ESET smart installer is being blocked

SYSTEM
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 64 bit
Processor: Intel(R) Pentium(R) Dual CPU T3400 @ 2.16GHz, Intel64 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 1915 Mb
Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family, 830 Mb
Hard Drives: C: Total - 110427 MB, Free - 43484 MB;
Motherboard: TOSHIBA, Portable PC
Antivirus: Microsoft Security Essentials, Updated and Enabled

PROBLEM
On startup I opened FF to start surfing. It acted funny. Its been real slow for weeks but today it had that ghost of a smaller popup come over the screen and when I went to close the main window of FF down a second window opened and did the same thing. I unplugged from the net and I closed both FF v47.0 windows. I had to click the close button multiple times before it responded.
I tried to do an ESET online scan from the ESET smart installer on my desktop and it won’t download the updates to get started. The message says “Cannot get update. Is proxy configured?” I have my connection setting to “No Proxy”.
I went to options, advanced, network and there is 253KB (changing to 254KB and back again occasionally) of stored data and when I clicked on clear now it did not go away. It is there on start even if I am not connected to the internet.

I Binged ESET website and chose online scan from the results. I saved the file that came up after clicking online scan. When I opened the folder it was in there were two files both with the same name “esetonlinescanner_enu”.
I clicked on the one that said application and it did not work then I noticed it had 0 bytes in the size column. I tried the second and it gave me the ‘can’t open this file’ warning and offered to let me choose a program. That is not the exact message it was the standard MS warning window.
When I deleted these two files the second one would not delete. I closed the ESET web page and unplugged from the internet then it deleted. When I looked in the trash there is only one file in it so I have not deleted it. The second file had 35 in the size column and I don’t know what to put after KB or Mb or ?. The file in the trash bin has 0 bytes.

I disconnected from the internet again. I decided to log in here and report. I have also updated and am now running a MWBT scan. I have also updated MSE and will start that scan once MWB is done.
The MWBT scan is complete and found nothing. Starting MSE full scan.
I recently purchased a couple items on eBay as a guest and from Rock Auto.

What is my next step please?


DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16789 BrowserJavaVersion: 11.91.2
Run by Me at 8:12:13 on 2016-06-17
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.1915.514 [GMT -7:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
SP: Microsoft Security Essentials *Enabled/Updated* {CDE0C533-D3CD-62A1-E772-AFADDF863628}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k rpcss
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\RAVCpl64.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files (x86)\Hp\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Toshiba\ConfigFree\CFSwMgr.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files (x86)\Microsoft Office\Office\WINWORD.EXE
C:\Windows\splwow64.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uDefault_Page_URL = hxxp://www.toshibadirect.com/dpdstart
mDefault_Page_URL = hxxp://www.toshibadirect.com/dpdstart
mWinlogon: Userinit = userinit.exe
BHO: Ghostery Plugin: {6BF739DD-3323-4C6A-975B-C7E00A50B154} - C:\Program Files (x86)\Ghostery\bin\ghostery.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll
uRun: [TOSCDSPD] TOSCDSPD.EXE
uRun: [ehTray.exe] C:\Windows\ehome\ehTray.exe
mRun: [NDSTray.exe] NDSTray.exe
mRun: [jswtrayutil] "C:\Program Files (x86)\Jumpstart\jswtrayutil.exe"
mRun: [cfFncEnabler.exe] cfFncEnabler.exe
mRun: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\HPDIGI~1.LNK - C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MICROS~1.LNK - C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0045-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab
TCP: NameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{C12D3495-9B83-4917-A534-5FCF1ED20B86} : DHCPNameServer = 75.75.75.75 75.75.76.76
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
x64-mDefault_Page_URL = hxxp://www.toshibadirect.com/dpdstart
x64-BHO: Ghostery Plugin: {6BF739DD-3323-4C6A-975B-C7E00A50B154} -
x64-Run: [Windows Defender] C:\Program Files (x86)\Windows Defender\MSASCui.exe -hide
x64-Run: [TPwrMain] C:\Program Files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE
x64-Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
x64-Run: [SmoothView] C:\Program Files (x86)\Toshiba\SmoothView\SmoothView.exe
x64-Run: [Skytel] Skytel.exe
x64-Run: [RtHDVCpl] RAVCpl64.exe
x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [IAAnotif] "C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe"
x64-Run: [HSON] C:\Program Files (x86)\TOSHIBA\TBS\HSON.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [00TCrdMain] C:\Program Files (x86)\TOSHIBA\FlashCards\TCrdMain.exe
x64-mPolicies-Explorer: NoActiveDesktop = dword:1
x64-mPolicies-Explorer: NoActiveDesktopChanges = dword:1
x64-mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
x64-mPolicies-System: EnableUIADesktopToggle = dword:0
x64-Notify: igfxcui - igfxdev.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Me\AppData\Roaming\Mozilla\Firefox\Profiles\9izno1f1.default-1437064698897\
FF - prefs.js: browser.startup.homepage - about:home
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2015-11-13 289120]
R0 tos_sps64;TOSHIBA tos_sps64 Service;C:\Windows\System32\drivers\tos_sps64.sys [2015-5-9 504912]
R1 JSWPSLWF;JumpStart Wireless Filter Driver;C:\Windows\System32\drivers\jswpslwfx.sys [2015-5-9 26624]
R2 FontCache;Windows Font Cache Service;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 27648]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [2015-3-28 89840]
R3 FwLnk;FwLnk Driver;C:\Windows\System32\drivers\FwLnk.sys [2008-8-18 8704]
R3 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2014-11-15 133816]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2016-1-29 374344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-4-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-4-11 124088]
S3 PerfHost;Performance Counter DLL Host;C:\Windows\SysWOW64\perfhost.exe [2008-1-20 19968]
S3 PSMounterEx;Macrium Reflect Image Explorer Driver;C:\Windows\System32\drivers\psmounterex.sys [2015-4-2 169992]
S3 PSVolAcc;PSVolAcc;C:\Windows\System32\drivers\PSVolAcc.sys [2014-7-21 12760]
S3 WIMMount;WIMMount;C:\Program Files\Macrium\Reflect\wimmount.sys [2015-5-14 22096]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2014-4-11 1009864]
S4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2015-5-10 90776]
S4 ConfigFree Gadget Service;ConfigFree Gadget Service;C:\Program Files (x86)\Toshiba\ConfigFree\CFProcSRVC.exe [2008-4-3 36864]
S4 ConfigFree Service;ConfigFree Service;C:\Program Files (x86)\Toshiba\ConfigFree\CFSvcs.exe [2008-4-17 40960]
S4 jswpsapi;Jumpstart Wifi Protected Setup;C:\Program Files (x86)\Jumpstart\jswpsapi.exe [2015-5-9 954368]
S4 KR10I64;KR10I64;C:\Windows\System32\drivers\KR10I64.sys [2008-8-18 248320]
S4 KR10N64;KR10N64;C:\Windows\System32\drivers\KR10N64.sys [2008-8-18 237568]
S4 ReflectService.exe;Macrium Reflect Image Mounting Service;C:\Program Files\Macrium\Reflect\ReflectService.exe [2014-7-21 3272656]
S4 SmartFaceVWatchSrv;SmartFaceVWatchSrv;C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe [2008-4-24 84992]
S4 TMachInfo;TMachInfo;C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\TMachInfo.exe [2008-8-18 46392]
S4 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-3 175104]
.
=============== File Associations ===============
.
FileExt: .js: JSFile=C:\Windows\SysWOW64\WScript.exe "%1" %*
FileExt: .jse: JSEFile=C:\Windows\SysWOW64\WScript.exe "%1" %*
.
=============== Created Last 30 ================
.
.
==================== Find3M ====================
.
2016-06-17 14:37:39 192216 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
2016-06-15 23:01:56 142482544 ----a-w- C:\Windows\System32\mrt.exe
2016-06-15 20:40:57 484008 ------w- C:\Windows\System32\MpSigStub.exe
2016-05-18 15:55:46 391168 ----a-w- C:\Windows\System32\gdi32.dll
2016-05-18 15:34:13 305152 ----a-w- C:\Windows\SysWow64\gdi32.dll
2016-05-16 14:04:39 797376 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2016-05-16 14:04:39 142528 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2016-05-14 15:58:42 383208 ----a-w- C:\Windows\System32\atmfd.dll
2016-05-14 15:54:16 205824 ----a-w- C:\Windows\System32\wdigest.dll
2016-05-14 15:53:52 17920 ----a-w- C:\Windows\System32\netevent.dll
2016-05-14 15:53:15 48128 ----a-w- C:\Windows\System32\atmlib.dll
2016-05-14 15:47:02 306408 ----a-w- C:\Windows\SysWow64\atmfd.dll
2016-05-14 15:42:00 77312 ----a-w- C:\Windows\SysWow64\secur32.dll
2016-05-14 15:41:58 175616 ----a-w- C:\Windows\SysWow64\wdigest.dll
2016-05-14 15:41:48 17920 ----a-w- C:\Windows\SysWow64\netevent.dll
2016-05-14 15:41:31 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2016-05-14 14:38:34 450560 ----a-w- C:\Windows\System32\drivers\srv.sys
2016-05-14 14:38:12 176128 ----a-w- C:\Windows\System32\drivers\srv2.sys
2016-05-14 14:38:11 147456 ----a-w- C:\Windows\System32\drivers\srvnet.sys
2016-05-12 19:52:23 18804224 ----a-w- C:\Windows\System32\mshtml.dll
2016-05-12 19:49:39 2351616 ----a-w- C:\Windows\System32\jscript9.dll
2016-05-12 19:46:18 448512 ----a-w- C:\Windows\System32\html.iec
2016-05-12 19:45:03 10940416 ----a-w- C:\Windows\System32\ieframe.dll
2016-05-12 19:44:01 1389056 ----a-w- C:\Windows\System32\urlmon.dll
2016-05-12 19:43:45 1392640 ----a-w- C:\Windows\System32\wininet.dll
2016-05-12 19:41:58 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2016-05-12 19:11:29 1815552 ----a-w- C:\Windows\SysWow64\jscript9.dll
2016-05-12 19:10:11 12840960 ----a-w- C:\Windows\SysWow64\mshtml.dll
2016-05-12 19:08:08 367616 ----a-w- C:\Windows\SysWow64\html.iec
2016-05-12 19:06:41 9755136 ----a-w- C:\Windows\SysWow64\ieframe.dll
2016-05-12 19:06:24 1140224 ----a-w- C:\Windows\SysWow64\urlmon.dll
2016-05-12 19:05:55 1129984 ----a-w- C:\Windows\SysWow64\wininet.dll
2016-05-12 19:04:56 425472 ----a-w- C:\Windows\SysWow64\vbscript.dll
2016-05-12 19:04:56 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2016-05-12 19:04:34 1804800 ----a-w- C:\Windows\SysWow64\iertutil.dll
2016-05-12 19:04:28 231936 ----a-w- C:\Windows\SysWow64\url.dll
2016-05-12 19:04:28 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2016-05-12 19:04:26 65536 ----a-w- C:\Windows\SysWow64\jsproxy.dll
2016-05-12 19:04:21 719360 ----a-w- C:\Windows\SysWow64\jscript.dll
2016-05-12 19:04:10 607744 ----a-w- C:\Windows\SysWow64\msfeeds.dll
2016-05-12 19:04:03 41472 ----a-w- C:\Windows\SysWow64\msfeedsbs.dll
2016-05-12 19:03:57 11776 ----a-w- C:\Windows\SysWow64\mshta.exe
2016-05-12 19:03:55 354304 ----a-w- C:\Windows\SysWow64\dxtmsft.dll
2016-05-12 19:03:53 223744 ----a-w- C:\Windows\SysWow64\dxtrans.dll
2016-05-12 19:03:50 72704 ----a-w- C:\Windows\SysWow64\mshtmled.dll
2016-05-12 19:03:47 176640 ----a-w- C:\Windows\SysWow64\ieui.dll
2016-05-12 19:03:47 10752 ----a-w- C:\Windows\SysWow64\msfeedssync.exe
2016-05-12 19:03:44 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2016-05-12 15:56:53 100864 ----a-w- C:\Windows\System32\winipsec.dll
2016-05-12 15:56:35 381952 ----a-w- C:\Windows\System32\polstore.dll
2016-05-12 15:56:10 534528 ----a-w- C:\Windows\System32\IPSECSVC.DLL
2016-05-12 15:56:06 726016 ----a-w- C:\Windows\System32\gpsvc.dll
2016-05-12 15:56:05 84480 ----a-w- C:\Windows\System32\gpapi.dll
2016-05-12 15:56:05 50176 ----a-w- C:\Windows\System32\FwRemoteSvr.dll
2016-05-12 15:34:38 61440 ----a-w- C:\Windows\SysWow64\winipsec.dll
2016-05-12 15:34:24 273920 ----a-w- C:\Windows\SysWow64\polstore.dll
2016-05-12 15:33:59 75264 ----a-w- C:\Windows\SysWow64\gpapi.dll
2016-05-12 15:33:59 28672 ----a-w- C:\Windows\SysWow64\FwRemoteSvr.dll
2016-05-12 14:45:18 2801664 ----a-w- C:\Windows\System32\win32k.sys
2016-05-12 14:39:36 2048 ----a-w- C:\Windows\System32\tzres.dll
2016-05-12 14:17:53 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2016-05-11 13:10:11 516328 ----a-w- C:\Windows\System32\drivers\ksecdd.sys
2016-05-10 15:55:03 264704 ----a-w- C:\Windows\System32\ws2_32.dll
2016-05-10 15:54:59 442880 ----a-w- C:\Windows\System32\winhttp.dll
2016-05-10 15:54:29 304128 ----a-w- C:\Windows\System32\mswsock.dll
2016-05-10 15:31:47 179200 ----a-w- C:\Windows\SysWow64\ws2_32.dll
2016-05-10 15:31:42 377344 ----a-w- C:\Windows\SysWow64\winhttp.dll
2016-05-10 15:31:17 223232 ----a-w- C:\Windows\SysWow64\mswsock.dll
2016-05-10 14:55:20 248320 ----a-w- C:\Windows\System32\drivers\netbt.sys
2016-05-10 14:55:05 24064 ----a-w- C:\Windows\System32\netbtugc.exe
2016-05-10 14:28:21 21504 ----a-w- C:\Windows\SysWow64\netbtugc.exe
2016-04-24 23:19:00 97856 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2016-04-09 21:39:08 4692200 ----a-w- C:\Windows\System32\ntoskrnl.exe
2016-04-09 21:17:51 975360 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2016-04-09 20:53:24 901352 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys
2016-04-09 20:48:28 1209856 ----a-w- C:\Windows\System32\WindowsCodecs.dll
2016-04-09 20:46:31 47104 ----a-w- C:\Windows\System32\cdd.dll
2016-04-09 20:01:21 566272 ----a-w- C:\Windows\System32\d3d10level9.dll
2016-04-09 19:07:56 486912 ----a-w- C:\Windows\SysWow64\d3d10level9.dll
2016-03-21 23:00:51 1589168 ----a-w- C:\Windows\System32\ntdll.dll
2016-03-21 23:00:51 1171488 ----a-w- C:\Windows\SysWow64\ntdll.dll
.
============= FINISH: 8:12:54.99 ===============

Attached Files

attach.txt (19.3 KB)