Hi,
when I google in Chrome or IE the links redirect about 80% of the time. Sometimes to click.livesearch.com/..... sometimes to some other random suspicious looking sites (but nothing consistent that I've noticed)
I tried running McAfee and Malwarebytes, but they didn't detect anything.
I dled and tried running dds, but my computer is recognizing it as an Autocad script as is simply opening it in notepad instead of running it.
So I guess problem #1 is how do I make dds run - then how the hell do I get rid of this thing?!
Thanks
OK, found dds on some other forum as dds.com so it ran - log below
(also I don't have an install disc)
DDS (Ver_2012-10-19.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16421
Run by owner at 10:51:44 on 2012-10-30
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.2.1033.18.8078.5814 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall *Enabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\P4G\BatteryLife.exe
C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe
C:\Program Files\ASUS\ASUS Secure Delete\ADDEL.exe
C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\mfevtps.exe
C:\PROGRA~2\PHAROS~1\Core\CTskMstr.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\Windows\System32\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\owner\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\mcafee.com\agent\mcagent.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Program Files\Elantech\ETDGesture.exe
C:\Windows\system32\igfxpers.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10k_ActiveX.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\system32\svchost.exe -k SDRSVC
c:\PROGRA~2\mcafee\SITEAD~1\saui.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.ca/
uSearch Bar = hxxp://www.google.com
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://asus.msn.com
mStart Page = hxxp://www.google.com
uSearchAssistant = hxxp://www.google.com
uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
mWinlogon: Userinit = userinit.exe
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\mcafee\SystemCore\ScriptSn.20121006093513.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [googletalk] C:\Users\owner\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
uRun: [AdobeBridge] <no file>
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
mRun: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
mRun: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
mRun: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
mRun: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
mRun: [ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
mRun: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
mRun: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
StartupFolder: C:\Users\owner\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\owner\AppData\Roaming\Dropbox\bin\Dropbox.exe
StartupFolder: C:\Users\owner\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\ASUSVI~1.LNK - C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
TCP: NameServer = 64.71.255.198
TCP: Interfaces\{992BCE99-7F25-4118-95AC-EAB0AE86099B} : DHCPNameServer = 64.71.255.198
TCP: Interfaces\{992BCE99-7F25-4118-95AC-EAB0AE86099B}\142736869656 : DHCPNameServer = 192.168.1.254 192.168.0.1
TCP: Interfaces\{992BCE99-7F25-4118-95AC-EAB0AE86099B}\14C444075726C69636 : DHCPNameServer = 128.100.59.18 128.100.59.11
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg pku2u livessp
x64-mStart Page = hxxp://asus.msn.com
x64-BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\mcafee\SystemCore\ScriptSn.20121006093513.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll
x64-TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll
x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
x64-Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
x64-Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll
x64-Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll
x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned>
x64-Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R0 assd;assd;C:\Windows\System32\drivers\assd.sys [2012-10-1 27264]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;C:\Windows\System32\drivers\iusb3hcs.sys [2012-5-25 16152]
R0 mfehidk;McAfee Inc. mfehidk;C:\Windows\System32\drivers\mfehidk.sys [2011-8-15 752672]
R0 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\System32\drivers\mfewfpk.sys [2011-8-15 335784]
R0 nvpciflt;nvpciflt;C:\Windows\System32\drivers\nvpciflt.sys [2012-10-5 30056]
R1 ATKWMIACPIIO;ATKWMIACPI Driver;C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-9-7 17536]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-1-9 659968]
R2 ASMMAP64;ASMMAP64;C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-7-2 15416]
R2 ASUS InstantOn;ASUS InstantOn Service;C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [2012-4-13 277120]
R2 Autodesk Content Service;Autodesk Content Service;C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-2-2 18656]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-1-11 135952]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-2-3 628448]
R2 Intel(R) ME Service;Intel(R) ME Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-10-1 128280]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2012-10-1 161560]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-10-29 399432]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-10-29 676936]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2012-10-25 201304]
R2 McMPFSvc;McAfee Personal Firewall Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2012-10-25 201304]
R2 McNaiAnn;McAfee VirusScan Announcer;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2012-10-25 201304]
R2 McOobeSv;McAfee OOBE Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2012-10-25 201304]
R2 McProxy;McAfee Proxy Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2012-10-25 201304]
R2 McShield;McAfee McShield;C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe [2012-2-18 237920]
R2 mfefire;McAfee Firewall Core Service;C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe [2012-2-18 218320]
R2 mfevtp;McAfee Validation Trust Protection Service;C:\Windows\System32\mfevtps.exe [2012-2-18 177144]
R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-1 1258856]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-10-1 363800]
R2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2011-12-8 594704]
R3 AiCharger;ASUS Charger Driver;C:\Windows\System32\drivers\AiCharger.sys [2012-5-7 17152]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter;C:\Windows\System32\drivers\AmpPal.sys [2012-1-9 195584]
R3 AsusVBus;AsusVBus;C:\Windows\System32\drivers\AsusVBus.sys [2012-4-11 35968]
R3 AsusVTouch;AsusVTouch;C:\Windows\System32\drivers\AsusVTouch.sys [2012-4-11 16512]
R3 cfwids;McAfee Inc. cfwids;C:\Windows\System32\drivers\cfwids.sys [2011-8-15 69672]
R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\System32\drivers\ETD.sys [2012-5-25 200488]
R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2012-5-25 331264]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver;C:\Windows\System32\drivers\iusb3hub.sys [2012-5-25 355096]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;C:\Windows\System32\drivers\iusb3xhc.sys [2012-5-25 785688]
R3 iwdbus;IWD Bus Enumerator;C:\Windows\System32\drivers\iwdbus.sys [2011-12-20 25496]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2012-10-29 25928]
R3 MEIx64;Intel(R) Management Engine Interface ;C:\Windows\System32\drivers\HECIx64.sys [2012-10-1 60184]
R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\System32\drivers\mfeavfk.sys [2011-8-15 300392]
R3 mfefirek;McAfee Inc. mfefirek;C:\Windows\System32\drivers\mfefirek.sys [2011-8-15 513456]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\System32\drivers\NETwNs64.sys [2012-1-9 11416576]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-10-1 646248]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-13 17920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-2-18 136176]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol;C:\Windows\System32\drivers\AmpPal.sys [2012-1-9 195584]
S3 AmUStor;AM USB Stroage Driver;C:\Windows\System32\drivers\AmUStor.sys [2011-5-26 71680]
S3 cphs;Intel(R) Content Protection HECI Service;C:\Windows\SysWOW64\IntelCpHeciSvc.exe [2012-5-25 276248]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-10-17 1431888]
S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2012-2-18 48488]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-13 1492840]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-2-18 136176]
S3 HipShieldK;McAfee Inc. HipShieldK;C:\Windows\System32\drivers\HipShieldK.sys [2012-10-25 196440]
S3 intaud_WaveExtensible;Intel WiDi Audio Device;C:\Windows\System32\drivers\intelaud.sys [2011-12-20 34200]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);C:\Windows\System32\drivers\L1C62x64.sys [2009-6-10 57344]
S3 McAWFwk;McAfee Activation Service;C:\PROGRA~1\mcafee\msc\mcawfwk.exe [2012-2-18 225216]
S3 mferkdet;McAfee Inc. mferkdet;C:\Windows\System32\drivers\mferkdet.sys [2011-8-15 106112]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-12-8 273168]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;C:\Windows\System32\drivers\SiSG664.sys [2009-6-10 56832]
S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-2-18 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2011-2-18 31232]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-10-7 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== File Associations ===============
.
FileExt: .scr: AutoCADScriptFile=C:\Windows\System32\notepad.exe "%1"
ShellExec: dreamweaver.exe: Open="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\dreamweaver.exe", "%1"
.
=============== Created Last 30 ================
.
2012-10-30 14:35:24 -------- d-----w- C:\Users\owner\AppData\Local\Apps
2012-10-30 04:40:31 -------- d-----w- C:\JRT
2012-10-30 01:52:51 -------- d-----w- C:\Users\owner\AppData\Roaming\Malwarebytes
2012-10-30 01:52:30 -------- d-----w- C:\ProgramData\Malwarebytes
2012-10-30 01:52:27 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-10-30 01:52:27 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-10-29 15:03:12 102400 --sha-r- C:\Users\owner\AppData\Roaming\stclientt.dll
2012-10-25 22:34:35 196440 ----a-w- C:\Windows\System32\drivers\HipShieldK.sys
2012-10-18 07:00:26 -------- d-----w- C:\Program Files (x86)\MSXML 4.0
2012-10-17 14:54:05 -------- d-----w- C:\Users\owner\AppData\Local\cache
2012-10-17 14:31:49 -------- d-----w- C:\Program Files\Common Files\Macrovision Shared
2012-10-17 14:28:48 -------- d-----w- C:\Users\owner\AppData\Local\Autodesk
2012-10-17 14:28:48 -------- d-----w- C:\Program Files\Common Files\Autodesk Shared
2012-10-17 14:28:13 -------- d-----w- C:\Program Files (x86)\Autodesk
2012-10-17 14:26:17 -------- d-----w- C:\Program Files (x86)\Common Files\Autodesk Shared
2012-10-17 14:25:50 2582888 ----a-w- C:\Windows\System32\D3DCompiler_42.dll
2012-10-17 14:25:50 1974616 ----a-w- C:\Windows\SysWow64\D3DCompiler_42.dll
2012-10-17 14:25:49 285024 ----a-w- C:\Windows\System32\d3dx11_42.dll
2012-10-17 14:25:49 235344 ----a-w- C:\Windows\SysWow64\d3dx11_42.dll
2012-10-17 14:25:46 2475352 ----a-w- C:\Windows\System32\D3DX9_42.dll
2012-10-17 14:25:46 1892184 ----a-w- C:\Windows\SysWow64\D3DX9_42.dll
2012-10-17 14:22:37 -------- d-----w- C:\Users\owner\AppData\Roaming\Autodesk
2012-10-17 14:14:58 -------- d-----w- C:\Program Files\Autodesk
2012-10-16 15:46:54 716800 ----atw- C:\Windows\System32\PSRB12F6.DLL
2012-10-16 15:46:52 82432 ----a-w- C:\Windows\SysWow64\msxml4r.dll
2012-10-16 15:46:49 -------- d-----w- C:\Program Files (x86)\PharosSystems
2012-10-16 15:46:45 -------- d-----w- C:\Program Files (x86)\Pharos
2012-10-15 14:02:19 -------- d-----w- C:\Program Files (x86)\Media Player Classic - Home Cinema
2012-10-15 03:40:09 -------- d-----w- C:\Users\owner\AppData\Local\join.me
2012-10-10 22:56:59 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2012-10-10 22:55:57 715776 ----a-w- C:\Windows\System32\kerberos.dll
2012-10-10 22:55:56 542208 ----a-w- C:\Windows\SysWow64\kerberos.dll
2012-10-10 22:55:47 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
2012-10-10 22:55:47 1464320 ----a-w- C:\Windows\System32\crypt32.dll
2012-10-10 22:55:47 140288 ----a-w- C:\Windows\System32\cryptnet.dll
2012-10-10 22:55:47 1159680 ----a-w- C:\Windows\SysWow64\crypt32.dll
2012-10-10 22:55:46 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
2012-10-10 22:55:46 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
2012-10-09 21:34:18 -------- d-----w- C:\Users\owner\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2012-10-09 21:31:03 -------- d-----w- C:\Users\owner\AppData\Roaming\PDAppFlex
2012-10-08 16:37:54 -------- d-----r- C:\Program Files (x86)\Skype
2012-10-07 15:19:47 -------- d-----w- C:\Windows\SysWow64\Wat
2012-10-07 15:19:46 -------- d-----w- C:\Windows\System32\Wat
2012-10-07 14:04:45 552960 ----a-w- C:\Windows\System32\drivers\bthport.sys
2012-10-07 13:24:03 81408 ----a-w- C:\Windows\System32\imagehlp.dll
2012-10-07 13:24:03 23408 ----a-w- C:\Windows\System32\drivers\fs_rec.sys
2012-10-07 13:24:03 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll
2012-10-07 13:24:02 5120 ----a-w- C:\Windows\SysWow64\wmi.dll
2012-10-07 13:24:02 5120 ----a-w- C:\Windows\System32\wmi.dll
2012-10-06 17:46:24 -------- d-----w- C:\ProgramData\regid.1986-12.com.adobe
2012-10-06 17:37:57 -------- d-----w- C:\ProgramData\ALM
2012-10-06 15:26:03 -------- d-----w- C:\Users\owner\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2012-10-06 15:26:01 -------- d-----w- C:\Program Files (x86)\Adobe Download Assistant
2012-10-06 15:24:14 -------- d-----w- C:\Users\owner\AppData\Local\Adobe
2012-10-06 02:24:32 -------- d-----r- C:\Users\owner\Dropbox
2012-10-06 02:21:39 -------- d-----w- C:\Users\owner\AppData\Roaming\Dropbox
2012-10-06 01:59:22 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 8
2012-10-06 01:58:25 -------- d-----w- C:\Users\owner\AppData\Local\Microsoft Help
2012-10-06 00:09:59 340992 ----a-w- C:\Windows\System32\schannel.dll
2012-10-06 00:09:59 307200 ----a-w- C:\Windows\System32\ncrypt.dll
2012-10-06 00:09:59 219136 ----a-w- C:\Windows\SysWow64\ncrypt.dll
2012-10-06 00:09:59 151920 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
2012-10-06 00:09:58 95600 ----a-w- C:\Windows\System32\drivers\ksecdd.sys
2012-10-06 00:09:58 225280 ----a-w- C:\Windows\SysWow64\schannel.dll
2012-10-06 00:09:57 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2012-10-06 00:09:56 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2012-10-06 00:09:54 376688 ----a-w- C:\Windows\System32\drivers\netio.sys
2012-10-06 00:09:54 288624 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS
2012-10-06 00:09:54 1913200 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-10-06 00:09:41 209920 ----a-w- C:\Windows\System32\profsvc.dll
2012-10-06 00:09:32 245760 ----a-w- C:\Windows\System32\OxpsConverter.exe
2012-10-06 00:08:39 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-10-06 00:08:34 498688 ----a-w- C:\Windows\System32\drivers\afd.sys
2012-10-06 00:08:32 75120 ----a-w- C:\Windows\System32\drivers\partmgr.sys
2012-10-06 00:08:28 3216384 ----a-w- C:\Windows\System32\msi.dll
2012-10-06 00:08:27 2342400 ----a-w- C:\Windows\SysWow64\msi.dll
2012-10-06 00:08:15 -------- d-----w- C:\temp
2012-10-06 00:07:43 59392 ----a-w- C:\Windows\System32\browcli.dll
2012-10-06 00:07:43 136704 ----a-w- C:\Windows\System32\browser.dll
2012-10-06 00:07:42 41984 ----a-w- C:\Windows\SysWow64\browcli.dll
2012-10-06 00:07:15 634880 ----a-w- C:\Windows\System32\msvcrt.dll
2012-10-06 00:07:14 690688 ----a-w- C:\Windows\SysWow64\msvcrt.dll
2012-10-06 00:01:00 -------- d-----w- C:\NVIDIA
2012-10-05 23:53:33 -------- d-----w- C:\Users\owner\AppData\Local\Google
2012-10-01 17:13:45 77919 ----a-w- C:\Program Files\Windows Sidebar\Gadgets\myBitCast.Gadget\uninst.exe
2012-10-01 17:11:10 -------- d-----w- C:\ProgramData\USBChargerPlus
2012-10-01 17:01:01 80512 ----a-w- C:\Windows\ASUS U Series ScreenSaver Uninstaller.exe
2012-10-01 17:01:00 104640231 ------w- C:\Windows\System32\AsusScr_U Series_ENG.scr
2012-10-01 17:00:59 3058304 ----a-w- C:\Windows\AsScrPro.exe
2012-10-01 17:00:34 -------- d-----w- C:\Program Files (x86)\Intel Corporation
2012-10-01 17:00:34 -------- d-----w- C:\Program Files (x86)\Common Files\Intel Corporation
2012-10-01 16:59:36 224384 ----a-w- C:\Program Files\Windows Sidebar\Shared Gadgets\InstantOnTM.gadget\InstantOnCOM.dll
2012-10-01 16:59:25 27264 ----a-w- C:\Windows\System32\drivers\assd.sys
2012-10-01 16:59:24 -------- d-----w- C:\Program Files (x86)\Common Files\ASUS
2012-10-01 16:59:21 -------- d-----w- C:\Program Files (x86)\Common Files\SceneSwitch
2012-10-01 16:58:40 162456 ----a-w- C:\Windows\SysWow64\ACEngSvr.exe
2012-10-01 16:58:18 196224 ----a-w- C:\Program Files\Windows Sidebar\Shared Gadgets\P4GUpdate.Gadget\P4GUpdate.dll
2012-10-01 16:58:15 -------- d-----w- C:\ProgramData\P4G
2012-10-01 16:58:15 -------- d-----w- C:\Program Files\ASUS
2012-10-01 16:55:01 -------- d--h--w- C:\Windows\System32\WLANProfiles
2012-10-01 16:54:38 -------- d-----w- C:\ProgramData\Roaming
2012-10-01 16:54:07 -------- d-----w- C:\Program Files (x86)\Cisco
2012-10-01 16:50:56 74272 ----a-w- C:\Windows\System32\RtNicProp64.dll
2012-10-01 16:50:56 646248 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys
2012-10-01 16:50:56 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
2012-10-01 16:50:52 -------- d-----w- C:\Program Files (x86)\Realtek
2012-10-01 16:50:40 -------- d-----w- C:\Program Files\Elantech
2012-10-01 16:50:31 -------- d-----w- C:\ProgramData\AmUStor
2012-10-01 16:50:31 -------- d-----w- C:\Program Files (x86)\AmIcoSingLun
2012-10-01 16:50:04 15128 ----a-w- C:\Windows\System32\drivers\IntelMEFWVer.dll
2012-10-01 16:49:42 -------- d-----w- C:\Program Files (x86)\Common Files\postureAgent
2012-10-01 16:49:38 60184 ----a-w- C:\Windows\System32\drivers\HECIx64.sys
2012-10-01 16:49:12 -------- d-----w- C:\Windows\SysWow64\NV
2012-10-01 16:49:12 -------- d-----w- C:\Windows\System32\NV
2012-10-01 16:46:54 -------- d-----w- C:\Program Files\NVIDIA Corporation
2012-10-01 16:45:21 -------- d-----w- C:\Program Files\Common Files\Intel
2012-10-01 16:45:20 -------- d-----w- C:\Program Files (x86)\Common Files\Intel
2012-10-01 16:43:12 53248 ----a-w- C:\Windows\SysWow64\CSVer.dll
2012-10-01 16:43:07 -------- d-----w- C:\Intel
2012-10-01 16:41:24 180736 ----a-w- C:\Windows\System32\ifsutil.dll
2012-10-01 16:41:24 148992 ----a-w- C:\Windows\SysWow64\ifsutil.dll
2012-10-01 16:33:08 -------- d-----w- C:\eSupport
2012-10-01 16:02:37 -------- d-----w- C:\ProgramData\Geek Squad
2012-10-01 14:56:50 -------- d-----w- C:\ProgramData\ASUS
2012-10-01 13:32:19 1031680 ----a-w- C:\Windows\System32\rdpcore.dll
2012-10-01 13:32:18 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll
2012-10-01 13:32:18 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys
2012-10-01 13:23:44 2622464 ----a-w- C:\Windows\System32\wucltux.dll
2012-10-01 13:23:40 -------- d-----w- C:\Users\owner\AppData\Roaming\ASUS WebStorage
2012-10-01 13:23:21 99840 ----a-w- C:\Windows\System32\wudriver.dll
2012-10-01 13:23:07 36864 ----a-w- C:\Windows\System32\wuapp.exe
2012-10-01 13:23:07 186752 ----a-w- C:\Windows\System32\wuwebv.dll
2012-10-01 13:21:47 -------- d-----w- C:\Users\owner\AppData\Local\Power2Go
2012-10-01 13:21:46 387 ----a-w- C:\Users\owner\AppData\Roaming\sp_data.sys
2012-10-01 13:20:10 -------- d-----w- C:\Users\owner\AppData\Local\VirtualStore
.
==================== Find3M ====================
.
2012-09-14 19:19:29 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-09-14 18:28:53 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-08-31 18:19:35 1659760 ----a-w- C:\Windows\System32\drivers\ntfs.sys
2012-08-30 18:03:45 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-08-30 17:12:02 3968880 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-08-30 17:12:02 3914096 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-08-30 16:18:05 891240 ----a-w- C:\Windows\System32\nvvsvc.exe
2012-08-30 16:18:05 865640 ----a-w- C:\Windows\System32\nv3dappshext.dll
2012-08-30 16:18:05 63336 ----a-w- C:\Windows\System32\nvshext.dll
2012-08-30 16:18:05 2557800 ----a-w- C:\Windows\System32\nvsvcr.dll
2012-08-30 16:18:05 118120 ----a-w- C:\Windows\System32\nvmctray.dll
2012-08-30 16:18:04 55144 ----a-w- C:\Windows\System32\nv3dappshextr.dll
2012-08-30 16:18:04 3487434 ----a-w- C:\Windows\System32\nvcoproc.bin
2012-08-30 16:18:01 3266920 ----a-w- C:\Windows\System32\nvsvc64.dll
2012-08-30 16:17:59 6198120 ----a-w- C:\Windows\System32\nvcpl.dll
2012-08-24 18:05:07 220160 ----a-w- C:\Windows\System32\wintrust.dll
2012-08-24 16:57:48 172544 ----a-w- C:\Windows\SysWow64\wintrust.dll
2012-08-24 10:31:32 2312704 ----a-w- C:\Windows\System32\jscript9.dll
2012-08-24 10:21:18 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-08-24 10:20:11 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-08-24 10:14:45 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-08-24 10:13:29 599040 ----a-w- C:\Windows\System32\vbscript.dll
2012-08-24 10:09:42 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-08-24 06:59:17 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-08-24 06:51:27 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-08-24 06:51:02 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-08-24 06:47:26 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-08-24 06:47:12 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll
2012-08-24 06:43:58 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-08-22 18:12:40 950128 ----a-w- C:\Windows\System32\drivers\ndis.sys
2012-08-20 18:48:44 362496 ----a-w- C:\Windows\System32\wow64win.dll
2012-08-20 18:48:44 243200 ----a-w- C:\Windows\System32\wow64.dll
2012-08-20 18:48:44 13312 ----a-w- C:\Windows\System32\wow64cpu.dll
2012-08-20 18:48:43 215040 ----a-w- C:\Windows\System32\winsrv.dll
2012-08-20 18:48:37 16384 ----a-w- C:\Windows\System32\ntvdm64.dll
2012-08-20 18:48:35 424448 ----a-w- C:\Windows\System32\KernelBase.dll
2012-08-20 18:46:22 338432 ----a-w- C:\Windows\System32\conhost.exe
2012-08-20 17:40:21 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2012-08-20 17:38:44 44032 ----a-w- C:\Windows\apppatch\acwow64.dll
2012-08-20 17:38:26 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2012-08-20 17:37:19 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2012-08-20 17:37:18 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll
2012-08-20 15:38:21 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2012-08-20 15:38:20 2048 ----a-w- C:\Windows\SysWow64\user.exe
2012-08-20 15:33:28 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2012-08-20 15:33:28 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2012-08-20 15:33:28 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2012-08-02 17:58:52 574464 ----a-w- C:\Windows\System32\d3d10level9.dll
2012-08-02 16:57:20 490496 ----a-w- C:\Windows\SysWow64\d3d10level9.dll
.
============= FINISH: 10:52:31.91 ===============
when I google in Chrome or IE the links redirect about 80% of the time. Sometimes to click.livesearch.com/..... sometimes to some other random suspicious looking sites (but nothing consistent that I've noticed)
I tried running McAfee and Malwarebytes, but they didn't detect anything.
I dled and tried running dds, but my computer is recognizing it as an Autocad script as is simply opening it in notepad instead of running it.
So I guess problem #1 is how do I make dds run - then how the hell do I get rid of this thing?!
Thanks
OK, found dds on some other forum as dds.com so it ran - log below
(also I don't have an install disc)
DDS (Ver_2012-10-19.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16421
Run by owner at 10:51:44 on 2012-10-30
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.2.1033.18.8078.5814 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall *Enabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\P4G\BatteryLife.exe
C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe
C:\Program Files\ASUS\ASUS Secure Delete\ADDEL.exe
C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\mfevtps.exe
C:\PROGRA~2\PHAROS~1\Core\CTskMstr.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\Windows\System32\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\owner\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\mcafee.com\agent\mcagent.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Program Files\Elantech\ETDGesture.exe
C:\Windows\system32\igfxpers.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10k_ActiveX.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\system32\svchost.exe -k SDRSVC
c:\PROGRA~2\mcafee\SITEAD~1\saui.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.ca/
uSearch Bar = hxxp://www.google.com
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://asus.msn.com
mStart Page = hxxp://www.google.com
uSearchAssistant = hxxp://www.google.com
uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
mWinlogon: Userinit = userinit.exe
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\mcafee\SystemCore\ScriptSn.20121006093513.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [googletalk] C:\Users\owner\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
uRun: [AdobeBridge] <no file>
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
mRun: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
mRun: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
mRun: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
mRun: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
mRun: [ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
mRun: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
mRun: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
StartupFolder: C:\Users\owner\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\owner\AppData\Roaming\Dropbox\bin\Dropbox.exe
StartupFolder: C:\Users\owner\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\ASUSVI~1.LNK - C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
TCP: NameServer = 64.71.255.198
TCP: Interfaces\{992BCE99-7F25-4118-95AC-EAB0AE86099B} : DHCPNameServer = 64.71.255.198
TCP: Interfaces\{992BCE99-7F25-4118-95AC-EAB0AE86099B}\142736869656 : DHCPNameServer = 192.168.1.254 192.168.0.1
TCP: Interfaces\{992BCE99-7F25-4118-95AC-EAB0AE86099B}\14C444075726C69636 : DHCPNameServer = 128.100.59.18 128.100.59.11
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg pku2u livessp
x64-mStart Page = hxxp://asus.msn.com
x64-BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\mcafee\SystemCore\ScriptSn.20121006093513.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll
x64-TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll
x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
x64-Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
x64-Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll
x64-Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll
x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned>
x64-Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R0 assd;assd;C:\Windows\System32\drivers\assd.sys [2012-10-1 27264]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;C:\Windows\System32\drivers\iusb3hcs.sys [2012-5-25 16152]
R0 mfehidk;McAfee Inc. mfehidk;C:\Windows\System32\drivers\mfehidk.sys [2011-8-15 752672]
R0 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\System32\drivers\mfewfpk.sys [2011-8-15 335784]
R0 nvpciflt;nvpciflt;C:\Windows\System32\drivers\nvpciflt.sys [2012-10-5 30056]
R1 ATKWMIACPIIO;ATKWMIACPI Driver;C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-9-7 17536]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-1-9 659968]
R2 ASMMAP64;ASMMAP64;C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-7-2 15416]
R2 ASUS InstantOn;ASUS InstantOn Service;C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [2012-4-13 277120]
R2 Autodesk Content Service;Autodesk Content Service;C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-2-2 18656]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-1-11 135952]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-2-3 628448]
R2 Intel(R) ME Service;Intel(R) ME Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-10-1 128280]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2012-10-1 161560]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-10-29 399432]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-10-29 676936]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2012-10-25 201304]
R2 McMPFSvc;McAfee Personal Firewall Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2012-10-25 201304]
R2 McNaiAnn;McAfee VirusScan Announcer;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2012-10-25 201304]
R2 McOobeSv;McAfee OOBE Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2012-10-25 201304]
R2 McProxy;McAfee Proxy Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2012-10-25 201304]
R2 McShield;McAfee McShield;C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe [2012-2-18 237920]
R2 mfefire;McAfee Firewall Core Service;C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe [2012-2-18 218320]
R2 mfevtp;McAfee Validation Trust Protection Service;C:\Windows\System32\mfevtps.exe [2012-2-18 177144]
R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-1 1258856]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-10-1 363800]
R2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2011-12-8 594704]
R3 AiCharger;ASUS Charger Driver;C:\Windows\System32\drivers\AiCharger.sys [2012-5-7 17152]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter;C:\Windows\System32\drivers\AmpPal.sys [2012-1-9 195584]
R3 AsusVBus;AsusVBus;C:\Windows\System32\drivers\AsusVBus.sys [2012-4-11 35968]
R3 AsusVTouch;AsusVTouch;C:\Windows\System32\drivers\AsusVTouch.sys [2012-4-11 16512]
R3 cfwids;McAfee Inc. cfwids;C:\Windows\System32\drivers\cfwids.sys [2011-8-15 69672]
R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\System32\drivers\ETD.sys [2012-5-25 200488]
R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2012-5-25 331264]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver;C:\Windows\System32\drivers\iusb3hub.sys [2012-5-25 355096]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;C:\Windows\System32\drivers\iusb3xhc.sys [2012-5-25 785688]
R3 iwdbus;IWD Bus Enumerator;C:\Windows\System32\drivers\iwdbus.sys [2011-12-20 25496]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2012-10-29 25928]
R3 MEIx64;Intel(R) Management Engine Interface ;C:\Windows\System32\drivers\HECIx64.sys [2012-10-1 60184]
R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\System32\drivers\mfeavfk.sys [2011-8-15 300392]
R3 mfefirek;McAfee Inc. mfefirek;C:\Windows\System32\drivers\mfefirek.sys [2011-8-15 513456]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\System32\drivers\NETwNs64.sys [2012-1-9 11416576]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-10-1 646248]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-13 17920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-2-18 136176]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol;C:\Windows\System32\drivers\AmpPal.sys [2012-1-9 195584]
S3 AmUStor;AM USB Stroage Driver;C:\Windows\System32\drivers\AmUStor.sys [2011-5-26 71680]
S3 cphs;Intel(R) Content Protection HECI Service;C:\Windows\SysWOW64\IntelCpHeciSvc.exe [2012-5-25 276248]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-10-17 1431888]
S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2012-2-18 48488]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-13 1492840]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-2-18 136176]
S3 HipShieldK;McAfee Inc. HipShieldK;C:\Windows\System32\drivers\HipShieldK.sys [2012-10-25 196440]
S3 intaud_WaveExtensible;Intel WiDi Audio Device;C:\Windows\System32\drivers\intelaud.sys [2011-12-20 34200]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);C:\Windows\System32\drivers\L1C62x64.sys [2009-6-10 57344]
S3 McAWFwk;McAfee Activation Service;C:\PROGRA~1\mcafee\msc\mcawfwk.exe [2012-2-18 225216]
S3 mferkdet;McAfee Inc. mferkdet;C:\Windows\System32\drivers\mferkdet.sys [2011-8-15 106112]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-12-8 273168]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;C:\Windows\System32\drivers\SiSG664.sys [2009-6-10 56832]
S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-2-18 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2011-2-18 31232]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-10-7 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== File Associations ===============
.
FileExt: .scr: AutoCADScriptFile=C:\Windows\System32\notepad.exe "%1"
ShellExec: dreamweaver.exe: Open="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\dreamweaver.exe", "%1"
.
=============== Created Last 30 ================
.
2012-10-30 14:35:24 -------- d-----w- C:\Users\owner\AppData\Local\Apps
2012-10-30 04:40:31 -------- d-----w- C:\JRT
2012-10-30 01:52:51 -------- d-----w- C:\Users\owner\AppData\Roaming\Malwarebytes
2012-10-30 01:52:30 -------- d-----w- C:\ProgramData\Malwarebytes
2012-10-30 01:52:27 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-10-30 01:52:27 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-10-29 15:03:12 102400 --sha-r- C:\Users\owner\AppData\Roaming\stclientt.dll
2012-10-25 22:34:35 196440 ----a-w- C:\Windows\System32\drivers\HipShieldK.sys
2012-10-18 07:00:26 -------- d-----w- C:\Program Files (x86)\MSXML 4.0
2012-10-17 14:54:05 -------- d-----w- C:\Users\owner\AppData\Local\cache
2012-10-17 14:31:49 -------- d-----w- C:\Program Files\Common Files\Macrovision Shared
2012-10-17 14:28:48 -------- d-----w- C:\Users\owner\AppData\Local\Autodesk
2012-10-17 14:28:48 -------- d-----w- C:\Program Files\Common Files\Autodesk Shared
2012-10-17 14:28:13 -------- d-----w- C:\Program Files (x86)\Autodesk
2012-10-17 14:26:17 -------- d-----w- C:\Program Files (x86)\Common Files\Autodesk Shared
2012-10-17 14:25:50 2582888 ----a-w- C:\Windows\System32\D3DCompiler_42.dll
2012-10-17 14:25:50 1974616 ----a-w- C:\Windows\SysWow64\D3DCompiler_42.dll
2012-10-17 14:25:49 285024 ----a-w- C:\Windows\System32\d3dx11_42.dll
2012-10-17 14:25:49 235344 ----a-w- C:\Windows\SysWow64\d3dx11_42.dll
2012-10-17 14:25:46 2475352 ----a-w- C:\Windows\System32\D3DX9_42.dll
2012-10-17 14:25:46 1892184 ----a-w- C:\Windows\SysWow64\D3DX9_42.dll
2012-10-17 14:22:37 -------- d-----w- C:\Users\owner\AppData\Roaming\Autodesk
2012-10-17 14:14:58 -------- d-----w- C:\Program Files\Autodesk
2012-10-16 15:46:54 716800 ----atw- C:\Windows\System32\PSRB12F6.DLL
2012-10-16 15:46:52 82432 ----a-w- C:\Windows\SysWow64\msxml4r.dll
2012-10-16 15:46:49 -------- d-----w- C:\Program Files (x86)\PharosSystems
2012-10-16 15:46:45 -------- d-----w- C:\Program Files (x86)\Pharos
2012-10-15 14:02:19 -------- d-----w- C:\Program Files (x86)\Media Player Classic - Home Cinema
2012-10-15 03:40:09 -------- d-----w- C:\Users\owner\AppData\Local\join.me
2012-10-10 22:56:59 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2012-10-10 22:55:57 715776 ----a-w- C:\Windows\System32\kerberos.dll
2012-10-10 22:55:56 542208 ----a-w- C:\Windows\SysWow64\kerberos.dll
2012-10-10 22:55:47 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
2012-10-10 22:55:47 1464320 ----a-w- C:\Windows\System32\crypt32.dll
2012-10-10 22:55:47 140288 ----a-w- C:\Windows\System32\cryptnet.dll
2012-10-10 22:55:47 1159680 ----a-w- C:\Windows\SysWow64\crypt32.dll
2012-10-10 22:55:46 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
2012-10-10 22:55:46 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
2012-10-09 21:34:18 -------- d-----w- C:\Users\owner\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2012-10-09 21:31:03 -------- d-----w- C:\Users\owner\AppData\Roaming\PDAppFlex
2012-10-08 16:37:54 -------- d-----r- C:\Program Files (x86)\Skype
2012-10-07 15:19:47 -------- d-----w- C:\Windows\SysWow64\Wat
2012-10-07 15:19:46 -------- d-----w- C:\Windows\System32\Wat
2012-10-07 14:04:45 552960 ----a-w- C:\Windows\System32\drivers\bthport.sys
2012-10-07 13:24:03 81408 ----a-w- C:\Windows\System32\imagehlp.dll
2012-10-07 13:24:03 23408 ----a-w- C:\Windows\System32\drivers\fs_rec.sys
2012-10-07 13:24:03 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll
2012-10-07 13:24:02 5120 ----a-w- C:\Windows\SysWow64\wmi.dll
2012-10-07 13:24:02 5120 ----a-w- C:\Windows\System32\wmi.dll
2012-10-06 17:46:24 -------- d-----w- C:\ProgramData\regid.1986-12.com.adobe
2012-10-06 17:37:57 -------- d-----w- C:\ProgramData\ALM
2012-10-06 15:26:03 -------- d-----w- C:\Users\owner\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2012-10-06 15:26:01 -------- d-----w- C:\Program Files (x86)\Adobe Download Assistant
2012-10-06 15:24:14 -------- d-----w- C:\Users\owner\AppData\Local\Adobe
2012-10-06 02:24:32 -------- d-----r- C:\Users\owner\Dropbox
2012-10-06 02:21:39 -------- d-----w- C:\Users\owner\AppData\Roaming\Dropbox
2012-10-06 01:59:22 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 8
2012-10-06 01:58:25 -------- d-----w- C:\Users\owner\AppData\Local\Microsoft Help
2012-10-06 00:09:59 340992 ----a-w- C:\Windows\System32\schannel.dll
2012-10-06 00:09:59 307200 ----a-w- C:\Windows\System32\ncrypt.dll
2012-10-06 00:09:59 219136 ----a-w- C:\Windows\SysWow64\ncrypt.dll
2012-10-06 00:09:59 151920 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
2012-10-06 00:09:58 95600 ----a-w- C:\Windows\System32\drivers\ksecdd.sys
2012-10-06 00:09:58 225280 ----a-w- C:\Windows\SysWow64\schannel.dll
2012-10-06 00:09:57 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2012-10-06 00:09:56 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2012-10-06 00:09:54 376688 ----a-w- C:\Windows\System32\drivers\netio.sys
2012-10-06 00:09:54 288624 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS
2012-10-06 00:09:54 1913200 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-10-06 00:09:41 209920 ----a-w- C:\Windows\System32\profsvc.dll
2012-10-06 00:09:32 245760 ----a-w- C:\Windows\System32\OxpsConverter.exe
2012-10-06 00:08:39 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-10-06 00:08:34 498688 ----a-w- C:\Windows\System32\drivers\afd.sys
2012-10-06 00:08:32 75120 ----a-w- C:\Windows\System32\drivers\partmgr.sys
2012-10-06 00:08:28 3216384 ----a-w- C:\Windows\System32\msi.dll
2012-10-06 00:08:27 2342400 ----a-w- C:\Windows\SysWow64\msi.dll
2012-10-06 00:08:15 -------- d-----w- C:\temp
2012-10-06 00:07:43 59392 ----a-w- C:\Windows\System32\browcli.dll
2012-10-06 00:07:43 136704 ----a-w- C:\Windows\System32\browser.dll
2012-10-06 00:07:42 41984 ----a-w- C:\Windows\SysWow64\browcli.dll
2012-10-06 00:07:15 634880 ----a-w- C:\Windows\System32\msvcrt.dll
2012-10-06 00:07:14 690688 ----a-w- C:\Windows\SysWow64\msvcrt.dll
2012-10-06 00:01:00 -------- d-----w- C:\NVIDIA
2012-10-05 23:53:33 -------- d-----w- C:\Users\owner\AppData\Local\Google
2012-10-01 17:13:45 77919 ----a-w- C:\Program Files\Windows Sidebar\Gadgets\myBitCast.Gadget\uninst.exe
2012-10-01 17:11:10 -------- d-----w- C:\ProgramData\USBChargerPlus
2012-10-01 17:01:01 80512 ----a-w- C:\Windows\ASUS U Series ScreenSaver Uninstaller.exe
2012-10-01 17:01:00 104640231 ------w- C:\Windows\System32\AsusScr_U Series_ENG.scr
2012-10-01 17:00:59 3058304 ----a-w- C:\Windows\AsScrPro.exe
2012-10-01 17:00:34 -------- d-----w- C:\Program Files (x86)\Intel Corporation
2012-10-01 17:00:34 -------- d-----w- C:\Program Files (x86)\Common Files\Intel Corporation
2012-10-01 16:59:36 224384 ----a-w- C:\Program Files\Windows Sidebar\Shared Gadgets\InstantOnTM.gadget\InstantOnCOM.dll
2012-10-01 16:59:25 27264 ----a-w- C:\Windows\System32\drivers\assd.sys
2012-10-01 16:59:24 -------- d-----w- C:\Program Files (x86)\Common Files\ASUS
2012-10-01 16:59:21 -------- d-----w- C:\Program Files (x86)\Common Files\SceneSwitch
2012-10-01 16:58:40 162456 ----a-w- C:\Windows\SysWow64\ACEngSvr.exe
2012-10-01 16:58:18 196224 ----a-w- C:\Program Files\Windows Sidebar\Shared Gadgets\P4GUpdate.Gadget\P4GUpdate.dll
2012-10-01 16:58:15 -------- d-----w- C:\ProgramData\P4G
2012-10-01 16:58:15 -------- d-----w- C:\Program Files\ASUS
2012-10-01 16:55:01 -------- d--h--w- C:\Windows\System32\WLANProfiles
2012-10-01 16:54:38 -------- d-----w- C:\ProgramData\Roaming
2012-10-01 16:54:07 -------- d-----w- C:\Program Files (x86)\Cisco
2012-10-01 16:50:56 74272 ----a-w- C:\Windows\System32\RtNicProp64.dll
2012-10-01 16:50:56 646248 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys
2012-10-01 16:50:56 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
2012-10-01 16:50:52 -------- d-----w- C:\Program Files (x86)\Realtek
2012-10-01 16:50:40 -------- d-----w- C:\Program Files\Elantech
2012-10-01 16:50:31 -------- d-----w- C:\ProgramData\AmUStor
2012-10-01 16:50:31 -------- d-----w- C:\Program Files (x86)\AmIcoSingLun
2012-10-01 16:50:04 15128 ----a-w- C:\Windows\System32\drivers\IntelMEFWVer.dll
2012-10-01 16:49:42 -------- d-----w- C:\Program Files (x86)\Common Files\postureAgent
2012-10-01 16:49:38 60184 ----a-w- C:\Windows\System32\drivers\HECIx64.sys
2012-10-01 16:49:12 -------- d-----w- C:\Windows\SysWow64\NV
2012-10-01 16:49:12 -------- d-----w- C:\Windows\System32\NV
2012-10-01 16:46:54 -------- d-----w- C:\Program Files\NVIDIA Corporation
2012-10-01 16:45:21 -------- d-----w- C:\Program Files\Common Files\Intel
2012-10-01 16:45:20 -------- d-----w- C:\Program Files (x86)\Common Files\Intel
2012-10-01 16:43:12 53248 ----a-w- C:\Windows\SysWow64\CSVer.dll
2012-10-01 16:43:07 -------- d-----w- C:\Intel
2012-10-01 16:41:24 180736 ----a-w- C:\Windows\System32\ifsutil.dll
2012-10-01 16:41:24 148992 ----a-w- C:\Windows\SysWow64\ifsutil.dll
2012-10-01 16:33:08 -------- d-----w- C:\eSupport
2012-10-01 16:02:37 -------- d-----w- C:\ProgramData\Geek Squad
2012-10-01 14:56:50 -------- d-----w- C:\ProgramData\ASUS
2012-10-01 13:32:19 1031680 ----a-w- C:\Windows\System32\rdpcore.dll
2012-10-01 13:32:18 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll
2012-10-01 13:32:18 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys
2012-10-01 13:23:44 2622464 ----a-w- C:\Windows\System32\wucltux.dll
2012-10-01 13:23:40 -------- d-----w- C:\Users\owner\AppData\Roaming\ASUS WebStorage
2012-10-01 13:23:21 99840 ----a-w- C:\Windows\System32\wudriver.dll
2012-10-01 13:23:07 36864 ----a-w- C:\Windows\System32\wuapp.exe
2012-10-01 13:23:07 186752 ----a-w- C:\Windows\System32\wuwebv.dll
2012-10-01 13:21:47 -------- d-----w- C:\Users\owner\AppData\Local\Power2Go
2012-10-01 13:21:46 387 ----a-w- C:\Users\owner\AppData\Roaming\sp_data.sys
2012-10-01 13:20:10 -------- d-----w- C:\Users\owner\AppData\Local\VirtualStore
.
==================== Find3M ====================
.
2012-09-14 19:19:29 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-09-14 18:28:53 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-08-31 18:19:35 1659760 ----a-w- C:\Windows\System32\drivers\ntfs.sys
2012-08-30 18:03:45 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-08-30 17:12:02 3968880 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-08-30 17:12:02 3914096 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-08-30 16:18:05 891240 ----a-w- C:\Windows\System32\nvvsvc.exe
2012-08-30 16:18:05 865640 ----a-w- C:\Windows\System32\nv3dappshext.dll
2012-08-30 16:18:05 63336 ----a-w- C:\Windows\System32\nvshext.dll
2012-08-30 16:18:05 2557800 ----a-w- C:\Windows\System32\nvsvcr.dll
2012-08-30 16:18:05 118120 ----a-w- C:\Windows\System32\nvmctray.dll
2012-08-30 16:18:04 55144 ----a-w- C:\Windows\System32\nv3dappshextr.dll
2012-08-30 16:18:04 3487434 ----a-w- C:\Windows\System32\nvcoproc.bin
2012-08-30 16:18:01 3266920 ----a-w- C:\Windows\System32\nvsvc64.dll
2012-08-30 16:17:59 6198120 ----a-w- C:\Windows\System32\nvcpl.dll
2012-08-24 18:05:07 220160 ----a-w- C:\Windows\System32\wintrust.dll
2012-08-24 16:57:48 172544 ----a-w- C:\Windows\SysWow64\wintrust.dll
2012-08-24 10:31:32 2312704 ----a-w- C:\Windows\System32\jscript9.dll
2012-08-24 10:21:18 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-08-24 10:20:11 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-08-24 10:14:45 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-08-24 10:13:29 599040 ----a-w- C:\Windows\System32\vbscript.dll
2012-08-24 10:09:42 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-08-24 06:59:17 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-08-24 06:51:27 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-08-24 06:51:02 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-08-24 06:47:26 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-08-24 06:47:12 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll
2012-08-24 06:43:58 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-08-22 18:12:40 950128 ----a-w- C:\Windows\System32\drivers\ndis.sys
2012-08-20 18:48:44 362496 ----a-w- C:\Windows\System32\wow64win.dll
2012-08-20 18:48:44 243200 ----a-w- C:\Windows\System32\wow64.dll
2012-08-20 18:48:44 13312 ----a-w- C:\Windows\System32\wow64cpu.dll
2012-08-20 18:48:43 215040 ----a-w- C:\Windows\System32\winsrv.dll
2012-08-20 18:48:37 16384 ----a-w- C:\Windows\System32\ntvdm64.dll
2012-08-20 18:48:35 424448 ----a-w- C:\Windows\System32\KernelBase.dll
2012-08-20 18:46:22 338432 ----a-w- C:\Windows\System32\conhost.exe
2012-08-20 17:40:21 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2012-08-20 17:38:44 44032 ----a-w- C:\Windows\apppatch\acwow64.dll
2012-08-20 17:38:26 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2012-08-20 17:37:19 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2012-08-20 17:37:18 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll
2012-08-20 15:38:21 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2012-08-20 15:38:20 2048 ----a-w- C:\Windows\SysWow64\user.exe
2012-08-20 15:33:28 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2012-08-20 15:33:28 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2012-08-20 15:33:28 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2012-08-02 17:58:52 574464 ----a-w- C:\Windows\System32\d3d10level9.dll
2012-08-02 16:57:20 490496 ----a-w- C:\Windows\SysWow64\d3d10level9.dll
.
============= FINISH: 10:52:31.91 ===============