WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. Join 93098 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Suspected Google redirect [Closed]

Started by collfopp , Mar 10 2014 06:53 AM

google redirect malware ngix 404 not found

This topic is locked

29 replies to this topic

#1 collfopp

New Member

Authentic Member
19 posts

Posted 10 March 2014 - 06:53 AM

Hello, I suspect that I have remnants of the google redirect virus but I am not sure. Periodically, and it seems random, I will try and load chrome and I get a message "404 Not Found" with a little ngix underneath. Other times I will get "Oops cannot load this page" message. When i try to go around that I will get another message that has a red lock with a slash through it and it says something like "cannot connect to the real google" Other times the normal google page will load as a secured site and everything seems fine. And still other time I will load a page that looks like google but I suspect to be an imposter site. It happens almost randomly. The real issue that I see is that any device connected to my network will randomly get the "404 Not Found" ngix message when google is loaded on the device. Internet explorer is also affected and cannot load google. Any help would be greatly appreciated. Thanks.

Advertisements

Register to Remove

#2 ----------------

SuperMember

Authentic Member
1,095 posts

Posted 10 March 2014 - 07:18 AM

Hi there,
my name is Marius and I will assist you with your malware related problems.

Before we move on, please read the following points carefully.

First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
Perform everything in the correct order. Sometimes one step requires the previous one.
If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem.
Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.

Scan with FRST in normal mode

Please download Farbar's Recovery Scan Tool to your desktop: FRST 32bit or FRST 64bit (If not sure: Start --> Computer (right click) --> properties)

Run FRST.
Don´t change one of the checkboxes and hit Scan.
Logfiles are created on your desktop.
Poste the FRST.txt and (after the first scan only!) the Addition.txt.

Scan with Gmer rootkit scanner

Please download Gmer from here by clicking on the "Download EXE" Button.

Double click on the randomly named GMER.exe. If asked to allow gmer.sys driver to load, please consent.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.
In the right panel, you will see several boxes that have been checked. Uncheck the following ...
- Sections
- IAT/EAT
- Show All ( should be unchecked by default )
Leave everything else as it is.
Close all other running programs as well as your Browser.
Click the Scan button & wait for it to finish.
Once done click on the Save.. button, and in the File name area, type in "ark.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop.
Please post the content of the ark.txt here.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

Proud Member of UNITE & TB

#3 collfopp

New Member

Authentic Member
19 posts

Posted 10 March 2014 - 07:47 AM

Hello, Thank you. When i attempted to load the link to download FRST, a page loaded that said SSL Error: You attempted to reach www.bleepingcomputer.com, but instead you actually reached a server identifying itself as www.paypal.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of www.bleepingcomputer.com. You should not proceed, especially if you have never seen this message before.

I searched for the program instead, and when I tried to save to desktop I received a message from windows that said "Windows SmartScreen prevented an unrecognized app from starting. Running this app might put you PC at risk."

Should I proceed anyway?

#4 ----------------

SuperMember

Authentic Member
1,095 posts

Posted 10 March 2014 - 08:04 AM

Don´t download this program from anywhere else instead of bleepingcomputer.com.

Please try it on another browser.

Proud Member of UNITE & TB

#5 collfopp

New Member

Authentic Member
19 posts

Posted 10 March 2014 - 08:07 AM

Okay here is the FRST.txt file:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-03-2014 02

Ran by Chris (administrator) on MYCOMPUTER on 10-03-2014 10:02:17

Running from C:\Users\Chris\Downloads

Windows 8.1 (X64) OS Language: English(US)

Internet Explorer Version 11

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\WINDOWS\system32\atiesrxx.exe

(AMD) C:\WINDOWS\system32\atieclxx.exe

(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe

(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Microsoft Corporation) C:\Windows\System32\skydrive.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe

(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE

(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)

HKLM\...\Run: [Bitcasa] - C:\Program Files\Bitcasa\Bitcasa.exe [3952128 2012-11-26] (Bitcasa, Inc)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917688 2012-10-16] (Synaptics Incorporated)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-12] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-14] (Symantec Corporation)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2012-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2014-02-17] (RealNetworks, Inc.)

HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Qualcomm®Atheros®))

SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)

SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com

SearchScopes: HKLM - {30BE217D-B83F-436F-9EF7-93595A3D93EA} URL = http://www.bing.com/...E10TR&pc=MASMJS

SearchScopes: HKLM-x32 - {30BE217D-B83F-436F-9EF7-93595A3D93EA} URL = http://www.bing.com/...E10TR&pc=MASMJS

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKCU - {30BE217D-B83F-436F-9EF7-93595A3D93EA} URL =

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)

BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome:

=======

CHR HomePage: hxxp://www.google.com/

CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\widevinecdmadapter.dll No File

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll ()

CHR Plugin: (Norton Identity Safe) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.7.3_0\npcoplgn.dll (Symantec Corporation)

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

CHR Plugin: (Java™ Platform SE 7 U51) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (RealNetworks™ RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

CHR Plugin: (RealNetworks™ RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

CHR Plugin: (RealNetworks™ RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

CHR Extension: (YouTube) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-17]

CHR Extension: (Google Search) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-17]

CHR Extension: (Norton Identity Protection) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-02-17]

CHR Extension: (Google Wallet) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-17]

CHR Extension: (Gmail) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-17]

CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx [2014-02-09]

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [172104 2013-01-26] (Adobe Systems Incorporated)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows ® Win 7 DDK provider)

R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1591176 2012-11-30] (Samsung Electronics CO., LTD.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-14] (Symantec Corporation)

R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-10-31] (Microsoft Corporation)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-22] (Samsung Electronics CO., LTD.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros)

S2 OutfoxTvService; C:\Program Files\OutfoxTV\OutfoxTvService.exe [X]

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)

S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-22] (AppEx Networks Corporation)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [91648 2012-08-21] (Advanced Micro Devices)

S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Windows ® Win 7 DDK provider)

R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2013-12-17] (Symantec Corporation)

R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [223432 2013-09-25] (Qualcomm Atheros)

R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)

R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-05] (EldoS Corporation)

R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-25] (Symantec Corporation)

R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-24] (CyberLink)

R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-12-25] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-12-25] (Symantec Corporation)

S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [14872 2014-01-07] ()

S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)

S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)

S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)

R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20140221.001\IDSvia64.sys [521944 2014-01-20] (Symantec Corporation)

R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-02-13] (Microsoft Corporation)

S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20140222.007\ENG64.SYS [126040 2013-12-25] (Symantec Corporation)

S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20140222.007\EX64.SYS [2099288 2013-12-25] (Symantec Corporation)

R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)

S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)

R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-09] (Corel Corporation)

R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows ® Win 7 DDK provider)

S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)

S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-02-13] (Microsoft Corporation)

S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)

R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)

S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)

R3 SymDS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)

R3 SymEFA; C:\Windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)

S4 SymELAM; C:\Windows\system32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)

R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-12-27] (Symantec Corporation)

R3 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)

S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)

S3 vzandnetadb; C:\Windows\System32\Drivers\lgvzandnetadb.sys [31744 2013-05-08] (Google Inc)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-03-10 10:02 - 2014-03-10 10:02 - 00020676 _____ () C:\Users\Chris\Downloads\FRST.txt

2014-03-10 10:01 - 2014-03-10 10:02 - 00000000 ____D () C:\FRST

2014-03-10 09:44 - 2014-03-10 09:44 - 02157056 _____ (Farbar) C:\Users\Chris\Downloads\FRST64.exe

2014-03-10 09:33 - 2014-03-10 09:33 - 00144321 _____ () C:\Users\Chris\Desktop\Oops! Google Chrome could not connect to www.google.htm

2014-03-10 08:28 - 2014-03-10 08:28 - 00000000 ___RD () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

2014-03-08 14:08 - 2014-03-10 09:41 - 00282080 _____ () C:\WINDOWS\WindowsUpdate.log

2014-03-08 00:44 - 2014-03-08 00:44 - 04765152 _____ (Piriform Ltd) C:\Users\Chris\Downloads\ccsetup411.exe

2014-03-08 00:44 - 2014-03-08 00:44 - 00002772 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC

2014-03-08 00:44 - 2014-03-08 00:44 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-03-08 00:44 - 2014-03-08 00:44 - 00000000 ____D () C:\Program Files\CCleaner

2014-03-08 00:24 - 2014-03-08 00:24 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_lgvzandnetadb_01005.Wdf

2014-03-07 17:04 - 2014-03-07 17:04 - 04110135 _____ () C:\Users\Chris\Downloads\tdsskiller (1).zip

2014-03-07 15:56 - 2014-03-07 15:56 - 00000000 ____D () C:\WINDOWS\Minidump

2014-03-06 19:40 - 2014-03-06 19:40 - 00002198 _____ () C:\Users\Chris\Desktop\SpyHunter.lnk

2014-03-06 19:38 - 2014-03-06 19:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Chris\Downloads\SpyHunter-Installer (1).exe

2014-03-06 19:33 - 2014-03-06 19:33 - 00991232 _____ () C:\Users\Chris\Downloads\MicrosoftFixit50267.msi

2014-02-24 19:49 - 2014-02-24 19:49 - 00000000 ____D () C:\ProgramData\Atheros

2014-02-24 19:48 - 2014-02-24 19:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Atheros

2014-02-23 20:13 - 2014-02-23 20:16 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth

2014-02-23 20:13 - 2014-02-23 20:14 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite

2014-02-23 20:11 - 2014-02-23 20:11 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp

2014-02-18 02:12 - 2014-02-18 02:12 - 10820032 _____ (SurfRight B.V.) C:\Users\Chris\Downloads\HitmanPro_x64.exe

2014-02-18 02:11 - 2014-02-18 02:11 - 25640672 _____ (Microsoft Corporation) C:\Users\Chris\Downloads\Windows-KB890830-x64-V5.9.exe

2014-02-18 01:46 - 2014-03-07 17:05 - 00000000 ____D () C:\Users\Chris\Desktop\Scanners

2014-02-18 01:30 - 2014-02-18 01:30 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis

2014-02-18 01:30 - 2014-02-18 01:30 - 00000000 ____D () C:\Program Files (x86)\Trend Micro

2014-02-18 00:36 - 2014-02-18 00:36 - 00000000 _____ () C:\autoexec.bat

2014-02-18 00:35 - 2014-03-06 19:40 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2014-02-18 00:35 - 2014-02-18 00:35 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-18 00:34 - 2014-03-06 19:40 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-18 00:27 - 2014-02-18 00:28 - 04102163 _____ () C:\Users\Chris\Downloads\tdsskiller.zip

2014-02-17 23:37 - 2014-02-17 23:37 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Chris\Downloads\tdsskiller.exe

2014-02-17 23:36 - 2014-02-17 23:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Chris\Downloads\SpyHunter-Installer.exe

2014-02-17 23:23 - 2014-02-17 23:23 - 01402880 _____ () C:\Users\Chris\Downloads\HijackThis.msi

2014-02-17 19:02 - 2014-02-17 19:02 - 00000000 ____D () C:\ProgramData\boost_interprocess

2014-02-17 16:46 - 2014-03-06 19:35 - 00000831 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.txt

2014-02-17 14:51 - 2014-03-08 00:59 - 00000000 ____D () C:\Users\Chris\AppData\Local\NPE

2014-02-17 09:58 - 2014-03-09 19:20 - 00003344 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-82314938-1216361947-774549228-1001

2014-02-17 09:58 - 2014-03-09 19:20 - 00003286 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-82314938-1216361947-774549228-1001

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\RealNetworks

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Google

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\Users\Chris\AppData\Local\Real

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\ProgramData\Google

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\Program Files\Google

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\Program Files (x86)\GUMFFE1.tmp

2014-02-17 09:57 - 2014-02-17 09:57 - 00000000 ____D () C:\ProgramData\RealNetworks

2014-02-17 09:57 - 2014-02-17 09:57 - 00000000 ____D () C:\Program Files (x86)\RealNetworks

2014-02-17 09:56 - 2014-02-17 10:03 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Real

2014-02-17 09:56 - 2014-02-17 09:57 - 00000000 ____D () C:\Program Files (x86)\Real

2014-02-17 09:56 - 2014-02-17 09:56 - 00272896 _____ (Progressive Networks) C:\WINDOWS\SysWOW64\pncrt.dll

2014-02-17 09:56 - 2014-02-17 09:56 - 00201872 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\rmoc3260.dll

2014-02-17 09:56 - 2014-02-17 09:56 - 00006656 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\pndx5016.dll

2014-02-17 09:56 - 2014-02-17 09:56 - 00005632 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\pndx5032.dll

2014-02-17 09:55 - 2014-03-10 09:58 - 00000918 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2014-02-17 09:55 - 2014-03-10 08:29 - 00000914 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2014-02-17 09:55 - 2014-02-20 21:53 - 00003890 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2014-02-17 09:55 - 2014-02-20 21:53 - 00003654 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2014-02-17 09:54 - 2014-02-17 10:03 - 00000000 ____D () C:\ProgramData\Real

2014-02-16 23:48 - 2014-02-16 23:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Malwarebytes

2014-02-16 23:48 - 2014-02-16 23:48 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-16 23:48 - 2014-02-16 23:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-16 23:48 - 2013-04-04 15:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-02-16 19:13 - 2014-02-16 19:13 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\AVAST Software

2014-02-16 19:04 - 2014-02-16 19:04 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

2014-02-16 19:04 - 2014-02-16 19:04 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr

2014-02-16 19:03 - 2014-02-16 19:03 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-02-16 19:03 - 2014-02-16 19:03 - 00000000 ____D () C:\Program Files\AVAST Software

2014-02-16 18:55 - 2014-02-16 18:55 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TuneUp Software

2014-02-16 18:51 - 2014-02-16 22:56 - 00000000 ____D () C:\ProgramData\MFAData

2014-02-16 18:51 - 2014-02-16 18:51 - 00000000 ____D () C:\Users\Chris\AppData\Local\MFAData

2014-02-16 18:49 - 2014-02-16 18:49 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Image-Line

2014-02-16 18:48 - 2014-02-16 20:25 - 00000000 ____D () C:\Program Files (x86)\DSPRobotics

2014-02-16 18:48 - 2014-02-16 18:48 - 00000000 ____D () C:\Users\Chris\Documents\Image-Line

2014-02-16 18:48 - 2014-02-16 18:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line

2014-02-16 18:48 - 2014-02-16 18:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\FlowStone

2014-02-16 18:48 - 2014-02-16 18:48 - 00000000 ____D () C:\Program Files\Image-Line

2014-02-16 18:42 - 2014-02-16 18:48 - 00000000 ____D () C:\Program Files (x86)\Image-Line

2014-02-16 18:39 - 2014-02-17 02:19 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-02-16 15:46 - 2014-03-10 09:49 - 00003934 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{71C90436-0DC2-4100-ADD3-85086799674D}

2014-02-15 18:02 - 2014-03-10 08:49 - 00004980 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for MYCOMPUTER-Chris MyComputer

2014-02-15 17:34 - 2014-02-15 17:34 - 00572088 _____ (Microsoft Corporation) C:\Users\Chris\Downloads\Setup.X86.en-US_HomeStudentRetail_91abd698-863c-4359-b33d-828201b7117f_TX_PR_.exe

2014-02-13 22:47 - 2014-02-13 22:47 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security

2014-02-13 22:46 - 2014-03-10 08:27 - 00000000 __RDO () C:\Users\Chris\SkyDrive

2014-02-13 22:45 - 2014-02-13 22:45 - 00002060 _____ () C:\Users\Public\Desktop\Support Center.lnk

2014-02-13 22:39 - 2014-02-13 22:39 - 00001438 _____ () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-13 22:38 - 2014-02-13 22:38 - 00000020 ___SH () C:\Users\Chris\ntuser.ini

2014-02-13 00:50 - 2014-03-08 00:45 - 00000000 ___DC () C:\WINDOWS\Panther

2014-02-13 00:50 - 2014-02-12 21:56 - 00000000 __SHD () C:\Recovery

2014-02-13 00:48 - 2014-02-13 00:48 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2014-02-13 00:48 - 2014-02-13 00:48 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2014-02-13 00:48 - 2014-02-13 00:48 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2014-02-13 00:48 - 2014-02-13 00:48 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll

2014-02-13 00:48 - 2014-02-13 00:48 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2014-02-13 00:48 - 2014-02-13 00:48 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2014-02-13 00:48 - 2014-02-13 00:48 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll

2014-02-13 00:48 - 2014-02-13 00:48 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll

2014-02-13 00:48 - 2014-02-13 00:48 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll

2014-02-13 00:48 - 2014-02-13 00:48 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll

2014-02-13 00:48 - 2014-02-13 00:48 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll

2014-02-13 00:47 - 2014-02-13 00:47 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe

2014-02-13 00:47 - 2014-02-13 00:47 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe

2014-02-13 00:47 - 2014-02-13 00:47 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe

2014-02-13 00:46 - 2014-02-13 00:46 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2014-02-13 00:46 - 2014-02-13 00:46 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2014-02-13 00:46 - 2014-02-13 00:46 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-02-13 00:46 - 2014-02-13 00:46 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-02-13 00:46 - 2014-02-13 00:46 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe

2014-02-13 00:46 - 2014-02-13 00:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-02-13 00:46 - 2014-02-13 00:46 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-02-13 00:46 - 2014-02-13 00:46 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-02-13 00:46 - 2014-02-13 00:46 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-02-13 00:46 - 2014-02-13 00:46 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-02-13 00:46 - 2014-02-13 00:46 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe

2014-02-13 00:44 - 2014-02-13 00:44 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll

2014-02-13 00:44 - 2014-02-13 00:44 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms

2014-02-13 00:44 - 2014-02-13 00:44 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms

2014-02-13 00:43 - 2014-02-13 00:43 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-02-13 00:43 - 2014-02-13 00:43 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2014-02-13 00:43 - 2014-02-13 00:43 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2014-02-13 00:43 - 2014-02-13 00:43 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2014-02-13 00:43 - 2014-02-13 00:43 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2014-02-13 00:43 - 2014-02-13 00:43 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2014-02-13 00:43 - 2014-02-13 00:43 - 00385614 _____ () C:\WINDOWS\system32\ApnDatabase.xml

2014-02-13 00:43 - 2014-02-13 00:43 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys

2014-02-13 00:43 - 2014-02-13 00:43 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS

2014-02-13 00:43 - 2014-02-13 00:43 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll

2014-02-13 00:43 - 2014-02-13 00:43 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys

2014-02-13 00:41 - 2014-02-13 00:41 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2014-02-13 00:41 - 2014-02-13 00:41 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2014-02-13 00:40 - 2014-02-13 00:40 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe

2014-02-13 00:40 - 2014-02-13 00:40 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2014-02-13 00:40 - 2014-02-13 00:40 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2014-02-13 00:40 - 2014-02-13 00:40 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2014-02-13 00:40 - 2014-02-13 00:40 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2014-02-13 00:40 - 2014-02-13 00:40 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe

2014-02-13 00:40 - 2014-02-13 00:40 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2014-02-13 00:40 - 2014-02-13 00:40 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2014-02-13 00:40 - 2014-02-13 00:40 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys

2014-02-13 00:40 - 2014-02-13 00:40 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS

2014-02-13 00:40 - 2014-02-13 00:40 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys

2014-02-13 00:40 - 2014-02-13 00:40 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys

2014-02-13 00:40 - 2014-02-13 00:40 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys

2014-02-13 00:40 - 2014-02-13 00:40 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll

2014-02-13 00:40 - 2014-02-13 00:40 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll

2014-02-13 00:39 - 2014-02-13 00:39 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff

2014-02-13 00:37 - 2014-02-13 00:37 - 00000000 ____D () C:\Program Files\Reference Assemblies

2014-02-13 00:37 - 2014-02-13 00:37 - 00000000 ____D () C:\Program Files\MSBuild

2014-02-13 00:37 - 2014-02-13 00:37 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies

2014-02-13 00:37 - 2014-02-13 00:37 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-02-13 00:36 - 2013-08-03 00:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2014-02-13 00:36 - 2013-08-03 00:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2014-02-13 00:36 - 2013-08-03 00:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2014-02-13 00:36 - 2013-08-03 00:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2014-02-13 00:36 - 2013-08-03 00:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2014-02-13 00:36 - 2013-08-03 00:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2014-02-12 22:19 - 2014-02-12 22:19 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat

2014-02-12 22:01 - 2014-02-12 22:01 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate

2014-02-12 22:00 - 2014-03-08 00:51 - 00000000 ____D () C:\Users\Chris

2014-02-12 22:00 - 2014-02-12 22:01 - 00000000 ___RD () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-02-12 22:00 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-02-12 22:00 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-02-12 22:00 - 2013-08-22 11:36 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-02-12 21:59 - 2014-02-12 22:20 - 00020958 _____ () C:\WINDOWS\diagwrn.xml

2014-02-12 21:59 - 2014-02-12 22:20 - 00020958 _____ () C:\WINDOWS\diagerr.xml

2014-02-12 21:54 - 2014-02-12 21:54 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs

2014-02-12 21:53 - 2014-02-23 20:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM

2014-02-12 21:53 - 2014-02-12 21:53 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job

2014-02-12 21:53 - 2014-02-12 21:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf

2014-02-12 21:53 - 2014-02-12 21:53 - 00000000 ____D () C:\Program Files\Synaptics

2014-02-12 21:53 - 2014-02-12 21:53 - 00000000 ____D () C:\Program Files\Realtek

2014-02-12 21:53 - 2014-02-12 21:53 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies

2014-02-12 21:53 - 2014-02-12 21:53 - 00000000 ____D () C:\Program Files\AMD

2014-02-12 21:53 - 2014-02-12 21:53 - 00000000 ____D () C:\AMD

2014-02-12 21:53 - 2014-02-12 21:53 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin

2014-02-08 20:48 - 2014-02-08 20:48 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-02-08 20:48 - 2014-02-08 20:48 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

==================== One Month Modified Files and Folders =======

2014-03-10 10:02 - 2014-03-10 10:02 - 00020676 _____ () C:\Users\Chris\Downloads\FRST.txt

2014-03-10 10:02 - 2014-03-10 10:01 - 00000000 ____D () C:\FRST

2014-03-10 10:00 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-03-10 09:58 - 2014-02-17 09:55 - 00000918 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2014-03-10 09:49 - 2014-02-16 15:46 - 00003934 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{71C90436-0DC2-4100-ADD3-85086799674D}

2014-03-10 09:47 - 2013-03-19 23:20 - 00000360 _____ () C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job

2014-03-10 09:44 - 2014-03-10 09:44 - 02157056 _____ (Farbar) C:\Users\Chris\Downloads\FRST64.exe

2014-03-10 09:41 - 2014-03-08 14:08 - 00282080 _____ () C:\WINDOWS\WindowsUpdate.log

2014-03-10 09:33 - 2014-03-10 09:33 - 00144321 _____ () C:\Users\Chris\Desktop\Oops! Google Chrome could not connect to www.google.htm

2014-03-10 09:33 - 2013-12-26 18:22 - 00000000 ____D () C:\Users\Chris\Desktop\Chris

2014-03-10 09:33 - 2013-11-14 03:28 - 00863592 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-03-10 08:57 - 2013-12-25 22:46 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-82314938-1216361947-774549228-1001

2014-03-10 08:49 - 2014-02-15 18:02 - 00004980 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for MYCOMPUTER-Chris MyComputer

2014-03-10 08:30 - 2013-03-19 23:06 - 00000000 ____D () C:\ProgramData\WinClon

2014-03-10 08:29 - 2014-02-17 09:55 - 00000914 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2014-03-10 08:28 - 2014-03-10 08:28 - 00000000 ___RD () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

2014-03-10 08:28 - 2013-08-22 09:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM

2014-03-10 08:27 - 2014-02-13 22:46 - 00000000 __RDO () C:\Users\Chris\SkyDrive

2014-03-10 08:27 - 2013-08-22 10:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-03-10 08:26 - 2013-08-22 09:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI

2014-03-10 08:19 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-03-09 19:20 - 2014-02-17 09:58 - 00003344 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-82314938-1216361947-774549228-1001

2014-03-09 19:20 - 2014-02-17 09:58 - 00003286 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-82314938-1216361947-774549228-1001

2014-03-08 00:59 - 2014-02-17 14:51 - 00000000 ____D () C:\Users\Chris\AppData\Local\NPE

2014-03-08 00:51 - 2014-02-12 22:00 - 00000000 ____D () C:\Users\Chris

2014-03-08 00:45 - 2014-02-13 00:50 - 00000000 ___DC () C:\WINDOWS\Panther

2014-03-08 00:45 - 2013-12-26 01:50 - 00000000 ____D () C:\Users\Chris\AppData\Local\CrashDumps

2014-03-08 00:44 - 2014-03-08 00:44 - 04765152 _____ (Piriform Ltd) C:\Users\Chris\Downloads\ccsetup411.exe

2014-03-08 00:44 - 2014-03-08 00:44 - 00002772 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC

2014-03-08 00:44 - 2014-03-08 00:44 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-03-08 00:44 - 2014-03-08 00:44 - 00000000 ____D () C:\Program Files\CCleaner

2014-03-08 00:24 - 2014-03-08 00:24 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_lgvzandnetadb_01005.Wdf

2014-03-07 17:05 - 2014-02-18 01:46 - 00000000 ____D () C:\Users\Chris\Desktop\Scanners

2014-03-07 17:04 - 2014-03-07 17:04 - 04110135 _____ () C:\Users\Chris\Downloads\tdsskiller (1).zip

2014-03-07 15:56 - 2014-03-07 15:56 - 00000000 ____D () C:\WINDOWS\Minidump

2014-03-06 19:40 - 2014-03-06 19:40 - 00002198 _____ () C:\Users\Chris\Desktop\SpyHunter.lnk

2014-03-06 19:40 - 2014-02-18 00:35 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2014-03-06 19:40 - 2014-02-18 00:34 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-03-06 19:38 - 2014-03-06 19:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Chris\Downloads\SpyHunter-Installer (1).exe

2014-03-06 19:35 - 2014-02-17 16:46 - 00000831 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.txt

2014-03-06 19:33 - 2014-03-06 19:33 - 00991232 _____ () C:\Users\Chris\Downloads\MicrosoftFixit50267.msi

2014-02-28 13:34 - 2013-12-27 12:16 - 00000000 ____D () C:\Users\Chris\Desktop\36229

2014-02-24 19:49 - 2014-02-24 19:49 - 00000000 ____D () C:\ProgramData\Atheros

2014-02-24 19:48 - 2014-02-24 19:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Atheros

2014-02-23 20:16 - 2014-02-23 20:13 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth

2014-02-23 20:14 - 2014-02-23 20:13 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite

2014-02-23 20:11 - 2014-02-23 20:11 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp

2014-02-23 20:11 - 2014-02-12 21:53 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM

2014-02-23 16:46 - 2013-03-19 23:08 - 00000000 ____D () C:\ProgramData\Adobe

2014-02-23 10:54 - 2013-12-25 22:40 - 00000000 ____D () C:\Users\Chris\AppData\Local\Adobe

2014-02-23 10:54 - 2013-12-25 22:37 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Adobe

2014-02-20 21:53 - 2014-02-17 09:55 - 00003890 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2014-02-20 21:53 - 2014-02-17 09:55 - 00003654 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2014-02-18 02:16 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\NDF

2014-02-18 02:12 - 2014-02-18 02:12 - 10820032 _____ (SurfRight B.V.) C:\Users\Chris\Downloads\HitmanPro_x64.exe

2014-02-18 02:11 - 2014-02-18 02:11 - 25640672 _____ (Microsoft Corporation) C:\Users\Chris\Downloads\Windows-KB890830-x64-V5.9.exe

2014-02-18 01:31 - 2013-12-25 22:34 - 00000000 ____D () C:\Users\Chris\AppData\Local\VirtualStore

2014-02-18 01:30 - 2014-02-18 01:30 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis

2014-02-18 01:30 - 2014-02-18 01:30 - 00000000 ____D () C:\Program Files (x86)\Trend Micro

2014-02-18 00:48 - 2013-03-19 23:16 - 00000000 ____D () C:\ProgramData\PopCap Games

2014-02-18 00:36 - 2014-02-18 00:36 - 00000000 _____ () C:\autoexec.bat

2014-02-18 00:35 - 2014-02-18 00:35 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-18 00:28 - 2014-02-18 00:27 - 04102163 _____ () C:\Users\Chris\Downloads\tdsskiller.zip

2014-02-17 23:37 - 2014-02-17 23:37 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Chris\Downloads\tdsskiller.exe

2014-02-17 23:36 - 2014-02-17 23:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Chris\Downloads\SpyHunter-Installer.exe

2014-02-17 23:23 - 2014-02-17 23:23 - 01402880 _____ () C:\Users\Chris\Downloads\HijackThis.msi

2014-02-17 19:02 - 2014-02-17 19:02 - 00000000 ____D () C:\ProgramData\boost_interprocess

2014-02-17 17:00 - 2013-08-22 11:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2014-02-17 17:00 - 2013-08-22 11:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-17 16:57 - 2013-12-26 00:59 - 00000000 ____D () C:\Users\Chris\AppData\Local\Google

2014-02-17 14:52 - 2013-03-19 22:57 - 00000000 ____D () C:\ProgramData\Norton

2014-02-17 10:03 - 2014-02-17 09:56 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Real

2014-02-17 10:03 - 2014-02-17 09:54 - 00000000 ____D () C:\ProgramData\Real

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\RealNetworks

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Google

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\Users\Chris\AppData\Local\Real

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\ProgramData\Google

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\Program Files\Google

2014-02-17 09:58 - 2014-02-17 09:58 - 00000000 ____D () C:\Program Files (x86)\GUMFFE1.tmp

2014-02-17 09:58 - 2013-12-26 00:59 - 00000000 ____D () C:\Program Files (x86)\Google

2014-02-17 09:57 - 2014-02-17 09:57 - 00000000 ____D () C:\ProgramData\RealNetworks

2014-02-17 09:57 - 2014-02-17 09:57 - 00000000 ____D () C:\Program Files (x86)\RealNetworks

2014-02-17 09:57 - 2014-02-17 09:56 - 00000000 ____D () C:\Program Files (x86)\Real

2014-02-17 09:56 - 2014-02-17 09:56 - 00272896 _____ (Progressive Networks) C:\WINDOWS\SysWOW64\pncrt.dll

2014-02-17 09:56 - 2014-02-17 09:56 - 00201872 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\rmoc3260.dll

2014-02-17 09:56 - 2014-02-17 09:56 - 00006656 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\pndx5016.dll

2014-02-17 09:56 - 2014-02-17 09:56 - 00005632 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\pndx5032.dll

2014-02-17 09:56 - 2013-03-19 23:16 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll

2014-02-17 09:56 - 2013-03-19 23:16 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll

2014-02-17 02:19 - 2014-02-16 18:39 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-02-17 01:56 - 2013-12-28 00:47 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-02-17 01:54 - 2013-12-28 00:47 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-02-16 23:48 - 2014-02-16 23:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Malwarebytes

2014-02-16 23:48 - 2014-02-16 23:48 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-16 23:48 - 2014-02-16 23:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-16 22:56 - 2014-02-16 18:51 - 00000000 ____D () C:\ProgramData\MFAData

2014-02-16 22:54 - 2012-07-26 04:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP

2014-02-16 20:29 - 2014-01-20 22:28 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-16 20:26 - 2014-01-25 23:21 - 00000085 _____ () C:\WINDOWS\wininit.ini

2014-02-16 20:25 - 2014-02-16 18:48 - 00000000 ____D () C:\Program Files (x86)\DSPRobotics

2014-02-16 19:46 - 2013-12-25 22:38 - 00000000 ___RD () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-02-16 19:13 - 2014-02-16 19:13 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\AVAST Software

2014-02-16 19:04 - 2014-02-16 19:04 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

2014-02-16 19:04 - 2014-02-16 19:04 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr

2014-02-16 19:03 - 2014-02-16 19:03 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-02-16 19:03 - 2014-02-16 19:03 - 00000000 ____D () C:\Program Files\AVAST Software

2014-02-16 19:01 - 2014-01-20 22:28 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-16 18:55 - 2014-02-16 18:55 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TuneUp Software

2014-02-16 18:51 - 2014-02-16 18:51 - 00000000 ____D () C:\Users\Chris\AppData\Local\MFAData

2014-02-16 18:49 - 2014-02-16 18:49 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Image-Line

2014-02-16 18:48 - 2014-02-16 18:48 - 00000000 ____D () C:\Users\Chris\Documents\Image-Line

2014-02-16 18:48 - 2014-02-16 18:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line

2014-02-16 18:48 - 2014-02-16 18:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\FlowStone

2014-02-16 18:48 - 2014-02-16 18:48 - 00000000 ____D () C:\Program Files\Image-Line

2014-02-16 18:48 - 2014-02-16 18:42 - 00000000 ____D () C:\Program Files (x86)\Image-Line

2014-02-15 17:44 - 2013-12-25 23:55 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-02-15 17:34 - 2014-02-15 17:34 - 00572088 _____ (Microsoft Corporation) C:\Users\Chris\Downloads\Setup.X86.en-US_HomeStudentRetail_91abd698-863c-4359-b33d-828201b7117f_TX_PR_.exe

2014-02-15 17:08 - 2013-08-22 11:36 - 00000000 ____D () C:\WINDOWS\system32\restore

2014-02-13 22:47 - 2014-02-13 22:47 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security

2014-02-13 22:46 - 2013-12-26 00:35 - 00000000 ___RD () C:\Users\Chris\SkyDrive.old

2014-02-13 22:46 - 2013-12-25 22:34 - 00000000 ____D () C:\Users\Chris\AppData\Local\Packages

2014-02-13 22:45 - 2014-02-13 22:45 - 00002060 _____ () C:\Users\Public\Desktop\Support Center.lnk

2014-02-13 22:39 - 2014-02-13 22:39 - 00001438 _____ () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-13 22:39 - 2013-12-25 22:38 - 00000000 ___RD () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-02-13 22:38 - 2014-02-13 22:38 - 00000020 ___SH () C:\Users\Chris\ntuser.ini

2014-02-13 22:38 - 2013-12-28 15:41 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration

2014-02-13 00:49 - 2013-08-22 11:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template