DDS (Ver_2012-11-20.01) - NTFS_AMD64 Internet Explorer: 11.0.10240.16384 BrowserJavaVersion: 11.45.2 Run by [removed] at 16:25:42 on 2015-08-04 Microsoft Windows 10 Pro 10.0.10240.0.1252.1.1033.18.7935.3768 [GMT -4:00] . AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS C:\WINDOWS\system32\dwm.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\WINDOWS\system32\atiesrxx.exe C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\System32\svchost.exe -k NetworkService C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\svchost.exe -k apphost C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt C:\Program Files (x86)\CA\PPRT\bin\ITMRTSVC.exe C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe C:\WINDOWS\system32\dashost.exe C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\SysWOW64\lkcitdl.exe C:\WINDOWS\SysWOW64\lkads.exe C:\WINDOWS\SysWOW64\lktsrv.exe C:\WINDOWS\system32\mqsvc.exe C:\Program Files (x86)\National Instruments\MAX\nimxs.exe C:\Program Files (x86)\BUFFALO\NASNAVI\nassvc.exe C:\WINDOWS\system32\svchost.exe -k iissvcs C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe C:\Program Files (x86)\PDF Complete\pdfsvc.exe C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe C:\Program Files (x86)\Ralink\Common\RaRegistry.exe C:\Program Files (x86)\National Instruments\Shared\Tagger\tagsrv.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files (x86)\RapidSolution\Audials 9\VCDWriter\64\VCDAudioService.exe C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE C:\WINDOWS\System32\msdtc.exe C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\WINDOWS\system32\SearchIndexer.exe svchost.exe C:\WINDOWS\system32\svchost.exe -k appmodel C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\System32\svchost.exe -k utcsvc C:\WINDOWS\system32\atieclxx.exe C:\WINDOWS\system32\taskhostw.exe C:\WINDOWS\system32\sihost.exe c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe C:\Program Files (x86)\TeamViewer\TeamViewer.exe C:\WINDOWS\Explorer.EXE C:\Program Files (x86)\TeamViewer\tv_w32.exe C:\Program Files (x86)\TeamViewer\tv_x64.exe C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup C:\Windows\System32\RuntimeBroker.exe C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe C:\Program Files (x86)\BUFFALO\NASNAVI\nassche.exe C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe C:\Program Files\McAfee Security Scan\3.8.150\McUicnt.exe C:\Users\Goldberg\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe C:\Program Files (x86)\Windows Network Accelerater\v5\winvxm.exe C:\WINDOWS\system32\ApplicationFrameHost.exe C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe C:\Windows\System32\WUDFHost.exe C:\Program Files\Windows Defender\MpCmdRun.exe C:\Users\Goldberg\AppData\Local\ospd_us_014010051\upospd_us_014010051.exe C:\Program Files (x86)\ospd_us_014010051\ospd_us_014010051.exe C:\Program Files (x86)\27642015-1438716661-95A3-D400-5C5883308333\vnsu50FD.tmp C:\Program Files (x86)\Games Bot\GamesBotSvc.exe C:\Program Files (x86)\Games Bot\GamesBotSvc.exe C:\Program Files (x86)\Games Bot\GamesBotSvc.exe C:\Program Files (x86)\Games Bot\GamesBot.exe C:\Users\Goldberg\AppData\Local\27642015-1438702306-95A3-D400-5C5883308333\snsy132.tmp C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe C:\Program Files (x86)\WordSurfer_1.10.0.19\Service\wsasvc.exe C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe C:\WINDOWS\system32\taskeng.exe C:\ProgramData\FlashBeat\FlashBeat.exe C:\ProgramData\FlashBeat\FlashBeat.exe C:\WINDOWS\system32\taskeng.exe C:\Users\Goldberg\AppData\Local\SmartWeb\SmartWebHelper.exe C:\Users\Goldberg\AppData\Local\SmartWeb\SmartWebApp.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe C:\Program Files\shopperz02082015\Icrrjayno.exe C:\Program Files\shopperz02082015\Fecaqv.exe C:\Program Files\shopperz02082015\Fecaqv64.exe C:\Program Files\shopperz02082015\Yyedfmef.exe C:\Program Files\shopperz02082015\csrcc.exe C:\Program Files (x86)\CinemaPlus-3.2cV30.07\bea40a79-2d7d-4932-bba7-7661717c74ab-10.exe C:\Users\Goldberg\AppData\Local\gmsd_us_005010051\upgmsd_us_005010051.exe C:\Program Files (x86)\gmsd_us_005010051\gmsd_us_005010051.exe C:\Program Files (x86)\CinemaPlus-3.2cV30.07\bea40a79-2d7d-4932-bba7-7661717c74ab-1-6.exe C:\Program Files (x86)\CinemaPlus-3.2cV30.07\bea40a79-2d7d-4932-bba7-7661717c74ab-14.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\SysWOW64\rundll32.exe C:\Program Files (x86)\DNS Unlocker\dnswabeno.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe C:\WINDOWS\system32\taskhostw.exe C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe C:\Users\Goldberg\AppData\Local\GAMESB~1\Explore\Explore.exe C:\Users\Goldberg\AppData\Local\GAMESB~1\Explore\Explore.exe C:\Users\Goldberg\AppData\Local\GAMESB~1\Explore\Explore.exe C:\Users\Goldberg\AppData\Local\GAMESB~1\Explore\Explore.exe C:\Users\Goldberg\AppData\Local\GAMESB~1\Explore\Explore.exe C:\Users\Goldberg\AppData\Local\GAMESB~1\Explore\Explore.exe C:\Users\Goldberg\AppData\Local\GAMESB~1\Explore\Explore.exe C:\Users\Goldberg\AppData\Local\GAMESB~1\Explore\Explore.exe C:\Users\Goldberg\AppData\Local\GAMESB~1\Explore\Explore.exe C:\WINDOWS\system32\SearchProtocolHost.exe C:\WINDOWS\system32\SearchFilterHost.exe C:\Users\Goldberg\AppData\Local\GAMESB~1\Explore\Explore.exe C:\WINDOWS\System32\cscript.exe . ============== Pseudo HJT Report =============== . BHO: MSS+ Identifier: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL BHO: shopperz02082015: {d8139727-0c0e-430a-a25b-d1fa4e9d4a75} - C:\Program Files\shopperz02082015\Dpewom.dll BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll uRun: [Digiarty_Software_AirPlayit] "C:\Program Files\Digiarty\Air_Playit\airplayit.exe" -min uRun: [NIRegistrationWizard] C:\Program Files (x86)\National Instruments\Shared\RegistrationWizard\Bin\RegistrationWizard.exe -autoDiscover 1 -displayIfNoneFound 0 -displayRegisterOptions 1 -sleepIfNoneFound 0 -locale 1033 uRun: [Amazon Cloud Player] C:\Users\Goldberg\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe uRun: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe uRun: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler uRun: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe uRun: [HP Photosmart 7520 series (NET)] "C:\Program Files\hp\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN3814918705YY:NW" -scfn "HP Photosmart 7520 series (NET)" -AutoStart 1 uRun: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe uRun: [Dropbox Update] "C:\Users\Goldberg\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c uRun: [OneDrive] "C:\Users\Goldberg\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background uRun: [GamesBot] "C:\Program Files (x86)\Games Bot\GamesBot.exe" --startup uRun: [GoogleChromeAutoLaunch_213BD9D89A9AA04B74127839789825C8] "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window uRunOnce: [Uninstall C:\Users\Goldberg\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\WINDOWS\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Goldberg\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64" uRunOnce: [Uninstall C:\Users\Goldberg\AppData\Local\Microsoft\OneDrive\17.3.5892.0626] C:\WINDOWS\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Goldberg\AppData\Local\Microsoft\OneDrive\17.3.5892.0626" mRun: [BingDesktop] C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey mRun: [V0350Mon.exe] C:\WINDOWS\V0350Mon.exe mRun: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe mRun: [NI Background Service] C:\Program Files (x86)\National Instruments\Shared\Update Service\niupdate.exe mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" mRun: [iSkysoft Helper Compact.exe] C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe mRun: [ToolboxFX] "C:\Program Files (x86)\HP\ToolboxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on mRun: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun: [ospd_us_014010051] "C:\Program Files (x86)\ospd_us_014010051\ospd_us_014010051.exe" mRun: [SmartWeb] C:\Users\Goldberg\AppData\Local\SmartWeb\SmartWebHelper.exe mRun: [gmsd_us_005010051] "C:\Program Files (x86)\gmsd_us_005010051\gmsd_us_005010051.exe" mRunOnce: [upospd_us_014010051.exe] C:\Users\Goldberg\AppData\Local\ospd_us_014010051\upospd_us_014010051.exe -runonce mRunOnce: [upgmsd_us_005010051.exe] C:\Users\Goldberg\AppData\Local\ospd_us_014010051\upgmsd_us_005010051.exe -runonce mRunOnce: [SpUninstallCleanUp] REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f StartupFolder: C:\Users\Goldberg\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\BUFFAL~1.LNK - C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe StartupFolder: C:\Users\Goldberg\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\CROSSB~1.LNK - C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe StartupFolder: C:\Users\Goldberg\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\SmartWeb.lnk - C:\Users\Goldberg\AppData\Local\SmartWeb\SmartWebHelper.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\StartUp\BUFFAL~1.LNK - C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\StartUp\HPDIGI~1.LNK - C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\StartUp\MCAFEE~1.LNK - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\StartUp\NASSCH~1.LNK - C:\Program Files (x86)\BUFFALO\NASNAVI\nassche.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-System: DSCAutomationHostEnabled = dword:2 mPolicies-System: ConsentPromptBehaviorAdmin = dword:0 mPolicies-System: PromptOnSecureDesktop = dword:0 IE: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 IE: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} - hxxp://66.133.171.95/rcm/webcontrols/vmrc/VMRCActiveXClient.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab DPF: {8B0F07E1-00F9-4B1B-9A2F-456DC0F54EBF} - hxxp://khse.vlab.elementk.com/vlab/webcontrols/porttester/PortTester.cab DPF: {CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab TCP: NameServer = 192.168.1.1 TCP: Interfaces\{371c1d17-6c4e-43a8-998e-836ae65a7e58} : NameServer = 108.59.9.193,8.8.8.8 TCP: Interfaces\{a590cb6e-46b1-4109-ac70-3da92c214a2e} : DHCPNameServer = 172.20.10.1 TCP: Interfaces\{bb80ee54-3a59-11e5-9bc2-806e6f6e6963} : NameServer = 108.59.9.193,8.8.8.8 TCP: Interfaces\{d763225d-5ef5-47c0-80eb-cbd72f9a85e3} : NameServer = 82.163.143.152,82.163.142.154 TCP: Interfaces\{d763225d-5ef5-47c0-80eb-cbd72f9a85e3} : DHCPNameServer = 192.168.1.1 TCP: Interfaces\{dd1d3b75-7ea3-4ed8-8fa1-ec9949ec2a2c} : NameServer = 108.59.9.193,8.8.8.8 TCP: Interfaces\{feb14a04-2a33-4aba-afe1-fad94a6e7b98} : NameServer = 82.163.143.152,82.163.142.154 Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL Handler: osf-roaming - {C57E9882-B128-4E07-BA2D-FF83B8989C76} - C:\Users\Goldberg\Microsoft Office 15\root\office15\MSOSB.DLL Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll Handler: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll AppInit_DLLs= c:\programdata\flashbeat\flashbeat32.dll SSODL: WebCheck - CLSID: {603D3801-BD81-11d0-A3A5-00C04FD706EC} - C:\WINDOWS\System32\windows.storage.dll x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL x64-BHO: shopperz02082015: {d8139727-0c0e-430a-a25b-d1fa4e9d4a75} - C:\Program Files\shopperz02082015\Dpewom64.dll x64-BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll x64-Run: [Logitech Download Assistant] C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\LogiLDA.dll,LogiFetch x64-Run: [HP LaserJet Professional CM1410 Series Fax] C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe "HP LaserJet Professional CM1410 Series Fax" x64-Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" x64-Run: [shopperz02082015] C:\Program Files\shopperz02082015\Fecaqv.exe x64-Run: [shopperz0208201564] C:\Program Files\shopperz02082015\Fecaqv64.exe x64-mPolicies-System: DSCAutomationHostEnabled = dword:2 x64-mPolicies-System: ConsentPromptBehaviorAdmin = dword:0 x64-mPolicies-System: PromptOnSecureDesktop = dword:0 x64-IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL x64-Handler: osf-roaming - {C57E9882-B128-4E07-BA2D-FF83B8989C76} - x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - x64-Handler: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\WINDOWS\System32\tbauth.dll x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - x64-SSODL: WebCheck - x64-mASetup: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - /UserInstall x64-mASetup: {89820200-ECBD-11cf-8B85-00AA005B4340} - U x64-CLSID: {603D3801-BD81-11d0-A3A5-00C04FD706EC} - C:\WINDOWS\System32\windows.storage.dll . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\Goldberg\AppData\Roaming\Mozilla\Firefox\Profiles\3xgsvmhz.default-1427589195737\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - about:home FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL FF - plugin: C:\PROGRA~2\Palm\PACKAG~1\NPInstal.dll FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll FF - plugin: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll FF - plugin: C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npdeployJava1.dll FF - plugin: C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll FF - plugin: C:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrlui.dll FF - plugin: C:\Program Files (x86)\Roblox\Versions\version-221a4807685c44e7\NPRobloxProxy.dll FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: C:\Users\Goldberg\AppData\Roaming\Mozilla\plugins\npatgpc.dll FF - plugin: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll . ---- FIREFOX POLICIES ---- FF - user.js: extensions.autoDisableScopes - 0 ============= SERVICES / DRIVERS =============== . R0 amd_sata;amd_sata;C:\WINDOWS\System32\drivers\amd_sata.sys [2013-3-31 80552] R0 amd_xata;amd_xata;C:\WINDOWS\System32\drivers\amd_xata.sys [2013-3-31 26280] R0 nipbcfk;National Instruments Class Upper Filter Driver;C:\WINDOWS\System32\drivers\nipbcfk.sys [2010-3-24 16984] R0 WindowsTrustedRT;Windows Trusted Execution Environment Class Extension;C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys [2015-7-10 106520] R0 WindowsTrustedRTProxy;Microsoft Windows Trusted Runtime Secure Service;C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys [2015-7-10 17944] R0 Wof;Windows Overlay File System Filter Driver;C:\WINDOWS\System32\drivers\wof.sys [2015-7-10 199008] R1 ahcache;Application Compatibility Cache;C:\WINDOWS\System32\drivers\ahcache.sys [2015-7-10 215552] R1 bsdriver;bsdriver;C:\WINDOWS\System32\drivers\bsdriver.sys [2015-8-4 34712] R1 cherimoya;cherimoya;C:\WINDOWS\System32\drivers\cherimoya.sys [2015-8-4 61336] R1 FileCrypt;FileCrypt;C:\WINDOWS\System32\drivers\filecrypt.sys [2015-7-10 83968] R1 GIDv2;GIDv2;C:\WINDOWS\System32\drivers\gidv2.sys [2011-8-23 29288] R1 GpuEnergyDrv;GPU Energy Driver;C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-7-10 8192] R1 wsafd_1_10_0_19;wsafd_1_10_0_19;C:\WINDOWS\System32\drivers\wsafd_1_10_0_19.sys [2015-6-15 57728] R2 AMD External Events Utility;AMD External Events Utility;C:\WINDOWS\System32\atiesrxx.exe [2015-1-13 238080] R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-11-16 361984] R2 AODDriver4.1;AODDriver4.1;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2012-3-5 53888] R2 Apple Mobile Device Service;Apple Mobile Device Service;C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-5-29 77128] R2 CoreMessagingRegistrar;CoreMessaging;C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork [2015-7-10 39856] R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2015-3-18 822496] R2 DiagTrack;Diagnostics Tracking Service;C:\WINDOWS\System32\svchost.exe -k utcsvc [2015-7-10 39856] R2 DragonSvc;Dragon Service;C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe [2011-6-5 296808] R2 GamesAppIntegrationService;GamesAppIntegrationService;C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2013-10-7 227904] R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2013-11-4 92160] R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168] R2 NasPmService;NAS PM Service;C:\Program Files (x86)\BUFFALO\NASNAVI\nassvc.exe -Service_Execute -dcyc=290 -dto=5 -dluc=0 -dmin=1 -dmax=2 -dflc=0 -apc=0 -log=0 -pm=1 -pall=1 -phttp=0 -pbc=0 -ppro=0 -pcyc=150 -pmin=1 -pmax=2 -pflc=0 --> C:\Program Files (x86)\BUFFALO\NASNAVI\nassvc.exe -Service_Execute -dcyc=290 -dto=5 -dluc=0 -dmin=1 -dmax=2 -dflc=0 -apc=0 -log=0 -pm=1 -pall=1 -phttp=0 -pbc=0 -ppro=0 -pcyc=150 -pmin=1 -pmax=2 -pflc=0 [?] R2 NiViPxiK;NI-VISA PXI Driver;C:\WINDOWS\System32\drivers\NiViPxiKl.sys [2010-6-23 11944] R2 pdfcDispatcher;PDF Document Manager;C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2011-5-25 1127448] R2 RalinkRegistryWriter;RalinkRegistryWriter;C:\Program Files (x86)\Ralink\Common\RaRegistry.exe [2012-11-27 372736] R2 RalinkRegistryWriter64;RalinkRegistryWriter64;C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe [2012-11-27 447488] R2 RtkAudioService;Realtek Audio Service;C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-6-24 303360] R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2014-10-8 534184] R2 storqosflt;Storage QoS Filter Driver;C:\WINDOWS\System32\drivers\storqosflt.sys [2015-7-10 61952] R2 TeamViewer;TeamViewer 10;C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-3-17 5613328] R2 tiledatamodelsvc;Tile Data model server;C:\WINDOWS\System32\svchost.exe -k appmodel [2015-7-10 39856] R2 UserManager;User Manager;C:\WINDOWS\System32\svchost.exe -k netsvcs [2015-7-10 39856] R2 Virtual CDAudio Service;Virtual CDAudio Service;C:\Program Files (x86)\RapidSolution\Audials 9\VCDWriter\64\VCDAudioService.exe [2011-11-9 178528] R2 WdNisDrv;Windows Defender Network Inspection System Driver;C:\WINDOWS\System32\drivers\WdNisDrv.sys [2015-7-10 119648] R3 AppXSvc;AppX Deployment Service (AppXSVC);C:\WINDOWS\System32\svchost.exe -k wsappx [2015-7-10 39856] R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;C:\WINDOWS\System32\drivers\AtihdW76.sys [2011-9-13 115216] R3 ClipSVC;Client License Service (ClipSVC);C:\WINDOWS\System32\svchost.exe -k wsappx [2015-7-10 39856] R3 DsSvc;Data Sharing Service;C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted [2015-7-10 39856] R3 lfsvc;Geolocation Service;C:\WINDOWS\System32\svchost.exe -k netsvcs [2015-7-10 39856] R3 LicenseManager;Windows License Manager Service;C:\WINDOWS\System32\svchost.exe -k LocalService [2015-7-10 39856] R3 NcbService;Network Connection Broker;C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted [2015-7-10 39856] R3 NdisVirtualBus;Microsoft Virtual Network Adapter Enumerator;C:\WINDOWS\System32\drivers\NdisVirtualBus.sys [2015-7-10 20992] R3 netr28x;Ralink 802.11n Extensible Wireless Driver;C:\WINDOWS\System32\drivers\netr28x.sys [2015-6-12 2554528] R3 rt640x64;Realtek RT640 NT Driver;C:\WINDOWS\System32\drivers\rt640x64.sys [2015-7-10 587264] R3 Sftfs;Sftfs;C:\WINDOWS\System32\drivers\Sftfslh.sys [2014-10-8 766632] R3 Sftplay;Sftplay;C:\WINDOWS\System32\drivers\Sftplaylh.sys [2014-10-8 273576] R3 Sftredir;Sftredir;C:\WINDOWS\System32\drivers\Sftredirlh.sys [2014-10-8 29352] R3 Sftvol;Sftvol;C:\WINDOWS\System32\drivers\Sftvollh.sys [2014-10-8 23208] R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2014-10-8 211104] R3 StateRepository;State Repository Service;C:\WINDOWS\System32\svchost.exe -k appmodel [2015-7-10 39856] R3 USBAAPL64;Apple Mobile USB Driver;C:\WINDOWS\System32\drivers\usbaapl64.sys [2015-6-10 54784] R3 WdNisSvc;Windows Defender Network Inspection Service;C:\Program Files\Windows Defender\NisSrv.exe [2015-7-10 362928] R3 WSDScan;WSD Scan Support;C:\WINDOWS\System32\drivers\WSDScan.sys [2015-7-10 24576] R3 WUDFWpdMtp;WUDFWpdMtp;C:\WINDOWS\System32\drivers\WUDFRd.sys [2015-7-10 214016] S2 BingDesktopUpdate;Bing Desktop Update service;C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [2013-6-20 173192] S2 dmwappushservice;dmwappushsvc;C:\WINDOWS\System32\svchost.exe -k netsvcs [2015-7-10 39856] S2 DoSvc;Delivery Optimization;C:\WINDOWS\System32\svchost.exe -k netsvcs [2015-7-10 39856] S2 HP LaserJet Service;HP LaserJet Service;C:\Program Files (x86)\Hp\HPLaserJetService\HPLaserJetService.exe [2010-10-25 145920] S2 IHA_MessageCenter;IHA_MessageCenter;C:\Program Files (x86)\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe [2011-12-12 290832] S2 MapsBroker;Downloaded Maps Manager;C:\WINDOWS\System32\svchost.exe -k NetworkService [2015-7-10 39856] S2 NIApplicationWebServer;NI Application Web Server;C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [2010-11-8 47776] S2 niLXIDiscovery;National Instruments LXI Discovery Service;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe [2010-6-23 131776] S2 nimDNSResponder;National Instruments mDNS Responder Service;C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [2010-7-30 194224] S2 RaMediaServer;Ralink UPnP Media Server;C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [2012-11-27 1859584] S2 RoxioNow Service;RoxioNow Service;C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe [2010-11-26 399344] S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496] S3 ADP80XX;ADP80XX;C:\WINDOWS\System32\drivers\adp80xx.sys [2015-7-10 1135456] S3 AJRouter;AllJoyn Router Service;C:\WINDOWS\System32\svchost.exe -k LocalService [2015-7-10 39856] S3 AODDriver4.0;AODDriver4.0;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2012-3-5 53888] S3 AppReadiness;App Readiness;C:\WINDOWS\System32\svchost.exe -k AppReadiness [2015-7-10 39856] S3 bcmfn2;bcmfn2 Service;C:\WINDOWS\System32\drivers\bcmfn2.sys [2015-7-10 17624] S3 BthHFSrv;Bluetooth Handsfree Service;C:\WINDOWS\System32\svchost.exe -k LocalServiceAndNoImpersonation [2015-7-10 39856] S3 buttonconverter;Service for Portable Device Control devices;C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-7-10 32256] S3 CapImg;HID driver for CapImg touch screen;C:\WINDOWS\System32\drivers\capimg.sys [2015-7-10 116736] S3 CDPSvc;CDPSvc;C:\WINDOWS\System32\svchost.exe -k LocalService [2015-7-10 39856] S3 DcpSvc;DataCollectionPublishingService;C:\WINDOWS\System32\svchost.exe -k netsvcs [2015-7-10 39856] S3 DevQueryBroker;DevQuery Background Discovery Broker;C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted [2015-7-10 39856] S3 diagnosticshub.standardcollector.service;Microsoft (R) Diagnostics Hub Standard Collector Service;C:\WINDOWS\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-7-10 27136] S3 DmEnrollmentSvc;Device Management Enrollment Service;C:\WINDOWS\System32\svchost.exe -k netsvcs [2015-7-10 39856] S3 embeddedmode;embeddedmode;C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted [2015-7-10 39856] S3 EntAppSvc;Enterprise App Management Service;C:\WINDOWS\System32\svchost.exe -k appmodel [2015-7-10 39856] S3 fcvsc;fcvsc;C:\WINDOWS\System32\drivers\fcvsc.sys [2015-7-10 31232] S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] S3 genericusbfn;Generic USB Function Class;C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-7-10 20992] S3 hidinterrupt;Common Driver for HID Buttons implemented with interrupts;C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-7-10 50016] S3 iaLPSSi_GPIO;Intel(R) Serial IO GPIO Controller Driver;C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [2015-7-10 38128] S3 iaLPSSi_I2C;Intel(R) Serial IO I2C Controller Driver;C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [2015-7-10 122608] S3 iaStorAV;Intel(R) SATA RAID Controller Windows;C:\WINDOWS\System32\drivers\iaStorAV.sys [2015-7-10 673120] S3 ibbus;Mellanox InfiniBand Bus/AL (Filter Driver);C:\WINDOWS\System32\drivers\ibbus.sys [2015-7-10 424800] S3 icssvc;Windows Mobile Hotspot Service;C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted [2015-7-10 39856] S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\WINDOWS\System32\ieetwcollector.exe [2015-7-10 115200] S3 intelpep;Intel(R) Power Engine Plug-in Driver;C:\WINDOWS\System32\drivers\intelpep.sys [2015-7-10 43872] S3 IoQos;IoQos;C:\WINDOWS\System32\drivers\ioqos.sys [2015-7-10 26624] S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;C:\WINDOWS\System32\drivers\LEqdUsb.sys [2013-5-23 77592] S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;C:\WINDOWS\System32\drivers\LHidEqd.sys [2013-5-23 13080] S3 LSI_SAS2i;LSI_SAS2i;C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-7-10 104800] S3 LSI_SAS3i;LSI_SAS3i;C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-7-10 99168] S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [2014-10-13 129752] S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-4-9 289256] S3 mlx4_bus;Mellanox ConnectX Bus Enumerator;C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-7-10 705376] S3 ndfltr;NetworkDirect Service;C:\WINDOWS\System32\drivers\ndfltr.sys [2015-7-10 76128] S3 NetSetupSvc;Network Setup Service;C:\WINDOWS\System32\svchost.exe -k netsvcs [2015-7-10 39856] S3 netvsc;netvsc;C:\WINDOWS\System32\drivers\netvsc.sys [2015-7-10 94720] S3 NgcCtnrSvc;Microsoft Passport Container;C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted [2015-7-10 39856] S3 NgcSvc;Microsoft Passport;C:\WINDOWS\System32\lsass.exe [2015-7-10 56344] S3 nidimk;nidimk;C:\WINDOWS\System32\drivers\nidimkl.sys [2009-7-7 11872] S3 nipalfwedl;nipalfwedl;C:\WINDOWS\System32\drivers\nipalfwedl.sys [2010-6-2 12992] S3 nipalusbedl;nipalusbedl;C:\WINDOWS\System32\drivers\nipalusbedl.sys [2010-6-2 12992] S3 NiViPciK;NI-VISA PCI Driver;C:\WINDOWS\System32\drivers\NiViPciKl.sys [2010-6-23 11944] S3 percsas2i;percsas2i;C:\WINDOWS\System32\drivers\percsas2i.sys [2015-7-10 58208] S3 percsas3i;percsas3i;C:\WINDOWS\System32\drivers\percsas3i.sys [2015-7-10 58720] S3 ReFSv1;ReFSv1;C:\WINDOWS\System32\drivers\refsv1.sys [2015-8-4 934752] S3 RetailDemo;Retail Demo Service;C:\WINDOWS\System32\svchost.exe -k netsvcs [2015-7-10 39856] S3 Revoflt;Revoflt;C:\WINDOWS\System32\drivers\revoflt.sys [2011-12-18 31800] S3 rsvcdwdr;rsvcdwdr;C:\WINDOWS\System32\drivers\rsvcdwdr.sys [2011-11-9 45160] S3 ScDeviceEnum;Smart Card Device Enumeration Service;C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted [2015-7-10 39856] S3 SensorDataService;Sensor Data Service;C:\WINDOWS\System32\SensorDataService.exe [2015-8-4 1031680] S3 SensorService;Sensor Service;C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted [2015-7-10 39856] S3 SerCx2;Serial UART Support Library;C:\WINDOWS\System32\drivers\SerCx2.sys [2015-7-10 155488] S3 smphost;Microsoft Storage Spaces SMP;C:\WINDOWS\System32\svchost.exe -k smphost [2015-7-10 39856] S3 SmsRouter;Microsoft Windows SMS Router Service.;C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted [2015-7-10 39856] S3 stornvme;Microsoft Standard NVM Express Driver;C:\WINDOWS\System32\drivers\stornvme.sys [2015-7-10 78688] S3 storufs;Microsoft Universal Flash Storage (UFS) Driver;C:\WINDOWS\System32\drivers\storufs.sys [2015-7-10 40288] S3 UcmCx0101;USB Connector Manager KMDF Class Extension;C:\WINDOWS\System32\drivers\UcmCx.sys [2015-7-10 61952] S3 UcmUcsi;USB Connector Manager UCSI Client;C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-8-4 46080] S3 UdeCx;USB Device Emulation Support Library;C:\WINDOWS\System32\drivers\Udecx.sys [2015-7-10 44032] S3 UEFI;Microsoft UEFI Driver;C:\WINDOWS\System32\drivers\uefi.sys [2015-7-10 28512] S3 Ufx01000;USB Function Class Extension;C:\WINDOWS\System32\drivers\ufx01000.sys [2015-7-10 245088] S3 UfxChipidea;USB Chipidea Controller;C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-7-10 94048] S3 ufxsynopsys;USB Synopsys Controller;C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-7-10 127840] S3 UrsChipidea;Chipidea USB Role-Switch Driver;C:\WINDOWS\System32\drivers\urschipidea.sys [2015-7-10 28512] S3 UrsCx01000;USB Role-Switch Support Library;C:\WINDOWS\System32\drivers\urscx01000.sys [2015-7-10 57696] S3 UrsSynopsys;Synopsys USB Role-Switch Driver;C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-7-10 27488] S3 UsoSvc;Update Orchestrator Service;C:\WINDOWS\System32\svchost.exe -k netsvcs [2015-7-10 39856] S3 vhf;Virtual HID Framework (VHF) Driver;C:\WINDOWS\System32\drivers\vhf.sys [2015-7-10 31744] S3 vmicguestinterface;Hyper-V Guest Service Interface;C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted [2015-7-10 39856] S3 vmicvmsession;Hyper-V VM Session Service;C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted [2015-7-10 39856] S3 w3logsvc;W3C Logging Service;C:\WINDOWS\System32\svchost.exe -k apphost [2015-7-10 39856] S3 WalletService;WalletService;C:\WINDOWS\System32\svchost.exe -k appmodel [2015-7-10 39856] S3 wdiwifi;WDI Driver Framework;C:\WINDOWS\System32\drivers\WdiWiFi.sys [2015-7-10 685056] S3 WEPHOSTSVC;Windows Encryption Provider Host Service;C:\WINDOWS\System32\svchost.exe -k WepHostSvcGroup [2015-7-10 39856] S3 WinMad;WinMad Service;C:\WINDOWS\System32\drivers\winmad.sys [2015-7-10 26976] S3 WinVerbs;WinVerbs Service;C:\WINDOWS\System32\drivers\winverbs.sys [2015-7-10 59232] S3 workfolderssvc;Work Folders;C:\WINDOWS\System32\svchost.exe -k LocalService [2015-7-10 39856] S3 WpnService;Windows Push Notifications Service;C:\WINDOWS\System32\svchost.exe -k wswpnservice [2015-7-10 39856] S3 xboxgip;Xbox Game Input Protocol Driver;C:\WINDOWS\System32\drivers\xboxgip.sys [2015-7-10 222720] S3 xinputhid;XINPUT HID Filter Driver;C:\WINDOWS\System32\drivers\xinputhid.sys [2015-7-10 25600] S4 NIApplicationWebServer64;NI Application Web Server (64-bit);C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [2010-11-8 63648] S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184] . =============== File Associations =============== . FileExt: .txt: txtfile=C:\WINDOWS\System32\NOTEPAD.EXE %1 [UserChoice] . =============== Created Last 30 ================ . 2015-08-04 20:05:01 -------- d-----w- C:\ProgramData\839acdf600003a18 2015-08-04 20:01:36 -------- d-----w- C:\Program Files (x86)\PCMATICPLUSSOL 2015-08-04 20:01:27 -------- d-----w- C:\Users\Goldberg\AppData\Local\PCMATICPLUS_fixed 2015-08-04 19:54:05 -------- d-----w- C:\Users\Goldberg\AppData\Local\4723 2015-08-04 19:51:35 -------- d-----w- C:\Program Files (x86)\NewGen 2015-08-04 19:50:40 -------- d-----w- C:\Program Files (x86)\LastPass Free Password Manager 2015-08-04 19:50:39 -------- d-----w- C:\ProgramData\{a9653baa-56bf-0112-a965-53baa56beea9} 2015-08-04 19:50:07 -------- d-----w- C:\Program Files (x86)\youtubeadblocker 2015-08-04 19:49:40 -------- d-----w- C:\ProgramData\972583718172220497 2015-08-04 19:49:32 34712 ----a-w- C:\WINDOWS\System32\drivers\bsdriver.sys 2015-08-04 19:49:14 -------- d-----w- C:\Program Files (x86)\PriceLess 2015-08-04 19:49:00 613255 ----a-w- C:\Users\Goldberg\AppData\Local\nsn51E2.tmp 2015-08-04 19:48:59 -------- d-sh--w- C:\Users\Goldberg\AppData\Roaming\AnyProtectEx 2015-08-04 19:48:57 -------- d-----w- C:\Program Files (x86)\27642015-1438717737-95A3-D400-5C5883308333 2015-08-04 19:48:38 -------- d-----w- C:\ProgramData\{9576cd8e-0337-a7bc-9576-6cd8e0333638} 2015-08-04 19:48:28 -------- d-----w- C:\Program Files (x86)\GUPlayer 2015-08-04 19:48:28 -------- d-----w- C:\Program Files (x86)\DNS Unlocker 2015-08-04 19:47:44 -------- d-----w- C:\Users\Goldberg\AppData\Local\gmsd_us_005010051 2015-08-04 19:47:44 -------- d-----w- C:\Program Files (x86)\gmsd_us_005010051 2015-08-04 19:47:11 -------- d-----w- C:\Program Files (x86)\FriendlyError 2015-08-04 19:46:52 -------- d-----w- C:\Users\Goldberg\AppData\Local\globalUpdate 2015-08-04 19:46:52 -------- d-----w- C:\Program Files (x86)\globalUpdate 2015-08-04 19:45:59 -------- d-----w- C:\Program Files (x86)\CinemaPlus-3.2cV30.07 2015-08-04 19:45:50 61336 ----a-w- C:\WINDOWS\System32\drivers\cherimoya.sys 2015-08-04 19:45:44 -------- d-----w- C:\Program Files\shopperz02082015 2015-08-04 19:44:48 -------- d-----w- C:\Users\Goldberg\AppData\Local\Crossbrowse 2015-08-04 19:44:13 -------- d-----w- C:\Program Files (x86)\Crossbrowse 2015-08-04 19:43:57 -------- d-----w- C:\Users\Goldberg\AppData\Local\SmartWeb 2015-08-04 19:42:49 -------- d-----w- C:\ProgramData\Service1291 2015-08-04 19:42:32 -------- d-----w- C:\ProgramData\28341ff220e0446c9fff27c4493d622e 2015-08-04 19:42:22 -------- d-----w- C:\ProgramData\FlashBeat 2015-08-04 19:41:23 -------- d-----w- C:\Program Files (x86)\WordSurfer_1.10.0.19 2015-08-04 19:31:46 -------- d-----w- C:\Users\Goldberg\AppData\Local\27642015-1438702306-95A3-D400-5C5883308333 2015-08-04 19:31:32 -------- d-----w- C:\Users\Goldberg\AppData\Local\Games Bot 2015-08-04 19:31:31 -------- d-----w- C:\Program Files (x86)\Games Bot 2015-08-04 19:31:14 -------- d-----w- C:\Program Files (x86)\Portable WeatherApp 2015-08-04 19:31:13 -------- d-----w- C:\WINDOWS\PCBHDNW 2015-08-04 19:31:01 -------- d-----w- C:\Users\Goldberg\AppData\Roaming\ASPackage 2015-08-04 19:31:01 -------- d-----w- C:\Program Files (x86)\27642015-1438716661-95A3-D400-5C5883308333 2015-08-04 19:30:15 -------- d-----w- C:\Users\Goldberg\AppData\Local\ospd_us_014010051 2015-08-04 19:30:15 -------- d-----w- C:\Program Files (x86)\ospd_us_014010051 2015-08-04 19:19:35 -------- d-----w- C:\Users\Goldberg\AppData\Local\MicrosoftEdge 2015-08-04 19:19:15 16148 ----a-w- C:\WINDOWS\System32\GOLDBERG-HP_Goldberg_HistoryPrediction.bin 2015-08-04 13:49:01 -------- d-----w- C:\WINDOWS\System32\SleepStudy 2015-08-04 12:49:01 -------- d-----w- C:\Users\Goldberg\AppData\Local\PeerDistRepub 2015-08-04 12:16:43 -------- d-----r- C:\Users\Goldberg\OneDrive 2015-08-04 12:15:49 -------- d-----w- C:\ProgramData\Microsoft OneDrive 2015-08-04 12:14:00 -------- d-----w- C:\Users\Goldberg\AppData\Local\Publishers 2015-08-04 12:09:04 -------- d-----w- C:\Users\Goldberg\AppData\Local\TileDataLayer 2015-08-04 07:34:08 -------- dc----w- C:\WINDOWS\Panther 2015-08-04 07:30:10 -------- d-----w- C:\Windows.old 2015-08-04 07:28:57 991584 ----a-w- C:\WINDOWS\System32\ReAgent.dll 2015-08-04 07:21:46 -------- d-----w- C:\WINDOWS\SysWow64\BestPractices 2015-08-04 07:21:46 -------- d-----w- C:\WINDOWS\System32\msmq 2015-08-04 07:21:46 -------- d-----w- C:\WINDOWS\System32\BestPractices 2015-08-04 07:21:43 -------- d-----w- C:\inetpub 2015-08-04 07:20:52 778936 ----a-w- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll 2015-08-04 07:20:52 35480 ----a-w- C:\WINDOWS\SysWow64\TsWpfWrp.exe 2015-08-04 07:20:52 102608 ----a-w- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll 2015-08-04 07:20:50 35480 ----a-w- C:\WINDOWS\System32\TsWpfWrp.exe 2015-08-04 07:20:50 124112 ----a-w- C:\WINDOWS\System32\PresentationCFFRasterizerNative_v0300.dll 2015-08-04 07:20:50 1166520 ----a-w- C:\WINDOWS\System32\PresentationNative_v0300.dll 2015-08-04 04:32:33 1190000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8FED4BA0-68FF-1223-6FD1-2864A8058532}\GapaEngine.dll 2015-08-04 04:12:01 -------- d-----w- C:\WINDOWS\System32\wbem\Performance 2015-08-04 04:10:03 2718208 ----a-w- C:\WINDOWS\SysWow64\PrintConfig.dll 2015-08-04 03:47:59 -------- d-----w- C:\Program Files (x86)\Common Files\SpeechEngines 2015-08-04 03:47:49 -------- d-----w- C:\Program Files\Common Files\SpeechEngines 2015-08-04 03:39:40 -------- d-----w- C:\WINDOWS\System32\SRSLabs 2015-08-04 03:39:30 -------- d-----w- C:\WINDOWS\SysWow64\RTCOM 2015-08-04 03:39:30 -------- d-----w- C:\Program Files\Realtek 2015-08-04 03:39:03 0 ----a-w- C:\WINDOWS\ativpsrm.bin 2015-08-03 14:27:04 -------- d--h--w- C:\$Windows.~BT 2015-08-03 14:04:40 -------- d--h--w- C:\$Windows.~WS 2015-08-03 09:03:24 12222168 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1CBBF398-DC21-46A6-90CE-917F498D1BCB}\mpengine.dll 2015-08-02 06:08:48 12222168 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll 2015-07-17 15:55:46 -------- d-----w- C:\Users\Goldberg\AppData\Roaming\webex 2015-07-17 15:29:02 -------- d-----w- C:\ProgramData\WebEx 2015-07-17 15:29:01 -------- d-----w- C:\Users\Goldberg\AppData\Local\WebEx 2015-07-16 23:15:40 1190000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F70E8B3F-8863-4182-9BC7-4F1A44D82EFA}\gapaengine.dll 2015-07-16 02:25:46 -------- d-----w- C:\Program Files\iPod 2015-07-16 02:25:44 -------- d-----w- C:\Program Files\iTunes 2015-07-16 01:39:08 -------- d-----w- C:\Users\Goldberg\AppData\Local\Dropbox 2015-07-16 01:39:08 -------- d-----w- C:\ProgramData\Dropbox 2015-07-10 13:19:33 -------- d-----w- C:\WINDOWS\en-US 2015-07-10 13:19:33 -------- d-----w- C:\WINDOWS\DigitalLocker 2015-07-10 13:14:53 -------- d-sh--w- C:\WINDOWS\BitLockerDiscoveryVolumeContents 2015-07-10 13:14:53 -------- d-----w- C:\WINDOWS\ShellNew 2015-07-10 13:14:53 -------- d-----w- C:\Program Files\Windows Journal 2015-07-10 13:12:25 -------- d-----w- C:\WINDOWS\OCR 2015-07-10 13:12:08 -------- d-----w- C:\WINDOWS\SKB 2015-07-10 12:22:52 16148 ----a-w- C:\WINDOWS\System32\DESKTOP-M7P1NB6_Administrator_HistoryPrediction.bin 2015-07-10 12:22:45 -------- d-----w- C:\ProgramData\USOShared 2015-07-10 12:21:43 -------- d-----w- C:\WINDOWS\System32\wbem\MOF\good 2015-07-10 12:21:43 -------- d-----w- C:\WINDOWS\System32\wbem\MOF\bad 2015-07-10 12:21:43 -------- d-----w- C:\WINDOWS\System32\wbem\MOF 2015-07-10 12:21:38 -------- d-sh--we C:\ProgramData\Documents 2015-07-10 12:21:38 -------- d-sh--we C:\Documents and Settings 2015-07-10 12:20:42 -------- d-----w- C:\WINDOWS\ServiceProfiles 2015-07-10 12:20:38 -------- d-s---w- C:\WINDOWS\System32\Microsoft 2015-07-10 11:06:25 -------- d-----w- C:\WINDOWS\Setup 2015-07-10 11:06:01 792568 ----a-w- C:\WINDOWS\SysWow64\FlashPlayerApp.exe 2015-07-10 11:06:01 178168 ----a-w- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl 2015-07-10 11:03:58 -------- d-----w- C:\WINDOWS\System32\drivers 2015-07-10 11:02:54 -------- d-----w- C:\WINDOWS\INF 2015-07-10 11:00:42 77664 ----a-w- C:\WINDOWS\System32\wbem\WEMSAL_WmiProvider.dll 2015-07-10 10:59:59 9728 ----a-w- C:\WINDOWS\System32\RpcNs4.dll 2015-07-10 10:55:34 -------- d-----w- C:\WINDOWS\CbsTemp . ==================== Find3M ==================== . 2015-08-04 07:28:57 988672 ----a-w- C:\WINDOWS\System32\RDXService.dll 2015-08-04 07:21:39 96768 ----a-w- C:\WINDOWS\SysWow64\mqoa.tlb 2015-07-10 13:14:48 96256 ----a-w- C:\WINDOWS\System32\auditpolmsg.dll 2015-07-10 13:12:07 6358016 ----a-w- C:\WINDOWS\System32\NlsData0009.dll 2015-07-10 13:12:07 5739520 ----a-w- C:\WINDOWS\System32\prm0009.dll 2015-07-10 13:12:07 4847104 ----a-w- C:\WINDOWS\SysWow64\NlsData0009.dll 2015-07-10 13:12:07 2629632 ----a-w- C:\WINDOWS\SysWow64\NlsLexicons0009.dll 2015-07-10 13:12:07 2629632 ----a-w- C:\WINDOWS\System32\NlsLexicons0009.dll 2015-07-10 13:11:15 8704 ----a-w- C:\WINDOWS\SysWow64\drivers\en-US\fwpkclnt.sys.mui 2015-07-10 13:11:15 7168 ----a-w- C:\WINDOWS\SysWow64\drivers\en-US\ndiscap.sys.mui 2015-07-10 13:11:15 3584 ----a-w- C:\WINDOWS\SysWow64\drivers\en-US\wfplwfs.sys.mui 2015-07-10 13:11:15 3072 ----a-w- C:\WINDOWS\SysWow64\drivers\UMDF\en-US\SensorsCx.dll.mui 2015-07-10 13:11:15 12288 ----a-w- C:\WINDOWS\SysWow64\drivers\en-US\NdisImPlatform.sys.mui 2015-07-10 11:02:43 208384 ----a-w- C:\WINDOWS\SysWow64\msclmd.dll 2015-07-10 11:02:41 229888 ----a-w- C:\WINDOWS\System32\msclmd.dll 2015-07-10 11:00:41 874 ----a-w- C:\WINDOWS\System32\manage-bde.wsf 2015-07-10 10:59:59 9728 ----a-w- C:\WINDOWS\System32\mtxex.dll 2015-07-10 09:07:55 141824 ----a-w- C:\WINDOWS\System32\poqexec.exe 2015-07-10 09:07:53 118272 ----a-w- C:\WINDOWS\SysWow64\poqexec.exe 2015-07-10 09:05:37 897024 ----a-w- C:\WINDOWS\System32\SmiEngine.dll 2015-07-10 09:05:37 618272 ----a-w- C:\WINDOWS\System32\sxs.dll 2015-07-10 09:05:37 36864 ----a-w- C:\WINDOWS\System32\sxstrace.exe 2015-07-10 09:05:37 254816 ----a-w- C:\WINDOWS\System32\wdscore.dll 2015-07-10 09:05:37 243040 ----a-w- C:\WINDOWS\System32\cmipnpinstall.dll 2015-07-10 09:05:37 202240 ----a-w- C:\WINDOWS\System32\PkgMgr.exe 2015-07-10 09:05:37 135520 ----a-w- C:\WINDOWS\System32\SSShim.dll 2015-07-10 09:05:33 207200 ----a-w- C:\WINDOWS\SysWow64\wdscore.dll 2015-07-10 09:05:33 199168 ----a-w- C:\WINDOWS\SysWow64\PkgMgr.exe 2015-07-10 09:05:33 111456 ----a-w- C:\WINDOWS\SysWow64\SSShim.dll 2015-07-10 09:05:30 191840 ----a-w- C:\WINDOWS\SysWow64\cmipnpinstall.dll 2015-07-05 10:08:23 300704 ----a-w- C:\WINDOWS\System32\MpSigStub.exe 2015-07-01 03:12:21 97888 ----a-w- C:\WINDOWS\SysWow64\WindowsAccessBridge-32.dll 2015-06-25 02:57:06 72121872 ----a-w- C:\WINDOWS\System32\RCoRes64.dat 2015-06-25 02:57:02 2926848 ----a-w- C:\WINDOWS\System32\RtPgEx64.dll 2015-06-25 02:57:02 2710784 ----a-w- C:\WINDOWS\System32\RTSnMg64.cpl 2015-06-25 02:57:02 259288 ----a-w- C:\WINDOWS\System32\slprp64.dll 2015-06-25 02:57:00 4504320 ----a-w- C:\WINDOWS\System32\drivers\RTKVHD64.sys 2015-06-25 02:57:00 23696 ----a-w- C:\WINDOWS\System32\RtkCoLDR64.dll 2015-06-25 02:57:00 1756928 ----a-w- C:\WINDOWS\System32\RCoInstII64.dll 2015-06-25 02:57:00 122328 ----a-w- C:\WINDOWS\System32\CONEQMSAPOGUILibrary.dll 2015-06-24 05:29:00 1217192 ----a-w- C:\WINDOWS\SysWow64\FM20.DLL 2015-06-17 04:23:50 94208 ----a-w- C:\WINDOWS\SysWow64\QuickTimeVR.qtx 2015-06-17 04:23:50 69632 ----a-w- C:\WINDOWS\SysWow64\QuickTime.qts 2015-06-15 22:28:50 57728 ----a-w- C:\WINDOWS\System32\drivers\wsafd_1_10_0_19.sys 2015-06-12 09:03:10 343712 ----a-w- C:\WINDOWS\System32\RaCoInstx.dll 2015-06-12 08:59:24 2554528 ----a-w- C:\WINDOWS\System32\drivers\netr28x.sys 2015-06-11 03:08:36 6112072 ----a-w- C:\WINDOWS\System32\usbaaplrc.dll 2015-06-11 03:08:36 54784 ----a-w- C:\WINDOWS\System32\drivers\usbaapl64.sys 2015-05-25 13:23:31 36864 ----a-w- C:\WINDOWS\System32\UtcResources.dll . ============= FINISH: 16:30:03.58 ===============