6574EF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25] (Adobe Systems Incorporated)
    Task: {6D2C1089-C6D9-4044-AC16-1BCF4A6716AE} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2013-09-24] (TOSHIBA Corporation)
    Task: {82EB8701-759C-4DDA-AE9C-E410347F8A8B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-27] (Google Inc.)
    Task: {E880433C-D0EE-4900-A933-0E73AFA9FFCF} - System32\Tasks\Resolution+ Setting Task => C:\Program Files\Toshiba\TOSHIBA Smart View Utility\Plugins\ResolutionPlus\TosRegPermissionChg.exe [2014-03-12] (TOSHIBA Corporation)
    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    ==================== Loaded Modules (whitelisted) =============
    2014-10-27 20:33 - 2009-10-16 17:12 - 00177664 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxdxdrpp.dll
    2014-03-21 16:09 - 2014-03-21 16:09 - 00021840 _____ () C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
    2012-07-18 20:38 - 2012-07-18 20:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll
    2014-10-23 14:19 - 2014-10-23 14:19 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
    2014-05-22 09:27 - 2014-03-06 15:15 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
    ==================== Alternate Data Streams (whitelisted) =========
    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    ==================== Safe Mode (whitelisted) ===================
    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    ==================== EXE Association (whitelisted) =============
    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

    ==================== MSCONFIG/TASK MANAGER disabled items =========
    (Currently there is no automatic fix for this section.)

    ========================= Accounts: ==========================
    Admin (S-1-5-21-192792804-3343093449-1893152273-1001 - Administrator - Enabled) => C:\Users\Admin
    Administrator (S-1-5-21-192792804-3343093449-1893152273-500 - Administrator - Disabled)
    Guest (S-1-5-21-192792804-3343093449-1893152273-501 - Limited - Disabled)
    ==================== Faulty Device Manager Devices =============
     
  5. Broni

    Broni Malware Annihilator Posts: 52,911   +344

    There is nothing malicious on your computer.

    I suggest new topic in Windows forum.
     
  6. needhelp51

    needhelp51 TS Booster Topic Starter Posts: 285

    Ok thank you.

    Have a nice evening.
     
  7. Broni

    Broni Malware Annihilator Posts: 52,911   +344

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...