ScorpionSaver, Cannot get rid of Program

adrienne31415 · December 9, 2013

Hello,

I have been trying on my own to get rid of ScorpionSaver on my computer to remove the unwanted ads/pop ups on Google Chrome to no avail. I have run malware bytes after trying to uninstall the program directly from the list and have managed to remove the ads for the time being but I cannot remove the program itself. I am running Windows 7 and I'm not sure what steps to take next. Any help is greatly appreciated!

kevinf80 · December 9, 2013

Hello and

P2P/Piracy Warning:

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.
Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.
If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

Next,

Download AdwCleaner by Xplode from here: http://www.bleepingcomputer.com/download/adwcleaner/ and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
When it's done you'll see: Pending: Uncheck any elements you don't want removed.
Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
Look over the log especially under Files/Folders for any program you want to save.
If there's a program you want to save, just uncheck it from AdwCleaner.
If you're not sure, post the log for review.
If you're ready to clean it all up.....click the Clean button.
After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder.
Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
To restore an item that has been deleted (if necessary):
Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.

Next,

Run Malwarebytes, Open > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal.

Please Update and run a Full scan

Make sure that everything is checked, and click Remove Selected on any found items.

Next,

Download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Post the produced logs...

Kevin

adrienne31415 · December 9, 2013

# AdwCleaner v3.014 - Report created 09/12/2013 at 11:16:16

# Updated 01/12/2013 by Xplode

# Operating System : Windows 7 Professional Service Pack 1 (64 bits)

# Username : Alex - ALEX-HP

# Running from : C:\Users\Alex\Downloads\AdwCleaner (1).exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16736

-\\ Mozilla Firefox v23.0.1 (en-US)

[ File : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\iuvtyb9q.default\prefs.js ]

-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [3971 octets] - [09/12/2013 01:48:07]

AdwCleaner[R1].txt - [1018 octets] - [09/12/2013 11:14:25]

AdwCleaner[s0].txt - [3913 octets] - [09/12/2013 02:02:35]

AdwCleaner[s1].txt - [941 octets] - [09/12/2013 11:16:16]

########## EOF - C:\AdwCleaner\AdwCleaner[s1].txt - [1000 octets] ##########

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 03

Ran by Alex (administrator) on ALEX-HP on 09-12-2013 11:19:12

Running from C:\Users\Alex\Downloads

Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)

Internet Explorer Version 10

Boot Mode: Normal

==================== Processes (Whitelisted) =================

(HP) C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

() C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe

() C:\Program Files (x86)\Polar\Daemon\polard.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin\ccSvcHst.exe

(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin64\Smc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(AuthenTec Inc.) C:\Program Files (x86)\HP SimplePass\TouchControl.exe

() C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Spotify Ltd) C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Akamai Technologies, Inc.) C:\Users\Alex\AppData\Local\Akamai\netsession_win.exe

() C:\Program Files (x86)\Polar\WebSync\WebSync.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(Dropbox, Inc.) C:\Users\Alex\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

(Facebook) C:\Users\Alex\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE

() C:\Program Files\HTC\ModeSelection\VMMModeSelection.exe

(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Akamai Technologies, Inc.) C:\Users\Alex\AppData\Local\Akamai\netsession_win.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin\ccSvcHst.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [synTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-13] (Synaptics Incorporated)

HKLM\...\Run: [setDefault] - C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [44880 2011-12-20] (Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [sysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2013-09-07] (IDT, Inc.)

HKLM\...\Run: [Autodesk Sync] - C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-05] (Autodesk, Inc.)

HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2013-11-27] (Hewlett-Packard)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [spotify Web Helper] - C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-06] (Spotify Ltd)

HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Alex\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)

HKCU\...\Run: [Facebook Update] - C:\Users\Alex\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-10-20] (Facebook Inc.)

HKCU\...\Run: [Freedom Session] - "C:\Program Files (x86)\Freedom\session\FreedomSession.exe"

HKCU\...\Policies\Explorer: []

MountPoints2: {35351fa0-1a26-11e3-a5c2-a0b3cc5277f4} - G:\TL-Bootstrap.exe

HKLM-x32\...\Run: [uSB3MON] - C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291096 2011-12-05] (Intel Corporation)

HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [HP CoolSense] - C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1343904 2012-11-05] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [VMM Mode Selection] - C:\Program Files\HTC\ModeSelection\VMMModeSelection.exe [43520 2011-02-14] ()

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-09-13] (Hewlett-Packard Development Company L.P.)

HKLM-x32\...\Run: [sunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

AppInit_DLLs: C:\Program Files [0 2013-12-09] ()

AppInit_DLLs-x32: C:\Program Files [0 2013-12-09] ()

Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Alex\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk

ShortcutTarget: Facebook Messenger.lnk -> C:\Users\Alex\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (Facebook)

Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk

ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT13/1

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT13/1

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT13/1

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT13/1

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT13/1

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS

SearchScopes: HKLM - {63C54822-9FAC-4288-8044-FF293686EB6E} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://www.ebay.com/sch/i.html?_nkw={searchTerms}

SearchScopes: HKLM-x32 - {63C54822-9FAC-4288-8044-FF293686EB6E} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://www.ebay.com/sch/i.html?_nkw={searchTerms}

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS

SearchScopes: HKCU - {63C54822-9FAC-4288-8044-FF293686EB6E} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://www.ebay.com/sch/i.html?_nkw={searchTerms}

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:

========

FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\iuvtyb9q.default

FF Keyword.URL: user_pref("keyword.URL", "");

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @authentec.com/ffwloplugin - C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll ( HP)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Alex\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Data\IPSFF

FF Extension: Symantec Vulnerability Protection - C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Data\IPSFF

FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

Chrome:

=======

CHR DefaultSearchKeyword: google.com

CHR DefaultSearchProvider: Google

CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}

CHR Extension: (Angry Birds) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0

CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1

CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1

CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0

CHR Extension: (Google Search) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1

CHR Extension: (Google Calendar) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0

CHR Extension: (MagicScroll eBook Reader) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgnmgfdoiplfmhgghbmlphanpfmjble\3.0_0

CHR Extension: (Google Wallet) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_1

CHR Extension: (My Chrome Theme) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic\2.0_0

CHR Extension: (Cute Christmas Pixel Snowflakes) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\onchgdodaomcncmlbkinhjcbamcpdche\1.1_0

CHR Extension: (Gmail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2

CHR HKLM-x32\...\Chrome\Extension: [kanflfepiobnpjbljmngfgegijhdpljm] - C:\Program Files (x86)\HP SimplePass\tschrome.crx

CHR HKLM-x32\...\Chrome\Extension: [pbmbgangfmfbhnngbdgkplhjnfoaeihd] - C:\Program Files (x86)\i-beta\Extensions\Chrome\i-beta.crx

==================== Services (Whitelisted) =================

R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)

R2 FPLService; C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe [1641768 2013-06-07] (HP)

R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [128280 2011-12-16] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)

R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)

R2 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [419536 2012-12-12] ()

R2 SepMasterService; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin\ccSvcHst.exe [144368 2013-05-25] (Symantec Corporation)

R3 SmcService; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin64\Smc.exe [2316184 2013-05-25] (Symantec Corporation)

S3 SNAC; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin64\snac64.exe [334736 2013-05-25] (Symantec Corporation)

S3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401856 2013-01-07] (AuthenTec, Inc.)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Data\Definitions\BASHDefs\20131114.011\BHDrvx64.sys [1524824 2013-10-21] (Symantec Corporation)

R1 ccSettings_{E1A40A89-2B89-44FA-9E96-395B7D7F03AC}; C:\Windows\System32\Drivers\SEP\0C010BB9\00A5.105\x64\ccSetx64.sys [169048 2013-05-25] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-20] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-20] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Data\Definitions\IPSDefs\20131206.011\IDSvia64.sys [521816 2013-10-15] (Symantec Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 NAVENG; C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Data\Definitions\VirusDefs\20131207.008\ENG64.SYS [126040 2013-10-16] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Data\Definitions\VirusDefs\20131207.008\EX64.SYS [2099288 2013-10-16] (Symantec Corporation)

S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.)

R3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [20016 2011-10-13] (Synaptics Incorporated)

R1 SRTSP; C:\Windows\System32\Drivers\SEP\0C010BB9\00A5.105\x64\SRTSP64.SYS [796760 2013-05-25] (Symantec Corporation)

R1 SRTSPX; C:\Windows\System32\Drivers\SEP\0C010BB9\00A5.105\x64\SRTSPX64.SYS [36952 2013-05-25] (Symantec Corporation)

S3 SyDvCtrl; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin64\SyDvCtrl64.sys [34800 2013-05-25] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\Drivers\SEP\0C010BB9\00A5.105\x64\SYMDS64.SYS [493656 2013-05-25] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\Drivers\SEP\0C010BB9\00A5.105\x64\SYMEFA64.SYS [1139800 2013-05-25] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-09-06] (Symantec Corporation)

R1 SymIRON; C:\Windows\System32\Drivers\SEP\0C010BB9\00A5.105\x64\Ironx64.SYS [224416 2013-05-25] (Symantec Corporation)

R1 SYMNETS; C:\Windows\System32\Drivers\SEP\0C010BB9\00A5.105\x64\SYMNETS.SYS [433752 2013-05-25] (Symantec Corporation)

R1 SysPlant; C:\Windows\System32\Drivers\SysPlant.sys [159472 2013-09-06] (Symantec Corporation)

R1 Teefer2; C:\Windows\System32\DRIVERS\Teefer.sys [91944 2013-05-25] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-12-09 11:19 - 2013-12-09 11:19 - 00022991 _____ C:\Users\Alex\Downloads\FRST.txt

2013-12-09 11:19 - 2013-12-09 11:19 - 00000000 ____D C:\FRST

2013-12-09 11:18 - 2013-12-09 11:18 - 01927998 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe

2013-12-09 11:17 - 2013-12-09 11:17 - 01110034 _____ C:\Users\Alex\Downloads\AdwCleaner (2).exe

2013-12-09 11:14 - 2013-12-09 11:14 - 01110034 _____ C:\Users\Alex\Downloads\AdwCleaner (1).exe

2013-12-09 01:48 - 2013-12-09 11:16 - 00000000 ____D C:\AdwCleaner

2013-12-09 01:47 - 2013-12-09 01:47 - 01110034 _____ C:\Users\Alex\Downloads\AdwCleaner.exe

2013-12-09 00:14 - 2013-12-09 00:14 - 01034531 _____ (Thisisu) C:\Users\Alex\Downloads\JRT.exe

2013-12-09 00:12 - 2013-12-09 00:12 - 00001137 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-12-09 00:12 - 2013-12-09 00:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-09 00:12 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-12-09 00:08 - 2013-12-09 00:09 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300 (1).exe

2013-12-08 12:03 - 2013-12-08 12:03 - 04109312 _____ C:\Users\Alex\Downloads\Lect4_BMS501_13.ppt

2013-12-07 21:33 - 2013-12-07 21:33 - 00088695 _____ C:\Users\Alex\Downloads\Novel Highly Porous Metal Technology in Artificial Hip and Knee Replacement Processing Methodologies and Clinical Applications - Springer.htm

2013-12-07 21:33 - 2013-12-07 21:33 - 00000000 ____D C:\Users\Alex\Downloads\Novel Highly Porous Metal Technology in Artificial Hip and Knee Replacement Processing Methodologies and Clinical Applications - Springer_files

2013-12-07 20:26 - 2013-12-07 20:55 - 12729858 _____ C:\Users\Alex\Downloads\Data12052013_12072013.lvm

2013-12-06 20:49 - 2013-12-06 20:49 - 00002311 _____ C:\Users\Alex\Desktop\Chrome App Launcher.lnk

2013-12-06 20:49 - 2013-12-06 20:49 - 00002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-12-06 20:49 - 2013-12-06 20:49 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2013-12-06 20:45 - 2013-12-09 11:17 - 00000890 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-06 20:45 - 2013-12-09 11:12 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-06 20:45 - 2013-12-08 10:45 - 00003890 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-06 20:45 - 2013-12-08 10:45 - 00003638 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-01 23:37 - 2013-12-01 23:37 - 00000000 ____D C:\Users\Alex\AppData\OICE_15_974FA576_32C1D314_15C

2013-12-01 23:36 - 2013-12-01 23:37 - 11575758 _____ C:\Users\Alex\Downloads\Lect2_BMS501_13(1).pptx

2013-11-30 10:03 - 2013-10-16 10:18 - 00439296 _____ (Adpeak, Inc.) C:\Windows\system32\AdpeakProxy64.dll

2013-11-27 14:40 - 2013-11-27 14:40 - 10079744 _____ C:\Users\Alex\Downloads\AcademicOverview-Spring2013.ppt

2013-11-27 14:38 - 2013-11-27 14:38 - 00273109 _____ C:\Users\Alex\Downloads\the-power-of-the-syllabus-2010-08-18.pptx

2013-11-27 12:14 - 2013-11-27 12:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300.exe

2013-11-27 12:10 - 2012-07-25 12:03 - 00016896 _____ C:\Windows\system32\sasnative64.exe

2013-11-27 10:10 - 2013-11-27 10:10 - 06222336 _____ C:\Users\Alex\Downloads\Lect1_BMS501_13.ppt

2013-11-25 22:01 - 2013-11-27 09:21 - 00012014 _____ C:\Users\Alex\Downloads\BE GSA E-Mail.xlsx

2013-11-24 23:32 - 2013-11-24 23:32 - 00000000 ____D C:\Users\Public\Documents\Autodesk

2013-11-23 17:47 - 2013-11-23 17:49 - 00000000 ____D C:\Users\Alex\Documents\New folder

2013-11-23 17:11 - 2013-11-23 17:11 - 00002091 _____ C:\Users\Public\Desktop\Inventor Fusion 2013.lnk

2013-11-23 16:54 - 2013-11-23 16:58 - 00002106 _____ C:\Users\Public\Desktop\AutoCAD 2013 - English.lnk

2013-11-23 16:29 - 2013-11-23 16:29 - 00000000 ____D C:\Program Files (x86)\Autodesk

2013-11-23 16:06 - 2013-11-23 16:08 - 09699080 _____ C:\Users\Alex\Downloads\AutoCAD_2013_English_Win_32_64bit_wi_en-US_Setup1 (1).exe

2013-11-23 15:56 - 2013-11-23 15:56 - 00000000 ____D C:\Users\Alex\Documents\Inventor Server x64 AutoCAD 2012 Language Pack - English

2013-11-23 15:52 - 2013-11-23 16:58 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared

2013-11-23 14:07 - 2013-11-23 15:10 - 1283456912 _____ C:\Users\Alex\Downloads\AutoCAD_2012_English_Win_64bit.exe

2013-11-23 13:53 - 2013-11-23 13:53 - 09699080 _____ C:\Users\Alex\Downloads\AutoCAD_2013_English_Win_32_64bit_wi_en-US_Setup1.exe

2013-11-23 00:58 - 2013-11-23 00:58 - 00000000 ____D C:\Users\Alex\Downloads\live_at_eddies_attic

2013-11-22 23:33 - 2013-11-22 23:33 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-11-22 23:33 - 2013-11-22 23:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-11-22 23:33 - 2013-11-22 23:33 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-11-22 23:33 - 2013-11-22 23:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-11-22 23:33 - 2013-11-22 23:33 - 00000000 ____D C:\ProgramData\Sun

2013-11-22 23:33 - 2013-11-22 23:33 - 00000000 ____D C:\ProgramData\Oracle

2013-11-22 23:33 - 2013-11-22 23:33 - 00000000 ____D C:\Program Files (x86)\Java

2013-11-22 23:30 - 2013-11-22 23:30 - 00915368 _____ (Oracle Corporation) C:\Users\Alex\Downloads\chromeinstall-7u45.exe

2013-11-22 22:31 - 2013-11-22 22:31 - 00000000 ____D C:\Users\Alex\Downloads\burn_for_free

2013-11-22 22:31 - 2013-11-22 22:31 - 00000000 ____D C:\Users\Alex\Downloads\autumn_eu_uk_tour_ep

2013-11-22 22:30 - 2013-11-22 22:30 - 00000000 ____D C:\Users\Alex\Downloads\remix_ep

2013-11-22 22:23 - 2013-11-22 22:23 - 00000000 ____D C:\Users\Alex\Downloads\a_bit_of_bronze

2013-11-22 22:18 - 2013-11-22 22:18 - 00000000 ____D C:\Users\Alex\Downloads\a_lil_more_christmas

2013-11-22 22:16 - 2013-11-22 22:33 - 74495742 _____ C:\Users\Alex\Downloads\live_at_eddies_attic.zip

2013-11-22 22:15 - 2013-11-22 23:28 - 363138594 _____ C:\Users\Alex\Downloads\aint_no_trip_to_cleveland_vol_1.zip

2013-11-22 22:15 - 2013-11-22 22:25 - 35439692 _____ C:\Users\Alex\Downloads\autumn_eu_uk_tour_ep.zip

2013-11-22 22:15 - 2013-11-22 22:22 - 19256872 _____ C:\Users\Alex\Downloads\burn_for_free.zip

2013-11-22 22:08 - 2013-11-22 22:22 - 52392216 _____ C:\Users\Alex\Downloads\remix_ep.zip

2013-11-22 22:08 - 2013-11-22 22:21 - 50934175 _____ C:\Users\Alex\Downloads\a_bit_of_bronze.zip

2013-11-22 22:06 - 2013-11-22 22:13 - 27056451 _____ C:\Users\Alex\Downloads\a_lil_more_christmas.zip

2013-11-19 23:55 - 2013-11-19 23:55 - 00000000 ____D C:\Users\Alex\Desktop\GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}

2013-11-17 23:42 - 2013-11-17 23:43 - 00000000 ____D C:\Users\Alex\AppData\OICE_15_974FA576_32C1D314_FC3

2013-11-17 23:41 - 2013-11-17 23:42 - 07985664 _____ C:\Users\Alex\Downloads\Cell cycle checkpoints_2013.ppt

2013-11-17 21:43 - 2013-11-17 21:43 - 00001138 _____ C:\Users\Alex\Downloads\2pheh2o.pdb

2013-11-14 18:24 - 2013-10-12 03:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-14 18:24 - 2013-10-12 03:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-14 18:24 - 2013-10-12 03:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-14 18:24 - 2013-10-12 03:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-14 18:24 - 2013-10-12 03:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-14 18:24 - 2013-10-12 03:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-14 18:24 - 2013-10-12 03:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-14 18:24 - 2013-10-12 03:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-14 18:24 - 2013-10-12 03:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-14 18:24 - 2013-10-12 03:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-14 18:24 - 2013-10-12 03:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-14 18:24 - 2013-10-12 03:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-14 18:24 - 2013-10-12 03:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-14 18:24 - 2013-10-12 03:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-14 18:24 - 2013-10-12 02:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-14 18:24 - 2013-10-12 02:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-14 18:24 - 2013-10-12 02:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-14 18:24 - 2013-10-12 01:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-14 18:24 - 2013-10-12 01:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-14 18:24 - 2013-10-12 00:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-14 18:24 - 2013-10-12 00:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-13 08:27 - 2013-10-11 21:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2013-11-13 08:27 - 2013-10-11 21:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2013-11-13 08:27 - 2013-10-11 21:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2013-11-13 08:27 - 2013-10-11 21:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2013-11-13 08:27 - 2013-10-11 21:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2013-11-13 08:27 - 2013-10-05 15:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-11-13 08:27 - 2013-10-05 14:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-11-13 08:27 - 2013-10-03 21:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll

2013-11-13 08:27 - 2013-10-03 21:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll

2013-11-13 08:27 - 2013-10-03 21:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2013-11-13 08:27 - 2013-10-03 20:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll

2013-11-13 08:27 - 2013-10-03 20:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-11-13 08:27 - 2013-10-03 20:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll

2013-11-13 08:27 - 2013-10-02 21:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2013-11-13 08:27 - 2013-10-02 21:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2013-11-13 08:27 - 2013-09-27 20:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-11-13 08:27 - 2013-09-24 21:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2013-11-13 08:27 - 2013-09-24 21:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2013-11-13 08:27 - 2013-09-24 21:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2013-11-13 08:27 - 2013-09-24 21:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2013-11-13 08:27 - 2013-09-24 21:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2013-11-13 08:27 - 2013-09-24 21:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2013-11-13 08:27 - 2013-09-24 21:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2013-11-13 08:27 - 2013-09-24 21:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2013-11-13 08:27 - 2013-09-24 20:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2013-11-13 08:27 - 2013-09-24 20:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-11-13 08:27 - 2013-09-24 20:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2013-11-13 08:27 - 2013-09-24 20:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2013-11-13 08:27 - 2013-09-24 20:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2013-11-13 08:27 - 2013-07-04 07:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2013-11-10 14:16 - 2013-11-10 14:16 - 00002318 _____ C:\Users\Alex\Downloads\10.1002%2Fjbm.a.32081.enw

2013-11-10 13:12 - 2013-11-10 13:12 - 00002321 _____ C:\Users\Alex\Downloads\10.1111%2Fj.1525-1594.2011.01297.x.enw

2013-11-10 09:55 - 2013-12-06 20:44 - 00000000 ____D C:\Program Files (x86)\Freedom

2013-11-10 09:55 - 2013-11-10 09:55 - 00000000 ____D C:\ProgramData\Eighty Percent Solutions Corporation

2013-11-10 09:53 - 2013-11-10 09:53 - 04711128 _____ (Eighty Percent Solutions Corporation) C:\Users\Alex\Downloads\Installer.exe

2013-11-10 09:47 - 2013-11-10 09:47 - 01606103 _____ (RescueTime, Inc. ) C:\Users\Alex\Downloads\RescueTimeInstaller.exe

2013-11-09 16:10 - 2013-11-09 17:02 - 00000000 ____D C:\Users\Alex\Downloads\The Heat (2013)

2013-11-09 15:13 - 2013-11-09 15:13 - 00001816 _____ C:\Users\Alex\Downloads\science (5).RIS

==================== One Month Modified Files and Folders =======

2013-12-09 11:19 - 2013-12-09 11:19 - 00022991 _____ C:\Users\Alex\Downloads\FRST.txt

2013-12-09 11:19 - 2013-12-09 11:19 - 00000000 ____D C:\FRST

2013-12-09 11:19 - 2013-09-06 20:20 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Dropbox

2013-12-09 11:18 - 2013-12-09 11:18 - 01927998 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe

2013-12-09 11:17 - 2013-12-09 11:17 - 01110034 _____ C:\Users\Alex\Downloads\AdwCleaner (2).exe

2013-12-09 11:17 - 2013-12-06 20:45 - 00000890 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-09 11:17 - 2013-09-06 20:21 - 00000000 ___RD C:\Users\Alex\Dropbox

2013-12-09 11:17 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-09 11:17 - 2009-07-13 23:51 - 00012777 _____ C:\Windows\setupact.log

2013-12-09 11:16 - 2013-12-09 01:48 - 00000000 ____D C:\AdwCleaner

2013-12-09 11:16 - 2013-09-06 14:51 - 01601795 _____ C:\Windows\WindowsUpdate.log

2013-12-09 11:14 - 2013-12-09 11:14 - 01110034 _____ C:\Users\Alex\Downloads\AdwCleaner (1).exe

2013-12-09 11:14 - 2009-07-14 00:13 - 00778834 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-09 11:12 - 2013-12-06 20:45 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-09 11:12 - 2013-10-20 21:47 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-936287634-1733484053-4269857232-1000UA.job

2013-12-09 11:12 - 2013-05-15 18:20 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-12-09 02:10 - 2009-07-13 23:45 - 00036624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-09 02:10 - 2009-07-13 23:45 - 00036624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-09 01:47 - 2013-12-09 01:47 - 01110034 _____ C:\Users\Alex\Downloads\AdwCleaner.exe

2013-12-09 01:43 - 2010-11-20 22:47 - 00929450 _____ C:\Windows\PFRO.log

2013-12-09 01:42 - 2013-10-15 15:29 - 00000000 ____D C:\Users\Alex\Documents\BMA501

2013-12-09 01:21 - 2013-05-15 18:20 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-12-09 00:14 - 2013-12-09 00:14 - 01034531 _____ (Thisisu) C:\Users\Alex\Downloads\JRT.exe

2013-12-09 00:12 - 2013-12-09 00:12 - 00001137 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-12-09 00:12 - 2013-12-09 00:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-09 00:09 - 2013-12-09 00:08 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300 (1).exe

2013-12-09 00:02 - 2013-09-14 18:24 - 00000328 _____ C:\Windows\Tasks\HPCeeScheduleForAlex.job

2013-12-08 23:56 - 2013-10-26 21:39 - 00000000 ____D C:\Users\Alex\AppData\Roaming\BitTorrent

2013-12-08 22:52 - 2013-10-20 21:47 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-936287634-1733484053-4269857232-1000Core.job

2013-12-08 12:03 - 2013-12-08 12:03 - 04109312 _____ C:\Users\Alex\Downloads\Lect4_BMS501_13.ppt

2013-12-08 11:07 - 2013-09-06 14:56 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{525220A1-21DC-4600-9573-2DB094BC6088}

2013-12-08 10:45 - 2013-12-06 20:45 - 00003890 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-08 10:45 - 2013-12-06 20:45 - 00003638 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-07 21:54 - 2013-09-06 14:59 - 00000000 ____D C:\Users\Alex\Documents\Youcam

2013-12-07 21:33 - 2013-12-07 21:33 - 00088695 _____ C:\Users\Alex\Downloads\Novel Highly Porous Metal Technology in Artificial Hip and Knee Replacement Processing Methodologies and Clinical Applications - Springer.htm

2013-12-07 21:33 - 2013-12-07 21:33 - 00000000 ____D C:\Users\Alex\Downloads\Novel Highly Porous Metal Technology in Artificial Hip and Knee Replacement Processing Methodologies and Clinical Applications - Springer_files

2013-12-07 20:55 - 2013-12-07 20:26 - 12729858 _____ C:\Users\Alex\Downloads\Data12052013_12072013.lvm

2013-12-07 20:42 - 2013-09-06 19:14 - 00000000 ____D C:\ProgramData\Symantec

2013-12-07 19:47 - 2013-09-14 18:24 - 00003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForAlex

2013-12-07 19:47 - 2013-09-07 17:55 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log

2013-12-07 19:46 - 2013-09-21 17:48 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt

2013-12-07 09:37 - 2013-09-06 21:16 - 00000000 ____D C:\Users\Alex\AppData\Local\CrashDumps

2013-12-07 00:39 - 2013-09-10 08:15 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Spotify

2013-12-06 20:49 - 2013-12-06 20:49 - 00002311 _____ C:\Users\Alex\Desktop\Chrome App Launcher.lnk

2013-12-06 20:49 - 2013-12-06 20:49 - 00002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-12-06 20:49 - 2013-12-06 20:49 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2013-12-06 20:49 - 2013-09-06 15:31 - 00000000 ____D C:\Program Files (x86)\Google

2013-12-06 20:45 - 2013-09-06 15:31 - 00000000 ____D C:\Users\Alex\AppData\Local\Deployment

2013-12-06 20:44 - 2013-11-10 09:55 - 00000000 ____D C:\Program Files (x86)\Freedom

2013-12-06 20:25 - 2013-09-10 08:16 - 00000000 ____D C:\Users\Alex\AppData\Local\Spotify

2013-12-03 12:18 - 2013-09-06 21:07 - 00000000 ____D C:\Users\Alex\Documents\BE403 - TA

2013-12-01 23:37 - 2013-12-01 23:37 - 00000000 ____D C:\Users\Alex\AppData\OICE_15_974FA576_32C1D314_15C

2013-12-01 23:37 - 2013-12-01 23:36 - 11575758 _____ C:\Users\Alex\Downloads\Lect2_BMS501_13(1).pptx

2013-11-27 14:40 - 2013-11-27 14:40 - 10079744 _____ C:\Users\Alex\Downloads\AcademicOverview-Spring2013.ppt

2013-11-27 14:38 - 2013-11-27 14:38 - 00273109 _____ C:\Users\Alex\Downloads\the-power-of-the-syllabus-2010-08-18.pptx

2013-11-27 12:15 - 2013-11-27 12:14 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300.exe

2013-11-27 11:56 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache

2013-11-27 10:10 - 2013-11-27 10:10 - 06222336 _____ C:\Users\Alex\Downloads\Lect1_BMS501_13.ppt

2013-11-27 09:21 - 2013-11-25 22:01 - 00012014 _____ C:\Users\Alex\Downloads\BE GSA E-Mail.xlsx

2013-11-26 19:42 - 2013-09-27 11:56 - 00000000 ____D C:\Users\Alex\AppData\Local\cache

2013-11-26 19:42 - 2013-09-27 11:39 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Autodesk

2013-11-26 19:42 - 2013-09-27 11:39 - 00000000 ____D C:\ProgramData\Autodesk

2013-11-24 23:32 - 2013-11-24 23:32 - 00000000 ____D C:\Users\Public\Documents\Autodesk

2013-11-24 15:28 - 2013-09-06 20:37 - 00000000 ____D C:\Users\Alex\Documents\BMS501

2013-11-23 17:49 - 2013-11-23 17:47 - 00000000 ____D C:\Users\Alex\Documents\New folder

2013-11-23 17:16 - 2013-09-06 14:57 - 00143536 _____ C:\Users\Alex\AppData\Local\GDIPFONTCACHEV1.DAT

2013-11-23 17:15 - 2009-07-13 23:45 - 00515808 _____ C:\Windows\system32\FNTCACHE.DAT

2013-11-23 17:11 - 2013-11-23 17:11 - 00002091 _____ C:\Users\Public\Desktop\Inventor Fusion 2013.lnk

2013-11-23 17:11 - 2013-09-27 11:46 - 00000000 ____D C:\Program Files\Autodesk

2013-11-23 16:58 - 2013-11-23 16:54 - 00002106 _____ C:\Users\Public\Desktop\AutoCAD 2013 - English.lnk

2013-11-23 16:58 - 2013-11-23 15:52 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared

2013-11-23 16:29 - 2013-11-23 16:29 - 00000000 ____D C:\Program Files (x86)\Autodesk

2013-11-23 16:19 - 2013-05-15 18:29 - 00010787 _____ C:\Windows\DirectX.log

2013-11-23 16:08 - 2013-11-23 16:06 - 09699080 _____ C:\Users\Alex\Downloads\AutoCAD_2013_English_Win_32_64bit_wi_en-US_Setup1 (1).exe

2013-11-23 16:06 - 2013-09-27 11:47 - 00000000 ____D C:\Users\Alex\AppData\Local\Autodesk

2013-11-23 15:56 - 2013-11-23 15:56 - 00000000 ____D C:\Users\Alex\Documents\Inventor Server x64 AutoCAD 2012 Language Pack - English

2013-11-23 15:45 - 2013-09-22 18:44 - 00000000 ____D C:\Autodesk

2013-11-23 15:10 - 2013-11-23 14:07 - 1283456912 _____ C:\Users\Alex\Downloads\AutoCAD_2012_English_Win_64bit.exe

2013-11-23 13:53 - 2013-11-23 13:53 - 09699080 _____ C:\Users\Alex\Downloads\AutoCAD_2013_English_Win_32_64bit_wi_en-US_Setup1.exe

2013-11-23 01:51 - 2013-09-06 23:43 - 00000000 ____D C:\Users\Alex\Documents\Research