Jump to content


Photo

C: drive space reducing


  • This topic is locked This topic is locked
16 replies to this topic

#1 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 18 May 2014 - 01:35 AM

Hi

 

Recently i find my C:drive space reducing without installing any software.I use windows 8.1 OS with 3GB RAM and 160GB HDD.My C:drive allocation is about 40GB. and now the drive shows about 250MB of free space.Here i'm attaching Malware Bytes log and security check log

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 18-May-14
Scan Time: 12:26:33 PM
Logfile: malwarebytes.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.05.18.02
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 8.1
CPU: x86
File System: NTFS
User: Samrat

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 288405
Time Elapsed: 30 min, 2 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

 

 Results of screen317's Security Check version 0.99.83  
   x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
Kaspersky Internet Security   
Windows Defender              
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:`````````
 CCleaner     
 JavaFX 2.1.1    
 Java 8    
 Java version out of Date!
 Adobe Flash Player     13.0.0.214  
 Adobe Reader XI  
 Mozilla Firefox (29.0.1)
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamscheduler.exe   
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avp.exe  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avpui.exe  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 wmi32.exe  
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C::  
````````````````````End of Log``````````````````````
 


Edited by koolsam, 18 May 2014 - 04:59 AM.


#2 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 19 May 2014 - 12:45 AM

# AdwCleaner v3.209 - Report created 19/05/2014 at 12:03:34
# Updated 18/05/2014 by Xplode
# Operating System : Windows 8.1 Pro  (32 bits)
# Username : Samrat - SAMRAT-PC
# Running from : C:\Users\Samrat\Downloads\Programs\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Samrat\AppData\Local\SwvUpdater
Folder Deleted : C:\Users\Samrat\AppData\Roaming\Oxy
Folder Deleted : C:\Users\Samrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
File Deleted : C:\WINDOWS\Tasks\Dealply.job
File Deleted : C:\WINDOWS\System32\Tasks\Dealply
File Deleted : C:\WINDOWS\System32\Tasks\GoforFilesUpdate
File Deleted : C:\WINDOWS\System32\Tasks\Your File Updater

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj
Key Deleted : HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E7235E23-C35F-4E09-9374-84D106267B24}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7235E23-C35F-4E09-9374-84D106267B24}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BBCF2D1C-F842-4C97-B9E7-1E8F7B7CEF4D}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BBCF2D1C-F842-4C97-B9E7-1E8F7B7CEF4D}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A2E6E08A-89B3-4AF0-B117-41CC6965C68A}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A2E6E08A-89B3-4AF0-B117-41CC6965C68A}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2E2191AE-796A-4E59-ADA9-8FE771564FEE}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E2191AE-796A-4E59-ADA9-8FE771564FEE}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BA3AB927-5BC5-4BC2-A43E-A6D1410532C7}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BA3AB927-5BC5-4BC2-A43E-A6D1410532C7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dealplylive.exe
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\webcakeupdater
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A0B10EBE-4E51-4CAE-949B-E6B9E7D68CEA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F511AFDB-726E-4458-90E7-1ECB97406544}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Key Deleted : HKCU\Software\Escolade
Key Deleted : HKCU\Software\GoforFiles
Key Deleted : HKLM\Software\BetterSurf
Key Deleted : HKLM\Software\GoforFiles

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17037


-\\ Mozilla Firefox v29.0.1 (en-US)

[ File : C:\Users\Samrat\AppData\Roaming\Mozilla\Firefox\Profiles\uiyrbsa7.default-1391762422109\prefs.js ]


-\\ Google Chrome v

[ File : C:\Users\Samrat\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Extension] : ejpbbhjlbipncjklfjjaedaieimbmdda
Deleted [Extension] : fjoijdanhaiflhibkljeklcghcmmfffh

*************************

AdwCleaner[R0].txt - [3733 octets] - [19/05/2014 12:00:17]
AdwCleaner[S0].txt - [3760 octets] - [19/05/2014 12:03:34]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3820 octets] ##########
 



#3 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,222 posts

Posted 19 May 2014 - 06:22 AM

Hello, Welcome to SpywareInfoForum.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Try this first.
How to Run Disk Cleanup in Windows 8
http://helpdeskgeek....p-in-windows-8/
===

Then run these tools and post the logs for my review.

--RogueKiller--
  • Download & SAVE to your Desktop For 32bit system or For 64bit system
  • Quit all programs that you may have started.
  • Please disconnect any USB or external drives from the computer before you run this scan!
  • For Vista or Windows 7, right-click and select "Run as Administrator to start"
  • For Windows XP, double-click to start.
  • Wait until Prescan has finished ...
  • Then Click on "Scan" button
  • Wait until the Status box shows "Scan Finished"
  • click on "delete"
  • Wait until the Status box shows "Deleting Finished"
  • Click on "Report" and copy/paste the content of the Notepad into your next reply.
  • The log should be found in RKreport[1].txt on your Desktop
  • Exit/Close RogueKiller+
=======

Download the correct version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

===

Please paste the logs in your next reply DO NOT ATTACH THEM unless specified.

Let me know what problem persists.
nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760

#4 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 19 May 2014 - 08:15 AM

RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.co...es/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 8.1 (6.3.9200 ) 32 bits version
Started in : Normal mode
User : Samrat [Admin rights]
Mode : Remove -- Date : 05/19/2014 19:44:13
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 4 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> DELETED
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> DELETED
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection :  ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1       localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST3160215AS ATA Device +++++
--- User ---
[MBR] d88496d97ec111da6be6125a9bac031b
[BSP] f46963a893c004ba2563f21d3d2947b6 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 40435 MB
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 82815073 | Size: 112180 MB
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[0]_D_05192014_194413.txt >>
RKreport[0]_S_05192014_194145.txt


 



#5 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 19 May 2014 - 08:24 AM

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:17-05-2014
Ran by Samrat (administrator) on SAMRAT-PC on 19-05-2014 19:49:29
Running from C:\Users\Samrat\Desktop
Platform: Microsoft Windows 8.1 Pro (X86) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingc...can-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingc...can-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Apache Software Foundation) C:\Program Files\Apache Software Foundation\Tomcat 7.0\bin\Tomcat7.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Octoshape ApS) C:\Users\Samrat\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-Agent.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files\BlueStacks\HD-SharedFolder.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\RuntimeBroker.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-3559879560-2752497012-24936758-1001\...\Run: [Facebook Update] => C:\Users\Samrat\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
HKU\S-1-5-21-3559879560-2752497012-24936758-1001\...\Run: [Google Update] => C:\Users\Samrat\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-10-08] (Google Inc.)
HKU\S-1-5-21-3559879560-2752497012-24936758-1001\...\Run: [ApacheTomcatMonitor7.0_Tomcat7] => C:\Program Files\Apache Software Foundation\Tomcat 7.0\bin\Tomcat7w.exe [102400 2011-09-28] (Apache Software Foundation)
HKU\S-1-5-21-3559879560-2752497012-24936758-1001\...\Run: [Octoshape Streaming Services] => C:\Users\Samrat\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)
HKU\S-1-5-21-3559879560-2752497012-24936758-1001\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3829328 2014-03-19] (Tonec Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.in.msn.com/...IN&dcc=IN&opt=0
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US,en;q=0.5
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB6FD25062B90CE01
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {515B5412-F021-436B-B8C4-98DF57D18C2F} URL = http://in.search.yah...p={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: No Name - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -  No File
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - No Name - {eec0f710-38b5-4aba-99bf-ec87564a4e13} -  No File
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 202.53.8.8 202.53.8.9

FireFox:
========
FF ProfilePath: C:\Users\Samrat\AppData\Roaming\Mozilla\Firefox\Profiles\uiyrbsa7.default-1391762422109
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @alternatiff.com/AlternaTIFF - C:\Program Files\MIE\AlternaTIFF\npzzatif.dll (Medical Informatics Engineering, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Samrat\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Samrat\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Samrat\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Samrat\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Samrat\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Samrat\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF Plugin ProgramFiles/Appdata: C:\Users\Samrat\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Samrat\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Samrat\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-11-08]
FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKLM\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-12-26]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-12-26]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-12-26]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-12-26]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-12-26]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-11-08]
FF HKCU\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Samrat\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Samrat\AppData\Roaming\IDM\idmmzcc5 [2014-03-19]
FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Samrat\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Samrat\AppData\Roaming\IDM\idmmzcc5 [2014-03-19]

Chrome:
=======
CHR HomePage:
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.googl...mnlhhddbepgkeaa []
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-11-26]
CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-11-26]
CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-11-26]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-11-26]
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2014-02-21]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-11-26]

========================== Services (Whitelisted) =================

R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-11-26] (Kaspersky Lab ZAO)
R2 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
S2 KMService; C:\Windows\system32\srvany.exe [8192 2010-11-18] ()
S2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [762192 2013-07-18] (Nero AG)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14574368 2013-09-20] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
R2 Tomcat7; C:\Program Files\Apache Software Foundation\Tomcat 7.0\bin\Tomcat7.exe [74752 2011-09-28] (Apache Software Foundation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [279784 2014-03-24] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2014-03-24] (Microsoft Corporation)
S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1210368 2014-04-03] (Microsoft Corporation)
S2 HPSLPSVC; C:\Users\Samrat\AppData\Local\Temp\7zS5E15\hpslpsvc32.dll [X]

==================== Drivers (Whitelisted) ====================

R3 3xHybrid; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [1141888 2010-12-01] (NXP Semiconductors Germany GmbH)
R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-02-22] (Microsoft Corporation)
R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [106256 2013-12-20] (BlueStack Systems)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [137632 2012-10-19] (Windows ® Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [22432 2012-10-19] (Windows ® Win 7 DDK provider)
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [30616 2013-03-04] (Elaborate Bytes AG)
S3 gdrv; C:\Windows\gdrv.sys [16608 2010-02-23] (Windows ® 2000 DDK provider)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-24] (Intel Corporation)
S3 ivusb; C:\WINDOWS\System32\drivers\ivusb.sys [25112 2010-07-29] (Initio Corporation)
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [135776 2013-11-26] (Kaspersky Lab ZAO)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [24672 2013-11-26] (Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [552032 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [25696 2013-11-26] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [25184 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [25696 2013-11-26] (Kaspersky Lab ZAO)
R1 klpd; C:\WINDOWS\system32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [54880 2014-03-24] (Kaspersky Lab ZAO)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [144992 2013-12-26] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad32v.sys [33568 2013-08-20] (NVIDIA Corporation)
R3 tap0901; C:\WINDOWS\system32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [92504 2014-03-24] (Microsoft Corporation)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-03-13] (Microsoft Corporation)
S3 WUDFSensorLP; C:\WINDOWS\System32\drivers\WUDFRd.sys [187392 2013-08-22] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [187392 2013-08-22] (Microsoft Corporation)
U3 idsvc;
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [94304 2014-03-24] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-19 19:49 - 2014-05-19 19:49 - 00022045 _____ () C:\Users\Samrat\Desktop\FRST.txt
2014-05-19 19:48 - 2014-05-19 19:49 - 00000000 ____D () C:\FRST
2014-05-19 19:44 - 2014-05-19 19:44 - 00001756 _____ () C:\Users\Samrat\Desktop\RKreport[0]_D_05192014_194413.txt
2014-05-19 19:41 - 2014-05-19 19:41 - 00001703 _____ () C:\Users\Samrat\Desktop\RKreport[0]_S_05192014_194145.txt
2014-05-19 19:29 - 2014-05-19 19:46 - 00000000 ____D () C:\Users\Samrat\Desktop\RK_Quarantine
2014-05-19 19:27 - 2014-05-19 19:27 - 01056768 _____ (Farbar) C:\Users\Samrat\Desktop\FRST.exe
2014-05-19 19:26 - 2014-05-19 19:26 - 03972608 _____ () C:\Users\Samrat\Desktop\RogueKiller.exe
2014-05-19 12:47 - 2014-05-19 15:25 - 00065349 _____ () C:\WINDOWS\WindowsUpdate.log
2014-05-19 12:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\system32\sqlite3.dll
2014-05-19 12:00 - 2014-05-19 12:03 - 00000000 ____D () C:\AdwCleaner
2014-05-18 21:35 - 2014-05-18 21:35 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-05-18 21:35 - 2014-05-18 21:35 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-05-18 21:35 - 2014-05-18 21:35 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-05-18 21:35 - 2014-05-18 21:35 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-05-18 21:35 - 2014-05-18 21:35 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-05-18 21:35 - 2014-05-18 21:35 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-05-18 21:35 - 2014-05-18 21:35 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-05-18 21:35 - 2014-05-18 21:35 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-05-18 21:35 - 2014-05-18 21:35 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-05-18 21:35 - 2014-05-18 21:35 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-05-18 21:35 - 2014-05-18 21:35 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-05-18 21:35 - 2014-05-18 21:35 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-05-18 21:35 - 2014-05-18 21:35 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-05-18 21:35 - 2014-05-18 21:35 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-05-18 21:35 - 2014-05-18 21:35 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-05-18 21:35 - 2014-05-18 21:35 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-05-18 21:35 - 2014-05-18 21:35 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-05-18 21:35 - 2014-05-18 21:35 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-05-18 21:35 - 2014-05-18 21:35 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-05-18 21:35 - 2014-05-18 21:35 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-05-18 21:35 - 2014-05-18 21:35 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-05-18 21:35 - 2014-05-18 21:35 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-05-18 21:35 - 2014-05-18 21:35 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-05-18 21:35 - 2014-05-18 21:35 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-05-18 21:35 - 2014-05-18 21:35 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-05-18 21:35 - 2014-05-18 21:35 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-05-18 19:59 - 2014-04-18 19:13 - 00031064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-05-18 19:59 - 2014-04-18 18:59 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-05-18 19:59 - 2014-04-18 14:28 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-18 19:59 - 2014-04-18 14:21 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-05-18 19:59 - 2014-04-18 13:31 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-05-18 19:59 - 2014-04-18 13:21 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-05-18 19:59 - 2014-04-18 13:19 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-05-18 19:59 - 2014-04-14 13:31 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-05-18 19:59 - 2014-04-11 09:53 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-05-18 19:59 - 2014-04-11 08:57 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-05-18 19:59 - 2014-04-09 16:17 - 00294744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-05-18 19:59 - 2014-04-09 11:14 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-05-18 19:59 - 2014-04-09 09:31 - 01089536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-05-18 19:59 - 2014-04-09 08:52 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-05-18 19:59 - 2014-04-08 05:17 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-05-18 19:59 - 2014-04-06 20:57 - 00311128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-05-18 19:59 - 2014-04-06 20:57 - 00240472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-05-18 19:59 - 2014-04-06 20:53 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-05-18 19:59 - 2014-04-06 20:52 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-18 19:59 - 2014-04-06 20:52 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-05-18 19:59 - 2014-04-06 20:48 - 00271192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-05-18 19:59 - 2014-04-06 20:46 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-05-18 19:59 - 2014-04-06 20:46 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-05-18 19:59 - 2014-04-06 20:46 - 01159520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-05-18 19:59 - 2014-04-06 20:46 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-05-18 19:59 - 2014-04-06 20:46 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-05-18 19:59 - 2014-04-06 20:46 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-05-18 19:59 - 2014-04-06 20:46 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-05-18 19:59 - 2014-04-06 20:46 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-05-18 19:59 - 2014-04-06 20:46 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-05-18 19:59 - 2014-04-06 20:46 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-05-18 19:59 - 2014-04-06 20:46 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-05-18 19:59 - 2014-04-06 18:36 - 03497472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-05-18 19:59 - 2014-04-06 17:36 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-05-18 19:59 - 2014-04-06 17:30 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-05-18 19:59 - 2014-04-06 17:24 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-05-18 19:59 - 2014-04-06 17:17 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-05-18 19:59 - 2014-04-06 17:10 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-05-18 19:59 - 2014-04-06 16:28 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-05-18 19:59 - 2014-04-06 16:25 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-05-18 19:59 - 2014-04-06 16:14 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-05-18 19:59 - 2014-04-06 16:07 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-05-18 19:59 - 2014-04-06 16:06 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-05-18 19:59 - 2014-04-06 15:29 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-05-18 19:59 - 2014-04-03 09:33 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-05-18 19:59 - 2014-04-03 09:33 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-05-18 19:59 - 2014-04-03 09:23 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-05-18 19:59 - 2014-04-03 08:16 - 03563008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-05-18 19:59 - 2014-04-03 08:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-05-18 19:59 - 2014-04-03 08:14 - 01210368 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-05-18 19:59 - 2014-04-03 07:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-05-18 19:59 - 2014-04-03 07:54 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-05-18 19:59 - 2014-04-03 07:53 - 02825216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-05-18 19:59 - 2014-04-03 07:53 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-05-18 19:59 - 2014-04-01 10:39 - 00333656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-05-18 19:59 - 2014-03-31 09:04 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-05-18 19:59 - 2014-03-31 08:50 - 01871704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-05-18 19:59 - 2014-03-31 08:50 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-05-18 19:59 - 2014-03-31 06:18 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-05-18 19:59 - 2014-03-31 06:11 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll
2014-05-18 19:59 - 2014-03-31 04:56 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-05-18 19:59 - 2014-03-31 04:43 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-05-18 19:59 - 2014-03-31 04:07 - 01167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-05-18 19:59 - 2014-03-31 04:05 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-05-18 19:59 - 2014-03-31 03:39 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-05-18 19:59 - 2014-03-31 03:19 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-05-18 19:59 - 2014-03-28 14:34 - 00328984 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-05-18 19:59 - 2014-03-27 10:51 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-05-18 19:59 - 2014-03-27 10:18 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-05-18 19:59 - 2014-03-27 09:49 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-05-18 19:59 - 2014-03-27 08:52 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-05-18 19:59 - 2014-03-27 08:33 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-05-18 19:59 - 2014-03-27 08:29 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-05-18 19:59 - 2014-03-25 04:27 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-05-18 19:59 - 2014-03-21 09:16 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
2014-05-18 19:59 - 2014-03-20 06:50 - 00229344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-05-18 19:59 - 2014-03-20 05:08 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-05-18 19:59 - 2014-03-20 05:03 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-05-18 19:59 - 2014-03-19 12:47 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-05-18 19:59 - 2014-03-19 12:39 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-05-18 19:59 - 2014-03-19 11:26 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-05-18 19:59 - 2014-03-19 10:30 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-05-18 19:59 - 2014-03-19 10:21 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-05-18 19:59 - 2014-03-19 10:17 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-05-18 19:59 - 2014-03-19 09:53 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-05-18 19:59 - 2014-03-19 09:44 - 02130432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-05-18 19:59 - 2014-03-18 12:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-05-18 19:59 - 2014-03-18 10:22 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-05-18 19:59 - 2014-03-17 09:41 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-05-18 19:59 - 2014-03-17 08:15 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-05-18 19:59 - 2014-03-17 08:06 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-05-18 19:59 - 2014-03-14 11:40 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-05-18 19:59 - 2014-03-06 16:07 - 00264536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-05-18 19:54 - 2014-05-18 19:54 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-05-18 13:20 - 2014-05-18 13:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-18 13:20 - 2014-05-18 13:20 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-05-18 13:20 - 2014-05-18 13:19 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-05-18 13:20 - 2014-05-18 13:19 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-05-18 13:20 - 2014-05-18 13:19 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-05-18 13:20 - 2014-05-18 13:19 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-05-18 13:19 - 2014-05-18 13:19 - 00000000 ____D () C:\Program Files\Java
2014-05-18 12:31 - 2014-05-18 12:31 - 00001041 _____ () C:\malwarebytes.txt
2014-05-18 11:07 - 2014-05-18 22:22 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-05-18 11:06 - 2014-05-18 11:06 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-05-18 11:06 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-05-18 11:06 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-05-17 22:30 - 2014-05-06 08:55 - 17382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-17 22:30 - 2014-05-06 07:40 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-17 21:05 - 2014-05-02 02:00 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-05-17 21:05 - 2014-05-02 02:00 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-05-17 06:41 - 2014-03-24 07:04 - 00219992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-05-17 06:41 - 2014-03-24 07:04 - 00092504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-05-17 06:41 - 2014-03-24 07:03 - 00030224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-05-17 06:41 - 2014-03-13 12:21 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-05-17 06:23 - 2014-04-11 14:01 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-17 06:23 - 2014-04-11 13:55 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-05-17 06:23 - 2014-04-11 10:52 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-05-17 06:23 - 2014-04-11 10:43 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-05-17 06:23 - 2014-04-11 09:11 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-05-17 06:23 - 2014-04-11 08:36 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-05-17 06:23 - 2014-04-11 08:35 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-17 06:23 - 2014-04-11 08:35 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-05-17 06:23 - 2014-04-11 08:32 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-17 06:23 - 2014-04-11 08:31 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-17 06:23 - 2014-04-11 08:30 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-05-17 06:23 - 2014-04-11 08:29 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-05-17 06:23 - 2014-04-11 08:24 - 02818048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-17 06:23 - 2014-04-11 08:17 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-17 06:23 - 2014-04-11 08:06 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-17 06:23 - 2014-04-11 08:04 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-05-17 06:23 - 2014-04-09 00:24 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-05-17 06:23 - 2014-04-09 00:24 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-05-16 23:18 - 2014-05-16 23:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-02 14:04 - 2014-05-02 14:12 - 00000000 ____D () C:\WINDOWS\Minidump
2014-05-02 09:47 - 2014-02-06 15:50 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-01 12:41 - 2014-05-01 12:41 - 00001719 _____ () C:\Users\Samrat\Desktop\Google Drive.lnk
2014-05-01 12:40 - 2014-05-01 12:46 - 00000000 ___RD () C:\Users\Samrat\Google Drive
2014-05-01 12:39 - 2014-05-01 12:39 - 00002016 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2014-05-01 12:39 - 2014-05-01 12:39 - 00002014 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2014-05-01 12:39 - 2014-05-01 12:39 - 00002004 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-05-01 12:39 - 2014-05-01 12:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-04-30 08:50 - 2014-04-30 08:50 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-04-25 02:16 - 2014-04-25 02:16 - 01070232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSCOMCTL.OCX
2014-04-22 19:03 - 2014-04-22 19:03 - 00000000 __SHD () C:\Users\Samrat\AppData\Local\EmieUserList
2014-04-22 19:03 - 2014-04-22 19:03 - 00000000 __SHD () C:\Users\Samrat\AppData\Local\EmieSiteList
2014-04-22 16:28 - 2014-03-20 07:01 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-22 16:28 - 2014-03-20 06:42 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-22 16:28 - 2014-03-20 06:39 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-22 16:28 - 2014-03-13 15:42 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-22 16:28 - 2014-03-12 19:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-22 16:28 - 2014-03-11 20:19 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll
2014-04-22 16:28 - 2014-03-11 19:16 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2014-04-22 16:28 - 2014-03-11 19:02 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-04-22 16:28 - 2014-03-11 18:32 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-22 16:28 - 2014-03-08 17:30 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-22 16:28 - 2014-03-08 17:23 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-22 16:28 - 2014-03-08 17:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-22 16:28 - 2014-03-08 11:53 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-22 16:28 - 2014-03-06 16:49 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-22 16:28 - 2014-03-06 16:49 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-22 16:28 - 2014-03-06 16:04 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-22 16:28 - 2014-03-06 13:54 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-22 16:28 - 2014-03-06 13:50 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-22 16:28 - 2014-03-06 13:50 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-22 16:28 - 2014-03-06 13:39 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-22 16:28 - 2014-03-06 13:16 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-22 16:28 - 2014-03-06 11:36 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-22 16:28 - 2014-03-06 11:21 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-22 16:28 - 2014-03-06 11:12 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-22 16:28 - 2014-03-04 12:12 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-22 16:28 - 2014-03-04 12:12 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-22 16:28 - 2014-03-04 12:00 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-22 16:27 - 2014-03-20 06:39 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-22 16:27 - 2014-03-20 05:09 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-22 16:27 - 2014-03-20 05:06 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-22 16:27 - 2014-03-19 10:55 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-22 16:27 - 2014-03-19 10:50 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-22 16:27 - 2014-03-19 10:38 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-22 16:27 - 2014-03-11 20:35 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfg.exe
2014-04-22 16:27 - 2014-03-11 19:58 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-22 16:27 - 2014-03-11 19:39 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2014-04-22 16:27 - 2014-03-11 19:04 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2014-04-22 16:27 - 2014-03-11 19:00 - 00571392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-04-22 16:27 - 2014-03-11 18:05 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-22 16:27 - 2014-03-08 17:30 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-22 16:27 - 2014-03-08 17:19 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-22 16:27 - 2014-03-08 17:19 - 00376152 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-22 16:27 - 2014-03-08 17:04 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-22 16:27 - 2014-03-08 14:14 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-22 16:27 - 2014-03-08 13:42 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-22 16:27 - 2014-03-08 13:17 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-22 16:27 - 2014-03-08 13:10 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-22 16:27 - 2014-03-08 12:42 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-22 16:27 - 2014-03-08 12:10 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-22 16:27 - 2014-03-08 12:07 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-22 16:27 - 2014-03-08 12:07 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-22 16:27 - 2014-03-08 12:00 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-22 16:27 - 2014-03-08 11:55 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-22 16:27 - 2014-03-08 11:28 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-22 16:27 - 2014-03-08 11:12 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-22 16:27 - 2014-03-08 10:46 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-22 16:27 - 2014-03-06 16:43 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-22 16:27 - 2014-03-06 16:43 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-22 16:27 - 2014-03-06 16:16 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-22 16:27 - 2014-03-06 16:13 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-22 16:27 - 2014-03-06 16:13 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-22 16:27 - 2014-03-06 13:54 - 00092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-22 16:27 - 2014-03-06 13:54 - 00020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-22 16:27 - 2014-03-06 13:53 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-22 16:27 - 2014-03-06 13:52 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-22 16:27 - 2014-03-06 13:50 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-22 16:27 - 2014-03-06 13:50 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-22 16:27 - 2014-03-06 13:50 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-22 16:27 - 2014-03-06 13:40 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-22 16:27 - 2014-03-06 13:17 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-22 16:27 - 2014-03-06 12:46 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-22 16:27 - 2014-03-06 11:59 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-22 16:27 - 2014-03-06 11:53 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-22 16:27 - 2014-03-06 11:41 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-22 16:27 - 2014-03-06 11:39 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-22 16:27 - 2014-03-06 11:36 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-22 16:27 - 2014-03-06 11:34 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-22 16:27 - 2014-03-06 11:31 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-22 16:27 - 2014-03-04 16:46 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-22 16:27 - 2014-03-04 16:40 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-22 16:27 - 2014-03-04 12:56 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-22 16:27 - 2014-03-04 12:09 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-22 16:27 - 2014-03-04 12:02 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-22 16:27 - 2014-03-04 11:56 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-22 16:27 - 2014-03-04 11:35 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-22 16:27 - 2014-03-04 11:24 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-22 16:27 - 2014-03-04 11:22 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-22 16:27 - 2013-12-24 04:58 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-22 16:01 - 2014-04-22 16:01 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-04-22 15:43 - 2014-04-22 15:43 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2014-04-22 15:43 - 2014-04-22 15:43 - 00570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2014-04-22 15:43 - 2014-04-22 15:43 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2014-04-22 15:43 - 2014-04-22 15:43 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2014-04-22 15:43 - 2014-04-22 15:43 - 00422968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2014-04-22 15:43 - 2014-04-22 15:43 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll
2014-04-22 15:43 - 2014-04-22 15:43 - 00137344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2014-04-22 15:43 - 2014-04-22 15:43 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2014-04-22 15:43 - 2014-04-22 15:43 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\clrhost.dll
2014-04-22 15:40 - 2014-04-22 15:40 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-04-22 15:40 - 2014-04-22 15:40 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-04-22 15:40 - 2014-04-22 15:40 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-04-22 15:40 - 2014-04-22 15:40 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-04-22 15:40 - 2014-04-22 15:40 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-04-22 15:39 - 2014-04-22 15:39 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-04-22 15:39 - 2014-04-22 15:39 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-04-22 15:34 - 2014-02-22 20:22 - 00251504 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof.dll
2014-04-22 15:34 - 2014-02-22 16:52 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-04-22 15:34 - 2014-02-22 16:24 - 00035024 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2014-04-22 15:34 - 2014-02-22 16:00 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\cleanmgr.exe
2014-04-22 15:34 - 2014-02-22 15:53 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentHost.dll
2014-04-22 15:34 - 2014-02-22 15:51 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll
2014-04-22 15:34 - 2014-02-22 15:51 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2014-04-22 15:34 - 2014-02-22 15:39 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2014-04-22 15:34 - 2014-02-22 15:39 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-04-22 15:34 - 2014-02-22 15:30 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitagent.exe
2014-04-22 15:34 - 2014-02-22 14:51 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2014-04-22 15:34 - 2014-02-22 14:46 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2014-04-22 15:34 - 2014-02-22 14:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2014-04-22 15:34 - 2014-02-22 14:18 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2014-04-22 15:34 - 2014-02-22 14:13 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2014-04-22 15:34 - 2014-02-22 14:08 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-04-22 15:34 - 2014-02-22 14:03 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2014-04-22 15:34 - 2014-02-08 06:38 - 00081975 _____ () C:\WINDOWS\system32\systemsf.ebd
2014-04-22 15:33 - 2014-02-22 20:10 - 00064344 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2014-04-22 15:33 - 2014-02-22 19:56 - 00198488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2014-04-22 15:33 - 2014-02-22 19:56 - 00063832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
2014-04-22 15:33 - 2014-02-22 19:55 - 00180240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVol.exe
2014-04-22 15:33 - 2014-02-22 19:40 - 00105896 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2014-04-22 15:33 - 2014-02-22 19:34 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2014-04-22 15:33 - 2014-02-22 16:55 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\f3ahvoas.dll
2014-04-22 15:33 - 2014-02-22 16:54 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SSShim.dll
2014-04-22 15:33 - 2014-02-22 16:52 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\watchdog.sys
2014-04-22 15:33 - 2014-02-22 16:46 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WofUtil.dll
2014-04-22 15:33 - 2014-02-22 16:45 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-04-22 15:33 - 2014-02-22 16:36 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2014-04-22 15:33 - 2014-02-22 16:11 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2014-04-22 15:33 - 2014-02-22 15:46 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2014-04-22 15:33 - 2014-02-22 15:44 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-04-22 15:33 - 2014-02-22 15:10 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-04-22 15:33 - 2014-02-22 14:40 - 00300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2014-04-22 15:33 - 2014-02-22 14:17

Edited by koolsam, 19 May 2014 - 08:28 AM.


#6 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 19 May 2014 - 08:30 AM

Additional scan result of Farbar Recovery Scan Tool (x86) Version:17-05-2014
Ran by Samrat at 2014-05-19 19:51:12
Running from C:\Users\Samrat\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

µTorrent (HKCU\...\uTorrent) (Version: 3.4.1.31139 - BitTorrent Inc.)
32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
Acrobat.com (HKLM\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 2.0.0.0 - Adobe Systems Incorporated)
Acrobat.com (Version: 2.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)
Adobe AIR (Version: 13.0.0.83 - Adobe Systems Incorporated) Hidden
Adobe Digital Editions 2.0 (HKLM\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Apache Tomcat 7.0 Tomcat7 (remove only) (HKLM\...\Apache Tomcat 7.0 Tomcat7) (Version:  - )
ASUS nVidia Driver (Version: 1.00.0000 - ASUSTek) Hidden
Bing Bar (HKLM\...\{FF6DD716-7B10-4269-9F19-FFB07AC4CD95}) (Version: 7.3.124.0 - Microsoft Corporation)
BlueStacks App Player (HKLM\...\BlueStacks App Player) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
BufferChm (Version: 140.0.298.000 - Hewlett-Packard) Hidden
Bulzer USB2.0 UVC PC Camera (HKLM\...\{71A51A91-E7D3-11DB-A386-005056C00008}) (Version: 2009.03.18 - Vimicro Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
CyberLink DVD Suite (HKLM\...\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 5.0.3019 - CyberLink Corp.)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{341FFD7F-3127-466D-88F7-CE4DE78A48F1}) (Version:  - Microsoft)
DiskMax 4.71 (HKLM\...\DiskMax) (Version: 4.71 - KoshyJohn.com)
DJ_AIO_06_F2400_SW_Min (Version: 140.0.851.000 - Hewlett-Packard) Hidden
F2400 (Version: 140.0.851.000 - Hewlett-Packard) Hidden
Facebook Video Calling 2.0.0.447 (HKLM\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
FileHippo.com Update Checker (HKLM\...\FileHippo.com) (Version:  - )
GeForce Experience NvStream Client Components (Version: 0.1.87 - NVIDIA Corporation) Hidden
Google Drive (HKLM\...\{418BAAD1-754D-48B4-B078-46EF4F25AF42}) (Version: 1.15.6556.8063 - Google, Inc.)
Google Talk Plugin (HKLM\...\{8E29C1CE-346A-3F59-AE22-8C5B7F230498}) (Version: 5.3.1.18536 - Google)
Google Update Helper (Version: 1.3.23.0 - DealPly Technologies Ltd) Hidden <==== ATTENTION
GoToMeeting 5.7.0.1172 (HKCU\...\GoToMeeting) (Version: 5.7.0.1172 - CitrixOnline)
honestechTVR2.5 (HKLM\...\{ABADD11D-1B48-4F23-BEBA-6B22CE8F5E58}) (Version: 2.5 - honestech)
honestechTVR2.5 (Version: 2.5 - honestech) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet F2400 All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{BCDD692B-172D-440A-9A1B-501C71D72CC8}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.002 - Hewlett-Packard)
HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 140.0.211.000 - Hewlett-Packard) Hidden
India and The World (HKLM\...\India and The World) (Version: 2011.0.0.0 - Encyclopaedia Britannica, Inc.)
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Intel® TV Wizard (HKLM\...\TVWiz) (Version:  - Intel Corporation)
Internet Download Manager (HKLM\...\Internet Download Manager) (Version:  - Tonec Inc.)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Kaspersky Internet Security (HKLM\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (Version: 14.0.0.4651 - Kaspersky Lab) Hidden
LG ODD Auto Firmware Update (HKLM\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )
Malwarebytes Anti-Malware version 2.0.1.1004 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
MarketResearch (Version: 140.0.212.000 - Hewlett-Packard) Hidden
MATLAB R2009b (HKLM\...\MatlabR2009b) (Version: 7.9 - The MathWorks, Inc.)
Microsoft Access MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Access Setup Metadata MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft DCF MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Groove MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (Version: 2.3.188.0 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs (HKLM\...\{90120000-00B2-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Word MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1 - Nokia) Hidden
Mozilla Firefox 29.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 29.0.1 (x86 en-US)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nero 7 Essentials (HKLM\...\{66B6D13A-9CC1-417D-B6F2-58AA539D1033}) (Version: 7.03.1303 - Nero AG)
Nero BurnLite 10 (HKLM\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10600 - Nero AG)
Nero BurnLite 10 (HKLM\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10500.5.100 - Nero AG)
Nero Control Center 10 (Version: 10.6.13000.0.11 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden
Nero Core Components 10 (Version: 2.0.19900.9.11 - Nero AG) Hidden
Nero Update (Version: 11.0.13300.42.0 - Nero AG) Hidden
neroxml (Version: 1.0.0 - Nero AG) Hidden
Nokia Connectivity Cable Driver (HKLM\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
NVIDIA 3D Vision Controller Driver (Version: 267.67 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller Driver 331.58 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.58 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Control Panel 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 1.6.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.6.1.2 - NVIDIA Corporation)
NVIDIA Graphics Driver 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX System Software 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 8.3.23 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.5 - NVIDIA Corporation)
Octoshape Streaming Services (HKCU\...\Octoshape Streaming Services) (Version:  - Octoshape ApS)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PC Connectivity Solution (HKLM\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
PSIM 9.0.3 (HKLM\...\{98D13EC5-0C60-48eb-A7FA-1B0008EC4C2D}) (Version: 9.0.3 - Powersim)
QuickTransfer (Version: 140.0.98.000 - Hewlett-Packard) Hidden
RealDownloader (Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6077 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Resolver version 2.2 (HKLM\...\{2B061A62-3AA7-4383-8696-993635E168C7}_is1) (Version: 2.2 - Beam Telecom)
Scan (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2817430) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 1.05.42 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SmartWebPrinting (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.25 - Piriform)
Status (Version: 140.0.342.000 - Hewlett-Packard) Hidden
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version:  - Code Sector)
Toolbox (Version: 140.0.596.000 - Hewlett-Packard) Hidden
Total Video Converter 3.71 100812 (HKLM\...\Total Video Converter 3.71_is1) (Version:  - EffectMatrix Inc.)
Ubisoft Game Launcher (HKLM\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-0016-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-0018-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-001B-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2817678) 32-Bit Edition (HKLM\...\{90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{AC57CF13-C24E-4C00-969F-5394DAE589C5}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2880980) 32-Bit Edition (HKLM\...\{90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{A10C00F8-0A83-4A74-86C5-3D0F9879E101}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2880980) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A10C00F8-0A83-4A74-86C5-3D0F9879E101}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{45B7D395-EB9B-414F-9E46-5849B42326E2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 32-Bit Edition (HKLM\...\{90150000-0016-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{1644D7F6-90EE-4252-8884-18E4E330529D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{1644D7F6-90EE-4252-8884-18E4E330529D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2825631) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{E458713D-E208-4098-A155-EA1152F9B301}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{B7EA8070-C37F-4617-82F4-52CF3304595A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0016-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0090-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{9BC5FF1D-9626-44D7-BC7F-EB44BD8BDB9F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863825) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{96754DD8-5AF9-4CF8-A5A9-19770CD9AFBC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863844) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{8AEAF88E-A488-4C1E-B10D-F00143BA650F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-006E-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880464) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{06EF2BF7-7351-4D70-A0D5-588FCCF9808D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880476) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{DDF64A37-8E32-406E-A94C-9F5B03661A21}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2880480) 32-Bit Edition (HKLM\...\{90150000-00BA-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{7655E7AA-268C-4F74-AC05-8D56F75C664A}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2880480) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7655E7AA-268C-4F74-AC05-8D56F75C664A}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{90150000-00A1-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{90150000-001A-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2878315) 32-Bit Edition (HKLM\...\{90150000-0018-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{47A62B15-D0BF-4A2E-BCE2-939DB491D387}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2878315) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{47A62B15-D0BF-4A2E-BCE2-939DB491D387}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2726952) 32-Bit Edition (HKLM\...\{90150000-0019-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{173C8CEB-B73E-4C38-AF3A-05EA5BB860D4}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2726952) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{173C8CEB-B73E-4C38-AF3A-05EA5BB860D4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A7CD05CC-CA85-428C-91FD-74A908D126E1}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-001A-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-001B-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version:  - Microsoft)
ViewSonic Monitor Drivers (HKLM\...\{B4FEA924-630D-11D4-B78E-005004566E4D}) (Version:  - )
VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WebReg (Version: 140.0.297.017 - Hewlett-Packard) Hidden
WinDjView 2.0.2 (HKLM\...\WinDjView) (Version: 2.0.2 - Andrew Zhezherun)
Windows 8.1 Product Key Finder Ultimate v13.10.1 (HKLM\...\Windows 8.1 Product Key Finder Ultimate v13.10.1_is1) (Version: v13.09.8 - )
Windows Driver Package - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DE}) (Version: 18.0.10661 - WinZip Computing, S.L. )

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 07:34 - 2012-11-28 09:57 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {00BC77BF-3352-4FE8-9617-4F1B27BEC19A} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {01B65DA9-0CB3-4F59-9D49-A2741606E3D0} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {04CA2995-73B7-4E81-8E3C-0F8FCFDFB843} - System32\Tasks\{DA6F51F6-BF18-47E1-ABBA-7F988E8E2249} => C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe
Task: {095DD1B3-A9D7-462F-9B85-EDE2ACA00738} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {1613C636-7D13-45C7-AA5E-EF53E10BD121} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {17233BE9-87E9-40B0-B003-AE9D2B92CBBE} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {2367A7E7-7A86-4D43-AB39-1A2B917799D3} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {247BD142-0549-4E91-84B0-172C25563718} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {2910BE23-1582-44E2-8828-93B671E6D0F6} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3559879560-2752497012-24936758-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {2A1AFFE3-4D38-46A1-83D6-B0400109F816} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2BDB453B-E5D9-4B05-B8EE-7C1E5627AC4C} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe [2012-12-12] ()
Task: {2BE65564-89D1-4396-A5CC-D7D9283FC4A1} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {2EB02B75-A6B4-4F0B-B00F-BB1621A3A003} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-05-18] (Microsoft Corporation)
Task: {392EB017-207C-42BF-A061-F3BE721F456C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {396D2039-79CE-4D39-80CC-897DA2514D0E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {3AADA025-19B1-4D67-818C-EC4DD6820C7B} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {3E4A3934-522E-4CE3-8705-1295F2AB3A7F} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3FBA7F96-18F8-4B12-9B74-570338CC5ECC} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {3FF39823-2595-4E06-8263-044296030EBA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {4B7EF56A-8A42-4BD2-BB5C-7C389AC54A37} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {5064DCDD-ED0C-4E67-BF45-2F877606DBC8} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5398D6AE-A4FC-4D0C-A857-A0A4C4716821} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {56D4E87B-51DF-4A4E-834C-64D86F31E8D6} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3559879560-2752497012-24936758-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {56ED6736-8C86-4006-9DC6-5DB6663A625B} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3559879560-2752497012-24936758-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {5700ACE8-D0AF-4BA7-98B6-1033521A877A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {67C6482D-6256-479F-BE48-A93F1B2644DD} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {6D99FC8D-A597-4C54-B789-BB4F61AFCDC2} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {6E84A59B-1863-4B21-8BD8-C9B20FD15484} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {715785F4-3ACF-47D1-9CE6-EF22162B79AA} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {735A9FF8-174F-490A-A4D7-D025C8572AE6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: {7797B551-D5F9-4BDA-ADD5-6FC10A5CE9A4} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3559879560-2752497012-24936758-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {779F64EA-F945-4ED0-8F62-2D36B0E7D26E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-01-08] (Google Inc.)
Task: {7C7CF1DA-F461-4850-96B2-ADCA8A67E59C} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {7F70833D-C1A8-4087-8565-926F058B4B55} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {82C55B59-1644-4E06-B630-43B8D46DC3F5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3559879560-2752497012-24936758-1001Core => C:\Users\Samrat\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-08] (Google Inc.)
Task: {82F91532-B48F-4EE4-B9E3-C616EE798B54} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {8AC9AD4B-E497-4C59-9B82-82DE80DD4107} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-16] (Adobe Systems Incorporated)
Task: {8B5819AE-7B44-478B-A3D3-8846AF160A8F} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {8E7AC6B2-8207-4EA6-A822-E75F0AC1093E} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {90C33C22-F62D-4619-8B79-B0E5F68FD30D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-01-08] (Google Inc.)
Task: {9116A72A-1A4D-40C3-B636-47ACF6A15853} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3559879560-2752497012-24936758-1001Core => C:\Users\Samrat\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {92ED6570-4654-4BFA-9A6C-1084C6939C16} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {997C8BBD-710B-4E66-B5BC-CC09575A58D2} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {9A1E835A-CD6A-4CC6-AB64-EEBA862A6E3F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9A673D8A-2710-4153-9691-43E658A45B18} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3559879560-2752497012-24936758-1001UA => C:\Users\Samrat\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-08] (Google Inc.)
Task: {A5D45ED3-F524-4574-8F39-527F3729D1E2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\WINDOWS\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {A69685C0-F39D-4E02-A42F-B461ACB73363} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A6C8D558-50C9-45A2-AFC3-9EF8499CC6B5} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3559879560-2752497012-24936758-1001 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {B2DAD37F-40BC-4D7A-9958-63E1DD504AB0} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3559879560-2752497012-24936758-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {B7E404AF-3EE3-4213-BC5C-DAD49E4F3C34} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B808E09E-A76A-441A-A7DC-E4F47532D0D5} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3559879560-2752497012-24936758-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {BC6BC3DC-CD7A-4E82-B678-A7814410FB5B} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3559879560-2752497012-24936758-1001UA => C:\Users\Samrat\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {C0D0F7C4-419F-41B3-90A2-FE79270B828A} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {C6648A4A-2325-4EC5-8389-F95BC9653050} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {CDF1D276-082F-4EB3-A57F-6AB480EA70BF} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {CF5A1DDC-D14D-4D59-AD49-A19A645B087B} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {D11DBDDA-DE29-4B60-9524-A3F24A0B8A12} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D19978BD-7652-4EDD-8D4C-23145305BC57} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {D2F771ED-E696-4BBD-9835-63C12BAF5B60} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D981C769-3BE9-4282-8A73-E7E6B2528161} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {DCF55BED-B1DF-4ABF-8D85-6542C7007799} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {DF0E59A7-C47B-43CD-A351-89D64EF92AF2} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\WINDOWS\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {E4C8774A-2818-45A4-8A6D-11DDF6348886} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {E6238F6C-8523-446C-9449-9AC0224B60E3} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {E98DE013-C835-4ABC-93F2-0F07D0C38235} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {EB2EC637-98CE-4092-8D9C-73BDA03C4F82} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Samrat-PC-Samrat Samrat-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-04-08] (Microsoft Corporation)
Task: {EBD4E9BA-5A46-4D9B-AE5F-EE33362535BB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F3F6DB1C-423B-43B6-A7B0-FAA4B93E46EC} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F9C36292-4D71-4FDF-A3BF-637A44F87825} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FA2503DE-AAEB-4E31-8564-1B201E12D9BB} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FAB49829-3EE7-4234-BE84-277862F2A57C} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {FC2A4137-EFDE-456E-96F8-BB3DE4376160} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3559879560-2752497012-24936758-1001Core.job => C:\Users\Samrat\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3559879560-2752497012-24936758-1001UA.job => C:\Users\Samrat\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3559879560-2752497012-24936758-1001Core.job => C:\Users\Samrat\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3559879560-2752497012-24936758-1001UA.job => C:\Users\Samrat\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-19 09:00 - 2014-03-04 18:04 - 00109000 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2013-06-08 20:49 - 2012-12-07 17:26 - 00167424 _____ () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
2013-08-14 15:19 - 2013-08-14 15:19 - 00039056 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
2014-04-08 14:18 - 2014-04-08 14:18 - 08889512 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:0CE7F3C9
AlternateDataStreams: C:\Users\Samrat\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (2).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (3).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (4).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (5).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (6).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TVR Scheduler.lnk => C:\Windows\pss\TVR Scheduler.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: IDMan => C:\Program Files\Internet Download Manager\IDMan.exe /onboot
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: LGODDFU => "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
MSCONFIG\startupreg: NeroFilterCheck => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: TkBellExe => "c:\program files\real\realplayer\Update\realsched.exe" -osboot

==================== Faulty Device Manager Devices =============

Name: Floppy disk drive
Description: Floppy disk drive
Class Guid: {4d36e980-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard floppy disk drives)
Service: flpydisk
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/19/2014 07:37:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: Activation of app VersInnovation.NewsHunt_tys131yfetgfc!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/19/2014 07:22:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: Activation of app VersInnovation.NewsHunt_tys131yfetgfc!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/19/2014 07:09:07 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files\Google\Update\1.3.24.7\DealPlyLiveHelper.msi

Error: (05/19/2014 07:06:18 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: Activation of app VersInnovation.NewsHunt_tys131yfetgfc!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/19/2014 06:52:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: Activation of app VersInnovation.NewsHunt_tys131yfetgfc!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/19/2014 06:37:21 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: Activation of app VersInnovation.NewsHunt_tys131yfetgfc!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/19/2014 06:22:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: Activation of app VersInnovation.NewsHunt_tys131yfetgfc!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/19/2014 06:09:28 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files\Google\Update\1.3.24.7\DealPlyLiveHelper.msi

Error: (05/19/2014 06:05:33 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: Activation of app VersInnovation.NewsHunt_tys131yfetgfc!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (05/19/2014 05:52:45 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: Activation of app VersInnovation.NewsHunt_tys131yfetgfc!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.


System errors:
=============
Error: (05/19/2014 06:21:53 PM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (05/19/2014 02:12:57 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Office 2013 (KB2878316) 32-Bit Edition.

Error: (05/19/2014 00:43:30 PM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.


Microsoft Office Sessions:
=========================
Error: (05/19/2014 07:37:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: VersInnovation.NewsHunt_tys131yfetgfc!App-2144927148

Error: (05/19/2014 07:22:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: VersInnovation.NewsHunt_tys131yfetgfc!App-2144927148

Error: (05/19/2014 07:09:07 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files\Google\Update\1.3.24.7\DealPlyLiveHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (05/19/2014 07:06:18 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: VersInnovation.NewsHunt_tys131yfetgfc!App-2144927148

Error: (05/19/2014 06:52:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: VersInnovation.NewsHunt_tys131yfetgfc!App-2144927148

Error: (05/19/2014 06:37:21 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: VersInnovation.NewsHunt_tys131yfetgfc!App-2144927148

Error: (05/19/2014 06:22:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: VersInnovation.NewsHunt_tys131yfetgfc!App-2144927148

Error: (05/19/2014 06:09:28 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files\Google\Update\1.3.24.7\DealPlyLiveHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (05/19/2014 06:05:33 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: VersInnovation.NewsHunt_tys131yfetgfc!App-2144927148

Error: (05/19/2014 05:52:45 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SAMRAT-PC)
Description: VersInnovation.NewsHunt_tys131yfetgfc!App-2144927148


CodeIntegrity Errors:
===================================
  Date: 2014-05-19 13:18:24.080
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2014-05-19 13:18:24.012
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

  Date: 2014-05-19 13:18:23.958
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

  Date: 2014-05-19 13:18:23.695
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2014-05-19 13:18:23.627
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

  Date: 2014-05-19 13:18:23.561
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

  Date: 2014-05-19 13:18:20.802
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2014-05-19 13:18:17.268
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

Percentage of memory in use: 53%
Total physical RAM: 2814.49 MB
Available physical RAM: 1307.07 MB
Total Pagefile: 5630.49 MB
Available Pagefile: 3322.44 MB
Total Virtual: 2047.88 MB
Available Virtual: 1874.39 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:39.49 GB) (Free:0.47 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: () (Fixed) (Total:30.15 GB) (Free:14.73 GB) NTFS
Drive f: () (Fixed) (Total:42.15 GB) (Free:4.66 GB) NTFS
Drive g: () (Fixed) (Total:37.25 GB) (Free:9.55 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 18A0189F)
Partition 1: (Active) - (Size=39 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=110 GB) - (Type=OF Extended)

==================== End Of Log ============================



#7 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,222 posts

Posted 20 May 2014 - 07:31 AM

Will clean these items but I do not think that they are responsible for your HD space reduction.

Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.

start
SearchScopes: HKLM - DefaultScope value is missing.
BHO: No Name - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -  No File
Toolbar: HKLM - No Name - {eec0f710-38b5-4aba-99bf-ec87564a4e13} -  No File
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2014-02-21]
S2 HPSLPSVC; C:\Users\Samrat\AppData\Local\Temp\7zS5E15\hpslpsvc32.dll [X]
AlternateDataStreams: C:\ProgramData\TEMP:0CE7F3C9
AlternateDataStreams: C:\Users\Samrat\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (2).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (3).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (4).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (5).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (6).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive.old:ms-properties

End
Save the files as fixlist.txt into the same folder as FRST

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
p.s.
If the SecurityCheck program fails to run for any reason, run it as an Administrator.
===

Let me know if the problem persists.

p.s.
Do you have a Solid State Drive on this computer?
nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760

#8 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 20 May 2014 - 08:18 AM

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:17-05-2014
Ran by Samrat at 2014-05-20 19:47:22 Run:1
Running from C:\Users\Samrat\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
start
SearchScopes: HKLM - DefaultScope value is missing.
BHO: No Name - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -  No File
Toolbar: HKLM - No Name - {eec0f710-38b5-4aba-99bf-ec87564a4e13} -  No File
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2014-02-21]
S2 HPSLPSVC; C:\Users\Samrat\AppData\Local\Temp\7zS5E15\hpslpsvc32.dll [X]
AlternateDataStreams: C:\ProgramData\TEMP:0CE7F3C9
AlternateDataStreams: C:\Users\Samrat\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (2).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (3).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (4).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (5).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive (6).old:ms-properties
AlternateDataStreams: C:\Users\Samrat\SkyDrive.old:ms-properties

End
*****************

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6} => Key deleted successfully.
HKCR\CLSID\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{eec0f710-38b5-4aba-99bf-ec87564a4e13} => Value deleted successfully.
HKCR\CLSID\{eec0f710-38b5-4aba-99bf-ec87564a4e13} => Key not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\jeaohhlajejodfjadcponpnjgkiikocn => Key deleted successfully.
C:\Program Files\Internet Download Manager\IDMGCExt.crx => Moved successfully.
HPSLPSVC => Service deleted successfully.
C:\ProgramData\TEMP => ":0CE7F3C9" ADS removed successfully.
"C:\Users\Samrat\SkyDrive" => ":ms-properties" ADS not found.
"C:\Users\Samrat\SkyDrive (2).old" => ":ms-properties" ADS not found.
"C:\Users\Samrat\SkyDrive (3).old" => ":ms-properties" ADS not found.
"C:\Users\Samrat\SkyDrive (4).old" => ":ms-properties" ADS not found.
"C:\Users\Samrat\SkyDrive (5).old" => ":ms-properties" ADS not found.
"C:\Users\Samrat\SkyDrive (6).old" => ":ms-properties" ADS not found.
"C:\Users\Samrat\SkyDrive.old" => ":ms-properties" ADS not found.

==== End of Fixlog ====



#9 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 20 May 2014 - 08:27 AM

 Results of screen317's Security Check version 0.99.83  
   x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
Kaspersky Internet Security   
Windows Defender              
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:`````````
 CCleaner     
 JavaFX 2.1.1    
 Java 7 Update 55  
 Adobe Flash Player     13.0.0.214  
 Adobe Reader XI  
 Mozilla Firefox (29.0.1)
````````Process Check: objlist.exe by Laurent````````  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avp.exe  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avpui.exe  
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C::  
````````````````````End of Log``````````````````````
 



#10 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 20 May 2014 - 10:42 AM

it turned even worse now the free space in C: reads 129MB



#11 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,222 posts

Posted 21 May 2014 - 05:37 AM

Try to find out what program is draining your space.

WinDirStat: Windows Directory Statistics
http://sourceforge.n...cts/windirstat/

The tool worked on a Windows 7 hope it's OK for Windows 8.
http://www.sevenforu...decreasing.html

Keep me posted
nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760

#12 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 21 May 2014 - 06:31 AM

not able to find any thing,Can't even attach a screen shot as the file size is greater than 4.1KB



#13 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 21 May 2014 - 06:34 AM

can i delete *.jpeg files present in "C:\Users\Samrat\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\c183af66e7929e70\120712-0049" Does it cause any problem...It has the images which i downloaded through gmail



#14 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,222 posts

Posted 21 May 2014 - 11:24 AM

Yes you can.
If you want to keep them transfer the to a flash drive for safe keeping.

This is no longer a malware issues.
For any additional help I suggest you start a new topic here.
Windows 8 Forum
http://www.bleepingc.../209/windows-8/
nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760

#15 koolsam

koolsam

    SWI Junkie

  • Full Member
  • PipPipPipPip
  • 251 posts

Posted 22 May 2014 - 01:47 AM

Can i clean adwcleaner n FRST folder



#16 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,222 posts

Posted 22 May 2014 - 06:38 AM

Yes!
nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760

#17 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,222 posts

Posted 05 August 2014 - 06:24 AM

Since the issue appears to be resolved this Topic is closed.

If you need this topic reopened, please tell the moderating team by replying here with the address of the thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760




Member of UNITE
Support SpywareInfo Forum - click the button