CDN.04STREAM Ad pop ups

Posted 1/5/2014 4:48 PM
#96401
User avatar

mcgilstl Member

Date Joined Nov 2016
Total Posts: 7
I ran everything that was posted in "Before posting a log," however, when I tried to disable Avira after running Malwarebytes, it wouldn't let me. I'm not sure if MBAM removed the files needed for me to disable the real time protection and firewall, but I am unable to do so with Avira. Also, after I installed and did the full scan with Avira, I get a blank red screen after I have restarted my computer and typed in my password. It stays there for several minutes and then finally goes to my desktop. Also, I do not use Internet Explorer, but Google Chrome. There are several suspicious programs I've seen in my Control Panel, but when I've tried uninstalling or removing them, the file is missing and I'm unable to do so. I have tried several times to get rid of this virus, so I'm not sure if some things were removed and some weren't and that is why the files are missing, but I'm not sure what to do in this case. Thank you so much for your help!! <br/> <br/>Here are my logs: <br/> <br/>Hijackthis Log: <br/> <br/>Logfile of Trend Micro HijackThis v2.0.5 <br/>Scan saved at 10:35:48 AM, on 1/5/2014 <br/>Platform: Windows 7 SP1 (WinNT 6.00.3505) <br/>MSIE: Internet Explorer v11.0 (11.00.9600.16428) <br/> <br/> <br/>Boot mode: Normal <br/> <br/>Running processes: <br/>C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\MusicManager.exe <br/>C:\Users\Jill\AppData\Roaming\uTorrent\uTorrent.exe <br/>C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe <br/>C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe <br/>C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe <br/>C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe <br/>C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe <br/>C:\Program Files (x86)\Launch Manager\LManager.exe <br/>C:\Program Files (x86)\Common Files\Motive\pcContextHookShim.exe <br/>C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe <br/>C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe <br/>C:\Program Files (x86)\Winamp\winampa.exe <br/>C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe <br/>C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe <br/>C:\Program Files (x86)\iTunes\iTunesHelper.exe <br/>C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe <br/>C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe <br/>C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe <br/>C:\Users\Jill\AppData\Local\VNT\vntldr.exe <br/>C:\Windows\SysWOW64\cmd.exe <br/>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <br/>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <br/>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <br/>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <br/>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <br/>C:\Program Downloads\HijackThis.exe <br/> <br/>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com <br/>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 <br/>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 <br/>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 <br/>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 <br/>R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 <br/>R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = <br/>R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = <br/>R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm <br/>R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local <br/>R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = <br/>R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file) <br/>R3 - URLSearchHook: (no name) - {707dca12-3f99-4d94-afea-06dcc0ae0108} - (no file) <br/>F2 - REG:system.ini: UserInit=userinit.exe <br/>O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll <br/>O2 - BHO: Avira SearchFree Toolbar BHO - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" (file missing) <br/>O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll <br/>O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll <br/>O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll <br/>O3 - Toolbar: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" (file missing) <br/>O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" <br/>O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe" <br/>O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d <br/>O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe <br/>O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k <br/>O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe <br/>O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun <br/>O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" <br/>O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" <br/>O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe <br/>O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" <br/>O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot <br/>O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe <br/>O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" <br/>O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" <br/>O4 - HKLM\..\Run: [autoauto] c.bat <br/>O4 - HKLM\..\Run: [ooo] ttt.bat <br/>O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min <br/>O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" <br/>O4 - HKLM\..\Run: [VNT] C:\Program Files (x86)\VNT\vntldr.exe <br/>O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" <br/>O4 - HKCU\..\Run: [Google Update] "C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe" /c <br/>O4 - HKCU\..\Run: [DownloadManager] "C:\Program Files (x86)\Zoom Downloader\DownloadManager.exe" /as <br/>O4 - HKCU\..\Run: [MusicManager] "C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\MusicManager.exe" <br/>O4 - HKCU\..\Run: [uTorrent] "C:\Users\Jill\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED <br/>O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe <br/>O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM') <br/>O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user') <br/>O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll <br/>O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll <br/>O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll <br/>O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll <br/>O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics <br/>O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL <br/>O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll <br/>O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe <br/>O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) <br/>O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) <br/>O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe <br/>O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe <br/>O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe <br/>O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe <br/>O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe <br/>O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe <br/>O23 - Service: @C:\Windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing) <br/>O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe <br/>O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) <br/>O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe <br/>O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe <br/>O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) <br/>O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe <br/>O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe <br/>O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe <br/>O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe <br/>O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe <br/>O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) <br/>O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe <br/>O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) <br/>O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe <br/>O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe <br/>O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe <br/>O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) <br/>O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) <br/>O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe <br/>O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe <br/>O23 - Service: pcCMService - Alcatel-Lucent - C:\Program Files (x86)\Common Files\Motive\pcCMService.exe <br/>O23 - Service: pcCMService64 - Alcatel-Lucent - C:\Program Files\Common Files\Motive\pcCMService.exe <br/>O23 - Service: pcServiceHost - Alcatel-Lucent - C:\Program Files (x86)\Common Files\Motive\pcServiceHost.exe <br/>O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) <br/>O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe <br/>O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) <br/>O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) <br/>O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe <br/>O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) <br/>O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) <br/>O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) <br/>O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) <br/>O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) <br/>O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) <br/>O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) <br/>O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) <br/>O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) <br/>O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) <br/>O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) <br/> <br/>-- <br/>End of file - 13954 bytes <br/> <br/> <br/>MBAM Log: <br/> <br/>Malwarebytes Anti-Malware (Trial) 1.75.0.1300 <br/>www.malwarebytes.org <br/> <br/>Database version: v2014.01.04.08 <br/> <br/>Windows 7 Service Pack 1 x64 NTFS <br/>Internet Explorer 11.0.9600.16476 <br/>Jill :: JILL-PC [limited] <br/> <br/>Protection: Enabled <br/> <br/>1/5/2014 1:37:00 AM <br/>mbam-log-2014-01-05 (01-37-00).txt <br/> <br/>Scan type: Full scan (C:\|Q:\|) <br/>Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM <br/>Scan options disabled: P2P <br/>Objects scanned: 366042 <br/>Time elapsed: 2 hour(s), 22 minute(s), 52 second(s) <br/> <br/>Memory Processes Detected: 0 <br/>(No malicious items detected) <br/> <br/>Memory Modules Detected: 0 <br/>(No malicious items detected) <br/> <br/>Registry Keys Detected: 6 <br/>HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{73AD5D47-66E5-4127-80CA-C0EEDABAFBCC} (Adware.Superweb) -> Quarantined and deleted successfully. <br/>HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{73AD5D47-66E5-4127-80CA-C0EEDABAFBCC} (Adware.Superweb) -> Quarantined and deleted successfully. <br/>HKCU\Software\PC Health Kit (Rogue.PCHealthKit) -> Quarantined and deleted successfully. <br/>HKLM\SOFTWARE\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk (PUP.Optional.Gophoto.A) -> Quarantined and deleted successfully. <br/>HKCR\CLSID\{D94B53EB-4F19-43C9-80CB-0645C447694C} (PUP.Optional.Sweetpacks) -> Quarantined and deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D94B53EB-4F19-43C9-80CB-0645C447694C} (PUP.Optional.Sweetpacks) -> Quarantined and deleted successfully. <br/> <br/>Registry Values Detected: 0 <br/>(No malicious items detected) <br/> <br/>Registry Data Items Detected: 0 <br/>(No malicious items detected) <br/> <br/>Folders Detected: 2 <br/>C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit (Rogue.PCHealthKit) -> Quarantined and deleted successfully. <br/>C:\Program Files (x86)\SweetPacks_A11 (PUP.Optional.Sweetpacks) -> Quarantined and deleted successfully. <br/> <br/>Files Detected: 17 <br/>C:\a\defaultpage.exe (Trojan.Agent) -> Quarantined and deleted successfully. <br/>C:\a\uplayermediaplayer-setup.exe (PUP.Optional.FullSpectrumAdmin) -> Quarantined and deleted successfully. <br/>C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir (PUP.Optional.Conduit) -> Quarantined and deleted successfully. <br/>C:\Program Files (x86)\SweetPacks_A11\SweetPacks_A11ToolbarHelper.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully. <br/>C:\Users\Jill\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000 (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully. <br/>C:\Users\Jill\Downloads\firstrowsportapp_setup(37).exe (PUP.BundleInstaller.DW) -> Quarantined and deleted successfully. <br/>C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit\PC Health Kit.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully. <br/>C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit\Check updates.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully. <br/>C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit\Help.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully. <br/>C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit\PC Health Kit on the Web.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully. <br/>C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit\Uninstall PC Health Kit.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully. <br/>C:\Program Files (x86)\SweetPacks_A11\hk64tbSwee.dll (PUP.Optional.Sweetpacks) -> Quarantined and deleted successfully. <br/>C:\Program Files (x86)\SweetPacks_A11\hktbSwee.dll (PUP.Optional.Sweetpacks) -> Quarantined and deleted successfully. <br/>C:\Program Files (x86)\SweetPacks_A11\ldrtbSwee.dll (PUP.Optional.Sweetpacks) -> Quarantined and deleted successfully. <br/>C:\Program Files (x86)\SweetPacks_A11\prxtbSwee.dll (PUP.Optional.Sweetpacks) -> Quarantined and deleted successfully. <br/>C:\Program Files (x86)\SweetPacks_A11\tbSwee.dll (PUP.Optional.Sweetpacks) -> Quarantined and deleted successfully. <br/>C:\Program Files (x86)\SweetPacks_A11\toolbar.cfg (PUP.Optional.Sweetpacks) -> Quarantined and deleted successfully. <br/> <br/>(end) <br/> <br/> <br/>DDS Log File: <br/> <br/>DDS (Ver_2012-11-20.01) - NTFS_AMD64 <br/>Internet Explorer: 11.0.9600.16428 BrowserJavaVersion: 10.45.2 <br/>Run by Jill at 10:00:16 on 2014-01-05 <br/>Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3819.2070 [GMT -6:00] <br/>. <br/>AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F} <br/>AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} <br/>SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} <br/>SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} <br/>SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} <br/>. <br/>============== Running Processes =============== <br/>. <br/>C:\Windows\system32\lsm.exe <br/>C:\Windows\system32\svchost.exe -k DcomLaunch <br/>C:\Windows\system32\svchost.exe -k RPCSS <br/>c:\Program Files\Microsoft Security Client\MsMpEng.exe <br/>C:\Windows\system32\atiesrxx.exe <br/>C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted <br/>C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted <br/>C:\Windows\system32\svchost.exe -k LocalService <br/>C:\Windows\system32\svchost.exe -k netsvcs <br/>C:\Windows\system32\atieclxx.exe <br/>C:\Windows\system32\svchost.exe -k NetworkService <br/>C:\Windows\System32\spoolsv.exe <br/>C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe <br/>C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork <br/>C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe <br/>C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe <br/>C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe <br/>C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe <br/>C:\Program Files\Bonjour\mDNSResponder.exe <br/>C:\Windows\system32\CxAudMsg64.exe <br/>C:\Program Files (x86)\Launch Manager\dsiwmis.exe <br/>C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe <br/>C:\Program Files (x86)\Launch Manager\LMutilps32.exe <br/>C:\Program Files (x86)\Acer\Registration\GREGsvc.exe <br/>C:\Program Files\Acer\Acer Updater\UpdaterService.exe <br/>C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe <br/>C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe <br/>C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe <br/>C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe <br/>C:\Program Files (x86)\Common Files\Motive\pcCMService.exe <br/>C:\Program Files\Common Files\Motive\pcCMService.exe <br/>C:\Windows\system32\taskhost.exe <br/>C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe <br/>C:\Windows\system32\Dwm.exe <br/>C:\Windows\Explorer.EXE <br/>C:\Program Files (x86)\Common Files\Motive\pcServiceHost.exe <br/>C:\Windows\system32\taskeng.exe <br/>C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe <br/>C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe <br/>C:\Windows\system32\svchost.exe -k imgsvc <br/>C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE <br/>C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe <br/>C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe <br/>C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe <br/>C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe <br/>C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe <br/>C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe <br/>C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE <br/>C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe <br/>C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe <br/>C:\Windows\System32\rundll32.exe <br/>C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted <br/>C:\Program Files\Elantech\ETDCtrl.exe <br/>C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe <br/>C:\Program Files\Microsoft Security Client\msseces.exe <br/>C:\Program Files\ATT-SST\pcTrayApp.exe <br/>C:\Program Files (x86)\Common Files\Motive\pcContextHookShim.exe <br/>C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\MusicManager.exe <br/>C:\Users\Jill\AppData\Roaming\uTorrent\uTorrent.exe <br/>C:\Windows\System32\StikyNot.exe <br/>C:\Windows\system32\SearchIndexer.exe <br/>C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe <br/>C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe <br/>C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe <br/>C:\Program Files (x86)\Launch Manager\LManager.exe <br/>C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe <br/>C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe <br/>C:\Program Files (x86)\Winamp\winampa.exe <br/>C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe <br/>C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe <br/>C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe <br/>C:\Windows\system32\wbem\unsecapp.exe <br/>C:\Program Files (x86)\iTunes\iTunesHelper.exe <br/>C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe <br/>C:\Program Files (x86)\Launch Manager\LMworker.exe <br/>C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe <br/>C:\Windows\system32\wbem\wmiprvse.exe <br/>C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation <br/>C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe <br/>C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe <br/>C:\Program Files\Elantech\ETDCtrlHelper.exe <br/>C:\Users\Jill\AppData\Local\VNT\vntldr.exe <br/>C:\Program Files\iPod\bin\iPodService.exe <br/>C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe <br/>C:\Windows\System32\svchost.exe -k LocalServicePeerNet <br/>C:\Program Files\Windows Media Player\wmpnetwk.exe <br/>C:\Windows\SysWOW64\cmd.exe <br/>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <br/>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <br/>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <br/>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <br/>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <br/>C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe <br/>C:\Windows\system32\wbem\wmiprvse.exe <br/>C:\Windows\System32\cscript.exe <br/>. <br/>============== Pseudo HJT Report =============== <br/>. <br/>uStart Page = hxxp://www.google.com <br/>uDefault_Page_URL = hxxp://acer.msn.com <br/>uURLSearchHooks: {687578b9-7132-4a7a-80e4-30ee31099e03} - <orphaned> <br/>uURLSearchHooks: {707dca12-3f99-4d94-afea-06dcc0ae0108} - <orphaned> <br/>mURLSearchHooks: {707dca12-3f99-4d94-afea-06dcc0ae0108} - <orphaned> <br/>mWinlogon: Userinit = userinit.exe <br/>BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll <br/>BHO: Avira SearchFree Toolbar: {41564952-412D-5637-4300-7A786E7484D7} - <br/>BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll <br/>BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll <br/>BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll <br/>TB: Avira SearchFree Toolbar: {41564952-412D-5637-4300-7A786E7484D7} - <br/>uRun: [Google Update] "C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe" /c <br/>uRun: [DownloadManager] "C:\Program Files (x86)\Zoom Downloader\DownloadManager.exe" /as <br/>uRun: [MusicManager] "C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\MusicManager.exe" <br/>uRun: [uTorrent] "C:\Users\Jill\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED <br/>uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe <br/>mRun: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" <br/>mRun: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe" <br/>mRun: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d <br/>mRun: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe <br/>mRun: [BackupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k <br/>mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe <br/>mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun <br/>mRun: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" <br/>mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" <br/>mRun: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe <br/>mRun: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" <br/>mRun: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot <br/>mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe <br/>mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" <br/>mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" <br/>mRun: [autoauto] c.bat <br/>mRun: [ooo] ttt.bat <br/>mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" <br/>mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min <br/>mRun: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" <br/>mRun: [VNT] C:\Program Files (x86)\VNT\vntldr.exe <br/>dRunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} <br/>mPolicies-Explorer: NoActiveDesktop = dword:1 <br/>mPolicies-Explorer: NoActiveDesktopChanges = dword:1 <br/>mPolicies-System: ConsentPromptBehaviorAdmin = dword:5 <br/>mPolicies-System: ConsentPromptBehaviorUser = dword:3 <br/>mPolicies-System: EnableUIADesktopToggle = dword:0 <br/>IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll <br/>Trusted Zone: $talisma_url$ <br/>DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab <br/>DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab <br/>DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab <br/>TCP: NameServer = 192.168.1.254 <br/>TCP: Interfaces\{39CEFF58-3BC2-4F9D-9B13-39B30CC2831B} : DHCPNameServer = 192.168.1.254 <br/>TCP: Interfaces\{C6E996B1-AB01-41F9-8F2D-104D6872F0F5} : DHCPNameServer = 192.168.1.254 <br/>TCP: Interfaces\{C6E996B1-AB01-41F9-8F2D-104D6872F0F5}\16C6966756 : DHCPNameServer = 192.168.168.4 8.8.8.8 <br/>TCP: Interfaces\{C6E996B1-AB01-41F9-8F2D-104D6872F0F5}\2375942554731353 : DHCPNameServer = 192.168.1.254 <br/>TCP: Interfaces\{C6E996B1-AB01-41F9-8F2D-104D6872F0F5}\2375942554838333 : DHCPNameServer = 192.168.1.254 <br/>Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll <br/>Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll <br/>SSODL: WebCheck - <orphaned> <br/>mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome <br/>x64-BHO: Avira SearchFree Toolbar: {41564952-412D-5637-4300-7A786E7484D7} - <br/>x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll <br/>x64-TB: Avira SearchFree Toolbar: {41564952-412D-5637-4300-7A786E7484D7} - <br/>x64-Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe <br/>x64-Run: [Power Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe <br/>x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey <br/>x64-Run: [ATT-SST_McciTrayApp] "C:\Program Files\ATT-SST\pcTrayApp.exe" <br/>x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned> <br/>x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned> <br/>x64-SSODL: WebCheck - <orphaned> <br/>. <br/>============= SERVICES / DRIVERS =============== <br/>. <br/>R0 aswRvrt;aswRvrt;C:\Windows\System32\drivers\aswRvrt.sys [2013-5-23 65336] <br/>R0 aswVmm;aswVmm;C:\Windows\System32\drivers\aswVmm.sys [2013-5-23 189936] <br/>R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2013-9-27 248240] <br/>R1 avkmgr;avkmgr;C:\Windows\System32\drivers\avkmgr.sys [2014-1-4 28600] <br/>R1 mwlPSDFilter;mwlPSDFilter;C:\Windows\System32\drivers\mwlPSDFilter.sys [2011-7-3 22648] <br/>R1 mwlPSDNServ;mwlPSDNServ;C:\Windows\System32\drivers\mwlPSDNserv.sys [2011-7-3 20520] <br/>R1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\System32\drivers\mwlPSDVDisk.sys [2011-7-3 62776] <br/>R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2011-7-3 204288] <br/>R2 AntiVirSchedulerService;Avira Scheduler;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2014-1-4 440376] <br/>R2 AntiVirService;Avira Real-Time Protection;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2014-1-4 440376] <br/>R2 AntiVirWebService;Avira Web Protection;C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [2014-1-4 1011768] <br/>R2 APNMCP;Ask Update Service;C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-12-20 166352] <br/>R2 avgntflt;avgntflt;C:\Windows\System32\drivers\avgntflt.sys [2014-1-4 108440] <br/>R2 avnetflt;avnetflt;C:\Windows\System32\drivers\avnetflt.sys [2014-1-4 84720] <br/>R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2013-4-22 822504] <br/>R2 CxAudMsg;Conexant Audio Message Service;C:\Windows\System32\CxAudMsg64.exe [2011-7-23 198784] <br/>R2 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-7-3 352848] <br/>R2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-7-23 872552] <br/>R2 GREGService;GREGService;C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-1-17 29696] <br/>R2 Live Updater Service;Live Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-7-3 255376] <br/>R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2014-1-5 418376] <br/>R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2014-1-5 701512] <br/>R2 NOBU;Norton Online Backup;C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-6-1 2804568] <br/>R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-4-23 256832] <br/>R2 pcCMService;pcCMService;C:\Program Files (x86)\Common Files\Motive\pcCMService.exe [2013-1-19 369152] <br/>R2 pcCMService64;pcCMService64;C:\Program Files\Common Files\Motive\pcCMService.exe [2013-1-19 460288] <br/>R2 pcServiceHost;pcServiceHost;C:\Program Files (x86)\Common Files\Motive\pcServiceHost.exe [2013-1-19 342528] <br/>R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2012-11-29 38608] <br/>R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-6-26 523944] <br/>R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2011-7-3 114704] <br/>R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\System32\drivers\ETD.sys [2011-7-3 142632] <br/>R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2014-1-5 25928] <br/>R3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfslh.sys [2013-6-26 767144] <br/>R3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaylh.sys [2013-6-26 273576] <br/>R3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirlh.sys [2013-6-26 28840] <br/>R3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvollh.sys [2013-6-26 23208] <br/>R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-6-26 207528] <br/>R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2011-7-23 47232] <br/>S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] <br/>S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] <br/>S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944] <br/>S3 EgisTec Ticket Service;EgisTec Ticket Service;C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-4-2 173424] <br/>S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] <br/>S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2013-12-12 111616] <br/>S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\System32\drivers\L1C62x64.sys [2011-7-3 76912] <br/>S3 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2011-4-27 134944] <br/>S3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376] <br/>S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2011-7-3 246376] <br/>S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392] <br/>S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232] <br/>S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-10-1 1255736] <br/>S3 WDC_SAM;WD SCSI Pass Thru driver;C:\Windows\System32\drivers\wdcsam64.sys [2008-5-6 14464] <br/>S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184] <br/>. <br/>=============== Created Last 30 ================ <br/>. <br/>2014-01-05 15:38:07 75888 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BA1F71A2-9717-43CE-9A01-F8D4849BCC8B}\offreg.dll <br/>2014-01-05 10:59:23 10315576 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BA1F71A2-9717-43CE-9A01-F8D4849BCC8B}\mpengine.dll <br/>2014-01-05 07:33:48 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys <br/>2014-01-05 07:17:11 -------- d-----w- C:\Program Files\CCleaner <br/>2014-01-05 07:11:52 -------- d-----w- C:\a <br/>2014-01-05 03:23:40 -------- d-----w- C:\Users\Jill\AppData\Local\VNT <br/>2014-01-05 03:23:32 -------- d-----w- C:\Program Files (x86)\VNT <br/>2014-01-05 03:23:24 -------- d-----w- C:\ProgramData\AskPartnerNetwork <br/>2014-01-05 03:23:24 -------- d-----w- C:\Program Files (x86)\AskPartnerNetwork <br/>2014-01-05 03:22:10 -------- d-----w- C:\Users\Jill\AppData\Roaming\Avira <br/>2014-01-05 03:22:10 -------- d-----w- C:\ProgramData\APN <br/>2014-01-05 03:19:10 84720 ----a-w- C:\Windows\System32\drivers\avnetflt.sys <br/>2014-01-05 03:19:09 28600 ----a-w- C:\Windows\System32\drivers\avkmgr.sys <br/>2014-01-05 03:19:09 108440 ----a-w- C:\Windows\System32\drivers\avgntflt.sys <br/>2014-01-05 03:19:03 -------- d-----w- C:\ProgramData\Avira <br/>2014-01-05 01:18:42 10315576 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll <br/>2013-12-20 23:31:36 -------- d-----w- C:\ProgramData\Oracle <br/>2013-12-20 23:27:58 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll <br/>2013-12-12 09:06:13 164864 ----a-w- C:\Program Files (x86)\Windows Media Player\wmplayer.exe <br/>2013-12-12 09:06:12 167424 ----a-w- C:\Program Files\Windows Media Player\wmplayer.exe <br/>2013-12-12 09:06:10 12625920 ----a-w- C:\Windows\System32\wmploc.DLL <br/>2013-12-12 09:06:09 12625408 ----a-w- C:\Windows\SysWow64\wmploc.DLL <br/>2013-12-12 05:59:07 335360 ----a-w- C:\Windows\System32\msieftp.dll <br/>2013-12-12 05:59:06 301568 ----a-w- C:\Windows\SysWow64\msieftp.dll <br/>2013-12-12 05:59:01 3155968 ----a-w- C:\Windows\System32\win32k.sys <br/>2013-12-12 05:59:00 417792 ----a-w- C:\Windows\SysWow64\WMPhoto.dll <br/>2013-12-11 23:04:05 940032 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe <br/>2013-12-11 23:04:05 194048 ----a-w- C:\Windows\SysWow64\elshyph.dll <br/>2013-12-06 23:26:28 965000 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E8B47561-E2A5-49D0-8089-6CD306D70F7C}\gapaengine.dll <br/>. <br/>==================== Find3M ==================== <br/>. <br/>2013-11-26 10:19:07 2724864 ----a-w- C:\Windows\System32\mshtml.tlb <br/>2013-11-26 10:18:23 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll <br/>2013-11-26 09:48:07 66048 ----a-w- C:\Windows\System32\iesetup.dll <br/>2013-11-26 09:46:25 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll <br/>2013-11-26 09:23:02 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb <br/>2013-11-26 09:18:39 139264 ----a-w- C:\Windows\System32\ieUnatt.exe <br/>2013-11-26 09:18:09 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe <br/>2013-11-26 09:16:57 708608 ----a-w- C:\Windows\System32\jscript9diag.dll <br/>2013-11-26 08:35:02 5769216 ----a-w- C:\Windows\System32\jscript9.dll <br/>2013-11-26 08:28:16 553472 ----a-w- C:\Windows\SysWow64\jscript9diag.dll <br/>2013-11-26 08:16:12 4243968 ----a-w- C:\Windows\SysWow64\jscript9.dll <br/>2013-11-26 08:02:16 1995264 ----a-w- C:\Windows\System32\inetcpl.cpl <br/>2013-11-26 07:32:06 1928192 ----a-w- C:\Windows\SysWow64\inetcpl.cpl <br/>2013-11-26 07:07:57 2334208 ----a-w- C:\Windows\System32\wininet.dll <br/>2013-11-26 06:33:33 1820160 ----a-w- C:\Windows\SysWow64\wininet.dll <br/>2013-11-23 17:47:34 465920 ----a-w- C:\Windows\System32\WMPhoto.dll <br/>2013-11-19 10:21:41 267936 ------w- C:\Windows\System32\MpSigStub.exe <br/>2013-11-12 02:23:09 2048 ----a-w- C:\Windows\System32\tzres.dll <br/>2013-11-12 02:07:29 2048 ----a-w- C:\Windows\SysWow64\tzres.dll <br/>2013-10-19 02:18:57 81408 ----a-w- C:\Windows\System32\imagehlp.dll <br/>2013-10-19 01:36:59 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll <br/>2013-10-12 02:32:04 150016 ----a-w- C:\Windows\System32\wshom.ocx <br/>2013-10-12 02:31:04 202752 ----a-w- C:\Windows\System32\scrrun.dll <br/>2013-10-12 02:30:42 830464 ----a-w- C:\Windows\System32\nshwfp.dll <br/>2013-10-12 02:29:21 859648 ----a-w- C:\Windows\System32\IKEEXT.DLL <br/>2013-10-12 02:29:08 324096 ----a-w- C:\Windows\System32\FWPUCLNT.DLL <br/>2013-10-12 02:04:36 121856 ----a-w- C:\Windows\SysWow64\wshom.ocx <br/>2013-10-12 02:03:31 163840 ----a-w- C:\Windows\SysWow64\scrrun.dll <br/>2013-10-12 02:03:08 656896 ----a-w- C:\Windows\SysWow64\nshwfp.dll <br/>2013-10-12 02:01:25 216576 ----a-w- C:\Windows\SysWow64\FWPUCLNT.DLL <br/>2013-10-12 01:33:39 156160 ----a-w- C:\Windows\System32\cscript.exe <br/>2013-10-12 01:33:26 168960 ----a-w- C:\Windows\System32\wscript.exe <br/>2013-10-12 01:15:48 141824 ----a-w- C:\Windows\SysWow64\wscript.exe <br/>2013-10-12 01:15:48 126976 ----a-w- C:\Windows\SysWow64\cscript.exe <br/>2013-10-09 15:17:58 68 ----a-w- C:\Windows\SysWow64\ttt.bat <br/>. <br/>============= FINISH: 10:01:25.14 =============== <br/> <br/> <br/>DDS Attach File: <br/> <br/>. <br/>UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. <br/>IF REQUESTED, ZIP IT UP & ATTACH IT <br/>. <br/>DDS (Ver_2012-11-20.01) <br/>. <br/>Microsoft Windows 7 Home Premium <br/>Boot Device: \Device\HarddiskVolume2 <br/>Install Date: 9/28/2011 9:35:59 PM <br/>System Uptime: 1/5/2014 9:34:54 AM (1 hours ago) <br/>. <br/>Motherboard: Acer | | JE50-BZ <br/>Processor: AMD C-50 Processor | Socket FT1 | 1000/100mhz <br/>. <br/>==== Disk Partitions ========================= <br/>. <br/>C: is FIXED (NTFS) - 451 GiB total, 356.108 GiB free. <br/>D: is CDROM () <br/>. <br/>==== Disabled Device Manager Items ============= <br/>. <br/>Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} <br/>Description: Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20) <br/>Device ID: PCI\VEN_1969&DEV_1083&SUBSYS_05201025&REV_C0\4&1F5B09F0&0&00AA <br/>Manufacturer: Atheros <br/>Name: Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20) <br/>PNP Device ID: PCI\VEN_1969&DEV_1083&SUBSYS_05201025&REV_C0\4&1F5B09F0&0&00AA <br/>Service: L1C <br/>. <br/>==== System Restore Points =================== <br/>. <br/>RP292: 12/11/2013 5:00:03 PM - Windows Modules Installer <br/>RP293: 12/11/2013 5:01:15 PM - Windows Modules Installer <br/>RP294: 12/12/2013 3:00:24 AM - Windows Update <br/>RP295: 12/14/2013 3:00:12 AM - Windows Update <br/>RP296: 12/17/2013 6:25:30 PM - Windows Update <br/>RP297: 12/20/2013 5:25:39 PM - Installed Java 7 Update 45 <br/>RP298: 12/21/2013 3:44:18 PM - Windows Update <br/>RP299: 12/25/2013 9:08:28 AM - Windows Update <br/>RP300: 12/28/2013 1:23:05 PM - Windows Update <br/>RP301: 12/31/2013 3:37:50 PM - Windows Update <br/>RP302: 1/3/2014 5:04:36 PM - Windows Update <br/>RP303: 1/5/2014 1:21:04 AM - Removed ATI Catalyst Install Manager <br/>. <br/>==== Installed Programs ====================== <br/>. <br/>µTorrent <br/>Acer Backup Manager <br/>Acer Crystal Eye Webcam <br/>Acer ePower Management <br/>Acer eRecovery Management <br/>Acer Games <br/>Acer Registration <br/>Acer ScreenSaver <br/>Acer Updater <br/>Acrobat.com <br/>Adobe AIR <br/>Adobe Reader XI (11.0.05) <br/>Adobe Shockwave Player 12.0 <br/>Agatha Christie - 4:50 from Paddington <br/>AMD APP SDK Runtime <br/>AMD VISION Engine Control Center <br/>Apple Application Support <br/>Apple Mobile Device Support <br/>Apple Software Update <br/>AT&T Troubleshoot & Resolve Tool <br/>Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver <br/>Avira Free Antivirus <br/>Avira SearchFree Toolbar <br/>Backup Manager V3 <br/>Bejeweled 2 Deluxe <br/>BlackBerry Desktop Software 6.1 <br/>Bonjour <br/>Build-a-lot 2 <br/>Catalyst Control Center - Branding <br/>Catalyst Control Center Graphics Previews Common <br/>Catalyst Control Center InstallProxy <br/>Catalyst Control Center Localization All <br/>ccc-utility64 <br/>CCC Help Chinese Standard <br/>CCC Help Chinese Traditional <br/>CCC Help Czech <br/>CCC Help Danish <br/>CCC Help Dutch <br/>CCC Help English <br/>CCC Help Finnish <br/>CCC Help French <br/>CCC Help German <br/>CCC Help Greek <br/>CCC Help Hungarian <br/>CCC Help Italian <br/>CCC Help Japanese <br/>CCC Help Korean <br/>CCC Help Norwegian <br/>CCC Help Polish <br/>CCC Help Portuguese <br/>CCC Help Russian <br/>CCC Help Spanish <br/>CCC Help Swedish <br/>CCC Help Thai <br/>CCC Help Turkish <br/>CCleaner <br/>Chuzzle Deluxe <br/>clear.fi <br/>clear.fi Client <br/>Conexant HD Audio <br/>Contrôle ActiveX Windows Live Mesh pour connexions à distance <br/>D3DX10 <br/>Diner Dash 2 Restaurant Rescue <br/>Dora's World Adventure <br/>ETDWare PS/2-X64 8.0.6.3_WHQL <br/>FATE - The Traitor Soul <br/>Final Drive: Nitro <br/>Flash Player Pro V5.4 <br/>Galerie de photos Windows Live <br/>Google Chrome <br/>Google Drive <br/>Google Earth <br/>Google Update Helper <br/>Hoyle Puzzle & Board Games 2011 <br/>HP Deskjet 1000 J110 series Basic Device Software <br/>HP Deskjet 1000 J110 series Help <br/>HP Deskjet 1000 J110 series Product Improvement Study <br/>HP Photo Creations <br/>HP Update <br/>Identity Card <br/>iTunes <br/>Java 7 Update 45 <br/>Java Auto Updater <br/>Java(TM) 6 Update 35 <br/>Jewel Quest Heritage <br/>Junk Mail filter update <br/>Launch Manager <br/>Mahjong Mysteries - Ancient Egypt <br/>Malwarebytes Anti-Malware version 1.75.0.1300 <br/>Mesh Runtime <br/>Microsoft .NET Framework 4 Client Profile <br/>Microsoft Application Error Reporting <br/>Microsoft Office 2010 <br/>Microsoft Office Click-to-Run 2010 <br/>Microsoft Office Starter 2010 - English <br/>Microsoft Security Client <br/>Microsoft Security Essentials <br/>Microsoft Silverlight <br/>Microsoft SQL Server 2005 Compact Edition [ENU] <br/>Microsoft Visual C++ 2005 Redistributable <br/>Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 <br/>Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 <br/>Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 <br/>Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 <br/>Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 <br/>Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 <br/>Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 <br/>MSVCRT <br/>MSVCRT_amd64 <br/>MSXML 4.0 SP2 (KB954430) <br/>MSXML 4.0 SP2 (KB973688) <br/>Music Manager <br/>Mystery P.I. - Stolen in San Francisco <br/>MyWinLocker <br/>MyWinLocker 4 <br/>MyWinLocker Suite <br/>Namco All-Stars: PAC-MAN <br/>newsXpresso <br/>NOOK for PC <br/>Norton Online Backup <br/>NTI Media Maker 9 <br/>PC Health Kit v3.2 <br/>Penguins! <br/>Plants vs. Zombies - Game of the Year <br/>Poker Superstars III <br/>Polar Bowler <br/>Polar Golfer <br/>RealDownloader <br/>RealNetworks - Microsoft Visual C++ 2008 Runtime <br/>RealNetworks - Microsoft Visual C++ 2010 Runtime <br/>RealPlayer <br/>Realtek USB 2.0 Card Reader <br/>RealUpgrade 1.1 <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2) <br/>Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2) <br/>Serif PhotoPlus X4 <br/>Shredder <br/>Skype™ 5.10 <br/>Spotify <br/>StreamTorrent 1.0 <br/>Times Reader <br/>Torchlight <br/>Update for Microsoft .NET Framework 4 Client Profile (KB2468871) <br/>Update for Microsoft .NET Framework 4 Client Profile (KB2533523) <br/>Update for Microsoft .NET Framework 4 Client Profile (KB2600217) <br/>Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) <br/>Update Installer for WildTangent Games App <br/>Virtual Villagers 4 - The Tree of Life <br/>Visual Studio 2010 x64 Redistributables <br/>Welcome Center <br/>WildTangent Games App (Acer Games) <br/>Winamp <br/>Winamp Detector Plug-in <br/>Windows Live <br/>Windows Live Communications Platform <br/>Windows Live Essentials <br/>Windows Live ID Sign-in Assistant <br/>Windows Live Installer <br/>Windows Live Language Selector <br/>Windows Live Mail <br/>Windows Live Mesh <br/>Windows Live Mesh ActiveX Control for Remote Connections <br/>Windows Live Messenger <br/>Windows Live MIME IFilter <br/>Windows Live Movie Maker <br/>Windows Live Photo Common <br/>Windows Live Photo Gallery <br/>Windows Live PIMT Platform <br/>Windows Live Remote Client <br/>Windows Live Remote Client Resources <br/>Windows Live Remote Service <br/>Windows Live Remote Service Resources <br/>Windows Live SOXE <br/>Windows Live SOXE Definitions <br/>Windows Live UX Platform <br/>Windows Live UX Platform Language Pack <br/>Windows Live Writer <br/>Windows Live Writer Resources <br/>WinRAR 4.11 (32-bit) <br/>WMV9/VC-1 Video Playback <br/>Zoom Downloader <br/>Zuma's Revenge <br/>. <br/>==== End Of File ===========================
Posted 1/6/2014 9:30 PM
#96407
User avatar

mcgilstl Member

Date Joined Nov 2016
Total Posts: 7
I've uninstalled some programs and can re-run everything to get new logs. Can anyone help?
Posted 1/7/2014 5:28 AM
#96408
User avatar

Touch Advanced member

Date Joined Nov 2016
Total Posts: 12976
Sorry for late reply :rolleyes: <br/> <br/> <br/> <br/>Please download <br/>Farbar Recovery Scan Tool <br/>and save it to your Desktop. <br/> <br/> <br/>[color=green]Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. <br/>Only one of them will run on your system, that will be the right version.[/color] <br/> <br/> <br/>[LIST] <br/>Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer. <br/>Press Scan button. <br/>It will produce a log called FRST.txt in the same directory the tool is run from. <br/>Please copy and paste log back here. <br/>The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply. <br/>[/LIST]

[color=black face="Courier New" sab="311">[2]Click here: Before-posting-a-log[/2][/url]

<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />
[/color]
Do not PM me with logfiles. They will be deleted.


Posted 1/7/2014 12:07 PM
#96409
User avatar

mcgilstl Member

Date Joined Nov 2016
Total Posts: 7
Thank you! I am installing now and will post the log once it's done running. <br/> <br/>Just an FYI that I tried using IE and the virus hasn't been affecting it at all. I uninstalled Chrome, but would really like to be able to use it again as IE is significantly slower. Before, when I would start my laptop there would be two C:/ prompt windows that would come up and then I'd get a permission window asking me to install a couple different programs. I wouldn't give permission and it would say "access denied" in the DOS window. Now, since I've uninstalled Chrome, when I start my laptop up, the two C: prompt windows flash on the screen, but then nothing else happens. So I'm sure I still have the virus, but it was only effecting Chrome.
Posted 1/7/2014 12:10 PM
#96410
User avatar

mcgilstl Member

Date Joined Nov 2016
Total Posts: 7
Just a question... when I go to download the Farbar Recovery Scan Tool, it is zipped and wants me to install something called 7zip. 7zip has a yahoo toolbar, WeatherBug, ArcadeParlor, and a Clean Water Reminder bundled into it. Just wanted to check, because those all seem suspicious.
Posted 1/7/2014 12:19 PM
#96411
User avatar

mcgilstl Member

Date Joined Nov 2016
Total Posts: 7
Here are my logs. <br/> <br/>FRST.txt: <br/> <br/>Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-01-2014 <br/>Ran by Jill (administrator) on JILL-PC on 07-01-2014 06:13:41 <br/>Running from C:\Users\Jill\Downloads <br/>Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US) <br/>Internet Explorer Version 11 <br/>Boot Mode: Normal <br/> <br/>==================== Processes (Whitelisted) ================= <br/> <br/>(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe <br/>(AMD) C:\Windows\System32\atiesrxx.exe <br/>(AMD) C:\Windows\System32\atieclxx.exe <br/>(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe <br/>(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe <br/>(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe <br/>(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe <br/>(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe <br/>(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe <br/>(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe <br/>(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe <br/>(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe <br/>(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe <br/>(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe <br/>(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe <br/>(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe <br/>(Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\pcCMService.exe <br/>(Alcatel-Lucent) C:\Program Files\Common Files\Motive\pcCMService.exe <br/>(Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\pcServiceHost.exe <br/>(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe <br/>(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE <br/>(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe <br/>(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE <br/>(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE <br/>(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe <br/>(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe <br/>(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe <br/>(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe <br/>(Alcatel-Lucent) C:\Program Files\ATT-SST\pcTrayApp.exe <br/>(Google Inc.) C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\MusicManager.exe <br/>(Microsoft Corporation) C:\Windows\System32\StikyNot.exe <br/>(Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\pcContextHookShim.exe <br/>(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe <br/>(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe <br/>(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe <br/>(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe <br/>(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe <br/>(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe <br/>(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe <br/>(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe <br/>(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe <br/>(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe <br/>(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe <br/>(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe <br/>(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe <br/>(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe <br/>(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe <br/>(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe <br/>(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe <br/>(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe <br/>(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe <br/>(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe <br/> <br/> <br/>==================== Registry (Whitelisted) ================== <br/> <br/>HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.) <br/>HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831528 2011-05-10] (Acer Incorporated) <br/>HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) <br/>HKLM\...\Run: [ATT-SST_McciTrayApp] - C:\Program Files\ATT-SST\pcTrayApp.exe [2790400 2012-11-15] (Alcatel-Lucent) <br/>HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.) <br/>HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-28] (Egis Technology Inc.) <br/>HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-28] (Egis Technology Inc.) <br/>HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-23] (NTI Corporation) <br/>HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1092688 2011-03-31] (Dritek System Inc.) <br/>HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-25] (Advanced Micro Devices, Inc.) <br/>HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-05-09] (CyberLink Corp.) <br/>HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-01-28] (Apple Inc.) <br/>HKLM-x32\...\Run: [WinampAgent] - "C:\Program Files (x86)\Winamp\winampa.exe" <br/>HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2010-03-12] (Hewlett-Packard) <br/>HKLM-x32\...\Run: [] - [x] <br/>HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated) <br/>HKLM-x32\...\Run: [autoauto] - C:\Windows\\SysWOW64\c.bat [65 2012-10-05] () <br/>HKLM-x32\...\Run: [ooo] - C:\Windows\\SysWOW64\ttt.bat [68 2013-10-09] () <br/>HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2014-01-04] (Avira Operations GmbH & Co. KG) <br/>HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) <br/>HKCU\...\Run: [Google Update] - C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-10-01] (Google Inc.) <br/>HKCU\...\Run: [DownloadManager] - C:\Program Files (x86)\Zoom Downloader\DownloadManager.exe [846848 2012-03-09] (Zoom Downloader) <br/>HKCU\...\Run: [MusicManager] - C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7380992 2013-11-11] (Google Inc.) <br/>HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-13] (Microsoft Corporation) <br/>HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-14] () <br/>HKU\Guest\...\RunOnce: [Application Restart #0] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) <br/>HKU\Guest\...\RunOnce: [Application Restart #1] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-28] (Egis Technology Inc.) <br/> <br/>==================== Internet (Whitelisted) ==================== <br/> <br/>HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com <br/>URLSearchHook: HKLM-x32 - (No Name) - {707dca12-3f99-4d94-afea-06dcc0ae0108} - No File <br/>URLSearchHook: HKCU - (No Name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File <br/>URLSearchHook: HKCU - (No Name) - {707dca12-3f99-4d94-afea-06dcc0ae0108} - No File <br/>SearchScopes: HKLM-x32 - DefaultScope {99D265A1-E28A-4D18-9912-FD08A7A86CF7} URL = <br/>SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = <br/>SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = <br/>SearchScopes: HKCU - {F180E262-278C-46BC-9252-E75F90F65752} URL = https://www.google.com/search?q={searchTerms} <br/>BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) <br/>BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) <br/>BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) <br/>BHO-x32: No Name - {D40C654D-7C51-4EB3-95B2-1E23905C2A2D} - No File <br/>BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) <br/>Toolbar: HKCU - No Name - {707DCA12-3F99-4D94-AFEA-06DCC0AE0108} - No File <br/>Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 <br/> <br/>FireFox: <br/>======== <br/>FF Plugin: @microsoft.com/GENUINE - disabled No File <br/>FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) <br/>FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) <br/>FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) <br/>FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) <br/>FF Plugin-x32: @microsoft.com/GENUINE - disabled No File <br/>FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) <br/>FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) <br/>FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) <br/>FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) <br/>FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) <br/>FF Plugin-x32: @Motive.com/NpMotive,version=1.0 - C:\Program Files (x86)\Common Files\Motive\npMotive.dll (Alcatel-Lucent) <br/>FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) <br/>FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) <br/>FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll () <br/>FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) <br/>FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Jill\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) <br/>FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Jill\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) <br/>FF Extension: GoPhotoIt - C:\Users\Jill\AppData\Roaming\Mozilla\Firefox\profiles\extensions\gophoto@gophoto.it.xpi <br/>FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext <br/> <br/>==================== Services (Whitelisted) ================= <br/> <br/>R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2014-01-04] (Avira Operations GmbH & Co. KG) <br/>R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2014-01-04] (Avira Operations GmbH & Co. KG) <br/>R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2014-01-04] (Avira Operations GmbH & Co. KG) <br/>R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) <br/>R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) <br/>R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) <br/>S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) <br/>R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-23] (NTI Corporation) <br/>R2 pcCMService64; C:\Program Files\Common Files\Motive\pcCMService.exe [460288 2012-11-15] (Alcatel-Lucent) <br/> <br/>==================== Drivers (Whitelisted) ==================== <br/> <br/>R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] () <br/>R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] () <br/>R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-04] (Avira Operations GmbH & Co. KG) <br/>R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-04] (Avira Operations GmbH & Co. KG) <br/>R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-04] (Avira Operations GmbH & Co. KG) <br/>R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2014-01-04] (Avira Operations GmbH & Co. KG) <br/>R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) <br/>R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) <br/>S3 MREMP50; C:\Program Files (x86)\Common Files\Motive\MREMP50.sys [21248 2012-11-15] (Printing Communications Assoc., Inc. (PCAUSA)) <br/>S3 MREMP50a64; C:\Program Files\Common Files\Motive\MREMP50a64.sys [43008 2012-11-15] (Printing Communications Assoc., Inc. (PCAUSA)) <br/>S3 MRESP50; C:\Program Files (x86)\Common Files\Motive\MRESP50.sys [20096 2012-11-15] (Printing Communications Assoc., Inc. (PCAUSA)) <br/>R3 MRESP50a64; C:\Program Files\Common Files\Motive\MRESP50a64.sys [40960 2012-11-15] (Printing Communications Assoc., Inc. (PCAUSA)) <br/>S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) <br/>S3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44032 2011-07-20] (Research in Motion Ltd) <br/>S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] <br/>S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [x] <br/>S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [x] <br/>S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [x] <br/> <br/>==================== NetSvcs (Whitelisted) =================== <br/> <br/> <br/>==================== One Month Created Files and Folders ======== <br/> <br/>2014-01-07 06:13 - 2014-01-07 06:14 - 00015297 _____ C:\Users\Jill\Downloads\FRST.txt <br/>2014-01-07 06:12 - 2014-01-07 06:12 - 00000000 ____D C:\FRST <br/>2014-01-07 06:11 - 2014-01-07 06:12 - 01931762 _____ (Farbar) C:\Users\Jill\Downloads\FRST64.exe <br/>2014-01-06 15:54 - 2014-01-06 22:36 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job <br/>2014-01-06 15:54 - 2014-01-06 15:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe <br/>2014-01-06 15:54 - 2014-01-06 15:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl <br/>2014-01-06 15:54 - 2014-01-06 15:54 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater <br/>2014-01-06 15:54 - 2014-01-06 15:54 - 00000000 ____D C:\Windows\system32\Macromed <br/>2014-01-06 15:50 - 2014-01-06 15:50 - 00001417 _____ C:\Users\Jill\Desktop\Internet Explorer.lnk <br/>2014-01-06 15:49 - 2014-01-06 15:50 - 00536232 _____ (Pinterest ) C:\Users\Jill\Downloads\Pinterest-IE-0.0.3.exe <br/>2014-01-06 15:40 - 2014-01-06 15:50 - 00003318 _____ C:\Windows\System32\Tasks\PinItAutoUpdate <br/>2014-01-06 15:40 - 2014-01-06 15:40 - 00000000 ____D C:\Program Files (x86)\Pinterest <br/>2014-01-06 15:34 - 2014-01-06 15:35 - 00001328 _____ C:\Windows\IE11_main.log <br/>2014-01-06 12:14 - 2014-01-06 12:14 - 00000000 _____ C:\autoexec.bat <br/>2014-01-06 12:13 - 2014-01-06 12:13 - 00000000 ____D C:\Program Files\Enigma Software Group <br/>2014-01-06 12:11 - 2014-01-06 16:07 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP <br/>2014-01-05 10:33 - 2014-01-05 10:32 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe <br/>2014-01-05 10:32 - 2014-01-05 10:32 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe <br/>2014-01-05 10:32 - 2014-01-05 10:32 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe <br/>2014-01-05 10:32 - 2014-01-05 10:32 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll <br/>2014-01-05 09:35 - 2014-01-07 05:58 - 00000224 _____ C:\Windows\setupact.log <br/>2014-01-05 09:35 - 2014-01-05 15:13 - 00008982 _____ C:\Windows\PFRO.log <br/>2014-01-05 09:35 - 2014-01-05 09:35 - 00000000 _____ C:\Windows\setuperr.log <br/>2014-01-05 01:34 - 2014-01-05 01:34 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk <br/>2014-01-05 01:33 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys <br/>2014-01-05 01:17 - 2014-01-05 01:17 - 00002770 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC <br/>2014-01-05 01:17 - 2014-01-05 01:17 - 00000826 _____ C:\Users\Public\Desktop\CCleaner.lnk <br/>2014-01-05 01:17 - 2014-01-05 01:17 - 00000000 ____D C:\Program Files\CCleaner <br/>2014-01-04 21:22 - 2014-01-04 21:22 - 00000000 ____D C:\Users\Jill\AppData\Roaming\Avira <br/>2014-01-04 21:22 - 2014-01-04 21:22 - 00000000 ____D C:\ProgramData\APN <br/>2014-01-04 21:19 - 2014-01-04 21:19 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk <br/>2014-01-04 21:19 - 2014-01-04 21:19 - 00000000 ____D C:\ProgramData\Avira <br/>2014-01-04 21:19 - 2014-01-04 21:12 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys <br/>2014-01-04 21:19 - 2014-01-04 21:12 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys <br/>2014-01-04 21:19 - 2014-01-04 21:12 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys <br/>2014-01-04 21:19 - 2014-01-04 21:12 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys <br/>2014-01-02 19:48 - 2014-01-02 19:59 - 00046080 _____ C:\Users\Jill\Desktop\Budget (1).xls <br/>2013-12-20 17:31 - 2014-01-05 10:33 - 00000000 ____D C:\ProgramData\Oracle <br/>2013-12-12 03:06 - 2013-05-09 23:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll <br/>2013-12-12 03:06 - 2013-05-09 23:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL <br/>2013-12-12 03:06 - 2013-05-09 22:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL <br/>2013-12-12 03:06 - 2013-05-09 22:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll <br/>2013-12-12 03:02 - 2013-11-26 05:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll <br/>2013-12-12 03:02 - 2013-11-26 04:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb <br/>2013-12-12 03:02 - 2013-11-26 04:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll <br/>2013-12-12 03:02 - 2013-11-26 04:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll <br/>2013-12-12 03:02 - 2013-11-26 03:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll <br/>2013-12-12 03:02 - 2013-11-26 03:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll <br/>2013-12-12 03:02 - 2013-11-26 03:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll <br/>2013-12-12 03:02 - 2013-11-26 03:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll <br/>2013-12-12 03:02 - 2013-11-26 03:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll <br/>2013-12-12 03:02 - 2013-11-26 03:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb <br/>2013-12-12 03:02 - 2013-11-26 03:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll <br/>2013-12-12 03:02 - 2013-11-26 03:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe <br/>2013-12-12 03:02 - 2013-11-26 03:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe <br/>2013-12-12 03:02 - 2013-11-26 03:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll <br/>2013-12-12 03:02 - 2013-11-26 02:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe <br/>2013-12-12 03:02 - 2013-11-26 02:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll <br/>2013-12-12 03:02 - 2013-11-26 02:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll <br/>2013-12-12 03:02 - 2013-11-26 02:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll <br/>2013-12-12 03:02 - 2013-11-26 02:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll <br/>2013-12-12 03:02 - 2013-11-26 02:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll <br/>2013-12-12 03:02 - 2013-11-26 02:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll <br/>2013-12-12 03:02 - 2013-11-26 02:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl <br/>2013-12-12 03:02 - 2013-11-26 01:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll <br/>2013-12-12 03:02 - 2013-11-26 01:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl <br/>2013-12-12 03:02 - 2013-11-26 01:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll <br/>2013-12-12 03:02 - 2013-11-26 01:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll <br/>2013-12-12 03:02 - 2013-11-26 00:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll <br/>2013-12-12 03:02 - 2013-11-26 00:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll <br/>2013-12-12 03:02 - 2013-11-26 00:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll <br/>2013-12-12 03:02 - 2013-11-26 00:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll <br/>2013-12-12 03:02 - 2013-11-26 00:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll <br/>2013-12-11 23:59 - 2013-11-23 12:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll <br/>2013-12-11 23:59 - 2013-10-29 20:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll <br/>2013-12-11 23:59 - 2013-10-29 20:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll <br/>2013-12-11 23:59 - 2013-10-29 19:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys <br/>2013-12-11 23:58 - 2013-11-23 11:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll <br/>2013-12-11 23:58 - 2013-11-11 20:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll <br/>2013-12-11 23:58 - 2013-11-11 20:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll <br/>2013-12-11 23:58 - 2013-10-18 20:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll <br/>2013-12-11 23:58 - 2013-10-18 19:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll <br/>2013-12-11 23:58 - 2013-10-11 20:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx <br/>2013-12-11 23:58 - 2013-10-11 20:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll <br/>2013-12-11 23:58 - 2013-10-11 20:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx <br/>2013-12-11 23:58 - 2013-10-11 20:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll <br/>2013-12-11 23:58 - 2013-10-11 19:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe <br/>2013-12-11 23:58 - 2013-10-11 19:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe <br/>2013-12-11 23:58 - 2013-10-11 19:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe <br/>2013-12-11 23:58 - 2013-10-11 19:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe <br/>2013-12-11 23:58 - 2013-10-03 20:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys <br/>2013-12-11 23:58 - 2013-10-03 19:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys <br/>2013-12-11 17:16 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE <br/>2013-12-11 17:04 - 2013-12-11 17:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe <br/>2013-12-11 17:04 - 2013-12-11 17:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe <br/> <br/>==================== One Month Modified Files and Folders ======= <br/> <br/>2014-01-07 06:14 - 2014-01-07 06:13 - 00015297 _____ C:\Users\Jill\Downloads\FRST.txt <br/>2014-01-07 06:12 - 2014-01-07 06:12 - 00000000 ____D C:\FRST <br/>2014-01-07 06:12 - 2014-01-07 06:11 - 01931762 _____ (Farbar) C:\Users\Jill\Downloads\FRST64.exe <br/>2014-01-07 06:12 - 2011-10-01 23:25 - 00000904 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000UA.job <br/>2014-01-07 06:08 - 2009-07-13 22:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 <br/>2014-01-07 06:08 - 2009-07-13 22:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 <br/>2014-01-07 06:07 - 2011-07-23 08:56 - 01551130 _____ C:\Windows\WindowsUpdate.log <br/>2014-01-07 06:01 - 2011-09-28 22:26 - 00000000 ____D C:\ProgramData\clear.fi <br/>2014-01-07 06:00 - 2012-12-13 16:13 - 00000890 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job <br/>2014-01-07 05:58 - 2014-01-05 09:35 - 00000224 _____ C:\Windows\setupact.log <br/>2014-01-07 05:58 - 2009-07-13 23:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT <br/>2014-01-06 22:51 - 2012-12-13 16:13 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job <br/>2014-01-06 22:36 - 2014-01-06 15:54 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job <br/>2014-01-06 21:50 - 2009-07-13 23:13 - 00727334 _____ C:\Windows\system32\PerfStringBackup.INI <br/>2014-01-06 16:14 - 2011-12-14 02:59 - 00000000 ____D C:\Users\Jill\AppData\Local\Research In Motion <br/>2014-01-06 16:13 - 2011-12-14 02:51 - 00002021 _____ C:\Users\Jill\AppData\Roaming\Rim.Desktop.HttpServerSetup.log <br/>2014-01-06 16:12 - 2011-10-01 23:25 - 00000852 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000Core.job <br/>2014-01-06 16:11 - 2011-07-03 22:01 - 00000000 ____D C:\Program Files (x86)\Windows Live <br/>2014-01-06 16:08 - 2012-12-13 16:13 - 00000000 ____D C:\Program Files (x86)\Google <br/>2014-01-06 16:08 - 2011-10-01 23:25 - 00000000 ____D C:\Users\Jill\AppData\Local\Google <br/>2014-01-06 16:07 - 2014-01-06 12:11 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP <br/>2014-01-06 15:54 - 2014-01-06 15:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe <br/>2014-01-06 15:54 - 2014-01-06 15:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl <br/>2014-01-06 15:54 - 2014-01-06 15:54 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater <br/>2014-01-06 15:54 - 2014-01-06 15:54 - 00000000 ____D C:\Windows\system32\Macromed <br/>2014-01-06 15:54 - 2013-11-08 18:38 - 00000000 ____D C:\Program Files (x86)\Flash Player Pro <br/>2014-01-06 15:50 - 2014-01-06 15:50 - 00001417 _____ C:\Users\Jill\Desktop\Internet Explorer.lnk <br/>2014-01-06 15:50 - 2014-01-06 15:49 - 00536232 _____ (Pinterest ) C:\Users\Jill\Downloads\Pinterest-IE-0.0.3.exe <br/>2014-01-06 15:50 - 2014-01-06 15:40 - 00003318 _____ C:\Windows\System32\Tasks\PinItAutoUpdate <br/>2014-01-06 15:40 - 2014-01-06 15:40 - 00000000 ____D C:\Program Files (x86)\Pinterest <br/>2014-01-06 15:35 - 2014-01-06 15:34 - 00001328 _____ C:\Windows\IE11_main.log <br/>2014-01-06 12:14 - 2014-01-06 12:14 - 00000000 _____ C:\autoexec.bat <br/>2014-01-06 12:13 - 2014-01-06 12:13 - 00000000 ____D C:\Program Files\Enigma Software Group <br/>2014-01-06 11:50 - 2011-09-28 20:36 - 00000000 ____D C:\Users\Jill <br/>2014-01-05 15:13 - 2014-01-05 09:35 - 00008982 _____ C:\Windows\PFRO.log <br/>2014-01-05 12:59 - 2012-09-26 09:45 - 00000000 ____D C:\Program Files (x86)\Winamp <br/>2014-01-05 12:57 - 2011-09-28 23:43 - 00000000 ____D C:\Users\Jill\AppData\Roaming\Skype <br/>2014-01-05 12:57 - 2011-07-03 21:52 - 00000000 ____D C:\ProgramData\Skype <br/>2014-01-05 12:55 - 2013-01-20 18:08 - 00000000 ____D C:\Program Files (x86)\Real <br/>2014-01-05 12:55 - 2013-01-20 18:04 - 00000000 ____D C:\Users\Jill\AppData\Roaming\Real <br/>2014-01-05 12:55 - 2013-01-20 18:02 - 00000000 ____D C:\ProgramData\Real <br/>2014-01-05 12:48 - 2013-05-05 12:57 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 <br/>2014-01-05 12:37 - 2012-03-09 02:10 - 00000000 ____D C:\Users\Jill\AppData\Roaming\uTorrent <br/>2014-01-05 10:35 - 2011-09-28 20:36 - 00000000 ____D C:\Users\Jill\AppData\Local\VirtualStore <br/>2014-01-05 10:33 - 2013-12-20 17:31 - 00000000 ____D C:\ProgramData\Oracle <br/>2014-01-05 10:32 - 2014-01-05 10:33 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe <br/>2014-01-05 10:32 - 2014-01-05 10:32 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe <br/>2014-01-05 10:32 - 2014-01-05 10:32 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe <br/>2014-01-05 10:32 - 2014-01-05 10:32 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll <br/>2014-01-05 10:32 - 2012-08-31 09:27 - 00000000 ____D C:\Program Files (x86)\Java <br/>2014-01-05 10:12 - 2013-11-03 10:35 - 00003200 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-92465838-1376508428-2459836927-1000 <br/>2014-01-05 10:12 - 2013-08-23 17:10 - 00003336 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-92465838-1376508428-2459836927-1000 <br/>2014-01-05 09:35 - 2014-01-05 09:35 - 00000000 _____ C:\Windows\setuperr.log <br/>2014-01-05 01:34 - 2014-01-05 01:34 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk <br/>2014-01-05 01:33 - 2013-11-26 08:36 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware <br/>2014-01-05 01:27 - 2007-07-11 19:49 - 00000000 ____D C:\Windows\Panther <br/>2014-01-05 01:17 - 2014-01-05 01:17 - 00002770 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC <br/>2014-01-05 01:17 - 2014-01-05 01:17 - 00000826 _____ C:\Users\Public\Desktop\CCleaner.lnk <br/>2014-01-05 01:17 - 2014-01-05 01:17 - 00000000 ____D C:\Program Files\CCleaner <br/>2014-01-05 01:06 - 2011-10-02 22:28 - 00000000 ____D C:\Users\Jill\AppData\Roaming\SoftGrid Client <br/>2014-01-04 21:22 - 2014-01-04 21:22 - 00000000 ____D C:\Users\Jill\AppData\Roaming\Avira <br/>2014-01-04 21:22 - 2014-01-04 21:22 - 00000000 ____D C:\ProgramData\APN <br/>2014-01-04 21:19 - 2014-01-04 21:19 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk <br/>2014-01-04 21:19 - 2014-01-04 21:19 - 00000000 ____D C:\ProgramData\Avira <br/>2014-01-04 21:19 - 2013-11-10 17:29 - 00000000 ____D C:\Program Files (x86)\Avira <br/>2014-01-04 21:12 - 2014-01-04 21:19 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys <br/>2014-01-04 21:12 - 2014-01-04 21:19 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys <br/>2014-01-04 21:12 - 2014-01-04 21:19 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys <br/>2014-01-04 21:12 - 2014-01-04 21:19 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys <br/>2014-01-02 19:59 - 2014-01-02 19:48 - 00046080 _____ C:\Users\Jill\Desktop\Budget (1).xls <br/>2013-12-14 03:07 - 2013-08-17 09:51 - 00000000 ____D C:\Windows\system32\MRT <br/>2013-12-14 03:01 - 2011-10-02 22:55 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe <br/>2013-12-12 18:47 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\rescache <br/>2013-12-12 03:25 - 2009-07-13 22:45 - 00298032 _____ C:\Windows\system32\FNTCACHE.DAT <br/>2013-12-11 21:38 - 2011-09-28 20:40 - 00001417 _____ C:\Users\Jill\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk <br/>2013-12-11 21:26 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\PolicyDefinitions <br/>2013-12-11 17:04 - 2013-12-11 17:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe <br/>2013-12-11 17:04 - 2013-12-11 17:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe <br/>2013-12-11 17:03 - 2013-12-11 17:03 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe <br/> <br/>Some content of TEMP: <br/>==================== <br/>C:\Users\Jill\AppData\Local\Temp\avgnt.exe <br/>C:\Users\Jill\AppData\Local\Temp\SHSetup.exe <br/>C:\Users\Jill\AppData\Local\Temp\~SpUnin~.exe <br/> <br/> <br/>==================== Bamital & volsnap Check ================= <br/> <br/>C:\Windows\System32\winlogon.exe => MD5 is legit <br/>C:\Windows\System32\wininit.exe => MD5 is legit <br/>C:\Windows\SysWOW64\wininit.exe => MD5 is legit <br/>C:\Windows\explorer.exe => MD5 is legit <br/>C:\Windows\SysWOW64\explorer.exe => MD5 is legit <br/>C:\Windows\System32\svchost.exe => MD5 is legit <br/>C:\Windows\SysWOW64\svchost.exe => MD5 is legit <br/>C:\Windows\System32\services.exe => MD5 is legit <br/>C:\Windows\System32\User32.dll => MD5 is legit <br/>C:\Windows\SysWOW64\User32.dll => MD5 is legit <br/>C:\Windows\System32\userinit.exe => MD5 is legit <br/>C:\Windows\SysWOW64\userinit.exe => MD5 is legit <br/>C:\Windows\System32\rpcss.dll => MD5 is legit <br/>C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit <br/> <br/> <br/>LastRegBack: 2013-12-30 18:35 <br/> <br/>==================== End Of Log ============================ <br/> <br/>Addition.txt: <br/> <br/>Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-01-2014 <br/>Ran by Jill at 2014-01-07 06:16:04 <br/>Running from C:\Users\Jill\Downloads <br/>Boot Mode: Normal <br/>========================================================== <br/> <br/> <br/>==================== Security Center ======================== <br/> <br/>AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} <br/>AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} <br/>AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} <br/>AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} <br/>AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} <br/> <br/>==================== Installed Programs ====================== <br/> <br/>Acer Backup Manager (x32 Version: 3.0.0.99 - NTI Corporation) <br/>Acer Crystal Eye Webcam (x32 Version: 1.0.1720 - CyberLink Corp.) <br/>Acer Crystal Eye Webcam (x32 Version: 1.0.1720 - CyberLink Corp.) Hidden <br/>Acer ePower Management (x32 Version: 6.00.3007 - Acer Incorporated) <br/>Acer eRecovery Management (x32 Version: 5.00.3501 - Acer Incorporated) <br/>Acer Games (x32 Version: 1.0.2.4 - WildTangent) <br/>Acer Registration (x32 Version: 1.04.3502 - Acer Incorporated) <br/>Acer ScreenSaver (x32 Version: 1.1.0707.2010 - Acer Incorporated) <br/>Acer Updater (x32 Version: 1.02.3500 - Acer Incorporated) <br/>Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated) <br/>Adobe AIR (x32 Version: 3.7.0.1860 - Adobe Systems Incorporated) <br/>Adobe AIR (x32 Version: 3.7.0.1860 - Adobe Systems Incorporated) Hidden <br/>Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.39 - Adobe Systems Incorporated) <br/>Adobe Reader XI (11.0.05) (x32 Version: 11.0.05 - Adobe Systems Incorporated) <br/>Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112 - Adobe Systems, Inc.) <br/>Agatha Christie - 4:50 from Paddington (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden <br/>AMD VISION Engine Control Center (x32 Version: 2011.0524.2352.41027 - ATI) Hidden <br/>Apple Application Support (x32 Version: 2.3.3 - Apple Inc.) <br/>Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.) <br/>Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) <br/>AT&T Troubleshoot & Resolve Tool (x32 Version: - ) <br/>Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.36 - Atheros Communications Inc.) <br/>Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira) <br/>Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden <br/>Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Bonjour (Version: 3.0.0.10 - Apple Inc.) <br/>Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden <br/>Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0524.2352.41027 - ATI) Hidden <br/>Catalyst Control Center InstallProxy (x32 Version: 2011.0524.2352.41027 - ATI Technologies, Inc.) Hidden <br/>Catalyst Control Center Localization All (x32 Version: 2011.0524.2352.41027 - ATI) Hidden <br/>CCC Help Chinese Standard (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Chinese Traditional (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Czech (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Danish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Dutch (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help English (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Finnish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help French (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help German (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Greek (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Hungarian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Italian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Japanese (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Korean (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Norwegian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Polish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Portuguese (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Russian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Spanish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Swedish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Thai (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>CCC Help Turkish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden <br/>ccc-utility64 (Version: 2011.0524.2352.41027 - ATI) Hidden <br/>CCleaner (Version: 4.09 - Piriform) <br/>Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>clear.fi (x32 Version: 1.0.1517_36458 - CyberLink Corp.) Hidden <br/>clear.fi (x32 Version: 1.0.1720.00 - CyberLink Corp.) <br/>clear.fi (x32 Version: 1.0.1720.00 - CyberLink Corp.) Hidden <br/>clear.fi (x32 Version: 9.0.7709 - CyberLink Corp.) Hidden <br/>clear.fi Client (x32 Version: 1.00.3500 - Acer Incorporated) <br/>Conexant HD Audio (Version: 8.41.1.51 - Conexant) <br/>D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden <br/>Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>ETDWare PS/2-X64 8.0.6.3_WHQL (Version: 8.0.6.3 - ELAN Microelectronic Corp.) <br/>FATE - The Traitor Soul (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.) <br/>Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden <br/>Hoyle Puzzle & Board Games 2011 (x32 Version: 1.00.0000 - Encore) <br/>HP Deskjet 1000 J110 series Basic Device Software (Version: 22.0.334.0 - Hewlett-Packard Co.) <br/>HP Deskjet 1000 J110 series Help (x32 Version: 140.0.65.65 - Hewlett Packard) <br/>HP Deskjet 1000 J110 series Product Improvement Study (Version: 22.0.334.0 - Hewlett-Packard Co.) <br/>HP Photo Creations (x32 Version: 1.0.0.3341 - HP Photo Creations Powered by RocketLife) <br/>HP Update (x32 Version: 5.002.005.003 - Hewlett-Packard) <br/>Identity Card (x32 Version: 1.00.3501 - Acer Incorporated) <br/>Java 7 Update 45 (x32 Version: 7.0.450 - Oracle) <br/>Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden <br/>Jewel Quest Heritage (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Launch Manager (x32 Version: 5.1.5 - Acer Inc.) <br/>Mahjong Mysteries - Ancient Egypt (x32 Version: - cerasus.media GmbH) <br/>Malwarebytes Anti-Malware version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) <br/>Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden <br/>Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) <br/>Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden <br/>Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden <br/>Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) <br/>Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden <br/>Microsoft Office Click-to-Run 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) <br/>Microsoft Office Starter 2010 - English (x32 Version: 14.0.5131.5000 - Microsoft Corporation) <br/>Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden <br/>Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation) <br/>Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) <br/>Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) <br/>Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) <br/>Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) <br/>Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation) <br/>Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) <br/>Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) <br/>Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) <br/>Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation) <br/>Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) <br/>MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden <br/>MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden <br/>MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) <br/>MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) <br/>Music Manager (HKCU Version: - Google, Inc.) <br/>Mystery P.I. - Stolen in San Francisco (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden <br/>MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden <br/>MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) <br/>MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden <br/>Namco All-Stars: PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) <br/>newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden <br/>NOOK for PC (x32 Version: 2.5.1.237 - Barnesandnoble.com) <br/>NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) <br/>NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden <br/>Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Pin It (x32 Version: 0.0.3 - Pinterest) <br/>Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30122 - Realtek Semiconductor Corp.) <br/>Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden <br/>Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden <br/>Times Reader (x32 Version: 2.055 - The New York Times Company) <br/>Times Reader (x32 Version: 2.055 - The New York Times Company) Hidden <br/>Torchlight (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) <br/>Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) <br/>Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) <br/>Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) <br/>Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden <br/>Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/>Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1 - AVG Technologies) <br/>Welcome Center (x32 Version: 1.02.3501 - Acer Incorporated) <br/>WildTangent Games App (Acer Games) (x32 Version: 4.0.5.31 - WildTangent) Hidden <br/>Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation) <br/>Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden <br/>Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden <br/>Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden <br/>Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden <br/>Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden <br/>Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden <br/>Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden <br/>Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden <br/>Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden <br/>Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden <br/>WinRAR 4.11 (32-bit) (x32 Version: 4.11.0 - win.rar GmbH) <br/>WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden <br/>Zuma's Revenge (x32 Version: 2.2.0.95 - WildTangent) Hidden <br/> <br/>==================== Restore Points ========================= <br/> <br/>25-12-2013 15:08:28 Windows Update <br/>28-12-2013 19:23:05 Windows Update <br/>31-12-2013 21:37:50 Windows Update <br/>03-01-2014 23:04:36 Windows Update <br/>05-01-2014 07:21:04 Removed ATI Catalyst Install Manager <br/>05-01-2014 16:06:04 Removed Java 7 Update 45 <br/>05-01-2014 16:07:59 Removed Java(TM) 6 Update 35 <br/>05-01-2014 16:31:20 Installed Java 7 Update 45 <br/>05-01-2014 18:40:50 Removed Google Earth. <br/>05-01-2014 18:41:58 Removed Google Earth. <br/>05-01-2014 18:44:17 Removed iTunes <br/>05-01-2014 18:49:26 Removed Serif PhotoPlus X4 <br/>05-01-2014 18:56:01 Removed Norton Online Backup <br/>05-01-2014 18:56:49 Removed Skype™ 5.10 <br/>05-01-2014 18:59:56 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 <br/>06-01-2014 18:12:10 Installed SpyHunter <br/>06-01-2014 22:05:21 Removed SpyHunter <br/>06-01-2014 22:08:41 Removed Contrôle ActiveX Windows Live Mesh pour connexions à distance <br/>06-01-2014 22:10:46 Removed Windows Live Mesh ActiveX Control for Remote Connections <br/> <br/>==================== Hosts content: ========================== <br/> <br/>2009-07-13 20:34 - 2009-06-10 15:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts <br/> <br/>==================== Scheduled Tasks (whitelisted) ============= <br/> <br/>Task: {126BC9B7-2FA6-40C7-9F7A-B113B8FC9A50} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000Core => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-01] (Google Inc.) <br/>Task: {516A24A7-6BD4-4FC7-A1EA-F4690FEB6E3B} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-92465838-1376508428-2459836927-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe <br/>Task: {6DE2751C-D353-477E-8717-093095C422D5} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-05-20] (Acer Incorporated) <br/>Task: {86E30AC2-F1A5-469F-85D0-AB023ABB3795} - System32\Tasks\HPCustParticipation HP Deskjet 1000 J110 series => C:\Program Files\HP\HP Deskjet 1000 J110 series\Bin\HPCustPartic.exe [2010-06-14] (Hewlett-Packard Co.) <br/>Task: {AB9D3CC2-A1F8-474F-A180-E94232922004} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-13] (Google Inc.) <br/>Task: {B0693EDA-A099-4F09-A68C-DB1FCC0DE07E} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-05-20] (CyberLink Corp.) <br/>Task: {B5069E2D-8DF0-4616-8F97-BFCABAF5EF19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-06] (Adobe Systems Incorporated) <br/>Task: {B643E6E6-76A7-4CB2-BE5B-E09EABB8206E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) <br/>Task: {B9C05D8D-29ED-4DD2-9B86-3947F22EA275} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-13] (Google Inc.) <br/>Task: {C08B1EAA-6927-4AFF-8A7A-49C244F828A8} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-05-20] (CyberLink) <br/>Task: {D5D8917E-B283-4482-B6A6-281C1C22FD79} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe <br/>Task: {EC13C57F-FAB1-4F34-BE20-31E16AB4114E} - System32\Tasks\PinItAutoUpdate => C:\Program Files (x86)\Pinterest\Pin It\AutoUpdater.exe [2013-10-17] () <br/>Task: {FAB95571-8E7C-4DEB-A41E-B4B63A5D40A4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000UA => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-01] (Google Inc.) <br/>Task: {FC1A9809-563F-4FE9-B15F-139219D47ADF} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-92465838-1376508428-2459836927-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe <br/>Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000Core.job => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000UA.job => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe <br/> <br/>==================== Loaded Modules (whitelisted) ============= <br/> <br/>2014-01-04 21:19 - 2014-01-04 21:12 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll <br/>2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll <br/>2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll <br/>2011-04-23 19:29 - 2011-04-23 19:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll <br/>2011-04-23 19:29 - 2011-04-23 19:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll <br/>2011-04-23 19:29 - 2011-04-23 19:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll <br/>2013-02-27 13:33 - 2013-02-27 13:33 - 10683392 _____ () C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\QtWebKit4.dll <br/>2013-02-27 13:32 - 2013-02-27 13:32 - 07741952 _____ () C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\QtGui4.dll <br/>2013-02-27 13:32 - 2013-02-27 13:32 - 02248192 _____ () C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\QtCore4.dll <br/>2013-02-27 13:33 - 2013-02-27 13:33 - 01681408 _____ () C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\QtNetwork4.dll <br/>2013-11-11 19:03 - 2013-11-11 19:03 - 00117248 _____ () C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\libaacdec.dll <br/>2013-11-11 19:04 - 2013-11-11 19:04 - 00231936 _____ () C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\libmpgdec.dll <br/>2013-11-11 19:03 - 2013-11-11 19:03 - 00253440 _____ () C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\libid3tag.dll <br/>2013-11-11 19:05 - 2013-11-11 19:05 - 00344064 _____ () C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\libaudioenc.dll <br/>2013-02-27 13:33 - 2013-02-27 13:33 - 00026624 _____ () C:\Users\Jill\AppData\Local\Programs\Google\MusicManager\imageformats\qgif4.dll <br/>2011-05-20 12:13 - 2011-05-20 12:13 - 00206216 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll <br/> <br/>==================== Alternate Data Streams (whitelisted) ========= <br/> <br/>AlternateDataStreams: C:\ProgramData\Temp:D346F792 <br/> <br/>==================== Safe Mode (whitelisted) =================== <br/> <br/> <br/>==================== Faulty Device Manager Devices ============= <br/> <br/>Name: Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20) <br/>Description: Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20) <br/>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} <br/>Manufacturer: Atheros <br/>Service: L1C <br/>Problem: : This device is disabled. (Code 22) <br/>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. <br/> <br/> <br/>==================== Event log errors: ========================= <br/> <br/>Application errors: <br/>================== <br/>Error: (01/07/2014 05:59:57 AM) (Source: WinMgmt) (User: ) <br/>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 <br/> <br/>Error: (01/06/2014 09:47:52 PM) (Source: Application Error) (User: ) <br/>Description: Faulting application name: PmmUpdate.exe, version: 1.1.41.0, time stamp: 0x4d907469 <br/>Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f <br/>Exception code: 0xc0000005 <br/>Fault offset: 0x00039342 <br/>Faulting process id: 0xbb4 <br/>Faulting application start time: 0xPmmUpdate.exe0 <br/>Faulting application path: PmmUpdate.exe1 <br/>Faulting module path: PmmUpdate.exe2 <br/>Report Id: PmmUpdate.exe3 <br/> <br/>Error: (01/06/2014 08:05:06 PM) (Source: Bonjour Service) (User: ) <br/>Description: Task Scheduling Error: m->NextScheduledSPRetry 12761 <br/> <br/>Error: (01/06/2014 08:05:06 PM) (Source: Bonjour Service) (User: ) <br/>Description: Task Scheduling Error: m->NextScheduledEvent 12761 <br/> <br/>Error: (01/06/2014 08:05:06 PM) (Source: Bonjour Service) (User: ) <br/>Description: Task Scheduling Error: Continuously busy for more than a second <br/> <br/>Error: (01/06/2014 08:05:04 PM) (Source: Bonjour Service) (User: ) <br/>Description: Task Scheduling Error: m->NextScheduledSPRetry 10811 <br/> <br/>Error: (01/06/2014 08:05:04 PM) (Source: Bonjour Service) (User: ) <br/>Description: Task Scheduling Error: m->NextScheduledEvent 10811 <br/> <br/>Error: (01/06/2014 08:05:04 PM) (Source: Bonjour Service) (User: ) <br/>Description: Task Scheduling Error: Continuously busy for more than a second <br/> <br/>Error: (01/06/2014 08:04:57 PM) (Source: Bonjour Service) (User: ) <br/>Description: Task Scheduling Error: m->NextScheduledSPRetry 3432 <br/> <br/>Error: (01/06/2014 08:04:57 PM) (Source: Bonjour Service) (User: ) <br/>Description: Task Scheduling Error: m->NextScheduledEvent 3432 <br/> <br/> <br/>System errors: <br/>============= <br/>Error: (01/06/2014 11:00:57 PM) (Source: DCOM) (User: ) <br/>Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} <br/> <br/>Error: (01/06/2014 00:40:04 PM) (Source: Service Control Manager) (User: ) <br/>Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service. <br/> <br/>Error: (01/05/2014 05:10:27 PM) (Source: DCOM) (User: ) <br/>Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} <br/> <br/>Error: (01/05/2014 05:10:24 PM) (Source: Service Control Manager) (User: ) <br/>Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service. <br/> <br/>Error: (01/05/2014 03:12:43 PM) (Source: DCOM) (User: ) <br/>Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} <br/> <br/>Error: (01/05/2014 00:43:31 PM) (Source: Service Control Manager) (User: ) <br/>Description: The ScRegSetValueExW call failed for DeleteFlag with the following error: <br/>%%5 <br/> <br/>Error: (01/05/2014 00:41:30 PM) (Source: Service Control Manager) (User: ) <br/>Description: The ScRegSetValueExW call failed for DeleteFlag with the following error: <br/>%%5 <br/> <br/>Error: (01/05/2014 10:10:24 AM) (Source: DCOM) (User: ) <br/>Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} <br/> <br/>Error: (01/05/2014 09:34:07 AM) (Source: DCOM) (User: ) <br/>Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} <br/> <br/>Error: (01/05/2014 01:06:22 AM) (Source: DCOM) (User: ) <br/>Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} <br/> <br/> <br/>Microsoft Office Sessions: <br/>========================= <br/>Error: (01/07/2014 05:59:57 AM) (Source: WinMgmt)(User: ) <br/>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 <br/> <br/>Error: (01/06/2014 09:47:52 PM) (Source: Application Error)(User: ) <br/>Description: PmmUpdate.exe1.1.41.04d907469ole32.dll6.1.7601.175144ce7b96fc000000500039342bb401cf0a5b17422e74C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exeC:\Windows\syswow64\ole32.dll7b767efa-774e-11e3-819f-a0f688681e67 <br/> <br/>Error: (01/06/2014 08:05:06 PM) (Source: Bonjour Service)(User: ) <br/>Description: Task Scheduling Error: m->NextScheduledSPRetry 12761 <br/> <br/>Error: (01/06/2014 08:05:06 PM) (Source: Bonjour Service)(User: ) <br/>Description: Task Scheduling Error: m->NextScheduledEvent 12761 <br/> <br/>Error: (01/06/2014 08:05:06 PM) (Source: Bonjour Service)(User: ) <br/>Description: Task Scheduling Error: Continuously busy for more than a second <br/> <br/>Error: (01/06/2014 08:05:04 PM) (Source: Bonjour Service)(User: ) <br/>Description: Task Scheduling Error: m->NextScheduledSPRetry 10811 <br/> <br/>Error: (01/06/2014 08:05:04 PM) (Source: Bonjour Service)(User: ) <br/>Description: Task Scheduling Error: m->NextScheduledEvent 10811 <br/> <br/>Error: (01/06/2014 08:05:04 PM) (Source: Bonjour Service)(User: ) <br/>Description: Task Scheduling Error: Continuously busy for more than a second <br/> <br/>Error: (01/06/2014 08:04:57 PM) (Source: Bonjour Service)(User: ) <br/>Description: Task Scheduling Error: m->NextScheduledSPRetry 3432 <br/> <br/>Error: (01/06/2014 08:04:57 PM) (Source: Bonjour Service)(User: ) <br/>Description: Task Scheduling Error: m->NextScheduledEvent 3432 <br/> <br/> <br/>==================== Memory info =========================== <br/> <br/>Percentage of memory in use: 41% <br/>Total physical RAM: 3818.9 MB <br/>Available physical RAM: 2242.14 MB <br/>Total Pagefile: 7635.98 MB <br/>Available Pagefile: 5641.77 MB <br/>Total Virtual: 8192 MB <br/>Available Virtual: 8191.79 MB <br/> <br/>==================== Drives ================================ <br/> <br/>Drive c: (Acer) (Fixed) (Total:450.66 GB) (Free:400.89 GB) NTFS <br/> <br/>==================== MBR & Partition Table ================== <br/> <br/>======================================================== <br/>Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: CD7BD928) <br/>Partition 1: (Not Active) - (Size=15 GB) - (Type=27) <br/>Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) <br/>Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS) <br/> <br/>==================== End Of Log ============================
Posted 1/7/2014 2:15 PM
#96412
User avatar

Touch Advanced member

Date Joined Nov 2016
Total Posts: 12976
Open notepad. Please copy the text below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad. <br/> <br/>************************************ <br/> <br/> <br/>start <br/>HKLM-x32\...\Run: [WinampAgent] - "C:\Program Files (x86)\Winamp\winampa.exe" <br/>HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2010-03-12] (Hewlett-Packard) <br/>HKLM-x32\...\Run: [] - [x] <br/>HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated) <br/>HKLM-x32\...\Run: [autoauto] - C:\Windows\\SysWOW64\c.bat [65 2012-10-05] () <br/>HKLM-x32\...\Run: [ooo] - C:\Windows\\SysWOW64\ttt.bat [68 2013-10-09] () <br/>URLSearchHook: HKLM-x32 - (No Name) - {707dca12-3f99-4d94-afea-06dcc0ae0108} - No File <br/>URLSearchHook: HKCU - (No Name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File <br/>URLSearchHook: HKCU - (No Name) - {707dca12-3f99-4d94-afea-06dcc0ae0108} - No File <br/>SearchScopes: HKLM-x32 - DefaultScope {99D265A1-E28A-4D18-9912-FD08A7A86CF7} URL = <br/>SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = <br/>SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = <br/>SearchScopes: HKCU - {F180E262-278C-46BC-9252-E75F90F65752} URL = https://www.google.com/search?q={searchTerms} <br/>S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] <br/>S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [x] <br/>S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [x] <br/>S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [x] <br/>C:\Users\Jill\AppData\Local\Temp\avgnt.exe <br/>C:\Users\Jill\AppData\Local\Temp\SHSetup.exe <br/>C:\Users\Jill\AppData\Local\Temp\~SpUnin~.exe <br/>Task: {126BC9B7-2FA6-40C7-9F7A-B113B8FC9A50} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000Core => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-01] (Google Inc.) <br/>Task: {516A24A7-6BD4-4FC7-A1EA-F4690FEB6E3B} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-92465838-1376508428-2459836927-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe <br/>Task: {6DE2751C-D353-477E-8717-093095C422D5} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-05-20] (Acer Incorporated) <br/>Task: {86E30AC2-F1A5-469F-85D0-AB023ABB3795} - System32\Tasks\HPCustParticipation HP Deskjet 1000 J110 series => C:\Program Files\HP\HP Deskjet 1000 J110 series\Bin\HPCustPartic.exe [2010-06-14] (Hewlett-Packard Co.) <br/>Task: {AB9D3CC2-A1F8-474F-A180-E94232922004} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-13] (Google Inc.) <br/>Task: {B0693EDA-A099-4F09-A68C-DB1FCC0DE07E} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-05-20] (CyberLink Corp.) <br/>Task: {B5069E2D-8DF0-4616-8F97-BFCABAF5EF19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-06] (Adobe Systems Incorporated) <br/>Task: {B643E6E6-76A7-4CB2-BE5B-E09EABB8206E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) <br/>Task: {B9C05D8D-29ED-4DD2-9B86-3947F22EA275} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-13] (Google Inc.) <br/>Task: {C08B1EAA-6927-4AFF-8A7A-49C244F828A8} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-05-20] (CyberLink) <br/>Task: {D5D8917E-B283-4482-B6A6-281C1C22FD79} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe <br/>Task: {EC13C57F-FAB1-4F34-BE20-31E16AB4114E} - System32\Tasks\PinItAutoUpdate => C:\Program Files (x86)\Pinterest\Pin It\AutoUpdater.exe [2013-10-17] () <br/>Task: {FAB95571-8E7C-4DEB-A41E-B4B63A5D40A4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000UA => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-01] (Google Inc.) <br/>Task: {FC1A9809-563F-4FE9-B15F-139219D47ADF} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-92465838-1376508428-2459836927-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe <br/>Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000Core.job => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000UA.job => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe <br/>AlternateDataStreams: C:\ProgramData\Temp:D346F792 <br/>C:\Windows\\SysWOW64\c.bat [65 2012-10-05] () <br/>C:\Windows\\SysWOW64\ttt.bat <br/>end <br/> <br/>**************************************** <br/> <br/> <br/>NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system <br/>[/b][/color] <br/> <br/> <br/> <br/>Run FRST/FRST64 and press the Fix button just once and wait, reboot if asked. <br/> <br/> <br/>It wil produce a Fixlog on your Desktop, please post it in next reply, along with -> <br/> <br/> <br/> <br/>Download -> <br/> <br/>http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner <br/> <br/> <br/>• Double click on AdwCleaner.exe to run the tool.  <br/>***Note: Windows Vista and Windows 7 users:  <br/>Right click in the adwCleaner.exe and select – Run as admin  <br/>• Click Delete.  <br/>• Everything that was found will be deleted.  <br/>• Save any open files and approve the reboot. A text file will open after the restart.  <br/> <br/> <br/> <br/>Next - <br/>Junkware Removal Tool by thisisu <br/> <br/>Download: http://www.bleepingcomputer.com/download/junkware-removal-tool/ <br/> <br/> <br/>Disable your Antivirus program if required <br/>For vista and windows 7 right click on the tool and select run as administrator <br/>After the scan is completed, post the generated log here.

[color=black face="Courier New" sab="311">[2]Click here: Before-posting-a-log[/2][/url]

<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />
[/color]
Do not PM me with logfiles. They will be deleted.


Posted 1/8/2014 12:24 AM
#96413
User avatar

mcgilstl Member

Date Joined Nov 2016
Total Posts: 7
FixLog: <br/> <br/>Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-01-2014 <br/>Ran by Jill at 2014-01-07 17:40:49 Run:1 <br/>Running from C:\Users\Jill\Downloads <br/>Boot Mode: Normal <br/>============================================== <br/> <br/>Content of fixlist: <br/>***************** <br/>start <br/>HKLM-x32\...\Run: [WinampAgent] - "C:\Program Files (x86)\Winamp\winampa.exe" <br/>HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2010-03-12] (Hewlett-Packard) <br/>HKLM-x32\...\Run: [] - [x] <br/>HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated) <br/>HKLM-x32\...\Run: [autoauto] - C:\Windows\\SysWOW64\c.bat [65 2012-10-05] () <br/>HKLM-x32\...\Run: [ooo] - C:\Windows\\SysWOW64\ttt.bat [68 2013-10-09] () <br/>URLSearchHook: HKLM-x32 - (No Name) - {707dca12-3f99-4d94-afea-06dcc0ae0108} - No File <br/>URLSearchHook: HKCU - (No Name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File <br/>URLSearchHook: HKCU - (No Name) - {707dca12-3f99-4d94-afea-06dcc0ae0108} - No File <br/>SearchScopes: HKLM-x32 - DefaultScope {99D265A1-E28A-4D18-9912-FD08A7A86CF7} URL = <br/>SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = <br/>SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = <br/>SearchScopes: HKCU - {F180E262-278C-46BC-9252-E75F90F65752} URL = https://www.google.com/search?q={searchTerms} <br/>S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] <br/>S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [x] <br/>S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [x] <br/>S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [x] <br/>C:\Users\Jill\AppData\Local\Temp\avgnt.exe <br/>C:\Users\Jill\AppData\Local\Temp\SHSetup.exe <br/>C:\Users\Jill\AppData\Local\Temp\~SpUnin~.exe <br/>Task: {126BC9B7-2FA6-40C7-9F7A-B113B8FC9A50} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000Core => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-01] (Google Inc.) <br/>Task: {516A24A7-6BD4-4FC7-A1EA-F4690FEB6E3B} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-92465838-1376508428-2459836927-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe <br/>Task: {6DE2751C-D353-477E-8717-093095C422D5} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-05-20] (Acer Incorporated) <br/>Task: {86E30AC2-F1A5-469F-85D0-AB023ABB3795} - System32\Tasks\HPCustParticipation HP Deskjet 1000 J110 series => C:\Program Files\HP\HP Deskjet 1000 J110 series\Bin\HPCustPartic.exe [2010-06-14] (Hewlett-Packard Co.) <br/>Task: {AB9D3CC2-A1F8-474F-A180-E94232922004} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-13] (Google Inc.) <br/>Task: {B0693EDA-A099-4F09-A68C-DB1FCC0DE07E} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-05-20] (CyberLink Corp.) <br/>Task: {B5069E2D-8DF0-4616-8F97-BFCABAF5EF19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-06] (Adobe Systems Incorporated) <br/>Task: {B643E6E6-76A7-4CB2-BE5B-E09EABB8206E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) <br/>Task: {B9C05D8D-29ED-4DD2-9B86-3947F22EA275} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-13] (Google Inc.) <br/>Task: {C08B1EAA-6927-4AFF-8A7A-49C244F828A8} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-05-20] (CyberLink) <br/>Task: {D5D8917E-B283-4482-B6A6-281C1C22FD79} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe <br/>Task: {EC13C57F-FAB1-4F34-BE20-31E16AB4114E} - System32\Tasks\PinItAutoUpdate => C:\Program Files (x86)\Pinterest\Pin It\AutoUpdater.exe [2013-10-17] () <br/>Task: {FAB95571-8E7C-4DEB-A41E-B4B63A5D40A4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000UA => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-01] (Google Inc.) <br/>Task: {FC1A9809-563F-4FE9-B15F-139219D47ADF} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-92465838-1376508428-2459836927-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe <br/>Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000Core.job => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe <br/>Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000UA.job => C:\Users\Jill\AppData\Local\Google\Update\GoogleUpdate.exe <br/>AlternateDataStreams: C:\ProgramData\Temp:D346F792 <br/>C:\Windows\\SysWOW64\c.bat [65 2012-10-05] () <br/>C:\Windows\\SysWOW64\ttt.bat <br/>end <br/>***************** <br/> <br/>HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\WinampAgent => Value deleted successfully. <br/>HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\HP Software Update => Value deleted successfully. <br/>HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. <br/>HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully. <br/>HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\autoauto => Value deleted successfully. <br/>HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ooo => Value deleted successfully. <br/>HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{707dca12-3f99-4d94-afea-06dcc0ae0108} => Value deleted successfully. <br/>HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{687578b9-7132-4a7a-80e4-30ee31099e03} => Value deleted successfully. <br/>HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{707dca12-3f99-4d94-afea-06dcc0ae0108} => Value deleted successfully. <br/>HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. <br/>HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. <br/>HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. <br/>HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. <br/>HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F180E262-278C-46BC-9252-E75F90F65752} => Key deleted successfully. <br/>HKCR\CLSID\{F180E262-278C-46BC-9252-E75F90F65752} => Key not found. <br/>esgiguard => Service deleted successfully. <br/>MREMPR5 => Service deleted successfully. <br/>MRENDIS5 => Service deleted successfully. <br/>RimUsb => Service deleted successfully. <br/>C:\Users\Jill\AppData\Local\Temp\avgnt.exe => Moved successfully. <br/>C:\Users\Jill\AppData\Local\Temp\SHSetup.exe => Moved successfully. <br/>C:\Users\Jill\AppData\Local\Temp\~SpUnin~.exe => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{126BC9B7-2FA6-40C7-9F7A-B113B8FC9A50} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{126BC9B7-2FA6-40C7-9F7A-B113B8FC9A50} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000Core => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000Core => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{516A24A7-6BD4-4FC7-A1EA-F4690FEB6E3B} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{516A24A7-6BD4-4FC7-A1EA-F4690FEB6E3B} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-92465838-1376508428-2459836927-1000 => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RealPlayerRealUpgradeScheduledTaskS-1-5-21-92465838-1376508428-2459836927-1000 => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6DE2751C-D353-477E-8717-093095C422D5} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6DE2751C-D353-477E-8717-093095C422D5} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\clear.fi => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\clear.fi => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{86E30AC2-F1A5-469F-85D0-AB023ABB3795} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{86E30AC2-F1A5-469F-85D0-AB023ABB3795} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\HPCustParticipation HP Deskjet 1000 J110 series => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HPCustParticipation HP Deskjet 1000 J110 series => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AB9D3CC2-A1F8-474F-A180-E94232922004} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AB9D3CC2-A1F8-474F-A180-E94232922004} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B0693EDA-A099-4F09-A68C-DB1FCC0DE07E} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0693EDA-A099-4F09-A68C-DB1FCC0DE07E} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\clear.fiAgent => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\clear.fiAgent => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B5069E2D-8DF0-4616-8F97-BFCABAF5EF19} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B5069E2D-8DF0-4616-8F97-BFCABAF5EF19} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\Adobe Flash Player Updater => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B643E6E6-76A7-4CB2-BE5B-E09EABB8206E} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B643E6E6-76A7-4CB2-BE5B-E09EABB8206E} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\CCleanerSkipUAC => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B9C05D8D-29ED-4DD2-9B86-3947F22EA275} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B9C05D8D-29ED-4DD2-9B86-3947F22EA275} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C08B1EAA-6927-4AFF-8A7A-49C244F828A8} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C08B1EAA-6927-4AFF-8A7A-49C244F828A8} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\DMREngine => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DMREngine => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D5D8917E-B283-4482-B6A6-281C1C22FD79} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D5D8917E-B283-4482-B6A6-281C1C22FD79} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\avast! Emergency Update => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avast! Emergency Update => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EC13C57F-FAB1-4F34-BE20-31E16AB4114E} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EC13C57F-FAB1-4F34-BE20-31E16AB4114E} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\PinItAutoUpdate => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PinItAutoUpdate => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FAB95571-8E7C-4DEB-A41E-B4B63A5D40A4} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FAB95571-8E7C-4DEB-A41E-B4B63A5D40A4} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000UA => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000UA => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FC1A9809-563F-4FE9-B15F-139219D47ADF} => Key deleted successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FC1A9809-563F-4FE9-B15F-139219D47ADF} => Key deleted successfully. <br/>C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-92465838-1376508428-2459836927-1000 => Moved successfully. <br/>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RealPlayerRealUpgradeLogonTaskS-1-5-21-92465838-1376508428-2459836927-1000 => Key deleted successfully. <br/>C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully. <br/>C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully. <br/>C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully. <br/>C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000Core.job => Moved successfully. <br/>C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92465838-1376508428-2459836927-1000UA.job => Moved successfully. <br/>C:\ProgramData\Temp => ":D346F792" ADS removed successfully. <br/>"C:\Windows\\SysWOW64\c.bat [65 2012-10-05] ()" => File/Directory not found. <br/>C:\Windows\\SysWOW64\ttt.bat => Moved successfully. <br/> <br/>==== End of Fixlog ==== <br/> <br/>ADWCleaner log: <br/> <br/># AdwCleaner v3.016 - Report created 07/01/2014 at 17:45:26 <br/># Updated 23/12/2013 by Xplode <br/># Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) <br/># Username : Jill - JILL-PC <br/># Running from : C:\Users\Jill\Downloads\adwcleaner.exe <br/># Option : Clean <br/> <br/>***** [ Services ] ***** <br/> <br/> <br/>***** [ Files / Folders ] ***** <br/> <br/>Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoom Downloader <br/>Folder Deleted : C:\Program Files (x86)\Zoom Downloader <br/>Folder Deleted : C:\Users\Jill\AppData\Local\NativeMessaging <br/>Folder Deleted : C:\Users\Jill\AppData\Local\Zoom_Downloader <br/>Folder Deleted : C:\Users\Jill\AppData\LocalLow\SweetPacks_A11 <br/>File Deleted : C:\Users\Jill\AppData\Roaming\Mozilla\Firefox\Profiles\0\searchplugins\safeguard-secure-search.xml <br/>File Deleted : C:\Users\Jill\AppData\Roaming\Mozilla\Firefox\Profiles\0\user.js <br/>File Deleted : C:\Users\Jill\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js <br/> <br/>***** [ Shortcuts ] ***** <br/> <br/> <br/>***** [ Registry ] ***** <br/> <br/>Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DownloadManager] <br/>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} <br/>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826} <br/>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} <br/>Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D} <br/>Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D} <br/>Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D} <br/>Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{250BECD2-5C43-48CF-A3C6-666338526D67} <br/>Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{47C9C039-7E25-4C41-BBBF-F376DC30006D} <br/>Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34A2F59C-9D17-4ED0-9B23-423E080D0601} <br/>Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}] <br/>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} <br/>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} <br/>Key Deleted : HKCU\Software\AppDataLow\Software\SweetPacks_A11 <br/>Key Deleted : HKLM\Software\SweetPacks_A11 <br/>Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer <br/> <br/>***** [ Browsers ] ***** <br/> <br/>-\\ Internet Explorer v11.0.9600.16428 <br/> <br/> <br/>-\\ Mozilla Firefox v <br/> <br/>[ File : C:\Users\Jill\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js ] <br/> <br/>Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search"); <br/> <br/>[ File : C:\Users\Jill\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js ] <br/> <br/> <br/>************************* <br/> <br/>AdwCleaner[R0].txt - [2991 octets] - [07/01/2014 17:43:19] <br/>AdwCleaner[S0].txt - [2960 octets] - [07/01/2014 17:45:26] <br/> <br/>########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3020 octets] ########## <br/> <br/>JRT LOG: <br/> <br/>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ <br/>Junkware Removal Tool (JRT) by Thisisu <br/>Version: 6.0.9 (01.01.2014:1) <br/>OS: Windows 7 Home Premium x64 <br/>Ran by Jill on Tue 01/07/2014 at 17:53:41.52 <br/>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ <br/> <br/> <br/> <br/> <br/>~~~ Services <br/> <br/> <br/> <br/>~~~ Registry Values <br/> <br/> <br/> <br/>~~~ Registry Keys <br/> <br/> <br/> <br/>~~~ Files <br/> <br/> <br/> <br/>~~~ Folders <br/> <br/>Successfully deleted: [Folder] "C:\ProgramData\apn" <br/> <br/> <br/> <br/>~~~ Event Viewer Logs were cleared <br/> <br/> <br/> <br/> <br/> <br/>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ <br/>Scan was completed on Tue 01/07/2014 at 18:20:28.70 <br/>End of JRT log <br/>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Posted 1/8/2014 8:51 AM
#96416
User avatar

Touch Advanced member

Date Joined Nov 2016
Total Posts: 12976
Please tell how things are running now ?

[color=black face="Courier New" sab="311">[2]Click here: Before-posting-a-log[/2][/url]

<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />
[/color]
Do not PM me with logfiles. They will be deleted.


Posted 1/8/2014 12:36 PM
#96419
User avatar

mcgilstl Member

Date Joined Nov 2016
Total Posts: 7
It seems to be running great! I downloaded and reinstalled Chrome so hopefully it doesn't have any issues. Thank you so, so much for your help - you have no idea how much I appreciate it!
Posted 1/8/2014 4:04 PM
#96420
User avatar

Touch Advanced member

Date Joined Nov 2016
Total Posts: 12976
Sounds good the computer is running great :smile: <br/> <br/> <br/> <br/> <br/>Let's clear the tools: <br/> <br/> <br/>Please download Delfix <br/> <br/>by "Xplode" to your Desktop. <br/> <br/>Run the tool and check the following boxes below; <br/> <br/>Remove disinfection tools <br/>Create registry backup <br/>Purge System Restore <br/> <br/> <br/>Now click on "Run" button. Wait for the programme completes his work. <br/>All the tools we used should be gone. <br/>Tool will create and open an log report (DelFix.txt) <br/>Note: The report will also be stored on C:\DelFix.txt <br/> <br/> <br/>> I don't need DelFix log report. <br/> <br/> <br/>I´ll lock this topic, if you need it reopened, please PM me

[color=black face="Courier New" sab="311">[2]Click here: Before-posting-a-log[/2][/url]

<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />
[/color]
Do not PM me with logfiles. They will be deleted.


  • Unread posts or replies
  • No unread posts or replies
  • Unread Posts (Read Only Forum)
  • No Unread Posts (Read Only Forum)

Forum Information

Currently it is Wednesday, December 7, 2016, 9:19 PM (GMT +1)
There are a total of 61,160 posts in 13,449 threads.
In the last 3 days there were 0 new threads and 0 reply posts.

Who's online

This forum has 37,967 registered members. Please welcome our newest member, ConcepcionJAbbate.
There are currently no users on-line.