Login.Alive.Com redirect

jharpj · October 12, 2013

I copy it, come here and it wont paste. ???????

Something else new is when doing a google search I sometimes get a google error message that my browser is not supported.

Jharpj

***************************************************************

AdvancedSetup · October 12, 2013

Please click on the More Reply Options button and then ATTACH the file to your post.

jharpj · October 12, 2013

File is attached.

AdvancedSetup · October 12, 2013

Sorry, no attachment. Please try again.

jharpj · October 12, 2013

When I attach the file - the POST button isn't there.

Jharpj

AdvancedSetup · October 12, 2013

To attach a log:

If you're currently unable to due to the infection then go ahead and run this scanner.

Please visit this webpage and read the ComboFix User's Guide:

Once you've read the article and are ready to use the program you can download it directly from the link below.
Important! - Please make sure you save combofix to your desktop and do not run it from your browser
Direct download link for: ComboFix.exe
Please make sure you disable your security applications before running ComboFix.
Once Combofix has completed it will produce and open a log file. Please be patient as it can take some time to load.
Please attach that log file to your next reply.
If needed the file can be located here: C:\combofix.txt
NOTE: If you receive the message "illegal operation has been attempted on a registry key that has been marked for deletion", just reboot the computer.

jharpj · October 12, 2013

I am unable to paste the content of combofix.txt and when I attach the file there is no POST button.

Also combofix does not seem to have fixed the IE problem.

Jharpj

AdvancedSetup · October 12, 2013

Did you try resetting IE ?

Maybe try downloading and using another browser at least temporarily

http://www.maxthon.com/

http://www.opera.com/

http://www.mozilla.org/en-US/firefox/new/

jharpj · October 13, 2013

I am able to paste the FRST and addition.txt files using Opera browser but when posting got error message that the post was too long so I'll just post one this time.

Jharpj

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume2

Install Date: 11/2/2012 11:52:39 AM

System Uptime: 10/4/2013 3:31:26 PM (1 hours ago)

.

Motherboard: Gateway | | EG50_HC_HR

Processor: Intel® Celeron® CPU B820 @ 1.70GHz | U3E1 | 1700/100mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 280 GiB total, 173.589 GiB free.

D: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

No restore point in system.

.

==== Installed Programs ======================

.

clear.fi SDK- Movie 2

clear.fi SDK - MVP 2

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Reader XI (11.0.04)

Agatha Christie - Death on the Nile

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Ask Toolbar

Ask Toolbar Updater

AUPEO!

Backup Manager V3

Bejeweled 3

Bing Bar

Bonjour

Broadcom Card Reader Driver Installer

Broadcom NetLink Controller

Card & Board Games 3

Card And Board Games 2

Card Games Collection

CCleaner

Chronicles of Albian

Chuzzle Deluxe

Cisco Connect

clear.fi Media

clear.fi Photo

Codecs for Windows 7 Pack 4.0.5

Compatibility Pack for the 2007 Office system

Content Transfer

Cradle of Rome 2

CyberLink MediaEspresso

D3DX10

DigiDo

Dora's World Adventure

eGames GameButler

Elevated Installer

Evernote v. 4.5.2

FATE

Final Drive: Nitro

Fooz Kids

Fooz Kids Platform

Freemake Video Downloader

Galeria de Fotos

Galerie de photos

Galería de fotos

Garmin Express

Garmin Express Tray

Garmin POI Loader

Garmin Update Service

Garmin USB Drivers

Gateway Games

Gateway MyBackup

Gateway Power Management

Gateway Recovery Management

Gateway Registration

Gateway ScreenSaver

Gateway Social Networks

Gateway Updater

GIMP 2.8.4

Google Drive

Google Earth

Google Toolbar for Internet Explorer

Google Update Helper

Governor of Poker 2 Premium Edition

Hoyle Board Games 2005

Hoyle Card Games 2005

iCloud

Identity Card

Intel® Control Center

Intel® Management Engine Components

Intel® OpenCL CPU Runtime

Intel® Processor Graphics

Intel® Rapid Storage Technology

Intel® Trusted Connect Service Client

IrfanView (remove only)

iTunes

Jewel Match 3

Jewel Quest Mysteries: The Seventh Gate Collector's Edition

Junk Mail filter update

Launch Manager

McAfee AntiVirus

Media Player Codec Pack 4.2.3

Media Player Codec Pack Packages

Microsoft .NET Framework 4 Client Profile

Microsoft Application Error Reporting

Microsoft Mouse and Keyboard Center

Microsoft Office File Validation Add-In

Microsoft Office Outlook Connector

Microsoft Office Standard Edition 2003

Microsoft Office Word Viewer 2003

Microsoft Silverlight

Microsoft SkyDrive

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Microsoft Works 6-9 Converter

Movie Maker

MSN

MSVCRT

MSVCRT_amd64

MSVCRT110

MSVCRT110_amd64

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Nero Control Center 10

Nero ControlCenter 10 Help (CHM)

Nero Core Components 10

Nero DiscSpeed 10

Nero DiscSpeed 10 Help (CHM)

Nero Express 10

Nero Express 10 Help (CHM)

Nero Multimedia Suite 10 Essentials

Nero StartSmart 10

Nero StartSmart 10 Help (CHM)

Nero Update

NOOK for PC

NWZ-E340 WALKMAN Guide

Penguins!

Photo Common

Photo Gallery

Picasa 3

Plants vs. Zombies - Game of the Year

Polar Bowler

Polar Golfer

Qualcomm Atheros Direct Connect

Qualcomm Atheros WiFi Driver Installation

QuickTime

RealDownloader

RealNetworks - Microsoft Visual C++ 2008 Runtime

RealNetworks - Microsoft Visual C++ 2010 Runtime

RealPlayer

Realtek High Definition Audio Driver

RealUpgrade 1.1

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)

Shared C Run-time for x64

Skype™ 5.10

Synaptics Pointing Device Driver

Torchlight

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939)

Update Installer for WildTangent Games App

Video Web Camera

Virtual Villagers 5 - New Believers

Webroot SecureAnywhere

Welcome Center

WildBit Viewer

WildTangent Games App

Windows 7 Codec Pack 4.0.8

Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)

Windows Live

Windows Live Communications Platform

Windows Live Essentials

Windows Live Family Safety

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Mail

Windows Live Messenger

Windows Live MIME IFilter

Windows Live Photo Common

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinMend Folder Hidden 1.4.9

WinPcap 4.1.2

YTD Toolbar v7.6

YTD Video Downloader 4.0

Zuma's Revenge

.

==== Event Viewer Messages From Past Week ========

.

9/29/2013 2:48:23 PM, Error: Service Control Manager [7000] - The McAfee SiteAdvisor Service service failed to start due to the following error: The executable program that this service is configured to run in does not implement the service.

9/29/2013 12:13:58 PM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume Gateway.

9/29/2013 12:13:58 PM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.

10/4/2013 3:30:33 PM, Error: Service Control Manager [7034] - The McAfee Scanner service terminated unexpectedly. It has done this 1 time(s).

10/4/2013 3:18:21 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

10/4/2013 3:12:59 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the GREGService service.

10/4/2013 12:57:17 PM, Error: Service Control Manager [7024] - The HomeGroup Listener service terminated with service-specific error %%-2147023143.

10/4/2013 12:54:48 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the FreemakeVideoCapture service to connect.

10/4/2013 12:54:48 PM, Error: Service Control Manager [7000] - The FreemakeVideoCapture service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

10/4/2013 12:53:46 PM, Error: Service Control Manager [7024] - The Windows Firewall service terminated with service-specific error Access is denied..

10/3/2013 7:48:52 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR4.

10/3/2013 7:33:52 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR3.

10/3/2013 7:09:43 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR2.

10/3/2013 12:11:14 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MBAMService service.

10/2/2013 8:44:29 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

10/2/2013 8:44:29 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the DsiWMIService service.

10/2/2013 6:01:35 PM, Error: Service Control Manager [7031] - The McAfee McShield service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.

10/1/2013 3:22:19 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Garmin Core Update Service service to connect.

10/1/2013 3:22:19 PM, Error: Service Control Manager [7000] - The Garmin Core Update Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

.

==== End Of File ===========================

jharpj · October 13, 2013

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013

Ran by JOANS (administrator) on JOANS-PC on 11-10-2013 19:04:24

Running from C:\Users\JOANS\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8PKYFL6

Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)

Internet Explorer Version 11

Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Webroot) C:\Program Files\Webroot\WRSA.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Webroot) C:\Program Files\Webroot\WRSA.exe

(Affinegy, Inc.) C:\Program Files (x86)\TWC\DigiDo\AffinegyService.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe

(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe

(Acer Incorporated) C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe

(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Acer Incorporated) C:\Program Files\Gateway\Gateway Power Management\ePowerTray.exe

(Microsoft Corporation) C:\Users\JOANS\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe

() C:\Windows\SysWOW64\C2MP\UpdateChecker.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Gateway MyBackup\BackupManagerTray.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe

(Affinegy, Inc.) C:\Program Files (x86)\TWC\DigiDo\TrayApp.exe

(Sony Corporation) C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(McAfee, Inc.) C:\Program Files\McAfee.com\Agent\mcagent.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe

(Affinegy, Inc.) C:\Program Files (x86)\TWC\DigiDo\DigiDo.exe

(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe

(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(Acer Incorporated) C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe

(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Acer Incorporated) C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

(McAfee, Inc.) C:\Windows\system32\mfevtps.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Gateway MyBackup\IScheduleSvc.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

(Intel Corporation) C:\Windows\system32\igfxext.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

(Acer Incorporated) C:\Program Files\Gateway\Gateway Power Management\ePowerEvent.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe

(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\MSN\MSNCoreFiles\msn.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Acer Incorporated) C:\Program Files\Gateway\Gateway Updater\alu.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Farbar) C:\Users\JOANS\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8PKYFL6\FRST64[2].exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - "C:\Windows\system32\hkcmd.exe"

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)

HKLM\...\Run: [synTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2868496 2012-02-13] (Synaptics Incorporated)

HKLM\...\Run: [Power Management] - C:\Program Files\Gateway\Gateway Power Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKLM\...\Policies\Explorer: [NoSetTaskbar] 0

HKLM\...\Policies\Explorer: [NoDeletePrinter] 0

HKLM\...\Policies\Explorer: [NoDFSTab] 0

HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0

HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0

HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKLM\...\Policies\Explorer: [NoResolveSearch] 0

HKLM\...\Policies\Explorer: [NoHardwareTab] 0

HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0

HKCU\...\Run: [skyDrive] - C:\Users\JOANS\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257136 2013-07-15] (Microsoft Corporation)

HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.)

HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20097696 2013-06-27] (Google)

HKCU\...\Run: [GarminExpressTrayApp] - C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1093976 2013-09-19] (Garmin Ltd or its subsidiaries)

HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)

HKCU\...\Run: [AppleIEDAV] - C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1315144 2013-09-04] (Apple Inc.)

HKCU\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKCU\...\Policies\Explorer: [NoSetTaskbar] 0

HKCU\...\Policies\Explorer: [NoDeletePrinter] 0

HKCU\...\Policies\Explorer: [NoDFSTab] 0

HKCU\...\Policies\Explorer: [NoChangeStartMenu] 0

HKCU\...\Policies\Explorer: [NoEncryptOnMove] 0

HKCU\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKCU\...\Policies\Explorer: [NoResolveSearch] 0

HKCU\...\Policies\Explorer: [NoHardwareTab] 0

HKCU\...\Policies\Explorer: [NoStartMenuSubFolders] 0

HKLM-x32\...\Run: [backupManagerTray] - C:\Program Files (x86)\NTI\Gateway MyBackup\BackupManagerTray.exe [289816 2012-01-05] (NTI Corporation)

HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1106512 2012-03-02] (Dritek System Inc.)

HKLM-x32\...\Run: [DigiDo] - C:\Program Files (x86)\TWC\DigiDo\TrayApp.exe [1458544 2011-10-17] (Affinegy, Inc.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [ContentTransferWMDetector.exe] - C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe [497000 2009-07-30] (Sony Corporation)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-08-02] (RealNetworks, Inc.)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)

HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1532992 2013-03-13] (McAfee, Inc.)

HKLM-x32\...\Run: [WRSVC] - C:\Program Files\Webroot\WRSA.exe [752176 2013-10-09] (Webroot)

HKU\Default\...\RunOnce: [scrSav] - C:\Program Files (x86)\Gateway\Screensaver\run_Gateway.exe [162408 2011-09-12] ()

HKU\Default User\...\RunOnce: [scrSav] - C:\Program Files (x86)\Gateway\Screensaver\run_Gateway.exe [162408 2011-09-12] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE08A7D6A2AC6CE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.msn.com/default.aspx?mypg=1&lc=1033

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =

Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

DPF: HKLM {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://qtinstall.apple.com/qtactivex/qtplugin.cab

DPF: HKLM-x32 {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://oas.support.microsoft.com/ActiveX/MSDcode.cab

DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab

DPF: HKLM-x32 {BEA7310D-06C4-4339-A784-DC3804819809} http://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_7/PhotoCenter_ActiveX_Control.cab

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)

Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4

Chrome:

=======

Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

CHR Extension: () - C:\Users\JOANS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaanbblidcdbjeikekgeniapdeppcbo\7.15.12.0_0

CHR Extension: () - C:\Users\JOANS\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_0

CHR Extension: () - C:\Users\JOANS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj\1.0_0

CHR Extension: () - C:\Users\JOANS\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.1_0

CHR Extension: () - C:\Users\JOANS\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0

CHR Extension: () - C:\Users\JOANS\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0

CHR Extension: () - C:\Users\JOANS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0

CHR HKLM-x32\...\Chrome\Extension: [aaaanbblidcdbjeikekgeniapdeppcbo] - C:\Users\JOANS\AppData\Local\APN\GoogleCRXs\aaaanbblidcdbjeikekgeniapdeppcbo_7.15.12.0.crx

CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx

CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx

CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx

CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx

CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx

CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx

CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx

==================== Services (Whitelisted) =================

R2 AffinegyService; C:\Program Files (x86)\TWC\DigiDo\AffinegyService.exe [580464 2011-10-17] (Affinegy, Inc.)

S3 DCDhcpService; C:\Program Files (x86)\Gateway\WDAgent\DCDhcpService.exe [111776 2012-01-18] (Atheros Communication Inc.)

R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-05-14] (Ellora Assets Corp.)

R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)

S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [111616 2013-10-08] (Microsoft Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation)

R2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\McSACore.exe [121616 2013-10-02] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)

R2 mcmscsvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)

R2 McNASvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)

S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [384048 2013-02-25] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)

R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)

R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Gateway MyBackup\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()

R2 WRSVC; C:\Program Files\Webroot\WRSA.exe [752176 2013-10-09] (Webroot)

==================== Drivers (Whitelisted) ====================

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)

R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)

S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)

R3 SmbDrv; C:\Windows\System32\DRIVERS\Smb_driver.sys [22800 2012-02-13] (Synaptics Incorporated)

R0 WRkrn; C:\Windows\System32\drivers\WRkrn.sys [113152 2013-10-09] (Webroot)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

U3 mfeavfk01; No ImagePath

U0 SR;

U2 srservice;

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-10-09 23:25 - 2013-09-25 01:22 - 17142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-10-09 23:25 - 2013-09-25 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-10-09 23:25 - 2013-09-24 23:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-10-09 23:25 - 2013-09-24 23:35 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-10-09 23:25 - 2013-09-24 23:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-10-09 23:25 - 2013-09-24 23:29 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-10-09 23:25 - 2013-09-24 23:26 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-10-09 23:25 - 2013-09-24 22:45 - 11223552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-10-09 23:25 - 2013-09-24 21:51 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-10-09 23:25 - 2013-09-24 21:45 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-10-09 23:25 - 2013-09-24 01:48 - 23213568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-10-09 23:25 - 2013-09-24 00:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-10-09 23:25 - 2013-09-23 23:45 - 02763776 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-10-09 23:25 - 2013-09-23 23:31 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-10-09 23:25 - 2013-09-23 23:25 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-10-09 23:25 - 2013-09-23 23:21 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-10-09 23:25 - 2013-09-23 22:56 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-10-09 23:25 - 2013-09-23 22:07 - 12997632 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-10-09 23:25 - 2013-09-23 21:33 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-10-09 23:25 - 2013-09-23 21:04 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-10-09 15:18 - 2013-09-13 18:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-10-09 15:18 - 2013-09-07 19:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-10-09 15:18 - 2013-09-07 19:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll

2013-10-09 15:18 - 2013-09-07 19:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll

2013-10-09 15:18 - 2013-08-28 19:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-10-09 15:18 - 2013-08-28 19:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-10-09 15:18 - 2013-08-28 19:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2013-10-09 15:18 - 2013-08-28 19:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-10-09 15:18 - 2013-08-28 19:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2013-10-09 15:18 - 2013-08-28 18:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-10-09 15:18 - 2013-08-28 18:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-10-09 15:18 - 2013-08-28 18:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-10-09 15:18 - 2013-08-28 18:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2013-10-09 15:18 - 2013-08-28 18:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2013-10-09 15:18 - 2013-08-27 18:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-10-09 15:18 - 2013-07-12 03:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys

2013-10-09 15:18 - 2013-07-12 03:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2013-10-09 15:18 - 2013-07-04 05:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2013-10-09 15:18 - 2013-07-04 05:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2013-10-09 15:18 - 2013-07-04 05:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2013-10-09 15:18 - 2013-07-04 04:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2013-10-09 15:18 - 2013-07-04 04:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2013-10-09 15:18 - 2013-07-04 04:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll

2013-10-09 15:18 - 2013-07-04 03:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2013-10-09 15:18 - 2013-07-02 21:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys

2013-10-09 15:18 - 2013-07-02 21:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2013-10-09 15:18 - 2013-07-02 21:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2013-10-09 15:18 - 2013-06-25 15:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-10-09 15:18 - 2013-06-05 22:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2013-10-09 15:18 - 2013-06-05 22:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2013-10-09 15:18 - 2013-06-05 22:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2013-10-09 15:18 - 2013-06-05 22:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-10-09 15:18 - 2013-06-05 21:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2013-10-09 15:18 - 2013-06-05 21:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2013-10-09 15:18 - 2013-06-05 21:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2013-10-09 15:18 - 2013-06-05 20:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-10-09 15:18 - 2013-06-05 20:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2013-10-09 15:18 - 2013-06-05 20:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2013-10-09 15:17 - 2013-08-28 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-10-09 15:17 - 2013-08-28 17:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-10-09 15:17 - 2013-08-28 17:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-10-09 15:17 - 2013-08-28 17:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-10-09 15:17 - 2013-08-28 17:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-10-09 15:17 - 2013-08-01 05:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-10-09 15:17 - 2013-07-20 03:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-10-09 15:17 - 2013-07-20 03:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2013-10-09 15:16 - 2013-08-27 18:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll

2013-10-09 07:21 - 2013-10-11 06:26 - 00000000 ____D C:\ProgramData\WRData

2013-10-09 07:21 - 2013-10-09 07:21 - 00152744 _____ (Webroot) C:\Windows\SysWOW64\WRusr.dll

2013-10-09 07:21 - 2013-10-09 07:21 - 00113152 _____ (Webroot) C:\Windows\system32\Drivers\WRkrn.sys

2013-10-09 07:21 - 2013-10-09 07:21 - 00103304 _____ (Webroot) C:\Windows\system32\WRusr.dll

2013-10-09 07:21 - 2013-10-09 07:21 - 00000000 ____D C:\Program Files\Webroot

2013-10-09 07:02 - 2013-10-09 07:02 - 00000000 ____D C:\Program Files (x86)\McAfee.com

2013-10-09 07:02 - 2012-04-20 16:40 - 00196440 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys

2013-10-09 07:01 - 2013-10-09 07:02 - 00000000 ____D C:\Program Files\McAfee

2013-10-09 07:01 - 2013-10-09 07:02 - 00000000 ____D C:\Program Files\Common Files\McAfee

2013-10-09 07:01 - 2013-10-09 07:01 - 00000000 ____D C:\Program Files\McAfee.com

2013-10-09 07:01 - 2013-02-19 13:59 - 00070112 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\cfwids.sys

2013-10-09 07:01 - 2013-02-19 13:55 - 00106552 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mferkdet.sys

2013-10-09 07:01 - 2013-02-19 13:55 - 00010728 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfeclnk.sys

2013-10-09 07:01 - 2013-02-19 13:53 - 00515968 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfefirek.sys

2013-10-09 07:01 - 2013-02-19 13:53 - 00309840 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfeavfk.sys

2013-10-09 06:57 - 2013-02-19 13:56 - 00182752 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe

2013-10-08 20:22 - 2013-08-22 14:04 - 00028352 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2013-10-08 20:19 - 2013-10-08 20:19 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-10-08 20:19 - 2013-10-08 20:19 - 01926144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-10-08 20:19 - 2013-10-08 20:19 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 01050112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00644608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-10-08 20:19 - 2013-10-08 20:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-10-08 20:19 - 2013-10-08 20:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-10-08 20:19 - 2013-10-08 20:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-10-08 20:19 - 2013-10-08 20:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00263360 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00238784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-10-08 20:19 - 2013-10-08 20:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-10-08 20:19 - 2013-10-08 20:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-10-08 20:19 - 2013-10-08 20:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-10-08 20:19 - 2013-10-08 20:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-10-08 20:15 - 2013-10-08 20:22 - 00008216 _____ C:\Windows\IE11_main.log

2013-10-08 18:06 - 2013-10-08 18:05 - 44335120 _____ (Microsoft Corporation) C:\Users\JOANS\Desktop\IE10-Windows6.1-x64-en-us.exe

2013-10-08 12:07 - 2013-10-08 12:06 - 00659968 _____ C:\Users\JOANS\Desktop\MicrosoftFixit50195.msi

2013-10-06 08:25 - 2013-10-06 08:46 - 00000000 ____D C:\Qoobox

2013-10-06 08:25 - 2011-06-25 23:45 - 00256000 _____ C:\Windows\PEV.exe

2013-10-06 08:25 - 2010-11-07 10:20 - 00208896 _____ C:\Windows\MBR.exe

2013-10-06 08:25 - 2009-04-19 21:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-10-06 08:25 - 2000-08-30 17:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-10-06 08:25 - 2000-08-30 17:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-10-06 08:25 - 2000-08-30 17:00 - 00098816 _____ C:\Windows\sed.exe

2013-10-06 08:25 - 2000-08-30 17:00 - 00080412 _____ C:\Windows\grep.exe

2013-10-06 08:25 - 2000-08-30 17:00 - 00068096 _____ C:\Windows\zip.exe

2013-10-06 07:54 - 2013-10-06 08:04 - 00000000 ____D C:\ProgramData\DivX

2013-10-06 07:54 - 2013-10-06 08:04 - 00000000 ____D C:\Program Files\DivX

2013-10-06 07:54 - 2013-10-06 08:04 - 00000000 ____D C:\Program Files (x86)\DSP-worx

2013-10-06 07:54 - 2013-10-06 07:54 - 00000000 ____D C:\Windows\SysWOW64\searchplugins

2013-10-06 07:54 - 2013-10-06 07:54 - 00000000 ____D C:\Windows\SysWOW64\Extensions

2013-10-06 07:54 - 2013-10-06 07:54 - 00000000 ____D C:\Users\JOANS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2013-10-06 07:54 - 2013-10-06 07:54 - 00000000 ____D C:\Users\JOANS\AppData\Roaming\LavFilters

2013-10-06 07:54 - 2013-10-06 07:54 - 00000000 ____D C:\Users\JOANS\AppData\Roaming\CDXReader

2013-10-06 07:54 - 2013-10-06 07:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-06 07:19 - 2013-10-06 07:55 - 00003232 _____ C:\Windows\System32\Tasks\DigitalSite

2013-10-05 13:04 - 2013-10-05 13:04 - 00000000 ____D C:\FRST

2013-10-05 08:35 - 2013-10-05 08:35 - 00000000 ____D C:\Program Files (x86)\ESET

2013-10-05 08:26 - 2013-10-08 20:10 - 00000000 ____D C:\AdwCleaner

2013-10-05 07:42 - 2013-10-05 07:42 - 00000000 ____D C:\Windows\ERUNT

2013-10-05 06:00 - 2013-10-05 07:08 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-10-04 16:58 - 2013-10-06 08:45 - 00000000 ____D C:\Windows\ERDNT

2013-10-04 16:57 - 2013-10-04 16:57 - 00000000 ____D C:\Program Files (x86)\ERUNT

2013-10-04 16:38 - 2013-10-08 17:41 - 00000000 ____D C:\Users\JOANS\Desktop\Malwarebites

2013-10-04 15:23 - 2013-10-04 15:23 - 00001790 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-10-04 15:22 - 2013-10-04 15:23 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-10-04 13:22 - 2013-08-04 19:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-10-04 13:22 - 2013-08-01 19:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-10-04 13:22 - 2013-08-01 19:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-10-04 13:22 - 2013-08-01 19:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-10-04 13:22 - 2013-08-01 18:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 18:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-10-04 13:22 - 2013-08-01 17:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-10-04 13:22 - 2013-08-01 17:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 17:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 17:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-10-04 13:22 - 2013-08-01 17:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-10-04 13:22 - 2013-07-25 19:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-10-04 13:22 - 2013-07-25 19:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-10-04 13:22 - 2013-07-25 18:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-10-04 13:22 - 2013-07-25 18:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-10-04 10:12 - 2013-10-04 10:12 - 00000000 ____D C:\Users\JOANS\AppData\Roaming\Nero

2013-10-03 08:31 - 2013-10-03 08:31 - 00000000 ____D C:\Users\JOANS\AppData\Roaming\Malwarebytes

2013-10-03 08:25 - 2013-10-03 08:25 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-30 12:11 - 2013-10-04 08:15 - 00000000 ___RD C:\Users\JOANS\Dropbox

2013-09-30 12:02 - 2013-10-04 12:26 - 00000000 ____D C:\Users\JOANS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2013-09-30 12:02 - 2013-10-04 08:15 - 00000000 ____D C:\Users\JOANS\AppData\Roaming\Dropbox

2013-09-15 07:28 - 2013-09-15 07:28 - 00000000 ____D C:\Users\JOANS\AppData\Roaming\Windows Live Writer

2013-09-15 07:28 - 2013-09-15 07:28 - 00000000 ____D C:\Users\JOANS\AppData\Local\Windows Live Writer

==================== One Month Modified Files and Folders =======

2013-10-11 18:48 - 2012-03-19 00:12 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-11 18:34 - 2012-11-04 07:43 - 00000896 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-11 17:55 - 2009-07-13 21:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-11 17:55 - 2009-07-13 21:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-11 17:47 - 2013-03-18 14:40 - 00000000 ___RD C:\Users\JOANS\Google Drive

2013-10-11 17:47 - 2012-12-06 07:24 - 00000000 ___RD C:\Users\JOANS\SkyDrive

2013-10-11 17:43 - 2013-03-26 18:25 - 00026114 _____ C:\Windows\setupact.log

2013-10-11 17:43 - 2012-11-04 07:43 - 00000892 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-11 17:43 - 2009-07-13 22:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-10-11 08:41 - 2012-06-02 12:49 - 02011895 _____ C:\Windows\WindowsUpdate.log

2013-10-11 06:26 - 2013-10-09 07:21 - 00000000 ____D C:\ProgramData\WRData

2013-10-11 05:45 - 2009-07-13 22:13 - 00726444 _____ C:\Windows\system32\PerfStringBackup.INI

2013-10-10 15:22 - 2013-08-16 05:41 - 00003362 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2183701590-1873992799-1918826727-1000

2013-10-10 15:22 - 2013-08-16 05:41 - 00003228 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2183701590-1873992799-1918826727-1000

2013-10-10 07:58 - 2013-08-05 06:50 - 00003340 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2183701590-1873992799-1918826727-1000

2013-10-10 07:58 - 2013-08-05 06:50 - 00003206 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2183701590-1873992799-1918826727-1000

2013-10-10 05:55 - 2012-11-02 13:46 - 00000000 ___RD C:\Users\JOANS\Desktop\Anti Virus

2013-10-10 05:52 - 2009-07-13 21:45 - 00327032 _____ C:\Windows\system32\FNTCACHE.DAT

2013-10-09 23:42 - 2009-07-13 19:34 - 00000686 _____ C:\Windows\win.ini

2013-10-09 23:39 - 2012-11-19 09:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-10-09 23:39 - 2012-11-19 09:54 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-10-09 15:44 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\rescache

2013-10-09 14:49 - 2012-11-02 13:04 - 00000000 ____D C:\ProgramData\McAfee

2013-10-09 14:42 - 2012-11-02 13:39 - 00000000 ____D C:\Program Files (x86)\McAfee

2013-10-09 14:41 - 2013-03-30 12:43 - 00073522 _____ C:\Windows\PFRO.log

2013-10-09 07:48 - 2012-03-19 00:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-10-09 07:48 - 2012-03-19 00:12 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-10-09 07:48 - 2012-03-19 00:12 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-10-09 07:21 - 2013-10-09 07:21 - 00152744 _____ (Webroot) C:\Windows\SysWOW64\WRusr.dll

2013-10-09 07:21 - 2013-10-09 07:21 - 00113152 _____ (Webroot) C:\Windows\system32\Drivers\WRkrn.sys

2013-10-09 07:21 - 2013-10-09 07:21 - 00103304 _____ (Webroot) C:\Windows\system32\WRusr.dll

2013-10-09 07:21 - 2013-10-09 07:21 - 00000000 ____D C:\Program Files\Webroot

2013-10-09 07:02 - 2013-10-09 07:02 - 00000000 ____D C:\Program Files (x86)\McAfee.com

2013-10-09 07:02 - 2013-10-09 07:01 - 00000000 ____D C:\Program Files\McAfee

2013-10-09 07:02 - 2013-10-09 07:01 - 00000000 ____D C:\Program Files\Common Files\McAfee

2013-10-09 07:01 - 2013-10-09 07:01 - 00000000 ____D C:\Program Files\McAfee.com

2013-10-08 20:26 - 2012-11-02 11:55 - 00001424 _____ C:\Users\JOANS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-10-08 20:23 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-10-08 20:22 - 2013-10-08 20:15 - 00008216 _____ C:\Windows\IE11_main.log