Solved akamaihd.net popup removal help

M

Meri

New Member
Thread author
Nov 14, 2015
9
Code: 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-11-2015
Ran by Robert (administrator) on TRADINGPC (14-11-2015 14:54:14)
Running from C:\Users\Robert\Downloads
Loaded Profiles: Robert (Available Profiles: Robert)
Platform: Windows 8 Pro (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: [URL="http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/"]FRST Tutorial - How to use Farbar Recovery Scan Tool[/URL]

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe
(Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\EXCEL.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [12709688 2015-11-06] (Zemana Ltd.)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [91488 2015-09-16] ()
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1298504 2014-11-08] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [438888 2014-01-15] (CANON INC.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-691498483-823551374-2398540852-1001\...\Run: [AcerPortal] => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2732448 2015-10-15] (Acer)
HKU\S-1-5-21-691498483-823551374-2398540852-1001\...\RunOnce: [Uninstall C:\Users\Robert\AppData\Local\Microsoft\OneDrive\17.3.5930.0814_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Robert\AppData\Local\Microsoft\OneDrive\17.3.5930.0814_1\amd64"
HKU\S-1-5-18\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe [1769312 2015-09-16] ()
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-10-15] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-10-15] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-10-15] (Acer Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install SafeKey IE RunOnce.lnk [2015-01-22]
ShortcutTarget: Install SafeKey IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (McAfee)
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{db557b09-89db-4c31-8e38-9ae5f3b5937b}: [DhcpNameServer] 192.0.2.3
Tcpip\..\Interfaces\{fab6f22f-af02-4439-a37b-32846f5d398d}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://[URL="http://www.google.com"]www.google.com[/URL]
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-691498483-823551374-2398540852-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=APJB
SearchScopes: HKLM -> DefaultScope {55558A7A-1C43-4FE6-8C57-B3A5339E298B} URL = 
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://uk.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-691498483-823551374-2398540852-1001 -> OldSearch URL = hxxps://uk.search.yahoo.com/search?fr=mcafee&type=C011GB0D20151024&p={searchTerms}
SearchScopes: HKU\S-1-5-21-691498483-823551374-2398540852-1001 -> {55558A7A-1C43-4FE6-8C57-B3A5339E298B} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO: McAfee SafeKey Vault -> {9DB059B3-DD36-4a55-846C-59BE42A1202A} -> C:\Program Files (x86)\SafeKey\LPToolbar_x64.dll [2015-01-22] (McAfee)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO-x32: McAfee SafeKey Vault -> {9DB059B3-DD36-4a55-846C-59BE42A1202A} -> C:\Program Files (x86)\SafeKey\LPToolbar.dll [2015-01-22] (McAfee)
Toolbar: HKLM - McAfee SafeKey - {61D700C1-7D8D-43c5-9C13-4FF85157CFE6} - C:\Program Files (x86)\SafeKey\LPToolbar_x64.dll [2015-01-22] (McAfee)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM-x32 - McAfee SafeKey - {61D700C1-7D8D-43c5-9C13-4FF85157CFE6} - C:\Program Files (x86)\SafeKey\LPToolbar.dll [2015-01-22] (McAfee)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-11-06] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-11-06] (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-11-06] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-11-06] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2015-09-28] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2015-09-28] (McAfee, Inc.)

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-691498483-823551374-2398540852-1001 -> hxxp://[URL="http://www.google.com/"]www.google.com/[/URL]

FireFox:
========
FF ProfilePath: C:\Users\Robert\AppData\Roaming\Mozilla\Firefox\Profiles\w2fromb7.default
FF SearchEngineOrder.1: Secure Search
FF SelectedSearchEngine: Default
FF Homepage: [URL="http://www.google.com"]www.google.com[/URL]
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-09-28] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-09-28] ()
FF Plugin-x32: @mcafee.com/MVT -> C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll [2014-12-08] (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-01-11] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-10] (Google Inc.)
FF Plugin HKU\S-1-5-21-691498483-823551374-2398540852-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Robert\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-01-15] (Citrix Online)
FF SearchPlugin: C:\Users\Robert\AppData\Roaming\Mozilla\Firefox\Profiles\w2fromb7.default\searchplugins\McSiteAdvisor.xml [2015-11-13]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-03]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-10-12] [not signed]

Chrome: 
=======
CHR RestoreOnStartup: Default -> "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggUd10PAgESQhgacl0LTA1DFQYOIg4JAxREGAVAcloPUgwTGQMFIk0FA1oDB0VXfV5bFElXTwhwJVhKAlEgVFxAK3JWDk4="
CHR Profile: C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-10]
CHR Extension: (McAfee SafeKey) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\agbnjankikoaabjkmfbaceggjliabkbn [2015-11-10]
CHR Extension: (Google Docs) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-10]
CHR Extension: (Google Drive) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-10]
CHR Extension: (YouTube) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-10]
CHR Extension: (Google Search) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-10]
CHR Extension: (Google Sheets) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-10]
CHR Extension: (SiteAdvisor) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-11-10]
CHR Extension: (Google Docs Offline) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-11]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-10]
CHR Extension: (Gmail) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-10]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-11-12]
CHR HKLM-x32\...\Chrome\Extension: [agbnjankikoaabjkmfbaceggjliabkbn] - C:\Program Files (x86)\SafeKey\lpchrome.crx [2015-01-10]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-11-12]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2858336 2015-09-10] (Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2780856 2015-10-07] (Microsoft Corporation)
S2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [127752 2015-11-14] (SurfRight B.V.)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
S2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-07-17] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] ()
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S3 Intel(R) TA SAM; C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18064 2015-04-18] ()
R2 Intel(R) Technology Access Legacy CS Loader; C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe [144128 2015-07-31] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe [481536 2015-07-31] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [157928 2015-11-06] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [783120 2015-09-28] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe [1694152 2015-09-01] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [639456 2015-08-11] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-07-31] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [376264 2015-08-10] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [254792 2015-07-31] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
S3 QASvc; C:\Program Files\Packard Bell\Packard Bell Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
S3 UEIPSvc; C:\Program Files\Packard Bell\User Experience Improvement Program\Framework\UBTService.exe [233216 2014-06-23] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [12709688 2015-11-06] (Zemana Ltd.)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\drivers\athwbx.sys [3881472 2013-12-12] (Qualcomm Atheros Communications, Inc.)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [80768 2015-08-10] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-11-14] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [413432 2015-08-10] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [349096 2015-08-10] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [82072 2015-08-10] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [495856 2015-08-10] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [839376 2015-08-10] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [537408 2015-08-12] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [111256 2015-08-12] (McAfee, Inc.)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-11-06] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [244024 2015-08-10] (McAfee, Inc.)
R2 mi2c; C:\Windows\system32\drivers\mi2c.sys [20784 2015-01-11] (Nicomsoft Ltd.)
R1 ndisrd; C:\Windows\system32\DRIVERS\ndisrfl.sys [50448 2015-07-28] (Intel Corporation)
R3 NetTap630; C:\Windows\system32\DRIVERS\nettap630.sys [67832 2015-05-19] (Intel Corporation)
R2 RtkIOAC60; C:\Windows\system32\DRIVERS\RtkIOAC60.sys [29912 2013-07-19] (Realtek semiconductor corp)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [199536 2015-11-14] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [199536 2015-11-14] (Zemana Ltd.)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-14 14:54 - 2015-11-14 14:54 - 00021994 _____ C:\Users\Robert\Downloads\FRST.txt
2015-11-14 14:54 - 2015-11-14 14:54 - 00000000 ____D C:\FRST
2015-11-14 14:53 - 2015-11-14 14:54 - 02198528 _____ (Farbar) C:\Users\Robert\Downloads\FRST64.exe
2015-11-14 14:47 - 2015-11-14 14:47 - 00001061 _____ C:\Users\Robert\Desktop\JRT.txt
2015-11-14 14:44 - 2015-11-14 14:44 - 00000102 _____ C:\Users\Robert\Desktop\atenmpst.txt
2015-11-14 14:43 - 2015-11-14 14:43 - 01801288 _____ (Malwarebytes) C:\Users\Robert\Downloads\JRT.exe
2015-11-14 14:40 - 2014-04-16 22:08 - 00658000 _____ (WildTangent, Inc.) C:\ProgramData\uninstall2419769.exe
2015-11-14 14:39 - 2015-11-14 14:39 - 00016148 _____ C:\WINDOWS\system32\TRADINGPC_Robert_HistoryPrediction.bin
2015-11-14 14:34 - 2015-11-14 14:54 - 01982665 _____ C:\WINDOWS\ZAM.krnl.trace
2015-11-14 14:34 - 2015-11-14 14:46 - 00005162 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2015-11-14 14:34 - 2015-11-14 14:34 - 05278464 _____ ( ) C:\Users\Robert\Downloads\Zemana.AntiMalware.Setup (1).exe
2015-11-14 14:34 - 2015-11-14 14:34 - 00199536 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys
2015-11-14 14:34 - 2015-11-14 14:34 - 00199536 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zam64.sys
2015-11-14 14:34 - 2015-11-14 14:34 - 00001229 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk
2015-11-14 14:34 - 2015-11-14 14:34 - 00000000 ____D C:\Users\Robert\AppData\Local\Zemana
2015-11-14 14:34 - 2015-11-14 14:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2015-11-14 14:34 - 2015-11-14 14:34 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2015-11-14 14:33 - 2015-11-14 14:34 - 05278464 _____ ( ) C:\Users\Robert\Downloads\Zemana.AntiMalware.Setup.exe
2015-11-14 14:16 - 2015-11-14 14:16 - 01729536 _____ C:\Users\Robert\Downloads\adwcleaner_5.020 (1).exe
2015-11-14 14:14 - 2015-11-14 14:14 - 04383048 _____ (Google) C:\Users\Robert\Downloads\chrome_cleanup_tool.exe
2015-11-14 14:14 - 2015-11-14 14:14 - 00000264 _____ C:\Users\Robert\Downloads\debug.log
2015-11-14 14:09 - 2015-11-14 14:09 - 00000000 ___HD C:\OneDriveTemp
2015-11-14 14:07 - 2015-11-14 14:07 - 00002690 _____ C:\WINDOWS\system32\.crusader
2015-11-14 13:36 - 2015-11-14 14:07 - 00000000 ____D C:\ProgramData\HitmanPro
2015-11-14 13:36 - 2015-11-14 13:36 - 00001974 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2015-11-14 13:36 - 2015-11-14 13:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2015-11-14 13:36 - 2015-11-14 13:36 - 00000000 ____D C:\Program Files\HitmanPro
2015-11-14 13:35 - 2015-11-14 13:36 - 11337112 _____ (SurfRight B.V.) C:\Users\Robert\Downloads\HitmanPro_x64.exe
2015-11-14 13:16 - 2015-11-14 14:54 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-11-14 13:15 - 2015-11-14 13:15 - 22908888 _____ (Malwarebytes ) C:\Users\Robert\Downloads\mbam-setup-web.NT-2.2.0.1024.exe
2015-11-14 13:15 - 2015-11-14 13:15 - 00001183 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-11-14 13:15 - 2015-11-14 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-11-14 13:15 - 2015-11-14 13:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-14 13:15 - 2015-11-14 13:15 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-14 13:15 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-11-14 13:15 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-11-14 13:15 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-11-14 12:50 - 2015-11-14 14:19 - 00000000 ____D C:\AdwCleaner
2015-11-14 12:49 - 2015-11-14 12:49 - 01729536 _____ C:\Users\Robert\Downloads\adwcleaner_5.020.exe
2015-11-14 12:41 - 2015-11-14 14:34 - 00000486 _____ C:\Users\Robert\Desktop\malwa.txt
2015-11-14 12:32 - 2015-11-14 12:32 - 00772016 _____ (Reimage®) C:\Users\Robert\Downloads\ReimageRepair.exe
2015-11-14 12:23 - 2015-11-14 12:23 - 00000291 _____ C:\Users\Robert\Desktop\winsock.txt
2015-11-14 12:09 - 2015-11-14 12:09 - 00000000 ____D C:\WINDOWS\LastGood
2015-11-13 21:35 - 2015-11-13 21:35 - 00000000 ____D C:\Users\Robert\AppData\Roaming\WildTangent
2015-11-13 16:57 - 2015-11-13 19:50 - 00000000 ____D C:\Users\Robert\AppData\Local\Mozilla
2015-11-13 16:57 - 2015-11-13 19:42 - 00000000 ____D C:\Users\Robert\AppData\Roaming\Mozilla
2015-11-12 23:01 - 2015-11-12 23:01 - 00010162 _____ C:\Users\Robert\Downloads\TN 12th Nov.xlsx
2015-11-12 20:40 - 2015-11-12 20:40 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-11-11 18:45 - 2015-11-11 18:45 - 02909696 _____ C:\Users\Robert\Downloads\TIFEOMEquity (5).xls
2015-11-11 07:03 - 2015-11-05 05:15 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-11-11 07:03 - 2015-11-05 05:15 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-11-11 07:03 - 2015-11-05 05:14 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-11-11 07:03 - 2015-11-05 05:13 - 00577888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-11 07:03 - 2015-11-05 05:11 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-11-11 07:03 - 2015-11-05 05:06 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-11 07:03 - 2015-11-05 05:06 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-11-11 07:03 - 2015-11-05 05:01 - 00607408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-11-11 07:03 - 2015-11-05 04:56 - 01083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-11-11 07:03 - 2015-11-05 04:56 - 00116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-11 07:03 - 2015-11-05 04:56 - 00025280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-11-11 07:03 - 2015-11-05 04:30 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-11-11 07:03 - 2015-11-05 04:24 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-11 07:03 - 2015-11-05 04:23 - 00762888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-11-11 07:03 - 2015-11-05 04:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2015-11-11 07:03 - 2015-11-05 04:20 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-11-11 07:03 - 2015-11-05 04:18 - 24597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-11-11 07:03 - 2015-11-05 04:18 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-11-11 07:03 - 2015-11-05 04:18 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-11-11 07:03 - 2015-11-05 04:17 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-11 07:03 - 2015-11-05 04:12 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2015-11-11 07:03 - 2015-11-05 04:11 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-11-11 07:03 - 2015-11-05 04:10 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-11-11 07:03 - 2015-11-05 04:10 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-11-11 07:03 - 2015-11-05 04:07 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-11-11 07:03 - 2015-11-05 04:06 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-11-11 07:03 - 2015-11-05 04:05 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-11-11 07:03 - 2015-11-05 04:05 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-11 07:03 - 2015-11-05 04:03 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-11-11 07:03 - 2015-11-05 04:03 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-11-11 07:03 - 2015-11-05 04:01 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-11 07:03 - 2015-11-05 04:01 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-11-11 07:03 - 2015-11-05 04:01 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-11-11 07:03 - 2015-11-05 03:59 - 03587072 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-11-11 07:03 - 2015-11-05 03:59 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2015-11-11 07:03 - 2015-11-05 03:58 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-11-11 07:03 - 2015-11-05 03:58 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-11-11 07:03 - 2015-11-05 03:56 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-11-11 07:03 - 2015-11-05 03:55 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2015-11-11 07:03 - 2015-11-05 03:54 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2015-11-11 07:03 - 2015-11-05 03:47 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-11-11 07:03 - 2015-11-05 03:42 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-11-11 07:03 - 2015-11-05 03:40 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-11-11 07:03 - 2015-11-05 03:35 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-11-11 07:03 - 2015-11-05 03:35 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-11-11 07:03 - 2015-11-05 03:34 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2015-11-11 07:03 - 2015-11-05 03:33 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-11-11 07:03 - 2015-11-05 03:33 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-11 07:03 - 2015-11-05 03:30 - 00767488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-11 07:03 - 2015-11-05 03:28 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-11-11 07:03 - 2015-11-05 03:27 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2015-11-11 07:03 - 2015-11-05 03:27 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-11-11 07:03 - 2015-11-05 03:23 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2015-11-10 20:45 - 2015-11-10 20:45 - 00002344 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-10 20:45 - 2015-11-10 20:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-10 20:44 - 2015-11-14 14:49 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-10 20:44 - 2015-11-14 14:21 - 00000914 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-10 20:44 - 2015-11-10 20:44 - 00003976 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-11-10 20:44 - 2015-11-10 20:44 - 00003744 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-11-10 20:43 - 2015-11-10 20:44 - 00000000 ____D C:\Users\Robert\AppData\Local\Deployment
2015-11-01 19:03 - 2015-11-02 18:45 - 00390679 _____ C:\Users\Robert\Downloads\TT Stops (2).xlsx
2015-10-31 14:26 - 2015-11-12 23:01 - 00010150 _____ C:\Users\Robert\Downloads\TN 29th Oct (1).xlsx
2015-10-31 14:26 - 2015-10-31 14:26 - 02939392 _____ C:\Users\Robert\Downloads\TT Monthly (2).xls
2015-10-30 21:43 - 2015-10-30 21:43 - 02939392 _____ C:\Users\Robert\Downloads\TT Monthly (1).xls
2015-10-30 19:53 - 2015-10-30 19:53 - 00003392 _____ C:\WINDOWS\System32\Tasks\SweetLabs App Platform
2015-10-29 22:14 - 2015-10-29 22:14 - 00010115 _____ C:\Users\Robert\Downloads\TN 29th Oct.xlsx
2015-10-26 21:53 - 2015-10-26 21:53 - 00105472 _____ C:\Users\Robert\Downloads\ICE-OJF2015.xls
2015-10-26 21:53 - 2015-10-26 21:53 - 00105472 _____ C:\Users\Robert\Downloads\ICE-OJF2015 (1).xls
2015-10-26 21:46 - 2015-10-26 21:46 - 00346506 _____ C:\Users\Robert\Downloads\TT Stops (1).xlsx
2015-10-26 07:03 - 2015-10-26 07:03 - 00002070 _____ C:\Users\Public\Desktop\abPhoto.lnk
2015-10-23 20:01 - 2015-10-23 20:01 - 00108277 _____ C:\Users\Robert\Downloads\TT Stops.xlsx
2015-10-21 16:57 - 2015-10-21 16:57 - 00109568 _____ C:\Users\Robert\Downloads\ICE-SBH2015.xls
2015-10-21 16:57 - 2015-10-21 16:57 - 00108544 _____ C:\Users\Robert\Downloads\ICE-SBH2014.xls
2015-10-21 16:56 - 2015-10-21 16:56 - 00110592 _____ C:\Users\Robert\Downloads\ICE-SBH2011.xls
2015-10-21 16:56 - 2015-10-21 16:56 - 00109056 _____ C:\Users\Robert\Downloads\ICE-SBH2012.xls
2015-10-21 16:56 - 2015-10-21 16:56 - 00108032 _____ C:\Users\Robert\Downloads\ICE-SBH2013.xls
2015-10-21 16:56 - 2015-10-21 16:56 - 00073216 _____ C:\Users\Robert\Downloads\ICE-SBH2010.xls
2015-10-21 16:56 - 2015-10-21 16:56 - 00070656 _____ C:\Users\Robert\Downloads\ICE-SBH2008.xls
2015-10-21 16:56 - 2015-10-21 16:56 - 00068096 _____ C:\Users\Robert\Downloads\ICE-SBH2009.xls
2015-10-21 16:42 - 2015-10-21 16:42 - 02911744 _____ C:\Users\Robert\Downloads\TT Monthly.xls
2015-10-21 16:28 - 2015-10-21 16:28 - 00003388 _____ C:\WINDOWS\System32\Tasks\AcerCloud
2015-10-21 16:28 - 2015-10-21 16:28 - 00002093 _____ C:\Users\Public\Desktop\Acer Portal.lnk
2015-10-21 16:25 - 2015-10-21 16:25 - 00002034 _____ C:\Users\Public\Desktop\abDocs.lnk
2015-10-19 16:19 - 2015-10-19 16:19 - 00003886 _____ C:\WINDOWS\System32\Tasks\IntelTA-Upgrade-56460984-97c2-4bc7-a632-d776cf817f5d
2015-10-19 16:19 - 2015-10-19 16:19 - 00003652 _____ C:\WINDOWS\System32\Tasks\IntelTA-Upgrade-56460984-97c2-4bc7-a632-d776cf817f5d-Logon
2015-10-19 16:19 - 2015-10-19 16:19 - 00000000 ____D C:\Program Files (x86)\Intel Corporation
2015-10-18 18:26 - 2015-10-18 18:26 - 02874880 _____ C:\Users\Robert\Downloads\TIFEOMEquity (4).xls
2015-10-18 18:26 - 2015-10-18 18:26 - 01501184 _____ C:\Users\Robert\Downloads\Historical Prices 2 - averages daily moves.xls
2015-10-18 18:17 - 2015-10-18 18:17 - 01492992 _____ C:\Users\Robert\Downloads\Historical Prices 2 (1).xls
2015-10-17 21:31 - 2015-11-01 20:29 - 00009950 _____ C:\Users\Robert\Documents\Christmas list.xlsx
2015-10-17 16:05 - 2015-10-17 16:05 - 00070656 _____ C:\Users\Robert\Downloads\ICE-OJU2016.xls
2015-10-17 16:04 - 2015-10-17 16:04 - 00038400 _____ C:\Users\Robert\Downloads\CME-FCU2015.xls
2015-10-17 16:03 - 2015-10-17 16:03 - 00081920 _____ C:\Users\Robert\Downloads\CME-OU2015.xls
2015-10-17 15:57 - 2015-10-17 15:57 - 00083456 _____ C:\Users\Robert\Downloads\CME-BOU2015.xls
2015-10-17 15:57 - 2015-10-17 15:57 - 00082944 _____ C:\Users\Robert\Downloads\CME-SMU2015.xls
2015-10-17 12:06 - 2015-10-17 12:06 - 00056320 _____ C:\Users\Robert\Downloads\CME-LCV2015.xls
2015-10-17 12:03 - 2015-10-17 12:04 - 00770560 _____ C:\Users\Robert\Downloads\Historical Prices 2.xls

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-14 14:49 - 2015-01-18 19:52 - 00000000 ____D C:\Users\Robert\Documents\Personal
2015-11-14 14:45 - 2015-01-10 17:52 - 00000000 ___RD C:\Users\Robert\OneDrive
2015-11-14 14:40 - 2014-07-17 08:19 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-11-14 14:40 - 2014-07-17 08:19 - 00000000 ____D C:\Program Files (x86)\WildGames
2015-11-14 14:26 - 2015-01-10 18:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-11-14 14:24 - 2015-08-25 18:30 - 00875126 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-14 14:21 - 2015-08-25 18:15 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-11-14 14:21 - 2015-07-10 12:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-11-14 14:20 - 2015-07-10 12:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-14 14:20 - 2015-07-10 09:05 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-11-14 14:19 - 2015-07-10 11:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-11-14 14:14 - 2015-01-10 17:57 - 00000000 ____D C:\Users\Robert\AppData\Local\CrashDumps
2015-11-14 14:11 - 2015-01-15 22:01 - 00000588 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-691498483-823551374-2398540852-1001.job
2015-11-14 14:08 - 2015-08-25 18:12 - 00033446 _____ C:\WINDOWS\PFRO.log
2015-11-14 13:48 - 2015-06-06 11:49 - 00000684 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-691498483-823551374-2398540852-1001.job
2015-11-14 12:30 - 2015-01-10 17:49 - 00000000 ____D C:\Users\Robert\AppData\Local\SweetLabs App Platform
2015-11-14 12:26 - 2015-08-25 18:17 - 00000000 ____D C:\Users\Robert
2015-11-14 12:18 - 2015-01-10 17:54 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{BB34D5BE-E2BC-40F8-86B0-4EA269F8C1A3}
2015-11-14 12:09 - 2015-01-10 18:43 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-11-13 21:35 - 2014-07-17 08:19 - 00000000 ____D C:\ProgramData\WildTangent
2015-11-13 21:35 - 2014-07-17 08:19 - 00000000 ____D C:\Program Files (x86)\WildTangent Games
2015-11-13 21:34 - 2015-01-23 21:01 - 00000000 ____D C:\Users\Robert\Documents\NinjaTrader 7
2015-11-13 20:48 - 2015-07-10 11:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-11-13 16:58 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
2015-11-12 21:58 - 2015-01-10 17:50 - 00000000 ____D C:\Users\Robert\AppData\Local\Packages
2015-11-12 21:16 - 2015-06-06 11:49 - 00003840 _____ C:\WINDOWS\System32\Tasks\G2MUploadTask-S-1-5-21-691498483-823551374-2398540852-1001
2015-11-12 21:16 - 2015-01-15 22:01 - 00003744 _____ C:\WINDOWS\System32\Tasks\G2MUpdateTask-S-1-5-21-691498483-823551374-2398540852-1001
2015-11-12 20:39 - 2015-07-10 11:04 - 00000000 ____D C:\WINDOWS\rescache
2015-11-12 19:56 - 2015-07-10 11:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-11-12 19:56 - 2015-07-10 11:04 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-11-12 19:56 - 2015-07-10 11:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-11-11 20:58 - 2015-02-28 10:33 - 00000000 ____D C:\Users\Robert\Documents\Jobs
2015-11-11 07:11 - 2015-07-10 10:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-11 07:11 - 2015-01-14 19:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-11 07:08 - 2015-01-14 19:34 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-10 20:45 - 2015-01-10 18:09 - 00000000 ____D C:\Users\Robert\AppData\Local\Google
2015-11-10 20:45 - 2015-01-10 18:09 - 00000000 ____D C:\Program Files (x86)\Google
2015-11-10 19:27 - 2015-07-10 09:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-11-09 18:59 - 2015-01-18 19:52 - 00000000 ____D C:\Users\Robert\Documents\Finances
2015-11-03 19:27 - 2015-08-25 18:48 - 00002388 _____ C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-03 19:19 - 2015-01-10 18:28 - 00000000 ____D C:\ProgramData\McAfee
2015-11-03 18:20 - 2015-07-10 11:06 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-03 18:20 - 2015-07-10 11:06 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-01 12:35 - 2015-08-24 19:47 - 00000000 ____D C:\ProgramData\CanonIJPLM
2015-10-31 09:53 - 2015-01-10 17:53 - 00002513 _____ C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2015-10-29 22:34 - 2015-01-18 19:52 - 00000000 ____D C:\Users\Robert\Documents\Trading
2015-10-28 20:36 - 2015-01-10 17:58 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-10-26 07:03 - 2014-09-13 23:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-10-26 07:03 - 2014-07-17 08:49 - 00000000 ___HD C:\OEM
2015-10-26 07:01 - 2015-01-10 17:51 - 00000000 ____D C:\Users\Robert\AppData\Local\clear.fi
2015-10-22 06:15 - 2015-07-10 11:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2015-10-22 06:15 - 2015-07-10 11:04 - 00000000 ___SD C:\WINDOWS\system32\F12
2015-10-22 06:15 - 2015-07-10 11:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-10-22 06:15 - 2015-07-10 11:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-22 06:15 - 2015-07-10 11:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-10-22 06:15 - 2015-07-10 11:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-10-22 06:15 - 2015-07-10 11:04 - 00000000 ____D C:\WINDOWS\Provisioning
2015-10-22 06:15 - 2015-07-10 11:04 - 00000000 ____D C:\WINDOWS\L2Schemas
2015-10-21 16:28 - 2014-09-13 23:07 - 00000000 ____D C:\Program Files (x86)\Acer
2015-10-21 16:27 - 2015-07-20 18:33 - 00003418 _____ C:\WINDOWS\System32\Tasks\BacKGroundAgent
2015-10-19 17:08 - 2015-02-24 19:34 - 00003834 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2015-10-19 16:19 - 2015-02-24 19:34 - 00000000 ____D C:\ProgramData\Intel(R) Update Manager
2015-10-19 16:19 - 2014-09-13 23:20 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-19 06:05 - 2015-02-24 19:34 - 00003604 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2015-10-15 20:58 - 2015-01-15 22:01 - 00000000 ____D C:\Users\Robert\AppData\Local\Citrix
2015-10-15 16:17 - 2015-06-13 21:14 - 00003138 _____ C:\WINDOWS\System32\Tasks\McAfeeLogon
2015-10-15 16:17 - 2015-01-10 18:28 - 00000000 ____D C:\Program Files\Common Files\McAfee

==================== Files in the root of some directories =======

2015-01-10 18:44 - 2015-01-22 20:08 - 27093992 _____ (McAfee) C:\Program Files (x86)\Common Files\lpuninstall.exe
2015-08-25 18:15 - 2015-08-25 18:15 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-01-23 22:31 - 2015-01-23 22:31 - 0000113 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2015-11-14 14:40 - 2014-04-16 22:08 - 0658000 _____ (WildTangent, Inc.) C:\ProgramData\uninstall2419769.exe

Files to move or delete:
====================
C:\ProgramData\uninstall2419769.exe


Some files in TEMP:
====================
C:\Users\Robert\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
C:\Users\Robert\AppData\Local\Temp\oct2096.tmp.exe
C:\Users\Robert\AppData\Local\Temp\oct7FF3.tmp.exe
C:\Users\Robert\AppData\Local\Temp\octC30A.tmp.exe
C:\Users\Robert\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Robert\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-11-11 17:56

==================== End of FRST.txt ============================
 
Last edited by a moderator:
TwinHeadedEagle

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Hello,



They call me TwinHeadedEagle around here, and I'll be working with you.



Before we start please read and note the following:
  • At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
  • Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
  • Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
  • Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.
  • All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
  • If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
  • I visit forum several times at day, making sure to respond to everyone's topic as fast as possible. But bear in mind that I have private life like everyone and I cannot be here 24/7. So please be patient with me. Also, some infections require less, and some more time to be removed completely, so bear this in mind and be patient.
  • Please stay with me until the end of all steps and procedures and I declare your system clean. Just because there is a lack of symptoms does not indicate a clean machine. If you solved your problem yourself, set aside two minutes to let me know.
  • Please attach all report using
    fjqb1h.png
    button below. Doing this, you make it easier for me to analyze and fix your problem.
  • Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay for the repair.
  • If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.




warning.gif
Rules and policies

We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.



FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content into your next reply.
 
M

Meri

New Member
Thread author
Nov 14, 2015
9
Hello,

Thanks for offering to help. I have re-run the scan but can't upload the files so will paste them both below.

EDITED.
 
Last edited by a moderator:
M

Meri

New Member
Thread author
Nov 14, 2015
9
Sorry nothing happened when I tried to upload the files earlier so I had to paste. Thanks
 

Attachments

  • FRST.txt
    47.4 KB · Views: 3
  • Addition.txt
    44 KB · Views: 2
TwinHeadedEagle

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
I need one more report:

FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition and Shortcut.txt options are checked.
  • Press Scan button and wait.
  • The tool will produce three logfiles on your desktop: FRST.txt, Shortcut.txt and Addition.txt.
Please attach them into your next reply.
 
M

Meri

New Member
Thread author
Nov 14, 2015
9
Hi, I've attached the files. Thanks
 

Attachments

  • Addition.txt
    45 KB · Views: 1
  • FRST.txt
    47.7 KB · Views: 1
  • Shortcut.txt
    36 KB · Views: 1
TwinHeadedEagle

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif
​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

  • fixlist.txt
    1.5 KB · Views: 3
M

Meri

New Member
Thread author
Nov 14, 2015
9
I don't think anything has changed - When I open Chrome I get I get a page saying: Malwarebytes Anti-Malware
has blocked a potentially malicious website.
I also get a pop-up message (attached).
How come all the malware programs I've tried aren't able to get rid of this completely?
 

Attachments

  • Malwarebytes.png
    Malwarebytes.png
    18.9 KB · Views: 2
M

Meri

New Member
Thread author
Nov 14, 2015
9
Yes, MS Edge looks OK. This all started as I was having system incompatibilities with Chrome that were preventing it from opening. I've now resolved that through a winsock reset, but before that I tried downloading Firefox as an alternative browser and apparently the malware got on my computer alongside it
 
M

Meri

New Member
Thread author
Nov 14, 2015
9
I should say that all three browsers were affected but now I have uninstalled Firefox, and Edge looks OK so it is just Chrome but I prefer Chrome if possible
 
TwinHeadedEagle

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Uninstall Chrome

Export your bookmarks
Import or export bookmarks - Chrome Help


Close all Chrome windows and tabs.
Go to the Start menu > Control Panel.
Click Programs and Features.
Double-click Google Chrome.
Click Uninstall from the confirmation dialog. Delete your user profile information, like your browser preferences, bookmarks, and history, select the "Also delete your browsing data" checkbox.


Click Start, copy in search %LOCALAPPDATA%\ and remove folder Google

Download Chrome
Chrome Browser
 
M

Meri

New Member
Thread author
Nov 14, 2015
9
That's worked! Thanks a lot. I'll make a donation in the morning as you've saved me some $$ at the PC shop. Cheers
 
TwinHeadedEagle

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Thanks :)



Since there are no more problems, we can declare this PC clean
thumbs_up_smiley.gif


Now, we can proceed with post-cleanup procedures. Let's remove my tools and create a new, non infected restore point concurrently deleting old ones.


Step 1. - Creation of system restore point and tools removal.


Download DelFix by Xplode and save it to your desktop.
  • Run the tool by right click on the
    51a5ce45263de-delfix.png
    icon and Run as administrator option.
  • Make sure that these ones are checked:
    • Remove disinfection tools
    • Purge system restore
    • Reset system settings
  • Push Run and wait until the tool completes his work.
  • All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt). I don't need it for review.
Tool deletes old system restore points and creates a fresh system restore point after cleaning.


Step 2. - Tips and tricks to keep your computer clean, safe and in a good shape.


Security tips - highly recommended reading:

Maintenance tips:

Additional software that I personally use and install on all my clients devices:
  • Malwarebytes' Anti-Malware (paid version highly recommended) - to scan your system from time to time in search for malware.
  • Malwarebytes' Anti-Exploit - to prevent plenty of mostly exploited vulnerabilities.
  • McShield - to prevent infections spread by removable media.
  • Unchecky - to prevent from installing additional foistware, implemented in legitimate installations.
  • Adblock - to surf the web without annoying ads!
  • Qualys BrowserCheck - cloud service that scans your browsers and plugins to see if they’re all up-to-date.


My help is free for everybody.
If you're happy with the help provided and/or wish to buy me a beer for the assistance you received, then you can consider a donation:
Thank you!​



Stay safe,
TwinHeadedEagle :)
 

Similar threads

K
  • Locked
PowerShell/MaleficAms Powershell Infection Please Help
Replies
2
Views
1,971
Windows Malware Removal Help & Support
nasdaq
nasdaq
J
  • Locked
I need help with a Malware Spanish logs
Replies
2
Views
1,828
Windows Malware Removal Help & Support
nasdaq
nasdaq
F
    • Like
  • Locked
Service Host: Network List Service...Virus?
Replies
11
Views
1,828
Windows Malware Removal Help & Support
nasdaq
nasdaq

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

Quick Navigation

Forum Rules Warning System Welcome Guide Two-factor Authentication

User Menu

Login

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top