YWNMON32 Trojan #?

glenn440 New Helpee Posts: 19	YWNMON32 Trojan #? Jul 12, 2014 22:48:21 GMT -8 Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by glenn440 on Jul 12, 2014 22:48:21 GMT -8 I got a message stating I needed to download Java to see a real estate page and when I did this virus was downloaded. Can someone help?

Quads
Malware Removalists

In New Zealand

Posts: 9,387

YWNMON32 Trojan #? Jul 13, 2014 10:10:07 GMT -8

Post by Quads on Jul 13, 2014 10:10:07 GMT -8

Do Not use advanced tools or any tools used on this board without supervision.

Malware removal can be difficult over a forum as it is, without a user doing their own actions, the tools used are more advanced and thus have added danger that comes with that. This board is protected so that only Malware removers, Admin and Mods can reply to a users thread but all members can create a thread asking for removal of Infection(s)

Make changes to your computer only when the Malware Expert specifically states it. The Malware Experts request specific steps to be followed, as some malware removal requires multiple steps and evaluations along the way. When you take other advice or make other changes, this often negates the work done by the expert, and can sometimes result in an inoperable system.

This also includes any tools or steps other than those the from the Malware Expert. We need to be certain about the state of your system to see what actually is going on, and what is required to fix the system while not harming the rest of the system. Most often, well-intentioned independent efforts can make things much worse. The malware remediation tools are more advanced than othe tools, and can often create bigger problems when used without expert guidance.

Follow all the directions in order, and to the end. Please perform all steps in the order they are listed in each set of instructions. As you might imagine, some steps are a bit complicated. If things are not clear, be sure to stop and let the Malware Expert know the problem. We don't mind clarifying a situation, as others might have the same question. If a tool does not run as expected, don't force it. Stop the steps, and update the forum topic with the current situation. It is better stop and let us know, than to force a tool to run and cause bigger problems.

Also, when your computer is clean and we are finished, the Expert will tell you we are finished. Malware removal is a process that requires verification, and we want to be sure your system is completely clean before we're done.

When describing your problem, provide as much information as possible, as soon as possible. Explain as best you can what happens with your computer, e.g. it beeps three times, black screen with cursor then goes no further, system gets stuck at the Windows startup logo, etc. This helps the expert to understand what is happening to the system and what may be wrong. If your computer cannot start up successfully please provide details about your installed Windows Operating System, including the Version, Edition and if it is a 32bit or a 64bit system. (e.g. Windows Vista Home Premium 32-bit)

When the user follow instructions and things still go a little haywire, and it does happen, it is up to us to sort the extra problem out.

Take longer to read if your language is not English, so that hopefully it is understood.

Reply stating you have read the post fully.

I also if it is busy (have a lot of systems at once to deal with) like being in a supermarket checkout line, waiting their turn, I use the forum like a checkout line.

Quads

glenn440 New Helpee Posts: 19	YWNMON32 Trojan #? Jul 13, 2014 15:42:11 GMT -8 Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by glenn440 on Jul 13, 2014 15:42:11 GMT -8 I read it

Quads Malware Removalists In New Zealand Posts: 9,387	YWNMON32 Trojan #? Jul 13, 2014 15:59:11 GMT -8 Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by Quads on Jul 13, 2014 15:59:11 GMT -8 What is your Operating system, including if 32 bit or 64 bit?? Quads

glenn440 New Helpee Posts: 19	YWNMON32 Trojan #? Jul 13, 2014 16:00:58 GMT -8 Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by glenn440 on Jul 13, 2014 16:00:58 GMT -8 windows 7 ultimate service pack 1 64 bit

Quads
Malware Removalists

In New Zealand

Posts: 9,387

YWNMON32 Trojan #? Jul 13, 2014 16:15:05 GMT -8 Quads likes this

Post by Quads on Jul 13, 2014 16:15:05 GMT -8

Read Slowly and all of it.

Please download www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ You need to download the 64 bit version.

Place FRST64.exe onto your desktop from where ever it downloaded to.

Start FRST64 that is on your Desktop

The tool will start to run.
When the tool opens click Yes to disclaimer. (if it does)

Press Scan button.

It will make a logs (FRST.txt and addition.txt) on your Desktop Please attach the log in your reply back. Or open the logs in notepad and copy the logs and paste back in a message as a reply.

Quads

glenn440
New Helpee

Posts: 19

YWNMON32 Trojan #? Jul 13, 2014 16:26:43 GMT -8

Post by glenn440 on Jul 13, 2014 16:26:43 GMT -8

This is the FRST.txt file.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-07-2014
Ran by Glenn (administrator) on GLENN-PC on 13-07-2014 19:24:00
Running from C:\Users\Glenn\Desktop
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
() C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe
(Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Viewpoint Corporation) C:\Program Files (x86)\Viewpoint\Common\ViewpointService.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
() C:\Program Files (x86)\sizlsearch\bin\utilsizlsearch.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe
(Dassault Systèmes SolidWorks Corp.) C:\Program Files\SolidWorks Corp\SolidWorks (3)\sldworks_fs.exe
(Dassault Systèmes SolidWorks Corp.) C:\Program Files (x86)\Common Files\SolidWorks Installation Manager\BackgroundDownloading\sldBgDwld.exe
() C:\Program Files (x86)\Open JDK Explorer\ywnmon32.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicator.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Viewpoint Corporation) C:\Program Files (x86)\Viewpoint\Viewpoint Manager\ViewMgr.exe
() C:\Program Files (x86)\sizlsearch\updatesizlsearch.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_14_0_0_145_ActiveX.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [1712672 2009-07-09] ()
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [SolidWorks_CheckForUpdates] => C:\Program Files (x86)\Common Files\SolidWorks Installation Manager\Scheduler\sldIMScheduler.exe [7320872 2009-07-29] (Dassault Systèmes SolidWorks Corp.)
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Windows YWN Monitor] => C:\Program Files (x86)\Open JDK Explorer\ywnmon32.exe [988160 2014-07-02] ()
HKLM-x32\...\Run: [ywnmon32] => C:\Program Files (x86)\Open JDK Explorer\ywnmon32.exe [988160 2014-07-02] ()
HKU\S-1-5-21-1254299566-1301446183-763025938-1001\...\Run: [HP Photosmart 5520 series (NET)] => C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-1254299566-1301446183-763025938-1001\...\MountPoints2: {a60603ff-a48d-11e2-ae22-00241dc6a632} - E:\MotorolaDeviceManagerSetup.exe -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks 2013 Fast Start.lnk
ShortcutTarget: SolidWorks 2013 Fast Start.lnk -> C:\Windows\Installer\{B6B5EA7E-B91F-443D-A958-B0062FB53804}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks Background Downloader.lnk
ShortcutTarget: SolidWorks Background Downloader.lnk -> C:\Program Files (x86)\Common Files\SolidWorks Installation Manager\BackgroundDownloading\sldBgDwld.exe (Dassault Systèmes SolidWorks Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ywnmon32.exe.lnk
ShortcutTarget: ywnmon32.exe.lnk -> C:\Program Files (x86)\Open JDK Explorer\ywnmon32.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.foxnews.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2E49A0BE48C3CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
SearchScopes: HKLM-x32 - {35e9438f-19d4-4516-b2ac-59ba9241de4d} URL = search.tb.ask.com/search/GGmain.jhtml?p2=^9N^xdm003^YYA^us&si=CPrthZemhbkCFQ1gMgodxGAAYg&ptb=16B1B89A-143A-4652-88A8-34A6F72729E1&ind=2013081716&n=77fd3074&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - DefaultScope {662ECE51-CB6D-41F2-A00E-70E3362DD043} URL = www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=
SearchScopes: HKCU - VWPT URL = search.viewpoint.com/pl/search?tab=1&k={searchTerms}&addr=1&query=vb=1%26tn%3D0%26addr%3D1%26type%3Drel39%5fvista%26instid%3DViewpointV39%5fvista
SearchScopes: HKCU - {35e9438f-19d4-4516-b2ac-59ba9241de4d} URL = search.tb.ask.com/search/GGmain.jhtml?p2=^9N^xdm003^YYA^us&si=CPrthZemhbkCFQ1gMgodxGAAYg&ptb=16B1B89A-143A-4652-88A8-34A6F72729E1&ind=2013081716&n=77fd3074&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {662ECE51-CB6D-41F2-A00E-70E3362DD043} URL = www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: sizlsearch - {36d96925-abfa-4eb8-b630-305e905a930d} - C:\Program Files (x86)\sizlsearch\sizlsearchbho.dll (sizlsearch)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {1E54D648-B804-468d-BC78-4AFFED8E262F} www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: HKLM-x32 {55963676-2F5E-4BAF-AC28-CF26AA587566} vpn.maysteel.com/CACHE/stc/5/binaries/vpnweb.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 68.115.71.53 24.247.15.53 24.217.0.5

FireFox:
========
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

==================== Services (Whitelisted) =================

S3 CoordinatorServiceHost; C:\Program Files\SolidWorks Corp\SolidWorks (3)\swScheduler\DTSCoordinatorService.exe [77352 2013-10-01] (Dassault Systèmes SolidWorks Corp.)
R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-11-15] (Motorola Mobility LLC)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NVIDIA Performance Driver Service; C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [6810728 2009-12-08] ()
R2 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2011-02-03] (SolidWorks) [File not signed]
R2 Update sizlsearch; C:\Program Files (x86)\sizlsearch\updatesizlsearch.exe [321824 2014-07-13] ()
R2 Util sizlsearch; C:\Program Files (x86)\sizlsearch\bin\utilsizlsearch.exe [321824 2014-07-13] ()
R2 Viewpoint Manager Service; C:\Program Files (x86)\Viewpoint\Common\ViewpointService.exe [24652 2008-09-08] (Viewpoint Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-09-03] (Brother Industries Ltd.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R1 {9d5747ee-0448-4681-8337-1555de75a3b6}Gw64; C:\Windows\System32\drivers\{9d5747ee-0448-4681-8337-1555de75a3b6}Gw64.sys [61120 2014-07-12] (StdLib)
S3 motccgpfl; system32\DRIVERS\motccgpfl.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 vpnva; system32\DRIVERS\vpnva64.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-07-13 19:23 - 2014-07-13 19:23 - 02086912 _____ (Farbar) C:\Users\Glenn\Desktop\FRST64.exe
2014-07-13 19:23 - 2014-07-13 19:23 - 00000000 ____D () C:\Users\Glenn\Desktop\FRST-OlderVersion
2014-07-13 01:47 - 2014-07-13 01:47 - 00002531 _____ () C:\Users\Glenn\Desktop\aswMBR.txt
2014-07-13 01:47 - 2014-07-13 01:47 - 00000512 _____ () C:\Users\Glenn\Desktop\MBR.dat
2014-07-13 01:16 - 2014-07-13 01:16 - 05185536 _____ (AVAST Software) C:\Users\Glenn\Desktop\aswmbr.exe
2014-07-13 01:15 - 2014-07-13 19:24 - 00012346 _____ () C:\Users\Glenn\Desktop\FRST.txt
2014-07-13 01:15 - 2014-07-13 01:15 - 00030690 _____ () C:\Users\Glenn\Desktop\Addition.txt
2014-07-13 01:14 - 2014-07-13 01:15 - 00030690 _____ () C:\Users\Glenn\Downloads\Addition.txt
2014-07-13 01:13 - 2014-07-13 19:24 - 00000000 ____D () C:\FRST
2014-07-13 01:13 - 2014-07-13 01:15 - 00037175 _____ () C:\Users\Glenn\Downloads\FRST.txt
2014-07-13 01:13 - 2014-07-13 01:13 - 02084864 _____ (Farbar) C:\Users\Glenn\Downloads\FRST64.exe
2014-07-13 01:09 - 2014-07-12 13:46 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\{9d5747ee-0448-4681-8337-1555de75a3b6}Gw64.sys
2014-07-13 00:36 - 2014-07-13 00:36 - 00076676 _____ () C:\Users\Glenn\Desktop\Extras.Txt
2014-07-13 00:35 - 2014-07-13 00:35 - 00141306 _____ () C:\Users\Glenn\Desktop\OTL.Txt
2014-07-13 00:23 - 2014-07-13 00:23 - 00602112 _____ (OldTimer Tools) C:\Users\Glenn\Desktop\OTL.exe
2014-07-13 00:05 - 2014-07-13 00:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Open JDK Explorer
2014-07-13 00:05 - 2014-07-13 00:05 - 00000000 ____D () C:\Program Files (x86)\Open JDK Explorer
2014-07-13 00:04 - 2014-07-13 01:08 - 00000000 ____D () C:\Program Files (x86)\sizlsearch
2014-07-09 22:46 - 2014-06-29 21:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 22:46 - 2014-06-29 21:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 22:46 - 2014-06-20 15:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 22:46 - 2014-06-20 14:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 22:46 - 2014-06-18 20:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 22:46 - 2014-06-18 20:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 22:46 - 2014-06-18 20:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 22:46 - 2014-06-18 19:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 22:46 - 2014-06-18 19:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 22:46 - 2014-06-18 19:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 22:46 - 2014-06-18 19:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 22:46 - 2014-06-18 19:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 22:46 - 2014-06-18 19:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 22:46 - 2014-06-18 19:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 22:46 - 2014-06-18 19:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 22:46 - 2014-06-18 19:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 22:46 - 2014-06-18 19:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 22:46 - 2014-06-18 19:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 22:46 - 2014-06-18 19:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 22:46 - 2014-06-18 19:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 22:46 - 2014-06-18 19:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 22:46 - 2014-06-18 18:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 22:46 - 2014-06-18 18:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-09 22:46 - 2014-06-18 18:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 22:46 - 2014-06-18 18:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 22:46 - 2014-06-18 18:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 22:46 - 2014-06-18 18:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 22:46 - 2014-06-18 18:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 22:46 - 2014-06-18 18:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-09 22:46 - 2014-06-18 18:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-09 22:46 - 2014-06-18 18:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-09 22:46 - 2014-06-18 18:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-09 22:46 - 2014-06-18 18:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 22:46 - 2014-06-18 18:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 22:46 - 2014-06-18 18:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-09 22:46 - 2014-06-18 18:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-09 22:46 - 2014-06-18 18:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 22:46 - 2014-06-18 18:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 22:46 - 2014-06-18 18:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-09 22:46 - 2014-06-18 18:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-09 22:46 - 2014-06-18 18:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-09 22:46 - 2014-06-18 18:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 22:46 - 2014-06-18 18:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 22:46 - 2014-06-18 18:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-09 22:46 - 2014-06-18 17:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 22:46 - 2014-06-18 17:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 22:46 - 2014-06-18 17:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 22:46 - 2014-06-18 17:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 22:46 - 2014-06-18 17:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 22:46 - 2014-06-18 17:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 22:46 - 2014-06-18 17:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-09 22:46 - 2014-06-18 17:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 22:46 - 2014-06-18 17:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 22:46 - 2014-06-18 17:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 22:46 - 2014-06-18 17:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 22:46 - 2014-06-18 17:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 22:46 - 2014-06-18 17:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 22:46 - 2014-06-18 17:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 22:46 - 2014-06-17 21:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 22:46 - 2014-06-17 20:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 22:46 - 2014-06-17 20:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 22:46 - 2014-06-06 05:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 22:46 - 2014-06-06 04:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 22:46 - 2014-05-30 03:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 22:46 - 2014-05-30 03:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 22:46 - 2014-05-30 03:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 22:46 - 2014-05-30 03:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 22:46 - 2014-05-30 03:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 22:46 - 2014-05-30 03:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 22:46 - 2014-05-30 03:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-09 22:46 - 2014-05-30 02:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-09 22:46 - 2014-05-30 02:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-09 22:46 - 2014-05-30 02:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-09 22:46 - 2014-05-30 02:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-09 22:46 - 2014-05-30 02:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-09 22:46 - 2014-05-30 02:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-09 22:46 - 2014-05-30 02:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-09 22:46 - 2014-05-30 01:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 22:45 - 2014-06-05 09:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 22:45 - 2014-06-05 09:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-09 22:45 - 2014-06-05 09:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-06-29 22:03 - 2014-06-29 22:03 - 00000000 ____D () C:\Users\Glenn\AppData\Local\Adobe

==================== One Month Modified Files and Folders =======

2014-07-13 19:24 - 2014-07-13 01:15 - 00012346 _____ () C:\Users\Glenn\Desktop\FRST.txt
2014-07-13 19:24 - 2014-07-13 01:13 - 00000000 ____D () C:\FRST
2014-07-13 19:23 - 2014-07-13 19:23 - 02086912 _____ (Farbar) C:\Users\Glenn\Desktop\FRST64.exe
2014-07-13 19:23 - 2014-07-13 19:23 - 00000000 ____D () C:\Users\Glenn\Desktop\FRST-OlderVersion
2014-07-13 19:07 - 2009-07-13 23:45 - 00013440 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-13 19:07 - 2009-07-13 23:45 - 00013440 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-13 18:49 - 2011-10-16 00:29 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-13 18:42 - 2011-02-02 20:40 - 01199623 _____ () C:\Windows\WindowsUpdate.log
2014-07-13 18:39 - 2009-07-13 21:34 - 00000580 _____ () C:\Windows\win.ini
2014-07-13 18:38 - 2013-04-13 20:33 - 00000000 ____D () C:\Temp
2014-07-13 18:38 - 2012-07-21 16:48 - 00000435 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-07-13 18:38 - 2011-10-16 00:29 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-13 18:38 - 2011-02-02 20:43 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-13 18:38 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-13 18:38 - 2009-07-13 23:51 - 00070662 _____ () C:\Windows\setupact.log
2014-07-13 08:37 - 2012-04-06 09:17 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-13 01:47 - 2014-07-13 01:47 - 00002531 _____ () C:\Users\Glenn\Desktop\aswMBR.txt
2014-07-13 01:47 - 2014-07-13 01:47 - 00000512 _____ () C:\Users\Glenn\Desktop\MBR.dat
2014-07-13 01:16 - 2014-07-13 01:16 - 05185536 _____ (AVAST Software) C:\Users\Glenn\Desktop\aswmbr.exe
2014-07-13 01:15 - 2014-07-13 01:15 - 00030690 _____ () C:\Users\Glenn\Desktop\Addition.txt
2014-07-13 01:15 - 2014-07-13 01:14 - 00030690 _____ () C:\Users\Glenn\Downloads\Addition.txt
2014-07-13 01:15 - 2014-07-13 01:13 - 00037175 _____ () C:\Users\Glenn\Downloads\FRST.txt
2014-07-13 01:13 - 2014-07-13 01:13 - 02084864 _____ (Farbar) C:\Users\Glenn\Downloads\FRST64.exe
2014-07-13 01:08 - 2014-07-13 00:04 - 00000000 ____D () C:\Program Files (x86)\sizlsearch
2014-07-13 00:36 - 2014-07-13 00:36 - 00076676 _____ () C:\Users\Glenn\Desktop\Extras.Txt
2014-07-13 00:35 - 2014-07-13 00:35 - 00141306 _____ () C:\Users\Glenn\Desktop\OTL.Txt
2014-07-13 00:23 - 2014-07-13 00:23 - 00602112 _____ (OldTimer Tools) C:\Users\Glenn\Desktop\OTL.exe
2014-07-13 00:05 - 2014-07-13 00:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Open JDK Explorer
2014-07-13 00:05 - 2014-07-13 00:05 - 00000000 ____D () C:\Program Files (x86)\Open JDK Explorer
2014-07-12 20:38 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
2014-07-12 20:11 - 2013-11-28 18:20 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{6BC76E86-BDDF-41D9-8FAC-2B1B2EF58FC9}
2014-07-12 20:06 - 2009-07-13 23:45 - 00404712 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-12 20:04 - 2014-05-10 01:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-12 20:04 - 2009-07-14 02:46 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-12 20:04 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-12 20:04 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-12 13:46 - 2014-07-13 01:09 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\{9d5747ee-0448-4681-8337-1555de75a3b6}Gw64.sys
2014-07-09 23:38 - 2013-08-14 23:36 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 23:37 - 2011-02-04 00:54 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-09 23:37 - 2011-02-02 22:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 23:22 - 2012-04-29 19:21 - 00000000 ____D () C:\Users\Glenn\AppData\Local\CutePDF Writer
2014-07-09 22:37 - 2012-04-06 09:17 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 22:37 - 2012-04-06 09:17 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-09 22:37 - 2011-11-04 01:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-06 22:12 - 2014-03-12 22:55 - 00000000 ____D () C:\Users\Glenn\Documents\Quicken
2014-07-01 23:07 - 2011-02-02 21:40 - 00309389 _____ () C:\Users\Glenn\Documents\MEDICAL.xlsx
2014-07-01 21:33 - 2009-07-14 00:13 - 00786662 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-29 22:03 - 2014-06-29 22:03 - 00000000 ____D () C:\Users\Glenn\AppData\Local\Adobe
2014-06-29 21:44 - 2011-10-16 00:29 - 00003892 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-29 21:44 - 2011-10-16 00:29 - 00003640 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-29 21:09 - 2014-07-09 22:46 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-29 21:04 - 2014-07-09 22:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-20 15:14 - 2014-07-09 22:46 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-20 14:39 - 2014-07-09 22:46 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-20 00:18 - 2009-07-14 00:08 - 00032618 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-18 20:39 - 2014-07-09 22:46 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-18 20:06 - 2014-07-09 22:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-18 20:06 - 2014-07-09 22:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-18 19:48 - 2014-07-09 22:46 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-18 19:42 - 2014-07-09 22:46 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-18 19:42 - 2014-07-09 22:46 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-18 19:41 - 2014-07-09 22:46 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-06-18 19:41 - 2014-07-09 22:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-18 19:32 - 2014-07-09 22:46 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-18 19:31 - 2014-07-09 22:46 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-18 19:26 - 2014-07-09 22:46 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-18 19:24 - 2014-07-09 22:46 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-18 19:24 - 2014-07-09 22:46 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-18 19:23 - 2014-07-09 22:46 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-18 19:16 - 2014-07-09 22:46 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-18 19:14 - 2014-07-09 22:46 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-18 19:09 - 2014-07-09 22:46 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-18 18:59 - 2014-07-09 22:46 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 18:56 - 2014-07-09 22:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-18 18:53 - 2014-07-09 22:46 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-18 18:51 - 2014-07-09 22:46 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-18 18:50 - 2014-07-09 22:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-18 18:48 - 2014-07-09 22:46 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-18 18:39 - 2014-07-09 22:46 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-18 18:38 - 2014-07-09 22:46 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-18 18:37 - 2014-07-09 22:46 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-18 18:36 - 2014-07-09 22:46 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-18 18:35 - 2014-07-09 22:46 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-06-18 18:33 - 2014-07-09 22:46 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-18 18:32 - 2014-07-09 22:46 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-18 18:28 - 2014-07-09 22:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-18 18:28 - 2014-07-09 22:46 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-18 18:27 - 2014-07-09 22:46 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-18 18:27 - 2014-07-09 22:46 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-18 18:25 - 2014-07-09 22:46 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-18 18:23 - 2014-07-09 22:46 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-18 18:22 - 2014-07-09 22:46 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-18 18:12 - 2014-07-09 22:46 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-18 18:06 - 2014-07-09 22:46 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-18 18:01 - 2014-07-09 22:46 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-18 17:59 - 2014-07-09 22:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-18 17:58 - 2014-07-09 22:46 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-18 17:58 - 2014-07-09 22:46 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-18 17:52 - 2014-07-09 22:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-18 17:51 - 2014-07-09 22:46 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-18 17:49 - 2014-07-09 22:46 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-18 17:46 - 2014-07-09 22:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-18 17:45 - 2014-07-09 22:46 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-18 17:35 - 2014-07-09 22:46 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-18 17:34 - 2014-07-09 22:46 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-18 17:15 - 2014-07-09 22:46 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-18 17:13 - 2014-07-09 22:46 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-18 17:09 - 2014-07-09 22:46 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-18 17:07 - 2014-07-09 22:46 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-17 21:18 - 2014-07-09 22:46 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-06-17 20:51 - 2014-07-09 22:46 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-06-17 20:10 - 2014-07-09 22:46 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-14 22:45 - 2014-03-15 00:10 - 00000000 _____ () C:\Users\Glenn\Desktop\LOG
2014-06-14 22:17 - 2013-06-19 20:09 - 00000000 ____D () C:\Users\Glenn\Documents\Canada

Some content of TEMP:
====================
C:\Users\Glenn\AppData\Local\Temp\converter.exe
C:\Users\Glenn\AppData\Local\Temp\GfxDbMash.dll
C:\Users\Glenn\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe
C:\Users\Glenn\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\Glenn\AppData\Local\Temp\MotoCast_Installer_2.0309.exe
C:\Users\Glenn\AppData\Local\Temp\MotorolaDeviceManager_2.0405.exe
C:\Users\Glenn\AppData\Local\Temp\nvAppBar.exe
C:\Users\Glenn\AppData\Local\Temp\nview.dll
C:\Users\Glenn\AppData\Local\Temp\nView64.dll
C:\Users\Glenn\AppData\Local\Temp\nViewSetup.exe
C:\Users\Glenn\AppData\Local\Temp\nvShell.dll
C:\Users\Glenn\AppData\Local\Temp\nvStInst.exe
C:\Users\Glenn\AppData\Local\Temp\nvTaskBar.exe
C:\Users\Glenn\AppData\Local\Temp\nvwdmcpl.dll
C:\Users\Glenn\AppData\Local\Temp\nvwimg.dll
C:\Users\Glenn\AppData\Local\Temp\nvwimg64.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSAR.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSCS.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSDA.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSDE.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSEL.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSENG.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSENU.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSES.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSESM.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSFI.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSFR.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSHE.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSHU.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSIT.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSJA.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSKO.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSNL.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSNO.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSPL.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSPT.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSPTB.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSRU.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSSK.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSSL.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSSV.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSTH.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSTR.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSZHC.dll
C:\Users\Glenn\AppData\Local\Temp\NVWRSZHT.dll
C:\Users\Glenn\AppData\Local\Temp\nwiz.exe
C:\Users\Glenn\AppData\Local\Temp\ose00000.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-07-12 20:31

==================== End Of Log ============================

glenn440
New Helpee

Posts: 19

YWNMON32 Trojan #? Jul 13, 2014 16:28:09 GMT -8

Post by glenn440 on Jul 13, 2014 16:28:09 GMT -8

This is the Addition.txt file.
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-07-2014
Ran by Glenn at 2014-07-13 01:14:56
Running from C:\Users\Glenn\Downloads
Boot Mode: Normal
==========================================================

==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 2.5.1.17730 - Adobe Systems Inc.) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AnswerWorks Runtime (HKLM-x32\...\AnswerWorks) (Version: - )
Ask Toolbar (HKLM-x32\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.6.9.0 - Ask.com) <==== ATTENTION
AutoCAD 2000i (HKLM-x32\...\{5783F2D7-0001-0409-0000-0060B0CE6BBA}) (Version: 15.0.5.120 - Autodesk)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-3360C (HKLM-x32\...\{7E48AFD3-F28A-4E54-99A8-9F3A4A27DBC4}) (Version: 1.0.3.0 - Brother Industries, Ltd.)
CutePDF Writer 2.8 (HKLM\...\CutePDF Writer Installation) (Version: - )
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Photosmart 5520 series Basic Device Software (HKLM\...\{68C0736C-3E47-43A6-B14D-236BEF198A5F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5520 series Help (HKLM-x32\...\{7137E26A-10F7-4B1C-9980-0893579E92DA}) (Version: 27.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
Image Plugin (HKLM-x32\...\{FDC8065B-80DE-4466-B90B-2581F6D77DFF}) (Version: 3.04.0226 - Snap-on Business Solutions)
iSEEK AnswerWorks English Runtime (HKLM-x32\...\{18A8E78B-9EF2-496E-B310-BCD8E4C1DAB3}) (Version: 010.000.0101 - Vantage Linguistics)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Money 2000 Standard Edition (HKLM-x32\...\MSMONEYV80) (Version: - )
Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook 2007 (HKLM-x32\...\OUTLOOK) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Outlook 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual Basic for Applications 7.1 (x64) (Version: 7.1.00.00 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) English (Version: 7.1.0.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (Version: 8.0.52572 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Tools for Applications - ENU (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Applications - ENU) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Applications - ENU (x32 Version: 8.0.50727.146 - Microsoft Corporation) Hidden
Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.4.5 - Motorola Mobility)
Motorola Device Software Update (x32 Version: 13.09.3001 - Motorola Mobility) Hidden
Motorola Mobile Drivers Installation 6.3.0 (HKLM\...\{759E6A2F-1F01-45EF-A0C4-22F1B56CB975}) (Version: 6.3.0 - Motorola Mobility LLC)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nero BurnLite 10 (HKLM-x32\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10600 - Nero AG)
Nero BurnLite 10 (HKLM-x32\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10500.5.100 - Nero AG)
Nero Control Center 10 (x32 Version: 10.6.13000.0.11 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.19900.9.11 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.13300.42.0 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
NVIDIA 3D Vision Driver 266.45 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 266.45 - NVIDIA Corporation)
NVIDIA Control Panel 266.45 (Version: 266.45 - NVIDIA Corporation) Hidden
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation)
NVIDIA Graphics Driver 266.45 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 266.45 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.265.36.0 - NVIDIA Corporation) Hidden
NVIDIA nView 135.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 135.50 - NVIDIA Corporation)
NVIDIA nView Desktop Manager (Version: 125.14 - NVIDIA Corporation) Hidden
NVIDIA Performance Drivers (HKLM\...\{4C0A8D65-4286-4B58-87FE-18AD24289285}) (Version: 2.1.0.0 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.16.11.9187 - NVIDIA Corporation)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
Quicken 2014 (HKLM-x32\...\{0877F595-254F-45F4-991D-3F72E86B17CE}) (Version: 23.1.7.6 - Intuit)
sizlsearch (HKLM\...\sizlsearch) (Version: 2014.07.13.042839 - sizlsearch)
SolidProfessor LMS (HKLM-x32\...\{F01F2170-5F35-4907-8F3B-D6FD4898930D}) (Version: 11.3.12.1 - SolidProfessor)
SolidWorks 2012 x64 Edition SP04 (HKLM-x32\...\SolidWorks Installation Manager 20120-40400-1100-100) (Version: 20.4.0.64 - SolidWorks Corporation)
SolidWorks 2012 x64 Edition SP04 (Version: 20.140.64 - SolidWorks) Hidden
SolidWorks 2013 x64 Edition SP05 (HKLM-x32\...\SolidWorks Installation Manager 20130-40500-1100-100) (Version: 21.5.0.76 - SolidWorks Corporation)
SolidWorks 2013 x64 Edition SP05 (Version: 21.150.76 - SolidWorks) Hidden
SolidWorks eDrawings 2012 x64 Edition SP04 (Version: 12.4.108 - Dassault Systèmes SolidWorks Corp) Hidden
SolidWorks eDrawings 2013 x64 Edition SP05 (Version: 13.5.111 - Dassault Systèmes SolidWorks Corp) Hidden
SolidWorks Explorer 2012 SP04 x64 Edition (Version: 20.40.64 - SolidWorks Corporation) Hidden
SolidWorks Explorer 2013 SP05 x64 Edition (Version: 21.50.76 - SolidWorks Corporation) Hidden
System Requirements Lab (HKLM-x32\...\SystemRequirementsLab) (Version: - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version: - Microsoft)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_OUTLOOK_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_OUTLOOK_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version: - Microsoft)
Update for Microsoft Office OneNote 2007 Help (KB963670) (HKLM-x32\...\{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2744EF05-38E1-4D5D-B333-E021EDAEA245}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0409-0000-0000000FF1CE}_OUTLOOK_{ED38F8A3-4F61-494E-8BCA-E3AC7760C924}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0409-0000-0000000FF1CE}_OUTLOOK_{0451F231-E3E3-4943-AB9F-58EB96171784}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883030) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{F5DCAB53-C2FD-4E5A-8C83-0F37485E5E89}) (Version: - Microsoft)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version: - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version: - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_OUTLOOK_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version: - Microsoft)
Update for Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version: - Microsoft)
USPSIMB Encoder v1.3 (HKLM-x32\...\{E349ACF1-BBE9-438C-BAC3-BA4E5ABA99FB}_is1) (Version: - US Postal Service)
VCRedistSetup (x32 Version: 1.0.0 - Nero AG) Hidden
Viewpoint Manager (Remove Only) (HKLM-x32\...\Viewpoint Manager) (Version: - )

==================== Restore Points =========================

10-05-2014 02:17:53 Windows Update
10-05-2014 06:00:05 Windows Update
20-05-2014 01:52:21 Windows Update
20-05-2014 03:32:33 Windows Update
29-05-2014 03:58:27 Windows Update
02-06-2014 00:49:15 Windows Update
08-06-2014 03:34:06 Windows Update
12-06-2014 03:31:13 Windows Update
12-06-2014 04:13:29 Windows Update
16-06-2014 03:55:59 Windows Update
20-06-2014 05:28:48 Windows Update
30-06-2014 02:28:10 Windows Update
06-07-2014 04:13:20 Windows Update
10-07-2014 03:47:18 Windows Update
10-07-2014 04:35:54 Windows Update
13-07-2014 05:29:11 OTL Restore Point - 7/13/2014 12:29:09 AM

==================== Hosts content: ==========================

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0E539DE3-1D17-4A9E-9561-C4CFAD019F42} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] ()
Task: {1215675D-A9AE-490D-9C7C-255673575FE0} - System32\Tasks\Motorola Device Manager Engine => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] ()
Task: {1B12088D-8F9C-4B73-92F3-5FBBC946668E} - System32\Tasks\{BADE4627-E4F8-4740-B9C4-899F26F2DACB} => C:\Program Files (x86)\AutoCAD 2004\acad.exe
Task: {2F74B9C6-F510-4673-9807-65C04553A07B} - System32\Tasks\{9BB892B1-0434-4B09-995B-A6509816862D} => C:\CAD\acad.exe
Task: {4918FF9B-CE80-4223-ADD3-332144EC8A75} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2010-05-21] () <==== ATTENTION
Task: {4E0036E4-5EC7-4A78-92E6-516A377A650A} - System32\Tasks\{569B5283-70EF-4DF1-AE3C-3FBD238F4131} => C:\Program Files (x86)\AutoCAD 2004\acad.exe
Task: {5DC9CBEC-F67D-4B31-9BDE-A629A277B3FA} - System32\Tasks\{D6A65395-87DD-4633-8165-9E4A3768A3C0} => C:\Program Files (x86)\AutoCAD 2004\acad.exe
Task: {679AFF7D-AF10-47D6-990B-1AE5A81F146F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-16] (Google Inc.)
Task: {6DA83A86-2EB9-4766-B46D-432595880B5E} - System32\Tasks\{6F84EDEF-9892-4398-8D91-105978A21F97} => C:\Program Files (x86)\AutoCAD 2004\acad.exe
Task: {6EED6326-4AD5-405F-8E1A-1AF596A72A35} - System32\Tasks\{65D6E99F-4E5E-407D-98FE-81C9651BE5FB} => C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE [2014-01-29] (Microsoft Corporation)
Task: {781D6640-8305-46DC-8312-9164318436DB} - System32\Tasks\{0FADDFB3-6AAF-4D3C-B5D6-43E558B34224} => C:\Program Files (x86)\AutoCAD 2004\acad.exe
Task: {8354031F-901D-461D-A2C4-63BE229D0EA7} - System32\Tasks\{61F74C31-767A-40C4-A9F1-A4A93DF02835} => C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE [2014-01-29] (Microsoft Corporation)
Task: {85A234DD-1840-4F80-8208-C97994DED449} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-16] (Google Inc.)
Task: {8A51501E-172E-4B7B-89B5-0E23110C97D2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {A007DF75-4D80-47FA-9C09-EF2A0F015521} - System32\Tasks\{FB2E47B3-8C2F-4AD3-A87B-A9B4AC03B079} => C:\Program Files (x86)\AutoCAD 2004\acad.exe
Task: {B51F9254-B212-4652-B9E6-09E49A14A60E} - System32\Tasks\{68BAF15C-B915-4709-ACE0-DC20760BD4B6} => C:\Program Files (x86)\AutoCAD 2004\acad.exe
Task: {B812D49F-319B-4E94-928B-F1B6F8060807} - System32\Tasks\{5872E878-3B2C-4EB7-A23B-44A59FDE4C66} => C:\Program Files (x86)\AutoCAD 2004\acad.exe
Task: {BCB3778D-886E-4955-AE5E-F3FF352FE090} - System32\Tasks\{AD14E958-0BD3-4557-BCE2-E650D225A771} => C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE [2014-01-29] (Microsoft Corporation)
Task: {D7AC1064-9192-456F-A151-106DCFA9002D} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] ()
Task: {F2BB9980-2CDF-441C-927D-09C67B1C49E5} - System32\Tasks\{59AFF162-96DB-4493-B98E-2E87A189BBFC} => C:\Program Files (x86)\AutoCAD 2004\acad.exe
Task: {F351BFF8-270A-4451-810A-604C510DE6DD} - System32\Tasks\{F984A614-8B10-4EAE-8EFC-166ABFEDC850} => C:\CAD\acad.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-04-29 19:20 - 2012-03-11 14:56 - 00086608 _____ () C:\Windows\System32\cpwmon64.dll
2009-12-08 07:14 - 2009-12-08 07:14 - 06810728 _____ () C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe
2014-07-12 23:28 - 2014-07-12 23:28 - 00321824 _____ () C:\Program Files (x86)\sizlsearch\updatesizlsearch.exe
2011-02-03 00:32 - 2011-02-03 00:32 - 00006144 _____ () C:\Users\Glenn\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.3[1].gadget\CoreTempReader.dll
2011-02-03 00:32 - 2011-02-03 00:32 - 00008704 _____ () C:\Users\Glenn\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.3[1].gadget\GetCoreTempInfoNET.dll
2011-02-03 00:32 - 2011-02-03 00:32 - 00007680 _____ () C:\Users\Glenn\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.3[1].gadget\SystemInfo.dll
2013-10-01 16:25 - 2013-10-01 16:25 - 00276008 _____ () C:\Program Files\SolidWorks Corp\SolidWorks (3)\sldBodyDiffu.dll
2014-07-13 00:05 - 2014-07-02 15:41 - 00988160 _____ () C:\Program Files (x86)\Open JDK Explorer\ywnmon32.exe
2014-07-13 01:08 - 2014-07-13 01:08 - 00321824 _____ () C:\Program Files (x86)\sizlsearch\bin\utilsizlsearch.exe
2013-10-31 10:05 - 2013-10-31 10:05 - 00172032 _____ () C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\css_core.dll
2011-02-06 01:24 - 2009-02-27 17:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2014-07-13 00:57 - 2014-07-13 00:57 - 00580701 _____ () C:\Users\Glenn\AppData\Local\Temp\tmpE436.tmp

==================== Alternate Data Streams (whitelisted) =========

==================== Safe Mode (whitelisted) ===================

==================== EXE Association (whitelisted) =============

==================== MSCONFIG/TASK MANAGER disabled items =========

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (07/03/2014 00:12:35 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2014/07/03 00:12:35.723]: [00004144]: lperrcode->api = 1 , lperrcode->code = 2

Error: (07/03/2014 00:12:34 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2014/07/03 00:12:34.179]: [00004144]: lperrcode->api = 1 , lperrcode->code = 2

Error: (07/03/2014 00:12:32 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2014/07/03 00:12:32.635]: [00004144]: lperrcode->api = 1 , lperrcode->code = 2

Error: (07/03/2014 00:12:31 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2014/07/03 00:12:31.090]: [00004144]: lperrcode->api = 1 , lperrcode->code = 2

Error: (07/03/2014 00:12:29 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2014/07/03 00:12:29.546]: [00004144]: lperrcode->api = 1 , lperrcode->code = 2

Error: (07/03/2014 00:12:28 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2014/07/03 00:12:28.001]: [00004144]: lperrcode->api = 1 , lperrcode->code = 2

Error: (07/03/2014 00:12:26 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2014/07/03 00:12:26.457]: [00004144]: lperrcode->api = 1 , lperrcode->code = 2

Error: (07/03/2014 00:12:24 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2014/07/03 00:12:24.913]: [00004144]: lperrcode->api = 1 , lperrcode->code = 2

Error: (07/03/2014 00:12:23 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2014/07/03 00:12:23.368]: [00004144]: lperrcode->api = 1 , lperrcode->code = 2

Error: (07/03/2014 00:12:21 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2014/07/03 00:12:21.824]: [00004144]: lperrcode->api = 1 , lperrcode->code = 2

System errors:
=============
Error: (07/13/2014 00:58:28 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error:
%%-2140993535

Error: (07/13/2014 00:58:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error:
%%-2140993535

Error: (07/13/2014 00:58:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error:
%%-2140993535

Error: (07/13/2014 00:58:28 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error:
%%-2140993535

Error: (07/13/2014 00:58:28 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (07/13/2014 00:58:28 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (07/13/2014 00:58:17 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error:
%%-2140993535

Error: (07/13/2014 00:58:17 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error:
%%-2140993535

Error: (07/13/2014 00:58:17 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (07/13/2014 00:57:31 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.1.105192.168.137.0255.255.255.0

Microsoft Office Sessions:
=========================
Error: (04/29/2012 10:18:57 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3518 seconds with 660 seconds of active time. This session ended with a crash.

Error: (03/03/2012 02:07:48 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 89 seconds with 60 seconds of active time. This session ended with a crash.

==================== Memory info ===========================

Percentage of memory in use: 39%
Total physical RAM: 6141.49 MB
Available physical RAM: 3728.57 MB
Total Pagefile: 12281.16 MB
Available Pagefile: 9617.46 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:195.31 GB) (Free:97.27 GB) NTFS
Drive d: () (Fixed) (Total:270.35 GB) (Free:266.56 GB) NTFS
Drive h: () (Fixed) (Total:37.27 GB) (Free:23.66 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 94E9723C)
Partition 1: (Not Active) - (Size=195 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=270 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 37 GB) (Disk ID: 097A097A)
Partition 1: (Active) - (Size=37 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Quads Malware Removalists In New Zealand Posts: 9,387	YWNMON32 Trojan #? Jul 13, 2014 16:38:41 GMT -8 Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by Quads on Jul 13, 2014 16:38:41 GMT -8 I don't think I want to touch this, the user has already used OTL, FRST and aswMBR tools Quads

glenn440 New Helpee Posts: 19	YWNMON32 Trojan #? Jul 13, 2014 16:39:34 GMT -8 Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by glenn440 on Jul 13, 2014 16:39:34 GMT -8 I only did scans. I did not attempt any repairs.

YWNMON32 Trojan #?

Post by glenn440 on Jul 12, 2014 22:48:21 GMT -8

Post by Quads on Jul 13, 2014 10:10:07 GMT -8

Post by glenn440 on Jul 13, 2014 15:42:11 GMT -8

Post by Quads on Jul 13, 2014 15:59:11 GMT -8

Post by glenn440 on Jul 13, 2014 16:00:58 GMT -8

Post by Quads on Jul 13, 2014 16:15:05 GMT -8

Post by glenn440 on Jul 13, 2014 16:26:43 GMT -8

Post by glenn440 on Jul 13, 2014 16:28:09 GMT -8

Post by Quads on Jul 13, 2014 16:38:41 GMT -8

Post by glenn440 on Jul 13, 2014 16:39:34 GMT -8